Attaching a virtual switch to an LBFO team is deprecated. Switch embedded teaming (SET) is an inbox replacement for this functionality.

THE FIX – POWERSHELL my Friend

wheres my NIC for teaming?
disable-netadapterbinding -componentid vms_pp -name

NIC Teaming Creation:
New-NetLbfoTeam -Name “NIC Team Name” -TeamMembers “NIC1 Name”,”NIC2 Name” -TeamingMode LACP -LoadBalancingAlgorithm Dynamic

Hyper-V vSwitch Creation and Binding
New-VMSwitch -Name “Hyper-V vSwitch Name” -NetAdapterName “NIC Team Name” -AllowNetLbfoTeams $true

The post Error Applying Virtual Switch Properties Changes appeared first on Cloud2web.

Configure Nexus1

feature interface-vlan
feature lacp
feature vpc

vpc domain 1
peer-switch
peer-keep alive destination 1.1.1.2 source 1.1.1.1 vrf default !Note VRF important
exit

vlan 10

interface vlan 1
description VPC-KEEPALIVE
no shut
ip add 1.1.1.1/30

interface vlan 10
description DATA_VLAN
no shut
ip add 10.1.1.1/24

int port-channel 10
description VPC-PEER
switchport mode trunk
vpc peer-link

int port-channel 20
description DATA_VLAN
switch port mode trunk
vpc 20

interface eth1/1
channel-group 10
interface eth1/2
channel-group 10

int eth1/4
channel-group 20

Configure Nexus2

feature interface-vlan
feature lacp
feature vpc

vpc domain 1
peer-switch
peer-keep alive destination 1.1.1.1 source 1.1.1.2 vrf default !Note VRF important
exit

vlan 10

interface vlan 1
description VPC-KEEPALIVE
no shut
ip add 1.1.1.2/30

interface vlan 10
description DATA_VLAN
no shut
ip add 10.1.1.2/24

int port-channel 10
description VPC-PEER
switchport mode trunk
vpc peer-link

int port-channel 20
description DATA_VLAN
switch port mode trunk
vpc 20

interface eth1/1
channel-group 10
interface eth1/2
channel-group 10

int eth1/4
channel-group 20

Configure Router 37254

vlan database
vlan 10
exit

enable
configure t
int vlan 10
ip add 10.1.1.10 255.255.255.0

int port 1
switchport trunk encap dot1q
switchport mode trunk

int fa1/0
channel-group 1 mode on
int fa1/1
channel-group 1 mode on

The post Cisco Nexus vPC Configuration appeared first on Cloud2web.

Create your TACACS User

Configure your Cisco router

tacacs-server host 192.168.1.65 key cisco
aaa new-model
aaa authentication login default tacacs
test aaa group tacacs admin admin legacy
line vty 0 16
login authentication tacacs

The post Clearpass TACACS+ Configuration appeared first on Cloud2web.

On NXOS1 add the static routes to the loopbacks on Router 1 (Top Left)

Create an ACL permitting all Subnets.

Create a Route-Map matching the ACL

Redistribute all the static routes into BGP.

Create a Prefix-list called FILTER

Create a route-map “BGP” matching the prefix list. local preference is not required, just for testing it’s getting applied.

Apply the Route-map to the outbound neighbor

Check to make sure the neighbor is getting all routes except for 2.2.2.0/24

The post Cisco Nexus BGP Route-map Filtering appeared first on Cloud2web.

First Create the NAT Rule

Your NAT rule should look like this

Next we need an ACL Security Rule

Your ACL should look like this

The post Palo Alto NAT Inbound Internet appeared first on Cloud2web.

First we must configure a minimum of two HA Interfaces between the Palo Alto’s

Next Enable the HA, Peer settings and HA IP addresses.

After Commit, Sync the configuration

Lets failover and check its working.

The post Palo Alto HA Active/Standby Peer appeared first on Cloud2web.

Configure your Trunk(Tagged) Ports for each VLAN on Port2 (I know the picture says port 1 its bcs MGMT)

Create your 1st VLAN for the Trunk

Create your 2nd VLAN for the Trunk

Create your two Access VLAN Ports for the two Physical ports

Create your Software Switch For VLAN100. Select the Access port from step 2 and the AD VLAN from step1.

Create your Software Switch For VLAN200. Select the Access port from step 2 and the AD VLAN from step1.

The post FortiGate to Fortigate Trunking Tagged Ports appeared first on Cloud2web.

SW1 Configuration

Current configuration : 3966 bytes
!
! Last configuration change at 04:09:32 UTC Thu Jul 31 2025
!
version 15.6
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
!
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
no ip icmp rate-limit unreachable
!
!
!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!         
!
redundancy
!
no cdp log mismatch duplex
!
ip tcp synwait-time 5
! 
!
crypto ikev2 proposal IKEV2 
 encryption aes-cbc-256
 integrity sha256
 group 14
!
crypto ikev2 policy IKE_POLICY 
 proposal IKEV2
!
crypto ikev2 keyring KEY
 peer PEER
  address 1.1.1.2
  pre-shared-key local cisco
  pre-shared-key remote cisco
 !
!         
!
crypto ikev2 profile PROFILE
 match identity remote address 1.1.1.2 255.255.255.255 
 authentication local pre-share
 authentication remote pre-share
 keyring local KEY
!
!
!
crypto ipsec transform-set IPSEC esp-aes 256 esp-md5-hmac 
 mode tunnel
!
!
!
crypto map MAP 10 ipsec-isakmp 
 set peer 1.1.1.2
 set transform-set IPSEC 
 set ikev2-profile PROFILE
 match address IPSEC
!
!
!
!         
!
interface Loopback1
 ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet0/0
 ip address 1.1.1.1 255.255.255.0
 duplex auto
 speed auto
 media-type rj45
 crypto map MAP
!
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/3
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 1.1.1.2
!
ip access-list extended IPSEC
 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
!
!
!
!
control-plane
!
banner exec ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner incoming ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner login ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
 transport input none
!
no scheduler allocate
!
end

SW2 Configuration

Current configuration : 3960 bytes
!
! Last configuration change at 01:16:48 UTC Thu Jul 31 2025
!
version 15.6
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
!
!
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
no ip icmp rate-limit unreachable
!
!
!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!         
!
redundancy
!
no cdp log mismatch duplex
!
ip tcp synwait-time 5
! 
!
crypto ikev2 proposal IKEV2 
 encryption aes-cbc-256
 integrity sha256
 group 14
!
crypto ikev2 policy POLICY 
 proposal IKEV2
!
crypto ikev2 keyring KEY
 peer PEER
  address 1.1.1.1
  pre-shared-key local cisco
  pre-shared-key remote cisco
 !
!         
!
crypto ikev2 profile PROFILE
 match identity remote address 1.1.1.1 255.255.255.0 
 authentication local pre-share
 authentication remote pre-share
 keyring local KEY
!
!
!
crypto ipsec transform-set IPSEC esp-aes 256 esp-md5-hmac 
 mode tunnel
!
!
!
crypto map MAP 10 ipsec-isakmp 
 set peer 1.1.1.1
 set transform-set IPSEC 
 set ikev2-profile PROFILE
 match address IPSEC
!
!
!
!         
!
interface Loopback1
 ip address 192.168.2.1 255.255.255.0
!
interface GigabitEthernet0/0
 ip address 1.1.1.2 255.255.255.0
 duplex auto
 speed auto
 media-type rj45
 crypto map MAP
!
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
interface GigabitEthernet0/3
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 1.1.1.1
!
ip access-list extended IPSEC
 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
!
!
!
!
control-plane
!
banner exec ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner incoming ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
banner login ^C
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS  *
* education. IOSv is provided as-is and is not supported by Cisco's      *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any       *
* purposes is expressly prohibited except as otherwise authorized by     *
* Cisco in writing.                                                      *
**************************************************************************^C
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
 transport input none
!
no scheduler allocate
!
end

The post Cisco to Cisco IKEv2 Site-to-Site VPN appeared first on Cloud2web.

The post RDS Published App appeared first on Cloud2web.

Step1. Add the Cisco Radius Client

Step 2. Create a Network Policy

Step 3. Give your Policy a name

Step 4. Select your AD Groups who can Authenticate

Step 5. Accept PAP

Step 6.

Set the Attributes.

Step 7. Configure the Cisco-AV-Pair: shell:priv-lvl=15

Step 8.

Configure the Cisco Router

aaa new-model
radius-server host 192.168.2.10 key 0 12345
aaa authentication login default group radius local ! wait for radius to timeout then it will try local database
aaa authentication enable default none

! Setup the console to be local password
aaa authentication login CONSOLE local

Router(config)#line con 0
Router(config-line)#exec-timeout 0 0
Router(config-line)#password cisco
Router(config-line)#login authentication CONSOLE

! Authorization
aaa authorization exec default if-authenticated
aaa authentication enable default none

The post Cisco Radius Authentication NPS Configuration appeared first on Cloud2web.