Stolen and modified from:.

dot1x test eapol-capable interface gi3/0/30.

Fun with Identity Control Policies. show class-map type control subscriber all.show policy-map type control subscriber detail.

Why is this turned off by default?. device-tracking logging packet drop. term monitor. Several minutes later. no device-tracking logging packet drop.

sh cdp neighbor | grep IDF | cut -d . -f 1 | sort.

I, too, offload my morals and critical thinking to a video card.

People seemed to forget or never learned, ignore step 2 at your own peril.

no ip forward-protocol nd . Why is this still enabled by default?.

What? They decided to change the switch model we are getting? Cool. Let me change the config a little bit. :%s/TenGigabitEthernet/FourHundredGigE/g.

TIL, "neighbor 1.1.1.1 transport path-mtu-discovery disable" or  "no bgp transport path-mtu-discovery" will set the MSS to the default for the interface type. Which is 1460 for LAN ( ethernet ) and 536 for non-LAN. Some of the docs claim BGP will use 536 if PMTUD is disabled.

int gi1/0/1. description Printer with deep sleep enabled - feralpacket. no logging event link-status.

RT @SecurityTrybe: Ports

Oh my PoE problems:. cat9300# sh post. POST: Inline Power Controller Details: . Status: Failed . cat9300# sh platform sofware ilpower system 1. Post Result: Fail.

Some security cameras really don't like if when PoE is configured statically and LLDP is also configured. lldp run .int gi1/0/1. power inline static max 26000. Will cause some security cameras to endlessly reload.

Surprise, IOS upgrade broke more things. Cisco SISF strikes again. The response of the system owner this weekend was to power down the switch. “You did an upgrade and my system broke.” . But you powered down the switch your stuff was plugged into. “But you broke it…”. …. .

sh platform pm interface-flaps gi1/0/1.

Ummm, thanks?. #ICANHAZEDITOR

*sigh* . Have to send out an on-site tech, again, to reseat the stack cables, again. sh switch stack-ports detail | in is OK|(CRC|Word) [1-9][0-9]*.

Non-802.1x interfaces really did not like the "access-session interface-template" configuration. no access-session interface-template sticky timer 60.access-session port-control force-authorized.