Hello Guys !! I'm Joining Cisco as a Trainee (Apprenticeship), and my joining date is on 18th November. I'm looking to connect with the people who were joining on the same day.

Hello Guys !!
I'm Joining Cisco as a Trainee (Apprenticeship),and my joining date was 18th November. I'm looking to connect with the people who were joining on the same day. Ping me to connect.

Hi everyone - my company is hosting a happy hour in the below cities the day before Cisco Connect as a way for the network and automation communities to have a chance to meet off the show floor. You’re also totally welcome to sign up if you’re not going to Cisco Connect but are part of the community and happen to live in the city :)

We’re open to anyone in the network and automation community including engineer, manager, operator, or leadership titles. If you’re interested in any of the cities below, DM me, and I can share over the respective landing page!

- Columbus, Ohio: Wednesday, November 18 from 6pm - 9pm
- Denver, Colorado: Tuesday, December 1 from 5:30pm - 8:30pm
- Seattle, Washington: Tuesday, December 8 from 5:30pm - 8:30pm

Hello. My ISP is about to upgrade their equipemnt to a C8650-G2 so they can deliver 8 gbit network, but they say that they are buying it from ComStor in holland Cisco, but they say that it is on backorder and the delivery date is at least 180 days, is that really true, is there no other way in EU to obtain that tuype of hardware.

https://www.cisco.com/c/en/us/td/docs/routers/secure-routers/sec-8600-series/hardware-installation-guide/secure-8600-series-hig/introduction-to-cisco-8600-series-secure-routers/hardware-features.html

My brother gave me this switch for freee. Its a scrap electronic from his factory. Now idk what to do with this thing. How much is this thing sell for used market?

Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

Summary

Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise and the Cisco Talos blog post Compromised eMudhra intermediate certificates.

Hey everyone,

I've been working with Cisco CUCM for a while, and one thing that's regularly frustrated me is how long it can take to retrieve and search historical Call Detail Records (CDRs).

A simple request to investigate calls involving a particular number can sometimes turn into hours of working through CAR or manually retrieving CDR files.

I know there are already commercial products and other solutions available, so I'm certainly not claiming to have reinvented the wheel!

I just wanted something relatively lightweight and straightforward that solved the problem without introducing another complicated system.

So I've been developing an application called Call Records.

It currently supports:

• Receiving CDR files directly from CUCM via SFTP
• Importing existing CDR files
• Maintaining a searchable history of call records
• Searching by phone number and date range
• Exporting results for further investigation

It's been working in my environment, but I'd really like to see how it performs in other CUCM deployments.

I'm looking for engineers willing to give it a try and provide some feedback.

Whether that's bugs, compatibility issues, suggestions for additional functionality, or just things about the interface that could be improved, I'd genuinely appreciate hearing about it.

I'm not expecting it to replace the established reporting platforms. It's just a tool I originally built to make my own job easier, and I figured other engineers might find it useful too.

GitHub: https://github.com/Huddo58/cdr-search-tool

Cheers!

Anyone ever get it for free?

Anyway I can shmooz my account manager for access?

I've just got an email that I passed a certification and received a CISCO ID number.
The thing is I did not have a CISCO account, so I created one, but now when I go to Cert Status & Download PDF, I don't have an option to paste that CISCO ID number.

I read that I should open a case, but I can't do that either, it says I need to have an active subscription.

Is there any other way to do this?

We have been slow on the postings for each wave of AI vulnerability findings. The latest is below and the list of devices being evaluated is too many, just move your eyes to the link. No confirmed yet but that does not mean they are not the affected.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq

The results will post to that page, TAC has no additional information. Please do not open Sev1 or 2 cases to ask about it.

Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

• Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
• Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
• Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
• Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
• Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
• Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
• Multiple Cisco Products Snort 3 Denial of Service Vulnerability
• Cisco Expressway Series Remote Code Execution Vulnerability
• Cisco Expressway Series Security Hardening Release: October 2026
• Cisco Expressway Series Information Disclosure Vulnerability
• Cisco Unified Communications Products Security Hardening Release: October 2026
• Cisco Unified Communications Manager Improper Access Control Vulnerability
• Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
• Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

Jesus Illescas, Developer Advocate at Cisco, invited Frank Brockners (Distinguished Engineer, Outshift by Cisco) and Suresh Krishnan (Cisco Global Technology Standards Organization, Internet Architecture Board) to recap the session they presented at Cisco Live on agentic AI standards. The protocol landscape right now is genuinely messy: formal standards bodies, open source efforts, and de facto standards all evolving in parallel.

They walk through MCP, A2A, agent discovery and interoperability, identity and trust, and a "standards layer cake" model that helps map out which piece goes where. Frank and Suresh are also giving an updated version of this session at Cisco Live EMEA in London.

Watch: https://cs.co/61699BHptWf

#CiscoDevNet #AgenticAI #AIStandards

I've been working with Cisco Catalyst switches, ISE, Catalyst Center, and CUCM, and one thing I've learned is that troubleshooting problems teaches you things that certifications and labs don't always cover.

I'm curious to hear from engineers who've dealt with particularly difficult issues in production environments.

Whether it involved routing, switching, VLANs, 802.1X, authentication, wireless, or something completely unexpected, what was the problem, and how di you eventually identify the root cause?

I'm especially interested in those situations where everything looked correctly configured, but something still wasn't working.

Would love to hear some real-world troubleshooting stories and lessons learned.

Hello,

We have an ISE two-node deployment.

Upgraded from 3.3 patch 12 to 3.4 patch 7.

After trying to login to check the running services. I'm unable to login via CLi to the secondary.

Access is denied.

CLI and GUI access is good on the PAN.

GUI is accessible on secondary.

CLI and GUI credentials are the same.

Has anyone encountered this issue before? How did you resolve it? Thanks.

Hello,

We have the following requirement:

• The agent must not use Jabber to make a call.
• The agent must place calls exclusively through Finesse.

We tried modifying the jabber-config-xml configuration file with: <Telephony_Enabled>false</Telephony_Enabled>

It works, but after a while, we can no longer connect to Jabber. Do you know how we can resolve this issue?

I have long commutes and I was wondering this can be done like listening to a podcast.

If not, are you guys aware of a an equivalent course that's audio only?

I'm looking for someone who has previously fixed a full storage AP via TAC and still has the cert chain data that TAC sent them.

Will pay for your lunch today. DM me.

Anyone else running into this? A few of our remote users show Umbrella as "Not Required" at home, which means no protection. Every one of them is on an ISP-provided Calix GigaSpire (EXOS). Backoff is disabled.

I dug into it, and the router's DNS just hangs on any lookup for a nonexistent name instead of returning NXDOMAIN. DART shows the agent's network probe deciding the router's DNS servers are "dummy addresses," so it fails open. Umbrella itself is reachable fine. If I set static DNS on the NIC and restart the agent, it goes right back to Protected.

TAC told me to turn off DNS hijacking on the router. These are ISP-managed and I can't find any setting like that, and I'm not logging into everyone's home router anyway.

Has anyone found a fix on the client side? A setting to turn off that probe, or did Cisco ever call it a bug? Right now I'm testing a script that pins Umbrella DNS only on networks where this happens, but I'd rather not have to.

I’m Elwin, I run PingMyNetwork with two friends. We make CCNA/CCNP training.

We opened the beta of our sandbox. You build a topology, configure the devices with the IOS CLI, export the config. Runs in the browser, nothing to install, no signup to test it.

You work on real gear, we don’t anymore. So if a command doesn’t behave like real IOS, if an output looks wrong, if something is missing, tell me. I’d rather hear it from you than from a student.

https://pingmynetwork.com/sandbox

There’s also a challenge until October 28, accepted labs go in a draw for 3 Cisco exam vouchers. Not why I’m posting, but it’s there.

Just curious, why email security of cisco has 2? Secure email cloud gateway and email threat defense. In their site, only etd i can see for tdm and bdm. Does they pushing ETD this year?

We are in the US. We are starting to deploy Secure Access. Most of the time the IP origIn is in India and causes problems with some websites. We can add them to Traffic Steering to clear the issue, but we shouldn't have to.

Is there an area that can limit IP source to a specific region?

EDIT - Cisco employee fixed for us. Backend issue.

I look after three sites on my own, each in a different time zone, and I just found out how inconsistent my logging timestamps are. Some devices log in local time, some in UTC, and one router had a clock that drifted for months before I finally fixed NTP on it. So every log line needs a second look before I trust the time on it.

Last week we had a twenty minute outage. Before I could even see what happened first, I had to build a spreadsheet just to convert the timestamps. By the time the order made sense the useful part of the day was gone. Do you force everything to UTC on the device, or leave it local and sort it out wherever the logs end up? And if you moved everything over, what did that cost you in practice? I suspect it’s more work than it sounds.

Looking for a Cisco-related job? Studying for a certification? Preparing for an interview? This thread is the place for all career-focused discussions.

Appropriate topics include:

• Job openings
• Recruiting and hiring
• Resume reviews
• Interview preparation
• Career advice
• Salary discussions
• Certification paths (CCNA, CCNP, CCIE, etc.)
• Career transitions into networking

To keep the subreddit focused on technical Cisco discussions, standalone posts related primarily to jobs, recruiting, resumes, interviews, or career advice may be removed and redirected here.

Hello,

I am facing a RADIUS authentication issue between a Juniper QFX and Cisco ISE.

When I try to SSH into the switch, authentication fails. A packet capture (monitor traffic) clearly shows that the QFX sends the Access-Request and receives an Access-Accept back from ISE. Despite receiving the Accept packet, the switch ignores it and logs No valid RADIUS responses received.

QFX Configuration:

set system authentication-order [ radius password ]
set system radius-server 10.x.x.x secret xxx
set system radius-server 10.x.x.x source-address 10.y.y.y
set system login user remote class super-user

I am sending the following VSA in the response. I suspect the data type or format might be causing Junos to drop the packet:

• Attribute: Juniper-Local-User-Name
• Value: remote

QFX Logs:

Oct 15 17:27:55 QFX sshd: PAM_RADIUS_SEND_REQ_FAIL: Sending radius request failed with error (No valid RADIUS responses received).
Oct 15 17:27:55 QFX sshd[93694]: error: PAM: authentication error for userName from 10.z.z.z
Oct 15 17:27:55 QFX sshd: SSHD_LOGIN_FAILED: Login failed for user 'userName' from host '10.z.z.z'
Oct 15 17:28:00 QFX sshd[93694]: Disconnected from authenticating user userName 10.z.z.z port 1835 [preauth]

Any help is appreciated.