Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
0answers
6 views

Authenticating Cisco Phones EAP-TLS Windows NPS

We are using windows NPS server for radius authentication and would like our to set up 802.1x authentication on our phones using EAP-TLS. The NPS Server trusts the certificates (using the built in ...
2
votes
0answers
25 views

Cisco Voice VLAN with 802.1X Authentication

I've got a Cisco Catalyst 2960 that I'm trying to configure for a remote office with 802.1X wired authentication. The setup I'm going for is Switch -> VoIP Phone via Internal Switch -> ...
-1
votes
1answer
25 views

Catalyst 3560, making an admin only port? [on hold]

Okay, so I'm completely new to this networking stuff. I have an assignment and it's stumping me. I have a choice of using either 2950, 3560, 3750 devices. The assignment: "Make sure that no one can ...
0
votes
0answers
9 views

Triggering an event with cisco event manager

I currently use event manager applet to monitor the state of an rtr track track 1 rtr 123 reachability. This currently logs to a syslog server as well as sending an e-mail. I now need to do some ...
0
votes
0answers
6 views

Aironet 1252 not booting

I have a 1252 Aironet AP that does not boots up. I've plugged the console cable, but displays nothing. After connecting power via PoE, I just got the radio LED on red after 5 seconds. I've checked ...
0
votes
0answers
36 views

Does Cisco IOS support NPTv6?

I'm looking to do a small multi-homing setup which is currently achieved, with IPv4, using NAT. NPTv6 seems to be a good way to do this for IPv6 however I cannot find how to configure this on Cisco ...
1
vote
0answers
34 views

SSH/SFTP over WiFi issues

Some time ago we have purchased a Wireless Controller (AIR-CT2504-K9) with few Access Points (MIMO 3x3). The number of users on one access point is around 20-25 simultaneously. As I have understood ...
0
votes
0answers
10 views

Cisco Cryptochecksum generation

I ran 2 commands - a show start and a show run. I noticed that the cryptochecksums were different. My main question is understanding the cryptochecksum and how it is generated. Is it different ...
0
votes
0answers
6 views

Determining the side-effects of enabling unicast reverse-path forwarding on Cisco ASA 5505

I am trying to find out what (if any) negative side-effects there would be to enabling Unicast Reverse Path Forwarding (uRPF) on a Cisco ASA 5505 - I need to do this on a router which I do not have ...
0
votes
1answer
48 views

Need VLan to route to Internet

I have a Sangoma box here. This is Lync in a box... There is AAR Reverse proxy (VM) on the server and it has an IP of 10.10.9.7 on The "External" interface. I have 10.10.10.5 on the "Internal" ...
2
votes
1answer
24 views

Stuck with Cisco DHCP pool issue

Yes, I have searched, googled, sworn, googled more but have not quite found the answer I need, .. I have also posted this on a Cisco forum but, as I discovered at stackoverflow, the Stack* forums ...
0
votes
1answer
26 views

Can IPS monitor both inbound and outbound traffic?

We have a user traffic flow like below (PC - Internet) PC => Cisco ASA FW+IPS integrated => Fortigate Proxy (ISP connected to this Proxy) = > Internet PC = > ASA+IPS ==> Fortigate Proxy ==> ...
0
votes
1answer
34 views

Federation with Office365 results in an Outlook UserAgent change and an Ironport block due to Webfilter

The following Cisco bug documents that when Exchange is federated with Outlook.com the Outlook user agent changes so that any email based image is blocked as webmail on the ironport. ...
0
votes
0answers
31 views

CSR1000v image in Openstack as a VM

I have an esxi host. Under that I have created a Ubuntu 14.04 machine running Openstack(devstack single node)Juno release. I am trying to spin CSR1000v image as a VM inside Openstack. I followed the ...
0
votes
1answer
30 views

Managing two switches and one Router [closed]

I have the following network : One Router : CISCO 860 (In : ADSL, Out : Yellow Ethernet Cable) Two Cable Panels Rack One : PANEL 24 ports (22) - DT24F Rack Two : PANEL 24 ports (22) - DT24F ...
0
votes
1answer
24 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
1
vote
0answers
20 views

Flat ISP network to MPLS dumb Q

I have a fairly flat ISP network that I am upgrading to use MPLS (dont ask why, that decision is above my position) but clients/CPE are authenticated using PPPoE. Each POP uses a router configured as ...
0
votes
1answer
33 views

Zabbix IPMI does not auth with Cisco C220 M3

server: Cisco C220 M3 Zabbix 2.4 Ubuntu 14.04 ipmitool works user1@zabbix3:~# ipmitool -I lanplus -H 192.168.1.45 -U admin -P Password1 -A MD5 sel SEL Information Version : 1.5 (v1.5, v2 compliant) ...
0
votes
1answer
74 views

SCCM 2012 R2 OSD pxe-32 : tftp open timeout

I have SCCM 2012 R2 standalone primary site on windows server 2012 and i have Cisco dhcp server i configured the distribution point for pxe boot to work with osd i added boot images and configured ...
0
votes
0answers
23 views

DHCP from Cisco 1921 failing after switch nr 2

I have a network which uses a Cisco 1921 router. The router is connected to a Dell Powerconnect 2848 switch and from that switch is a connection to a small SOHO Planet switch which 3 computers connect ...
0
votes
1answer
29 views

IPv4 ICMP Codes/Errors for WAN transmissions

Can someone tell me which IPv4 ICMP Codes/Errors i have to unlock as Best Practise for WAN transmission (RedHat und Cisco)?
0
votes
1answer
29 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
1answer
63 views

Unplug of Netgear Switch Causes Cisco Link Drop on Remote Switch

I have a very odd problem that I'm hoping someone might be able to give me even an idea of where to look. I have a new Netgear M4100-D10-POE layer 2 managed switch that we are installing in a remote ...
0
votes
0answers
41 views

ACL Rule to Open UDP Ports

I have the current rules in an attempt to open port 5060 and 10000-20000 for my VoIP provider. We are on a Cisco 1921 router. This ACL is applied to the WAN port on the router facing the ISP. Nmap ...
-1
votes
0answers
8 views

Traffic btw StrongSwan and Cisco Router are not encrypted

I have create a VPN tunnel btw strongSwan client and Cicso RV325 router. I have configured the Cisco router according to steps at this document and the strongswan client as follows: ipsec.conf ...
4
votes
1answer
139 views

Possible to have DHCP hand out different DNS server address when using different tunnel?

We have several ASA 5505 deployed. Currently, we have a setup where the local ASA is answering DHCP queries and is configuring clients with two DNS servers: our DR site DNS server (we use AD) and a ...
0
votes
0answers
29 views

Route part of a subnet to a different gateway

Data network is 10.220.0.0/20 DG is 10.220.1.19 I am trying to have all traffic in 10.220.8.0 - 10.220.15.255 (10.220.8.0/21) routed to this gateway: 10.220.1.251 I can't seem to accomplish this at ...
1
vote
1answer
31 views

Allowing a device blocked by port-security

Lets say I have port security configured on a switch's ports like this: Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) ...
0
votes
1answer
25 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
0
votes
0answers
9 views

terminate tunnel with Cisco 1905

We have a Cisco 1905 router and I was wondering, if there is an option to terminate an ssh tunnel on it, i.e. that some external host would be able to establish a secure connection through a ssh ...
0
votes
0answers
26 views

DHCP relay offer packet dropped

I'm trying to get DHCP relay set up on our Cisco SGE2010P switch. Sadly, we can't afford a catalyst switch right now. It looks like I have everything configured correctly, but something is going ...
4
votes
0answers
69 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
2
votes
0answers
57 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
0
votes
1answer
215 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
-3
votes
1answer
40 views

How to efficiently subnet a network [duplicate]

I have base ip address 10.6.0.0/16. I need to divide this network into 12 subnets, and I need at least 80 computers in one network. Please explain how to calculate correctly subnets. I understand that ...
0
votes
1answer
50 views

How to connect to external server using router from VLAN's

I am newbie. I am trying to build network system in Packet Tracer. Now I have such network layout. I have different VLAN's Accounting and Sales. I have configured this using subinterface in ...
0
votes
0answers
25 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
6
votes
1answer
63 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
4
votes
4answers
469 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
0answers
52 views

Change source IP for packet incoming in VPN tunnel

The following configuration allows me to change the source IP from 192.168.0.0/24 to 172.16.0.100 when hosts going to 10.0.0.100 and it works. But I can't achieve this goal for the hosts incoming from ...
0
votes
0answers
22 views

Diskless cluster using Perceus: nodes don't boot

I'm constructing diskless cluster using Perceus. Few days ago, I succeed Clustering using Perceus. Nodes are booted well and i can use ssh to nodes. Even i run mpi program. Today, I tried to ...
0
votes
1answer
47 views

Cisco IOS - Problems with NAT and port forwarding

I have a problem forwarding ports. I have configured a NAT pool of 1 address (192.168.5.2) and assigned that address to the WAN interface. I assigned networks to the access-list, and bind the two ...
0
votes
2answers
58 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
5
votes
2answers
119 views

How can I automate the deployment of cisco IOS upgrades?

I was googling this and didn't turn up anything. If you have 100 some odd Cisco routers and switches how do you push out new IOS releases? Certain not by manually logging into every device. The only ...
-4
votes
2answers
63 views

Cisco 2801 - ACL example to prevent certain users in same subnet from accessing certain devices [closed]

May be a simple answer, but does anyone have an example of an ACL that would prevent certain users (preferably based on MAC address, so that I can not have to deal with static DHCP addressing) from ...
-1
votes
1answer
81 views

Cisco 7945 Phone won't boot after power outage [closed]

I have two Cisco 7945 phones that will not boot after a recent power outage. I tried using this (http://amyengineer.com/tag/9-31sr1/) method to load the firmware back on. Sadly, the phone doesn't ...
2
votes
3answers
88 views

Cisco ASA NAT - internal host see its public ip

I have a server hosted by a provider which uses Cisco ASA to do nat. The problem I have is that the internal server that is nat-ed with a public ip will see its public ip as source ip. This basically ...
1
vote
1answer
36 views

Add non-flex switch to existing switch stack

I have an existing stack consisting of two CISCO 2960-S series switches. They are connected using the flex-stacking cables in the back, the top one being the master and the lower being the slave. I ...
1
vote
0answers
44 views

why cisco VPNC work on the second time each time and not on the first time

I use the vpnc ( cisco VPN that installed on linux red-hat 6.X ) and the vpnc.conf file look like this more /etc/vpnc.conf ## generated by pcf2vpnc IPSec ID Comvwde IPSec gateway 217.118.6.7 ...
0
votes
2answers
50 views

cannot access my cisco 881W AP interface

I have a new Cisco 881w AP and I am trying to get to the AP interface. When i follow the procedures outlined by Cisco, i get asked for a username and password. I have tried all the suggested ...