Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

1
vote
1answer
23 views

Allowing a device blocked by port-security

Lets say I have port security configured on a switch's ports like this: Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) ...
0
votes
0answers
13 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
-3
votes
0answers
17 views

Commands to extend DHCP range [on hold]

DHCP is no longer giving out ip addresses on my network, i'm having to move too many devices to static. From what i gather, it's probably because the pool has been exhausted. I'm not sure about what ...
0
votes
0answers
27 views

IPSec tunnel between Cisco and openswan

We need to setup a site to site vpn connection and Our provider use Cisco system and we are planing to use openswan on centos (hosted on digitalocean). Our provider asking us following information. ...
0
votes
0answers
6 views

terminate tunnel with Cisco 1905

We have a Cisco 1905 router and I was wondering, if there is an option to terminate an ssh tunnel on it, i.e. that some external host would be able to establish a secure connection through a ssh ...
0
votes
0answers
12 views

DHCP relay offer packet dropped

I'm trying to get DHCP relay set up on our Cisco SGE2010P switch. Sadly, we can't afford a catalyst switch right now. It looks like I have everything configured correctly, but something is going ...
4
votes
0answers
52 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
2
votes
0answers
24 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
0
votes
0answers
71 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
-3
votes
1answer
33 views

How to efficiently subnet a network [duplicate]

I have base ip address 10.6.0.0/16. I need to divide this network into 12 subnets, and I need at least 80 computers in one network. Please explain how to calculate correctly subnets. I understand that ...
0
votes
1answer
33 views

How to connect to external server using router from VLAN's

I am newbie. I am trying to build network system in Packet Tracer. Now I have such network layout. I have different VLAN's Accounting and Sales. I have configured this using subinterface in ...
0
votes
0answers
14 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
6
votes
1answer
47 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
3
votes
4answers
444 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
0answers
33 views

Change source IP for packet incoming in VPN tunnel

The following configuration allows me to change the source IP from 192.168.0.0/24 to 172.16.0.100 when hosts going to 10.0.0.100 and it works. But I can't achieve this goal for the hosts incoming from ...
0
votes
0answers
15 views

Diskless cluster using Perceus: nodes don't boot

I'm constructing diskless cluster using Perceus. Few days ago, I succeed Clustering using Perceus. Nodes are booted well and i can use ssh to nodes. Even i run mpi program. Today, I tried to ...
0
votes
1answer
33 views

Cisco IOS - Problems with NAT and port forwarding

I have a problem forwarding ports. I have configured a NAT pool of 1 address (192.168.5.2) and assigned that address to the WAN interface. I assigned networks to the access-list, and bind the two ...
0
votes
2answers
37 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
5
votes
2answers
89 views

How can I automate the deployment of cisco IOS upgrades?

I was googling this and didn't turn up anything. If you have 100 some odd Cisco routers and switches how do you push out new IOS releases? Certain not by manually logging into every device. The only ...
-4
votes
2answers
56 views

Cisco 2801 - ACL example to prevent certain users in same subnet from accessing certain devices [closed]

May be a simple answer, but does anyone have an example of an ACL that would prevent certain users (preferably based on MAC address, so that I can not have to deal with static DHCP addressing) from ...
-1
votes
1answer
57 views

Cisco 7945 Phone won't boot after power outage [closed]

I have two Cisco 7945 phones that will not boot after a recent power outage. I tried using this (http://amyengineer.com/tag/9-31sr1/) method to load the firmware back on. Sadly, the phone doesn't ...
2
votes
3answers
52 views

Cisco ASA NAT - internal host see its public ip

I have a server hosted by a provider which uses Cisco ASA to do nat. The problem I have is that the internal server that is nat-ed with a public ip will see its public ip as source ip. This basically ...
1
vote
1answer
34 views

Add non-flex switch to existing switch stack

I have an existing stack consisting of two CISCO 2960-S series switches. They are connected using the flex-stacking cables in the back, the top one being the master and the lower being the slave. I ...
0
votes
0answers
36 views

why cisco VPNC work on the second time each time and not on the first time

I use the vpnc ( cisco VPN that installed on linux red-hat 6.X ) and the vpnc.conf file look like this more /etc/vpnc.conf ## generated by pcf2vpnc IPSec ID Comvwde IPSec gateway 217.118.6.7 ...
0
votes
2answers
34 views

cannot access my cisco 881W AP interface

I have a new Cisco 881w AP and I am trying to get to the AP interface. When i follow the procedures outlined by Cisco, i get asked for a username and password. I have tried all the suggested ...
0
votes
1answer
35 views

enable lacp mode active on isr 2951

Any idea if ISR 2951 support LACP ... i don't see any cli command to enable it. My router IOS version is 15.2(4)M7. Can you help please. below is my config: interface Port-channel1.1 description ...
0
votes
0answers
49 views

Cisco vpn access to another router

I am using a Cisco ASA 5505 to VPN into my network (which is working great), and I want to connect to a different network that is on a Asus RT-N66v. For example: network 10.1.1.1 is my VPN and ...
0
votes
0answers
26 views

Cisco CallManager AXL SQL Toolkit - Retrieve directory number and user ID

I have the below SQL query to retrieve the list of userid and their telephonenumber using Cisco CallManager AXL SQL Toolkit: sql query="select d.name as deviceName, e.userid, e.telephonenumber from ...
0
votes
0answers
15 views

How to automate updating of a setting on Cisco phones remotely?

Normally, to make a change one would get the IP address of a Cisco VOIP phone, access its settings via a web browser and make any changes to the settings they need to using the web interface. Is it ...
0
votes
1answer
40 views

Is there a Cisco IOS command for finding out the serial number of a switch / router?

I am doing an inventory of all of our switches and I was wondering if there's a Cisco IOS command that will return the serial number for a switch and router? Thanks in advance!
0
votes
1answer
117 views

Limit bandwidth in cisco router with policy-map doesn't work

I have a problem with my scenario in limiting bandwidth of ubuntu PC in GNS3 with class-map and policy-map. this is my topology in GNS3: ...
1
vote
1answer
70 views

Cisco ASA - difference between inside_access_in and inside_access_out?

So a minor problem we have is any internal servers have no (non-icmp) access to the outside is being blocked. Our current config is: inside_access_in any ---> any ---> icmp inside_access_out ...
1
vote
1answer
61 views

how to setup snmptraps to automatically report ports that when down due to 'err-disabled'?

I'd like to automatically monitor all ports on my switches and get notified whenever a port goes down. So far I have to connect to each switch manually and read out the disabled ports by hand: show ...
0
votes
0answers
42 views

Catalyst 3750 switch shows gibberish in the console on boot (could be a baud rate issue)

I've got a Catalyst 3750 series switch here, I switch it on by holding the 'Mode' button and then plugging in the power. In PuTTY console I can't type anything, but when I press anything on keyboard, ...
0
votes
0answers
59 views

Many error lines in snmpwalk report

Devices : Cisco SG 300 switch / Ubuntu 14.04 LTS when I run a snmpwalk, I get many error lines before the actual requested datas. Example: snmpwalk -v3 -u public 192.168.0.20 IF-MIB::ifHighSpeed ...
0
votes
0answers
80 views

Route Email to external IP Cisco ASA 5515

I have a cisco ASA 5515X with two WAN connections and one LAN connection. As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1. ...
0
votes
0answers
29 views

How to terminate any ip/ip tunnel which has this host as destination

I am in a situation where I want to terminate any tunnels at one device. I.e. I want to be able to create a tunnel to this device from any source ip adress. Something which can inspect a packet, see ...
0
votes
0answers
76 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
1
vote
0answers
14 views

how to allow a subnet to surf internet in Juniper and Cisco ASA

how to allow a subnet to surf internet in Juniper and Cisco ASA is there an configuration example to show allow a subnet of class C IP address to surf internet in Juniper and in Cisco ASA ? assume ...
0
votes
1answer
75 views

What are the VPN configuration requirements for site-to-site VPN with Azure?

I'm using a Cisco RV325, and I don't have access to any bigger/better routers. My understanding is that the RV325 should still support the necessary security protocols to connect to the Azure ...
0
votes
0answers
102 views

Wrong SNMP ifSpeed and ifHighSpeed values from Cisco RV 110W

My Cisco Small Business RV110W Router reports wrong SNMP ifSpeed and ifHighSpeed values for eth0, vlan1 and vlan2 ( 10 Mbit/s instead of 100 Mbit/s ). This causes my SNMP management software to ...
2
votes
0answers
88 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
3
votes
1answer
39 views

Consequences of blocking ports on Catalyst 4506

Several years ago, I purchased a Catalyst 4506 at a business liquidation, and it's been merrily humming along running my office network (I know it's tremendous overkill, but as I was the only bidder ...
0
votes
1answer
53 views

How to Access Server After Cisco AnyConnect Connected?

I have bought a VPS with Windows Server 2003 and Valid Public IP a.b.c.d In this Server I have to Connect to Another Private Network with Cisco Any Connect also I have to RUN a CCProxy (http proxy ...
3
votes
2answers
274 views

rsyslog - configuration help - logrotate and compression

I am a newbie to Linux and rsyslog. I have used the logfiles for many years, but I have never had to set one up. At this point I have some Proof of Concept devices pointing to my Debain Linux server. ...
3
votes
0answers
330 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
1answer
42 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...
1
vote
1answer
59 views

How to use same MPLS Traffic Engineering tunnel for ipv4 and ipv6

I have MPLS TE configured and working, but it is currently using IPV4 and I needed to include IPV6. My current tunnel configuration is the following: interface Tunnel1 ip unnumbered Loopback0 ipv6 ...
0
votes
2answers
69 views

Limiting IP access geographically

I don't want to cause any offence here, but whenever I take a look at the logs for my servers I can see I am constantly having IP addresses in China try to login to my machines, hoping to get access ...
0
votes
0answers
72 views

Include multiple sub-interfaces in Cisco ASA for VPN tunnel

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces. Say, In Cisco ASA 5550, I created multiple subinterfaces with VLAN ID as below: Inside, int0/1 : ...