Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
3
votes
2answers
945 views

Cannot ping outside Fa4 on cisco 871w Router (SoHo)

After starting fresh after a write erase and a reload on a cisco 871w. I cannot ping outside of the wan (fa4). I gave vlan1 (default) an ip because apparently the built in "4 port switch" is a layer ...
1
vote
2answers
5k views

Cisco login on-failure using syslog doesn't show username on failure?

interesting issue I am running into. I am trying to get syslog rmeote logging working with a Cisco switch. i have it working and logging for both on-success and on-failure. However when it is a failed ...
-2
votes
0answers
7 views

IPSec Connection established but no IP-Traffic going through with OS X client

I've got a problem that's driving me nuts! I'm at my girlfriend's house here in California. She's got a Time-Warner-Cable internet connection. I can connect to my Fritzbox VPN Server (that speaks ...
0
votes
1answer
10 views

Cisco arp inspection in 'log only' mode

Is there a ready way to enable Dynamic Arp Inspection (DAI) without having it in blocking mode to begin with? Failing that is there a good way to gather arp statistics from each interface over a ...
0
votes
2answers
1k views

XenServer 6.0.2 and Cisco 3550 vlan configuration

I am running a couple of xenserver 6.0.2 hosts with multiple vm's on them. All the xen hosts have 4 physical network ports connecting to the cisco. Each port is untagged in xen but is tagged to a vlan ...
0
votes
1answer
1k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
0
votes
1answer
10 views

D-link DAP-2695 VLAN configuration

Well... I thought I had this all figured out... I am essentially reopening this same question I had 2 years ago (Reference: D-link DAP-2590 VLAN configuration) I got it all figured out back then and ...
0
votes
1answer
9 views

FusionPBX Failed(405) on Cisco 303 IP phone

Since yesterday, my phone started throwing a Failed(405) error when trying to register to a FusionPBX server. I have tried resetting to factory settings and reinstalling the FusionPBX server on ...
4
votes
1answer
39 views

Cisco Catalyst 2960 Switches - Can I reverse the air flow?

I have some equipment that will be moved to a new datacenter soon. At the current datacenter, the switches are mounted in the back of the racks so the air flow for the switches is reverse in ...
0
votes
1answer
11 views

C891FW-E-K9 Memory upgrade

I have a C891FW-E-K9 ISR with ios c800-universalk9-mz.SPA.154-3.M-2. From what I can gather, the memory requirements for that image is 512MB but from "show version" my router seems to only have 384MB ...
0
votes
1answer
2k views

Should I expect ICMP transit traffic to show up when using debug ip packet with a mask on a Cisco IOS router?

So I am trying to trace an ICMP conversation between 192.168.100.230/32 an EZVPN interface (Virtual-Access 3) and 192.168.100.20 on BVI4. # sh ip access-lists 199 10 permit icmp 192.168.100.0 ...
-1
votes
0answers
17 views

Multiple public IPs shared on a router to three Proxmox servers [closed]

We're moving out from one server to three and change provider. I have (now) two public IPs and I want to use them on two VMs running on one Proxmox server (let's just dump the other two servers for a ...
0
votes
0answers
6 views

cisco UCS UCSM xterm vt100 error when connecting to IOM, how do I change term type?

I know this is no big issue but it just annoys me. I have UCM pair, when connected to A I can connect through to local IOMs with no issue but when connected to UCM-B if I jump to one it's IOMs I get ...
0
votes
0answers
10 views

Cisco 1941 HWIC Prohibitions

I recently upgraded our Cisco 1941/K9 router (see figure 4 here) to include an additional HWIC (HWIC-2FE) without issue. During my research for an applicable module to provision the necessary ports I ...
0
votes
0answers
40 views

Cisco 3120 blade switch does not boot after power outage

We use a Cisco WS-CBS3120G-S in a HP BladeCenter. After a power outage, the switch will not boot anymore. The switch dose not output anything on serial console. The LEDs SYST, STCK and active (under ...
0
votes
1answer
2k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
0
votes
2answers
17 views

Eigrp topology table

This is a cisco networking question does Eigrp topology table contains the entire network topology on it's database! I am a bit confused in this, can someone let me know! thank you
3
votes
2answers
4k views

logging dhcp leases to syslog server on cisco router

Is there any way of a cisco router acting as a dhcp server to record the leases of its clients to a syslog server? I'm currently using the DHCP server database agent feature to record the leases to a ...
3
votes
4answers
7k views

Cisco 48 port switch template diagram

We have just taken delivery of a 'mature' 48 port switch for testing, deployment and general skulduggery. Since we are going to be constantly mucking around with the patching we need a diagram so we ...
0
votes
0answers
28 views

Cisco Switch Port Security best practice [closed]

I am using a Cisco Switch Catalyst 2960-X. I have both a Data Vlan and Voice Vlan configured in all of the ports of the switch. I need to apply Port Security feature on the cisco switch and I was ...
1
vote
1answer
1k views

cisco CUCM 8.6.x configuration export

We currently have a Cisco server running CUCM and cannot get access to the system due to a 'Database communication error' received when attempting a log in to CUCM homepage. Is there any way to ...
0
votes
1answer
27 views

PPTP + LAN = Maybe?

This has been someone answered in another question but the question was never answered. I've successfully set up a PPTP server at my work, and while I understand the whole point of PPTP is ...
0
votes
0answers
11 views

Trouble setting up MACBook to Cisco RV042 VPN

I am trying to create a VPN connection from a MacBook Pro running OS X 10.9.5 to a Cisco RV 042 Firewall/Router. Using the MacBook Pro built in VPN client software. I have exported the client ...
0
votes
0answers
25 views

Load Balancer Loop Through

I have a Cisco ASA which is currently load balancing a number of web applications. We are preparing to bring a new application online that is an API that is going to be referenced by one or more of ...
0
votes
2answers
2k views

Limiting Bandwidth per port Cisco router

Let's say a businessses purchases a sufficently fast internet connection (such as 60Mbps cable connection) and VOIP quality is pretty good for the most part. The only thing I would be worried about ...
0
votes
1answer
11 views

MCU packet capture

I am trying to do a packet capture of a video conference hosted with CISCO [Codian] MCU. The instructions for capturing SIP packets with Wireshark are available. I also configured MCU to accept SIP ...
0
votes
3answers
5k views

Cisco Command Output Redirect to a local file

How do you redirect an output to a local file when executing a cisco command? Let's say I would like to execute "show interface description | inc mcRNC411" and I would like to redirect its output in ...
0
votes
2answers
2k views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
1
vote
2answers
2k views

Setting up VPN on CISCO ASA with private IP on outside interface

I am trying to setup our ASA 5510 to allow IPsec(IKEv1) access to the inside network through VPN. The hard part about our setup is the outside interface does not have a public IP address assigned to ...
6
votes
1answer
5k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
0
votes
1answer
958 views

Find client IP connected to VLAN from Cisco Catalyst 3600 by SNMP

I would like to get using of course SNMP, list of client IPs connected to VLAN in Cisco Catalyst 3600. So far, I have pseudo-algorithm made by me which obtains those IP addresses, but I am not sure ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
1
vote
1answer
1k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
2
votes
1answer
1k views

Cisco 887w SDM Express Wizard freeze

I have a Cisco 877w router that I have reset. After trying a lot of different Java versions for the configuration applet (turns out the router uses a deprecated certificate that has been removed from ...
0
votes
1answer
76 views

Cisco ASA 5550 rebooted itself, logs cleared

we had Cisco ASA5550 in Active/standby mode which worked without any issue for over 1 year. Recently, we started having issue where the VPN tunnels would drop to sites and have internet outages. We ...
-3
votes
1answer
39 views

Why would a network resolve some sites and not resolve other sites?

Win 8.1, IE 11 I recently made some changes to my internal network and suddenly attempts to access Bing are giving an error. My network is: When I connect either wired or wireless to the wireless ...
1
vote
1answer
922 views

What's the point of Load Balancing between multiple SSID on the single wireless AP device?

I have a Cisco WAP4410N AP device. Since yesterday, it is supposed to serve a network of about 15 (max 20) clients at the same time, but not all clients will be using bandwidth simultaneously, since ...
-3
votes
1answer
17 views

configuring cisco switch sg-300 20 can't change vlan name

I have this very strange issue. Not a biggy because I can do it using the GUI but it still drive me nuts. Just out of curiosity whether anyone has been through this and know the answer to it. It's ...
1
vote
2answers
1k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
1answer
24 views

vlan tagging between l3 and l2 switches

I have three layer 2 swtiches, and 2 layer 3 switches. g40 on layer 3 switch (which is used to talk to a Layer2 dell switch). Is currently set up as an access port. I have a series of access points ...
0
votes
0answers
21 views

IOS FlexVPN client keeping create child SA every 60s?

I got a flexvpn client with sVTI tunnel interface, but it keeps creating child sa every 60s, like below. The VPN server is a linux Strongswan box, the config works fine in IOS 15.3 but not 15.4+. Any ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
-1
votes
1answer
37 views

Dynamic NAT configuration

I am using two routers and one host (computer), I connected fast Ethernet 0/1 of router A with the host and fa0/0 of the router A with the router B I have configured gateway as last resort on both ...
0
votes
1answer
971 views

VLAN & WiFi & DHCP with Cisco SG200

I'm trying to configure a small business network with one Cisco SG200-26, a Linux server and two TP-Link TL-WA801ND. I have set up the APs to have two different SSIDs, Public and Staff, and have ...
0
votes
1answer
2k views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
0
votes
0answers
19 views

VLAN Mapping on Brocade

We are moving from a Cisco 6509 to a Brocade 6650 for our core router. Some of our traffic is trunked through a link that belongs to someone else and they said we can only use VLANs 909-912. Our ...
0
votes
1answer
1k views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
2
votes
0answers
71 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
0
votes
2answers
377 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...