Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
920 views

VTP does not update on client switch

I recently replaced the switch that was functioning as the VLAN server for the rest of the network. Since the replacement however, I have not been able to push any new VLANs to the Client switches. ...
3
votes
0answers
33 views

Possible to have DHCP hand out different DNS server address when using different tunnel?

We have several ASA 5505 deployed. Currently, we have a setup where the local ASA is answering DHCP queries and is configuring clients with two DNS servers: our DR site DNS server (we use AD) and a ...
1
vote
2answers
1k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
0answers
22 views

Route part of a subnet to a different gateway

Data network is 10.220.0.0/20 DG is 10.220.1.19 I am trying to have all traffic in 10.220.8.0 - 10.220.15.255 (10.220.8.0/21) routed to this gateway: 10.220.1.251 I can't seem to accomplish this at ...
0
votes
2answers
1k views

Cisco WLAN Controller not pushing out DHCP addresses, what else could it be?

On our Cisco WLAN Controller web interfaces, in Controller > Interfaces, I have made a new interface with these settings: VLAN Identifier 202 IP Address 172.16.202.1 Netmask 255.255.255.0 Gateway ...
0
votes
1answer
970 views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
0
votes
1answer
938 views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
1
vote
1answer
29 views

Allowing a device blocked by port-security

Lets say I have port security configured on a switch's ports like this: Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) ...
1
vote
1answer
2k views

How to setup a static multicast ARP entry with Cisco SG300?

We're running a Microsoft NLB cluster in multicast mode as a loadbalancer. Using our old Cisco IOS switches we propagate access to the cluster to our branches using a static ARP entry in the core ...
0
votes
0answers
14 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
1
vote
1answer
131 views

Download Cisco Lightweight AP Image

I currently have a Cisco WLC 2112 and several 1242 lightweight AP's. Is there any way I can download the IOS image either from the AP's themselves or through the controller?
0
votes
1answer
158 views

Cisco ASA 5510 needs “clear arp <Interface>” periodically to reach a single host

ASA 9.0(3) The symptom is that I can ping from the ASA to any other host in that interface's subnet, save one particular host (that host can ping the interface on the ASA however). If I do "clear arp ...
0
votes
4answers
2k views

Cisco Aironet 1200 Series AP Configuration

I am attempting to configure a new CISCO Aironet 1200 Series Access Point to have a fixed IP. I have been searching online and I have come to the conclusion that the default IP address of this device ...
1
vote
1answer
141 views

Cisco wrv210 static IP behind comcast router too slow

So I subscribed to a Comcast business account (cable internet provider) and put a Cisco WRV210 in front of the Comcast modem. They gave me 1 static IP address which i'm planning to use to access my ...
-3
votes
0answers
18 views

Commands to extend DHCP range [closed]

DHCP is no longer giving out ip addresses on my network, i'm having to move too many devices to static. From what i gather, it's probably because the pool has been exhausted. I'm not sure about what ...
0
votes
0answers
78 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
0
votes
3answers
1k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
2
votes
3answers
8k views

How can I configure multiple default gateways on a CISCO Router?

Does any one knows a way to configure a cisco router with multiple gateways - multiple gateways of last resort? I've tried adding a gateway of last resort twice (with different metric) but only one ...
4
votes
0answers
60 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
0
votes
0answers
6 views

terminate tunnel with Cisco 1905

We have a Cisco 1905 router and I was wondering, if there is an option to terminate an ssh tunnel on it, i.e. that some external host would be able to establish a secure connection through a ssh ...
0
votes
0answers
12 views

DHCP relay offer packet dropped

I'm trying to get DHCP relay set up on our Cisco SGE2010P switch. Sadly, we can't afford a catalyst switch right now. It looks like I have everything configured correctly, but something is going ...
0
votes
0answers
96 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
0
votes
2answers
1k views

XenServer 6.0.2 and Cisco 3550 vlan configuration

I am running a couple of xenserver 6.0.2 hosts with multiple vm's on them. All the xen hosts have 4 physical network ports connecting to the cisco. Each port is untagged in xen but is tagged to a vlan ...
0
votes
1answer
843 views

Cisco IOS Router and Azure VPN - tunnel established, but traffic is not flowing

I am trying to connect a Cisco IOS router to Azure via the IPSec VPN. I have used the Cisco ISR template to establish a tunnel from my router to Azure. In the Azure control panel, I can see that the ...
2
votes
0answers
28 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
2answers
5k views

show all users on a Catalyst Cisco switch

I am new to Cisco, I am having some difficulty: I'd like to list all user accounts. show users only displays currently logged in users. I have no problem changing the enable password, but I'd like ...
0
votes
2answers
502 views

Cisco Router ( 2611XM ) and ISP Internet connection

I recently acquired a Cisco 2611XM that looks like this: Now the one I have has only 1 FastEthernet port (Was expecting 2) but I was wondering I purchase a WIC1T - CSU/DSU module for it could I ...
2
votes
2answers
1k views

VmwareESXi Vlans, Cisco devices and broadcast making the things odd

I'm having problem for some days trying to make a correct configuration Right now I have a Cisco Catalyst switch, a Cisco Router 2811 and a VMware ESXi node with 4-8 VM (Linux,BSD, Windows), each ...
1
vote
1answer
92 views

CISCO Catalyst switch API

I have a Cisco catalyst switch and there is a task to code some web gate which will allow billing to control ports in switch, gather different statistics, etc. What is the modern way to achieve that? ...
0
votes
1answer
22 views

Temporarily reduce Cisco trust level

I'm a new network admin and I'm looking through the various config files we have in our routers/switches/asa. I'm wondering if there is a way to lower trust level that my login has from 15 to ...
5
votes
2answers
9k views

Cisco ASA5510 Bandwidth Shaping/Limiting

This question is in two parts: Shape How can I limit the bandwidth on a ASA5510 to less than 10Mbps? Currently I have: policy-map shape_policy class class-default shape average 9000000 36096 ! ...
0
votes
3answers
1k views

Cisco 881 throughput/bandwidth issue

We have a dedicated 30Mb connection (up/down) from our ISP, but we can only seem to get 10Mb (up/down) from the router. Does anyone know what we're missing, or how we can tweak the settings on this ...
0
votes
1answer
35 views

How to connect to external server using router from VLAN's

I am newbie. I am trying to build network system in Packet Tracer. Now I have such network layout. I have different VLAN's Accounting and Sales. I have configured this using subinterface in ...
0
votes
1answer
871 views

Voice VLAN Configuration on Cisco SG300

We currently have a single Cisco SG300 switch on our data network. We are introducing a hosted VoIP system. As such we will be installing a second Cisco SG300 (to account for growth and new phones) ...
-3
votes
1answer
34 views

How to efficiently subnet a network [duplicate]

I have base ip address 10.6.0.0/16. I need to divide this network into 12 subnets, and I need at least 80 computers in one network. Please explain how to calculate correctly subnets. I understand that ...
0
votes
0answers
18 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
6
votes
1answer
49 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
0
votes
0answers
30 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
4
votes
4answers
449 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
5
votes
2answers
95 views

How can I automate the deployment of cisco IOS upgrades?

I was googling this and didn't turn up anything. If you have 100 some odd Cisco routers and switches how do you push out new IOS releases? Certain not by manually logging into every device. The only ...
3
votes
3answers
121 views

Show code for specific block in cisco IOS conf mode?

I work with Fortigate gear a lot and in the CLI it's possible to navigate to a node (say config system global then type in show and it will show me the configuration from that block. In IOS I can't ...
0
votes
2answers
2k views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
1
vote
1answer
960 views

cisco CUCM 8.6.x configuration export

We currently have a Cisco server running CUCM and cannot get access to the system due to a 'Database communication error' received when attempting a log in to CUCM homepage. Is there any way to ...
0
votes
0answers
38 views

Change source IP for packet incoming in VPN tunnel

The following configuration allows me to change the source IP from 192.168.0.0/24 to 172.16.0.100 when hosts going to 10.0.0.100 and it works. But I can't achieve this goal for the hosts incoming from ...
0
votes
1answer
1k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
0
votes
0answers
17 views

Diskless cluster using Perceus: nodes don't boot

I'm constructing diskless cluster using Perceus. Few days ago, I succeed Clustering using Perceus. Nodes are booted well and i can use ssh to nodes. Even i run mpi program. Today, I tried to ...
0
votes
2answers
903 views

Limiting Bandwidth per port Cisco router

Let's say a businessses purchases a sufficently fast internet connection (such as 60Mbps cable connection) and VOIP quality is pretty good for the most part. The only thing I would be worried about ...
0
votes
2answers
41 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
0
votes
3answers
341 views

DDoS Network Protection Devices

In our office we're running a Cisco ASA 5510 firewall. Is this device enough if we want to protect against DDoS attacks? What devices (like cisco guard, etc) do you recommend and what's the user ...