Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
0answers
9 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
0
votes
1answer
25 views

“route” sub-command does not exits in “ip” command on Cisco 2960-S

I am new to cisco. I'm running a Cisco 2960-S and defined several VLAN on it. I like to use SVI feature and set 192.168.1.254 ip address for interface VLAN 1, 192.168.2.254 for interface VLAN 2 and so ...
1
vote
5answers
12k views

Difference between trunk and tagged port

I am reading some wikipedia articles and RFC 5517, studying VLANs, and I don't recognize the difference between a trunk port and a tagged port. From what the material I am reading says, a tagged ...
0
votes
1answer
1k views

Find client IP connected to VLAN from Cisco Catalyst 3600 by SNMP

I would like to get using of course SNMP, list of client IPs connected to VLAN in Cisco Catalyst 3600. So far, I have pseudo-algorithm made by me which obtains those IP addresses, but I am not sure ...
0
votes
1answer
409 views

Are all SFP+ tranceivers usable for FEX between Nexus 5000 and Nexus 2000?

I am looking at building a network with Nexus 5000 parent switches and Nexus 2000 fabric extenders. The mystery at the moment is what kind of SFP+ tranceivers are required for cross-connecting racks. ...
4
votes
2answers
1k views

How do I connect 100BASE-T (iDRAC6) hosts into a Nexus 2232PP via SFP+?

I have a dilemma. I want to have an end-to-end 10 Gigabit Ethernet network over SFP+, but my Dell servers have iDRAC6 which only works on 10/100BASE-T. The closest thing I could find was the GLC-T ...
0
votes
1answer
277 views

Will an iSCSI SAN perform well when connected to a 2232PP fabric extender? [closed]

I intend to rack up servers and iSCSI SANs and connect them to 2232PPs that are fabric extenders uplinked to 5548UPs on a distribution rack. Will an iSCSI SAN perform well when connected to a 2232PP ...
2
votes
1answer
12k views

How do I get past “SFP Validation Failed” on a SFP-GE-T transceiver on a Nexus 5548UP?

I inserted a SFP-GE-T (Gigabit RJ-45) transceiver in my Nexus 5548UP and I got "access down" "SFP Validation Failed" in show interface. According to the Cisco Gigabit Ethernet Transceivers ...
0
votes
1answer
12k views

How do I get past “SFP Validation Failed” on a FET-10G transceiver on a Nexus 5548UP?

I inserted a FET-10G (Fabric Extender Transceiver) SFP transceiver in my Nexus 5548UP and I got "access down" "SFP Validation Failed" in show interface. FET-10Gs came with my 2232's so I figured ...
2
votes
1answer
2k views

Why is my Nexus 5548UP not adding ARP entries for the trunk to a 2960S?

I have a Nexus 5548UP trunked to a Catalyst 2960S. I have verified that spanning tree is working. I explicitly made the 2960S the root bridge for all VLANs as a temporary measure since it is trunked ...
2
votes
2answers
6k views

Are you able to save the running-config on Nexus Switches

I have been trolling Cisco sites and have not been able to find an answer to this questions. Are you able to perform a write mem or likewise to save these configs on Nexus 5000 switches?
1
vote
1answer
1k views

Cisco Nexus syslog messages format?

I'm trying to normalize Syslog messages generated by a Cisco Nexus box. Problem: Messages have the following format: <189>: yyyy mm dd hh:mm:ss UTC: text This is not a standard Syslog message, no ...
2
votes
1answer
389 views

Catalyst to Nexus Migration - Can 4948s be used for access switches

We currently have a switching topology in which two 7600 make up the core and there are N many access layer 4948s at the top of every few racks. They are trunked to both 7600s. I would like to ...
0
votes
2answers
116 views

What do I need to do to enable sFlow on my Cisco Nexus 9372PX?

I have a pair of Cisco Nexus 9372PX switches running NXOS version 7.0(3)I1(3). According to the link at ...
0
votes
1answer
88 views

Cisco Nexus 7000 Multicast IGMP Snooping enabled - packets got to all interfaces

I have connected three servers to Cisco Nexus 7000 switch. Server1 send multicast packets, server2 subscribes to multicast packets and server3 is for the tests. No matter if I subscribe to multicast ...
0
votes
1answer
22 views

Port Forward on Cisco ASA 5512-X

i would to improve port forward from an external host to an internal network, on my ASA. The network and the host are on two different interfaces, the internal network is on the internal interface ...
0
votes
1answer
1k views

VLAN & WiFi & DHCP with Cisco SG200

I'm trying to configure a small business network with one Cisco SG200-26, a Linux server and two TP-Link TL-WA801ND. I have set up the APs to have two different SSIDs, Public and Staff, and have ...
0
votes
1answer
15 views

Rate Limit VLAN interface | Cisco Nexus

How to do QoS in cisco nexus for Rate limit. In cisco Routers , we will be creating a policy map and calling it in service_policy in VLAN Interface Ex: Policy-map Policy_2Mbps class class-default ...
0
votes
0answers
6 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
-1
votes
1answer
26 views

How to run a separate internet connection between two switches over fiber

At my office we currently have a data center where our corporate connection runs from a core switch over a fiber connection to a closet with a few switches in it on the other side of the building. I ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
0answers
13 views

What is better, DHCP on Cisco Meraki MX64 or Windows Server 2012R2? [closed]

I'm new to the Cisco world and I would like some advises. Currently I'm configuring a Windows Server for a small bussiness (less then 50 users). Normally the Windows server would have the AD, DNS and ...
0
votes
1answer
22 views

Cisco 887VA router ADSL configuration

I am attempting to setup a Cisco 887VA to connect out to the internet via a basic ADSL connection. I have configured it to the best of my ability but its the first one I've ever done and I think I may ...
0
votes
1answer
32 views

DHCP on Meraki MX64 or Windows Server 2012R2?

I'm new to the Cisco world and I would like some advises. Currently I'm configuring a Windows Server for a small bussiness (less then 50 users). Normally the Windows server would have the AD, DNS and ...
5
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
3answers
14k views

How do I change my password on a Cisco Catalyst 2960 switch?

I was given a username and a temporary password on a catalyst switch and I can't figure out how to change my password... Upon googling, I found this but when I raise my privileges to 15 by typing ...
4
votes
1answer
1k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
1
vote
1answer
63 views

Trouble Shooting errdisabled Cause

I have a Cisco Catalyst 3850. I added a network module with 4 gbic for fiber connection. The module is not showing any lights on either side of the connection. After the searching the depths of the ...
0
votes
0answers
27 views

How to allow authenticated User to relay on a Cisco ESA C170 (iron port)

I'am trying to configure my ESA C170 and all works as expected. But now I want to add support for relay function for authed external user. I add a SMTP Auth Profile against LDAP that works. Next Step ...
1
vote
3answers
1k views

How accurate is cisco's “show proc cpu history” compare to snmp's cpu loading?

I'm using snmp to monitor my cisco router's cpu loading, but the number has a large difference with show proc cpu history's output. When sh tells me cpu loading is 7x%, the snmp only gets 2x%. Which ...
0
votes
1answer
16 views

Cisco 1921, SMTP, and NAT on multiple Exchange Servers

In a LAN environment, I have 3 exchange servers that have been deployed for high availability and failover in case one of the 3 servers becomes unavailable. Currently, my NAT settings only send ...
0
votes
0answers
24 views

CISCO router VPN configuration

I have a site to site VPN connection configured between 2 offices. The remote site connects to the internet via the Head office. However, this has been configured to connect through a proxy server. ...
1
vote
0answers
13 views

GNS3 - Connecting Emulalated IOS to TWO PHYSICAL networks

I have a CISCO c3725 router on GNS3 connected to two different and separate unique LANs via the CLOUD/HOST icon, attaching each of the virtual CISCO c3725 to my computer's physical NIC (NIC 1 and ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
1
vote
1answer
4k views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
1
vote
1answer
3k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
3
votes
2answers
14k views

Factory Reset Cisco SPA504G without admin password

I've been trying to factory reset some SPA500 phones, specifically the 504G but the old provider has locked out everything. I need to reset about 50 phones for use with a new service. I've man in the ...
0
votes
1answer
2k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
1
vote
5answers
5k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
0
votes
0answers
14 views

Checking RadHuntGroup And Radgroupcheck to login specific NAS

I am actually setting up a FreeRADIUS Version 2.1.12, server that will manage authentication Users Cisco Switchs in company .. and i have one problem : I need to create some accounts that can be ...
0
votes
1answer
37 views

Cisco 3750G: Tagging and untagging traffic on a port

I have the following setup: [phone]-~-~-~-(port-10)[Cisco 3750](port-24=trunk)----[servers] I want the phone to talk only on vlan (say 1940), where-as Cisco switch to untag/tag its traffic, as goes ...
0
votes
1answer
2k views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
7
votes
0answers
128 views

How come one of my switches is off by two minutes in spite of ntp?

I just noticed by pure chance that one of my Cisco 4500 switches has its clock going wrong: it is more than 2 minutes behind in spite of seemingly functional ntp. In my opinion, even a single second ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
1answer
17 views

How can I have one network card that allows traffic between two private networks?

This is a a question about a private network. I have two servers (Linux), srv1, srv2, each has one NIC. I have two switches (Cisco 3750), sw1, sw2 The servers are on two different subnets. srv1 is ...
1
vote
0answers
26 views

How to access LAN IP Addresses : Cisco VPN Client [closed]

I have successfully configured Cisco VPN Client and connected. And allow LAN Access. I don't know how to connect LAN IP Addresses. I was trying to connect with Remote desktop connection, it's asking ...
0
votes
1answer
15 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
2
votes
2answers
1k views

Problems with getting both ingress and egress Netflow data

I have a Cisco 6500 switch that I want to capture all vlan8 traffic incoming and outgoing. I talked with my networking group and they set me up with the following commands. (May not be exact commands ...
0
votes
0answers
22 views

Cisco asa 8.4 PAT with static NAT

I am trying to make sense of the changes that Cisco has made to NAT on ASA > v8.3. I have a network which is being PAT'd to the outside interface address, and want to add a static NAT from the outside ...
0
votes
1answer
48 views

Ip addressing for serial routing

I have the following packet tracer diagram: I have range of ip address : 10.0.0.0 - 10.0.255.255 I need to assign ip addresses from this range to the routers' serial interfaces as well as subnet ...