Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

1
vote
0answers
47 views

Cannot Reach Secondary Subnet on Same Interface

I am running a Cisco 1841 which has an unmanaged Dell 2848 connected to it. Connected to a WIC card in the 1841 is a fiber run which goes to a subnet of devices. The primary subnet is 192.168.2.0/24, ...
1
vote
0answers
24 views

Cisco multi switch / multi VLAN monitoring

I have a DMZ and a internal LAN with VLANs that I wish to port monitor by means of a NIDS and three switches, if this is possible. Switch 1 (DMZ) 2950 / VLAN 10 & trunk port to Switch 3 Switch 2 ...
0
votes
2answers
79 views

Creating a bridged network in ESXi VSphere using VSphere client

I'm new to ESXi and i'm trying to configure a small server of guest machines, each running windows 7 starter. my goal is to let the workers connect to the ESXi server, get a windows "computer" and be ...
0
votes
0answers
15 views

cisco switch 4900M X2-10baase -LR module

I have cisco 4900M series core switch as we have installed X2-10base-SR module for MM fiber.For long rang we have brought X2-10base-LR module for single mode fiber. After installing the module in ...
1
vote
4answers
197 views

Cisco ASA Implicit rule dropping traffic

The network is as follows: Two Default Gateways exist on the network - one which provides connectivity to the an MPLS with several subnets. Let's say 10.0.0.2 Another which is a Cisco Firewall, on ...
1
vote
1answer
73 views

Migration to Cisco Nexus 3064-T

In my environment I have 9 ESXi servers (ProLiant DL360 G7 & DL360p Gen8) and NetApp FAS2240 that is used for storage (NFS datastores). Currently, we have 1Gbps network with multiple VLANs ...
0
votes
1answer
34 views

Cisco Router DHCP Error Logging

I am troubleshooting an issue where a DHCP client is not receiving an address during PXE boot, but receives an address with no issues once booted into Windows. Our Cisco router is also our DHCP ...
0
votes
1answer
44 views

IPSEC one way issue

We have a frustrating issue and I'm hoping someone here can see what I'm missing. We have a small hub and spoke network between 4 sites and a datacenter, each location connecting to each other ...
1
vote
0answers
20 views

Snmp - clear portsecurity sticky address in cisco

i am writing script to clear particular sticky mac address. I have fount that snmp oid is: 1.3.6.1.4.1.9.9.315.1.2.1.1.14 it can take following values: 0:done 1:dynamic 2:static 3:sticky 4:all ...
0
votes
0answers
46 views

IPSec site to site VPN

I am trying to connect our server to cisco site-to-site IPSec VPN with one of our partners servers, they asked us to implement the settings they gave us into our router, but actually we don't have ...
0
votes
0answers
38 views

Cisco ASA 5505 VPN users access to local LAN denied

I have this running config: : Saved : ASA Version 8.2(5) ! hostname TESTATES domain-name TEST.com names name 192.168.1.0 AsusWireless ! interface Ethernet0/0 switchport access vlan 2 ! interface ...
1
vote
3answers
81 views

Using a computer with many COM ports as a low cost out of band solution?

I'm trying to come up with a cheapo out of band solution for my cisco routers in our data center. I want to be able to access them directly from the console remotely so if they are not accessible from ...
0
votes
1answer
44 views

Find different switches from cdp output

I have three cisco switches, all with CDP enabled. From the console of the "core" switch I give the command "show cdp neighbors" and the output is: Capability Codes: R - Router, T - Trans Bridge, ...
0
votes
0answers
45 views

Authenticating Cisco Phones EAP-TLS Windows NPS

We are using windows NPS server for radius authentication and would like our to set up 802.1x authentication on our phones using EAP-TLS. The NPS Server trusts the certificates (using the built in ...
2
votes
1answer
221 views

Cisco Voice VLAN with 802.1X Authentication

I've got a Cisco Catalyst 2960 that I'm trying to configure for a remote office with 802.1X wired authentication. The setup I'm going for is Switch -> VoIP Phone via Internal Switch -> ...
0
votes
0answers
13 views

Triggering an event with cisco event manager

I currently use event manager applet to monitor the state of an rtr track track 1 rtr 123 reachability. This currently logs to a syslog server as well as sending an e-mail. I now need to do some ...
0
votes
1answer
20 views

Aironet 1252 not booting

I have a 1252 Aironet AP that does not boots up. I've plugged the console cable, but displays nothing. After connecting power via PoE, I just got the radio LED on red after 5 seconds. I've checked ...
0
votes
0answers
75 views

Does Cisco IOS support NPTv6?

I'm looking to do a small multi-homing setup which is currently achieved, with IPv4, using NAT. NPTv6 seems to be a good way to do this for IPv6 however I cannot find how to configure this on Cisco ...
1
vote
1answer
52 views

SSH/SFTP over WiFi issues

Some time ago we have purchased a Wireless Controller (AIR-CT2504-K9) with few Access Points (MIMO 3x3). The number of users on one access point is around 20-25 simultaneously. As I have understood ...
0
votes
0answers
23 views

Cisco Cryptochecksum generation

I ran 2 commands - a show start and a show run. I noticed that the cryptochecksums were different. My main question is understanding the cryptochecksum and how it is generated. Is it different ...
0
votes
0answers
18 views

Determining the side-effects of enabling unicast reverse-path forwarding on Cisco ASA 5505

I am trying to find out what (if any) negative side-effects there would be to enabling Unicast Reverse Path Forwarding (uRPF) on a Cisco ASA 5505 - I need to do this on a router which I do not have ...
0
votes
1answer
79 views

Need VLan to route to Internet

I have a Sangoma box here. This is Lync in a box... There is AAR Reverse proxy (VM) on the server and it has an IP of 10.10.9.7 on The "External" interface. I have 10.10.10.5 on the "Internal" ...
2
votes
1answer
40 views

Stuck with Cisco DHCP pool issue

Yes, I have searched, googled, sworn, googled more but have not quite found the answer I need, .. I have also posted this on a Cisco forum but, as I discovered at stackoverflow, the Stack* forums ...
0
votes
1answer
48 views

Can IPS monitor both inbound and outbound traffic?

We have a user traffic flow like below (PC - Internet) PC => Cisco ASA FW+IPS integrated => Fortigate Proxy (ISP connected to this Proxy) = > Internet PC = > ASA+IPS ==> Fortigate Proxy ==> ...
0
votes
1answer
81 views

Federation with Office365 results in an Outlook UserAgent change and an Ironport block due to Webfilter

The following Cisco bug documents that when Exchange is federated with Outlook.com the Outlook user agent changes so that any email based image is blocked as webmail on the ironport. ...
0
votes
0answers
64 views

CSR1000v image in Openstack as a VM

I have an esxi host. Under that I have created a Ubuntu 14.04 machine running Openstack(devstack single node)Juno release. I am trying to spin CSR1000v image as a VM inside Openstack. I followed the ...
0
votes
1answer
36 views

Managing two switches and one Router [closed]

I have the following network : One Router : CISCO 860 (In : ADSL, Out : Yellow Ethernet Cable) Two Cable Panels Rack One : PANEL 24 ports (22) - DT24F Rack Two : PANEL 24 ports (22) - DT24F ...
0
votes
1answer
31 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
1
vote
0answers
32 views

Flat ISP network to MPLS dumb Q

I have a fairly flat ISP network that I am upgrading to use MPLS (dont ask why, that decision is above my position) but clients/CPE are authenticated using PPPoE. Each POP uses a router configured as ...
0
votes
1answer
61 views

Zabbix IPMI does not auth with Cisco C220 M3

server: Cisco C220 M3 Zabbix 2.4 Ubuntu 14.04 ipmitool works user1@zabbix3:~# ipmitool -I lanplus -H 192.168.1.45 -U admin -P Password1 -A MD5 sel SEL Information Version : 1.5 (v1.5, v2 compliant) ...
0
votes
2answers
362 views

SCCM 2012 R2 OSD pxe-32 : tftp open timeout

I have SCCM 2012 R2 standalone primary site on windows server 2012 and i have Cisco dhcp server i configured the distribution point for pxe boot to work with osd i added boot images and configured ...
0
votes
0answers
36 views

DHCP from Cisco 1921 failing after switch nr 2

I have a network which uses a Cisco 1921 router. The router is connected to a Dell Powerconnect 2848 switch and from that switch is a connection to a small SOHO Planet switch which 3 computers connect ...
0
votes
1answer
37 views

IPv4 ICMP Codes/Errors for WAN transmissions

Can someone tell me which IPv4 ICMP Codes/Errors i have to unlock as Best Practise for WAN transmission (RedHat und Cisco)?
0
votes
1answer
94 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
1answer
91 views

Unplug of Netgear Switch Causes Cisco Link Drop on Remote Switch

I have a very odd problem that I'm hoping someone might be able to give me even an idea of where to look. I have a new Netgear M4100-D10-POE layer 2 managed switch that we are installing in a remote ...
0
votes
1answer
90 views

ACL Rule to Open UDP Ports

I have the current rules in an attempt to open port 5060 and 10000-20000 for my VoIP provider. We are on a Cisco 1921 router. This ACL is applied to the WAN port on the router facing the ISP. Nmap ...
4
votes
1answer
187 views

Possible to have DHCP hand out different DNS server address when using different tunnel?

We have several ASA 5505 deployed. Currently, we have a setup where the local ASA is answering DHCP queries and is configuring clients with two DNS servers: our DR site DNS server (we use AD) and a ...
0
votes
0answers
44 views

Route part of a subnet to a different gateway

Data network is 10.220.0.0/20 DG is 10.220.1.19 I am trying to have all traffic in 10.220.8.0 - 10.220.15.255 (10.220.8.0/21) routed to this gateway: 10.220.1.251 I can't seem to accomplish this at ...
1
vote
1answer
38 views

Allowing a device blocked by port-security

Lets say I have port security configured on a switch's ports like this: Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) ...
0
votes
1answer
56 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
0
votes
0answers
11 views

terminate tunnel with Cisco 1905

We have a Cisco 1905 router and I was wondering, if there is an option to terminate an ssh tunnel on it, i.e. that some external host would be able to establish a secure connection through a ssh ...
0
votes
0answers
48 views

DHCP relay offer packet dropped

I'm trying to get DHCP relay set up on our Cisco SGE2010P switch. Sadly, we can't afford a catalyst switch right now. It looks like I have everything configured correctly, but something is going ...
5
votes
0answers
87 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
2
votes
0answers
120 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
0
votes
1answer
516 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
-3
votes
1answer
48 views

How to efficiently subnet a network [duplicate]

I have base ip address 10.6.0.0/16. I need to divide this network into 12 subnets, and I need at least 80 computers in one network. Please explain how to calculate correctly subnets. I understand that ...
0
votes
1answer
69 views

How to connect to external server using router from VLAN's

I am newbie. I am trying to build network system in Packet Tracer. Now I have such network layout. I have different VLAN's Accounting and Sales. I have configured this using subinterface in ...
0
votes
0answers
41 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
6
votes
1answer
86 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
4
votes
4answers
559 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...