Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
0answers
42 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
6
votes
1answer
88 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
4
votes
4answers
568 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
0answers
88 views

Change source IP for packet incoming in VPN tunnel

The following configuration allows me to change the source IP from 192.168.0.0/24 to 172.16.0.100 when hosts going to 10.0.0.100 and it works. But I can't achieve this goal for the hosts incoming from ...
0
votes
0answers
26 views

Diskless cluster using Perceus: nodes don't boot

I'm constructing diskless cluster using Perceus. Few days ago, I succeed Clustering using Perceus. Nodes are booted well and i can use ssh to nodes. Even i run mpi program. Today, I tried to ...
0
votes
1answer
100 views

Cisco IOS - Problems with NAT and port forwarding

I have a problem forwarding ports. I have configured a NAT pool of 1 address (192.168.5.2) and assigned that address to the WAN interface. I assigned networks to the access-list, and bind the two ...
0
votes
2answers
99 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
5
votes
3answers
254 views

How can I automate the deployment of cisco IOS upgrades?

I was googling this and didn't turn up anything. If you have 100 some odd Cisco routers and switches how do you push out new IOS releases? Certain not by manually logging into every device. The only ...
-4
votes
2answers
75 views

Cisco 2801 - ACL example to prevent certain users in same subnet from accessing certain devices [closed]

May be a simple answer, but does anyone have an example of an ACL that would prevent certain users (preferably based on MAC address, so that I can not have to deal with static DHCP addressing) from ...
-1
votes
1answer
201 views

Cisco 7945 Phone won't boot after power outage [closed]

I have two Cisco 7945 phones that will not boot after a recent power outage. I tried using this (http://amyengineer.com/tag/9-31sr1/) method to load the firmware back on. Sadly, the phone doesn't ...
2
votes
3answers
165 views

Cisco ASA NAT - internal host see its public ip

I have a server hosted by a provider which uses Cisco ASA to do nat. The problem I have is that the internal server that is nat-ed with a public ip will see its public ip as source ip. This basically ...
1
vote
1answer
38 views

Add non-flex switch to existing switch stack

I have an existing stack consisting of two CISCO 2960-S series switches. They are connected using the flex-stacking cables in the back, the top one being the master and the lower being the slave. I ...
1
vote
0answers
57 views

why cisco VPNC work on the second time each time and not on the first time

I use the vpnc ( cisco VPN that installed on linux red-hat 6.X ) and the vpnc.conf file look like this more /etc/vpnc.conf ## generated by pcf2vpnc IPSec ID Comvwde IPSec gateway 217.118.6.7 ...
0
votes
2answers
101 views

cannot access my cisco 881W AP interface

I have a new Cisco 881w AP and I am trying to get to the AP interface. When i follow the procedures outlined by Cisco, i get asked for a username and password. I have tried all the suggested ...
0
votes
1answer
107 views

enable lacp mode active on isr 2951

Any idea if ISR 2951 support LACP ... i don't see any cli command to enable it. My router IOS version is 15.2(4)M7. Can you help please. below is my config: interface Port-channel1.1 description ...
0
votes
0answers
57 views

Cisco vpn access to another router

I am using a Cisco ASA 5505 to VPN into my network (which is working great), and I want to connect to a different network that is on a Asus RT-N66v. For example: network 10.1.1.1 is my VPN and ...
0
votes
0answers
23 views

How to automate updating of a setting on Cisco phones remotely?

Normally, to make a change one would get the IP address of a Cisco VOIP phone, access its settings via a web browser and make any changes to the settings they need to using the web interface. Is it ...
0
votes
1answer
75 views

Is there a Cisco IOS command for finding out the serial number of a switch / router?

I am doing an inventory of all of our switches and I was wondering if there's a Cisco IOS command that will return the serial number for a switch and router? Thanks in advance!
0
votes
2answers
693 views

Limit bandwidth in cisco router with policy-map doesn't work

I have a problem with my scenario in limiting bandwidth of ubuntu PC in GNS3 with class-map and policy-map. this is my topology in GNS3: ...
1
vote
1answer
190 views

Cisco ASA - difference between inside_access_in and inside_access_out?

So a minor problem we have is any internal servers have no (non-icmp) access to the outside is being blocked. Our current config is: inside_access_in any ---> any ---> icmp inside_access_out ...
1
vote
1answer
86 views

how to setup snmptraps to automatically report ports that when down due to 'err-disabled'?

I'd like to automatically monitor all ports on my switches and get notified whenever a port goes down. So far I have to connect to each switch manually and read out the disabled ports by hand: show ...
0
votes
0answers
84 views

Catalyst 3750 switch shows gibberish in the console on boot (could be a baud rate issue)

I've got a Catalyst 3750 series switch here, I switch it on by holding the 'Mode' button and then plugging in the power. In PuTTY console I can't type anything, but when I press anything on keyboard, ...
0
votes
0answers
106 views

Many error lines in snmpwalk report

Devices : Cisco SG 300 switch / Ubuntu 14.04 LTS when I run a snmpwalk, I get many error lines before the actual requested datas. Example: snmpwalk -v3 -u public 192.168.0.20 IF-MIB::ifHighSpeed ...
0
votes
0answers
155 views

Route Email to external IP Cisco ASA 5515

I have a cisco ASA 5515X with two WAN connections and one LAN connection. As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1. ...
0
votes
0answers
44 views

How to terminate any ip/ip tunnel which has this host as destination

I am in a situation where I want to terminate any tunnels at one device. I.e. I want to be able to create a tunnel to this device from any source ip adress. Something which can inspect a packet, see ...
0
votes
0answers
129 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
1
vote
0answers
34 views

how to allow a subnet to surf internet in Juniper and Cisco ASA

how to allow a subnet to surf internet in Juniper and Cisco ASA is there an configuration example to show allow a subnet of class C IP address to surf internet in Juniper and in Cisco ASA ? assume ...
0
votes
1answer
193 views

What are the VPN configuration requirements for site-to-site VPN with Azure?

I'm using a Cisco RV325, and I don't have access to any bigger/better routers. My understanding is that the RV325 should still support the necessary security protocols to connect to the Azure ...
0
votes
0answers
186 views

Wrong SNMP ifSpeed and ifHighSpeed values from Cisco RV 110W

My Cisco Small Business RV110W Router reports wrong SNMP ifSpeed and ifHighSpeed values for eth0, vlan1 and vlan2 ( 10 Mbit/s instead of 100 Mbit/s ). This causes my SNMP management software to ...
2
votes
0answers
220 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
3
votes
1answer
45 views

Consequences of blocking ports on Catalyst 4506

Several years ago, I purchased a Catalyst 4506 at a business liquidation, and it's been merrily humming along running my office network (I know it's tremendous overkill, but as I was the only bidder ...
0
votes
1answer
80 views

How to Access Server After Cisco AnyConnect Connected?

I have bought a VPS with Windows Server 2003 and Valid Public IP a.b.c.d In this Server I have to Connect to Another Private Network with Cisco Any Connect also I have to RUN a CCProxy (http proxy ...
3
votes
2answers
2k views

rsyslog - configuration help - logrotate and compression

I am a newbie to Linux and rsyslog. I have used the logfiles for many years, but I have never had to set one up. At this point I have some Proof of Concept devices pointing to my Debain Linux server. ...
3
votes
0answers
1k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
1answer
72 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...
1
vote
1answer
117 views

How to use same MPLS Traffic Engineering tunnel for ipv4 and ipv6

I have MPLS TE configured and working, but it is currently using IPV4 and I needed to include IPV6. My current tunnel configuration is the following: interface Tunnel1 ip unnumbered Loopback0 ipv6 ...
0
votes
2answers
70 views

Limiting IP access geographically

I don't want to cause any offence here, but whenever I take a look at the logs for my servers I can see I am constantly having IP addresses in China try to login to my machines, hoping to get access ...
0
votes
0answers
139 views

Include multiple sub-interfaces in Cisco ASA for VPN tunnel

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces. Say, In Cisco ASA 5550, I created multiple subinterfaces with VLAN ID as below: Inside, int0/1 : ...
0
votes
2answers
355 views

Unable to add allowed VLANs to trunk and port not trunking

I am unable to add any VLANS to be allowed on trunk and the port is not trunking. I've tried: Switch0#configure terminal Enter configuration commands, one per line. End with CNTL/Z. ...
2
votes
1answer
282 views

Unable to remove a port from default VLAN

I am unable to remove a port from my default VLAN. I've tried: Switch(config)#interface FastEthernet 0/1 Switch(config-if)#no switchport access vlan 1 It has no errors but when I check it using: ...
1
vote
0answers
49 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
0
votes
0answers
45 views

New Cisco AIR-1602I-E-K9 AP not working on some ports

I have had this problem since last friday but cannot solve it. I gave it a lot of thought so posting here is my last option/hope. We recently aquired 5 new Cisco AIR-1602I-E-K9, I configured them all ...
0
votes
1answer
48 views

Routing - Access Lists

I am relatively new to learning networking I've been trying some stuff out about "Access Lists" but seem to be confused at some point. I am not able to deny a whole ip range from accessing another ...
0
votes
1answer
290 views

Cisco ASA 5510 needs “clear arp <Interface>” periodically to reach a single host

ASA 9.0(3) The symptom is that I can ping from the ASA to any other host in that interface's subnet, save one particular host (that host can ping the interface on the ASA however). If I do "clear arp ...
0
votes
0answers
71 views

Cisco 877 Initial Setup - Enable SDM

We purchased a used 877 and installed IOS and reset to factory defaults with a console cable. Now I just need to set it up as right now connecting via ethernet and pinging 10.10.10.1 won't connect (ip ...
0
votes
0answers
86 views

ASA 5515-X: Policy based NAT for dedicated uplink

We have bought a Cisco ASA 5515-X and we have the following scenario. Current situation: GigabitInterface 0/0, IP via DHCP, ISP1, Coax, 100M up / 12M down, medium latency GigabitInterface 0/1, ...
0
votes
0answers
71 views

sg300-10 problems with vlan connections

I was hoping someone could give me a pointer on a VLAN setup issue i am having. My Enviroment: Cisco S300-10 Switch (set to L3 Mode) I have uploaded a newb drawing of my switch config in the hope ...
1
vote
1answer
76 views

Cisco Catalyst 2960S boots to “MLG System”

We have a brand new Cisco Catalyst 2960S that while connected to the console during boot is booting to the following: File ...
0
votes
0answers
150 views

Cisco ASA 5505 - IPSec remote VPN accessing secondary subnet

Layout: modem (pass through) -> Cisco ASA 5505 (Lan 192.168.10.1) -> (Wan 192.168.10.2) Netgear N600 Router (Lan 10.1.10.1) -> workstations (server=10.1.10.34) VPN connection to ASA no problem. I ...
2
votes
2answers
130 views

IPv6 Stateless Autoconfiguration route advertisements

In our network, we have a Cisco router acting as the core router, connecting all our sites to the main site. We also have a Linux firewall connecting us to the Internet. Site 1 --\ ...