Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
39 views

IPv4 ICMP Codes/Errors for WAN transmissions

Can someone tell me which IPv4 ICMP Codes/Errors i have to unlock as Best Practise for WAN transmission (RedHat und Cisco)?
0
votes
1answer
126 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
1answer
123 views

Unplug of Netgear Switch Causes Cisco Link Drop on Remote Switch

I have a very odd problem that I'm hoping someone might be able to give me even an idea of where to look. I have a new Netgear M4100-D10-POE layer 2 managed switch that we are installing in a remote ...
0
votes
1answer
180 views

ACL Rule to Open UDP Ports

I have the current rules in an attempt to open port 5060 and 10000-20000 for my VoIP provider. We are on a Cisco 1921 router. This ACL is applied to the WAN port on the router facing the ISP. Nmap ...
4
votes
1answer
243 views

Possible to have DHCP hand out different DNS server address when using different tunnel?

We have several ASA 5505 deployed. Currently, we have a setup where the local ASA is answering DHCP queries and is configuring clients with two DNS servers: our DR site DNS server (we use AD) and a ...
0
votes
0answers
57 views

Route part of a subnet to a different gateway

Data network is 10.220.0.0/20 DG is 10.220.1.19 I am trying to have all traffic in 10.220.8.0 - 10.220.15.255 (10.220.8.0/21) routed to this gateway: 10.220.1.251 I can't seem to accomplish this at ...
1
vote
1answer
45 views

Allowing a device blocked by port-security

Lets say I have port security configured on a switch's ports like this: Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) ...
0
votes
1answer
75 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
0
votes
0answers
14 views

terminate tunnel with Cisco 1905

We have a Cisco 1905 router and I was wondering, if there is an option to terminate an ssh tunnel on it, i.e. that some external host would be able to establish a secure connection through a ssh ...
0
votes
0answers
61 views

DHCP relay offer packet dropped

I'm trying to get DHCP relay set up on our Cisco SGE2010P switch. Sadly, we can't afford a catalyst switch right now. It looks like I have everything configured correctly, but something is going ...
5
votes
1answer
107 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
2
votes
0answers
147 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
0
votes
1answer
738 views

No traffic routing between Cisco CSR1000v and Strongswan IPSec end points on AWS

I am trying to configure a Cisco CSR1000V on AWS to create an IPSec VPN with Strongswan 5.1.2 (on Ubuntu 14.04) on another AWS machine. I can establish the VPN from the Strongswan end and it appears ...
-3
votes
1answer
55 views

How to efficiently subnet a network [duplicate]

I have base ip address 10.6.0.0/16. I need to divide this network into 12 subnets, and I need at least 80 computers in one network. Please explain how to calculate correctly subnets. I understand that ...
0
votes
1answer
83 views

How to connect to external server using router from VLAN's

I am newbie. I am trying to build network system in Packet Tracer. Now I have such network layout. I have different VLAN's Accounting and Sales. I have configured this using subinterface in ...
0
votes
0answers
59 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
6
votes
1answer
102 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
4
votes
4answers
632 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
0answers
101 views

Change source IP for packet incoming in VPN tunnel

The following configuration allows me to change the source IP from 192.168.0.0/24 to 172.16.0.100 when hosts going to 10.0.0.100 and it works. But I can't achieve this goal for the hosts incoming from ...
0
votes
0answers
36 views

Diskless cluster using Perceus: nodes don't boot

I'm constructing diskless cluster using Perceus. Few days ago, I succeed Clustering using Perceus. Nodes are booted well and i can use ssh to nodes. Even i run mpi program. Today, I tried to ...
0
votes
1answer
116 views

Cisco IOS - Problems with NAT and port forwarding

I have a problem forwarding ports. I have configured a NAT pool of 1 address (192.168.5.2) and assigned that address to the WAN interface. I assigned networks to the access-list, and bind the two ...
0
votes
2answers
131 views

Cisco Easy VPN - Port forwarding needed at remote end?

I was in the process of setting up a site-to-site ipsec vpn tunnel behind a mobile broadband router when i found out that i wasnt able to port forward on that network so i wont be able to use the ...
5
votes
3answers
334 views

How can I automate the deployment of cisco IOS upgrades?

I was googling this and didn't turn up anything. If you have 100 some odd Cisco routers and switches how do you push out new IOS releases? Certain not by manually logging into every device. The only ...
-4
votes
2answers
83 views

Cisco 2801 - ACL example to prevent certain users in same subnet from accessing certain devices [closed]

May be a simple answer, but does anyone have an example of an ACL that would prevent certain users (preferably based on MAC address, so that I can not have to deal with static DHCP addressing) from ...
-1
votes
1answer
241 views

Cisco 7945 Phone won't boot after power outage [closed]

I have two Cisco 7945 phones that will not boot after a recent power outage. I tried using this (http://amyengineer.com/tag/9-31sr1/) method to load the firmware back on. Sadly, the phone doesn't ...
2
votes
3answers
177 views

Cisco ASA NAT - internal host see its public ip

I have a server hosted by a provider which uses Cisco ASA to do nat. The problem I have is that the internal server that is nat-ed with a public ip will see its public ip as source ip. This basically ...
1
vote
1answer
42 views

Add non-flex switch to existing switch stack

I have an existing stack consisting of two CISCO 2960-S series switches. They are connected using the flex-stacking cables in the back, the top one being the master and the lower being the slave. I ...
1
vote
0answers
66 views

why cisco VPNC work on the second time each time and not on the first time

I use the vpnc ( cisco VPN that installed on linux red-hat 6.X ) and the vpnc.conf file look like this more /etc/vpnc.conf ## generated by pcf2vpnc IPSec ID Comvwde IPSec gateway 217.118.6.7 ...
0
votes
2answers
119 views

cannot access my cisco 881W AP interface

I have a new Cisco 881w AP and I am trying to get to the AP interface. When i follow the procedures outlined by Cisco, i get asked for a username and password. I have tried all the suggested ...
0
votes
1answer
131 views

enable lacp mode active on isr 2951

Any idea if ISR 2951 support LACP ... i don't see any cli command to enable it. My router IOS version is 15.2(4)M7. Can you help please. below is my config: interface Port-channel1.1 description ...
0
votes
0answers
64 views

Cisco vpn access to another router

I am using a Cisco ASA 5505 to VPN into my network (which is working great), and I want to connect to a different network that is on a Asus RT-N66v. For example: network 10.1.1.1 is my VPN and ...
0
votes
0answers
23 views

How to automate updating of a setting on Cisco phones remotely?

Normally, to make a change one would get the IP address of a Cisco VOIP phone, access its settings via a web browser and make any changes to the settings they need to using the web interface. Is it ...
0
votes
1answer
97 views

Is there a Cisco IOS command for finding out the serial number of a switch / router?

I am doing an inventory of all of our switches and I was wondering if there's a Cisco IOS command that will return the serial number for a switch and router? Thanks in advance!
0
votes
2answers
884 views

Limit bandwidth in cisco router with policy-map doesn't work

I have a problem with my scenario in limiting bandwidth of ubuntu PC in GNS3 with class-map and policy-map. this is my topology in GNS3: ...
1
vote
1answer
257 views

Cisco ASA - difference between inside_access_in and inside_access_out?

So a minor problem we have is any internal servers have no (non-icmp) access to the outside is being blocked. Our current config is: inside_access_in any ---> any ---> icmp inside_access_out ...
1
vote
1answer
97 views

how to setup snmptraps to automatically report ports that when down due to 'err-disabled'?

I'd like to automatically monitor all ports on my switches and get notified whenever a port goes down. So far I have to connect to each switch manually and read out the disabled ports by hand: show ...
0
votes
0answers
103 views

Catalyst 3750 switch shows gibberish in the console on boot (could be a baud rate issue)

I've got a Catalyst 3750 series switch here, I switch it on by holding the 'Mode' button and then plugging in the power. In PuTTY console I can't type anything, but when I press anything on keyboard, ...
1
vote
0answers
124 views

Many error lines in snmpwalk report

Devices : Cisco SG 300 switch / Ubuntu 14.04 LTS when I run a snmpwalk, I get many error lines before the actual requested datas. Example: snmpwalk -v3 -u public 192.168.0.20 IF-MIB::ifHighSpeed ...
0
votes
0answers
188 views

Route Email to external IP Cisco ASA 5515

I have a cisco ASA 5515X with two WAN connections and one LAN connection. As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1. ...
0
votes
0answers
53 views

How to terminate any ip/ip tunnel which has this host as destination

I am in a situation where I want to terminate any tunnels at one device. I.e. I want to be able to create a tunnel to this device from any source ip adress. Something which can inspect a packet, see ...
0
votes
0answers
138 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
1
vote
0answers
43 views

how to allow a subnet to surf internet in Juniper and Cisco ASA

how to allow a subnet to surf internet in Juniper and Cisco ASA is there an configuration example to show allow a subnet of class C IP address to surf internet in Juniper and in Cisco ASA ? assume ...
0
votes
1answer
215 views

What are the VPN configuration requirements for site-to-site VPN with Azure?

I'm using a Cisco RV325, and I don't have access to any bigger/better routers. My understanding is that the RV325 should still support the necessary security protocols to connect to the Azure ...
0
votes
0answers
199 views

Wrong SNMP ifSpeed and ifHighSpeed values from Cisco RV 110W

My Cisco Small Business RV110W Router reports wrong SNMP ifSpeed and ifHighSpeed values for eth0, vlan1 and vlan2 ( 10 Mbit/s instead of 100 Mbit/s ). This causes my SNMP management software to ...
2
votes
0answers
235 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
3
votes
1answer
47 views

Consequences of blocking ports on Catalyst 4506

Several years ago, I purchased a Catalyst 4506 at a business liquidation, and it's been merrily humming along running my office network (I know it's tremendous overkill, but as I was the only bidder ...
0
votes
1answer
90 views

How to Access Server After Cisco AnyConnect Connected?

I have bought a VPS with Windows Server 2003 and Valid Public IP a.b.c.d In this Server I have to Connect to Another Private Network with Cisco Any Connect also I have to RUN a CCProxy (http proxy ...
4
votes
2answers
2k views

rsyslog - configuration help - logrotate and compression

I am a newbie to Linux and rsyslog. I have used the logfiles for many years, but I have never had to set one up. At this point I have some Proof of Concept devices pointing to my Debain Linux server. ...
4
votes
0answers
1k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
1answer
82 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...