Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

1
vote
0answers
49 views

is there any cisco-compatible ipsec+comp module?

I am looking for a waqy to establish an Ipsec tunnel(with lzs-compression enabled) between a cisco router and a host(using strongswan or sth else). I can establish a tunnel without lzs-compression. ...
0
votes
0answers
252 views

Will the Linux Open VPNC Client connect to checkpoint or nortel VPN gateways?

Site: http://www.oucs.ox.ac.uk/network/vpn/linux-solaris/index.xml?ID=VPNC What is open VPNC: VPNC is an open-source VPN client for Linux and other Unix systems which is compatible with the OUCS VPN ...
0
votes
0answers
42 views

CISCO VPN CLIENT + on linux machines

I have try to install the VPNC Cisco client on many linux red-hat version For example Linux 5.2 ( red-hat ) Linux 6.2 ( red-hat ) Linux 6.3 ( red-hat ) And on different kind of kernel versions ...
0
votes
1answer
59 views

netscreen sn25 vs cisco asa5505 speed

Current i have 2 server direct connect to 1 juniper netscreen sn25 firewall then go to internet, the intel 350 nic is setup at 100mbps (which should be able go up to 1000mbps). the problem is this ...
0
votes
0answers
32 views

install cisco VPN client on linux in place on WIN XP [duplicate]

I have win XP with VPN client version - Cisco 5.0.01.0600 Now we want to replace the WIN XP with linux machine , red-hat version 5.x or 6.x , My question is , what the equivalent VPN version that I ...
0
votes
1answer
424 views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
0answers
153 views

Routing through SonicWALL SSL-VPN and Cisco L3 Switch

In the image above, we use the SonicWALL NSA 3500 at our gateway and handle VPN with its SSL-VPN. Our Layer 3 Cisco switch is our core network switch and handles about a dozen VLANs. Most VLANs ...
0
votes
1answer
62 views

Installing new Cisco MIB

I'm having issues exposing firewall information via OIDs on a Cisco IOS device (c7200-ik9s-mz.124-25c.bin). It seems like either the IP-ACCESS-LIST-MIB or the CISCO-ITP-ACL-MIB would supply that ...
0
votes
0answers
43 views

Is there a simple command to delete multiple ip sla policies?

I have a Cisco 819 router and on it there are a lot of ip sla policies. when I run the sh runcommand I get the following; ip sla auto discovery ip sla 2 http get http://www.facebook.com cache ...
1
vote
1answer
210 views

Name resolution failing on Cisco 800 Series

Our ISP is currently in the middle of a major DNS outage and as a result name resolution through the nameservers they provide is not working. I'm trying to add Google DNS servers to our Cisco 800 ...
0
votes
0answers
91 views

Unable to monitor Cisco route tables with SolarWinds

I recently switched from scanning a linux-router based network hosted on CORE emulation software, to scanning Cisco IOS routers hosted on a GNS3 emulation with SolarWinds. Everything seems the same, ...
0
votes
2answers
91 views

Trouble polling for OID values within tables

I'm very confused about which OIDs are supported by my device, specifically for the CISCO- IPSEC-FLOW-MONITOR-MIB. It seems like some OIDs within that MIB are supported, while other OIDs aren't. ...
1
vote
1answer
84 views

VPN Tunnel set up Issues - Cisco WRVS 4400N to Server 2008 R2behind ASA5505

I was wondering if someone could help with a scenario i have that i am not sure how to set up regarding a VPN tunnel set up. I have a Cisco WRVS4400N business router , and on this device , i need to ...
0
votes
0answers
30 views

Is it possible to hairpin on Cisco 851W IOS 12.4(15)T9 and how?

I need machines on the LAN to be able to access by the external address or hostname. If it can't be done, then just by hostname is OK as well, so I thought of just doing it through DNS on our internal ...
0
votes
0answers
155 views

Cisco 861 - Unable to traceroute

I'm having an issue with my Cisco 861. I'm unable to traceroute to any ip address from the router, even the next hop. Can anyone suggest possible causes. Apologies for the censoring but I won't take ...
0
votes
0answers
54 views

What should I consider when I plan a meaningful monitoring for SNMP Switch (SG200-50)

I am currently planning the monitoring of a switch and would like to consider beforehand what I need to be closely monitored in order to obtain errors and warnings are also useful. I have a Cisco ...
0
votes
0answers
211 views

Cacti Getting SSID Stats from a Cisco 5508 Wireless Lan Controller

I'm trying to get some statistics from a Cisco 5508 WLC via SNMP using Cacti 0.8.8a, however I'm having some issues - 1) Trying to get total number of connections per SSID - I've written a bash ...
0
votes
0answers
61 views

NO_PROPOSAL_CHOSEN error while connecting

crypto isakmp policy 1 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group vpn key cse123 pool SDM_POOL_1 acl 100 netmask 255.255.255.0 crypto isakmp ...
0
votes
1answer
638 views

Physical Interface VS Multipoint Subinterface in Cisco Frame Relay

I am new in learning about Cisco Frame Relay. And I am having trouble in understanding the difference between using physical interface or multipoint subinterface, because it looks the same to me. ...
1
vote
0answers
553 views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
0
votes
0answers
64 views

Connect Cisco IP phone on two Asterisk sip servers

I have a cisco ip phone with sip firmware v9.3.1. I want to connect two lines on two seperate Asterisk sip servers. In section i can only define USECALLMANAGER (in node) and not the IP of an ...
0
votes
1answer
414 views

Configure SIP Trunk from Lync 2013 to Cisco Call Manager v6

I'm implementing Enterprise Voice for Lync, and I have to get Lync to work with a antiquated Cisco Call Manager version 6. The SIP trunk has been created but I get this error on my Lync servers: A ...
0
votes
0answers
123 views

Preserving VPN Flow on ASA + netsh

I have a tcp connection established over a site-site VPN and when the VPN drops it causes errors on the client when sending after the tunnel is re-established. When having this problem before, ...
1
vote
0answers
119 views

Connect Cisco 7975 VOIP phone to two separate Asterisk PBX's

I have a Cisco 7975 registered on an Asterisk SIP server, and I want to register a second line on a second (different IP) Asterisk SIP server. I tried to do this with firmware version 8.5.3 but it ...
0
votes
1answer
47 views

IP SLA: tcpConnect frequency and jitter codec

I am trying to generate different kinds of traffic with IP SLA on a c7200 router, I am using the simulation software GNS, so if required I can change my router. My aim is to generate congestion to ...
0
votes
0answers
270 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
1
vote
2answers
164 views

Cisco IOS: Prevent Inter-VLAN IPv6 Network Solicitation messages

I have a Cisco 3825 router that (among other things) functions as a gateway to the internet. I have two VLANS, but only one of them should have access to the internet. VLAN10: network = ...
0
votes
1answer
178 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
-1
votes
1answer
263 views

blocking all countries except 4 at vlan level, will cisco asa 5505 hold?

First our server hold an application that only serve 4 countries. We had a repeated ddos from bonnet so would like to block all traffic except for the 4 countries that the application serve. the idea ...
0
votes
2answers
92 views

Open HTTP Protocol Cisco ASA

I would like to know if it's possible to open HTTP protocol (whatever the port) for one of my subnet to the outside on Cisco ASA 5510 v9.1(4) (ASDM v7.1(5)? I guess I will have to play with service ...
0
votes
0answers
52 views

Cisco IOS log packets dropped due to no NAT entries?

I use access list logging currently, and update the access list to match the NAT table, and then the access-list deny any any log command is used for logging packets that were not allowed. However, I ...
1
vote
2answers
108 views

CISCO - host header forwarding possible?

Is it possible to realize a kind of policy-based routing in cisco ios, which forwards 80port requests on external IP to internal hosts based on host header information (http address). So if somebody ...
1
vote
3answers
1k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
0
votes
1answer
53 views

Cisco Aironet 1200 mode button disabled

Hey I got a free Cisco Aironet 1200 the other day and tried to restore it using the mode button but it was disabled and no one knows the password for the WAP's interface any ideas how I could get it ...
0
votes
0answers
35 views

Can't identify IPSec policy OIDs for Cisco

I'm trying to identify the OIDs of Cisco IPSec tunnel/policy information. Specifically, I would like: the local and remote tunnel addresses (where the tunnel endpoint addresses), the local and ...
0
votes
0answers
26 views

VPN User ACL not working

i´m currently testing a Cisco 886VA router for VPN usage. First off here is my client config group: crypto isakmp client configuration group VPN_PRIV key xxxxxx dns 192.168.111.100 pool VPN_POOL acl ...
0
votes
0answers
119 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
0
votes
1answer
40 views

different Native vlans on the ends of trunk link

http://www.techexams.net/forums/ccnp/53867-different-native-vlans-ends-trunk-link.html so i read this, but i still can not get traffic between two ends of a trunk link, each with a different native ...
0
votes
0answers
47 views

Multiple trunk links on firewall

I am trying to deliver VLANs (vlan 100 , vlan 200) created on a firewall http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-800C.pdf how ever i want to deliver them to two ...
0
votes
1answer
75 views

Cisco ASA 5510 nat

In my infrastructure, I natted a server on a Public IP address. Please note, the server is reachable from any outside network. My access rules are good. My isssue is from the internal network, I'm ...
1
vote
1answer
205 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
10
votes
2answers
437 views

How to safely install a new IOS image on a Cisco device when the installed flash memory size isn't enough for two of them?

Today I was updating IOS on a Cisco 877 router, and a problem came up: the installed flash memory wasn't enough to hold both the old and the new IOS images, so the new one couldn't be uploaded unless ...
1
vote
1answer
30 views

Is it possible to add description to cisco ACL?

I would like to add a description to cisco ACL. Something like: Permit all traffic from the R&D depatment to the lab. or Deny traffic from HA to R&D. Is it possible?
3
votes
1answer
256 views

Should IGMP Snooping be configured on all Layer 2 switches on LAN?

We've used Multicasting for the first time in one of our applications and whilst I have got it working, I'd really like to fully understand how it works and what's going on behind the scenes. In an ...
2
votes
1answer
96 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
1
vote
1answer
1k views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
0
votes
0answers
78 views

cannot configure Port forwarding on CISCO Router and Apache Virtual Host

I have 3 websites up and running using a single apache server running on slackware and a netgear wireless router as my gateway, I use port forwarding on the netgear to map services of different hosts ...
1
vote
1answer
206 views

How to configure remote IP address audit logging for VPN clients on a Cisco 2801

We have a Cisco 2801 that also acts as a VPN Server for Cisco VPN Client. We would like to configure IP address logging so that each time a user connects using VPN we would like to log his IP Address. ...
-2
votes
2answers
78 views

How can ISPs on one continent connect to ISPs on another continent? [closed]

How can ISPs on one continent connect to ISPs on another continent? From a physical layer standpoint? Say one ISP is located in Asia and another one in Europe how would they connect their fiber optic ...
0
votes
0answers
143 views

Cisco 1841 - Acting as a PPPoE terminator?

We have 2x Fortigate 200B firewalls that we wish to operate in Active/Active HA mode - though, obviously, they cannot do this with PPPoE/DHCP enabled on the externally facing interfaces. To overcome ...