Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
54 views

Reading .pcap files by CISCO ASA5515-X

I have .pcap file that already includes thousands of packets. I want to analyze these packets via CISCO ASA5515-X to observe how much of them are possible to be an attack packet (malicious). However, ...
-1
votes
1answer
136 views

Fixed ip to specific lan port

How should I go forth to set a fixed/static ip dedicated to one lan port in my switch or router, so that everything i plug in that specific port acquires the same ip? I have a Linksys EA6700 Wireless ...
1
vote
1answer
172 views

Cisco ISE 1.2.5 - Exporting Custom Reports

Having some troubles exporting reports from ISE when they have a custom time period. Trying to export the past 5 months, but even a custom period of the last 4 days for example will not export. I can ...
0
votes
0answers
324 views

Unable to ping from/to Cisco IOS XE (CSR 1000v)

I have a lab that requires connecting an IOL router and a CSR 1000v (IOS XE). Both are set on Vmware workstation 10 - Win 8 within a proper VMnet. The other routers (IOL and XR) can ping each other ...
4
votes
4answers
1k views

How can I make an internet facing TFTP server secure?

I have many Cisco IP phones that operate in the following manner (oversimplified): Negotiate with DHCP for IP, DNS, TFTP, etc. Look for SEPXXXXXXXXXXXX.cnf.xml configuration file on TFTP server ...
1
vote
1answer
437 views

WCCP and Squid, and Tunnels

I'm trying to configure WCCP + Squid with the following documentation: http://www.crypt.gen.nz/papers/cisco_squid_wccp.html I have a cisco switch, a test client, and a squid proxy server. I think ...
0
votes
0answers
33 views

Sending traps for FIB changes

I'm trying to enable sending traps for FIB changes, and I've been working on this for weeks. I finally found these commands, but my Cisco 2600 does not accept the "cef" command. Can anyone help me ...
0
votes
0answers
19 views

vpnc not work on linux backup machine

I have a very strange problem with the VPNC ( vpnc cisco client , open source vpn for cisco ) I installed the VPNC on my linux machine linux_box1 ( red-hat version 6.3 ) this machine is VM ware ...
0
votes
0answers
74 views

Port mirroring on CISCO 2960S

I am trying to do a port mirroring of the traffic for my core switch to a port on my managed switch. The environment that i have is a stacked switch, with 1 serving as the core switch and 2 serving ...
0
votes
0answers
63 views

Cisco VPNC + get time out on target machine

I am running VPNC on linux red-hat machine ( version 6.3 ) , And my VPN connection seems to be timing out after 10-20 min . If it goes unused for more than a few minutes, I have to kill VPNC and ...
1
vote
0answers
177 views

VPNC cisco + quick mode response rejected error

I installed a vpnc on my Linux red-hat machine version 6.3 Most of the cases vpnc work well ( connecting to gateway customers by vpnc ) But against some particular customers ( Cisco gateways ) , ...
0
votes
0answers
94 views

cisco VPNC - why vpnc not block the LAN interface?

Subject : VPNC allow local LAN access in spite we activate the vpnc on my Linux red-hat machine As all know when we want to activate the cisco vpn on win machine , once vpn is active then the LAN ...
0
votes
0answers
113 views

Cisco 881W Zone Base Firewall

I cannot ping an Internal system to a DMZ system. I have checked the policy map session and everything time I do a ping the match shows the first ping was matched but none of the other pings were ...
0
votes
1answer
48 views

How to view traffic operating on a specific port without plugging into egress interface? (Cisco IOS)

I'm trying to track down what host is infected with ZeroAccess on my network. It runs on ports 16464-16471. I would like to find this host without having to connect my laptop to the egress (WAN) ...
-6
votes
1answer
87 views

Is running our workstation network through VoIP handset best practice? [closed]

We are purchasing a Cisco UC VoIP phone system and the handsets come in two flavors: 100mb and 1gb. Both allow network pass-through of another device such as a printer or workstation. Is this an ...
1
vote
0answers
24 views

How can I get QoS over a WDS bridge on Cisco WAP551

I have two Cisco WAP551 devices bridging two physical locations wirelessly across the street from each other (200 feet, line-of-sight through a window). This is replacing a much, much older wireless ...
0
votes
1answer
189 views

CISCO: conditional port-based NAT (policy-based PAT)?

I have a problem to nat-translate inbound http packets to different local_ips based on some condition (like dscp bits set). Actually the dscp bits get set on the incoming trafic using NBAR. I hope ...
1
vote
0answers
53 views

is there any cisco-compatible ipsec+comp module?

I am looking for a waqy to establish an Ipsec tunnel(with lzs-compression enabled) between a cisco router and a host(using strongswan or sth else). I can establish a tunnel without lzs-compression. ...
0
votes
0answers
270 views

Will the Linux Open VPNC Client connect to checkpoint or nortel VPN gateways?

Site: http://www.oucs.ox.ac.uk/network/vpn/linux-solaris/index.xml?ID=VPNC What is open VPNC: VPNC is an open-source VPN client for Linux and other Unix systems which is compatible with the OUCS VPN ...
0
votes
0answers
43 views

CISCO VPN CLIENT + on linux machines

I have try to install the VPNC Cisco client on many linux red-hat version For example Linux 5.2 ( red-hat ) Linux 6.2 ( red-hat ) Linux 6.3 ( red-hat ) And on different kind of kernel versions ...
0
votes
1answer
59 views

netscreen sn25 vs cisco asa5505 speed

Current i have 2 server direct connect to 1 juniper netscreen sn25 firewall then go to internet, the intel 350 nic is setup at 100mbps (which should be able go up to 1000mbps). the problem is this ...
0
votes
0answers
32 views

install cisco VPN client on linux in place on WIN XP [duplicate]

I have win XP with VPN client version - Cisco 5.0.01.0600 Now we want to replace the WIN XP with linux machine , red-hat version 5.x or 6.x , My question is , what the equivalent VPN version that I ...
0
votes
1answer
508 views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
0answers
159 views

Routing through SonicWALL SSL-VPN and Cisco L3 Switch

In the image above, we use the SonicWALL NSA 3500 at our gateway and handle VPN with its SSL-VPN. Our Layer 3 Cisco switch is our core network switch and handles about a dozen VLANs. Most VLANs ...
0
votes
1answer
67 views

Installing new Cisco MIB

I'm having issues exposing firewall information via OIDs on a Cisco IOS device (c7200-ik9s-mz.124-25c.bin). It seems like either the IP-ACCESS-LIST-MIB or the CISCO-ITP-ACL-MIB would supply that ...
0
votes
0answers
44 views

Is there a simple command to delete multiple ip sla policies?

I have a Cisco 819 router and on it there are a lot of ip sla policies. when I run the sh runcommand I get the following; ip sla auto discovery ip sla 2 http get http://www.facebook.com cache ...
1
vote
1answer
290 views

Name resolution failing on Cisco 800 Series

Our ISP is currently in the middle of a major DNS outage and as a result name resolution through the nameservers they provide is not working. I'm trying to add Google DNS servers to our Cisco 800 ...
0
votes
0answers
96 views

Unable to monitor Cisco route tables with SolarWinds

I recently switched from scanning a linux-router based network hosted on CORE emulation software, to scanning Cisco IOS routers hosted on a GNS3 emulation with SolarWinds. Everything seems the same, ...
0
votes
2answers
100 views

Trouble polling for OID values within tables

I'm very confused about which OIDs are supported by my device, specifically for the CISCO- IPSEC-FLOW-MONITOR-MIB. It seems like some OIDs within that MIB are supported, while other OIDs aren't. ...
1
vote
1answer
95 views

VPN Tunnel set up Issues - Cisco WRVS 4400N to Server 2008 R2behind ASA5505

I was wondering if someone could help with a scenario i have that i am not sure how to set up regarding a VPN tunnel set up. I have a Cisco WRVS4400N business router , and on this device , i need to ...
0
votes
0answers
33 views

Is it possible to hairpin on Cisco 851W IOS 12.4(15)T9 and how?

I need machines on the LAN to be able to access by the external address or hostname. If it can't be done, then just by hostname is OK as well, so I thought of just doing it through DNS on our internal ...
0
votes
0answers
169 views

Cisco 861 - Unable to traceroute

I'm having an issue with my Cisco 861. I'm unable to traceroute to any ip address from the router, even the next hop. Can anyone suggest possible causes. Apologies for the censoring but I won't take ...
0
votes
0answers
60 views

What should I consider when I plan a meaningful monitoring for SNMP Switch (SG200-50)

I am currently planning the monitoring of a switch and would like to consider beforehand what I need to be closely monitored in order to obtain errors and warnings are also useful. I have a Cisco ...
0
votes
0answers
220 views

Cacti Getting SSID Stats from a Cisco 5508 Wireless Lan Controller

I'm trying to get some statistics from a Cisco 5508 WLC via SNMP using Cacti 0.8.8a, however I'm having some issues - 1) Trying to get total number of connections per SSID - I've written a bash ...
0
votes
0answers
66 views

NO_PROPOSAL_CHOSEN error while connecting

crypto isakmp policy 1 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group vpn key cse123 pool SDM_POOL_1 acl 100 netmask 255.255.255.0 crypto isakmp ...
0
votes
2answers
747 views

Physical Interface VS Multipoint Subinterface in Cisco Frame Relay

I am new in learning about Cisco Frame Relay. And I am having trouble in understanding the difference between using physical interface or multipoint subinterface, because it looks the same to me. ...
1
vote
0answers
613 views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
0
votes
0answers
71 views

Connect Cisco IP phone on two Asterisk sip servers

I have a cisco ip phone with sip firmware v9.3.1. I want to connect two lines on two seperate Asterisk sip servers. In section i can only define USECALLMANAGER (in node) and not the IP of an ...
0
votes
1answer
423 views

Configure SIP Trunk from Lync 2013 to Cisco Call Manager v6

I'm implementing Enterprise Voice for Lync, and I have to get Lync to work with a antiquated Cisco Call Manager version 6. The SIP trunk has been created but I get this error on my Lync servers: A ...
0
votes
0answers
130 views

Preserving VPN Flow on ASA + netsh

I have a tcp connection established over a site-site VPN and when the VPN drops it causes errors on the client when sending after the tunnel is re-established. When having this problem before, ...
1
vote
0answers
121 views

Connect Cisco 7975 VOIP phone to two separate Asterisk PBX's

I have a Cisco 7975 registered on an Asterisk SIP server, and I want to register a second line on a second (different IP) Asterisk SIP server. I tried to do this with firmware version 8.5.3 but it ...
0
votes
1answer
56 views

IP SLA: tcpConnect frequency and jitter codec

I am trying to generate different kinds of traffic with IP SLA on a c7200 router, I am using the simulation software GNS, so if required I can change my router. My aim is to generate congestion to ...
0
votes
0answers
284 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
1
vote
2answers
229 views

Cisco IOS: Prevent Inter-VLAN IPv6 Network Solicitation messages

I have a Cisco 3825 router that (among other things) functions as a gateway to the internet. I have two VLANS, but only one of them should have access to the internet. VLAN10: network = ...
0
votes
1answer
222 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
-1
votes
1answer
305 views

blocking all countries except 4 at vlan level, will cisco asa 5505 hold?

First our server hold an application that only serve 4 countries. We had a repeated ddos from bonnet so would like to block all traffic except for the 4 countries that the application serve. the idea ...
0
votes
2answers
113 views

Open HTTP Protocol Cisco ASA

I would like to know if it's possible to open HTTP protocol (whatever the port) for one of my subnet to the outside on Cisco ASA 5510 v9.1(4) (ASDM v7.1(5)? I guess I will have to play with service ...
0
votes
0answers
56 views

Cisco IOS log packets dropped due to no NAT entries?

I use access list logging currently, and update the access list to match the NAT table, and then the access-list deny any any log command is used for logging packets that were not allowed. However, I ...
1
vote
2answers
116 views

CISCO - host header forwarding possible?

Is it possible to realize a kind of policy-based routing in cisco ios, which forwards 80port requests on external IP to internal hosts based on host header information (http address). So if somebody ...
1
vote
3answers
2k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...