Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
37 views

IP SLA: tcpConnect frequency and jitter codec

I am trying to generate different kinds of traffic with IP SLA on a c7200 router, I am using the simulation software GNS, so if required I can change my router. My aim is to generate congestion to ...
0
votes
0answers
259 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
0
votes
1answer
112 views

Cisco IOS: Prevent Inter-VLAN IPv6 Network Solicitation messages

I have a Cisco 3825 router that (among other things) functions as a gateway to the internet. I have two VLANS, but only one of them should have access to the internet. VLAN10: network = ...
0
votes
1answer
86 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
-1
votes
1answer
233 views

blocking all countries except 4 at vlan level, will cisco asa 5505 hold?

First our server hold an application that only serve 4 countries. We had a repeated ddos from bonnet so would like to block all traffic except for the 4 countries that the application serve. the idea ...
0
votes
2answers
79 views

Open HTTP Protocol Cisco ASA

I would like to know if it's possible to open HTTP protocol (whatever the port) for one of my subnet to the outside on Cisco ASA 5510 v9.1(4) (ASDM v7.1(5)? I guess I will have to play with service ...
0
votes
0answers
44 views

Cisco IOS log packets dropped due to no NAT entries?

I use access list logging currently, and update the access list to match the NAT table, and then the access-list deny any any log command is used for logging packets that were not allowed. However, I ...
1
vote
2answers
100 views

CISCO - host header forwarding possible?

Is it possible to realize a kind of policy-based routing in cisco ios, which forwards 80port requests on external IP to internal hosts based on host header information (http address). So if somebody ...
1
vote
3answers
1k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
0
votes
1answer
47 views

Cisco Aironet 1200 mode button disabled

Hey I got a free Cisco Aironet 1200 the other day and tried to restore it using the mode button but it was disabled and no one knows the password for the WAP's interface any ideas how I could get it ...
0
votes
0answers
32 views

Can't identify IPSec policy OIDs for Cisco

I'm trying to identify the OIDs of Cisco IPSec tunnel/policy information. Specifically, I would like: the local and remote tunnel addresses (where the tunnel endpoint addresses), the local and ...
0
votes
0answers
24 views

VPN User ACL not working

i´m currently testing a Cisco 886VA router for VPN usage. First off here is my client config group: crypto isakmp client configuration group VPN_PRIV key xxxxxx dns 192.168.111.100 pool VPN_POOL acl ...
0
votes
0answers
95 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
0
votes
1answer
39 views

different Native vlans on the ends of trunk link

http://www.techexams.net/forums/ccnp/53867-different-native-vlans-ends-trunk-link.html so i read this, but i still can not get traffic between two ends of a trunk link, each with a different native ...
0
votes
0answers
41 views

Multiple trunk links on firewall

I am trying to deliver VLANs (vlan 100 , vlan 200) created on a firewall http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-800C.pdf how ever i want to deliver them to two ...
0
votes
1answer
70 views

Cisco ASA 5510 nat

In my infrastructure, I natted a server on a Public IP address. Please note, the server is reachable from any outside network. My access rules are good. My isssue is from the internal network, I'm ...
1
vote
1answer
186 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
10
votes
2answers
366 views

How to safely install a new IOS image on a Cisco device when the installed flash memory size isn't enough for two of them?

Today I was updating IOS on a Cisco 877 router, and a problem came up: the installed flash memory wasn't enough to hold both the old and the new IOS images, so the new one couldn't be uploaded unless ...
1
vote
1answer
27 views

Is it possible to add description to cisco ACL?

I would like to add a description to cisco ACL. Something like: Permit all traffic from the R&D depatment to the lab. or Deny traffic from HA to R&D. Is it possible?
3
votes
1answer
211 views

Should IGMP Snooping be configured on all Layer 2 switches on LAN?

We've used Multicasting for the first time in one of our applications and whilst I have got it working, I'd really like to fully understand how it works and what's going on behind the scenes. In an ...
2
votes
1answer
85 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
1
vote
1answer
1k views

Site-to-site VPN between 5505 and 5512x

I am trying to setup a site-to-site vpn IPsec tunnel between an ASA 5512x and 5505 on an isolated network. I ran through the IPsec VPN wizard on both devices and used the same configuration but they ...
0
votes
0answers
61 views

cannot configure Port forwarding on CISCO Router and Apache Virtual Host

I have 3 websites up and running using a single apache server running on slackware and a netgear wireless router as my gateway, I use port forwarding on the netgear to map services of different hosts ...
1
vote
1answer
185 views

How to configure remote IP address audit logging for VPN clients on a Cisco 2801

We have a Cisco 2801 that also acts as a VPN Server for Cisco VPN Client. We would like to configure IP address logging so that each time a user connects using VPN we would like to log his IP Address. ...
-2
votes
2answers
75 views

How can ISPs on one continent connect to ISPs on another continent? [closed]

How can ISPs on one continent connect to ISPs on another continent? From a physical layer standpoint? Say one ISP is located in Asia and another one in Europe how would they connect their fiber optic ...
0
votes
0answers
121 views

Cisco 1841 - Acting as a PPPoE terminator?

We have 2x Fortigate 200B firewalls that we wish to operate in Active/Active HA mode - though, obviously, they cannot do this with PPPoE/DHCP enabled on the externally facing interfaces. To overcome ...
0
votes
1answer
47 views

Unable to access SBS 2008 internal Web Sites from inside LAN

I have just completed a network migration from a consumer modem/router to Cisco 887VA and all seems to be up and running aside from some last remaining issues that I can't seem to sort out. The ...
1
vote
2answers
170 views

Cisco router or ASA [closed]

Can you tell me what is the difference between having both a Cisco router and ASA appliance in a network and having only the ASA? I remember that my ISP had set a router in front of our network and ...
0
votes
1answer
168 views

Configure atftp server to reply on port 69

Problem : I'm facing to a problem with TFTP server and Cisco 79XX IP phones. When on a local network, everything is working fine, but when the TFTP server is on a public server (and phones inside a ...
2
votes
2answers
80 views

Show code for specific block in cisco IOS conf mode?

I work with Fortigate gear a lot and in the CLI it's possible to navigate to a node (say config system global then type in show and it will show me the configuration from that block. In IOS I can't ...
1
vote
1answer
107 views

How many IP addresses can I expect to block on a Cisco 5500-X Series firewall?

Considering a Cisco ASA (5500-X) firewall for our internet edge in front of our web cluster. At the moment, we use a Linux box with iptables. A log analysis system detects brute-force attacks on ...
0
votes
1answer
72 views

Cisco ASA Static NAT Rule Explanation

Here is a chunk of my configuration on my ASA: name <my_external_ip> www.testwebsite.com object-group service http_https tcp port-object eq www port-object eq https access-list ...
0
votes
1answer
104 views

Keep router interfaces isolated

Have a Cisco Router 2811 with a HWIC that gives it an extra port so I have 3 Ethernet ports. Have it configured like this: FA0/0- 192.168.1.1 FA0/1- 192.168.10.1 FA1/0- 10.0.0.1 (outside) All that ...
2
votes
1answer
79 views

Cisco Networking fiber to fiber

I have a cisco 892 router and a cisco catalyst 2960 switch; both have the SFP fiber module. The plan is to extend the network to the switch using the fiber ports. (Two buildings are connected by ...
1
vote
0answers
94 views

Cisco UCS C22 M3 Rack-mount BIOS Recovery

So my Cisco UCS Server's BIOS is corrupt and needs reflashed. When it boots it simply gives me the recovery instructions such as put the recovery.cap file in the root directory of a USB drive then ...
1
vote
1answer
625 views

Shouldn't we exclude a static IP from the DHCP pool?

In my office, I have a printer with static IP 192.168.0.254/24. Normally, it should be excluded from the DHCP pool in the router. So I just set the DHCP pool to be in the range of 192.168.0.2/24 - ...
0
votes
1answer
66 views

Cisco switch restart doesn't reload config

Something really strange happened to me today. I was configuring a 3750 switch and halfway through the changes I messed up. So I did what I've always done, unplug the power cable from the switch and ...
0
votes
0answers
26 views

Restarted BGP routers have no routing updates?

I configured 3 cisco c3725 Routers in GNS3 and I setup BGP and it was working fine at first. All 3 routers are connected to each other and each router has some loopback interfaces wich are the ...
3
votes
1answer
2k views

Configuring Cisco AIR-CAP-2602i as the only WLAN AP on the network

I apologise in advance I'm about half way through CCNA so I may be using incorrect terminology. I've been tasked with putting in a new network at work, topology as follows: Router Cisco 887VA-M-K9 | ...
-3
votes
1answer
203 views

how publish multi web site with Same port 80 in multi inside web server with cisco router?

I have a problem in publish Multi web Site in multi web server with a single Public IP and all of these Web Sites use Same default port of 80 but have different URL address . I want publish all of ...
0
votes
0answers
97 views

ASDM - ASA Issue

This is actually a two part question, if anyone has had experience with the issue and could help me out it would be greatly appreciated. Backstory: Using GNS3 with ASA 8.4(2) and ASDM 7.1(5). I've ...
2
votes
2answers
76 views

Cisco Switch went mad

tI have a Cisco SLM2048 Smart Switch which I can't access anymore. The switch is working just fine but: I can't reach it by web interface Doesn't seem to be able to reset it, even if I hold reset ...
0
votes
0answers
91 views

cisco uc560 newly created extensions can't dial out

Our ucs560 is working fine, today I needed to add a few new users, our internal user extensions use the range 820 thru 867 or so. I added the new extensions 880-884. Internal calls back and forth ...
0
votes
3answers
86 views

Vmotion issues between hosts

Just added two new hosts to our infra, there is an issue with vmotion, the test vm moves over to the hosts no problem but I cannot ping or connect to the vm from outside vsphere once I move it too the ...
1
vote
1answer
59 views

Is there any advantage or reason with vertical chassis switch?

When I was looking for Cisco 6500 series chassis, I saw that there are horizontal(6509E) and vertical chassis(6509VE). Although 6509VE has same(or almost same) chassis height as 6513E, but 6509VE ...
-4
votes
1answer
58 views

what is a switch default gateway [closed]

I have two questions, please help layer 2 switch doesn't know how to routing, but if I set the default gateway in the switch, how can it "routing" or how can it forward the packet to the default ...
-2
votes
1answer
248 views

Layer 2 and 3 Network and Topology discovery of blackbox network [closed]

I have been given a company network to perform layer 2 and layer 3 network discovery. I have to find out the network topology and infomation about network equipments including switch, router, server, ...
0
votes
0answers
109 views

Cisco 1602: rewriting startup-config from terminal

How do I rewrite startup-config on a Cisco 1602 router without affecting the running-config? Outgoing connections from the router (scp, http) are not allowed. I'm not connected to the serial port, ...
0
votes
0answers
76 views

Need help troubleshooting QuickVPN hang

have QuickVPN 1.4.0.5 on XP Pro SP3 and am trying to connect to a RVS4000 using its public IP address. QuickVPN gets to "Connecting..." and hangs. The context menu on the systray icon won't come ...
0
votes
1answer
4k views

Cisco ASA 5505 - NAT or Port Forward for SIP / VoIP ver 8.4

I just had an NEC PBX installed that lets me use SIP trunks for VoIP services, My gateway is a Cisco ASA 5505 running 8.4 and I only have one public/static IP Addresses. So far, my trunks are ...