Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

-1
votes
1answer
29 views

Dynamic NAT configuration

I am using two routers and one host (computer), I connected fast Ethernet 0/1 of router A with the host and fa0/0 of the router A with the router B I have configured gateway as last resort on both ...
0
votes
1answer
933 views

VLAN & WiFi & DHCP with Cisco SG200

I'm trying to configure a small business network with one Cisco SG200-26, a Linux server and two TP-Link TL-WA801ND. I have set up the APs to have two different SSIDs, Public and Staff, and have ...
0
votes
1answer
1k views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
0
votes
0answers
15 views

VLAN Mapping on Brocade

We are moving from a Cisco 6509 to a Brocade 6650 for our core router. Some of our traffic is trunked through a link that belongs to someone else and they said we can only use VLANs 909-912. Our ...
0
votes
1answer
1k views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
0
votes
0answers
16 views

Cisco 3850 and 2602I Access Point not Broadcasting

I have a Cisco 3850 WLC and a 2602i access point in lightweight mode. The AP is showing up as registered in the WLC but no SSID's are broadcasting on the AP. I have enabled telnet on the AP so I know ...
2
votes
0answers
27 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
0
votes
2answers
368 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
1
vote
1answer
3k views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
3
votes
2answers
923 views

Cannot ping outside Fa4 on cisco 871w Router (SoHo)

After starting fresh after a write erase and a reload on a cisco 871w. I cannot ping outside of the wan (fa4). I gave vlan1 (default) an ip because apparently the built in "4 port switch" is a layer ...
1
vote
1answer
26 views

Cisco Router NAT does not work

I have an active internet connection from provider on festethernret0 and also have vlan1. I need to have an internet connection from festethernret0 to my vlan1. I am doing it this way: access-list 2 ...
-1
votes
0answers
18 views

How important is to keep up to date with cisco certifications and training books? [closed]

A coworker gave me book on Cisco CCNA ICND exam 640-811 training. I'm new to networking and thinking about getting certification if this book has enough relevant information to help me pass.
0
votes
2answers
1k views

XenServer 6.0.2 and Cisco 3550 vlan configuration

I am running a couple of xenserver 6.0.2 hosts with multiple vm's on them. All the xen hosts have 4 physical network ports connecting to the cisco. Each port is untagged in xen but is tagged to a vlan ...
0
votes
1answer
1k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
0
votes
0answers
9 views

CISCO - organize NAT with 2 WANs, 2VLANs and failover (using PBR / ip SLA )?

We have a CISCO 800 series connected to 2 WAN channels, and 2 VLANs. The idea is to have VLAN1 always use WAN1 channel, and VLAN2 use WAN2 channel, but in case of connectivity failure switch to a ...
1
vote
4answers
3k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
0
votes
0answers
8 views

Cisco SF500-24P Image Upgrade to 14088 fails

I try to upgrade the system to 1.4.0.88 and it fails with error Status: Copy failed Error Message: Copy: SW code file is over sized I am using HTTP for the upgrade. Any suggestions?
2
votes
3answers
6k views

Cisco ASA rewriting SMTP traffic to prevent mail sending

We have a Cisco ASA 5505 (version 8.0(4)) that is preventing outbound SMTP traffic; testing with telnet shows connections on port 25 are having everything converted to *s while the same does not ...
0
votes
0answers
25 views

Cannot ping gateway (Intervlan routing)

I have two switchs cisco 2960 (sw-120 and IDF1-SW) and router cisco 1841 (IDF1-R). fa0/24 at sw-120 connected via fa0/7 at IDF1-SW fa0/1 and fa0/24 at IDF1-SW switched to trunk mode fa0/24 at ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
0answers
13 views

CISCO IOS NAT existing network into VPN private IP address

I have a CISCO IOS router with two interface, int0 for internal network and int1 for internet. I have site-to-site VPN as below and wondering how can I configure NAT. [192.168.1.0/24] = existing ...
0
votes
0answers
7 views

LACP between 3 vendor switch stacks

i have 3 vendors: Dell, HP and Cisco and their switches: Dell 8132F HP A5120 Cisco 2960-S On every pair of switches is defined stack: Dell = Peer-link (MLAG, not really a stack) HP = IRF Cisco = ...
0
votes
1answer
14 views

Port Forwarding with Cisco SR520 IOS

I've been tasked with setting up port forwarding for access to remote desktop on a server. I'm having trouble making it work. Server IP 192.168.1.20, port 3389 The router is a Cisco SR520. It is ...
1
vote
1answer
25 views

VPN Tunnel Migration

I need to do a VPN tunnel migration from 1 Cisco Asa to another one on 20 remote routers. I wrote a little script that can automaticaly migrate the routers to the new ASA. However, when I run this ...
1
vote
1answer
1k views

cisco CUCM 8.6.x configuration export

We currently have a Cisco server running CUCM and cannot get access to the system due to a 'Database communication error' received when attempting a log in to CUCM homepage. Is there any way to ...
2
votes
1answer
40 views

OSPF among Cisco and Juniper

Below are snippets of ospf configs among Cisco and Juniper devices. However, not all are seeing each other in "show ip ospf", especially the redistributed routes into ospf. I'm sure the router id(s) ...
3
votes
3answers
8k views

Why do I start at privilege level 1 when logging into a Cisco ASA 5510?

I have created a test user that is set to privilege 15 in the config: username test password **************** encrypted privilege 15 When I log in to the ASA 5510 I am in privilege 1 according to ...
0
votes
2answers
1k views

Limiting Bandwidth per port Cisco router

Let's say a businessses purchases a sufficently fast internet connection (such as 60Mbps cable connection) and VOIP quality is pretty good for the most part. The only thing I would be worried about ...
0
votes
1answer
2k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
0
votes
2answers
2k views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
0
votes
0answers
14 views

Why two network with NAToverload not communicate?

I have two private networks: 192.168.1.0 192.168.2.0 These networks communicate with each other via static routing, but when I set up the NAT overload, they don't communicate. Why? I examined the ...
5
votes
1answer
107 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
6
votes
1answer
4k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
0
votes
1answer
50 views

Low TCP down speed on network interface

We have HP Proliant ML370 G6 server with 4 gigabit ports on it. 3 ports work well, but 1 (LAN1) cuts TCP Down traffic. TCP Up and UDP is ok. Here is the speed test result. Here is the windows monitor ...
0
votes
1answer
920 views

Find client IP connected to VLAN from Cisco Catalyst 3600 by SNMP

I would like to get using of course SNMP, list of client IPs connected to VLAN in Cisco Catalyst 3600. So far, I have pseudo-algorithm made by me which obtains those IP addresses, but I am not sure ...
1
vote
2answers
45 views

Is it possible to make a connection between a Linux router and AWS Direct Connect without the need of physical hardware?

We bought one Amazon Direct Connect leased line to connect our datacenter to Amazon EC2 instances. Amazon has configurations for Cisco or Juniper Hardware ...
0
votes
0answers
11 views

CISCO 887va-w-e-k9 Configuration

I am trying to configure a CISCO router using the GUI. When I click on WiFi, CISCO remains stuck with the message, "Obtaining connection details of Wi-Fi interfaces". What am I missing?
1
vote
1answer
23 views

CISCO ASA: Add specific command to a privilege level

i am facing the following issue, created a new account with a "read-only" access on a CISCO ASA 5510. This account will be used in a script that will back up the running-config of the ASA. the ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
9
votes
2answers
6k views

Is my Cisco switch port bad?

I've been chasing a packet-loss and network stability issue for a handful of end-users on an internal network for the past few days... These issues surfaced last week, however the location was struck ...
1
vote
1answer
974 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
0answers
23 views

Cisco 2621XM Configuration with Comcast Business Modem

I have a Cisco 2620xm router that I have ran into trouble getting it to connect to a comcast modem/gateway for internet service. The router and modem used by Comcast is a DPC3... The interfaces on the ...
1
vote
1answer
47 views

Reasons for missing network access on Cisco switch

I'm having problems with a Cisco Catalyst 2950 switch, specifically I'm unable to connect to the router/get internet access through it. The setup is as follows: WAN connected to Router (MikroTIK ...
0
votes
0answers
18 views

Update Cisco 3750 for BGP

I have a Cisco 3750 switch that I use at my data center w/ a failover switch as well. Currently getting a blended bandwidth from the data center instead of BGP. From time to time I'll have them update ...
0
votes
2answers
2k views

Setting up VPN on CISCO ASA with private IP on outside interface

I am trying to setup our ASA 5510 to allow IPsec(IKEv1) access to the inside network through VPN. The hard part about our setup is the outside interface does not have a public IP address assigned to ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
1
vote
0answers
16 views

Ucce 8.5 ICM - How to extract SIP Header in ICM script

We are collecting the sip headers from CVP Ops console. We are setting variables using the mid(call.sipheader,Startlocation,Length) If the string length changes, the values are not correct. Is ...
1
vote
4answers
5k views

Difference between trunk and tagged port

I am reading some wikipedia articles and RFC 5517, studying VLANs, and I don't recognize the difference between a trunk port and a tagged port. From what the material I am reading says, a tagged ...
1
vote
2answers
1k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
0
votes
2answers
73 views

Cisco - LACP between two Catalyst switches (trunk links)

So I just put up a LACP between two Cisco catalyst switches. Snippets of configuration are as following: [3550 switch - port 22 and 23 are connected to 2950 and 24 is to router] interface ...