Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
10 views

Rate Limit VLAN interface | Cisco Nexus

How to do QoS in cisco nexus for Rate limit. In cisco Routers , we will be creating a policy map and calling it in service_policy in VLAN Interface Ex: Policy-map Policy_2Mbps class class-default ...
0
votes
0answers
5 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
-1
votes
1answer
25 views

How to run a separate internet connection between two switches over fiber

At my office we currently have a data center where our corporate connection runs from a core switch over a fiber connection to a closet with a few switches in it on the other side of the building. I ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
0answers
9 views

What is better, DHCP on Cisco Meraki MX64 or Windows Server 2012R2? [on hold]

I'm new to the Cisco world and I would like some advises. Currently I'm configuring a Windows Server for a small bussiness (less then 50 users). Normally the Windows server would have the AD, DNS and ...
0
votes
1answer
15 views

Cisco 887VA router ADSL configuration

I am attempting to setup a Cisco 887VA to connect out to the internet via a basic ADSL connection. I have configured it to the best of my ability but its the first one I've ever done and I think I may ...
0
votes
1answer
27 views

DHCP on Meraki MX64 or Windows Server 2012R2?

I'm new to the Cisco world and I would like some advises. Currently I'm configuring a Windows Server for a small bussiness (less then 50 users). Normally the Windows server would have the AD, DNS and ...
5
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
3answers
14k views

How do I change my password on a Cisco Catalyst 2960 switch?

I was given a username and a temporary password on a catalyst switch and I can't figure out how to change my password... Upon googling, I found this but when I raise my privileges to 15 by typing ...
4
votes
1answer
1k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
1
vote
1answer
63 views

Trouble Shooting errdisabled Cause

I have a Cisco Catalyst 3850. I added a network module with 4 gbic for fiber connection. The module is not showing any lights on either side of the connection. After the searching the depths of the ...
0
votes
0answers
24 views

How to allow authenticated User to relay on a Cisco ESA C170 (iron port)

I'am trying to configure my ESA C170 and all works as expected. But now I want to add support for relay function for authed external user. I add a SMTP Auth Profile against LDAP that works. Next Step ...
1
vote
3answers
1k views

How accurate is cisco's “show proc cpu history” compare to snmp's cpu loading?

I'm using snmp to monitor my cisco router's cpu loading, but the number has a large difference with show proc cpu history's output. When sh tells me cpu loading is 7x%, the snmp only gets 2x%. Which ...
0
votes
1answer
15 views

Cisco 1921, SMTP, and NAT on multiple Exchange Servers

In a LAN environment, I have 3 exchange servers that have been deployed for high availability and failover in case one of the 3 servers becomes unavailable. Currently, my NAT settings only send ...
0
votes
0answers
22 views

CISCO router VPN configuration

I have a site to site VPN connection configured between 2 offices. The remote site connects to the internet via the Head office. However, this has been configured to connect through a proxy server. ...
1
vote
0answers
11 views

GNS3 - Connecting Emulalated IOS to TWO PHYSICAL networks

I have a CISCO c3725 router on GNS3 connected to two different and separate unique LANs via the CLOUD/HOST icon, attaching each of the virtual CISCO c3725 to my computer's physical NIC (NIC 1 and ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
1
vote
1answer
4k views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
1
vote
1answer
3k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
3
votes
2answers
14k views

Factory Reset Cisco SPA504G without admin password

I've been trying to factory reset some SPA500 phones, specifically the 504G but the old provider has locked out everything. I need to reset about 50 phones for use with a new service. I've man in the ...
0
votes
1answer
2k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
1
vote
5answers
5k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
0
votes
0answers
13 views

Checking RadHuntGroup And Radgroupcheck to login specific NAS

I am actually setting up a FreeRADIUS Version 2.1.12, server that will manage authentication Users Cisco Switchs in company .. and i have one problem : I need to create some accounts that can be ...
0
votes
1answer
33 views

Cisco 3750G: Tagging and untagging traffic on a port

I have the following setup: [phone]-~-~-~-(port-10)[Cisco 3750](port-24=trunk)----[servers] I want the phone to talk only on vlan (say 1940), where-as Cisco switch to untag/tag its traffic, as goes ...
0
votes
1answer
2k views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
7
votes
0answers
125 views

How come one of my switches is off by two minutes in spite of ntp?

I just noticed by pure chance that one of my Cisco 4500 switches has its clock going wrong: it is more than 2 minutes behind in spite of seemingly functional ntp. In my opinion, even a single second ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
1answer
17 views

How can I have one network card that allows traffic between two private networks?

This is a a question about a private network. I have two servers (Linux), srv1, srv2, each has one NIC. I have two switches (Cisco 3750), sw1, sw2 The servers are on two different subnets. srv1 is ...
1
vote
0answers
25 views

How to access LAN IP Addresses : Cisco VPN Client [closed]

I have successfully configured Cisco VPN Client and connected. And allow LAN Access. I don't know how to connect LAN IP Addresses. I was trying to connect with Remote desktop connection, it's asking ...
0
votes
1answer
15 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
0answers
18 views

Port Forward on Cisco ASA 5512-X

i would to improve port forward from an external host to an internal network, on my ASA. The network and the host are on two different interfaces, the internal network is on the internal interface ...
2
votes
2answers
1k views

Problems with getting both ingress and egress Netflow data

I have a Cisco 6500 switch that I want to capture all vlan8 traffic incoming and outgoing. I talked with my networking group and they set me up with the following commands. (May not be exact commands ...
0
votes
0answers
18 views

Cisco asa 8.4 PAT with static NAT

I am trying to make sense of the changes that Cisco has made to NAT on ASA > v8.3. I have a network which is being PAT'd to the outside interface address, and want to add a static NAT from the outside ...
0
votes
1answer
48 views

Ip addressing for serial routing

I have the following packet tracer diagram: I have range of ip address : 10.0.0.0 - 10.0.255.255 I need to assign ip addresses from this range to the routers' serial interfaces as well as subnet ...
0
votes
0answers
14 views

Blocking / barring numbers on a Cisco SPA303 IP Phone

Is it possible to block numbers using the SPA303 Configuration tool accessible on the internal IP address? If not, how can we block specific numbers from coming through on our lines? Doesn't seem to ...
1
vote
2answers
3k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
1
vote
1answer
19 views

DHCP snooping on distribution layer stops cliens on access from getting ip address

Here is my topology: sw1(gi0/1 trusted port)->sw2(gi0/1 trusted port)->core-sw(gi0/1)->DHCP_server at the beginning i only configured sw1: ip dhcp snooping ip dhcp snooping vlan 18 int ...
0
votes
2answers
37 views

Is this the proper way to utilize route-maps for intervlan routing?

screenshot of network map The network is pretty simple. Router-on-a-stick for nat/WAN access, Layer 3 switch for intervlan routing. Router: ip nat inside source list nated-nets interface ...
0
votes
1answer
1k views

Cisco 887VA Port Forwarding Not Working

I have a Cisco 887VA connected to our BT Business Broadband line. We also have another modem on a seperate connection which also handles our DHCP. The Cisco is plugged into our network switch, as is ...
0
votes
2answers
2k views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
0
votes
3answers
710 views

Is there a Cisco IOS command for finding out the serial number of a switch / router?

I am doing an inventory of all of our switches and I was wondering if there's a Cisco IOS command that will return the serial number for a switch and router? Thanks in advance!
0
votes
1answer
1k views

Cisco Nexus syslog messages format?

I'm trying to normalize Syslog messages generated by a Cisco Nexus box. Problem: Messages have the following format: <189>: yyyy mm dd hh:mm:ss UTC: text This is not a standard Syslog message, no ...
1
vote
1answer
37 views

Figuring out the most efficient use of an ip range

I am working with Packet Tracer atm and have 3 subnet plans : assigned(management(104users) staff(43 users) admin(35 users)). I have an ip address range of:38.191.0.0 and subnet mask of ...
0
votes
0answers
30 views

Cisco ASA PBR and multiple ISPS for multiple SIP Providers

Have a question about policy based routing on my Cisco ASA 5515 running 9.5 and think despite it being available in this software version that I might be screwed. I have an asterisk PBX behind the ...
3
votes
2answers
1k views

Deploy MSI silently - Cisco CAD Client Configuration

Deploy a MSI using Group Policy. Sounds easy right? This MSI (CAD Client Configuration.msi) prompts for the IP address of our UCCX server. Most MSI's I have dealt with I can install silently uisng ...
1
vote
3answers
16k views

error “illegal software format” in upgrade fw .ros file of Cisco Sg200-26 small business smart switch

I own 2 cisco switches small business switches. they are both SG200-26 26-port gigabit smart switches. One has fw ver. 1.0.0.19 , while the other has version 1.1.1.8. I am now trying to upgrade ...
1
vote
1answer
22 views

If you switch an interface's vlan does it stop traffic?

I'm configuring a cisco catalyst switch and I want to change the vlan for the all of the ports on the switch away from the default vlan 1. I know how to change a vlan on an interface, I want to know ...
0
votes
2answers
51 views

Router doesn't allow loopback, can I use MS DNS to internally forward my .com to the local IP of the IIS server?

My websites are all on public IP x.x.x.110 My dev computers wan IP is x.x.x.111 From within the server, I can type my sites .com address into IE and it loads fine. But if I try them on my other ...
0
votes
1answer
25 views

Debian as VPN Server for Cisco ASR

I've to set up a Debian Server who should connected by a Cisco ASR via Side2Side VPN with a preshared key. Tried Open-VPN, but found out that both sides need Open-VPN. So the Cisco ASR is the VPN ...
0
votes
1answer
1k views

Find client IP connected to VLAN from Cisco Catalyst 3600 by SNMP

I would like to get using of course SNMP, list of client IPs connected to VLAN in Cisco Catalyst 3600. So far, I have pseudo-algorithm made by me which obtains those IP addresses, but I am not sure ...