Cisco is a provider of switches and routers to commercial consumers. Cisco devices run IOS or NX-OS operating systems. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
0answers
11 views

Cisco 6500 - spike of DHCP_SNOOPING-4-QUEUE_FULL causing clients to lose connectivity

Today we had an incident that started with people complaining they couldn't connect to our wifi after coming back from lunch. Long story short, clients were no longer able to get IP addresses from ...
0
votes
1answer
1k views

Find client IP connected to VLAN from Cisco Catalyst 3600 by SNMP

I would like to get using of course SNMP, list of client IPs connected to VLAN in Cisco Catalyst 3600. So far, I have pseudo-algorithm made by me which obtains those IP addresses, but I am not sure ...
1
vote
0answers
12 views

Etherchannel / Inter-vlan issue

I have two Cisco 3850 switches (3850-1, 3850-2). I have VLANs 1,2,3,4,5 setup (192.168.1.0 - 192.168.5.0) using built in DHCP from 3850-1. 3850-1 is 192.168.1.3 3850-2 is 192.168.1.4 I have an ...
0
votes
1answer
2k views

VLAN & WiFi & DHCP with Cisco SG200

I'm trying to configure a small business network with one Cisco SG200-26, a Linux server and two TP-Link TL-WA801ND. I have set up the APs to have two different SSIDs, Public and Staff, and have ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
-1
votes
1answer
20 views

What kind of emulator can i use to learn Cisco Router Configuration? [on hold]

I am going through my CCNA materials. I came across this one topic called configuring the router. Now, i don't have a Cisco Router but i still want to go through the commands and see the results live. ...
0
votes
0answers
5 views

Querying counters and interface name from cisco router is getting wrong results

using cisco switches, I am trying to connect the output from ifHCInOctets to the names of the interfaces via ifName and comparing it to show interfaces counter. I use the last number behind the ...
0
votes
2answers
31 views

Why is my Cisco 1941 not able to perform higher than 60Mbps consistently?

My office has a 150Mbps synchronous fiber, burstable to 250Mbps. Based on a document I found, my Cisco 1941 is capable of 153Mbps MAX: http://www.cisco.com/web/partners/downloads/765/tools/...
1
vote
1answer
16 views

Cisco ASA: Part of the traffic via VPN is blocked

We inherited the management of an ASA 5520 running IOS 8.2(3) from a previous company, and now we are switching the connectivity to a VPN from a LAN link directly connected to one of ASA interfaces. ...
0
votes
0answers
32 views

Cannot ping wan gateway from cisco router

We recently had a new Ethernet connection installed and were given the WAN IP address, subnet mask and gateway needed for the connection e.g. IP 1.2.3.50 MASK /30 GW 1.2.3.49 When I put ...
1
vote
0answers
17 views

Cisco ASA VPN DH Groups for AWS VPC

AWS provides a neat function in its VPC that exposes a VPN service. I've configured this, and confirmed that it functions. Our customer is using a Cisco 5500 Series ASA appliance to connect to the ...
4
votes
1answer
1k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
0
votes
3answers
2k views

Configure hairpinning on Cisco 871 IOS 12.4(15)T4?

I'm a newbie to IOS. In the past I've used consumer routers which seem to have the smarts to automatically route requests to internal hosts addressed by their public name back to the internal network. ...
1
vote
3answers
1k views

How accurate is cisco's “show proc cpu history” compare to snmp's cpu loading?

I'm using snmp to monitor my cisco router's cpu loading, but the number has a large difference with show proc cpu history's output. When sh tells me cpu loading is 7x%, the snmp only gets 2x%. Which ...
5
votes
4answers
2k views

How can I automate the deployment of cisco IOS upgrades?

I was googling this and didn't turn up anything. If you have 100 some odd Cisco routers and switches how do you push out new IOS releases? Certain not by manually logging into every device. The only ...
0
votes
1answer
2k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
1
vote
1answer
5k views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
1
vote
1answer
3k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 15:...
-5
votes
1answer
41 views

Can I use a HBA to connect to Internet

I recently got a QLogic QLE2460 network card which seems to be a Host Bus Adapter. Can I somehow use it as a network interface (NIC) between my server/workstation and a Cisco Catalyst switch with ...
1
vote
1answer
6k views

Cisco dual static default routes to WAN

I am trying to setup Dual WAN in our office because our single VDSL modem couldnt handle our web traffic any longer. So we now have two VDSL modems (Sagecom FAST2864) they cant go into bridge mode ...
0
votes
2answers
3k views

Cisco 881w AP factory reset

If I want to return to the factory IOS and configurations of the AP only, I must issue this command: service-module wlan-ap0 reset default-config right? But which IOS is going to replace the ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
0
votes
1answer
2k views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
2
votes
3answers
4k views

massive packet loss when servers are brought online

This is a continuation of ubuntu server, ssh, write failed: broken pipe . I'm starting a new question, because I don't believe the issue is isolated to ssh/ubuntu. I've got two brand new servers (...
0
votes
0answers
8 views

Convert 8.3+ NAT to 8.2 Cisco ASA

The following NAT rule setup works on 8.3+: nat (inside,outside) source static inside_net inside_net destination static vpn_net vpn_net no-proxy-arp route-lookup However, trying the same on 8.2(5) ...
1
vote
0answers
23 views

More Management VLANS for a switch

I created a management interface in vlan 99 to telnet the switch (2900 series). I also wanted to configure another management interface for the same switch from the computer belongs to the different ...
0
votes
0answers
12 views

Route between E1 devices

I have this topology and I need to configure routing between my CISCO 2911 routers to connect my devices, that are using E1 without any timeslots separation.
0
votes
1answer
37 views

Two subnets, two DHCP servers. How to stop both DHCP servers from responding to requests from both networks?

I have an environment with two subnets 192.168.1.x/24 and 192.168.2.x/24 Each subnet/network has a Cisco RV082 router as the gateway and a domain controller in each environment that also has a DHCP ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
1answer
50 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
1
vote
0answers
34 views

Cisco ASA 5505 Issue - “Flags SYN on interface..”

I've been trying to remotely configure a Cisco ASA 5505 in front of a dedicated server hosted with OVH. Unfortunately my qualifications and even experience very rarely touched on Firewalls. However I ...
1
vote
2answers
3k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) 24.53.x.x,...
1
vote
2answers
511 views

How Can You Tell If IPSec Is Installed on Cisco

How can I tell if my Cisco router has IPSec installed? I went into configuration mode to see about setting up a crypto policy, but the 'crypto' keyword isn't available. Is this an indication that it ...
0
votes
1answer
37 views

IPv6 Subnet Delegation

I'm a bit confused on how to calculate IPv6 numbering. I have a /32 now and a VPN client that wants 6 x /48 from that /32. Could someone please simplify on how I can determine the points of the /32 ...
0
votes
1answer
16 views

Packet don't flow over Cisco VPDN (PPP) when using RADIUS

I've extensively searched for everything I can think of regarding this subject online - I hope I'm just missing the obvious. This has been bugging me every evening for 2 weeks now. (It's a Cisco ...
0
votes
0answers
54 views

Cisco 1000BaseT SFP modules in a 3750 overheating

I have a 3750 responsible for switching in my DMZ. Every once in a while one of the gigabit links will go down although ios and the server attached to it report the link is up (activity lights, etc). ...
0
votes
2answers
2k views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
0
votes
2answers
52 views

“route” sub-command does not exits in “ip” command on Cisco 2960-S

I am new to cisco. I'm running a Cisco 2960-S and defined several VLAN on it. I like to use SVI feature and set 192.168.1.254 ip address for interface VLAN 1, 192.168.2.254 for interface VLAN 2 and so ...
2
votes
2answers
1k views

Problems with getting both ingress and egress Netflow data

I have a Cisco 6500 switch that I want to capture all vlan8 traffic incoming and outgoing. I talked with my networking group and they set me up with the following commands. (May not be exact commands ...
5
votes
3answers
21k views

Cisco Anyconnect: Vpn establishment capability from a remote desktop is disabled

I need to run Cisco AnnyConnect from a VM in a data center. When I run it I get this message: Vpn establishment capability from a remote desktop is disabled Can this be turned off? I saw some ...
1
vote
0answers
14 views

cisco switch: port-security mac address sticky with an access point?

how can I secure a switchport where an access point is connected? Of course I can't use switchport port-security mac-address sticky otherwise my WLAN clients would not be able to connect. Or am I ...
1
vote
0answers
18 views

Two users behind same NAT (PSK or EAP) - strongswan

I have a strongswan implementation and am running into an issue where when there are two users behind the same NAT, the second one "kicks off" the first one. I was able to resolve the issue using: ...
0
votes
1answer
1k views

Cisco 887VA Port Forwarding Not Working

I have a Cisco 887VA connected to our BT Business Broadband line. We also have another modem on a seperate connection which also handles our DHCP. The Cisco is plugged into our network switch, as is ...
0
votes
0answers
14 views

How can I set SNTP to my existing CISCO SG 300 switch network?

I have a CISCO SG 300 Switch network. The time on those switches resets every time due to power failure. How can i maintain SNTP in my network? Can I use a CISCO SG300 as SNTP server? regards, ...
0
votes
0answers
10 views

Logging NAT translation errors on Cisco IOS router? (port scanning, bogus 'established' packets)

We have a NAT setup with port mappings to internal Webservers and DNS servers. If someone tries to connect, say, to port 22 (SSH), then those packets are dropped simply because there is no static NAT ...
1
vote
5answers
12k views

Difference between trunk and tagged port

I am reading some wikipedia articles and RFC 5517, studying VLANs, and I don't recognize the difference between a trunk port and a tagged port. From what the material I am reading says, a tagged ...
0
votes
1answer
413 views

Are all SFP+ tranceivers usable for FEX between Nexus 5000 and Nexus 2000?

I am looking at building a network with Nexus 5000 parent switches and Nexus 2000 fabric extenders. The mystery at the moment is what kind of SFP+ tranceivers are required for cross-connecting racks. ...
4
votes
2answers
1k views

How do I connect 100BASE-T (iDRAC6) hosts into a Nexus 2232PP via SFP+?

I have a dilemma. I want to have an end-to-end 10 Gigabit Ethernet network over SFP+, but my Dell servers have iDRAC6 which only works on 10/100BASE-T. The closest thing I could find was the GLC-T ...
0
votes
1answer
278 views

Will an iSCSI SAN perform well when connected to a 2232PP fabric extender? [closed]

I intend to rack up servers and iSCSI SANs and connect them to 2232PPs that are fabric extenders uplinked to 5548UPs on a distribution rack. Will an iSCSI SAN perform well when connected to a 2232PP ...
2
votes
1answer
12k views

How do I get past “SFP Validation Failed” on a SFP-GE-T transceiver on a Nexus 5548UP?

I inserted a SFP-GE-T (Gigabit RJ-45) transceiver in my Nexus 5548UP and I got "access down" "SFP Validation Failed" in show interface. According to the Cisco Gigabit Ethernet Transceivers ...