Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
3answers
1k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
1
vote
3answers
2k views

Issues getting a Cisco WLC 5508 to find AIR-LAP1142N

hoping someone can help me with a problem here. I'm attempting to setup a test (loan from Cisco) wireless network. Here's what i've got/done: 5508 Controller - Service Port IP set to 10.74.5.2 /24. ...
0
votes
2answers
47 views

Limiting IP access geographically

I don't want to cause any offence here, but whenever I take a look at the logs for my servers I can see I am constantly having IP addresses in China try to login to my machines, hoping to get access ...
4
votes
3answers
6k views

Cisco Anyconnect: Vpn establishment capability from a remote desktop is disabled

I need to run Cisco AnnyConnect from a VM in a data center. When I run it I get this message: Vpn establishment capability from a remote desktop is disabled Can this be turned off? I saw some ...
0
votes
2answers
29 views

Unable to add allowed VLANs to trunk and port not trunking

I am unable to add any VLANS to be allowed on trunk and the port is not trunking. I've tried: Switch0#configure terminal Enter configuration commands, one per line. End with CNTL/Z. ...
0
votes
0answers
20 views

Include multiple sub-interfaces in Cisco ASA for VPN tunnel

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces. Say, In Cisco ASA 5550, I created multiple subinterfaces with VLAN ID as below: Inside, int0/1 : ...
2
votes
1answer
24 views

Unable to remove a port from default VLAN

I am unable to remove a port from my default VLAN. I've tried: Switch(config)#interface FastEthernet 0/1 Switch(config-if)#no switchport access vlan 1 It has no errors but when I check it using: ...
2
votes
4answers
2k views

How to backup the configuration of a cisco switch and ASA to an SMB windows share?

How do I backup the configuration of a Cisco switch and ASA to an SMB Windows share? I have full enabled admin through SSH. what would be the full command to save it to an SMB share? Is it "show run, ...
1
vote
0answers
28 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
0
votes
0answers
12 views

New Cisco AIR-1602I-E-K9 AP not working on some ports

I have had this problem since last friday but cannot solve it. I gave it a lot of thought so posting here is my last option/hope. We recently aquired 5 new Cisco AIR-1602I-E-K9, I configured them all ...
0
votes
2answers
994 views

XenServer 6.0.2 and Cisco 3550 vlan configuration

I am running a couple of xenserver 6.0.2 hosts with multiple vm's on them. All the xen hosts have 4 physical network ports connecting to the cisco. Each port is untagged in xen but is tagged to a vlan ...
0
votes
3answers
1k views

Cisco 881 throughput/bandwidth issue

We have a dedicated 30Mb connection (up/down) from our ISP, but we can only seem to get 10Mb (up/down) from the router. Does anyone know what we're missing, or how we can tweak the settings on this ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
1answer
22 views

Routing - Access Lists

I am relatively new to learning networking I've been trying some stuff out about "Access Lists" but seem to be confused at some point. I am not able to deny a whole ip range from accessing another ...
3
votes
2answers
5k views

Factory Reset Cisco SPA504G without admin password

I've been trying to factory reset some SPA500 phones, specifically the 504G but the old provider has locked out everything. I need to reset about 50 phones for use with a new service. I've man in the ...
0
votes
0answers
49 views

Cisco ASA 5510 needs “clear arp <Interface>” periodically to reach a single host

ASA 9.0(3) The symptom is that I can ping from the ASA to any other host in that interface's subnet, save one particular host (that host can ping the interface on the ASA however). If I do "clear arp ...
0
votes
1answer
886 views

cisco CUCM 8.6.x configuration export

We currently have a Cisco server running CUCM and cannot get access to the system due to a 'Database communication error' received when attempting a log in to CUCM homepage. Is there any way to ...
0
votes
0answers
10 views

Cisco 877 Initial Setup - Enable SDM

We purchased a used 877 and installed IOS and reset to factory defaults with a console cable. Now I just need to set it up as right now connecting via ethernet and pinging 10.10.10.1 won't connect (ip ...
0
votes
1answer
1k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
0
votes
0answers
23 views

ASA 5515-X: Policy based NAT for dedicated uplink

We have bought a Cisco ASA 5515-X and we have the following scenario. Current situation: GigabitInterface 0/0, IP via DHCP, ISP1, Coax, 100M up / 12M down, medium latency GigabitInterface 0/1, ...
1
vote
1answer
42 views

Cisco Catalyst 2960S boots to “MLG System”

We have a brand new Cisco Catalyst 2960S that while connected to the console during boot is booting to the following: File ...
0
votes
0answers
16 views

sg300-10 problems with vlan connections

I was hoping someone could give me a pointer on a VLAN setup issue i am having. My Enviroment: Cisco S300-10 Switch (set to L3 Mode) I have uploaded a newb drawing of my switch config in the hope ...
0
votes
2answers
1k views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
0
votes
3answers
642 views

Cisco PIX 501 firewall configuration

I have bought PIX 501 router for my home network (2 laptops and broadband cable modem). I am trying to configure it. I am able to connect to PIX via console and Hyperterminal. I used initial setup ...
2
votes
2answers
1k views

VmwareESXi Vlans, Cisco devices and broadcast making the things odd

I'm having problem for some days trying to make a correct configuration Right now I have a Cisco Catalyst switch, a Cisco Router 2811 and a VMware ESXi node with 4-8 VM (Linux,BSD, Windows), each ...
0
votes
1answer
1k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
1
vote
1answer
649 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
1answer
184 views

Cisco AnyConnect on Linux disable resolv.conf update

Is there any way to prevent Cisco AnyConnect client to update /etc/resolv.conf on a GNU/Linux box?
0
votes
1answer
1k views

unable to login to CISCO management IP

I 'm inable to login to my fabric CISCO switch ( MDS 9506) through management IP It's giving an error- when logging it from Device manager "10.20.XX.XX" timed out Busy Network, No Route, or snmpd ...
0
votes
0answers
20 views

Cisco ASA 5505 - IPSec remote VPN accessing secondary subnet

Layout: modem (pass through) -> Cisco ASA 5505 (Lan 192.168.10.1) -> (Wan 192.168.10.2) Netgear N600 Router (Lan 10.1.10.1) -> workstations (server=10.1.10.34) VPN connection to ASA no problem. I ...
2
votes
2answers
51 views

IPv6 Stateless Autoconfiguration route advertisements

In our network, we have a Cisco router acting as the core router, connecting all our sites to the main site. We also have a Linux firewall connecting us to the Internet. Site 1 --\ ...
0
votes
2answers
747 views

Physical Interface VS Multipoint Subinterface in Cisco Frame Relay

I am new in learning about Cisco Frame Relay. And I am having trouble in understanding the difference between using physical interface or multipoint subinterface, because it looks the same to me. ...
4
votes
4answers
2k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
2answers
1k views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
3
votes
1answer
98 views

Cisco switch: is it possible to add a user, which would be able to modify a single specific port?

Is it ever possible to delegate control over a single switch's port to an end user? Here's the situation: let's say a company offers colocation service. Each client's server is connected so a port on ...
1
vote
1answer
2k views

Setting Up A Windows 2008 NPS Server As A Radius Server For A Cisco AP541N Cluster

I have a cluster of Cisco AP541N access points. I am trying to use the Radius authentication for WPA-Enterprise authentication, but I cannot get the APs to query the server properly. Does anyone ...
0
votes
2answers
23 views

How to determine if auto negotiation with switch is finished

When I connect ubuntu network interface to cisco switch, the ports of switch and ubuntu starts auto negotiation. I need to know if auto negotiation is finished or not. The easy way is ping & ...
0
votes
3answers
34 views

How to see traffic traversing a Cisco ASA by inside host?

I have a Cisco ASA 5515 running 9.1 and am interested in learning how I can see bandwidth usage by individual hosts. For instance, using MRTG I can see that my average bandwidth utilization is approx ...
1
vote
1answer
37 views

Force Cisco ASA to change source port NAT

I have a 2 devices, a Cisco ASA and sitting behind it another device. Both the Cisco and the other device have IPsec tunnels but to different locations. I need to ensure that the source port of the ...
0
votes
2answers
2k views

Setting up VPN on CISCO ASA with private IP on outside interface

I am trying to setup our ASA 5510 to allow IPsec(IKEv1) access to the inside network through VPN. The hard part about our setup is the outside interface does not have a public IP address assigned to ...
1
vote
2answers
829 views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
1
vote
2answers
58 views

Cisco Aironet AP1260 can't reach FreeRADIUS server

I have a problem with a Cisco Aironet AP1260 standalone access point and a FreeRADIUS server. I'm trying to set up a 802.11x access point with authentication on a FreeRADIUS server. I have set up both ...
0
votes
1answer
830 views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
0
votes
1answer
40 views

Cisco static NAT not working on LAN side

I have a web server in my private network that has the ip address 192.168.1.134. I need to allow users to access this web server from both the internet and the private network. The public ip address ...
1
vote
1answer
82 views

cisco ASA 5505 l2tp vpn

I have a problem with cisco asa 5505 vpn configuration. I set l2tp for windows clients. I can connect to vpn but: when i have "use default gateway on remote network" on NIC enabled i have access to ...
0
votes
2answers
932 views

Cisco WLAN Controller not pushing out DHCP addresses, what else could it be?

On our Cisco WLAN Controller web interfaces, in Controller > Interfaces, I have made a new interface with these settings: VLAN Identifier 202 IP Address 172.16.202.1 Netmask 255.255.255.0 Gateway ...
1
vote
0answers
32 views

Cisco IOS 15.1 Multiple Inside Addresses Corresponding to Outside IPs (Client Switchable Inet IPs)

I have a Cisco 867VAE running IOS 15.1 which I am trying to configure. My network style is simple: I have one subnet, 10.0.0.255. I have mostly user operated computers DHCP'd and Wi-Fi for the mobile ...
1
vote
1answer
1k views

How to setup a static multicast ARP entry with Cisco SG300?

We're running a Microsoft NLB cluster in multicast mode as a loadbalancer. Using our old Cisco IOS switches we propagate access to the cluster to our branches using a static ARP entry in the core ...
0
votes
0answers
18 views

shrew soft vpn client routing to another network

I have configured Shrew soft VPN Client on Kubuntu 12.04.3 and is connecting to CISCO RV042. The CISCO router is connected to LAN 10.66.11.0/255.255.255.0 and also connects to another CISCO router at ...
0
votes
2answers
72 views

How can I connect to a Cisco ASA5540 from Windows Server 2012 over IPSEC?

Given a windows server 2012 client (which I have under full administrator control), and an external Cisco ASA5540 router (which I don't), I'd like to connect to the router to access their internal ...