Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

0
votes
1answer
1k views

Cisco 1142 AP not joining WLC

I have one an issue that I would be extremely grateful for help with. When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending ...
3
votes
2answers
89 views
+50

Site to Site VPN between CISCO 2921 and Sonicwall NSA 3600: NO_PROPOSAL_CHOSEN

I have CISCO 2921 and Sonicwall NSA 3600. I am trying to setup Site to site VPN. I am getting: Received notify. NO_PROPOSAL_CHOSEN in Sonicwall logs and the VPN is not setup. It looks like the ...
0
votes
2answers
1k views

XenServer 6.0.2 and Cisco 3550 vlan configuration

I am running a couple of xenserver 6.0.2 hosts with multiple vm's on them. All the xen hosts have 4 physical network ports connecting to the cisco. Each port is untagged in xen but is tagged to a vlan ...
1
vote
1answer
34 views

Nagios Core to monitor Cisco VPN Tunnel

I am able to see if a VPN tunnel is up using check_snmp. The OID for one of my tunnels is .1.3.6.1.4.1.9.9.171.1.2.3.1.35.3002962. When the tunnel is up, no problems. The problem, is when the ...
0
votes
0answers
15 views

ASA 5512 9.1(3) Port range forwarding for two servers on 1 public ip

I currently only have 3 public ip. What i am trying to do is port forward a range for 2 servers. Server 1 has an a port range of 5000-6000 and server 2 has a range of 70000-8000. It is easy to add the ...
0
votes
2answers
38 views

Avaya 4850 GTS & VSP 7000 - setting up a fibre trunk, no MLT

I'm a junior network/sys admin, and I'm stuck (and my seniors aren't sure what to do). I have a VSP 7000 switch which is a core switch. And a 4850 GTS switch which is like access switch. The switches ...
0
votes
1answer
298 views

Enabling command logging on a Cisco MDS Switch

We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx ...
4
votes
1answer
155 views

UCS FC Adapter Aborts

So here's the scenario, and I'm hoping @Chopper3 can chime in here. For our SAN fabric, we have a pair of Cisco MDS 9513 FC switches with three EMC frames and four Cisco UCS domains directly attached. ...
0
votes
1answer
25 views

Forcing traffic through an IPS on a flat network through a bump in the wire

I have the following topology: Click here, unfortunently I don't have enough rep to post images Essentially I would like the packet flow to go from PC1, to the Core Switch, to the Edge Switch, and ...
1
vote
0answers
11 views

Tethered VPN on Macbook fails to connect, but standard VPN over WiFi works [on hold]

I have a MacBook using the Cisco client and it works fine except when I use the special Mac/iPad ability to tether over the iPad data connection. For those that are unfamiliar with this, the Mac and ...
0
votes
0answers
10 views

Remote Desktop Gateway temporarily unavailable outside LAN

I have setup Microsofts RD Gateway on a server in one of our subnets. We have multiple subnets separated by a Cisco ASA firewall. One for servers, one for desktops etc. If I run mstsc from the server ...
1
vote
1answer
30 views

Cisco VLAN can see other Domains in other VLANs

A new location I've been visiting has 3 fiber connected buildings using Cisco switches. They are each on a separate subnet and separate vlan. 192.168.0.0/24 (VLAN 10) Building 1 192.168.1.0/24 (VLAN ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
1
vote
0answers
15 views

Connectivity issues to hosts over MPLS

Original thread on VMware for reference: https://communities.vmware.com/thread/490718 Hello, We have been troubleshooting an issue that prevents our vCenter server from connecting to some of our ...
-1
votes
0answers
35 views

Collision Domains, an explination of Hub to Hub collisions [closed]

I've searched and searched for this question without any avail. So, I've got a few scenarios that could be asked on the Cicso CCNA, even if they are a bit far fetched. What I do understand is that if ...
0
votes
1answer
697 views

Cisco Wireless Dot11Radio not broadcasting

I am using a cisco router and struggling to make the SSID broadcast. What have i missed out? When I try and show activity i get r1-cy#show dot11 bssid Interface BSSID Guest SSID ...
1
vote
1answer
42 views

VPN (PPTP) connects successfully but unable to ping some devices in the LAN

My working company has this router (Cisco RV042G Gigabit Dual WAN VPN Router) and it has the IP 192.168.1.1 with subnet mask 255.255.255.0. It has 3 devices directly connected to its LAN ports, an ...
0
votes
1answer
37 views

Network maintenence time - Cisco & Juniper

I maintain Cisco & Juniper equipment, lately developers are complaining that router upgrades take too long. Since we don't have high availability yet. How would I cut downtime? I currently do: ...
1
vote
0answers
10 views

Cisco Jabber 10.5 install via GPO

Cisco Jabber 10.5 install via GPO I am trying to setup a GPO to install the latest version of Cisco Jabber. When I create the entry under Software Installation the properties for the product ...
3
votes
4answers
4k views

2 Cisco ASA + 4 Cisco switches - best way to connect all together

Until now I have been involved in using Cisco hardware in professional environment but on a small level. Recently, requirement has came up for our new facility to be built with PCI compliance in mind ...
0
votes
2answers
1k views

Limiting Bandwidth per port Cisco router

Let's say a businessses purchases a sufficently fast internet connection (such as 60Mbps cable connection) and VOIP quality is pretty good for the most part. The only thing I would be worried about ...
1
vote
1answer
1k views

VTP does not update on client switch

I recently replaced the switch that was functioning as the VLAN server for the rest of the network. Since the replacement however, I have not been able to push any new VLANs to the Client switches. ...
0
votes
0answers
62 views

CSR1000v image in Openstack as a VM

I have an esxi host. Under that I have created a Ubuntu 14.04 machine running Openstack(devstack single node)Juno release. I am trying to spin CSR1000v image as a VM inside Openstack. I followed the ...
1
vote
1answer
28 views

When does the operator operand after the source address get used in an Access Control Entry

During my Cisco networking class I noticed something that confused me pertaining to extended access lists. In the Cisco NetAcademy curriculum it lists this example of the syntax for an extended ...
1
vote
1answer
1k views

cisco CUCM 8.6.x configuration export

We currently have a Cisco server running CUCM and cannot get access to the system due to a 'Database communication error' received when attempting a log in to CUCM homepage. Is there any way to ...
1
vote
0answers
33 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
0
votes
2answers
2k views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
1
vote
0answers
162 views

Connect Cisco 7975 VOIP phone to two separate Asterisk PBX's

I have a Cisco 7975 registered on an Asterisk SIP server, and I want to register a second line on a second (different IP) Asterisk SIP server. I tried to do this with firmware version 8.5.3 but it ...
0
votes
1answer
2k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
4
votes
4answers
3k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
1
vote
0answers
20 views

How to connect Cisco 2911 into internet through the ISP's router? [migrated]

I recently got almost brand new Cisco 2911 router and Cisco 2960 switch for free from school. I've been configuring both a little bit in school so I can handle the basic stuff. I currently live in an ...
4
votes
5answers
2k views

How can I make an internet facing TFTP server secure?

I have many Cisco IP phones that operate in the following manner (oversimplified): Negotiate with DHCP for IP, DNS, TFTP, etc. Look for SEPXXXXXXXXXXXX.cnf.xml configuration file on TFTP server ...
-1
votes
0answers
27 views

cisco ip helpder-address not working

I have 3 Cisco Catalyst switches: 2 3750 series and one 3550. The appear to suffer from the same problem. If I define a VLAN, configure a DHCP address assignment on it and then issue a command for it ...
1
vote
2answers
6k views

How to failover to local account on a cisco switch/router if radius server fails?

I have the following configuration on a switch that I testing for RADIUS authentication: aaa new-model aaa authenticaton login default group radius local aaa authentication enable default group ...
0
votes
2answers
2k views

Setting up VPN on CISCO ASA with private IP on outside interface

I am trying to setup our ASA 5510 to allow IPsec(IKEv1) access to the inside network through VPN. The hard part about our setup is the outside interface does not have a public IP address assigned to ...
1
vote
0answers
20 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
9 views

Cisco process memory usage

I am trying to monitor a Cisco process memory usage. This is what I get with the command line: show system internal processes memory | inc PID|ipfib PID TTY STAT TIME MAJFLT TRS RSS ...
-2
votes
0answers
29 views

Cisco serie 4400 internet configuration with low performance

The issue: I have been trying to set up the network on a cisco router. It is working, however it is very slow. The configuration: Gi0/0/1 is connected to internet (ip 100.38.214.2, gateway is ...
1
vote
2answers
1k views

How can I configure my network to allow bi-directional traffic between two lans?

Here's my current setup: (and it may require reworking): 2 LAN networks - 192.168.41.0, 192.168.21.0 2 Public IP's (they are assigned to us by specifying MAC Addresses - not subnetted) ...
2
votes
0answers
25 views

Rescue Configuration for Cisco 3925

I recently upgraded our Cisco 3925 with the latest firmware and it returned a segmentation fault. I restarted it and now the console port won't connect. Any ideas on how to restore the flash to a ...
1
vote
0answers
14 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
0
votes
1answer
1k views

Cisco ASA: port forwarding to different IP depending on client IP/subnet outside

I have Cisco ASA 8.2(5) and would like to configure port forwarding. Cisco ASA has 2 interfaces: outside with IP 192.168.57.2 inside with IP 192.168.1.1 I have two subnets reachable through ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
1
vote
1answer
2k views

How to setup a static multicast ARP entry with Cisco SG300?

We're running a Microsoft NLB cluster in multicast mode as a loadbalancer. Using our old Cisco IOS switches we propagate access to the cluster to our branches using a static ARP entry in the core ...
0
votes
1answer
1k views

Gre Tunnel Cisco Linux traffic forwarding

I setup a gre tunnel a cisco router and a Linux machine, the tunnel interface in the Linux box named pic. Well i have to forward traffic coming from cisco through the Linux box. the rules i've set in ...
0
votes
2answers
3k views

DES warning message when connecting to Cisco ASA via SSH

I had to replace a Cisco ASA 5510 that died. I have everything back up and running however when I connect to the ASA via SSH (through Putty), I receive the following warning message: "The first ...
1
vote
0answers
27 views

How to know what number was dialled on incoming call

The scenario In the UK. I have one (BT openreach) phone line coming into a Cisco SPA232D. That phone line is ringable on a number, let's say 01235AAAAAA. I have a virtual number, 01235BBBBBB, which ...
0
votes
1answer
28 views

How can I tell if a cisco router is dropping pings due to DOS suspicion or if it's experiencing packet loss?

We use a PRTG server that's connected to a cisco 6500, which feeds a large network of about 1200 switches and radios in a router-on-a-stick topology. In PRTG I'm able to set a 'ping burst' sensor on a ...
1
vote
1answer
84 views

Can you SNMP poll the ARP table on Cisco ACE?

I'm trying to get a MAC <=> IP mapping from a Cisco ACE. Unfortunately according to this table, while it supports IP-MIB the ipNetToMediaTable and ipNetToPhysicalTable subtrees are not supported. ...
0
votes
1answer
24 views

How to move company voip phones to a different subnet by modifying DHCP of a Cisco Switch?

Our company has replaced its old voip phones with new ones which are the NEC phones. We are done with the configuration part, and the phones are working fine. But I want the phones to be in a ...