Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

8
votes
3answers
26k views

How do I reach my internal server on the external IP?

We are trying to configure our Cisco 5505, and it has been done through ASDM. There is one big problem that we're not able to solve, and that's when you go from inside to outside and back in again. ...
4
votes
2answers
4k views

3 WAN and a Cisco Router - PBR, QOS, Load-Balancing

I have a cisco router with 4 ethernet interfaces, scenario is as follows : 2 x Dedicated Leased Lines (2MB and 4MB) 1 x Business Class DSL 10MB 4 3COM L2, Switches, connected to a Core Switch (3COM ...
11
votes
9answers
3k views

Why buy high end hardware firewalls?

There exist firewalls from Juniper and Cisco that cost more than a house. So I wonder: what does one get from a $10.000+ firewall compared to an 2U server with 4x 10Gbit network cards running e.g. ...
47
votes
16answers
117k views

64-bit Cisco VPN client (IPsec)?

Cisco VPN client (IPsec) does not support 64bit Windows. Worse, Cisco does not even plan to release a 64-bit version, instead they say that "For x64 (64-bit) Windows support, you must utilize Cisco's ...
5
votes
4answers
1k views

Best way to improve resilience?

One of the major projects I have lined up for 2010 is attempting to mitigate some of the Single Point of Failures (SPOFs) in a network I currently manage. We currently have a single datacentre rack ...
5
votes
1answer
4k views

How do you NAT Hairpin in IOS 8.3+

As I asked here and duplicated here it appears NAT Hairpinning is the answer I'm looking for to allow internal servers to loopback through the ASA to access external IP's (without using DNS Doctoring)....
4
votes
2answers
2k views

Network Redundancy Example

Looking for help filling in how redundancy in the following model might work: I believe my Datacenter will give me redundant gateways with two hand offs (going to have to talk to the more about ...
1
vote
1answer
4k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
1
vote
2answers
262 views

Cisco static NAT not working on LAN side

I have a web server in my private network that has the ip address 192.168.1.134. I need to allow users to access this web server from both the internet and the private network. The public ip address ...
3
votes
5answers
6k views

Are Arista SFP Transceivers Compatible with Cisco Switches?

Are the Arista SFP transceivers compatible with Cisco switches? For example, if I go to the CDW site they show multiple transceivers that vary in price. How can I know that they will work in the ...
2
votes
3answers
4k views

massive packet loss when servers are brought online

This is a continuation of ubuntu server, ssh, write failed: broken pipe . I'm starting a new question, because I don't believe the issue is isolated to ssh/ubuntu. I've got two brand new servers (...
2
votes
2answers
1k views

BGP Multihomed/Multi-location best practice

We're in the process of designing a new iteration of our network where we improve resilliency by adding a second datacentre. We'll be adding a second datacentre, with an identical configuration of ...
0
votes
1answer
3k views

Cisco ASA 5505 Voice/Data VLANs not pinging/routing

Hi i am very new to Cisco ASA 5000 series and have two interfaces that i would like to route between, a data network 192.168.69.0/24 and voice 192.168.70.0/24, I have addded both and can ping the ...
0
votes
2answers
505 views

Set up a GRE tunnel with Cisco PIX-506 v6.3

I'm trying to establish one half of a GRE tunnel, the other being configured by my service provider. I have a Cisco PIX-506-E running Firewall version 6.3(5). Provider Router Public IP: 8.8.8.8 My ...
7
votes
6answers
5k views

Cisco VPN Client for Windows

is there any Free Cisco VPN Client software for Windows ?
9
votes
10answers
59k views

Identify machines connected to switch

Our company recently closed down half our office space, which was not being used. We gave back the unused space to the building management and had it walled off. Prior to us closing it off, I jotted ...
8
votes
3answers
13k views

How to obtain Cisco IOS firmware?

Quick and simple question, but I've not been able to find an answer around. I have a Cisco ADSL router (model 877). I don't have any Cisco support contract. How can I obtain an updated firmware for ...
5
votes
3answers
10k views

Cisco 877 as a VPN server?

I have a Cisco 877 router which connects my network to the Internet using an ADSL line, a single public IP address and NAT; the IOS version is 15. Everything is working ok, but I'd like to configure ...
4
votes
3answers
8k views

Can I use Cisco ASA's “NetFlow Security Event Logging” (NetFlow 9) for bandwidth monitoring

Cisco has introduced NetFlow 9 export in the latest software version for ASA firewalls. But it seems to be meant for event logging of security events only (as a replacement for syslog messages). But ...
11
votes
8answers
28k views

Blocking Facebook and Myspace by IP address

I'm having some trouble making a Cisco ASA device block certain social networking sites which have become time sinks in our office. This question is really in two parts: Is there a reliable way to ...
5
votes
3answers
5k views

Unable to connect on natted server from a host computer on the same LAN using public IP address

I have a server statically NAT’d using a registered IP address and it is accessible from the outside. The problem is I cannot access my server from the inside using the registered IP address with a ...
4
votes
2answers
10k views

QoS for Cisco Router to Prioritize Voice and Interactive Traffic

I have a Cisco 891W NATing Voice and Data to the internet over a 10mbit/2mbit connection. Voice traffic gets degraded when I upload large files. Pings time out as well. I tried to configure a QoS ...
18
votes
5answers
40k views

ARP broadcast flooding network and high cpu usage

Hoping someone here might have some insight to the issue we are facing. Currently we have Cisco TAC looking at the case but they are struggling to find the root cause. Although the title mentions ARP ...
6
votes
2answers
3k views

DMZ subnet: to NAT or not to NAT?

I'm looking at setting up a DMZ behind a Cisco ASA that will contain a large number of HTTP front-end load balancers and SSL offload services - over 100 IPs, concentrated on a smaller number of hosts. ...
2
votes
1answer
1k views

Pushing IP routes to various VPN clients

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client. I would like to know if there is an equivalent of this option on:...
6
votes
1answer
7k views

Why would Windows Server not respond to DHCP DISCOVER?

My network was working just fine and I broke it. There is a Cisco 1711 router which was configured to hand out DHCP leases to the client PCs. I have a domain controller (Server 2008) on the same ...
6
votes
4answers
3k views

Is Selling Old Cisco Routers a Security Issue?

I'm a system admin but I'm not Cisco certified and I'm not a network engineer. Basically I only use switches/routers/modems with a GUI. I've inherited a pile of old Cisco routers that are not in use ...
5
votes
3answers
1k views

How do ISPs/Colocation Facilities limit bandwidth for Ethernet Drops?

I have switch providers and have run into some problems with bandwidth limitations. I have more bandwidth then before, but there are performance issues. The router is connected to a 100mBit port, ...
4
votes
1answer
1k views

ASA 5505 vLAN Routing - 2 LAN 1 WAN

I am setting up a Cisco ASA 5505 with the base license. TCP/UDP communication works from inside->outside, outside->inside, inside->secure, which is my desired traffic security. HTTP, SSH, and other ...
3
votes
2answers
1k views

Cisco QoS Guidance

I have a 10M connection to the internet that is hooked into a 100M port. I am getting started with QoS, and am hopping for a little guidance on setting it up on a Cisco 3825 router. Right now I am ...
3
votes
1answer
2k views

Cisco ASA 5510 Time of Day Based Policing

I have a Cisco ASA 5510 setup at a boarding school. I determined that many (most?) of the students were downloading files, watching movies, etc, during the day and this was causing the academic side ...
2
votes
6answers
1k views

Non-official Cisco VPN client for Linux

Does anyone know of a good VPN client that is not the official one from Cisco for Linux?
2
votes
2answers
2k views

Cisco Router - Website Doesn't Work Locally Because Public IP Directs to Router Itself!

I have an RV220W but this issue may apply to other Cisco routers. My website is deployed at public IP address 123.45.67.89/MyWebsite/Default.htm. My web server has an internal IP to which port ...
8
votes
2answers
8k views

HP to Cisco spanning tree root flapping

Per a recent question I recently configured both my HP (2x 2900) and Cisco (1x 3750) hardware to use MSTP for interoperability. I thought this was functional until I applied the change to the third ...
7
votes
4answers
2k views

Cisco IOS QoS prioritize SSH but not SCP

How can I prioritize ssh traffic to ensure low-latency but throttle SCP file transfers? I'm looking for a solution that is not host specific so I don't have to add lists of IP addresses. Thanks!
6
votes
1answer
1k views

Why do modern routers not require clock settings anymore?

From my Cisco books (CCNA level) I learned that in a WAN connection one router must be configured as the DCE and the other as the DTE. In real life I have a DS-3 between two routers. There are no ...
3
votes
3answers
17k views

Cisco ASA logs “regular translation creation failed for icmp …” for DNS traffic, yet it works

Every few minutes our Cisco ASA 5505 firewall is logging errors that I can't figure out with my limited Cisco experience. Severity Date Time Syslog ID Source IP Destination IP ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
3
votes
4answers
680 views

Free (as in beer) Cisco VPN equivalent for Linux client

I have several customers that I connect to via Cisco VPN Client (v5 if that matters) on Windows. I'm doing some tidying up and was wondering if there was a simple way to be able to connect to the same ...
3
votes
1answer
60k views

How do you allow ICMP Echo Requests on a Cisco ASA 55xx Router?

I'm very new to managing Cisco equipment, so bear with me. I'm configuring a Cisco ASA 5505 router for my office, and I am reasonably competent enough with the console to configure the basics -- our ...
3
votes
5answers
531 views

The right vpn to replace heavy ssh usage

We are a small development firm looking to access the following services remotely: http smb network shares rdc / vnc Currently we do this with a lot of ssh tunnels. We are looking into switching ...
2
votes
4answers
3k views

Issuing commands over web interface to Cisco switch

I am attempting to script a system for automatically deploying new Cisco switches (Cisco 3012 switches for an IBM BladeCenter, to be specific). I need to get telnet access into the new switches, ...
2
votes
1answer
1k views

Cisco ASA Nat 8.4

I'm trying to get port forwarding on my ASA working. I'm using: object network server1 nat (inside,outside) static interface service tcp 25 25 and an access list, and it works fine, however, I ...
2
votes
5answers
3k views

Link aggregation with DSL and Ethernet, and different ISP's?

We're a webdev company that has outgrown its ADSL bandwidth. It's currently 4/1 Mbit/s and due to distance we can't simply get faster DSL, whether ADSL or SDSL. Stacking multiple DSL connections is ...
2
votes
2answers
7k views

Restoring a Cisco router config using a config file

I'm working with a Cisco router over telnet (actually PuTTY), and I'm a newbie to ios. I'm slowly getting the hang of it, but have a very basic question: I have issued a show running-config command ...
2
votes
2answers
3k views

Simple road warrior IPv4 VPN configuration in Cisco IOS

I'm looking to setup a reasonably simple road warrior VPN configuration on our Cisco routers. Frustratingly, I've been searching for this but cannot find a simple complete guide. Multiple (not ...
1
vote
3answers
221 views

Where to Learn CISCO Router Configuration

I'm looking for a course on learning how to use CISCO Commands to configure a Cisco router. Can someone advise me on how I might get started in learning this topic?
1
vote
4answers
2k views

Bandwidth sharing via police exceed-action drop on Cisco Catalyst 3550s: anything less draconian?

I’m the chairman of the wiring committee for a hundred-unit condominium, and not a Cisco expert. We have a trio of Cisco Catalyst 3550 switches, connected to an old Cisco 1417 router, connected to a ...
1
vote
5answers
5k views

How to block external access to the DNS service running on a Cisco router?

I have a Cisco (877) router acting as the main gateway for a network; it has a DSL connection and performs NAT from the internal network to its external, public IP address. The router allows SSH ...
1
vote
4answers
3k views

Influencing outbound routes on multi homed BGP setup

I have a multi-homed network setup. I'm using a Cisco 7200 to do BGP advertising to both provider A and B. For each provider, I have a separate /24 that I'm using. I am AS prepending to influence ...