Cisco is a provider of switches and routers to commercial consumers. Cisco devices run IOS or NX-OS operating systems. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

8
votes
0answers
149 views

How come one of my switches is off by two minutes in spite of ntp?

I just noticed by pure chance that one of my Cisco 4500 switches has its clock going wrong: it is more than 2 minutes behind in spite of seemingly functional ntp. In my opinion, even a single second ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
5
votes
0answers
317 views

Puppet Error: undefined method 'captures'

I posted this question on the networkengineering SE site, but it was determined to be off topic.... blah. I'm toying with the idea of using puppet for core network device configuration to increase ...
4
votes
0answers
232 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
4
votes
0answers
1k views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
3
votes
0answers
98 views

Opennms - Physical interface update on Cisco Switches

I'm using opennms version 16.0.2-1 on ubuntu server 14.04 LTS. I'm configuring some cisco switches to send traps to openms. The traps are notified to events in opennms, if i put a physical ...
3
votes
0answers
702 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating 1.2.3....
2
votes
0answers
32 views

Manually specify a tunnel gateway for an IPSec VPN Connection (ASA)

I have currently got several VPN's on-premise that are setup on the outside interface and using the default gateway on the interface as an originating source of the VPN tunnel. Although the outside ...
2
votes
0answers
134 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
2
votes
0answers
66 views

Creating additional VLANs on Cisco SG200

I would like to create 2 separate VLANs using a Cisco SG200-series smart switch (layer 2) where the devices would not see each other, while being able to connect to the internet. The setup is simple, ...
2
votes
0answers
28 views

Cisco Switch Routing performance monitoring

It is quite a question for me: I have Cisco Catalyst 2960S switch which is nice hardware even despite its age and EOL. I'd like to set it as small router between several networks within a remote ...
2
votes
0answers
23 views

Cisco Unified Presence Server - Update Lync Status value for In a Call

The default value in Lync for a busy status is numerically represented as 6500. Is it possible to change the "In a call" status that the Cisco Unified Presence Server provides the Lync server.
2
votes
0answers
90 views

Unknown root user on Cisco 1921 router

Just a moment ago I ran the who command on my router and I noticed myself logged in on vty 1 but another user root was on vty 0. The Location under that user is some location I do not know (someone ...
2
votes
0answers
45 views

Rescue Configuration for Cisco 3925

I recently upgraded our Cisco 3925 with the latest firmware and it returned a segmentation fault. I restarted it and now the console port won't connect. Any ideas on how to restore the flash to a ...
2
votes
0answers
318 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
2
votes
0answers
851 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
2
votes
0answers
89 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 10.10.10....
2
votes
0answers
164 views

How to fix an aborted firmware upgrade on Cisco SLM2048

There is a Cisco SLM2048 switch and the last firmware upgrade aborted, now the switch doesn't work anymore. I can't access the switch. The only evidence is a blinking system LED. As the switch doesn't ...
2
votes
0answers
687 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
137 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the '...
2
votes
0answers
272 views

Iperf multiple streams

I need to test my network between two sites using iperf. I'd like to open parallel streams sending data on different (let's say 5 defined) ports, with random length from 10-1000, with random 1-2 ...
2
votes
0answers
273 views

multiple isp links on a HWIC-4ESW

First, I am not doing fail-over. I want to be able to add another ISP link using a HWIC-4ESW. Equipment: Cisco 3825(1GB ram, 2GB flash, IOS 15.4 Advanced Enterprise services) with HWIC-4ESW ...
2
votes
0answers
74 views

How to mark traffic from cpu on cisco 2960S

I am writing a QOS configuration. Does the way to mark trafic from cpu on 2960S exist? 2960S doesn't support service-policy output and vlan-based qos.
2
votes
0answers
3k views

Cisco AnyConnect hangs on “Checking for profile updates…”

I have a Cisco AnyConnect accessing ASA 5510. The AnyConnect connection correctly authenticates and then hangs of "Checking for profile updates...". The client (Vista64) is behind a firewall and can ...
2
votes
0answers
169 views

Dynamic VPN tunneling technologies

Ok, so I'm asking a more specific question this time. I'm writing a paper about Cisco's DMVPN and one of the tasks I have is to make the analysis of available network solutions which use dynamic VPN ...
2
votes
0answers
411 views

Is it possible to embed TCL directly into a Cisco startup-config?

Is it possible to embed TCL directly into a Cisco startup-config? From the (lack of) information I'm finding, it doesn't look do-able. I have a tool that generates Cisco configurations based on some ...
2
votes
0answers
548 views

Port mirroring on Cisco switches

I have a Cisco Catalyst 3750X switch, and I have configured port mirroring on it. Traffic from 12 of the 1G ports will be mirrored to both 10G ports, and I have connected both 10G ports to a server ...
2
votes
0answers
1k views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
1k views

Cisco ASA - DHCP Relay doesn't seem to be working consistently

I'm having an issue where some users on one of our DMZ networks aren't getting a DHCP address from the Windows DHCP server on our internal interface. Being that not everyone is affected is making ...
2
votes
0answers
1k views

Site-to-Site IPSec VPN: bridged only

I'd like to setup a site-to-site IPSec VPN tunnel between a head office and a branch office, and for political/security reasons, with the sole purpose of being able to access a "Management" subnet at ...
1
vote
0answers
15 views

Cisco ASA VPN DH Groups for AWS VPC

AWS provides a neat function in its VPC that exposes a VPN service. I've configured this, and confirmed that it functions. Our customer is using a Cisco 5500 Series ASA appliance to connect to the ...
1
vote
0answers
22 views

More Management VLANS for a switch

I created a management interface in vlan 99 to telnet the switch (2900 series). I also wanted to configure another management interface for the same switch from the computer belongs to the different ...
1
vote
0answers
33 views

Cisco ASA 5505 Issue - “Flags SYN on interface..”

I've been trying to remotely configure a Cisco ASA 5505 in front of a dedicated server hosted with OVH. Unfortunately my qualifications and even experience very rarely touched on Firewalls. However I ...
1
vote
0answers
14 views

cisco switch: port-security mac address sticky with an access point?

how can I secure a switchport where an access point is connected? Of course I can't use switchport port-security mac-address sticky otherwise my WLAN clients would not be able to connect. Or am I ...
1
vote
0answers
18 views

Two users behind same NAT (PSK or EAP) - strongswan

I have a strongswan implementation and am running into an issue where when there are two users behind the same NAT, the second one "kicks off" the first one. I was able to resolve the issue using: ...
1
vote
0answers
19 views

GNS3 - Connecting Emulalated IOS to TWO PHYSICAL networks

I have a CISCO c3725 router on GNS3 connected to two different and separate unique LANs via the CLOUD/HOST icon, attaching each of the virtual CISCO c3725 to my computer's physical NIC (NIC 1 and NI2.)...
1
vote
0answers
23 views

How should I use Cisco ASA 5510 and Catalyst 3550 together

So I took on a project at my job moving four separate networks into one Colo center. Currently I broken everything down from the four networks into 4 VLANS on the ASA 5510. Each are assigned IPs ...
1
vote
0answers
23 views

Cisco ASA 5510 ASDM 6.4 (2) unable to do port translation

I have a situation, where I want to do port translation. For example I can acces my service outside ip:8081 that is forwaded to server:8080. I should have a NAT rule option to add PAT like in this ...
1
vote
0answers
30 views

Configure Cisco QoS for VLAN

I have two VLANs (20 and 21) that are accessing the same resource on a switch. Clients on VLAN 20 access this resource only at schedule times, but when they do, they generate lots of traffic as they'...
1
vote
0answers
15 views

Is it possible to run the Cisco NX-OS 6.x copy command without the prompt to select a VRF?

I am currently working with a network scanning tool that logs into Cisco routers and runs commands on those routers. The problem I'm encountering has to do with what the copy command expects. The copy ...
1
vote
0answers
141 views

What are the differences between Blue coat ProxySG and Cisco Ironport?

What are the main differences between ProxySG and Cisco's Ironport Appliances? I already found out: Cisco's Ironport: - is only available as a scalable Hardware Appliance (not Virtual) - high ...
1
vote
0answers
47 views

Cisco vWLC sha2 certificates not supported bug?

I currently have an app running with a Cisco virtual Wireless Lan Controller, all works fine except we get some error messages regarding SHA1 certificates, when I'm looking for SHA2 support the cisco ...
1
vote
0answers
62 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
0answers
36 views

Cisco 1941 EIGRP UP DOWN

We have two cisco routers 1841 and 1941. The 1841 keeps generating "holding time expired" and "interface goodbye recieved" about its neighbor the 1941. The VPN IPSec protocol seems to stay up. ...
1
vote
0answers
29 views

ip dhcp excluded-address command no work

I want to provide 1.1.1.101 to 1.1.1.126 using dhcp pool. Here is my configuration no ip dhcp use vrf connected ip dhcp excluded-address 1.1.1.1 1.1.1.100 ip dhcp excluded-address 1.1.1.127 1.1.1.254 ...
1
vote
0answers
51 views

ICMP DDoS, proper ACL?

We are having about a 3-4Gbps ICMP flood on one of our servers and I wonder.. I have a 20gbps of DDoS protection but the proetction seems ineffective against ICMP funnily (it worked well to block a ...
1
vote
0answers
18 views

Long Response Times for Reads via FCoE

We're getting some intriguing performance with our new FCoE environment, and I was hoping that people could let me know if what we're seeing is expected behaviour. Our switching environment consists ...
1
vote
0answers
92 views

Is it possible to access inside server using outside address from dmz an a Cisco ASA

We have a Cisco ASA 5506-X (running ASA 9.5(1)) and a /28 public network. The first available address in the public network is assigned to the outside interface of the ASA and has NAT/PAT to several ...
1
vote
0answers
72 views

How can I use openscap to do an offline OVAL scan of a Cisco router?

This doc describes a process of scanning a router's "show tech" file with a joval utility. I downloaded joval's trial, but didn't see that utility. Can openscap do offline OVAL scans of Cisco ...
1
vote
0answers
84 views

Connecting 2 single switches to a stack

I have a core switch made with 2 stacked Cisco SG500XG-8F8T switches. Now I have to connect 2 3Com Baseline Switch 2920-SFP Plus to extend my gigabit network, but they are not stacked. So I connected ...