Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

6
votes
0answers
4k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
5
votes
0answers
86 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
3
votes
0answers
1k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
3
votes
0answers
224 views

Puppet Error: undefined method 'captures'

I posted this question on the networkengineering SE site, but it was determined to be off topic.... blah. I'm toying with the idea of using puppet for core network device configuration to increase ...
3
votes
0answers
184 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
3
votes
0answers
910 views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
2
votes
0answers
25 views

Rescue Configuration for Cisco 3925

I recently upgraded our Cisco 3925 with the latest firmware and it returned a segmentation fault. I restarted it and now the console port won't connect. Any ideas on how to restore the flash to a ...
2
votes
0answers
119 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
0answers
217 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
2
votes
0answers
352 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
2
votes
0answers
318 views

Why is Router IP Address Repeated in Trace Command?

I have a network that is a branch of our central office. The central office is located in another city and I connect to the central office with a Cisco router using a leased line E1 cable(using ...
2
votes
0answers
72 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
2
votes
0answers
100 views

How to fix an aborted firmware upgrade on Cisco SLM2048

There is a Cisco SLM2048 switch and the last firmware upgrade aborted, now the switch doesn't work anymore. I can't access the switch. The only evidence is a blinking system LED. As the switch doesn't ...
2
votes
0answers
499 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
91 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
2
votes
0answers
229 views

multiple isp links on a HWIC-4ESW

First, I am not doing fail-over. I want to be able to add another ISP link using a HWIC-4ESW. Equipment: Cisco 3825(1GB ram, 2GB flash, IOS 15.4 Advanced Enterprise services) with HWIC-4ESW ...
2
votes
0answers
73 views

How to mark traffic from cpu on cisco 2960S

I am writing a QOS configuration. Does the way to mark trafic from cpu on 2960S exist? 2960S doesn't support service-policy output and vlan-based qos.
2
votes
0answers
2k views

Cisco AnyConnect hangs on “Checking for profile updates…”

I have a Cisco AnyConnect accessing ASA 5510. The AnyConnect connection correctly authenticates and then hangs of "Checking for profile updates...". The client (Vista64) is behind a firewall and can ...
2
votes
0answers
164 views

Dynamic VPN tunneling technologies

Ok, so I'm asking a more specific question this time. I'm writing a paper about Cisco's DMVPN and one of the tasks I have is to make the analysis of available network solutions which use dynamic VPN ...
2
votes
0answers
320 views

Is it possible to embed TCL directly into a Cisco startup-config?

Is it possible to embed TCL directly into a Cisco startup-config? From the (lack of) information I'm finding, it doesn't look do-able. I have a tool that generates Cisco configurations based on some ...
2
votes
0answers
488 views

Port mirroring on Cisco switches

I have a Cisco Catalyst 3750X switch, and I have configured port mirroring on it. Traffic from 12 of the 1G ports will be mirrored to both 10G ports, and I have connected both 10G ports to a server ...
2
votes
0answers
952 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
957 views

Cisco ASA - DHCP Relay doesn't seem to be working consistently

I'm having an issue where some users on one of our DMZ networks aren't getting a DHCP address from the Windows DHCP server on our internal interface. Being that not everyone is affected is making ...
2
votes
0answers
902 views

Site-to-Site IPSec VPN: bridged only

I'd like to setup a site-to-site IPSec VPN tunnel between a head office and a branch office, and for political/security reasons, with the sole purpose of being able to access a "Management" subnet at ...
1
vote
0answers
8 views

CISCO SSL VPN (multiple Sites)

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
1
vote
0answers
32 views

Download startup config from Cisco device using SCP

I can successfully download the config from Juniper network devices using SCP - I'd like to do the same for a Cisco router. SSH access is already working, and I've enabled SCP using ip scp server ...
1
vote
0answers
13 views

Remote WOL over CISCO/FW not Forwarding

I'm trying to accomplish a Wake-on-LAN by triggering the two servers' public IP addresses. Internally, the WOL works like a charm (by either the internal or external IP), externally however, it does ...
1
vote
0answers
33 views

VTP trunking not working for Cisco 4948 switch

I'm adding a new Cisco 4948 switch to an existing network that has a bunch of 3500 series switches already configured and working. I've verified the VTP domain and password are identical, tried ...
1
vote
0answers
15 views

Connectivity issues to hosts over MPLS

Original thread on VMware for reference: https://communities.vmware.com/thread/490718 Hello, We have been troubleshooting an issue that prevents our vCenter server from connecting to some of our ...
1
vote
0answers
10 views

Cisco Jabber 10.5 install via GPO

Cisco Jabber 10.5 install via GPO I am trying to setup a GPO to install the latest version of Cisco Jabber. When I create the entry under Software Installation the properties for the product ...
1
vote
0answers
42 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
0answers
22 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
9 views

Cisco process memory usage

I am trying to monitor a Cisco process memory usage. This is what I get with the command line: show system internal processes memory | inc PID|ipfib PID TTY STAT TIME MAJFLT TRS RSS ...
1
vote
0answers
14 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
1
vote
0answers
29 views

How to know what number was dialled on incoming call

The scenario In the UK. I have one (BT openreach) phone line coming into a Cisco SPA232D. That phone line is ringable on a number, let's say 01235AAAAAA. I have a virtual number, 01235BBBBBB, which ...
1
vote
0answers
27 views

Cisco 1921 router stops routing traffic

I have a cisco 1921 router that recently started acting up. I haven't changed anything on the router in many months because everything was running smoothly, until a week ago. Configuration: The setup ...
1
vote
0answers
46 views

Cannot Reach Secondary Subnet on Same Interface

I am running a Cisco 1841 which has an unmanaged Dell 2848 connected to it. Connected to a WIC card in the 1841 is a fiber run which goes to a subnet of devices. The primary subnet is 192.168.2.0/24, ...
1
vote
0answers
23 views

Cisco multi switch / multi VLAN monitoring

I have a DMZ and a internal LAN with VLANs that I wish to port monitor by means of a NIDS and three switches, if this is possible. Switch 1 (DMZ) 2950 / VLAN 10 & trunk port to Switch 3 Switch 2 ...
1
vote
0answers
19 views

Snmp - clear portsecurity sticky address in cisco

i am writing script to clear particular sticky mac address. I have fount that snmp oid is: 1.3.6.1.4.1.9.9.315.1.2.1.1.14 it can take following values: 0:done 1:dynamic 2:static 3:sticky 4:all ...
1
vote
0answers
32 views

Flat ISP network to MPLS dumb Q

I have a fairly flat ISP network that I am upgrading to use MPLS (dont ask why, that decision is above my position) but clients/CPE are authenticated using PPPoE. Each POP uses a router configured as ...
1
vote
0answers
57 views

why cisco VPNC work on the second time each time and not on the first time

I use the vpnc ( cisco VPN that installed on linux red-hat 6.X ) and the vpnc.conf file look like this more /etc/vpnc.conf ## generated by pcf2vpnc IPSec ID Comvwde IPSec gateway 217.118.6.7 ...
1
vote
0answers
33 views

how to allow a subnet to surf internet in Juniper and Cisco ASA

how to allow a subnet to surf internet in Juniper and Cisco ASA is there an configuration example to show allow a subnet of class C IP address to surf internet in Juniper and in Cisco ASA ? assume ...
1
vote
0answers
45 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
1
vote
0answers
54 views

Cisco IOS 15.1 Multiple Inside Addresses Corresponding to Outside IPs (Client Switchable Inet IPs)

I have a Cisco 867VAE running IOS 15.1 which I am trying to configure. My network style is simple: I have one subnet, 10.0.0.255. I have mostly user operated computers DHCP'd and Wi-Fi for the mobile ...
1
vote
0answers
154 views

ASA failover mode switching from Active/Active to Active/Standby

We have two ASAs with failover set to Active/Active. This seems to work fine for everything we do except using VPN connections. It seems whenever the primary ASA fails over that all VPN connections ...
1
vote
0answers
68 views

Number forwarding Cisco CallManager Express

I would like to set up number forwarding on Cisco CallManager so that when, for example, "888" is dialled, the call is forwarded to "00912345678". In my scheme the leading zero is for an external ...
1
vote
0answers
232 views

cisco vpnc + how to disable the IPSec ID and IPSec secret

I use the vpnc in order to open vpn connection against the customer in the following example I run the vpnc and get error about "hybrid" so according to some site they suggest to remark the line ...
1
vote
0answers
185 views

Transparent Squid Proxy – issue opening a page in Internet Explorer

I set up Cisco Wccp + Squid on Suse Linux Enterprise 11 SP3. Firefox opens our intranet portal pages with no problems. I can see requests to squid. I see cache hits and access in squid log. I see ...
1
vote
0answers
63 views

Cisco UC Integration for Lync does not switch back Lync status after a call

We use Cisco UC Integration for Microsoft Lync with Office 2013. The integration does not seem to be as good as with Office 2010 (we have a separate icon for the running program, not the expected ...
1
vote
0answers
111 views

Cisco VoIP telephony - Can't save Night Service Bell Configuration

When trying to save "Night Service Bell Configuration" settings under Cisco Unified Communications Manager Express the following error message pops up. Configuration change failed. Please report the ...