Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

4
votes
0answers
1k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
4
votes
0answers
246 views

Puppet Error: undefined method 'captures'

I posted this question on the networkengineering SE site, but it was determined to be off topic.... blah. I'm toying with the idea of using puppet for core network device configuration to increase ...
4
votes
0answers
195 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
4
votes
0answers
1k views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
3
votes
0answers
18 views

Opennms - Physical interface update on Cisco Switches

I'm using opennms version 16.0.2-1 on ubuntu server 14.04 LTS. I'm configuring some cisco switches to send traps to openms. The traps are notified to events in opennms, if i put a physical ...
3
votes
0answers
177 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
2
votes
0answers
34 views

Rescue Configuration for Cisco 3925

I recently upgraded our Cisco 3925 with the latest firmware and it returned a segmentation fault. I restarted it and now the console port won't connect. Any ideas on how to restore the flash to a ...
2
votes
0answers
269 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
2
votes
0answers
471 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
2
votes
0answers
415 views

Why is Router IP Address Repeated in Trace Command?

I have a network that is a branch of our central office. The central office is located in another city and I connect to the central office with a Cisco router using a leased line E1 cable(using ...
2
votes
0answers
79 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
2
votes
0answers
112 views

How to fix an aborted firmware upgrade on Cisco SLM2048

There is a Cisco SLM2048 switch and the last firmware upgrade aborted, now the switch doesn't work anymore. I can't access the switch. The only evidence is a blinking system LED. As the switch doesn't ...
2
votes
0answers
542 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
112 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
2
votes
0answers
245 views

multiple isp links on a HWIC-4ESW

First, I am not doing fail-over. I want to be able to add another ISP link using a HWIC-4ESW. Equipment: Cisco 3825(1GB ram, 2GB flash, IOS 15.4 Advanced Enterprise services) with HWIC-4ESW ...
2
votes
0answers
74 views

How to mark traffic from cpu on cisco 2960S

I am writing a QOS configuration. Does the way to mark trafic from cpu on 2960S exist? 2960S doesn't support service-policy output and vlan-based qos.
2
votes
0answers
2k views

Cisco AnyConnect hangs on “Checking for profile updates…”

I have a Cisco AnyConnect accessing ASA 5510. The AnyConnect connection correctly authenticates and then hangs of "Checking for profile updates...". The client (Vista64) is behind a firewall and can ...
2
votes
0answers
165 views

Dynamic VPN tunneling technologies

Ok, so I'm asking a more specific question this time. I'm writing a paper about Cisco's DMVPN and one of the tasks I have is to make the analysis of available network solutions which use dynamic VPN ...
2
votes
0answers
348 views

Is it possible to embed TCL directly into a Cisco startup-config?

Is it possible to embed TCL directly into a Cisco startup-config? From the (lack of) information I'm finding, it doesn't look do-able. I have a tool that generates Cisco configurations based on some ...
2
votes
0answers
502 views

Port mirroring on Cisco switches

I have a Cisco Catalyst 3750X switch, and I have configured port mirroring on it. Traffic from 12 of the 1G ports will be mirrored to both 10G ports, and I have connected both 10G ports to a server ...
2
votes
0answers
997 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
996 views

Cisco ASA - DHCP Relay doesn't seem to be working consistently

I'm having an issue where some users on one of our DMZ networks aren't getting a DHCP address from the Windows DHCP server on our internal interface. Being that not everyone is affected is making ...
2
votes
0answers
951 views

Site-to-Site IPSec VPN: bridged only

I'd like to setup a site-to-site IPSec VPN tunnel between a head office and a branch office, and for political/security reasons, with the sole purpose of being able to access a "Management" subnet at ...
1
vote
0answers
11 views

Cisco ASA l2l tunnel established, can receive pings but cannot reply

I'm a bit new to managing a Cisco ASA appliance and I'm doing my best to learn, however I got a problem here. Long story short, we are trying to connect a hospital's ADT HL7 feed to our remote ...
1
vote
0answers
39 views

tcp previous segment not captured when NAT

I have a client request web service on a server behide NAT. My client IP is 10.54.10.193 NAT address: 10.54.28.183 Server address: 62.209.39.203 When client request web service on server we have TCP ...
1
vote
0answers
31 views

Ucce 8.5 ICM - How to extract SIP Header in ICM script

We are collecting the sip headers from CVP Ops console. We are setting variables using the mid(call.sipheader,Startlocation,Length) If the string length changes, the values are not correct. Is ...
1
vote
0answers
90 views

VTP trunking not working for Cisco 4948 switch

I'm adding a new Cisco 4948 switch to an existing network that has a bunch of 3500 series switches already configured and working. I've verified the VTP domain and password are identical, tried ...
1
vote
0answers
43 views

Connectivity issues to hosts over MPLS

Original thread on VMware for reference: https://communities.vmware.com/thread/490718 Hello, We have been troubleshooting an issue that prevents our vCenter server from connecting to some of our ...
1
vote
0answers
30 views

Cisco Jabber 10.5 install via GPO

Cisco Jabber 10.5 install via GPO I am trying to setup a GPO to install the latest version of Cisco Jabber. When I create the entry under Software Installation the properties for the product ...
1
vote
0answers
170 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
0answers
64 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
28 views

Cisco process memory usage

I am trying to monitor a Cisco process memory usage. This is what I get with the command line: show system internal processes memory | inc PID|ipfib PID TTY STAT TIME MAJFLT TRS RSS ...
1
vote
0answers
50 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
1
vote
0answers
91 views

How to know what number was dialled on incoming call

The scenario In the UK. I have one (BT openreach) phone line coming into a Cisco SPA232D. That phone line is ringable on a number, let's say 01235AAAAAA. I have a virtual number, 01235BBBBBB, which ...
1
vote
0answers
68 views

Cisco 1921 router stops routing traffic

I have a cisco 1921 router that recently started acting up. I haven't changed anything on the router in many months because everything was running smoothly, until a week ago. Configuration: The setup ...
1
vote
0answers
62 views

Cannot Reach Secondary Subnet on Same Interface

I am running a Cisco 1841 which has an unmanaged Dell 2848 connected to it. Connected to a WIC card in the 1841 is a fiber run which goes to a subnet of devices. The primary subnet is 192.168.2.0/24, ...
1
vote
0answers
38 views

Cisco multi switch / multi VLAN monitoring

I have a DMZ and a internal LAN with VLANs that I wish to port monitor by means of a NIDS and three switches, if this is possible. Switch 1 (DMZ) 2950 / VLAN 10 & trunk port to Switch 3 Switch 2 ...
1
vote
0answers
32 views

Snmp - clear portsecurity sticky address in cisco

i am writing script to clear particular sticky mac address. I have fount that snmp oid is: 1.3.6.1.4.1.9.9.315.1.2.1.1.14 it can take following values: 0:done 1:dynamic 2:static 3:sticky 4:all ...
1
vote
0answers
53 views

Flat ISP network to MPLS dumb Q

I have a fairly flat ISP network that I am upgrading to use MPLS (dont ask why, that decision is above my position) but clients/CPE are authenticated using PPPoE. Each POP uses a router configured as ...
1
vote
0answers
83 views

why cisco VPNC work on the second time each time and not on the first time

I use the vpnc ( cisco VPN that installed on linux red-hat 6.X ) and the vpnc.conf file look like this more /etc/vpnc.conf ## generated by pcf2vpnc IPSec ID Comvwde IPSec gateway 217.118.6.7 ...
1
vote
0answers
157 views

Many error lines in snmpwalk report

Devices : Cisco SG 300 switch / Ubuntu 14.04 LTS when I run a snmpwalk, I get many error lines before the actual requested datas. Example: snmpwalk -v3 -u public 192.168.0.20 IF-MIB::ifHighSpeed ...
1
vote
0answers
49 views

how to allow a subnet to surf internet in Juniper and Cisco ASA

how to allow a subnet to surf internet in Juniper and Cisco ASA is there an configuration example to show allow a subnet of class C IP address to surf internet in Juniper and in Cisco ASA ? assume ...
1
vote
0answers
69 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
1
vote
0answers
63 views

Cisco IOS 15.1 Multiple Inside Addresses Corresponding to Outside IPs (Client Switchable Inet IPs)

I have a Cisco 867VAE running IOS 15.1 which I am trying to configure. My network style is simple: I have one subnet, 10.0.0.255. I have mostly user operated computers DHCP'd and Wi-Fi for the mobile ...
1
vote
0answers
130 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
1
vote
0answers
174 views

ASA failover mode switching from Active/Active to Active/Standby

We have two ASAs with failover set to Active/Active. This seems to work fine for everything we do except using VPN connections. It seems whenever the primary ASA fails over that all VPN connections ...
1
vote
0answers
98 views

Number forwarding Cisco CallManager Express

I would like to set up number forwarding on Cisco CallManager so that when, for example, "888" is dialled, the call is forwarded to "00912345678". In my scheme the leading zero is for an external ...
1
vote
0answers
307 views

cisco vpnc + how to disable the IPSec ID and IPSec secret

I use the vpnc in order to open vpn connection against the customer in the following example I run the vpnc and get error about "hybrid" so according to some site they suggest to remark the line ...
1
vote
0answers
212 views

Transparent Squid Proxy – issue opening a page in Internet Explorer

I set up Cisco Wccp + Squid on Suse Linux Enterprise 11 SP3. Firefox opens our intranet portal pages with no problems. I can see requests to squid. I see cache hits and access in squid log. I see ...
1
vote
0answers
68 views

Cisco UC Integration for Lync does not switch back Lync status after a call

We use Cisco UC Integration for Microsoft Lync with Office 2013. The integration does not seem to be as good as with Office 2010 (we have a separate icon for the running program, not the expected ...