Cisco is a major provider of switches and routers to most medium and large companies. Cisco devices often run IOS or NX-OS. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

learn more… | top users | synonyms

5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
4
votes
0answers
292 views

Puppet Error: undefined method 'captures'

I posted this question on the networkengineering SE site, but it was determined to be off topic.... blah. I'm toying with the idea of using puppet for core network device configuration to increase ...
4
votes
0answers
219 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
4
votes
0answers
1k views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
3
votes
0answers
72 views

Opennms - Physical interface update on Cisco Switches

I'm using opennms version 16.0.2-1 on ubuntu server 14.04 LTS. I'm configuring some cisco switches to send traps to openms. The traps are notified to events in opennms, if i put a physical ...
3
votes
0answers
524 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
2
votes
0answers
17 views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
2
votes
0answers
24 views

Creating additional VLANs on Cisco SG200

I would like to create 2 separate VLANs using a Cisco SG200-series smart switch (layer 2) where the devices would not see each other, while being able to connect to the internet. The setup is simple, ...
2
votes
0answers
15 views

Cisco Switch Routing performance monitoring

It is quite a question for me: I have Cisco Catalyst 2960S switch which is nice hardware even despite its age and EOL. I'd like to set it as small router between several networks within a remote ...
2
votes
0answers
16 views

Cisco Unified Presence Server - Update Lync Status value for In a Call

The default value in Lync for a busy status is numerically represented as 6500. Is it possible to change the "In a call" status that the Cisco Unified Presence Server provides the Lync server.
2
votes
0answers
58 views

Unknown root user on Cisco 1921 router

Just a moment ago I ran the who command on my router and I noticed myself logged in on vty 1 but another user root was on vty 0. The Location under that user is some location I do not know (someone ...
2
votes
0answers
44 views

Rescue Configuration for Cisco 3925

I recently upgraded our Cisco 3925 with the latest firmware and it returned a segmentation fault. I restarted it and now the console port won't connect. Any ideas on how to restore the flash to a ...
2
votes
0answers
312 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
2
votes
0answers
667 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
2
votes
0answers
87 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
2
votes
0answers
146 views

How to fix an aborted firmware upgrade on Cisco SLM2048

There is a Cisco SLM2048 switch and the last firmware upgrade aborted, now the switch doesn't work anymore. I can't access the switch. The only evidence is a blinking system LED. As the switch doesn't ...
2
votes
0answers
630 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
130 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the ...
2
votes
0answers
259 views

multiple isp links on a HWIC-4ESW

First, I am not doing fail-over. I want to be able to add another ISP link using a HWIC-4ESW. Equipment: Cisco 3825(1GB ram, 2GB flash, IOS 15.4 Advanced Enterprise services) with HWIC-4ESW ...
2
votes
0answers
74 views

How to mark traffic from cpu on cisco 2960S

I am writing a QOS configuration. Does the way to mark trafic from cpu on 2960S exist? 2960S doesn't support service-policy output and vlan-based qos.
2
votes
0answers
3k views

Cisco AnyConnect hangs on “Checking for profile updates…”

I have a Cisco AnyConnect accessing ASA 5510. The AnyConnect connection correctly authenticates and then hangs of "Checking for profile updates...". The client (Vista64) is behind a firewall and can ...
2
votes
0answers
168 views

Dynamic VPN tunneling technologies

Ok, so I'm asking a more specific question this time. I'm writing a paper about Cisco's DMVPN and one of the tasks I have is to make the analysis of available network solutions which use dynamic VPN ...
2
votes
0answers
384 views

Is it possible to embed TCL directly into a Cisco startup-config?

Is it possible to embed TCL directly into a Cisco startup-config? From the (lack of) information I'm finding, it doesn't look do-able. I have a tool that generates Cisco configurations based on some ...
2
votes
0answers
523 views

Port mirroring on Cisco switches

I have a Cisco Catalyst 3750X switch, and I have configured port mirroring on it. Traffic from 12 of the 1G ports will be mirrored to both 10G ports, and I have connected both 10G ports to a server ...
2
votes
0answers
1k views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
1k views

Cisco ASA - DHCP Relay doesn't seem to be working consistently

I'm having an issue where some users on one of our DMZ networks aren't getting a DHCP address from the Windows DHCP server on our internal interface. Being that not everyone is affected is making ...
2
votes
0answers
1k views

Site-to-Site IPSec VPN: bridged only

I'd like to setup a site-to-site IPSec VPN tunnel between a head office and a branch office, and for political/security reasons, with the sole purpose of being able to access a "Management" subnet at ...
1
vote
0answers
13 views

Cisco vWLC sha2 certificates not supported bug?

I currently have an app running with a Cisco virtual Wireless Lan Controller, all works fine except we get some error messages regarding SHA1 certificates, when I'm looking for SHA2 support the cisco ...
1
vote
0answers
24 views

Cisco 1941 EIGRP UP DOWN

We have two cisco routers 1841 and 1941. The 1841 keeps generating "holding time expired" and "interface goodbye recieved" about its neighbor the 1941. The VPN IPSec protocol seems to stay up. ...
1
vote
0answers
15 views

ip dhcp excluded-address command no work

I want to provide 1.1.1.101 to 1.1.1.126 using dhcp pool. Here is my configuration no ip dhcp use vrf connected ip dhcp excluded-address 1.1.1.1 1.1.1.100 ip dhcp excluded-address 1.1.1.127 1.1.1.254 ...
1
vote
0answers
13 views

Long Response Times for Reads via FCoE

We're getting some intriguing performance with our new FCoE environment, and I was hoping that people could let me know if what we're seeing is expected behaviour. Our switching environment consists ...
1
vote
0answers
63 views

Is it possible to access inside server using outside address from dmz an a Cisco ASA

We have a Cisco ASA 5506-X (running ASA 9.5(1)) and a /28 public network. The first available address in the public network is assigned to the outside interface of the ASA and has NAT/PAT to several ...
1
vote
0answers
48 views

How can I use openscap to do an offline OVAL scan of a Cisco router?

This doc describes a process of scanning a router's "show tech" file with a joval utility. I downloaded joval's trial, but didn't see that utility. Can openscap do offline OVAL scans of Cisco ...
1
vote
0answers
60 views

Connecting 2 single switches to a stack

I have a core switch made with 2 stacked Cisco SG500XG-8F8T switches. Now I have to connect 2 3Com Baseline Switch 2920-SFP Plus to extend my gigabit network, but they are not stacked. So I connected ...
1
vote
0answers
22 views

Vyatta Nat Rule Help Translating From Cisco ASA Rule

I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta. static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24 How do I ...
1
vote
0answers
41 views

Cisco ASA l2l tunnel established, can receive pings but cannot reply

I'm a bit new to managing a Cisco ASA appliance and I'm doing my best to learn, however I got a problem here. Long story short, we are trying to connect a hospital's ADT HL7 feed to our remote ...
1
vote
0answers
102 views

tcp previous segment not captured when NAT

I have a client request web service on a server behide NAT. My client IP is 10.54.10.193 NAT address: 10.54.28.183 Server address: 62.209.39.203 When client request web service on server we have TCP ...
1
vote
0answers
54 views

Ucce 8.5 ICM - How to extract SIP Header in ICM script

We are collecting the sip headers from CVP Ops console. We are setting variables using the mid(call.sipheader,Startlocation,Length) If the string length changes, the values are not correct. Is ...
1
vote
0answers
140 views

VTP trunking not working for Cisco 4948 switch

I'm adding a new Cisco 4948 switch to an existing network that has a bunch of 3500 series switches already configured and working. I've verified the VTP domain and password are identical, tried ...
1
vote
0answers
101 views

Connectivity issues to hosts over MPLS

Original thread on VMware for reference: https://communities.vmware.com/thread/490718 Hello, We have been troubleshooting an issue that prevents our vCenter server from connecting to some of our ...
1
vote
0answers
64 views

Cisco Jabber 10.5 install via GPO

Cisco Jabber 10.5 install via GPO I am trying to setup a GPO to install the latest version of Cisco Jabber. When I create the entry under Software Installation the properties for the product ...
1
vote
0answers
349 views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
1
vote
0answers
144 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
39 views

Cisco process memory usage

I am trying to monitor a Cisco process memory usage. This is what I get with the command line: show system internal processes memory | inc PID|ipfib PID TTY STAT TIME MAJFLT TRS RSS ...
1
vote
0answers
96 views

How to set up a simple Cisco ISG config for controlling internet access

First off, here is my config so far. http://pastebin.com/fV2NGCE2 I've gone through a few guides online and the 15.2s manual and the xe3 manual for Cisco's ISG (intelligent services gateway) and ...
1
vote
0answers
209 views

How to know what number was dialled on incoming call

The scenario In the UK. I have one (BT openreach) phone line coming into a Cisco SPA232D. That phone line is ringable on a number, let's say 01235AAAAAA. I have a virtual number, 01235BBBBBB, which ...
1
vote
0answers
109 views

Cisco 1921 router stops routing traffic

I have a cisco 1921 router that recently started acting up. I haven't changed anything on the router in many months because everything was running smoothly, until a week ago. Configuration: The setup ...
1
vote
0answers
92 views

Cannot Reach Secondary Subnet on Same Interface

I am running a Cisco 1841 which has an unmanaged Dell 2848 connected to it. Connected to a WIC card in the 1841 is a fiber run which goes to a subnet of devices. The primary subnet is 192.168.2.0/24, ...
1
vote
0answers
50 views

Cisco multi switch / multi VLAN monitoring

I have a DMZ and a internal LAN with VLANs that I wish to port monitor by means of a NIDS and three switches, if this is possible. Switch 1 (DMZ) 2950 / VLAN 10 & trunk port to Switch 3 Switch 2 ...
1
vote
0answers
58 views

Snmp - clear portsecurity sticky address in cisco

i am writing script to clear particular sticky mac address. I have fount that snmp oid is: 1.3.6.1.4.1.9.9.315.1.2.1.1.14 it can take following values: 0:done 1:dynamic 2:static 3:sticky 4:all ...