The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

0
votes
3answers
1k views

Configure hairpinning on Cisco 871 IOS 12.4(15)T4?

I'm a newbie to IOS. In the past I've used consumer routers which seem to have the smarts to automatically route requests to internal hosts addressed by their public name back to the internal network. ...
0
votes
1answer
2k views

Can't enable IPv6 in Cisco 2800 router running IOS 12.4T

I can't enable IPV6 in a Cisco 2800 router that runs iOS version 12.4T. I followed the summary steps section in Cisco's web page . But whenever I type "ipv6" on the command line (as in 'ipv6 ...
0
votes
1answer
101 views

Cisco T1 Routing Help

Thanks to someone on this site I was able to get the Serial0/0 interface up. I now have: DCD=up DSR=up DTR=up RTS=up CTS=up My next challenge seems to be in the routing and/or PC ip setup. ...
0
votes
1answer
462 views

Cisco 851 (IOS) router: FastEthernet 4 (WAN) got the shutdown flag

At a customer location there was a Cisco 851 router (which uses IOS). The PCs on location were all of a sudden unable to connect. We came on site and found that FastEthernet 4 (the WAN port) was ...
0
votes
1answer
338 views

Cisco IOS ACL: Don't permit incoming connections just because they are from port 80

I am going much based on my memory and I may not be correct on all of this. On a Cisco 851 (IOS) that uses a BVI or a bridge-route (the servers on the inside are configured with static and public IP ...
0
votes
3answers
2k views

Can't connect to PPTP server outside of network

I'm trying to configure my Cisco 881 running IOS 15 to allow pptp connections to servers outside of the network. I know the PPTP server is configured correctly, because a)it's a clients VPN, and b) ...
0
votes
2answers
476 views

output my Cisco 881 config

how does one "print" the startup config or running config. also what is the best way to import config you have stored as a text file?
0
votes
2answers
79 views

setting up default-gateway on a router

So I've got this weird assignment, where each branch office has to be able to access the main office (and Internet) through a serial connection. Since switches don't have a serial connections ...
0
votes
1answer
108 views

APP installation - iPhone [closed]

I am trying to automate the installing procedure of iPhone apps (i.e) installing apps for around 5000 phones. For this I am planning to deploy an MDM server in Windows Server 2008 containing Active ...
0
votes
2answers
398 views

Is there an issue with Exchange 2010 Active Sync and iOS 6.1.x?

We are doing a complete server and infrastructure update with a Migration from Exchange 2007 to 2010. Along with the server upgrade we're doing a migration from an old antiquated 192.0.2.x internal ...
0
votes
1answer
124 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
319 views

Cisco ACL Block by Packet Length

I am presently blocking a small scale DDOS attack using IP addresses but all the packets are the same size, 1514 bits and I kind of don't want to fill up an ACL rule with a bunch of IPs. After reading ...
0
votes
1answer
2k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
0
votes
2answers
1k views

Cisco: show run vlan # vs show run int vlan #

What is the difference between the two commands? Show run vlan # = blank output show run int vlan # = vlan configuration Likewise: show vlans No virutal LANs configured show vlan ...
0
votes
1answer
302 views

Route-map changing from permit to deny retains the match tag values

I have a route-map configured on my cisco router with name say s1 and sequence number 10(default) which contains a match tag 10. If i again try to configure the same route-map name with same sequence ...
0
votes
1answer
2k views

GNS3 - Emulating a not supported Cisco router (model 881w)

I want to create a new configuration for a Cisco 881w from scratch. So I want to replicate my environment on GNS3. But I cannot emulate a Cisco 881w (which is the router i have) into it. So I am ...
0
votes
1answer
276 views

Cisco AP commands dissapeared after IOS downgrade

enter code hereAfter downgrading a Cisco 881w AP (WLAN-AP), something went weird. When I connect on the WLAN-AP interface using: service-module wlan-ap0 session I got this prompt: ...
0
votes
1answer
3k views

IP SLA on Cisco 1921 IOS 15.2T

Can someone explain to me why I cannot create IP SLA probes on a Cisco 1921 with the latest IOS (15.2T). It is clearly available for that IOS on that router model on the Cisco Feature Navigator ... ...
0
votes
1answer
3k views

How does Cisco IOS ACL established flag work

You can permit outgoing packets, but then you need to permit the responses. One way is to permit any packet that is a followup to an established connection. access-list ??? permit tcp any any ...
0
votes
1answer
4k views

How to delete multiple files from a Cisco router flash memory

I have filled up my router's flash with voice files and folders and wanted to remove them. I there a script that can delete all files in flash except for the IOS image?
0
votes
2answers
86 views

Cisco XR Interfaces

I'm trying to figure out if a device which is running Cisco IOS XR is affected. The advisory is published here Assuming I have the vulnerable OS versions, Now I want to check if I have a Cisco Line ...
0
votes
1answer
103 views

Will cisco 3750-e switches run the old ipservices ios code?

was wondering about cisco 3750-e switches. Will they run the old ipservices ios code? Or do they only run the univeral image? Thanks
0
votes
1answer
757 views

Cannot login to Cisco 2911 over ssh?

30 minutes ago my router is not accepting ssh connection. Well, ports is open (due to nmap), ssh simply hangs on reading from Cisco socket (observation from strace): /home/rafal/.ssh/id_dsa-cert type ...
0
votes
2answers
2k views

Cisco IOS BVI ACL: Only allow established UDP

Related: Cisco IOS ACL: Don't permit incoming connections just because they are from port 80 I know we can use the established keyword for TCP.. but what can we do for UDP (short of replacing a ...
0
votes
1answer
576 views

BVI vs Bridge routers

What is the difference between BVI and Bridge on Cisco IOS routers?
0
votes
3answers
6k views

Cisco IOS: access-list logging rate-limited or missed packets

How do we fix these errors? 2629753: Dec 29 09:03:56.521 EST: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 2 packets This is a Cisco 871 router with BVI and access lists.
0
votes
1answer
3k views

IOS NAT with multiple interfaces

I am trying to create a DMZ type environment between two internal networks using Cisco NAT. The below configuration is working to permit the two 'nat outside' interfaces to access the dmz 'nat ...
0
votes
1answer
2k views

Cisco IOS: One SSID doesn't pull from the correct DHCP pool

I have 2 SSID setup in my Cisco 881W router. Our internal ssid pulls from the right DHCP pool (wpool), while our guest SSID does not pull from the right pool (gpool) Here is the router config ! ! ...
0
votes
1answer
47 views

Cisco 871w security

I purchased a 871W ISR for a small business and want to know what's best use practice when setting up security for this type of router. At the present time I have a static IP assigned to it and can ...
0
votes
2answers
570 views

Syntax checker working crazy with cisco

I'm trying to verify only two commands for cisco IOS ACL Extendend. They are: access-list 101 deny any 192.168.0.0/23 any access-list 101 permit udp 192.168.1.1 any For this i`m using a ...
0
votes
2answers
2k views

Setup Cisco IOS Static NAT

I'm trying to allow access to a printer on a separate LAN in the same building. I have control over only one of the networks... My attempt at not using another router failed see here. I now have a ...
0
votes
1answer
969 views

Configuration of Switch Module (WIC) on Cisco 3800

I have a 4 port module in my 3800 router, an HWIC-4ESW, that acts like a switch. I can configure IPs on each port if I do something like the following: conf t int F1/1 switchport access vlan 20 ...
0
votes
1answer
447 views

Cisco / IOS Priority of VPN Tunnels vs EIGRP Routes

If I have two interfaces, one which gets its networks from EIGRP, and another that is an internet connection with VPN tunnels. If the same network exists for match address of the VPN tunnels and an ...
0
votes
4answers
7k views

Cisco AnyConnect on IOS 12.4(20)T

There are plenty of tutorials on setting up AnyConnect on an ASA unit, and a handful of links noting that IOS 12.4(15) and later support AnyConnect, but I can't seem to find any good documentation ...
0
votes
1answer
1k views

IOS: tie SNMP v3 credentials to TACACS or RADIUS?

On Cisco IOS, I'm looking at moving from SNMP v1/2 to v3, which means separate user/password credentials instead of just community strings. Is it possible to have those user credentials pulled from, ...
0
votes
0answers
11 views

IOS FlexVPN client keeping create child SA every 60s?

I got a flexvpn client with sVTI tunnel interface, but it keeps creating child sa every 60s, like below. The VPN server is a linux Strongswan box, the config works fine in IOS 15.3 but not 15.4+. Any ...
0
votes
0answers
13 views

CISCO IOS NAT existing network into VPN private IP address

I have a CISCO IOS router with two interface, int0 for internal network and int1 for internet. I have site-to-site VPN as below and wondering how can I configure NAT. [192.168.1.0/24] = existing ...
0
votes
1answer
15 views

Port Forwarding with Cisco SR520 IOS

I've been tasked with setting up port forwarding for access to remote desktop on a server. I'm having trouble making it work. Server IP 192.168.1.20, port 3389 The router is a Cisco SR520. It is ...
0
votes
1answer
174 views

Cisco IOS, Multiple WAN & Port Forwards (Outside -> Inside PAT)

I have been trying to work out how to accomplish PATing from Outside to Inside on a Cisco IOS router, in this case specifically a Cisco 2901 running IOS Version 15.1(4)M1. Firstly, the problem I am ...
0
votes
1answer
125 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
0answers
56 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
1answer
372 views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
0
votes
0answers
39 views

Cisco IOS AAA “TACACS unavailable” login message

A while ago I had to configure some routers to use TACACS+ as well as local authentication. I know the usual AAA config for TACACS+ with local fallback. What I can't remember is how I got it to ...
0
votes
0answers
138 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
0
votes
1answer
79 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...
0
votes
1answer
677 views

Cisco IOS: Logging only debug messages on command-line

I want to have a quiet command-line such as (config)# no logging console causes. Still, I want to make use of # debug commands. It appears to me that # debug depends on syslog level 7. So I cannot ...
0
votes
0answers
119 views

WSO2EMM (MDM) Profile Installation Failed - Certificate is invalid

I followed the documentation (https://docs.wso2.com/display/EMM110/General+Server+Configurations) to generate the certificate and depoly the iOS agent but when I try to setup the certificate I have ...
0
votes
0answers
60 views

How to fix stalled connection on large download

I have a cisco 1921 router performing routing and NAT function. Cisco 3750 is performing layer 3 core switching duties. Users are complaining about large file transfers being stalled (not dropped) ...
0
votes
0answers
554 views

Unable to communicate with web proxy server on iOS

I am following the instructions on how to use a HTTP proxy with an iPhone, however I appear unable to communicate with the HTTP proxy. I have configured the settings in my phone correctly to use the ...
0
votes
1answer
247 views

Putty: disable configuration of server terminal length

I would like to prevent Putty from setting the server terminal length so as to avoid the dreaded --More-- prompt in Cisco IOS. Please do not tell me to set length 0 in line config mode because this ...