The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

0
votes
1answer
334 views

Cisco IOS ACL: Don't permit incoming connections just because they are from port 80

I am going much based on my memory and I may not be correct on all of this. On a Cisco 851 (IOS) that uses a BVI or a bridge-route (the servers on the inside are configured with static and public IP ...
0
votes
3answers
1k views

Can't connect to PPTP server outside of network

I'm trying to configure my Cisco 881 running IOS 15 to allow pptp connections to servers outside of the network. I know the PPTP server is configured correctly, because a)it's a clients VPN, and b) ...
0
votes
2answers
476 views

output my Cisco 881 config

how does one "print" the startup config or running config. also what is the best way to import config you have stored as a text file?
0
votes
2answers
4k views

ssh into Cisco router not working

On a 2800 series router, I used to be able to ssh in via two public interfaces, but now I can't seem to. One of these two public interfaces has an ACL, the other currently doesn't. When I ssh to the ...
0
votes
2answers
62 views

setting up default-gateway on a router

So I've got this weird assignment, where each branch office has to be able to access the main office (and Internet) through a serial connection. Since switches don't have a serial connections ...
0
votes
1answer
103 views

APP installation - iPhone [closed]

I am trying to automate the installing procedure of iPhone apps (i.e) installing apps for around 5000 phones. For this I am planning to deploy an MDM server in Windows Server 2008 containing Active ...
0
votes
2answers
370 views

Is there an issue with Exchange 2010 Active Sync and iOS 6.1.x?

We are doing a complete server and infrastructure update with a Migration from Exchange 2007 to 2010. Along with the server upgrade we're doing a migration from an old antiquated 192.0.2.x internal ...
0
votes
1answer
122 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
309 views

Cisco ACL Block by Packet Length

I am presently blocking a small scale DDOS attack using IP addresses but all the packets are the same size, 1514 bits and I kind of don't want to fill up an ACL rule with a bunch of IPs. After reading ...
0
votes
1answer
2k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
0
votes
2answers
1k views

Cisco: show run vlan # vs show run int vlan #

What is the difference between the two commands? Show run vlan # = blank output show run int vlan # = vlan configuration Likewise: show vlans No virutal LANs configured show vlan ...
0
votes
1answer
280 views

Route-map changing from permit to deny retains the match tag values

I have a route-map configured on my cisco router with name say s1 and sequence number 10(default) which contains a match tag 10. If i again try to configure the same route-map name with same sequence ...
0
votes
1answer
1k views

GNS3 - Emulating a not supported Cisco router (model 881w)

I want to create a new configuration for a Cisco 881w from scratch. So I want to replicate my environment on GNS3. But I cannot emulate a Cisco 881w (which is the router i have) into it. So I am ...
0
votes
1answer
268 views

Cisco AP commands dissapeared after IOS downgrade

enter code hereAfter downgrading a Cisco 881w AP (WLAN-AP), something went weird. When I connect on the WLAN-AP interface using: service-module wlan-ap0 session I got this prompt: ...
0
votes
1answer
3k views

IP SLA on Cisco 1921 IOS 15.2T

Can someone explain to me why I cannot create IP SLA probes on a Cisco 1921 with the latest IOS (15.2T). It is clearly available for that IOS on that router model on the Cisco Feature Navigator ... ...
0
votes
1answer
3k views

How does Cisco IOS ACL established flag work

You can permit outgoing packets, but then you need to permit the responses. One way is to permit any packet that is a followup to an established connection. access-list ??? permit tcp any any ...
0
votes
1answer
4k views

How to delete multiple files from a Cisco router flash memory

I have filled up my router's flash with voice files and folders and wanted to remove them. I there a script that can delete all files in flash except for the IOS image?
0
votes
2answers
86 views

Cisco XR Interfaces

I'm trying to figure out if a device which is running Cisco IOS XR is affected. The advisory is published here Assuming I have the vulnerable OS versions, Now I want to check if I have a Cisco Line ...
0
votes
1answer
99 views

Will cisco 3750-e switches run the old ipservices ios code?

was wondering about cisco 3750-e switches. Will they run the old ipservices ios code? Or do they only run the univeral image? Thanks
0
votes
1answer
741 views

Cannot login to Cisco 2911 over ssh?

30 minutes ago my router is not accepting ssh connection. Well, ports is open (due to nmap), ssh simply hangs on reading from Cisco socket (observation from strace): /home/rafal/.ssh/id_dsa-cert type ...
0
votes
2answers
2k views

Cisco IOS BVI ACL: Only allow established UDP

Related: Cisco IOS ACL: Don't permit incoming connections just because they are from port 80 I know we can use the established keyword for TCP.. but what can we do for UDP (short of replacing a ...
0
votes
1answer
567 views

BVI vs Bridge routers

What is the difference between BVI and Bridge on Cisco IOS routers?
0
votes
3answers
6k views

Cisco IOS: access-list logging rate-limited or missed packets

How do we fix these errors? 2629753: Dec 29 09:03:56.521 EST: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 2 packets This is a Cisco 871 router with BVI and access lists.
0
votes
1answer
3k views

IOS NAT with multiple interfaces

I am trying to create a DMZ type environment between two internal networks using Cisco NAT. The below configuration is working to permit the two 'nat outside' interfaces to access the dmz 'nat ...
0
votes
1answer
2k views

Cisco IOS: One SSID doesn't pull from the correct DHCP pool

I have 2 SSID setup in my Cisco 881W router. Our internal ssid pulls from the right DHCP pool (wpool), while our guest SSID does not pull from the right pool (gpool) Here is the router config ! ! ...
0
votes
1answer
47 views

Cisco 871w security

I purchased a 871W ISR for a small business and want to know what's best use practice when setting up security for this type of router. At the present time I have a static IP assigned to it and can ...
0
votes
2answers
551 views

Syntax checker working crazy with cisco

I'm trying to verify only two commands for cisco IOS ACL Extendend. They are: access-list 101 deny any 192.168.0.0/23 any access-list 101 permit udp 192.168.1.1 any For this i`m using a ...
0
votes
2answers
2k views

Setup Cisco IOS Static NAT

I'm trying to allow access to a printer on a separate LAN in the same building. I have control over only one of the networks... My attempt at not using another router failed see here. I now have a ...
0
votes
1answer
952 views

Configuration of Switch Module (WIC) on Cisco 3800

I have a 4 port module in my 3800 router, an HWIC-4ESW, that acts like a switch. I can configure IPs on each port if I do something like the following: conf t int F1/1 switchport access vlan 20 ...
0
votes
1answer
444 views

Cisco / IOS Priority of VPN Tunnels vs EIGRP Routes

If I have two interfaces, one which gets its networks from EIGRP, and another that is an internet connection with VPN tunnels. If the same network exists for match address of the VPN tunnels and an ...
0
votes
4answers
7k views

Cisco AnyConnect on IOS 12.4(20)T

There are plenty of tutorials on setting up AnyConnect on an ASA unit, and a handful of links noting that IOS 12.4(15) and later support AnyConnect, but I can't seem to find any good documentation ...
0
votes
1answer
1k views

IOS: tie SNMP v3 credentials to TACACS or RADIUS?

On Cisco IOS, I'm looking at moving from SNMP v1/2 to v3, which means separate user/password credentials instead of just community strings. Is it possible to have those user credentials pulled from, ...
0
votes
1answer
73 views

Cisco IOS, Multiple WAN & Port Forwards (Outside -> Inside PAT)

I have been trying to work out how to accomplish PATing from Outside to Inside on a Cisco IOS router, in this case specifically a Cisco 2901 running IOS Version 15.1(4)M1. Firstly, the problem I am ...
0
votes
1answer
90 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
0answers
37 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
1answer
224 views

Why can't I enable SSHv2 on my Cisco 3750X?

It seemed simple enough: use ip ssh version 2. This was the result: 3750xCoreStack(config)#ip ssh version 2 Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2). ...
0
votes
0answers
31 views

Cisco IOS AAA “TACACS unavailable” login message

A while ago I had to configure some routers to use TACACS+ as well as local authentication. I know the usual AAA config for TACACS+ with local fallback. What I can't remember is how I got it to ...
0
votes
0answers
123 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
0
votes
1answer
67 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...
0
votes
1answer
506 views

Cisco IOS: Logging only debug messages on command-line

I want to have a quiet command-line such as (config)# no logging console causes. Still, I want to make use of # debug commands. It appears to me that # debug depends on syslog level 7. So I cannot ...
0
votes
0answers
108 views

WSO2EMM (MDM) Profile Installation Failed - Certificate is invalid

I followed the documentation (https://docs.wso2.com/display/EMM110/General+Server+Configurations) to generate the certificate and depoly the iOS agent but when I try to setup the certificate I have ...
0
votes
0answers
53 views

How to fix stalled connection on large download

I have a cisco 1921 router performing routing and NAT function. Cisco 3750 is performing layer 3 core switching duties. Users are complaining about large file transfers being stalled (not dropped) ...
0
votes
0answers
468 views

Unable to communicate with web proxy server on iOS

I am following the instructions on how to use a HTTP proxy with an iPhone, however I appear unable to communicate with the HTTP proxy. I have configured the settings in my phone correctly to use the ...
0
votes
1answer
210 views

Putty: disable configuration of server terminal length

I would like to prevent Putty from setting the server terminal length so as to avoid the dreaded --More-- prompt in Cisco IOS. Please do not tell me to set length 0 in line config mode because this ...
0
votes
0answers
183 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
0
votes
0answers
178 views

C3600 Vlan's convert from IOS V 12.4 to 15.2

I need some help to get vlan's to get working again. I have a c2500 with v12.4 that works with the config above, now with a new c3600 with the same config but with v15.2 I can't put vlan's working. ...
0
votes
1answer
3k views

Port Forwarding on Cisco Router

I'm a Cisco newbie, have the 1841, with two ethernet interfaces: interface FastEthernet0/0: Internal Desired destination IP: 186.67.181.140 interface FastEthernet0/1: External World IP ...
0
votes
1answer
95 views

Cisco IOS Show | Filter | redirect

I am new to Cisco IOS and I have one question that I have come across. Please reference this thread. Reference The answer to that thread states that in Cisco IOS you can run a command, filter it down ...
0
votes
1answer
682 views

Cisco 887VA Port Forwarding Not Working

I have a Cisco 887VA connected to our BT Business Broadband line. We also have another modem on a seperate connection which also handles our DHCP. The Cisco is plugged into our network switch, as is ...
0
votes
1answer
625 views

iPhone can't authenticate at dovecot

I've set up a mail server running with postfix and dovecot. Mainly configured as described here. Also I created a signed certificate from Startssl.com. IMAP is running on port 993. From my computer ...