The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

0
votes
1answer
173 views

More than 8 classes in a policy-map - Cisco 3560

It appears I am limited to 8 classes per policy-map. Here is the error message when using the Cisco Network Assistant: The policy "policy-name" contains more than 8 policers, which means it ...
0
votes
3answers
836 views

List Of Cisco IOS Devices

I want to start playing a bit with Cisco IOS and I have a Cisco WAP200 Wireless Router here, so I want to know if it comes with IOS and also where I can find a list of the IOS devices so I can know ...
2
votes
2answers
200 views

DMZ-to-outside Access Lists

I'm learning about firewalls and access-lists, and I'm trying to decide what sort of access list I should have on the DMZ, particularly regarding outbound traffic. There's certain outbound traffic ...
1
vote
1answer
1k views

Cisco IOS: Is ip inspect used?

There is a Cisco IOS router with the following code in it. The below code seems to define Context-based Access Control Engine inspection rules. I don't think any of this is used. The only occurences ...
4
votes
5answers
7k views

Is there a way to submit a batch of commands to a Cisco router and have them execute from the router?

I need to change the configuration of a remote (6 hours' drive) client's Cisco 871 (IOS 12.4.15T) from my location because of some new internet service at his location. To be more precise, I need to ...
6
votes
1answer
7k views

Why would Windows Server not respond to DHCP DISCOVER?

My network was working just fine and I broke it. There is a Cisco 1711 router which was configured to hand out DHCP leases to the client PCs. I have a domain controller (Server 2008) on the same ...
2
votes
2answers
7k views

Restoring a Cisco router config using a config file

I'm working with a Cisco router over telnet (actually PuTTY), and I'm a newbie to ios. I'm slowly getting the hang of it, but have a very basic question: I have issued a show running-config command ...
1
vote
1answer
140 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
0
votes
1answer
105 views

Cisco T1 Routing Help

Thanks to someone on this site I was able to get the Serial0/0 interface up. I now have: DCD=up DSR=up DTR=up RTS=up CTS=up My next challenge seems to be in the routing and/or PC ip setup. ...
1
vote
1answer
260 views

Cisco 1760 T1 Setup

My 1760 has a WIC1-T1 card in Slot 0 and the slot 0 "OK" light is lit. When the router boots it shows that it sees the T1 card. I would like to configure my T1. I received the following details from ...
0
votes
1answer
736 views

Cisco 2911 - problem with DHCP

i am configuring DHCP daemon on Cisco 2911. At some point i assigned address 192.168.50.50 to one box (using MAC address 'relation'). When I wanted to saved config - I got warning, that address 192....
0
votes
4answers
2k views

How to start Cisco 2911 with presaved configuration?

I briefly configured branch router Cisco 2911 and saved config. Unfortunately - after rerun Cisco needs "copy startup-config running-config" to read configuration (I really need this - for example to ...
1
vote
1answer
97 views

IOS not saving evaluate rule in access-list

I have a basic firewall set up on an pretty od IOS in form of IPv6 access list exterior-in6 evaluate exterior-reflect sequence 1 permit ipv6 any host [my external address] sequence 10 permit ...
0
votes
1answer
511 views

Cisco 851 (IOS) router: FastEthernet 4 (WAN) got the shutdown flag

At a customer location there was a Cisco 851 router (which uses IOS). The PCs on location were all of a sudden unable to connect. We came on site and found that FastEthernet 4 (the WAN port) was "...
0
votes
2answers
3k views

Cisco IOS BVI ACL: Only allow established UDP

Related: Cisco IOS ACL: Don't permit incoming connections just because they are from port 80 I know we can use the established keyword for TCP.. but what can we do for UDP (short of replacing a ...
0
votes
1answer
653 views

BVI vs Bridge routers

What is the difference between BVI and Bridge on Cisco IOS routers?
1
vote
2answers
342 views

Cisco IOS ACL types

The built in command help list displays access list types based on which range. router1(config)#access-list ? <1-99> IP standard access list <100-199> IP ...
2
votes
3answers
8k views

Cisco IOS: access-list logging rate-limited or missed packets

How do we fix these errors? 2629753: Dec 29 09:03:56.521 EST: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 2 packets This is a Cisco 871 router with BVI and access lists.
0
votes
1answer
370 views

Cisco IOS ACL: Don't permit incoming connections just because they are from port 80

I am going much based on my memory and I may not be correct on all of this. On a Cisco 851 (IOS) that uses a BVI or a bridge-route (the servers on the inside are configured with static and public IP ...
0
votes
3answers
7k views

Why do Cisco IOS routers hang in the middle of large downloads?

After a few years in use. We have seen Cisco 871 and 851 routers that would hang if you had a single download that was more than 100M large. It is intermittent. Sometimes the problem goes away, ...
1
vote
0answers
1k views

Max STP instances reached on Cisco 2950 despite not actively using 64

I have a Cisco 5505 switch running CatOS connected to a number of Cisco 2950 switches running IOS. The 5505 switch supports a large number of vlans (I'm guessing 1005), yet the 2950s only support a ...
0
votes
1answer
111 views

Restrict NAT in IOS to only one public IP

I've managed to enable port-forwarding on my Cisco 877 but I wasn't able to find a way to specify a single accepted IP from the outside. Any link to a Cisco documentation or commands to type in IOS ...
0
votes
3answers
2k views

Can't connect to PPTP server outside of network

I'm trying to configure my Cisco 881 running IOS 15 to allow pptp connections to servers outside of the network. I know the PPTP server is configured correctly, because a)it's a clients VPN, and b) ...
1
vote
3answers
3k views

Issue forwarding port through Cisco 881 router

I am ultimately trying to set up a PPTP VPN server inside my firewall, but to verify that the router will be configured correctly first, I am trying to pass SSH through the Cisco 881 to the SSH server ...
0
votes
1answer
3k views

IOS NAT with multiple interfaces

I am trying to create a DMZ type environment between two internal networks using Cisco NAT. The below configuration is working to permit the two 'nat outside' interfaces to access the dmz 'nat inside'...
3
votes
1answer
3k views

Monitoring incoming/outgoing packets on a Cisco switch

I would like to monitor (i.e. have the switch print out packets) incoming and/or outgoing packets on a Cisco switchport. For instance, I'd like to be able to tell it: Print to the log all packets ...
0
votes
1answer
2k views

Cisco IOS: One SSID doesn't pull from the correct DHCP pool

I have 2 SSID setup in my Cisco 881W router. Our internal ssid pulls from the right DHCP pool (wpool), while our guest SSID does not pull from the right pool (gpool) Here is the router config ! ! ...
5
votes
2answers
920 views

Cisco IOS: Segregating VLANS

I am trying to segregate the traffic on the VLANs, as one is our visitor VLAN (VLAN 3 is the guest lan). It is a Cisco 881W router. Here is my VLAN configuration: interface Vlan2 ip address 10.10....
2
votes
2answers
7k views

Example mrtg config to monitor Cisco CPU/memory usage

I have an existing basic MRTG setup done using cfgmaker to monitor the traffic of our Cisco router. I'd like to add configuration sections to mrtg to have it monitor the CPU usage (min/avg/max if ...
0
votes
1answer
48 views

Cisco 871w security

I purchased a 871W ISR for a small business and want to know what's best use practice when setting up security for this type of router. At the present time I have a static IP assigned to it and can ...
0
votes
2answers
120 views

Cisco command wont work on syxtax checker

I'm trying to validate the building of a tool for managing Cisco ACL commands. Thing is i'm using the aclcheck sintax validator (i dont own cisco equipament) with the following command do check ...
2
votes
2answers
5k views

Cisco IOS: NAT overload for two WAN interfaces

I have a feeling the answer is policy-routing, but I'd like someone to clarify that. Basically I'm not having any luck getting NAT to work with two WAN interfaces. I have two WAN interfaces: fe0/1 (...
0
votes
2answers
744 views

Syntax checker working crazy with cisco

I'm trying to verify only two commands for cisco IOS ACL Extendend. They are: access-list 101 deny any 192.168.0.0/23 any access-list 101 permit udp 192.168.1.1 any For this i`m using a ...
2
votes
2answers
16k views

How to assign single port into multiple vlans

I have cisco switch 3560 and want to create vlans where in i can have a single port in multiple vlans. I tried creating one port e.g fa0/23 as trunk and then allowed it through multiple vlans but it ...
1
vote
2answers
1k views

Block Skype on Cisco IOS

I'm trying to block skype via policy routing but it's not working ... here's my configuration: class-map match-any block match protocol skype policy-map QoS-Priority-Input class block police ...
7
votes
4answers
2k views

Cisco IOS QoS prioritize SSH but not SCP

How can I prioritize ssh traffic to ensure low-latency but throttle SCP file transfers? I'm looking for a solution that is not host specific so I don't have to add lists of IP addresses. Thanks!
1
vote
1answer
634 views

Cisco IOS rewrite http url

Is there a way that I can configure my router to rewrite http requests? So for example, if: http://www.example.com/porn.gif is being accessed, it'll be re-written as: http://172.16.0.1/denied....
1
vote
2answers
911 views

Management VLAN Cisco Catalyst

I have configured a couple of VLANs on a Cisco Catalyst switch with IOS, i will put all the ports that clients is connected to, into these VLANs. I want to configure the native VLAN [vlan 1] as ...
4
votes
2answers
10k views

QoS for Cisco Router to Prioritize Voice and Interactive Traffic

I have a Cisco 891W NATing Voice and Data to the internet over a 10mbit/2mbit connection. Voice traffic gets degraded when I upload large files. Pings time out as well. I tried to configure a QoS ...
1
vote
2answers
5k views

RADIUS authentication on Cisco switches: how to assign privilege levels?

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain. I know ...
3
votes
2answers
4k views

Can IOS be upgraded on a Cisco Catalyst 6509 switch without downtime?

There's this Cisco Catalyst 6509 switch with 2 (two) supervisor modules; one of them is active, the other is (almost always) in standby. We need to upgrade IOS; current version is 12.2.something (I ...
2
votes
4answers
2k views

Un-failing over a Cisco PIX 515e

We had a power outage at our data center last week and when our dual PIX 515E running IOS 7.0(8) (configured with a failover cable) came back, they were in a failed over state where the Secondary unit ...
1
vote
2answers
3k views

Cisco Aironet (802.11n models): how to put a WEP128 ssid and a WPA/WPA2 ssid on the same radio?

I'm using a Cisco AIR-1252AG (IOS 12.4(10b)JDA3) and I must provide both a WEP128 wlan (for compatibility with older embedded devices, this will go to a firewalled vlan) and a WPA2 (WPA1 would be ok ...
2
votes
2answers
3k views

Simple road warrior IPv4 VPN configuration in Cisco IOS

I'm looking to setup a reasonably simple road warrior VPN configuration on our Cisco routers. Frustratingly, I've been searching for this but cannot find a simple complete guide. Multiple (not ...
2
votes
2answers
1k views

Basic IPv6 firewall on Cisco IOS for small network

Now that I have IPv6 connectivity to my network, I'm looking for a basic IPv6 firewall configuration for IOS. It used to be that we could rely on NAT to 'hide' internal (read: outgoing connections ...
3
votes
2answers
5k views

cisco router loses configuration on reload even after saving it

I'm configuring a Cisco 3640 and it's not saving simple things like my hostname. I've tried with 'wr' and 'copy running-config startup-config'. Also erased the configuration but no luck. There's no ...
1
vote
2answers
716 views

Split horizon, route filtering, and having RIPv2 announce a non-attached route to host

Routers A, B & C live at 10.1.1.1, 10.1.1.2 and 10.1.1.3 on a /24 metro Ethernet subnet. Each router also has its own private subnet on another interface. Router B's private subnet links thru a ...
2
votes
2answers
2k views

Cisco router and switch configuration

I want to configure a Cisco 2600 series router to be DHCP server. To the ethernet port i want to connect a Cisco Catalyst 2900XL 24 ports switch, in this switch i want to connect a computer in port X2,...
2
votes
3answers
3k views

Help me with my Cisco ios config

I'm setting up a cisco 881 (this is my first ios device) I got everything working the way i want except port forwarding im trying forward all incoming port 80 traffic to 10.10.10.60 and I don't see ...
5
votes
1answer
533 views

Setting spanning tree link “priorities” in Cisco switches

I've got a pair of C2960G-48 switches (running IOS 12.2(46)SE, if it makes a difference) with redundant trunks in place. On these switches there are a bunch of VLANs that carry quite heavy traffic at ...