Questions tagged [ios]
The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.
309
questions
1
vote
3
answers
147
views
Cisco ACL Not Applying
This is probably something extreamly simple but I am executing the following code to block usage of port 80 on ip 192.168.1.50 and it does not seem to be working. The interface is right and I am using ...
3
votes
1
answer
21k
views
How to disable ICMP redirect packets in Cisco IOS?
I'm studying a "good practices" document for Cisco IOS, and one of its controls tells me to disable ICMP Redirect packets in the router. Sounds reasonable. So I go test it in Cisco Packet Tracker (a ...
4
votes
1
answer
105
views
Cisco IOS XR version clarification
I've run across this cisco advisory
It says:
This bug was introduced in Cisco IOS
XR Software release 3.6.2 and is fixed
with SMU hfr-k9sec-3.6.2.CSCtd74795.
The SMU ID for this fix in 3.6.2 ...
4
votes
1
answer
474
views
cisco 870 assign IP
I'll try to be "short." I've successfully enabled http server option on my Cisco 870, now I need to reach it and use the web based configuration. I haven't found how to assign an IP to the router ...
0
votes
1
answer
186
views
Will cisco 3750-e switches run the old ipservices ios code?
was wondering about cisco 3750-e switches. Will they run the old ipservices ios code? Or do they only run the univeral image?
Thanks
9
votes
1
answer
507
views
Simple Multicast Design
In order to support desktop imaging requirements I need to correct the multicast design on an existing network, but am not well versed in this subject. The diagram below gives a basic example of the ...
0
votes
1
answer
135
views
ios: how to stop output of a show command
Can anyone tell me how to break output of a show command in cisco ios?
Say I don't want to see all of 'show run' and I got the info I need, what keys can I press to stop it from printing the rest of ...
0
votes
1
answer
1k
views
Cannot login to Cisco 2911 over ssh?
30 minutes ago my router is not accepting ssh connection. Well, ports is open (due to nmap), ssh simply hangs on reading from Cisco socket (observation from strace):
/home/rafal/.ssh/id_dsa-cert type ...
0
votes
1
answer
4k
views
Can't enable IPv6 in Cisco 2800 router running IOS 12.4T
I can't enable IPV6 in a Cisco 2800 router that runs iOS version 12.4T.
I followed the summary steps section in Cisco's web page . But whenever I type "ipv6" on the command line (as in 'ipv6 ...
0
votes
1
answer
214
views
More than 8 classes in a policy-map - Cisco 3560
It appears I am limited to 8 classes per policy-map.
Here is the error message when using the Cisco Network Assistant:
The policy "policy-name" contains more
than 8 policers, which means it ...
2
votes
2
answers
400
views
DMZ-to-outside Access Lists
I'm learning about firewalls and access-lists, and I'm trying to decide what sort of access list I should have on the DMZ, particularly regarding outbound traffic. There's certain outbound traffic ...
4
votes
2
answers
13k
views
QoS for Cisco Router to Prioritize Voice and Interactive Traffic
I have a Cisco 891W NATing Voice and Data to the internet over a 10mbit/2mbit connection. Voice traffic gets degraded when I upload large files. Pings time out as well.
I tried to configure a QoS ...
1
vote
1
answer
2k
views
Cisco IOS: Is ip inspect used?
There is a Cisco IOS router with the following code in it. The below code seems to define Context-based Access Control Engine inspection rules. I don't think any of this is used.
The only occurences ...
0
votes
1
answer
110
views
Cisco T1 Routing Help
Thanks to someone on this site I was able to get the Serial0/0 interface up. I now have:
DCD=up DSR=up DTR=up RTS=up CTS=up
My next challenge seems to be in the routing and/or PC ip setup.
...
1
vote
2
answers
6k
views
Cisco IOS BVI ACL: Only allow established UDP
Related: Cisco IOS ACL: Don't permit incoming connections just because they are from port 80
I know we can use the established keyword for TCP.. but what can we do for UDP (short of replacing a ...
0
votes
2
answers
149
views
Cisco command wont work on syxtax checker
I'm trying to validate the building of a tool for managing Cisco ACL commands.
Thing is i'm using the aclcheck sintax validator (i dont own cisco equipament) with the following command do check
...
1
vote
4
answers
6k
views
How do I find out what the WIC Model is from CISCO IOS?
How do I find out what the model number of a WIC is with an IOS command? In show interface all I get is 'Hardware is Fast Ethernet', I don't see anything under 'show hardware' either...
0
votes
1
answer
971
views
Cisco 2911 - problem with DHCP
i am configuring DHCP daemon on Cisco 2911.
At some point i assigned address 192.168.50.50 to one box (using MAC address 'relation').
When I wanted to saved config - I got warning, that address 192....
7
votes
1
answer
15k
views
Why would Windows Server not respond to DHCP DISCOVER?
My network was working just fine and I broke it.
There is a Cisco 1711 router which was configured to hand out DHCP leases to the client PCs. I have a domain controller (Server 2008) on the same ...
2
votes
2
answers
17k
views
Restoring a Cisco router config using a config file
I'm working with a Cisco router over telnet (actually PuTTY), and I'm a newbie to ios.
I'm slowly getting the hang of it, but have a very basic question:
I have issued a show running-config command ...
1
vote
1
answer
282
views
Cisco 1760 T1 Setup
My 1760 has a WIC1-T1 card in Slot 0 and the slot 0 "OK" light is lit. When the router boots it shows that it sees the T1 card. I would like to configure my T1. I received the following details from ...
0
votes
4
answers
3k
views
How to start Cisco 2911 with presaved configuration?
I briefly configured branch router Cisco 2911 and saved config.
Unfortunately - after rerun Cisco needs "copy startup-config running-config" to read configuration (I really need this - for example to ...
0
votes
1
answer
862
views
BVI vs Bridge routers
What is the difference between BVI and Bridge on Cisco IOS routers?
1
vote
2
answers
469
views
Cisco IOS ACL types
The built in command help list displays access list types based on which range.
router1(config)#access-list ?
<1-99> IP standard access list
<100-199> IP ...
0
votes
1
answer
425
views
Cisco IOS ACL: Don't permit incoming connections just because they are from port 80
I am going much based on my memory and I may not be correct on all of this.
On a Cisco 851 (IOS) that uses a BVI or a bridge-route (the servers on the inside are configured with static and public IP ...
0
votes
3
answers
2k
views
Can't connect to PPTP server outside of network
I'm trying to configure my Cisco 881 running IOS 15 to allow pptp connections to servers outside of the network. I know the PPTP server is configured correctly, because a)it's a clients VPN, and b) ...
0
votes
1
answer
5k
views
IOS NAT with multiple interfaces
I am trying to create a DMZ type environment between two internal networks using Cisco NAT. The below configuration is working to permit the two 'nat outside' interfaces to access the dmz 'nat inside'...
1
vote
3
answers
4k
views
Issue forwarding port through Cisco 881 router
I am ultimately trying to set up a PPTP VPN server inside my firewall, but to verify that the router will be configured correctly first, I am trying to pass SSH through the Cisco 881 to the SSH server ...
5
votes
2
answers
1k
views
Cisco IOS: Segregating VLANS
I am trying to segregate the traffic on the VLANs, as one is our visitor VLAN (VLAN 3 is the guest lan). It is a Cisco 881W router.
Here is my VLAN configuration:
interface Vlan2
ip address 10.10....
2
votes
2
answers
8k
views
Example mrtg config to monitor Cisco CPU/memory usage
I have an existing basic MRTG setup done using cfgmaker to monitor the traffic of our Cisco router.
I'd like to add configuration sections to mrtg to have it monitor the CPU usage (min/avg/max if ...
3
votes
1
answer
6k
views
Monitoring incoming/outgoing packets on a Cisco switch
I would like to monitor (i.e. have the switch print out packets) incoming and/or outgoing packets on a Cisco switchport.
For instance, I'd like to be able to tell it: Print to the log all packets ...
0
votes
1
answer
2k
views
Cisco IOS: One SSID doesn't pull from the correct DHCP pool
I have 2 SSID setup in my Cisco 881W router. Our internal ssid pulls from the right DHCP pool (wpool), while our guest SSID does not pull from the right pool (gpool)
Here is the router config
!
! ...
0
votes
1
answer
58
views
Cisco 871w security
I purchased a 871W ISR for a small business and want to know what's best use practice when setting up security for this type of router.
At the present time I have a static IP assigned to it and can ...
3
votes
2
answers
9k
views
Cisco IOS: NAT overload for two WAN interfaces
I have a feeling the answer is policy-routing, but I'd like someone to clarify that.
Basically I'm not having any luck getting NAT to work with two WAN interfaces.
I have two WAN interfaces: fe0/1 (...
0
votes
2
answers
1k
views
Syntax checker working crazy with cisco
I'm trying to verify only two commands for cisco IOS ACL Extendend.
They are:
access-list 101 deny any 192.168.0.0/23 any
access-list 101 permit udp 192.168.1.1 any
For this i`m using a ...
2
votes
2
answers
40k
views
How to assign single port into multiple vlans
I have cisco switch 3560 and want to create vlans where in i can have a single port in multiple vlans. I tried creating one port e.g fa0/23 as trunk and then allowed it through multiple vlans but it ...
2
votes
3
answers
924
views
*nix shell with IOS style completion?
Is there a Linux shell that will let you type less than full commands as you can with Cisco IOS, at least for the first command (and not its arguments)?
I haven't really thought enough if this is ...
1
vote
2
answers
1k
views
Block Skype on Cisco IOS
I'm trying to block skype via policy routing but it's not working ... here's my configuration:
class-map match-any block
match protocol skype
policy-map QoS-Priority-Input
class block
police ...
7
votes
4
answers
2k
views
Cisco IOS QoS prioritize SSH but not SCP
How can I prioritize ssh traffic to ensure low-latency but throttle SCP file transfers? I'm looking for a solution that is not host specific so I don't have to add lists of IP addresses. Thanks!
2
votes
4
answers
2k
views
Un-failing over a Cisco PIX 515e
We had a power outage at our data center last week and when our dual PIX 515E running IOS 7.0(8) (configured with a failover cable) came back, they were in a failed over state where the Secondary unit ...
1
vote
1
answer
720
views
Cisco IOS rewrite http url
Is there a way that I can configure my router to rewrite http requests?
So for example, if:
http://www.example.com/porn.gif
is being accessed, it'll be re-written as:
http://172.16.0.1/denied....
0
votes
4
answers
9k
views
Cisco AnyConnect on IOS 12.4(20)T
There are plenty of tutorials on setting up AnyConnect on an ASA unit, and a handful of links noting that IOS 12.4(15) and later support AnyConnect, but I can't seem to find any good documentation ...
1
vote
2
answers
1k
views
Management VLAN Cisco Catalyst
I have configured a couple of VLANs on a Cisco Catalyst switch with IOS, i will put all the ports that clients is connected to, into these VLANs. I want to configure the native VLAN [vlan 1] as ...
0
votes
2
answers
547
views
output my Cisco 881 config
how does one "print" the startup config or running config.
also what is the best way to import config you have stored as a text file?
1
vote
2
answers
6k
views
RADIUS authentication on Cisco switches: how to assign privilege levels?
I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain.
I know ...
3
votes
2
answers
6k
views
Can IOS be upgraded on a Cisco Catalyst 6509 switch without downtime?
There's this Cisco Catalyst 6509 switch with 2 (two) supervisor modules; one of them is active, the other is (almost always) in standby.
We need to upgrade IOS; current version is 12.2.something (I ...
1
vote
2
answers
4k
views
Cisco Aironet (802.11n models): how to put a WEP128 ssid and a WPA/WPA2 ssid on the same radio?
I'm using a Cisco AIR-1252AG (IOS 12.4(10b)JDA3) and I must provide both a WEP128 wlan (for compatibility with older embedded devices, this will go to a firewalled vlan) and a WPA2 (WPA1 would be ok ...
5
votes
1
answer
617
views
Setting spanning tree link "priorities" in Cisco switches
I've got a pair of C2960G-48 switches (running IOS 12.2(46)SE, if it makes a difference) with redundant trunks in place. On these switches there are a bunch of VLANs that carry quite heavy traffic at ...
0
votes
2
answers
3k
views
Setup Cisco IOS Static NAT
I'm trying to allow access to a printer on a separate LAN in the same building. I have control over only one of the networks... My attempt at not using another router failed see here.
I now have a ...
1
vote
1
answer
1k
views
Configuration of Switch Module (WIC) on Cisco 3800
I have a 4 port module in my 3800 router, an HWIC-4ESW, that acts like a switch. I can configure IPs on each port if I do something like the following:
conf t
int F1/1
switchport access vlan 20
<...