The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

3
votes
2answers
882 views

Cannot ping outside Fa4 on cisco 871w Router (SoHo)

After starting fresh after a write erase and a reload on a cisco 871w. I cannot ping outside of the wan (fa4). I gave vlan1 (default) an ip because apparently the built in "4 port switch" is a layer ...
1
vote
2answers
94 views

Cisco IOS - Stuck in Read Only Mode

I can't figure out what happened but I can not enable privileged mode in my Cisco 3750. At first, I tried: enable to enter EXEC mode. My password would not work and it kicked me out after 3 ...
1
vote
2answers
631 views

Split horizon, route filtering, and having RIPv2 announce a non-attached route to host

Routers A, B & C live at 10.1.1.1, 10.1.1.2 and 10.1.1.3 on a /24 metro Ethernet subnet. Each router also has its own private subnet on another interface. Router B's private subnet links thru a ...
0
votes
2answers
64 views

Cisco Archiving of Logs - Rebooting device resets file count but doesn't remove files

We are using the cisco IOS feature of configuration archiving and it has been very useful. One thing we are finding is that we have set the maximum file count to 14, which is fine. Except when we ...
0
votes
2answers
118 views

Cisco command wont work on syxtax checker

I'm trying to validate the building of a tool for managing Cisco ACL commands. Thing is i'm using the aclcheck sintax validator (i dont own cisco equipament) with the following command do check ...
1
vote
1answer
108 views

Cisco IOS - terminate a process (kill a process)

How do I terminate a process similarly to kill -9 $PID? I would like to do the same as GNU/Linux offers: For example, a shell is running a Telnet session to a router, but later that router is powered ...
1
vote
1answer
78 views

How can we better pinpoint instability issues on our network?

We have a medium-sized network of 600 users, all on Cisco switches. Where the users are allowed to plug in routers, etc. on the endpoints, so that they can use wireless and/or multiple devices in ...
1
vote
1answer
216 views

iPhone loads Wi-Fi captive portal page over 3G (iOS 6)

I've made a captive portal using iptables NAT redirection and white-listed MACs. This works nicely, and iDevices pop up my login/terms page after association. However, I've noticed that when 3G is ...
1
vote
1answer
2k views

How to setup a static multicast ARP entry with Cisco SG300?

We're running a Microsoft NLB cluster in multicast mode as a loadbalancer. Using our old Cisco IOS switches we propagate access to the cluster to our branches using a static ARP entry in the core ...
1
vote
1answer
657 views

How to redirect Cisco IOS's show output to HTTP URL?

I found there's a redirect output modifier of Cisco IOS ( version 12.2(53)SE1 ), and there's http: URI support: #sh version | redirect ? flash: Uniform Resource Locator ftp: Uniform Resource ...
0
votes
1answer
66 views

Cisco IOS, Multiple WAN & Port Forwards (Outside -> Inside PAT)

I have been trying to work out how to accomplish PATing from Outside to Inside on a Cisco IOS router, in this case specifically a Cisco 2901 running IOS Version 15.1(4)M1. Firstly, the problem I am ...
0
votes
1answer
87 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
1answer
67 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...
0
votes
1answer
208 views

Putty: disable configuration of server terminal length

I would like to prevent Putty from setting the server terminal length so as to avoid the dreaded --More-- prompt in Cisco IOS. Please do not tell me to set length 0 in line config mode because this ...
0
votes
1answer
95 views

Cisco IOS Show | Filter | redirect

I am new to Cisco IOS and I have one question that I have come across. Please reference this thread. Reference The answer to that thread states that in Cisco IOS you can run a command, filter it down ...
0
votes
1answer
678 views

Cisco 887VA Port Forwarding Not Working

I have a Cisco 887VA connected to our BT Business Broadband line. We also have another modem on a seperate connection which also handles our DHCP. The Cisco is plugged into our network switch, as is ...
0
votes
1answer
223 views

MDM Server Apple Certificate: Certificate Signature Verification failed

I want to create a MDM server to manage my iOS devices. I have enrolled in iOS Enterprise Developer program. And executed the following openSSL commands "1. Creating Certificate Authority (CA)" ...
0
votes
1answer
170 views

Route maps on dual homed Cisco router

I have a Cisco 1801 on a remote site with dual WAN connections, with route maps to correctly NAT depending on which interface the traffic leaves via. I use IP SLA to adjust the default route from the ...
0
votes
1answer
2k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
0
votes
1answer
219 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
0
votes
1answer
63 views

dot3StatsDuplexStatus not firing from Cisco Switch

Anyone have any luck with this Trap dot3StatsDuplexStatus OID = 1.3.6.1.2.1.10.7.2.1.19 I am able to test the OID by doing an SNMP walk which shows the correct information, however no Traps are ever ...
0
votes
1answer
221 views

Cisco 871 IOS BVI: Distinguishing incoming and outgoing

I understand that a BVI is very much equivalent to a network switch. But it includes the benefit of being able to have an access control list. I am doing this, but I would like to more effectively ...
0
votes
1answer
455 views

Forwarding a port internally - Cisco-881

I have a Cisco 881 on which I forward traffic coming from outside to an internal IP, but if an internal IP accesses the external IP, it gets the Cisco HTTP Server (or a broken connection if i set no ...
0
votes
1answer
108 views

Restrict NAT in IOS to only one public IP

I've managed to enable port-forwarding on my Cisco 877 but I wasn't able to find a way to specify a single accepted IP from the outside. Any link to a Cisco documentation or commands to type in IOS ...
4
votes
0answers
127 views

IOS QOS service policy pass-through on a tunnel interface

I have some SIP phones on one network that go through an IPIP tunnel to get to the server. I've setup QOS rules to watch for appropriate VOIP traffic as follows: class-map match-any class-voice ...
3
votes
0answers
410 views

strongSwan 4.5.2 with iOS and Mavericks, Connection Troubles

I am having trouble configuring strongSwan 4.5.2 to work with iOS 7 and OS X Mavericks. I have followed these two guides, but am still encountering problems. ...
2
votes
0answers
317 views

Is it possible to embed TCL directly into a Cisco startup-config?

Is it possible to embed TCL directly into a Cisco startup-config? From the (lack of) information I'm finding, it doesn't look do-able. I have a tool that generates Cisco configurations based on some ...
1
vote
0answers
44 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
1
vote
0answers
100 views

Access Server 2008R2 RemoteApp with MS iOS RDP App without RD Web Access

Is it possible to connect to a Server 2008 R2 RemoteApp using the iOS Microsoft Remote Desktop App v8.0.9, across LAN and VPN, with only the RD Session Host service installed? That is, without RD Web ...
1
vote
0answers
341 views

Trying to change a custom VPN port back to the original on Fortigate 40C

We recently changed our firewall and bought a Fortigate 40C device. We wanted to use our old VPN settings. The Fortigate support technician told us that this model was new and he didn't know it in ...
1
vote
0answers
1k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
1
vote
0answers
220 views

How do get multicast to work on a Cisco AP1240?

I have a Cisco AP1142N in standalone mode acting as a simple AP. On the wired segment of the LAN, there is an Apple TV that is used to mirror laptop screens to a large TV screen. As long as clients ...
1
vote
0answers
236 views

Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly

I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
1
vote
0answers
890 views

Max STP instances reached on Cisco 2950 despite not actively using 64

I have a Cisco 5505 switch running CatOS connected to a number of Cisco 2950 switches running IOS. The 5505 switch supports a large number of vlans (I'm guessing 1005), yet the 2950s only support a ...
0
votes
0answers
37 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
0answers
31 views

Cisco IOS AAA “TACACS unavailable” login message

A while ago I had to configure some routers to use TACACS+ as well as local authentication. I know the usual AAA config for TACACS+ with local fallback. What I can't remember is how I got it to ...
0
votes
0answers
123 views

How to setup Cisco IOS with multi public IP's

I'd like to set up a little network environment. We have bought 2 different subnet from our ISP. The WAN internet connection : xx.yy.81.61/26 WAN gateway: xx.yy.81.1 First subnet : xx.yy.81.80/30 ...
0
votes
0answers
108 views

WSO2EMM (MDM) Profile Installation Failed - Certificate is invalid

I followed the documentation (https://docs.wso2.com/display/EMM110/General+Server+Configurations) to generate the certificate and depoly the iOS agent but when I try to setup the certificate I have ...
0
votes
0answers
53 views

How to fix stalled connection on large download

I have a cisco 1921 router performing routing and NAT function. Cisco 3750 is performing layer 3 core switching duties. Users are complaining about large file transfers being stalled (not dropped) ...
0
votes
0answers
465 views

Unable to communicate with web proxy server on iOS

I am following the instructions on how to use a HTTP proxy with an iPhone, however I appear unable to communicate with the HTTP proxy. I have configured the settings in my phone correctly to use the ...
0
votes
0answers
183 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
0
votes
0answers
178 views

C3600 Vlan's convert from IOS V 12.4 to 15.2

I need some help to get vlan's to get working again. I have a c2500 with v12.4 that works with the config above, now with a new c3600 with the same config but with v15.2 I can't put vlan's working. ...
0
votes
0answers
217 views

Cisco 861 - Unable to traceroute

I'm having an issue with my Cisco 861. I'm unable to traceroute to any ip address from the router, even the next hop. Can anyone suggest possible causes. Apologies for the censoring but I won't take ...
0
votes
0answers
195 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
0
votes
0answers
317 views

Cisco 1841 - Acting as a PPPoE terminator?

We have 2x Fortigate 200B firewalls that we wish to operate in Active/Active HA mode - though, obviously, they cannot do this with PPPoE/DHCP enabled on the externally facing interfaces. To overcome ...
0
votes
0answers
154 views

Cisco 1602: rewriting startup-config from terminal

How do I rewrite startup-config on a Cisco 1602 router without affecting the running-config? Outgoing connections from the router (scp, http) are not allowed. I'm not connected to the serial port, ...
0
votes
0answers
848 views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...