The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

1
vote
2answers
155 views

Cisco IOS - Stuck in Read Only Mode

I can't figure out what happened but I can not enable privileged mode in my Cisco 3750. At first, I tried: enable to enter EXEC mode. My password would not work and it kicked me out after 3 ...
1
vote
2answers
691 views

Split horizon, route filtering, and having RIPv2 announce a non-attached route to host

Routers A, B & C live at 10.1.1.1, 10.1.1.2 and 10.1.1.3 on a /24 metro Ethernet subnet. Each router also has its own private subnet on another interface. Router B's private subnet links thru a ...
0
votes
2answers
74 views

Cisco Archiving of Logs - Rebooting device resets file count but doesn't remove files

We are using the cisco IOS feature of configuration archiving and it has been very useful. One thing we are finding is that we have set the maximum file count to 14, which is fine. Except when we ...
0
votes
2answers
120 views

Cisco command wont work on syxtax checker

I'm trying to validate the building of a tool for managing Cisco ACL commands. Thing is i'm using the aclcheck sintax validator (i dont own cisco equipament) with the following command do check ...
4
votes
1answer
695 views

How to configure IIS 7.5 SSL \ TLS to work with iOS 9 ATS

Problem: Our mobile app can no longer establish a secure connection to our web-service since iOS 9 now uses ATS. Background: iOS 9 introduces App Transport Security Server Setup: Windows Server 2008 ...
1
vote
1answer
98 views

How can we better pinpoint instability issues on our network?

We have a medium-sized network of 600 users, all on Cisco switches. Where the users are allowed to plug in routers, etc. on the endpoints, so that they can use wireless and/or multiple devices in ...
1
vote
1answer
278 views

iPhone loads Wi-Fi captive portal page over 3G (iOS 6)

I've made a captive portal using iptables NAT redirection and white-listed MACs. This works nicely, and iDevices pop up my login/terms page after association. However, I've noticed that when 3G is ...
1
vote
1answer
895 views

How to redirect Cisco IOS's show output to HTTP URL?

I found there's a redirect output modifier of Cisco IOS ( version 12.2(53)SE1 ), and there's http: URI support: #sh version | redirect ? flash: Uniform Resource Locator ftp: Uniform Resource ...
0
votes
1answer
771 views

Cisco IOS, Multiple WAN & Port Forwards (Outside -> Inside PAT)

I have been trying to work out how to accomplish PATing from Outside to Inside on a Cisco IOS router, in this case specifically a Cisco 2901 running IOS Version 15.1(4)M1. Firstly, the problem I am ...
0
votes
1answer
252 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
0
votes
1answer
145 views

Filter OSPF routes redistributed by BGP

I am redistributing OSPF routes inside a network, through BGP. However I don't want to redistribute all the advertised routes from OSPF (specificaly the private networks) to the outside of the AS. How ...
0
votes
1answer
548 views

Putty: disable configuration of server terminal length

I would like to prevent Putty from setting the server terminal length so as to avoid the dreaded --More-- prompt in Cisco IOS. Please do not tell me to set length 0 in line config mode because this ...
0
votes
1answer
164 views

Cisco IOS Show | Filter | redirect

I am new to Cisco IOS and I have one question that I have come across. Please reference this thread. Reference The answer to that thread states that in Cisco IOS you can run a command, filter it down ...
0
votes
1answer
1k views

Cisco 887VA Port Forwarding Not Working

I have a Cisco 887VA connected to our BT Business Broadband line. We also have another modem on a seperate connection which also handles our DHCP. The Cisco is plugged into our network switch, as is ...
0
votes
1answer
320 views

MDM Server Apple Certificate: Certificate Signature Verification failed

I want to create a MDM server to manage my iOS devices. I have enrolled in iOS Enterprise Developer program. And executed the following openSSL commands "1. Creating Certificate Authority (CA)" ...
0
votes
1answer
232 views

Route maps on dual homed Cisco router

I have a Cisco 1801 on a remote site with dual WAN connections, with route maps to correctly NAT depending on which interface the traffic leaves via. I use IP SLA to adjust the default route from the ...
0
votes
1answer
3k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
0
votes
1answer
270 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
0
votes
1answer
68 views

dot3StatsDuplexStatus not firing from Cisco Switch

Anyone have any luck with this Trap dot3StatsDuplexStatus OID = 1.3.6.1.2.1.10.7.2.1.19 I am able to test the OID by doing an SNMP walk which shows the correct information, however no Traps are ever ...
0
votes
1answer
234 views

Cisco 871 IOS BVI: Distinguishing incoming and outgoing

I understand that a BVI is very much equivalent to a network switch. But it includes the benefit of being able to have an access control list. I am doing this, but I would like to more effectively ...
0
votes
1answer
477 views

Forwarding a port internally - Cisco-881

I have a Cisco 881 on which I forward traffic coming from outside to an internal IP, but if an internal IP accesses the external IP, it gets the Cisco HTTP Server (or a broken connection if i set no ...
0
votes
1answer
111 views

Restrict NAT in IOS to only one public IP

I've managed to enable port-forwarding on my Cisco 877 but I wasn't able to find a way to specify a single accepted IP from the outside. Any link to a Cisco documentation or commands to type in IOS ...
5
votes
0answers
139 views

IOS QOS service policy pass-through on a tunnel interface

I have some SIP phones on one network that go through an IPIP tunnel to get to the server. I've setup QOS rules to watch for appropriate VOIP traffic as follows: class-map match-any class-voice ...
4
votes
0answers
530 views

strongSwan 4.5.2 with iOS and Mavericks, Connection Troubles

I am having trouble configuring strongSwan 4.5.2 to work with iOS 7 and OS X Mavericks. I have followed these two guides, but am still encountering problems. ...
2
votes
0answers
384 views

Is it possible to embed TCL directly into a Cisco startup-config?

Is it possible to embed TCL directly into a Cisco startup-config? From the (lack of) information I'm finding, it doesn't look do-able. I have a tool that generates Cisco configurations based on some ...
1
vote
0answers
227 views

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few ...
1
vote
0answers
143 views

VTP trunking not working for Cisco 4948 switch

I'm adding a new Cisco 4948 switch to an existing network that has a bunch of 3500 series switches already configured and working. I've verified the VTP domain and password are identical, tried ...
1
vote
0answers
85 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
1
vote
0answers
156 views

Access Server 2008R2 RemoteApp with MS iOS RDP App without RD Web Access

Is it possible to connect to a Server 2008 R2 RemoteApp using the iOS Microsoft Remote Desktop App v8.0.9, across LAN and VPN, with only the RD Session Host service installed? That is, without RD Web ...
1
vote
0answers
475 views

Trying to change a custom VPN port back to the original on Fortigate 40C

We recently changed our firewall and bought a Fortigate 40C device. We wanted to use our old VPN settings. The Fortigate support technician told us that this model was new and he didn't know it in ...
1
vote
0answers
2k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
1
vote
0answers
282 views

How do get multicast to work on a Cisco AP1240?

I have a Cisco AP1142N in standalone mode acting as a simple AP. On the wired segment of the LAN, there is an Apple TV that is used to mirror laptop screens to a large TV screen. As long as clients ...
1
vote
0answers
344 views

Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly

I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
1
vote
0answers
1k views

Max STP instances reached on Cisco 2950 despite not actively using 64

I have a Cisco 5505 switch running CatOS connected to a number of Cisco 2950 switches running IOS. The 5505 switch supports a large number of vlans (I'm guessing 1005), yet the 2950s only support a ...
0
votes
0answers
12 views

APN fails for Apple Profile Manager

We have a new Mac on which we configured profile manager from scratch. Were trying to use it as an MDM to push profile settings over the WAN. I have obtained an APN certificate and the server is using ...
0
votes
0answers
15 views

Cisco 1921 ISR K9 with Cisco 2620xm failover

I have a Cisco 1921 ISR and a Cisco 2600 Router (2620xm). The C1921 is the primary router on the corporate network. I would like the Cisco 2600 to connect to a module on the C1921 and provide 2 ...
0
votes
0answers
46 views

softhether VPN server: PPP server not responding

I've created a Softether VPN server on a VPS. Connecting works great (over L2TP) but when I lock my iPhone (and wifi/4G gets disconnected) it sometimes doesn't reconnect. I then get this error message ...
0
votes
0answers
18 views

view the maximum equal cost paths configured for OSPF

How do you check if the maximum number of equal cost paths has been modified (with the (config-router)# maximum-paths command)? Is the only way by viewing the running configuration? show ip ospf ...
0
votes
0answers
7 views

RADIUS for unique hotspot and iOS clients?

Sorry if stupid questions. I need to be certain. Is Radius needed for a hotspot captive portal, where no login is needed, and which is unique (one only router) ? Is Radiys involved in another thing ...
0
votes
0answers
177 views

Captive HotSpot, Apple login callback issue

For some days I have been building a Wifi captive hotspot, from scratch. My question concerns Apple. It is working 90%: when I join my Wifi hotspot, the device (iPhone, iPad, Mac) displays a 'fake ...
0
votes
0answers
103 views

IOS FlexVPN client keeping create child SA every 60s?

I got a flexvpn client with sVTI tunnel interface, but it keeps creating child sa every 60s, like below. The VPN server is a linux Strongswan box, the config works fine in IOS 15.3 but not 15.4+. Any ...
0
votes
0answers
43 views

CISCO IOS NAT existing network into VPN private IP address

I have a CISCO IOS router with two interface, int0 for internal network and int1 for internet. I have site-to-site VPN as below and wondering how can I configure NAT. [192.168.1.0/24] = existing ...
0
votes
0answers
122 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
0answers
1k views

Unable to communicate with web proxy server on iOS

I am following the instructions on how to use a HTTP proxy with an iPhone, however I appear unable to communicate with the HTTP proxy. I have configured the settings in my phone correctly to use the ...
0
votes
0answers
278 views

Cisco 861 - Unable to traceroute

I'm having an issue with my Cisco 861. I'm unable to traceroute to any ip address from the router, even the next hop. Can anyone suggest possible causes. Apologies for the censoring but I won't take ...
0
votes
0answers
274 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
0
votes
0answers
521 views

Cisco 1841 - Acting as a PPPoE terminator?

We have 2x Fortigate 200B firewalls that we wish to operate in Active/Active HA mode - though, obviously, they cannot do this with PPPoE/DHCP enabled on the externally facing interfaces. To overcome ...
0
votes
0answers
198 views

Cisco 1602: rewriting startup-config from terminal

How do I rewrite startup-config on a Cisco 1602 router without affecting the running-config? Outgoing connections from the router (scp, http) are not allowed. I'm not connected to the serial port, ...
0
votes
0answers
1k views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...