New answers tagged

0

I simplified my setup by removing vlan 20 and having vlans 15 and 7 live on SW1. After doing this the final key was issuing the "vlan 15" command from global config so that a L2 vlan would build under the SVI I had. Life is now good. :)


1

There's a mess in your head. A really big one. you do not need the network A and B to be reachable through C. you do not need the switch in C network to be the route for A. What you need, is a router, which will have interfaces in all of your networks, and this router should be a default gateway for all three networks. ASA could probably be such a ...


0

If the DHCP clients are members of an Active Directory domain then you don't need to configure a DNS suffix or domain name for them in DHCP as they already have that by virtue of their AD domain membership. You need to make sure that the DHCP server on the router is assigning the DHCP clients a valid and correct ip address, subnet mask, DNS server(s) and ...


0

You could clear the previous key with the following command. cisco(config)# crypto key zeroize rsa Then sanitise the vty lines. Simple SSH Config cisco(config)# hostname <name> cisco(config)# ip domain-name <domain> cisco(config)# crypto key generate rsa cisco(config)# ip ssh version 2


0

The simplest way (yet secure) to implement a IPSec VPN is by using IKEv1 in Main Mode (you can see the scenarios to use aggressive mode). So, assuming you are trying to use IKEv1 Main Mode: First of all, IKEv1 phase 1 must be negotiated. IPSec only will be negoatiated after phase 1 is OK. (Phase 1 is also called ISAKMP). To negotiate phase 1, you need to ...


0

That was easy and embarrassing - we have been sending packets to multicast 225.0.0.1 and 239.0.0.1-16 which are multicast range without IGMP Snooping filtering, according to: 1) IETF specification: https://tools.ietf.org/html/draft-ietf-mboned-ipv4-mcast-unusable-01 2) Cisco documentation (page 7-9): ...


0

Maybe you can try to put interface ip and add that interface into vlan, after that assign port to that vlan.


0

Under the Default VLAN change to the VLAN managment you need and save reboot and you are done.


1

Turns out it was the bin file on the PC that was corrupted. I extracted it again from the tar archive and now it's uploading. Sigh. Always return to zero when you're stuck.


2

The first icmp packet is fail because host sends ARP request. If the destination host MAC is already in ARP cahce the device is not send this request.


0

It turns out that NXOS version 7.0(3)I1(3) does not offer sFlow. We need to upgrade to 7.0(3)I2(1) for that functionality.


0

This is a typical beginning of each failure story in deploying ASA. Someone decides he needs ASA instead of the router and starts to use it like router. But ASA isn't quite a router, it's a security appliance. It's not intended to be used instead of the router, it's intended to be used with a router. The fact that it's capable of doing some of the router's ...


1

I was able to fix, by making the following change: ip nat source list 10 interface GigabitEthernet0/0 overload to ip nat inside source list 10 interface GigabitEthernet0/0 overload (inside was missing)


-1

A little old, but maybe it will point you in the right direction. http://www.cisco.com/c/en/us/support/docs/ip/routing-information-protocol-rip/16448-default.html Edit: Maybe the problem is related to setting a default route.


0

You certainly cannot get out from VLAN20, because access-list 10 does not permit the IP-addresses in VLAN20, only those in VLAN10. The ACL entries are handled in order, so the deny any happens before the permit 10.0.20.0.


5

It's not a router problem and it has nothing to do with the "Cisco world". You can host multiple websites on a single web server all on port 80 via a single ip address by using Host Headers (or the Linux equivalent).


0

In order for this to work, you need to add a HWIC-4ESW module from the physical modules. Then use sh int to see what are the interfaces are named. The description for it is : The HWIC-4ESW provides four switching ports.


1

The SG200-50 is a layer 2 switch only. So while it supports grouping of ports to VLANs it cannot route traffic between them without an external router or L3 switch. You will not be able to assign the printer to two VLAN simultaneously.


0

You will need arp permit-nonconnected enabled for the NAT to work properly. arp permit-nonconnected To enable the ARP cache to also include non-directly-connected subnets, use the arp permit-nonconnected command in global configuration mode. To disable non-connected subnets, use the no form of this command. Usage Guidelines The ASA ...


0

Configuring DHCP Relay is done through the ip helper-address command in interface config mode, like so : interface ethernet 1 ip helper-address 192.168.1.1 where 192.168.1.1 is your DHCP server.


0

I was facing problem due to loss of information in the dhcp binding table. In short the subscriber id automatically generated would not match my reservations. Here are some examples: port# interface received SID(hex) expected SID(hex) 2 Gi1/0/2 0047-6931-2f30-2f 0047-6931-2f30-2f32 13 Gi1/0/13 0047-6931-2f30-2f31 ...



Top 50 recent answers are included