Questions tagged [cisco]
Cisco is a provider of switches and routers to commercial consumers. Cisco devices run IOS or NX-OS operating systems. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.
2,636
questions
0
votes
0
answers
66
views
Supply only one IP address per each switch(cisco L3) port
I am small ISP and all my clients will be connected to each ports of Cisco N9K-C9372PX switch.
I need to disable L2 routing and supply only one IP per port(or maybe /30 subnet), actually how each ISP ...
1
vote
0
answers
61
views
Cisco Wireless Access Points have wireless controller hard-coded with cisco-capwap-controller
My network team has a problem. They have installed a second wireless controller for a new physical site. The wireless access points at the second site all connect to the wireless controller at our ...
0
votes
0
answers
41
views
802.1X freeradius on debian client cisco 2950
I want to authenticate my PC using 802.1X with a Cisco 2950 switch and a up-to-date freeradius on a Debian system.
Here is my Cisco configuration :
radius-server host 192.168.1.195 auth-port 1812 acct-...
0
votes
0
answers
73
views
SNTP not working on Cisco SG220
I'm trying to make SNTP work on a Cisco SG220 switch by using a NTP server pool ("0.europe.pool.ntp.org"). When I put the IP address of a NTP server in that pool, it works fine. When I put ...
11
votes
4
answers
3k
views
How to find what is wearing out my SSDs
We have 8 Cisco servers with 12 spinning disks for data and 2 SSDs for OS. The 2 SSDs are in linux software raid 1. The SSDs all have their wear indicator in single digits and some of those that have ...
0
votes
0
answers
81
views
FreeRADIUS authorization
We currently have FreeRADIUS to either forward or drop requests (to authentication server) based on the AV pairs received during client authentication (shown below). However what I would like to do ...
0
votes
0
answers
102
views
1000Base Fiber Switch to 100Base Fiber NIC (Desktop PC)
Setting up an office space with some ACE Vision U6601 Desktop PCs. The current switch is a Cisco switch pushing 1000 M/bits and the PC fiber NICs only go up to 100 Full Duplex. Directly connecting the ...
1
vote
1
answer
101
views
Change Cisco Management VLAN
I currently have the following configuration. A Checkpoint firewall (which is the router) and 12 Cisco 9200 switches. SW1 is connected to the firewall. I need to change the MGMT VLAN from VLAN20 to ...
0
votes
0
answers
229
views
Cisco AnyConnect profile using IPsec
The AnyConnect vpn always tries to use SSL connection instead of IPsec even if it is set in the profile.
I have an instance of anyconnect running with some vpn (other.vpn) (not IPsec), which works ...
0
votes
1
answer
651
views
Trouble setting Cisco switch boot image
I am trying to upgrade a cisco 3850f-e from 16.09.04 to 16.12.10a. I got the 16.12.10a bin in flash and set it as the boot image. Looked good so I did write memory. After a reload it still booted ...
0
votes
2
answers
211
views
Subnet mask for 192.168.1.7/30
I want to create two IP addresses, 192.168.1.0/30
and 192.168.1.5.
Adding the first IP for the router port returns this error "Bad mask /30 for address 192.168.1.7":
Router>en
Router#conf ...
0
votes
0
answers
200
views
Cannot SSH to link-local IPv6 address on Packet Tracer
due to the fact that I don't have physical equipment at the moment I don't know if what I am about to say is purely an issue with Packet Tracer.
I configured a Catalyst 2960 switch to allow for remote ...
3
votes
1
answer
321
views
Are SFP+ "Ethernet" direct attach cables compatible with Fibre Channel?
I'm trying to find some short 8G SFP+ Fibre Channel direct attach cables but they're rare and expensive, can a passive 10G SFP+ direct attach cable marketed for Ethernet be used between two 8G SFP+ ...
0
votes
0
answers
1k
views
How to fix Failed to deploy VM: postNFCData failed:H
I am doing networking stuff after 20 years. I don't remember a lot. So please help.
We have a ESXi server with the following capacity:
Basically, we need to import the Cisco Firepower Management ...
0
votes
1
answer
103
views
How to check total operating hours for Cisco Catalyst switches?
We bought about 25 Cisco Catalyst (9300 & 9500) switches and about 200+ SFPs from a distributor with whom we've had trouble in the past - i.e. they sent us refurbished hardware when we ordered new....
0
votes
1
answer
392
views
Rsyslog not writing any logs from Cisco network devices - all other remote syslog works fine
tcpdump confirms valid syslog is coming in from multiple remote systems - servers and Cisco network equipment.
OS is Linux RHEL 8.8
The servers all come in fine and write to disk, and are shown as ...
0
votes
0
answers
271
views
ED137 SIP & RTP (VoIP) for Air Traffic Control Use with Cisco CUBE
I am working with an air traffic control client who is using a variant of SIP called ED137.
There are 2 main uses, Ground to Ground (basically telephone calls) and Air to Ground to Air (radio traffic ...
0
votes
1
answer
71
views
Cisco IOS - mapping out ports with arp, mac-address table, and interface status
I've unfortunately been tasked with determining which switchports connect to what- be it a connection to another switchport, or a link to a host. Basically determine what each port is connected to, ...
0
votes
0
answers
188
views
Cisco IOS/XR/NXOS, determine what's plugged into each port using arp, interfaces, and mac address-table
I need to try to map out the access layer switches for this environment, and determine what each port is currently being used for. My ultimate goal here is to determine the IP address/hostname of the ...
1
vote
0
answers
54
views
Internet failover on Cisco ASA 5500 series Primary ISP is on DHCP address and so is backup. Always defaults to backup
I had SLA MONITOR setup on my ASA and working fine for months. All traffic was routing through my primary connection. I rebooted my ASA after a firmware upgrade.
When it came back, it would always ...
0
votes
0
answers
40
views
Intermittent workstations with no network connectivity
I have a campus wide network with ~10 workstations around campus(not from the same switch) that can't connect to the internet/network, they are successfully acquiring an IP address from the DHCP ...
0
votes
1
answer
855
views
Connection reset by 10.180.20.1 port 22
Using a CentOS 7.9.2009 server I'm trying to ssh v1 using client with v2 into a Cisco router that has SSH v1 (can't be upgraded, I'm anticipating that).
I then modified my ssh_config file to allow for ...
1
vote
0
answers
475
views
Werid ESXi host mac flapping issue
We have some standalone ESXi hosts in our company. Recently we encountered a werid issue where the mac address of the ESXi host flapping.
Issue description:
I found that the IP of some esxi hosts will ...
0
votes
1
answer
68
views
How to properly include vlan configuration for preexisting OSPF routing in PT
I am using packet tracer to simulate an enterprise setting.
There would be a "main" office (marked as Bgta) and other minor offices in other cities, such as Mdlln. In the main office there ...
0
votes
1
answer
506
views
ansible backups for cisco asa devices: ERROR: % Invalid input detected at '^' marker
I have been tasked with backing up all of our network devices, so natuarally I chose ansible. I am no expert but I sure need help on this one! I have tried everything under the moon and cannot ...
0
votes
2
answers
2k
views
Ansible :: Am I not using the `cisco.ios.ios_facts` module?
I'm trying to build a simple POC ansible playbook that logs into a Cisco router and pulls the config. About my environment:
My Ubuntu is Ubuntu 18.04.5 LTS
My Ansible is version ansible 2.10.7 (...
1
vote
2
answers
701
views
Ansible to a Cisco Router :: Password Message Messing Up the Connection?
When I manually SSH from my Ansible server to a Cisco router, I see this on the command line:
me@ubuntu01:~/ansible$
me@ubuntu01:~/ansible$ ssh [email protected]
Password:
####################### ...
2
votes
1
answer
433
views
I need help to achieve (as close as possible) 40G network transfer speed (~1250 MB/s x 4)
I had a Gigabit network, which I upgraded recently to 40Gbps.
To do so, I replace my TPLINK switch with a Cisco Nexus 9396PX switch, which has a module with 12x 40G ports. The 40G network ...
0
votes
0
answers
291
views
Cisco UCS C220 M4 PSU Fault In Diagnostics
Hello fellow Sysadmins.
A C220 M4 with the latest recommended firmware I am working on displays the following fault messages on latest version diagnostics at Server Health:
PSU1 PSU1_PWRGD: Power ...
0
votes
0
answers
281
views
SCP on Ubuntu OpenSSH Server for Cisco backups
I am having a bit of an issue and I believe I need some help. We have an On-prem SFTP server which will be deprecated soon, so in the mean time I need to set up another SFTP option in AWS running on ...
-1
votes
1
answer
110
views
Cisco ASA to Watchguard
I have never worked with watchguard firebox firewalls in depth before and we are replacing a Cisco ASA 5515 with a Watchguard M390. I am having a hard time interpreting the configuration settings in ...
0
votes
2
answers
445
views
Insecure Connections With CA Issue Certificate
I have imported a web server certificate from a CSR coming from my Cisco C9300. The certificate came from the Certificate authority and shows the correct CA on the end of the chain. CLI shows that the ...
0
votes
1
answer
183
views
FTP performance issues - VMWare, cisco etc
We are experiencing FTP performance issues. Looks like speed drops dramatically the more hops we are away from the server.
Cerberus FTP server, running on VMWare. 2 machines on the same VMWare host ...
1
vote
1
answer
160
views
Ansible: Pulling a specifc piece of information from an output
I'm trying to grab some information from the output of a playbook and save in a file for review. tor.j2 is just a list of expected lines in the config: logging , ntp, spanning-tree, etc.
tasks:
- ...
1
vote
0
answers
797
views
Possible STP Issue with Cisco SG350 Switches
we are having a weird issue with a network of Cisco SG350 Switches that I cannot figure out. We are thinking it may be related to STP but have verified all the normal problem points (i.e. proper ...
0
votes
0
answers
51
views
How do you prove RFC 791 - Internet Protocol
We are being asked to prove we are using RFC 791 (Internet Protocol) within our network. How does one prove such a thing via documentation if there is no such document from the vendor stating as much....
0
votes
0
answers
1k
views
Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA
My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console.
What is working:
The engineer on the Cisco side has successfully pinged my EC2
instance within my private 10.5.0.0/17 ...
1
vote
1
answer
806
views
Blocking SSH access from WAN side of CISCO 890 to management plane
I've been round about the houses with this one for days, i've not found a solution yet that works. I haven't found a way to block the HTTP access to the management plane either, i had to give up and ...
0
votes
0
answers
60
views
I can't PING to my Cisco router when I try to access the domain server
I have this network image
I tried to connect the pc1 to the domain (in Windows Server 2012).
To do that I tried to PING from pc1 to the server and that works.
After that I go the pc1(Windows 7) and I ...
1
vote
0
answers
284
views
Linux is answering (wrong?) to Gratuitous ARP message
I've a Centos 7 Linux server with 2 physical interfaces, each of them has 2 subinterfaces, which are P2P /31 interfaces two Cisco. After changing neighboring Cisco devices Linux router started to ...
-1
votes
1
answer
717
views
How can I download the cisco running config to my C drive's folder?
I am going to download the running config from the cisco router.
I have tried the following command, but it needs to change the account's privilege level to 15 for downloading the running config. I ...
0
votes
0
answers
426
views
Cisco Switch - Enable Telnet using HTTP
I'm trying to automate the configuration process of a Cisco switch (SG-300).
I was able to automate everything I need using telnet, but the last issue I still have is to enable telnet itself.
For now ...
0
votes
0
answers
152
views
2 default gateway to one subnet. One gateway in security device and other one in 2960 XR switch
Subnet 10.3.20.0/26 connected to switch (multilayer) through a vlan. Same vlan there is no svi in that switch. This vlan extended to Asa one interface and gave one ip address and that IP address is ...
1
vote
1
answer
1k
views
Bad mask /30 for address 10.1.1.3 || Cisco P.T
So basically I'm having this issue while trying to configure the serial of 3 routers (router0, router1, router2) on Cisco Packet Tracer
I was able to configure both serials for router0 following this ...
0
votes
1
answer
2k
views
ISC DHCP Server - Matching client identifier won't work for single device
I hope someone can help me with this problem.
What am I trying to do
I want to provide information to a Cisco ASR1k depending on its serial number.
Reason for this is I don't have any MAC address of ...
1
vote
1
answer
316
views
Best way to reformat a JSON with Ansible?
I have this JSON in a variable :
{
"device_vlans": {
"1": {
"name": "default",
"interfaces": [
"GigabitEthernet1/...
-1
votes
1
answer
21
views
I need to figure out how to buy a used server. What is the thing called that pulls out from a stack server an has a screen on it an keyboard?
I want to buy the computer that technicians use to repair or configure stack servers it looks just like a laptop but has hot swappable harddrives. I'm entering a i.t. program an I'd like to mess with ...
1
vote
2
answers
3k
views
Line protocol on Interface GigabitEthernet1/0/1, changed state to down
My switch is permanently changing the state of port GigabitEthernet1/0/1 from up to down and from down to up. What can I do?
Console Output:
Port configuration:
Sorry, I have only these pictures.
I'...
1
vote
1
answer
920
views
How to connect to a Cisco VPN in "native mode"?
I need to connect to a VPN, but I am not an expert on the subject at all, so if anyone can help me, I would appreciate it.
I was given the following data, telling me that this info is for a "...
0
votes
3
answers
717
views
Propagate local time over NTP to LAN
I have synchronized my L3 switch to an external time server, this is working correctly. However I'm in Europe and we have CET/CEST switching and I get UTC from the configured time server. I did setup ...