Skip to main content

Questions tagged [cisco]

Cisco is a provider of switches and routers to commercial consumers. Cisco devices run IOS or NX-OS operating systems. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

Filter by
Sorted by
Tagged with
0 votes
0 answers
66 views

Supply only one IP address per each switch(cisco L3) port

I am small ISP and all my clients will be connected to each ports of Cisco N9K-C9372PX switch. I need to disable L2 routing and supply only one IP per port(or maybe /30 subnet), actually how each ISP ...
alex6999's user avatar
1 vote
0 answers
61 views

Cisco Wireless Access Points have wireless controller hard-coded with cisco-capwap-controller

My network team has a problem. They have installed a second wireless controller for a new physical site. The wireless access points at the second site all connect to the wireless controller at our ...
Michael Cornn's user avatar
0 votes
0 answers
41 views

802.1X freeradius on debian client cisco 2950

I want to authenticate my PC using 802.1X with a Cisco 2950 switch and a up-to-date freeradius on a Debian system. Here is my Cisco configuration : radius-server host 192.168.1.195 auth-port 1812 acct-...
philippe's user avatar
  • 2,433
0 votes
0 answers
73 views

SNTP not working on Cisco SG220

I'm trying to make SNTP work on a Cisco SG220 switch by using a NTP server pool ("0.europe.pool.ntp.org"). When I put the IP address of a NTP server in that pool, it works fine. When I put ...
ColdSir's user avatar
11 votes
4 answers
3k views

How to find what is wearing out my SSDs

We have 8 Cisco servers with 12 spinning disks for data and 2 SSDs for OS. The 2 SSDs are in linux software raid 1. The SSDs all have their wear indicator in single digits and some of those that have ...
MikeKulls's user avatar
  • 509
0 votes
0 answers
81 views

FreeRADIUS authorization

We currently have FreeRADIUS to either forward or drop requests (to authentication server) based on the AV pairs received during client authentication (shown below). However what I would like to do ...
lquin1978's user avatar
0 votes
0 answers
102 views

1000Base Fiber Switch to 100Base Fiber NIC (Desktop PC)

Setting up an office space with some ACE Vision U6601 Desktop PCs. The current switch is a Cisco switch pushing 1000 M/bits and the PC fiber NICs only go up to 100 Full Duplex. Directly connecting the ...
landon.j's user avatar
1 vote
1 answer
101 views

Change Cisco Management VLAN

I currently have the following configuration. A Checkpoint firewall (which is the router) and 12 Cisco 9200 switches. SW1 is connected to the firewall. I need to change the MGMT VLAN from VLAN20 to ...
Daniel D.'s user avatar
0 votes
0 answers
229 views

Cisco AnyConnect profile using IPsec

The AnyConnect vpn always tries to use SSL connection instead of IPsec even if it is set in the profile. I have an instance of anyconnect running with some vpn (other.vpn) (not IPsec), which works ...
yano's user avatar
  • 1
0 votes
1 answer
651 views

Trouble setting Cisco switch boot image

I am trying to upgrade a cisco 3850f-e from 16.09.04 to 16.12.10a. I got the 16.12.10a bin in flash and set it as the boot image. Looked good so I did write memory. After a reload it still booted ...
uncrayon's user avatar
  • 101
0 votes
2 answers
211 views

Subnet mask for 192.168.1.7/30

I want to create two IP addresses, 192.168.1.0/30 and 192.168.1.5. Adding the first IP for the router port returns this error "Bad mask /30 for address 192.168.1.7": Router>en Router#conf ...
Mohammed Al Shemmari's user avatar
0 votes
0 answers
200 views

Cannot SSH to link-local IPv6 address on Packet Tracer

due to the fact that I don't have physical equipment at the moment I don't know if what I am about to say is purely an issue with Packet Tracer. I configured a Catalyst 2960 switch to allow for remote ...
Badea Sabin-Codruț's user avatar
3 votes
1 answer
321 views

Are SFP+ "Ethernet" direct attach cables compatible with Fibre Channel?

I'm trying to find some short 8G SFP+ Fibre Channel direct attach cables but they're rare and expensive, can a passive 10G SFP+ direct attach cable marketed for Ethernet be used between two 8G SFP+ ...
LAX1DUDE's user avatar
0 votes
0 answers
1k views

How to fix Failed to deploy VM: postNFCData failed:H

I am doing networking stuff after 20 years. I don't remember a lot. So please help. We have a ESXi server with the following capacity: Basically, we need to import the Cisco Firepower Management ...
Mahesh's user avatar
  • 101
0 votes
1 answer
103 views

How to check total operating hours for Cisco Catalyst switches?

We bought about 25 Cisco Catalyst (9300 & 9500) switches and about 200+ SFPs from a distributor with whom we've had trouble in the past - i.e. they sent us refurbished hardware when we ordered new....
yas4891's user avatar
  • 195
0 votes
1 answer
392 views

Rsyslog not writing any logs from Cisco network devices - all other remote syslog works fine

tcpdump confirms valid syslog is coming in from multiple remote systems - servers and Cisco network equipment. OS is Linux RHEL 8.8 The servers all come in fine and write to disk, and are shown as ...
mkramer317's user avatar
0 votes
0 answers
271 views

ED137 SIP & RTP (VoIP) for Air Traffic Control Use with Cisco CUBE

I am working with an air traffic control client who is using a variant of SIP called ED137. There are 2 main uses, Ground to Ground (basically telephone calls) and Air to Ground to Air (radio traffic ...
user10021657's user avatar
0 votes
1 answer
71 views

Cisco IOS - mapping out ports with arp, mac-address table, and interface status

I've unfortunately been tasked with determining which switchports connect to what- be it a connection to another switchport, or a link to a host. Basically determine what each port is connected to, ...
boog's user avatar
  • 240
0 votes
0 answers
188 views

Cisco IOS/XR/NXOS, determine what's plugged into each port using arp, interfaces, and mac address-table

I need to try to map out the access layer switches for this environment, and determine what each port is currently being used for. My ultimate goal here is to determine the IP address/hostname of the ...
boog's user avatar
  • 240
1 vote
0 answers
54 views

Internet failover on Cisco ASA 5500 series Primary ISP is on DHCP address and so is backup. Always defaults to backup

I had SLA MONITOR setup on my ASA and working fine for months. All traffic was routing through my primary connection. I rebooted my ASA after a firmware upgrade. When it came back, it would always ...
c240amg's user avatar
  • 11
0 votes
0 answers
40 views

Intermittent workstations with no network connectivity

I have a campus wide network with ~10 workstations around campus(not from the same switch) that can't connect to the internet/network, they are successfully acquiring an IP address from the DHCP ...
Skipbo's user avatar
  • 11
0 votes
1 answer
855 views

Connection reset by 10.180.20.1 port 22

Using a CentOS 7.9.2009 server I'm trying to ssh v1 using client with v2 into a Cisco router that has SSH v1 (can't be upgraded, I'm anticipating that). I then modified my ssh_config file to allow for ...
free's user avatar
  • 23
1 vote
0 answers
475 views

Werid ESXi host mac flapping issue

We have some standalone ESXi hosts in our company. Recently we encountered a werid issue where the mac address of the ESXi host flapping. Issue description: I found that the IP of some esxi hosts will ...
Satan023's user avatar
0 votes
1 answer
68 views

How to properly include vlan configuration for preexisting OSPF routing in PT

I am using packet tracer to simulate an enterprise setting. There would be a "main" office (marked as Bgta) and other minor offices in other cities, such as Mdlln. In the main office there ...
sar's user avatar
  • 1
0 votes
1 answer
506 views

ansible backups for cisco asa devices: ERROR: % Invalid input detected at '^' marker

I have been tasked with backing up all of our network devices, so natuarally I chose ansible. I am no expert but I sure need help on this one! I have tried everything under the moon and cannot ...
dirman's user avatar
  • 3
0 votes
2 answers
2k views

Ansible :: Am I not using the `cisco.ios.ios_facts` module?

I'm trying to build a simple POC ansible playbook that logs into a Cisco router and pulls the config. About my environment: My Ubuntu is Ubuntu 18.04.5 LTS My Ansible is version ansible 2.10.7 (...
Pete's user avatar
  • 133
1 vote
2 answers
701 views

Ansible to a Cisco Router :: Password Message Messing Up the Connection?

When I manually SSH from my Ansible server to a Cisco router, I see this on the command line: me@ubuntu01:~/ansible$ me@ubuntu01:~/ansible$ ssh [email protected] Password: ####################### ...
Pete's user avatar
  • 133
2 votes
1 answer
433 views

I need help to achieve (as close as possible) 40G network transfer speed (~1250 MB/s x 4)

I had a Gigabit network, which I upgraded recently to 40Gbps. To do so, I replace my TPLINK switch with a Cisco Nexus 9396PX switch, which has a module with 12x 40G ports. The 40G network ...
yaoviametepe's user avatar
0 votes
0 answers
291 views

Cisco UCS C220 M4 PSU Fault In Diagnostics

Hello fellow Sysadmins. A C220 M4 with the latest recommended firmware I am working on displays the following fault messages on latest version diagnostics at Server Health: PSU1 PSU1_PWRGD: Power ...
SandShriner's user avatar
0 votes
0 answers
281 views

SCP on Ubuntu OpenSSH Server for Cisco backups

I am having a bit of an issue and I believe I need some help. We have an On-prem SFTP server which will be deprecated soon, so in the mean time I need to set up another SFTP option in AWS running on ...
brianbelden's user avatar
-1 votes
1 answer
110 views

Cisco ASA to Watchguard

I have never worked with watchguard firebox firewalls in depth before and we are replacing a Cisco ASA 5515 with a Watchguard M390. I am having a hard time interpreting the configuration settings in ...
Schmad05's user avatar
0 votes
2 answers
445 views

Insecure Connections With CA Issue Certificate

I have imported a web server certificate from a CSR coming from my Cisco C9300. The certificate came from the Certificate authority and shows the correct CA on the end of the chain. CLI shows that the ...
JukEboX's user avatar
  • 845
0 votes
1 answer
183 views

FTP performance issues - VMWare, cisco etc

We are experiencing FTP performance issues. Looks like speed drops dramatically the more hops we are away from the server. Cerberus FTP server, running on VMWare. 2 machines on the same VMWare host ...
povlhp's user avatar
  • 21
1 vote
1 answer
160 views

Ansible: Pulling a specifc piece of information from an output

I'm trying to grab some information from the output of a playbook and save in a file for review. tor.j2 is just a list of expected lines in the config: logging , ntp, spanning-tree, etc. tasks: - ...
JonC's user avatar
  • 11
1 vote
0 answers
797 views

Possible STP Issue with Cisco SG350 Switches

we are having a weird issue with a network of Cisco SG350 Switches that I cannot figure out. We are thinking it may be related to STP but have verified all the normal problem points (i.e. proper ...
devGuru's user avatar
  • 11
0 votes
0 answers
51 views

How do you prove RFC 791 - Internet Protocol

We are being asked to prove we are using RFC 791 (Internet Protocol) within our network. How does one prove such a thing via documentation if there is no such document from the vendor stating as much....
user2104891's user avatar
0 votes
0 answers
1k views

Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA

My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console. What is working: The engineer on the Cisco side has successfully pinged my EC2 instance within my private 10.5.0.0/17 ...
MarkK's user avatar
  • 101
1 vote
1 answer
806 views

Blocking SSH access from WAN side of CISCO 890 to management plane

I've been round about the houses with this one for days, i've not found a solution yet that works. I haven't found a way to block the HTTP access to the management plane either, i had to give up and ...
Owl's user avatar
  • 121
0 votes
0 answers
60 views

I can't PING to my Cisco router when I try to access the domain server

I have this network image I tried to connect the pc1 to the domain (in Windows Server 2012). To do that I tried to PING from pc1 to the server and that works. After that I go the pc1(Windows 7) and I ...
user84999's user avatar
  • 109
1 vote
0 answers
284 views

Linux is answering (wrong?) to Gratuitous ARP message

I've a Centos 7 Linux server with 2 physical interfaces, each of them has 2 subinterfaces, which are P2P /31 interfaces two Cisco. After changing neighboring Cisco devices Linux router started to ...
Edvinas's user avatar
  • 63
-1 votes
1 answer
717 views

How can I download the cisco running config to my C drive's folder?

I am going to download the running config from the cisco router. I have tried the following command, but it needs to change the account's privilege level to 15 for downloading the running config. I ...
dragontim's user avatar
0 votes
0 answers
426 views

Cisco Switch - Enable Telnet using HTTP

I'm trying to automate the configuration process of a Cisco switch (SG-300). I was able to automate everything I need using telnet, but the last issue I still have is to enable telnet itself. For now ...
Outman's user avatar
  • 103
0 votes
0 answers
152 views

2 default gateway to one subnet. One gateway in security device and other one in 2960 XR switch

Subnet 10.3.20.0/26 connected to switch (multilayer) through a vlan. Same vlan there is no svi in that switch. This vlan extended to Asa one interface and gave one ip address and that IP address is ...
sujith sankar's user avatar
1 vote
1 answer
1k views

Bad mask /30 for address 10.1.1.3 || Cisco P.T

So basically I'm having this issue while trying to configure the serial of 3 routers (router0, router1, router2) on Cisco Packet Tracer I was able to configure both serials for router0 following this ...
Roy Najar's user avatar
0 votes
1 answer
2k views

ISC DHCP Server - Matching client identifier won't work for single device

I hope someone can help me with this problem. What am I trying to do I want to provide information to a Cisco ASR1k depending on its serial number. Reason for this is I don't have any MAC address of ...
yabberth's user avatar
  • 101
1 vote
1 answer
316 views

Best way to reformat a JSON with Ansible?

I have this JSON in a variable : { "device_vlans": { "1": { "name": "default", "interfaces": [ "GigabitEthernet1/...
raw's user avatar
  • 91
-1 votes
1 answer
21 views

I need to figure out how to buy a used server. What is the thing called that pulls out from a stack server an has a screen on it an keyboard?

I want to buy the computer that technicians use to repair or configure stack servers it looks just like a laptop but has hot swappable harddrives. I'm entering a i.t. program an I'd like to mess with ...
Eli Stone's user avatar
1 vote
2 answers
3k views

Line protocol on Interface GigabitEthernet1/0/1, changed state to down

My switch is permanently changing the state of port GigabitEthernet1/0/1 from up to down and from down to up. What can I do? Console Output: Port configuration: Sorry, I have only these pictures. I'...
MitoCode's user avatar
1 vote
1 answer
920 views

How to connect to a Cisco VPN in "native mode"?

I need to connect to a VPN, but I am not an expert on the subject at all, so if anyone can help me, I would appreciate it. I was given the following data, telling me that this info is for a "...
forvas's user avatar
  • 161
0 votes
3 answers
717 views

Propagate local time over NTP to LAN

I have synchronized my L3 switch to an external time server, this is working correctly. However I'm in Europe and we have CET/CEST switching and I get UTC from the configured time server. I did setup ...
B3ne's user avatar
  • 1

1
2 3 4 5
53