Questions tagged [cisco]

Cisco is a provider of switches and routers to commercial consumers. Cisco devices run IOS or NX-OS operating systems. This is a generic tag to be used when no more specific tags are available. See the partial list of tags in the full Tag Wiki.

593 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
8
votes
2answers
563 views

Cisco DNS doctoring or Hairpinning?

I've the following configuration: CISCO 881, IOS 15.2(4)M6. On WAN interface is configured the 86.34.156.48/29 subnet from our ISP. Behind the router is staying 2 webserver. NAT: 86.34.156.51 <> ...
8
votes
1answer
4k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
5
votes
1answer
539 views

Puppet Error: undefined method 'captures'

I posted this question on the networkengineering SE site, but it was determined to be off topic.... blah. I'm toying with the idea of using puppet for core network device configuration to increase ...
4
votes
0answers
137 views

Layer 2 Broadcast filtering on VLAN? (Access ports on Cisco SG-500-52MP)

This is my first time setting up VLANs on a Cisco so I've probably made some mistakes - would appreciate some suggestions. Thank you in advance. ... From my understanding of switches, when a layer ...
4
votes
1answer
4k views

How to export Cisco AnyConnect preferences and certificates to another PC

I have two computers (PC and MAC) connected to different organization VPNs. I want to be able to connect from MAC to the same VPNs set on PC. So I need to export VPN list and certificates, etc to my ...
4
votes
0answers
407 views

How to fix an aborted firmware upgrade on Cisco SLM2048

There is a Cisco SLM2048 switch and the last firmware upgrade aborted, now the switch doesn't work anymore. I can't access the switch. The only evidence is a blinking system LED. As the switch doesn't ...
4
votes
0answers
317 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
4
votes
1answer
1k views

Should the MAC Tables on a switch Stack be the same between sessions?

According to Cisco's documentation: "The MAC address tables on all stack members are synchronized. At any given time, each stack member has the same copy of the address tables for each VLAN." ...
3
votes
0answers
368 views

Intel x550 not negotiating to 10Gb

We have a machine with an Intel x550 and a Cisco Nexus N9K-C9372-PX-E. For whatever reason, it will only negotiate at 1Gb, even though it is 10Gb capable and is being plugged into a 10Gb switch. This ...
3
votes
0answers
436 views

Can't backup Cisco configuration with tftp

I get the following error: SW-AL710-1#copy running-config tftp: Address or name of remote host []? 10.0.1.130 Destination filename [sw-al710-1-confg]? %Error opening tftp://10.0.1.130/sw-al710-1-...
3
votes
0answers
3k views

Strongswan to Cisco ASA

I have a problem with connection two nets with IPsec. On the one side is Cisco ASA 55xx on the other TP-Link router with Debian 8.3 with StrongSwan behind the NAT. The problem also that I have ...
3
votes
0answers
459 views

Unknown root user on Cisco 1921 router

Just a moment ago I ran the who command on my router and I noticed myself logged in on vty 1 but another user root was on vty 0. The Location under that user is some location I do not know (someone ...
3
votes
0answers
443 views

Opennms - Physical interface update on Cisco Switches

I'm using opennms version 16.0.2-1 on ubuntu server 14.04 LTS. I'm configuring some cisco switches to send traps to openms. The traps are notified to events in opennms, if i put a physical ...
3
votes
0answers
2k views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
3
votes
0answers
1k views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
3
votes
1answer
267 views

Unicast traffic between hosts on a switch leaving the switch by its uplink. Why?

I have a weird thing happening on our network at my office which I can't quite get my head around. In particular I can't tell if it's a problem with a switch, or a problem with configuration. We have ...
3
votes
1answer
412 views

puppet device fails in the middle of finding facts

I'm in the process of trying to get the 'puppet device' functionality working for configuring cisco switches. What I'm running into is I have a cisco 2960 in the master with a signed certificate. The ...
3
votes
1answer
735 views

Cisco 1721 router IPv6 interface stuck at [TENTATIVE]

In our network, we have several Cisco 1721 routers located at branch offices connected back to the main office via T-1 circuits. All the 1721s are running the same IOS and configured the same, with ...
3
votes
2answers
517 views

Dumping configuration from a Sipura 8800

Is there any way to retrieve the configuration from a Cisco Sipura 8800? And no, I'm not talking about nonsense like saving the HTML pages. I'm talking about saving the proper .xml configurations so ...
2
votes
0answers
127 views

How do I stop STP from blocking ports assigned to different VLANs

I have a spanning tree issue on my Cisco SG500 SMB Switches that I could use some help solving. Here is a diagram of my setup: SW1 (ports 44-47, VLAN 10) connect to port 43 (VLAN 10) on SW2, SW3, SW4,...
2
votes
1answer
36 views

Cisco switches LACP, lost connections

I just put up a LACP between two Cisco SG-200 switches. Unfortunately some PCs connected to these switches got problems like lost Postgres connections etc. My configuration is simple: ---------------- ...
2
votes
0answers
75 views

Site to Site VPN between Strongswan and Cisco ASA

I am trying to configure a VPN between a Cisco ASA firewall and Strongswan. From the logs, it looks like Phase 1 is completing without any issue, but phase is giving the following error: "...
2
votes
1answer
140 views

How do I enable or bond the 80MHz channels on a Cisco 3502i AP in autonomous mode?

I have a Cisco AIR-CAP3502I-A-K9 using F/W ap3g1-k9w7-xx-153-3.JF5 in autonomous mode. I have tried everything I can think of (Google has NOT been my friend) to configure the 5GHz radio to use 300MBps?...
2
votes
2answers
164 views

How to add access list to Cisco ASA?

I have the following rules configured at my Cisco ASA firewall: access-list OUTSIDE_IN extended permit tcp any host xx.xx.xx.xx eq 3306 access-list OUTSIDE_IN extended permit tcp any host xx.xx.xx....
2
votes
1answer
71 views

Cisco - BGP Best Path Algorithm - Which criteria

I set up below topology on Cisco IOU environment. R1, R2 and R3 routers are configured with one loopback interface on each, having "1.1.1.1", "2.2.2.2" and "3.3.3.3" addresses respectively. These ...
2
votes
0answers
127 views

Is RAID 170 a Proprietary RAID Config or a Combination of Traditional RAID Configs?

I acquired a Cisco c240 M4 with twenty-four (24) 800 GB SATA SSD. I requested the engineers configure the disks in two separate RAID 10 arrays (18 + 4), plus with a hot spare for each. The LSI ...
2
votes
0answers
333 views

Win7, RDP, TLS-Handshake: “Change Cipher Spec” packet lost on router. Win10 works

First of all: I posted this on networkengineering but was adviced to post it here because it was put on hold as offtopic there for beeing too application-centric. I don't think so as everything that ...
2
votes
0answers
1k views

MacOS native IKEv2 VPN client instead of AnyConnect?

Similar to this question from half a decade ago.. Can the native MacOS IKEv2 VPN client be used in lieu of Cisco AnyConnect client? example anyconnect profile: <AnyConnectProfile> <...
2
votes
0answers
306 views

Squid3 WCCPv2 with ASA not working

So I have begun the awful adventure of getting Squid 3.3.8 working with my Cisco ASA 5520 (9.1(5)). I think the problem is that the traffic is getting to the squid box but it is either not getting to ...
2
votes
0answers
1k views

Cisco ASA VPN DH Groups for AWS VPC

AWS provides a neat function in its VPC that exposes a VPN service. I've configured this, and confirmed that it functions. Our customer is using a Cisco 5500 Series ASA appliance to connect to the ...
2
votes
0answers
269 views

Two users behind same NAT (PSK or EAP) - strongswan

I have a strongswan implementation and am running into an issue where when there are two users behind the same NAT, the second one "kicks off" the first one. I was able to resolve the issue using: ...
2
votes
0answers
53 views

Manually specify a tunnel gateway for an IPSec VPN Connection (ASA)

I have currently got several VPN's on-premise that are setup on the outside interface and using the default gateway on the interface as an originating source of the VPN tunnel. Although the outside ...
2
votes
1answer
356 views

Creating additional VLANs on Cisco SG200

I would like to create 2 separate VLANs using a Cisco SG200-series smart switch (layer 2) where the devices would not see each other, while being able to connect to the internet. The setup is simple, ...
2
votes
0answers
125 views

Cisco Switch Routing performance monitoring

It is quite a question for me: I have Cisco Catalyst 2960S switch which is nice hardware even despite its age and EOL. I'd like to set it as small router between several networks within a remote ...
2
votes
0answers
29 views

Cisco Unified Presence Server - Update Lync Status value for In a Call

The default value in Lync for a busy status is numerically represented as 6500. Is it possible to change the "In a call" status that the Cisco Unified Presence Server provides the Lync server.
2
votes
1answer
469 views

How can I use openscap to do an offline OVAL scan of a Cisco router?

This doc describes a process of scanning a router's "show tech" file with a joval utility. I downloaded joval's trial, but didn't see that utility. Can openscap do offline OVAL scans of Cisco ...
2
votes
2answers
5k views

VMware - VM not getting DHCP address after reboot

We are having a strange behaviour in our ESX-cluster: The Infrastructure: we have 2 ESXi 5.5.0 build 2718055 in a cluster, managed by vCenter. We are using an Essentials licence, so we do not have ...
2
votes
1answer
147 views

ASA Site-to-Site VPN Failure

We have a series of remote sites connecting to our main site using site-to-site VPN over Cisco 5505s. Every remote site works fine, except one. What is unique about the failing one is that its IP ...
2
votes
0answers
1k views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
2
votes
0answers
72 views

Rescue Configuration for Cisco 3925

I recently upgraded our Cisco 3925 with the latest firmware and it returned a segmentation fault. I restarted it and now the console port won't connect. Any ideas on how to restore the flash to a ...
2
votes
0answers
895 views

Cisco VPN:Secure vpn connection terminated locally by the client

I get this error when trying to connect to a Cisco VPN: Secure vpn connection terminated locally by the client Reason 412: The remote peer is no longer responding I tried to disable firewall and ...
2
votes
0answers
238 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
2
votes
1answer
285 views

DNS grey listing and long retry intervals - standard practices?

My company's ISP has implemented what I'll term DNS "grey listing" (or they have a configuration problem) - they are blocking inbound DNS queries between [resolver IP, server IP] pairs that haven't ...
2
votes
0answers
121 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 10.10.10....
2
votes
1answer
332 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
2
votes
1answer
303 views

Configuring Dialout with the Cisco 2500 router

I'm working on configuring dialout with a Cisco 2511 router and external modems. The end point is a dial-in server, which will create a ppp connection. I use this guide as a reference but it only work ...
2
votes
0answers
245 views

Cisco ASA privilege level for object-groups

I'm trying to set-up privilege level 2, so that it has access to read and modify object and object-groups. Showing them seems to be no problem. I can also enter configure mode. I just can't get the '...
2
votes
0answers
679 views

Iperf multiple streams

I need to test my network between two sites using iperf. I'd like to open parallel streams sending data on different (let's say 5 defined) ports, with random length from 10-1000, with random 1-2 ...
2
votes
1answer
514 views

Catalyst to Nexus Migration - Can 4948s be used for access switches

We currently have a switching topology in which two 7600 make up the core and there are N many access layer 4948s at the top of every few racks. They are trunked to both 7600s. I would like to ...
2
votes
0answers
338 views

multiple isp links on a HWIC-4ESW

First, I am not doing fail-over. I want to be able to add another ISP link using a HWIC-4ESW. Equipment: Cisco 3825(1GB ram, 2GB flash, IOS 15.4 Advanced Enterprise services) with HWIC-4ESW ...

1
2 3 4 5
12