Questions tagged [cisco-ios]
For discussion about Cisco's Internetwork Operating System - Cisco IOS
502
questions
0
votes
0answers
10 views
Cisco erase nvram or erase startup-config doesn't work
According to this article, I can delete the current startup configuration files and return the router to its factory default settings with the erase nvram: and reload command.
https://www.oreilly.com/...
0
votes
1answer
30 views
Cisco IOS Sanitization: Any Way to Not Use NVRAM?
We want a method to sanitize Cisco IOS 15 routers (ISR Gen 2) before they are removed from the facility. While a "write erase" works perfectly if the router is breathing, how to sanitize dead routers ...
0
votes
1answer
35 views
Issue w/ Cisco router and failed NAT and static default route
I have a cisco router that is using a VRF to support a site to site VPN tunnel. I have added a second network to the router for non-VPN standard internet use. My problem is that my default static ...
1
vote
1answer
32 views
Lubuntu 18.04 can't SSH to Cisco Router: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [closed]
I'm not sure if this problem caused by Lubuntu or Cisco Router side.
Lubuntu = 192.168.1.100
Cisco Router = 192.168.1.1
Ubuntu 18.04.4 LTS
user@linux:~$ lsb_release -a
No LSB modules are available.
...
-1
votes
0answers
18 views
Python netmiko interactive session on Cisco IOS [closed]
This is simple Python code to get show hostname output in Cisco IOS.
script.py
from netmiko import ConnectHandler
cisco_881 = {
'device_type': 'cisco_ios',
'host': 'host',
'username': ...
-1
votes
0answers
13 views
How to get the uptime for each connected device on a cisco iosv router?
I would like to get information about all connected devices such as MAC addresses and uptime for each device on a router cisco iosv. I've tried the following commands which got me two mac addresses ...
0
votes
1answer
28 views
Firmware of Cisco Phone
i want to configure IP phone Cisco DX650 with Sip.Anyone have idea about it how i can upload firmware of sip feature
0
votes
0answers
14 views
Cisco IE2000 - NTP Doesn't Associate
I'm having a very weird issue with a switch. It doesn't want to associate to my NTP servers.
My config is very simple:
ntp server ntp1.domain.com
ntp server ntp2.domain.com
ntp server ntp3.domain....
0
votes
0answers
13 views
What's the difference between “IP NAT Inside Source” and “IP NAT Inside Destination” commands in Cisco routers? [duplicate]
As much as i know both of this commands translate source address of packets that travel from inside to outside and destination address of packets that travel from outside to inside,so what's the ...
2
votes
1answer
51 views
Link Aggregation from Cisco to Palo Alto using 10 gig interfaces, port on Cisco shows “waiting to be aggregated”
I am trying to bundle two 10-Gig interfaces on PA-3020 to Cisco Cat9300. Previously, I had bundled two Gigabit interfaces on same devices and everything worked fine. But now, when I try to configure ...
2
votes
1answer
28 views
Cisco snmp-server single user for multiple snmp versions
Attempting to maintain SNMP v2c compatibility while implementing SNMP v3 on cisco switch 5506cx.
Would a user that was previously used for v2c see issues with v2c if it is added to a v3 group?
For ...
2
votes
1answer
40 views
Prevent static NAT to respond to ARP requests
We are trying to merge 2 networks with overlapping IP spaces: This is the configuraiton so far:
interface Tunnel1
description VPN Port CompanyA
ip vrf forwarding LAN
ip address 172.18.0.79 255.255....
2
votes
0answers
24 views
Cisco AIR-AP1852i-E-K9 stuck in “waiting for uplink[…]” after startup
I pulled an old cisco AP from a shelf today at work to test something, and after starting up and connecting with PUTTy, i was greeted with (after startup), this - repeating over and over:
[*02/16/...
0
votes
0answers
26 views
Cisco PPTP server available routes protocol
I have a 2921 Cisco router in one place, and a Windows XP computer on another.
I made my Cisco router as PPTP server, and my XP computer as a client.
The router is located within a LAN with address ...
0
votes
0answers
36 views
Cisco C3750 and PRTG netfllow
I have a core switch (backbone) of our network that broadcasts all the vlans to other switches. I am trying to configure netflow on the switch and link it up to a Netflow sensor on PRTG.
I followed ...
1
vote
1answer
58 views
What is the difference between trustpool and trustpoint on Cisco IOS?
On Cisco IOS, there is trustpool and there is trustpoint. I have seen imported certificates in either of the two. And it seems SSL connection works when either location has the certificate it needs. ...
1
vote
2answers
55 views
Cisco Switch without VLAN support?
I've been reading about VLAN and wondering is there any Cisco Switches that do not support VLAN?
So far, all switches that I found do support VLAN. This is one of the example in my lab.
Cisco-Switch-...
0
votes
0answers
31 views
Cisco Guestshell - Bridging of VirtualPortGroup0
i'm fiddling around with ne virtual-services functions of IOS-XE.
Is there a possibility to bring interface "VirtualPortGroup0" into a bridge domain with some physical interface of the router?
It's ...
0
votes
2answers
39 views
Why doesn't kernel itself had entire L2/L3 protocol stack? [closed]
I know kernel itself handles protocols in layer 2, layer3 and layer 4 at ipv4 stack, but why can't kernel itself doesn't have protocols such as STP/RSTP/xSTP/OSPF...etc, implemented.
Why should we ...
1
vote
1answer
69 views
TCP handshake immediately RST [closed]
I'm trying to set up a modbus TCP connection on port 502 but get a RST packet immediatly. So the TCP connection handshake doesn't even succeed.
This is done on a windows machine on an ESX server.
The ...
1
vote
1answer
51 views
Filter tagged route to downstream routers
I'd like to filter a redistributed route from EIGRP into OSPF to all routers in AREA2 and AREA34. I have tagged the route 10.90.100.0/24 with tag 90 at the Tampa router where its redistributed into ...
0
votes
1answer
50 views
Cisco Zone Based Firewall
I have Cisco 891F configured with ZBF from CBAC. Right now, router is wide-open SSH/443 or anything my public address is listening on, which is not what I intended. My intention was to only allow IMCP ...
0
votes
1answer
25 views
WebAuth With RADIUS For Switch Web Portal
I have a Cisco IE4000 running IOS 15.2. I am trying to login with my RADIUS credentials to the web portal for the switch. Currently the RADIUS is configured for successful login to Console and SSL but ...
0
votes
1answer
42 views
DHCP when you have both layer 3 and switch ports
I have the following config:
ip dhcp pool Vlan10
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
interface GigabitEthernet0/0
!
interface GigabitEthernet0/0.10
encapsulation ...
1
vote
0answers
65 views
HTTPS QOS and policing [closed]
In our office, everything runs on HTTPS. We have softphones and web-based clients which are high priority. We also have Google search, maps and other low priority websites that should work on best-...
0
votes
0answers
54 views
cisco zone-based policy firewall
How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections.
parameter-map type ...
1
vote
2answers
124 views
Restricting TFTP access from Host to Router using extended ACL in Cisco IOS
I am trying the below Extended ACLs to restrict TFTP but still I am able to upload files to the router using tftp. Not sure, what is wrong, can you all help?
Approach 1:
permit udp host <ip> ...
0
votes
2answers
94 views
What does the Cisco HTTP client (help to) do on a switch?
While checking for vulnerabilities in one of our Cisco switches I came upon this: CVE-2019-12665.
Excerpt from the CVE:
A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software ...
0
votes
1answer
46 views
implementing broadcast traffic restriction
Can we restrict the high broadcast traffic from interface in Cisco ASR9k and 7600 routers? If so, what configuration we should apply?
0
votes
0answers
17 views
Cisco 7960 CTL File Encoding
When booting my 7960 phone, I am getting all of the correct files. However, in trust list (CTL File), the IP addresses are incorrect. They are the ASCII characters of the actual IP address. Therefore, ...
3
votes
1answer
211 views
Moving from 12.x IOS to 15.x IOS - Cisco 3750G
Is there any issue with jumping from IOS version 12.2(35)SE5 to 15.0.2-SE11 on a Cisco WS-C3750G-48PS-S switch?
Should I upgrade to the latest 12.x first (12.2.55-SE12), and then move to the 15.x ...
2
votes
2answers
102 views
How to ping from PC on EIGRP area to PC on OSPF area without middle router?
This is my topology.
And I can send a package to every router and PC within the colored area, how can I ping from a PC on EIGRP area to a PC on the OSPF area? I heard about default route but I saw it ...
0
votes
0answers
77 views
Prioritizing SSH, Telnet, TACACS in Cisco IOS
For Prioritizing SSH, Telnet, TACACS locally generated traffic on Cisco ASR running IOS XR, we have:
ssh server dscp 48
tacacs-server ipv4 dscp 48
Need the same for cisco GSR: 12416/PRP running IOS. ...
0
votes
1answer
53 views
Cisco IOS RA VPN with internal NAT
We have a Cisco 871 setup with a remote access VPN which works fine. However we now need the RA-VPN to be able to access an IP on the LAN which only speaks with an authorised subnet. IP addresses as ...
0
votes
0answers
75 views
I'm unable to see packet drops after configuration of QoS policy
I aim to send iperf traffic from Endpoint1(Client) to Endpoint2 (Server) with the following SR path = {R1, R2, R3, R4, R3, R2, R1, R2, and R3}.
First of all, the traffic generated by iperf from ...
2
votes
0answers
87 views
C2960 - Memory has insufficient capacity [closed]
Please, do you know if there is any way on how to release more processor memory from a C2960 switch without restarting it?
I am receiving an insufficient memory alarm from this switch. I noticed that ...
1
vote
0answers
28 views
Loopback on T1 not showing up [closed]
I'm a T1 tech for a major US ISP. We regularly remotely loopback T1s (at the smartjack) and test them before the installation. Recently I got 3 new T1s in a bundle that acted weird, and I hoping you ...
1
vote
1answer
92 views
Cisco 860 Disconnecting on WAN port every 30 minutes
I'm completely stuck for solution to this issue. My ISP logs show my Cisco 860 router disconnecting and reconnecting every 30 minutes and 18 seconds all day - it's noticable when browsing as the site ...
0
votes
0answers
96 views
Cisco 1841 stuck on boot?
I found an old Cisco 1841 router and decided to boot it up to play with it a little. Everything seemed to be going ok but I guess something interrupted the boot.
Last line is
%SYS-6-...
0
votes
2answers
525 views
Why does yealink ip phone is not getting ip address from voice vlan?
I have configured separate vlan for voip and connected interface to it (as shown below). But the phone is not getting ip address automatically.
switch- cisco 2960-x
phone- yealink
I had tried: (on ...
0
votes
1answer
162 views
How to set vlan QoS priority for voip (on cisco 2960)?
I have assigned all voip-related ports to one vlan. I want to set up the QoS priority for that vlan. Which commands can help and in which mode?
I have assigned all required ports to one vlan. I tries ...
0
votes
2answers
84 views
Multiple 802.1x clients, single port support on a Cisco 3750 switch?
I'm thinking of using our Cisco 3750 switch with our RADIUS server for 802.1x authentication on our Ethernet ports.
If I enable 802.1x and a user connects a switch to their Ethernet jack, and the ...
0
votes
0answers
42 views
What spanning tree IEEE protocol does the Cisco 1252AG Aironet access point support?
Link to data sheet
We're running Cisco IOS version 15.2(2)JA1. What version of the IEEE STP is supported on the Cisco Aironet 1252AG access points? We are using the "bridge X protocol ieee" command.
...
1
vote
1answer
127 views
Understanding Throughput of interfaces problem on Cisco Routers
I have the following topology set on AWS where there are 4 CSR 1000v Routers deployed and Segment Routing enabled in which the Segment Routing Headend is R1 and the destination is R3.
I aim to send ...
1
vote
1answer
57 views
Difference Between PAT with pool or Interface/Loopback?
I'm just wondering what difference does it make when doing PAT with same IP defined in pool or assigning IP on Loopback and overloading that interface.
ip nat pool MYPOOL 1.1.1.1 1.1.1.1 netmask 255....
4
votes
1answer
222 views
Switch updating - Cisco Prime
I'm tasked with mass updating of our Cisco switches via Cisco Prime. Is it possible for the update to fail? Can the switch 'hang' in reboot loop? What if I tell Cisco prime to backup running image?
...
3
votes
2answers
126 views
Decreasing SNMP update timer on IOS-XR (CISCO ASR)
I've a case where i'm trying to poll SNMP information every 10 seconds from a Cisco IOS-XR devices (interfaces mib). Seems like CISCO IOS-XR updates SNMP information every 15secs, so sometimes ...
4
votes
0answers
84 views
Redundant physical interfaces for Cisco pseudowire-class
I have a link which is LT2P from a site router R1 (Cisco 867-VAE, IOS 15.3) which has two external interfaces defined (dialer1 and vlan-1000), but only one plugged in (first is ADSL, second is ...
2
votes
2answers
66 views
Suppress CLI terminal output on IOS
I would like to know if we can suppress certain lines from being displayed on the CLI. Example: I call following TCL script, that in itself calls some other scripts. What i Get on the screen is this:
...
3
votes
1answer
63 views
Finding MAC address with OUI List
I'm in the process of labeling the interfaces of my Cisco 3750G with descriptions referencing the device type that is associated with that port.
I understand that I am able to run a show mac address-...
