Questions tagged [cisco-ios]
For discussion about Cisco's Internetwork Operating System - Cisco IOS
0
votes
0answers
8 views
Query on Cisco IPsec Licensing, HSEC-K9
I'm currently debugging one issue with the IPsec tunnel and it seems like one of our client's NW engineer seems to have missed to install the HSEC-K9 license. \
The issue is that the new IPsec ...
3
votes
1answer
34 views
ip dhcp class command
Here is a DHCP configuration that we have here:
ip dhcp class range
ip dhcp pool abc
network 10.10.10.0 255.255.255.0
default-router ...
class range
address range 10.10.10.10 10.10.10.254
My ...
0
votes
0answers
27 views
Path for accessing Cisco-IOS-XE-Tunnel yang module in postman
Recently I am working with RESTCONF on Postman.
Today I was trying to send HTTP request via postman to IOS-XE-Tunnel using the below path:
https://XXX:XXX/restconf/data/Cisco-IOS-XE-tunnel:tunnel
...
-2
votes
1answer
34 views
Textbook has different order of commands: login password password-value and also password password-value login Does the order matter?
Textbook has different order of commands: login password password-value
and also password password-value login
Does the order matter?
Cisco switch
3
votes
0answers
50 views
What is the effect of using “ntp allow mode control 0”?
I am attempting to mitigate the issues surrounding bug report CSCum44673. According to the software release notes found here, I need to ensure that all of my routers are on IOS version 15.2(2) or ...
1
vote
0answers
43 views
Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6
I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
1
vote
1answer
39 views
Protect Cisco C3560CX switch from unauthorized access on remote location
I have to extend our corporate lan to remote location on which we can not control the physical access to the switch.
What are the best practices in this case/scenario? So, I will shut down password ...
2
votes
1answer
41 views
cisco catalyst creating user fails
I took over a couple of Cisco 2960x switches. They are configured with a telnet login. Now that telnet isn't that great (and my colleagues are afraid of CLI but might have to configure things too) I ...
3
votes
1answer
50 views
Cisco Router IOS update
I am facing problem in update the IOS of Cisco 7304 router. I am upgrading from 12.4(24)T2, to 15.2(4)S7 this. but I was boot from this version 15.2(4)S7 it booted proper from flash. But when I put ...
0
votes
1answer
34 views
License question on router cisco
Could anyone help me on license question on router cisco.
Is ADV IP SERVICES LIC the license on router Cisco that all I need if I want to run these features on my router Cisco : L3VPN, L2VPN, VPLS and ...
2
votes
1answer
42 views
4507r Supervisor engines aren't operating redundantly
The tl;dr : I have two supervisor engines in a 4507r but the standby unit doesn't appear to be ready to perform when the active module dies.
On Sunday I had a network problem that appeared to be ISP ...
3
votes
1answer
104 views
I can't set a gateway of last resort
I can't seem to get to set a gateway of last resort on a router. I want it to forward anything whom's ip address is not in the routing table to router HQ through interface s0/0/0 by doing the ...
1
vote
1answer
45 views
Cisco Embedded Packet Capture with NAT
I love the ability Cisco's Embedded Packet Capture (EPC) provides to remotely troubleshoot dataflows on IOS routers.
monitor capture buffer CAP_BUF
monitor capture point ip cef CAP_PT gig 0/0.1 both
...
3
votes
1answer
145 views
PAT not translating at all
I am studying for my CCENT.
I threw together a PAT practice lab.
Other than DHCP and RIP everything is pretty stock.
No VLANs
No security
Just NAT overload on ACCESS router.
I am stumped why it isn'...
5
votes
2answers
186 views
Carrying remote VLAN via 2 routers to the local gateway
I have a serverA (192.168.15.1) from site A and VLAN is 15, however the VLAN 15 gateway is set at site B (192.168.15.254).
There are two ISP routers as a metro role to connect each other by subnet ...
1
vote
2answers
180 views
How can I ping with source option in Cisco Router?
How can I ping with source option in Cisco Router?
I have a ISR 4321 Router, I want to ping from a source IP address:
Router#ping ?
WORD Ping destination address or hostname
ip IP echo
...
1
vote
1answer
101 views
Help with small office setup - Cisco SG350 28 port switch
I have very limited knowledge in Cisco IOS but in a crucial state to setup up a small office network. I have bought 2 Cisco SG350 28 port Layer 3 switch,
Switches should be enabled with VLAN and VTP.
...
3
votes
1answer
109 views
Set password of a Switch to “C?1sc0” using CLI in Cisco Packet Tracer
I have been asked to set the password of a Switch to "C?1sc0" in Cisco Packet Tracer.
The problem is that when i type "?" in CLI it prints out:
Router(config)#enable password ?
7 Specifies a ...
0
votes
1answer
68 views
DSCP re-marking on Cisco Switch
I've followed the commands in this post:
DSCP trust boundary
policy-map MARKDOWN
class class-default
set dscp ef
Interface Config:
interface gig 0/1
service-policy input MARKDOWN
The ...
1
vote
1answer
53 views
How to run SIP phones in the LAN (NAT Overloaded to single IP)?
We have a small office network switch connected to a DSL modem for internet and telephony access. Now we would to extend network to another location in the same building for which I deployed a cisco ...
4
votes
2answers
71 views
After I set the “router rip” networks, how can I check it?
In my CGR1240 I have set network 192.168.1.0 to my router rip, but how can I check it?
If I add more networks in rip, how can I list all the networks I have added?
I can not show the router rip in ...
5
votes
2answers
87 views
Why the Cisco Router's loopback interface can not be showed up by default?
By default, why the Cisco Router's loopback interface can not be showed up?
Router#show ip interface brief
Interface IP-Address OK? Method Status Protocol
...
2
votes
2answers
42 views
Is the static route discover automatically or need run any command in Cisco Router?
Is the static route discover automatically or need run any command?
I have two router, and I have configured the IP address for the link port of them.
but the Router3's route is empty:
Router#show ...
5
votes
2answers
64 views
Cisco Router GigabitEthernet interface can not add ip address?
Cisco Router GigabitEthernet interface can not add ip address?
Router(config)#interface gigabitEthernet 2/1
Router(config-if)#ip add ?
% Unrecognized command
Router(config-if)#ip add 12.12.12.1 255....
1
vote
1answer
255 views
How to configure DHCP pools for 2 VLANs/subnets sharing a switch
I've set up DHCP pools on a layer 3 switch that goes out to 13 layer 2 switches. Most of which have their own subnet and VLANs, and everything works fine when that's the case. But when there are two ...
0
votes
2answers
42 views
Is it possible to enable DHCP on multiple hosts via Cisco switches or routers? [closed]
I think I know the answer to this, but thought I ought to ask around.
When setting up new networks with multiple hosts, like a university computer lab VLAN with 30+ workstations, for instance, is it ...
2
votes
3answers
277 views
Virtual Appliance - Cisco Router
My colleague said that it is possible to virtualize a Cisco router i.e. run the Cisco IOS inside ESXi and it would act like a real cisco router so thus can be used in a light production environment.
...
4
votes
1answer
56 views
CISCO IOS's feature Secure Shell Version 2 Enhancements for RSA Keys
I have a switch C3750V2-48PS with IOS ver. 12.2(55)SE5. I wanted to copy to it public key for the ssh client but I do not have following command available
Switch#configure terminal
Switch(config)#ip ...
0
votes
1answer
38 views
Cisco IOS 12.3 - Mysterious NAT - Where is it defined?
I have the following config (IOS 12.3):
A.B.C.13 stands for the outside, public IP, bound on interface Fa0/1.52
37.247.X.206 is a public client I am using to test
x.x.x.n stands for a random public ...
1
vote
1answer
72 views
Access list per port for 48-port switches
We have 3750g, 3750e, 4948, 2960 series Cisco switches and all of them are 48 ports so we want to create one standard access list per port switch and in every ACL we permit 5-6 prefix (short prefixes ...
1
vote
2answers
56 views
Cannot put an IP address on layer two interface
I am trying to assign an IP address to Interface g0/0 on a Cisco 892FSP. However, it keeps telling me that a layer two interface cannot be assigned an IP address. Any ideas?
3
votes
1answer
47 views
what is the point of making directories in a cisco cli
what is the point of making directories in a Cisco router.
I noticed its was kinda like Linux mkdir and all that stuff, but what is the purpose?
2
votes
1answer
166 views
Assign DHCP IP address on Cisco router interface
Hi, dhcp router is configured with following DHCP settings:
ip dhcp pool B
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
ip dhcp pool C
network 192.168.2.0 255.255.255.0
default-...
1
vote
1answer
331 views
how to deny ping from one direction but not the other using Access-list
Hello everyone.
What I'm trying to do is to deny ping access from the 12.12.12.0 network to reach the 10.10.10.0 network but not deny ping access to go from 10.10.10.0 network and reach the 12.12.12....
4
votes
2answers
72 views
Routing Table Eligibility
I have an architecture which is that each remote site has 2 Dialer interfaces dialling into a virtual-template core which authenticates the sessions and applies attributes from a RADIUS server. OSPF ...
3
votes
1answer
140 views
How to get per-process memory use from Cisco switches via SNMP
I'm trying to get per-process memory use from Cisco switches via SNMP.
I've found an article suggesting you can subtract CISCO-PROCESS-MIB.cpmProcExtMemAllocatedRev and CISCO-PROCESS-MIB....
1
vote
1answer
53 views
Cisco 4948 can ping out, but no connections inboud
n00b question here I suspect...
I received a used Cisco 4948 (not an 'E' or 'F') Switch that I am trying to get configured for SSH Management access. I can ping out from the switch to nodes that are ...
5
votes
1answer
280 views
Cisco 3850-24p stable firmware 16.x.x
Have a query towards the 3850 series switches.
Currently making a plan to upgrade a few remote sites from old, stable and steady 3650-24ps (eol awhile back) to 3850-24p.
Nothing fancy to support, 1 ...
-1
votes
1answer
523 views
Cisco ios - loading 15.2 into Catalyst 2960
Is it possible to load cisco ios 15.x into an old 2960 or 3560? I tried to do that (study purpose) and it's throwing an error. The error I see apparently has to do while decompressing the image or at ...
1
vote
1answer
121 views
Configuring static NAT on Cisco Router
I am trying to configure port forwarding on a Cisco 891F router given by an ISP and directly connected to servers in the 192.168.170.0/24 network. The ISP recommended using the ip nat inside source ...
2
votes
1answer
357 views
cisco 3750x switch boot loop after failed IOS software upgrade
I was trying to upgrade WS-C3750X-48T-S IOS software from universalk9-mz.122-53.SE2.bin to c3750e-universalk9-mz.152-4.E6.bin
First I deleted all files under flash: folder, then downloaded new one ...
1
vote
1answer
37 views
Subinterfaces at Cisco routers
What is behavior of subinterface on cisco router that has configured
#encapsulation dot1q vlan_id
but has no IP address configured? Will it work as L2 interface? Or will not work at all?
1
vote
1answer
34 views
Can cisco router interfaces be configured to be L2 interfaces?
Can cisco router interfaces be configured to be L2 interfaces? Like
#no switchport
command turns L2 port to L3 port at cisco switches?
0
votes
1answer
368 views
Factory Reset Cisco 3560: Stuck in loop
I recently acquired a used Cisco Catalyst 3560 and I am trying to factory reset it. When I enter the recovery process (by holding MODE), I get stuck in this loop at the "switch: " prompt.
How do I ...
3
votes
1answer
195 views
Fix our Cisco switch overwhelmed by console logging
I have a setup with dual redundant Cisco catalyst 4506-E using the WS-X45-SUP8L-E supervisor engine and two 48-port switches below it.
My task is to access and modify the switch configuration.
...
4
votes
1answer
230 views
Filtering IP packets that contain IP options using ACL
Is it smart to have ACE
#deny ip any any option any-options
enabled as part of hardening the router?
Is there some legitimate traffic that use IP options? Or should I use selective drop?
1
vote
1answer
38 views
Help with this acl
This is what i am trying to do
Deny the network that host 200.200.200.10 is on, telnet access to R3
Permit host 200.200.200.10 to telnet to R3
Deny host 200.200.200.10 all access to host 204.10 on ...
8
votes
2answers
763 views
routing between vlans not working
I need to put a Cisco router behind an ISP router.
(The ISP doesn't allow us to use their modem only.)
I've called the ISP technical service and they've set up the connection with me.
Their router ...
3
votes
0answers
220 views
Hardening Cisco router on Internet-MANAGEMENT PLANE
I need confirmation that I understood the Cisco manual right. So my network is like this:
ISP_RTR ---x.x.x.x/30--- Perimeter/Edge_RTR ---y.y.y.y/30--- FW1 --- DMZ1
...
0
votes
0answers
20 views
IPsec VPN Setup
Below is the flow
10.1.0.0>Data Center Firewall>Internet Router> ----Internet----
So basically i am setting up new ipsec tunnel between two Cisco internet routers for branch office users to access ...
