Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cisco-ios]

For discussion about Cisco's Internetwork Operating System - Cisco IOS

0
votes
0answers
8 views

Query on Cisco IPsec Licensing, HSEC-K9

I'm currently debugging one issue with the IPsec tunnel and it seems like one of our client's NW engineer seems to have missed to install the HSEC-K9 license. \ The issue is that the new IPsec ...
3
votes
1answer
34 views

ip dhcp class command

Here is a DHCP configuration that we have here: ip dhcp class range ip dhcp pool abc network 10.10.10.0 255.255.255.0 default-router ... class range address range 10.10.10.10 10.10.10.254 My ...
0
votes
0answers
27 views

Path for accessing Cisco-IOS-XE-Tunnel yang module in postman

Recently I am working with RESTCONF on Postman. Today I was trying to send HTTP request via postman to IOS-XE-Tunnel using the below path: https://XXX:XXX/restconf/data/Cisco-IOS-XE-tunnel:tunnel ...
-2
votes
1answer
34 views

Textbook has different order of commands: login password password-value and also password password-value login Does the order matter?

Textbook has different order of commands: login password password-value and also password password-value login Does the order matter? Cisco switch
3
votes
0answers
50 views

What is the effect of using “ntp allow mode control 0”?

I am attempting to mitigate the issues surrounding bug report CSCum44673. According to the software release notes found here, I need to ensure that all of my routers are on IOS version 15.2(2) or ...
1
vote
0answers
43 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
1
vote
1answer
39 views

Protect Cisco C3560CX switch from unauthorized access on remote location

I have to extend our corporate lan to remote location on which we can not control the physical access to the switch. What are the best practices in this case/scenario? So, I will shut down password ...
2
votes
1answer
41 views

cisco catalyst creating user fails

I took over a couple of Cisco 2960x switches. They are configured with a telnet login. Now that telnet isn't that great (and my colleagues are afraid of CLI but might have to configure things too) I ...
3
votes
1answer
50 views

Cisco Router IOS update

I am facing problem in update the IOS of Cisco 7304 router. I am upgrading from 12.4(24)T2, to 15.2(4)S7 this. but I was boot from this version 15.2(4)S7 it booted proper from flash. But when I put ...
0
votes
1answer
34 views

License question on router cisco

Could anyone help me on license question on router cisco. Is ADV IP SERVICES LIC the license on router Cisco that all I need if I want to run these features on my router Cisco : L3VPN, L2VPN, VPLS and ...
2
votes
1answer
42 views

4507r Supervisor engines aren't operating redundantly

The tl;dr : I have two supervisor engines in a 4507r but the standby unit doesn't appear to be ready to perform when the active module dies. On Sunday I had a network problem that appeared to be ISP ...
3
votes
1answer
104 views

I can't set a gateway of last resort

I can't seem to get to set a gateway of last resort on a router. I want it to forward anything whom's ip address is not in the routing table to router HQ through interface s0/0/0 by doing the ...
1
vote
1answer
45 views

Cisco Embedded Packet Capture with NAT

I love the ability Cisco's Embedded Packet Capture (EPC) provides to remotely troubleshoot dataflows on IOS routers. monitor capture buffer CAP_BUF monitor capture point ip cef CAP_PT gig 0/0.1 both ...
3
votes
1answer
145 views

PAT not translating at all

I am studying for my CCENT. I threw together a PAT practice lab. Other than DHCP and RIP everything is pretty stock. No VLANs No security Just NAT overload on ACCESS router. I am stumped why it isn'...
5
votes
2answers
186 views

Carrying remote VLAN via 2 routers to the local gateway

I have a serverA (192.168.15.1) from site A and VLAN is 15, however the VLAN 15 gateway is set at site B (192.168.15.254). There are two ISP routers as a metro role to connect each other by subnet ...
1
vote
2answers
180 views

How can I ping with source option in Cisco Router?

How can I ping with source option in Cisco Router? I have a ISR 4321 Router, I want to ping from a source IP address: Router#ping ? WORD Ping destination address or hostname ip IP echo ...
1
vote
1answer
101 views

Help with small office setup - Cisco SG350 28 port switch

I have very limited knowledge in Cisco IOS but in a crucial state to setup up a small office network. I have bought 2 Cisco SG350 28 port Layer 3 switch, Switches should be enabled with VLAN and VTP. ...
3
votes
1answer
109 views

Set password of a Switch to “C?1sc0” using CLI in Cisco Packet Tracer

I have been asked to set the password of a Switch to "C?1sc0" in Cisco Packet Tracer. The problem is that when i type "?" in CLI it prints out: Router(config)#enable password ? 7 Specifies a ...
0
votes
1answer
68 views

DSCP re-marking on Cisco Switch

I've followed the commands in this post: DSCP trust boundary policy-map MARKDOWN class class-default set dscp ef Interface Config: interface gig 0/1 service-policy input MARKDOWN The ...
1
vote
1answer
53 views

How to run SIP phones in the LAN (NAT Overloaded to single IP)?

We have a small office network switch connected to a DSL modem for internet and telephony access. Now we would to extend network to another location in the same building for which I deployed a cisco ...
4
votes
2answers
71 views

After I set the “router rip” networks, how can I check it?

In my CGR1240 I have set network 192.168.1.0 to my router rip, but how can I check it? If I add more networks in rip, how can I list all the networks I have added? I can not show the router rip in ...
5
votes
2answers
87 views

Why the Cisco Router's loopback interface can not be showed up by default?

By default, why the Cisco Router's loopback interface can not be showed up? Router#show ip interface brief Interface IP-Address OK? Method Status Protocol ...
2
votes
2answers
42 views

Is the static route discover automatically or need run any command in Cisco Router?

Is the static route discover automatically or need run any command? I have two router, and I have configured the IP address for the link port of them. but the Router3's route is empty: Router#show ...
5
votes
2answers
64 views

Cisco Router GigabitEthernet interface can not add ip address?

Cisco Router GigabitEthernet interface can not add ip address? Router(config)#interface gigabitEthernet 2/1 Router(config-if)#ip add ? % Unrecognized command Router(config-if)#ip add 12.12.12.1 255....
1
vote
1answer
255 views

How to configure DHCP pools for 2 VLANs/subnets sharing a switch

I've set up DHCP pools on a layer 3 switch that goes out to 13 layer 2 switches. Most of which have their own subnet and VLANs, and everything works fine when that's the case. But when there are two ...
0
votes
2answers
42 views

Is it possible to enable DHCP on multiple hosts via Cisco switches or routers? [closed]

I think I know the answer to this, but thought I ought to ask around. When setting up new networks with multiple hosts, like a university computer lab VLAN with 30+ workstations, for instance, is it ...
2
votes
3answers
277 views

Virtual Appliance - Cisco Router

My colleague said that it is possible to virtualize a Cisco router i.e. run the Cisco IOS inside ESXi and it would act like a real cisco router so thus can be used in a light production environment. ...
4
votes
1answer
56 views

CISCO IOS's feature Secure Shell Version 2 Enhancements for RSA Keys

I have a switch C3750V2-48PS with IOS ver. 12.2(55)SE5. I wanted to copy to it public key for the ssh client but I do not have following command available Switch#configure terminal Switch(config)#ip ...
0
votes
1answer
38 views

Cisco IOS 12.3 - Mysterious NAT - Where is it defined?

I have the following config (IOS 12.3): A.B.C.13 stands for the outside, public IP, bound on interface Fa0/1.52 37.247.X.206 is a public client I am using to test x.x.x.n stands for a random public ...
1
vote
1answer
72 views

Access list per port for 48-port switches

We have 3750g, 3750e, 4948, 2960 series Cisco switches and all of them are 48 ports so we want to create one standard access list per port switch and in every ACL we permit 5-6 prefix (short prefixes ...
1
vote
2answers
56 views

Cannot put an IP address on layer two interface

I am trying to assign an IP address to Interface g0/0 on a Cisco 892FSP. However, it keeps telling me that a layer two interface cannot be assigned an IP address. Any ideas?
3
votes
1answer
47 views

what is the point of making directories in a cisco cli

what is the point of making directories in a Cisco router. I noticed its was kinda like Linux mkdir and all that stuff, but what is the purpose?
2
votes
1answer
166 views

Assign DHCP IP address on Cisco router interface

Hi, dhcp router is configured with following DHCP settings: ip dhcp pool B network 192.168.1.0 255.255.255.0 default-router 192.168.1.1 ip dhcp pool C network 192.168.2.0 255.255.255.0 default-...
1
vote
1answer
331 views

how to deny ping from one direction but not the other using Access-list

Hello everyone. What I'm trying to do is to deny ping access from the 12.12.12.0 network to reach the 10.10.10.0 network but not deny ping access to go from 10.10.10.0 network and reach the 12.12.12....
4
votes
2answers
72 views

Routing Table Eligibility

I have an architecture which is that each remote site has 2 Dialer interfaces dialling into a virtual-template core which authenticates the sessions and applies attributes from a RADIUS server. OSPF ...
3
votes
1answer
140 views

How to get per-process memory use from Cisco switches via SNMP

I'm trying to get per-process memory use from Cisco switches via SNMP. I've found an article suggesting you can subtract CISCO-PROCESS-MIB.cpmProcExtMemAllocatedRev and CISCO-PROCESS-MIB....
1
vote
1answer
53 views

Cisco 4948 can ping out, but no connections inboud

n00b question here I suspect... I received a used Cisco 4948 (not an 'E' or 'F') Switch that I am trying to get configured for SSH Management access. I can ping out from the switch to nodes that are ...
5
votes
1answer
280 views

Cisco 3850-24p stable firmware 16.x.x

Have a query towards the 3850 series switches. Currently making a plan to upgrade a few remote sites from old, stable and steady 3650-24ps (eol awhile back) to 3850-24p. Nothing fancy to support, 1 ...
-1
votes
1answer
523 views

Cisco ios - loading 15.2 into Catalyst 2960

Is it possible to load cisco ios 15.x into an old 2960 or 3560? I tried to do that (study purpose) and it's throwing an error. The error I see apparently has to do while decompressing the image or at ...
1
vote
1answer
121 views

Configuring static NAT on Cisco Router

I am trying to configure port forwarding on a Cisco 891F router given by an ISP and directly connected to servers in the 192.168.170.0/24 network. The ISP recommended using the ip nat inside source ...
2
votes
1answer
357 views

cisco 3750x switch boot loop after failed IOS software upgrade

I was trying to upgrade WS-C3750X-48T-S IOS software from universalk9-mz.122-53.SE2.bin to c3750e-universalk9-mz.152-4.E6.bin First I deleted all files under flash: folder, then downloaded new one ...
1
vote
1answer
37 views

Subinterfaces at Cisco routers

What is behavior of subinterface on cisco router that has configured #encapsulation dot1q vlan_id but has no IP address configured? Will it work as L2 interface? Or will not work at all?
1
vote
1answer
34 views

Can cisco router interfaces be configured to be L2 interfaces?

Can cisco router interfaces be configured to be L2 interfaces? Like #no switchport command turns L2 port to L3 port at cisco switches?
0
votes
1answer
368 views

Factory Reset Cisco 3560: Stuck in loop

I recently acquired a used Cisco Catalyst 3560 and I am trying to factory reset it. When I enter the recovery process (by holding MODE), I get stuck in this loop at the "switch: " prompt. How do I ...
3
votes
1answer
195 views

Fix our Cisco switch overwhelmed by console logging

I have a setup with dual redundant Cisco catalyst 4506-E using the WS-X45-SUP8L-E supervisor engine and two 48-port switches below it. My task is to access and modify the switch configuration. ...
4
votes
1answer
230 views

Filtering IP packets that contain IP options using ACL

Is it smart to have ACE #deny ip any any option any-options enabled as part of hardening the router? Is there some legitimate traffic that use IP options? Or should I use selective drop?
1
vote
1answer
38 views

Help with this acl

This is what i am trying to do Deny the network that host 200.200.200.10 is on, telnet access to R3 Permit host 200.200.200.10 to telnet to R3 Deny host 200.200.200.10 all access to host 204.10 on ...
8
votes
2answers
763 views

routing between vlans not working

I need to put a Cisco router behind an ISP router. (The ISP doesn't allow us to use their modem only.) I've called the ISP technical service and they've set up the connection with me. Their router ...
3
votes
0answers
220 views

Hardening Cisco router on Internet-MANAGEMENT PLANE

I need confirmation that I understood the Cisco manual right. So my network is like this: ISP_RTR ---x.x.x.x/30--- Perimeter/Edge_RTR ---y.y.y.y/30--- FW1 --- DMZ1 ...
0
votes
0answers
20 views

IPsec VPN Setup

Below is the flow 10.1.0.0>Data Center Firewall>Internet Router> ----Internet---- So basically i am setting up new ipsec tunnel between two Cisco internet routers for branch office users to access ...