Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cisco-ios-15]

Major release 15 of Cisco's IOS software

3
votes
2answers
32 views

Firmware Compatibility with 15.x IOS versions

I have a Cisco switch stack with both PoE and non-PoE switches as members. Is there any compatibility issues with the firmware version 15.0.2-SE11 between the following devices? 1x Cisco WS-C3750G-...
3
votes
1answer
158 views

Use BFD on a Virtual-Template Interface

I would like to know how I can configure Bidirectional Forward Detection on a Virtual-Template interface. Tested on IOSv and IOS-XE (ISR-4451): router#configure terminal Enter configuration commands,...
1
vote
1answer
48 views

C3PL working order

It is very hard to find information on this topic. I would like to know: If traffic has a hit inside a class-map, is it immediately forwarded or does it get checked against all remaining match ...
1
vote
1answer
59 views

Why do Cisco IOS switches send packets to DHCP servers with zero giaddr field when DHCP snooping is on?

I recently troubleshooted a network where the switch had DHCP snooping turned on and even though the router which was acting as a DHCP server was connected to a trusted port, the client wasn't able to ...
5
votes
1answer
507 views

2960X Management VLAN

I have a Cisco ws-c2960x-24td-l running 15.2(2)E7 I have created a management vlan (500) and want to put the management interface (FE0) into it, however the "switchport" command is not available for ...
2
votes
1answer
116 views

IOS 15.2(4)E4 pipe next command changed?

I periodically do a little with Cisco devices, but not very often. I used to have a filtering command that was pretty handy. It'd go something like: show run | include interface next 5 That'd ...
5
votes
2answers
356 views

Defining hierarchical BGP route-maps

I work for an MSP with a relatively small network. We're implementing a new set of Cisco ASR 1001-Xs on our edge and I'm trying to improve our BGP configuration. The routers are running: IOS XE ...
1
vote
1answer
496 views

Does a “advsecurity” license enables “crypto isakmp” on a Cisco C891F?

As the title says, Does a "advsecurity" license enables "crypto isakmp" on a Cisco C891F? This is the show license output: Index 1 Feature: advipservices Period left: Life time License Type:...
2
votes
2answers
2k views

Why would Type-5 AS External OSPF Route not install in routing table?

I am redistributing an eBGP route into OSPF, I see the route flooded in the database, but it is not installed in the routing table on the other routers. What would cause this route not to install in ...
5
votes
1answer
2k views

Cisco ASA multiple dynamic VPN support (defaultRAGroup-defaultl2lGroup)

Question (short) How to set up 2 totally different dynamic l2l vpn tunnels on an ASA5506 Question (extended) We have a Cisco ASA5506 Security Appliance and we want to set up 2 dynamic VPN setups. ...
4
votes
3answers
1k views

The Netstat command equivalent on IOS 15

I have IOS Version 15.2(4)S4 on my router, and "show control-plane host open-ports" does not work, is there any other command to generate such output? the "show tcp brief" and "show ip sockets" are ...
6
votes
2answers
4k views

How to configure Cisco remote access IPSEC VPN between IOS Router and Android phone

I have a C891FW router with IOS 15.4 on which I'm trying to configure a remote access VPN for Android's native VPN client. I'm authenticating with RSA-Sig and XAUTH. The tunnel forms but I can't reach ...
1
vote
3answers
321 views

All tunnels down on Cisco 7204VXR with debug message “Unable to generate DH phase 2 parameters!”

I have 40 or 50 tunnels with over 200 SAs active on a 7204VXR with NPE-G1 using the software crypto engine (no VAS card installed). The working config was transferred over from a 2821 with AIM-VPN ...
6
votes
4answers
18k views

Access-Lists and VLAN and understanding traffic flow

I have a question that I am having a very hard time wrapping my mind around, and I think you might be able to square me away. When applying an access list to a VLAN interface (VLAN 32) in a L3 switch,...
1
vote
0answers
410 views

ipsec tunnel between Cisco IOS router and Perle IOLAN SCS 32

I cannot get a IPsec tunnel up and run between a Perle IOLAN SCS 32 with firmware 4.5 and Cisco ASR 1001 with IOS XE 15.3 - it fails in phase 2 with invalid proposals Has some out there a sample for ...
4
votes
2answers
20k views

SNMP: Configuring/Enabling SNMPv3 on Cisco IOS and SNMP Agent

I have been configuring and using SNMP v2c on Cisco routers. Due to the obvious advantages in SNMP v3, I am planning on enabling SNMP v3 on SNMP v3 supported devices. Could someone let me know: The ...
8
votes
1answer
2k views

Strange drop-outs in Cisco 7200 LNS lab

I'm testing several functions on emulated Cisco 7200 routers, in GNS3, prior to actual purchase. One of the functions I've been testing out is LNS functionality. I've been primarily following this ...
6
votes
2answers
2k views

Devices that utilizes CISCO IOS Operating system

I am a bit confused about the CISCO IOS operating system. My final year research project is based on solving some security vulnerabilities that i dug up that exists in the CISCO IOS, thus i need to ...
6
votes
1answer
10k views

Cisco PBR verify-availability with interface instead of next-hop

We have a number of Cisco 891 routers configured with dual WAN links. All of these routers are running Cisco IOS 15.x In some cases, we use policy based routing to force particular traffic down one ...
7
votes
1answer
3k views

DNS Doctoring / Reply Modification on Cisco 1900 series ISR

We have a Cisco 1900 ISR and have recently setup a web-server at ourdomain.com. The site works perfectly, however from the LAN we cannot use ourdomain.com to access the site, instead everyone has to ...
10
votes
1answer
3k views

Long login delay when cisco device is booted

Whenever we boot or reboot a Cisco router or switch we have to wait a number of minutes before we can get a username prompt for login. We get a few fail messages Press RETURN to get started. % ...
10
votes
2answers
2k views

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port: #sh interfaces Te3/4 TenGigabitEthernet3/4 is up, line protocol is up (...
5
votes
1answer
459 views

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE QOS marking problem

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE, need to understand how much traffic from the client comes to external resources, and how much goes to internal network resources. Mark incoming traffic to ...
11
votes
1answer
543 views

enforcing QoS on a “variable” speed link where the negotiation is done by the carriers NTE

In essence we purchase a 80/20 line from the carrier who provides the transport between the customer premises & the local exchange where the carrier terminates into our PE. (Juniper PE) <--> [...
16
votes
3answers
9k views

Backing up Cisco router configuration - including ssh keys

We have some Cisco 2821, 2921 and 1921 routers in our shop. I can back up and restore the configurations by copying out or in the startup-config file, but what about the keys for ssh? I don't want ...
8
votes
2answers
1k views

A user on 802.1x-protected wireless reports slow or stalled ssh connections

We have recently setup 802.1x wireless at our London location. A user is reporting that an ssh copy between the wireless subnet and our server subnet results in consistently-slowing and eventually ...
14
votes
1answer
2k views

BGP “no synchronization” command not showing up in running-config

I noticed in the running config I don't see the no synchronization command under the BGP section. Is this a default command so I won't see it unless I change it? Hardware / software Cisco 1921 c1900-...
10
votes
3answers
9k views

1 router, 1 internet connection/IP - multiple VRFs using the same ISP gateway

My knowledge of inter-VRF routing isn't the best. I have one public IP. The public Internet and its quad 0 is on the default VRF.... Then I have a Guest_VRF and a corporate_VRF which would both need ...
9
votes
2answers
3k views

3750G Switch Buffer Monitoring

We have put some 3750Gs in a stack for our DC access switches. We are concerned that these won't be able to handler higher data loads as traffic increases due to their limited buffers. What statistic/...
9
votes
1answer
15k views

What is the NO PAYLOAD ENCRYPTION version of the IOS software?

When looking at the downloads available on the Cisco site, they have a regular version of the file and a NO PAYLOAD ENCRYPTION version. What is the difference? And why would one choose one over the ...
9
votes
1answer
4k views

PPPoA ADSL Configuration with external modem on Cisco 891

Context We use Cisco 891 routers as CPE for several client sites. They are all running IOS 15. Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 15.0(1)M8, RELEASE SOFTWARE (fc1) The ...
12
votes
1answer
14k views

Cisco ISR G2 encrypted bandwidth restriction?

I have been having complaints of a "slow connection" from several new remote sites. The sites are connected via an MPLS L3VPN service into Cisco 2921's, and we are using Cisco GET-VPN to encrypt ...
7
votes
2answers
881 views

Netflow differences between IOS 12.2 and 15.1

Has anyone upgraded their cisco routers from 12.2 to 15.1? I'm curious to know what kind of changes were made to netflow. Most specifically, I'd like to know how (if at all) the CPU utilization ...
9
votes
4answers
4k views

Cisco-configuration syntax highlighting for TextMate/Sublime Text [closed]

I would like to have syntax highlighting while perusing my configs - does anybody know of a good Cisco IOS syntax highlighting bundle for TextMate or Sublime Text? Edited (2015-09-21) to add: GitHub ...
8
votes
4answers
3k views

Cisco 1260 AP no longer responds to ping, ssh after upgrade to latest 15.x firmware

I have a 1260 AP that I upgraded this morning. Prior to the upgrade, the system permitted ssh and would respond to pings on the network, however now it does not respond. I hooked up a serial cable ...
11
votes
2answers
4k views

catalyst 3750x - jumbo frames on svi

I've encountered a problem on a cisco ws-c3750x-48ts-s where jumbo-frames won't cross a trunk-connection between a vwmare esx-host and the switch. The access ports in the same vlan don't experience ...
7
votes
1answer
477 views

How do you define an IOS zone-based firewall policy to inspect “any”?

When configuring ZBFW on IOS, the "class-default" class doesn't allow the inspect action (only pass and drop). What is the recommended way to match all traffic for stateful inspection? Matching TCP, ...
9
votes
2answers
5k views

What is the proper way to config a Site to Site IPSEC VPN and a Remote Access VLAN on the same external interface? Cisco 891 ISR

I'd be happy to post the config or logs for reference but I am having trouble getting my remote access VPN working on the same interface as my site to site IPSEC VPN. I am using a dynamic crypto map ...
13
votes
2answers
21k views

How can I verify QoS DSCP marking on a Cisco Catalyst 4500E?

Good afternoon, I've got a shiny new 4500E running 15.0(1r)SG7 that is set to replace an ailing 3750E. It is running ipbase for now. On the 3750 I was able to check out the incoming DSCP/CoS values ...