Questions tagged [cisco-ios]

For discussion about Cisco's Internetwork Operating System - Cisco IOS

36 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
0answers
544 views

How to break apart an IPv6 /56 6rd delegated prefix from ISP into multiple /64 VLANs for use with SLAAC EUI-64? [Cisco]

I have CenturyLink Internet service, and they have a 6RD IPv6 deployment where they hand out an IPv6 delegated prefix /56 block to me and allow me to use it as I wish. My Cisco ISR router receives the ...
5
votes
1answer
431 views

Time Cisco Router reload not always mentioned

Im trying to measure our cisco router availability data based on downtime happened. I assume from show version, the time mentioned in tag "System returned to ROM" is when reload started, and next line ...
4
votes
0answers
57 views

Redundant physical interfaces for Cisco pseudowire-class

I have a link which is LT2P from a site router R1 (Cisco 867-VAE, IOS 15.3) which has two external interfaces defined (dialer1 and vlan-1000), but only one plugged in (first is ADSL, second is ...
3
votes
0answers
595 views

What is the effect of using “ntp allow mode control 0”?

I am attempting to mitigate the issues surrounding bug report CSCum44673. According to the software release notes found here, I need to ensure that all of my routers are on IOS version 15.2(2) or ...
3
votes
0answers
872 views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
3
votes
0answers
226 views

IOS XE minimum frame size

I recently encountered an issue upgrading from an IOS device to an IOS XE ASR 1000 router concerning Ethernet Over SONET (EOS). VLAN tags are used to map traffic from the hub router to SONET ...
3
votes
1answer
1k views

Enable SNMP traps for ACLs using Cisco IOS?

Does anyone know if it's possible to enable SNMP traps to be sent from a Cisco IOS device when an ACL blocks traffic? I'd like to send a trap whenever a deny statement gets a hit. I've only been ...
2
votes
0answers
56 views

C2960 - Memory has insufficient capacity

Please, do you know if there is any way on how to release more processor memory from a C2960 switch without restarting it? I am receiving an insufficient memory alarm from this switch. I noticed that ...
1
vote
0answers
45 views

TCP handshake immediately RST

I'm trying to set up a modbus TCP connection on port 502 but get a RST packet immediatly. So the TCP connection handshake doesn't even succeed. This is done on a windows machine on an ESX server. The ...
1
vote
0answers
62 views

HTTPS QOS and policing

In our office, everything runs on HTTPS. We have softphones and web-based clients which are high priority. We also have Google search, maps and other low priority websites that should work on best-...
1
vote
0answers
19 views

Loopback on T1 not showing up

I'm a T1 tech for a major US ISP. We regularly remotely loopback T1s (at the smartjack) and test them before the installation. Recently I got 3 new T1s in a bundle that acted weird, and I hoping you ...
1
vote
0answers
122 views

Routes stopped redistributing through OSPF

I was entering a number of secondary addresses on some VLANs. In total there were 10 secondary addresses added. The subnets added were from three publically routable /24s (I will call them 25.0/24, ...
1
vote
0answers
122 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
1
vote
0answers
207 views

Amazon AWS VPN Bidirectional Device Access

After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC. However, both the EC2 ...
1
vote
0answers
855 views

NVI based NAT on Cisco ISR terrible performance

I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
1
vote
0answers
914 views

ASR1006 IOS upgrade with ISSU

We were running Cisco ASR 1006 on single RP2/ESP since long time but today two purchased secondary (standby) RP2/ESP for redendency. Now question is how do i upgrade IOS on secondary RP2? I am ...
1
vote
0answers
567 views

Packets are disappearing

I have a server HP DL180 G6, connected to a Cisco switch (4948E or 2960). The server have 2 ethernet ports and ILO shared with data port #1. ILO setted up to request ip from DHCP. 1) When I connect a ...
1
vote
0answers
520 views

VPN tunnel with duplicate subnets

I have been tasked to setup a VPN tunnel with an external party's network, but I hit a bit of snag. I am currently running a Cisco ASA 5510 with private subnets of 10.1.2.0/24 on the "inside" network....
1
vote
0answers
238 views

Able to test AAA to Radius Server from router but unable to log into Router with A.D

I am having issue with setting up my Radius server to authenticate before going to the router. I am able to do a test from the router successfully but once I exit the router and log in with my Windows ...
0
votes
0answers
15 views

is crypto ikev2 supported on 1921 router?

is the "crypto ikev2" command supported on Cisco's 1921 ISR g2 router. I'm trying to deploy a site-to-site FlexVPN but the command wouldn't show. I updated the image to c1900-universalk9-mz.SPA.157-3....
0
votes
0answers
51 views

cisco zone-based policy firewall

How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections. parameter-map type ...
0
votes
1answer
47 views

Restricting TFTP access from Host to Router using extended ACL in Cisco IOS

I am trying the below Extended ACLs to restrict TFTP but still I am able to upload files to the router using tftp. Not sure, what is wrong, can you all help? Approach 1: permit udp host <ip> ...
0
votes
1answer
37 views

implementing broadcast traffic restriction

Can we restrict the high broadcast traffic from interface in Cisco ASR9k and 7600 routers? If so, what configuration we should apply?
0
votes
0answers
12 views

Cisco 7960 CTL File Encoding

When booting my 7960 phone, I am getting all of the correct files. However, in trust list (CTL File), the IP addresses are incorrect. They are the ASCII characters of the actual IP address. Therefore, ...
0
votes
0answers
29 views

Sending HTTP post request from TCL script running on Cisco IOS

The only way to monitor Cisco's 37XX or 38XX, for example, is SNMP. In some cases, Syslog may be used, too. Arista, for example, provides rich API to pull or push anything to modern monitoring systems,...
0
votes
0answers
40 views

Prioritizing SSH, Telnet, TACACS in Cisco IOS

For Prioritizing SSH, Telnet, TACACS locally generated traffic on Cisco ASR running IOS XR, we have: ssh server dscp 48 tacacs-server ipv4 dscp 48 Need the same for cisco GSR: 12416/PRP running IOS. ...
0
votes
0answers
21 views

Why won't Cisco Catalyst 1760 Router enter rommon?

I have purchased a Cisco Catalyst 1760 Router. It has the password recovery turned off and there is no reset button. I am using ctrl+break in putty on windows to break and it has given me the question ...
0
votes
1answer
41 views

Cisco IOS RA VPN with internal NAT

We have a Cisco 871 setup with a remote access VPN which works fine. However we now need the RA-VPN to be able to access an IP on the LAN which only speaks with an authorised subnet. IP addresses as ...
0
votes
0answers
68 views

I'm unable to see packet drops after configuration of QoS policy

I aim to send iperf traffic from Endpoint1(Client) to Endpoint2 (Server) with the following SR path = {R1, R2, R3, R4, R3, R2, R1, R2, and R3}. First of all, the traffic generated by iperf from ...
0
votes
0answers
32 views

Cisco config deployment, fastest option

I've looked around for an answer, but I just seem to get products or tool ads. I have 20 routers coming in, which all have the same config (bar IP addresses). What is the quickest way to roll this ...
0
votes
0answers
52 views

Cisco 1841 stuck on boot?

I found an old Cisco 1841 router and decided to boot it up to play with it a little. Everything seemed to be going ok but I guess something interrupted the boot. Last line is %SYS-6-...
0
votes
0answers
38 views

What spanning tree IEEE protocol does the Cisco 1252AG Aironet access point support?

Link to data sheet We're running Cisco IOS version 15.2(2)JA1. What version of the IEEE STP is supported on the Cisco Aironet 1252AG access points? We are using the "bridge X protocol ieee" command. ...
0
votes
0answers
21 views

Multiple GETVPN groups inter-connectivity issue

Greeting Everyone!! I'm trying to stimulate an environment where I've DC and DR locations and remote sites have to access DC/DR services. For security, GETVPN is used. Initially tried using only one ...
0
votes
0answers
234 views

How to enable RESTCONF server in IOS-XR?

I aim to enable RESTCONF server on Cisco IOS-XRv 9000. I did not find online anything about enabling HTTP server in this IOS-XR version. However, with NETCONF server can be enabled. For IOS-XE is ...
0
votes
0answers
231 views

Query on Cisco IPsec Licensing, HSEC-K9

I'm currently debugging an issue with IPsec tunnels and it seems like one of our client's NW engineers didn't install the HSEC-K9 license. The issue is that the new IPsec tunnels are not coming up ...
0
votes
0answers
8k views

Adding a secondary address to an interface on a Cisco ASA

On an ASA5505 version 8.2, I have three internal IP subnets that I want to: Pass traffic between as if they were on the same subnet Share the same gateway Share the same VLAN I've been working to ...