Questions tagged [cisco-ios]

For discussion about Cisco's Internetwork Operating System - Cisco IOS

Filter by
Sorted by
Tagged with
1
vote
1answer
158 views

Extended ACL not working with “host”-Attribute in Cisco Packet Tracer

Here's the output (or the commands) which fails: Normally it should work! What's wrong here?
1
vote
2answers
348 views

Cisco IPSEC Tunnel with hidden local networks

I've got an ipsec tunnel that's up and working with ATT. They require that the phase 2 IP's not be local LAN's, but public IP's. So, my phase 1 is X.X.X.132, and my Phase 2 is on the same subnet as X....
1
vote
1answer
118 views

IP SLA with follow on actions

Good day, I have an odd one here. I am wanting to run an IP SLA to ping another device in the network, and if it stops responding, or the interface goes into a down state. I would like it to run a ...
1
vote
1answer
82 views

Why is my Cisco MMS891 assigning IP addresses with static NAT entries to devices via DHCP?

I have a Cisco MMS891 ISR as my edge router with several static NAT entries, which are set up to NAT my LAN IP addresses (which are statically assigned to printers) to access an externally hosted ...
1
vote
1answer
151 views

Return traffic for nonzone interfaces in Cisco IOS (ZBFW)

I've found Cisco docs to be extremely vague and confusing regarding the appropriate way to configure access policies in Cisco IOS-based zone-based firewall (ZBFW). Say I want to permit ongoing TCP ...
1
vote
1answer
1k views

How to enable SM-X Module in cisco ISR 4451 Router

While plug in a SM-X-ES3D-48-P Etherswitch Module into a Cisco ISR 4451 the Ports for this Module didn't came up. What I need to do to get the Ports enable with sh ip int br command? The Output of ...
1
vote
1answer
245 views

disable entering to enable mode IOS

Is it possible to disable entering an enable mode on IOS ? Im deploying radius servers with two user groups (lvl 1 and lvl 15) my goal is to do that users who are lvl 1 would be not permited to enter ...
1
vote
2answers
294 views

Wireless AP accessible from the internet via Telnet, where to block

I have inherited a Cisco 887VA with a Wifi module which acts as our gateway and firewall. Yesterday I ran some scans against the external interface [XX.XX.XX.XXX in the below config] and found a ...
1
vote
1answer
333 views

Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces?

As the question says, Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces? Let's I have 2 VLAN. interface vlan 1 ip address 192....
1
vote
1answer
40 views

Cisco AS5300 high temperature issue?

Today I have configured SNMP sensors for the environment parameters on Cisco AS 5300, but I have get shocked that the system health temperature is 29C/84F and when I check the output from the device ...
1
vote
1answer
821 views

Mixed stack IOS upgrade - Cisco 3750x,3750G

I have a mixed switch stack : - Switch Ports Model SW Version SW Image ------ ----- ----- ---------- ---------- * 1 ...
1
vote
1answer
296 views

Handling multiple redundant Metro Ethernet circuits in one location

We have recently signed up for Metro Ethernet for our main campus and 8 branches. It's a "mesh" with the carrier providing a virtual layer-2 switch in the cloud. I have a Cisco router at each site ...
1
vote
1answer
320 views

cisco cuc installation

I've completed the installation of my CUCM 11.5 using a bootable .iso file. Now I'm trying to install CUC for the voicemail and can't get it done because there isn't a bootable .iso only a regular ....
1
vote
1answer
2k views

Setting system jumbomtu on Cat 6500

We have an L2 path between a tape drive and a NetApp. The path goes through 3 switches (a 6509 and two N5K) but the two devices are on the same VLAN. All 10 gig fiber. I found out that while most of ...
1
vote
2answers
523 views

Cisco IOS NTP server config causes slow boot

I tried to configure my router to use NTP server. I thought it is trivial but I was wrong. It causes a very nasty problem when router have yet to gain internet access (during boot). I see the ...
1
vote
1answer
893 views

Which system image should I choose to upgrade my Cisco switch? It has to be a cryptographic image

I have a task to upgrade Cisco switch with a cryptographic image. However, I can't figure out with one I can choose from the list that I have available to me. Please advice. Here is my current switch ...
1
vote
2answers
417 views

Calls show as blocked or restricted on US cells

When calling cells in US sometimes our company number shows as blocked or restricted. Our topology is CUCM 9.1 <-> 2921 VG 15.2(4) <-> T1 PRI Our telco advised to make sure we have ...
1
vote
1answer
5k views

Configuring a sticky MAC address on IOS

What is the use case of the Switch(config-if)# switchport port-security mac-address sticky 0000.1111.1111 command? By definition, a sticky address is a learned secure address that is added to the ...
1
vote
1answer
134 views

>Interface specific routing on Cisco IOS for failover IPs

Cisco 2921 with IOS 15.2(3)T1 My ISP has provided a DSL connection (Dialer0 via PPPoATM on EHWIC) and a 3G SIM (Dialer2 via Sierra Wireless box over PPPoE). The 3G is for failover. The ISP supplies ...
1
vote
3answers
1k views

cisco ssh key authorization level via radius

Related to Authenticate ssh key via Cisco ACS (TACACS+) Given a working ssh public key config: ip ssh pubkey-chain username admin key-string <ssh-pub-key> exit exit I have only been ...
1
vote
3answers
1k views

Cisco Route-Map Object Tracking for Default-Information

I am tasked to do conditonally advertise a default route using RIP only if a specific IP address is ICMP reachable. (Yes, CCIE study, not a real network design). My idea was to use the track object ...
1
vote
1answer
135 views

Why is it impossible to advertise all OSPF /24 and not all /32 into BGP by using ACLs

For example: advertise all /24s from OSPF into BGP, but not the /32s. Impossible to do with access lists. the above statement can be found in this forum, in a question related to the differences ...
1
vote
1answer
3k views

AP does not have assigned IP address by DHCP

I have aironet-1242 and air-cap2600i AP's, infact I'm trying to upload image on to my PC through TFTP, as I assign static IP address to fastethernet or BVI interfaces and start uploading, AP ...
1
vote
1answer
997 views

How to use a layer 3 switch for QOS between gateway and hosts?

In the following scenario, is it possible to prioritize VOIP/RTP from x.x.x.51 through the gateway with a Cisco switch, and how? I need to prevent x.x.x.50 from saturating the WAN connection. ...
1
vote
2answers
618 views

Cisco extended ACL not permitting traffic according to rules

this is my network topology diagram: Networks that are outlined in the bottom are actually vlans 10, 20, 30, 40, 50 defined on switches S1 and S3. The routers R3 and R2 for the network have ...
1
vote
2answers
624 views

Copy Software from on IOS-Device to another

I have 3 Aironet Access Points. 2 are running on Version 15.3(3)JBB1 and when I factory resetted and its actually running on Version 15.2(4)JB3a. I wanted to copy the Configuration of on of the AP ...
1
vote
1answer
558 views

DHCP snooping not blocking rogue server

Everything I've read on this says this should work, but for some reason it's just not happening. I've got a switch connected to a DHCP server (192.168.10.3) in VLAN 10, and two machines in VLAN 7: a ...
1
vote
2answers
79 views

Can a Cisco 1760 save to flash on an 1841

I've recently gotten a home lab started to start studying for the CCNA that consists of a few catalyst switches, 3 1760s and a single 1841. I've been messing around with saving configurations on a ...
1
vote
1answer
543 views

Cisco BGP Route Not Appearing in Route Table [duplicate]

I have added a few prefixes (called allnet) into BGP route table. The prefixes include the following; ip prefix-list allnet seq 460 permit 10.69.118.0/23 ip prefix-list allnet seq 465 permit 10.69....
1
vote
1answer
53 views

Actively host ip and port accessed in Cisco IOS

Is there a way to set up logging on a Cisco router to keep a log of all the host IP's and the ports successfully accessed the network and the last time port was accessed, and automatically garbage ...
1
vote
1answer
170 views

Monitor which SNMP communities are still in use

I am migrating from SNMP community1 to SNMP community2 on a NEXUS switch (plus a bunch of 2960s). Is there a way to monitor that the old community is not used anymore?
1
vote
2answers
957 views

Configure Log format Cisco ASA firewall

The logs from CISCO ASA fierwall is currently in the following format. %ASA-message_class-severity-messageID e.g. "%ASA-session-6-....." I want to remove messsage class from logs %ASA-...
1
vote
1answer
32 views

How can I auto-detect the default WAN gateway on a Cisco router?

I previously connected to my ISP using authenticated PPPoE and provided default routes for IPv4 and IPv6 as follows: ip route 0.0.0.0 0.0.0.0 Dialer0 ipv6 route ::/0 Dialer0 After switching to a ...
1
vote
0answers
46 views

Upstream QoS garanteed bandwidth

In the network I'm trying to manage there is a satellite link, the upstream of which is ~ 7 Mbps. In this upstream, I need to allocate 1.5 Mbps of guaranteed bandwidth for one single host, but nothing ...
1
vote
0answers
18 views

Configue IOS DHCP server to respond to Option 60 class

I have a number of small networks each with about half-a-dozen mostly-fixed hosts. The routers on each network provide DHCP service for the occasional visiting engineer's laptop. I am adding IP ...
1
vote
1answer
136 views

TCP handshake immediately RST [closed]

I'm trying to set up a modbus TCP connection on port 502 but get a RST packet immediatly. So the TCP connection handshake doesn't even succeed. This is done on a windows machine on an ESX server. The ...
1
vote
0answers
70 views

HTTPS QOS and policing [closed]

In our office, everything runs on HTTPS. We have softphones and web-based clients which are high priority. We also have Google search, maps and other low priority websites that should work on best-...
1
vote
0answers
31 views

Loopback on T1 not showing up [closed]

I'm a T1 tech for a major US ISP. We regularly remotely loopback T1s (at the smartjack) and test them before the installation. Recently I got 3 new T1s in a bundle that acted weird, and I hoping you ...
1
vote
0answers
216 views

Routes stopped redistributing through OSPF [closed]

I was entering a number of secondary addresses on some VLANs. In total there were 10 secondary addresses added. The subnets added were from three publically routable /24s (I will call them 25.0/24, ...
1
vote
1answer
309 views

How to run SIP phones in the LAN (NAT Overloaded to single IP)?

We have a small office network switch connected to a DSL modem for internet and telephony access. Now we would to extend network to another location in the same building for which I deployed a cisco ...
1
vote
1answer
46 views

Help with this acl

This is what i am trying to do Deny the network that host 200.200.200.10 is on, telnet access to R3 Permit host 200.200.200.10 to telnet to R3 Deny host 200.200.200.10 all access to host 204.10 on ...
1
vote
0answers
245 views

Amazon AWS VPN Bidirectional Device Access

After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC. However, both the EC2 ...
1
vote
2answers
351 views

Cisco IOS - dropping all traffic not translated by NAT

I have a couple of rather basic questions about NAT translation. For a simple translation like: ip nat inside source list ACL interface GigabitEthernet 0 overload If the traffic does not match ACL, ...
1
vote
1answer
393 views

Cannot ping internet from host on second subnet

Everything works other than the fact that HOST cannot ping the DNS server or anything beyond Router1. I can ping all hosts and Google from both Router1 and Router 2. Host can ping FE0/1 on Router1 and ...
1
vote
1answer
447 views

Arista 7050s Loopback Q-in-Q

Debugging an issue where I'm trying to get q-in-q working on an Arista 7050S with a loopback. I’ve got packets egressing the switch double tagged but in ingress, I can see them on the STAG’s SVI. I’...
1
vote
0answers
667 views

Issues with port forwarding with Layer 3 switch [closed]

Since I have upgrade my switch, I have been experiencing issues with port forwarding on my pfSense gateway. I have done some researching on google, but didn't come to any conclusive results. ...
1
vote
1answer
299 views

Cisco - Configuration disabling TX on SFP port?

I have a really weird issue with a certain model of Cisco switches. The industrial IE2000 models come with a SD card slot, which can be used to store the configuration or boot from. I had 5 of these ...
1
vote
0answers
1k views

ASR1006 IOS upgrade with ISSU

We were running Cisco ASR 1006 on single RP2/ESP since long time but today two purchased secondary (standby) RP2/ESP for redendency. Now question is how do i upgrade IOS on secondary RP2? I am ...
1
vote
0answers
606 views

Packets are disappearing

I have a server HP DL180 G6, connected to a Cisco switch (4948E or 2960). The server have 2 ethernet ports and ILO shared with data port #1. ILO setted up to request ip from DHCP. 1) When I connect a ...
1
vote
0answers
534 views

VPN tunnel with duplicate subnets

I have been tasked to setup a VPN tunnel with an external party's network, but I hit a bit of snag. I am currently running a Cisco ASA 5510 with private subnets of 10.1.2.0/24 on the "inside" network....