Questions tagged [cisco-isr]

Questions about Cisco Integrated Services Routers (ISR).

Filter by
Sorted by
Tagged with
0 votes
1 answer
65 views

Cisco C899G LTE ISR as transparent IP router/bridge

I have a Cisco ISR router C899G with LTE Cellular interface. I'd like to bridge the LTE into one of the eth ports in order to tap the wan link into my firewall device. When I try the BVI method as ...
The amateur programmer's user avatar
1 vote
2 answers
230 views

What interfaces does a Cisco iOS Router allow SSH Console access on?

I am have trouble understanding how Cisco iOS maps console access services like SSH to IP addresses. Assume the following: There are no acls blocking traffic There is the typical SSH server ...
Liam Kelly's user avatar
1 vote
1 answer
137 views

ISR 4331 vs ISR 4331/K9?

We have cisco router. On its box/package ISR 4331/K9 is written. I am watching a youtube video at below link, its title has word ISR 4331 https://www.youtube.com/watch?v=bk-4jkb6Cwo&list=...
DSP_CS's user avatar
  • 111
1 vote
2 answers
540 views

Cisco ISR 4000 series with SM-X Layer 2/3 module

I have a Cisco SM-X-16G4M2X Layer 2/3 Service Module installed in an ISR 4000 series router, and I would like to configure its ports as level 2 in a vlan, and then configure that vlan with an IP ...
Luis Andrés García's user avatar
0 votes
1 answer
739 views

Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp

I'm looking after to use a setup with that objectives in mind: Create a subinterface on interface GigabitEthernet0/0/1 create a Vlan and assign it to that subinterface create a vrrf and assign it to ...
Ala de Dragon's user avatar
0 votes
0 answers
462 views

Cisco 4221 basic internet setup

I've just got a new cisco 4221 isr router that has sd-wan firmware. This is my first experience with this series and im trying to set ip up for basic internet access but no luck. Here is an overview ...
midorima225's user avatar
1 vote
2 answers
998 views

Cisco BDI not Forwarding L2 Traffic?

I'm new to interface bridging, and I have an ISR4431 running 03.16.04b.S on which I need to bridge between two interfaces for two hosts: One interface is connecting directly to a host, the other to a ...
ProfessorJV's user avatar
0 votes
1 answer
4k views

Destination NAT on Cisco ISR

I know how to perform regular overload PAT in my lab running sh ver Cisco IOS XE Software, Version 16.03.09 Cisco IOS Software [Denali], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.3.9, ...
o8uijoipjasdfjiloasdfjl32's user avatar
0 votes
1 answer
3k views

Disable TLS v1.0 in Cisco ISR4321/K9

I would like to know the command on how I can disable the TLS v1.0 and v1.1 in the Cisco ISR4321/K9 and just retain TLS v1.2 ? John
Alan's user avatar
  • 1
3 votes
2 answers
243 views

Understanding traffic flow on SVIs [closed]

I have a simliar question to this one: Access-Lists and VLAN and understanding traffic flow But my question is concerning service-policies. Have a look at the image above. I triet to make a traffic ...
Mario Jost's user avatar
  • 1,700
2 votes
1 answer
495 views

Prevent static NAT to respond to ARP requests

We are trying to merge 2 networks with overlapping IP spaces: This is the configuraiton so far: interface Tunnel1 description VPN Port CompanyA ip vrf forwarding LAN ip address 172.18.0.79 255.255....
Mario Jost's user avatar
  • 1,700
2 votes
1 answer
499 views

How to determine the required performance of my router?

I have currently a router in my office network which has maximum input rate of around 12 Mbps, and output rate of 27 Mbps on its uplink port to the ISP. Now we want to replace this old router with ...
Shyamkkhadka's user avatar
1 vote
1 answer
322 views

Fair-queueing every class within CBWFQ

My question is similar to: What is benefit of using CBWFQ with fair-queue statement Given this policy-map (without class-maps) configuration: policy-map test class DSCP30 bandwidth percent 20 ...
Mario Jost's user avatar
  • 1,700
1 vote
0 answers
498 views

Cisco IP SLA HTTP request with frontdoor VRF

I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured ip name-server vrf ...
Daniel's user avatar
  • 1,059
4 votes
1 answer
315 views

Track crypto map state when using Policy Based Routing on Cisco Router

I have kind of a challenge and need some advice if the configuration I want to do is actually possible. Please don't kill me, I know that the configuration is not very "nice"... We are using DMVPN ...
Daniel's user avatar
  • 1,059
2 votes
3 answers
1k views

Cisco ISR4450 Router SSH access denied

I configured an ssh connection on an ISR 4451 router, which always worked perfectly. For several weeks, every time I want to connect with Putty via SSH, I get an "access denied". I also cant connect ...
Sven's user avatar
  • 51
1 vote
1 answer
223 views

Cannot log in to a Cisco 891W via terminal, ssh

I have already referred to this similar question: Telnet or SSH into a Cisco router but the procedure did not work for me. I have a Cisco 891W. I am able to log in via the console port just fine with ...
Bradley Evans's user avatar
4 votes
1 answer
208 views

EHWIC-1GE-SFP for Cisco 1941

I was able to configure the interface but only the GE port is working, not the SFP port. Did I miss something?
Marco's user avatar
  • 43
3 votes
1 answer
306 views

Vlan through ISR - Catalyst - Nexus doesn't work

I try to create a Vlan that route traffic through multiple Cisco Devices. For that I create a vlan13 on each device and setup a IP on the ISR and the Device attached to the Nexus also have a IP on the ...
kockiren's user avatar
  • 423
5 votes
2 answers
2k views

Cisco ISR 4000 Performance Levels, router shaper

I am trying to understand Cisco ISR 4000 Performance Levels. In the document ISR 4000, one can read the following paragraph: It's actually quite simple. The router shaper applies only to traffic ...
Léa Massiot's user avatar
2 votes
1 answer
1k views

Firewall and VPN functionalities for a Cisco ISR4321 V/K9

I would like to know if I can setup ACLs with the access-list command with a Cisco ISR4321 V/K9. Are there restrictions (in comparison with a Cisco ISR4321 VSEC/K9)? Note the SEC part in the reference....
Léa Massiot's user avatar
4 votes
1 answer
7k views

Create a internal connection between ISR 4451 and EtherSwitch submodule

In a Cisco ISR 4451 we install a EtherSwitch 48 Port Module. The ISR is working and the EtherSwitch Module too. Now I want to create a route from ISR to EtherSwitch and read some Manuals and Forum ...
kockiren's user avatar
  • 423
2 votes
2 answers
1k views

How to define a static route from LAN device through IPSec endpoint to Peer

From a PC that is attached to a Cisco Catalyst 3850 and Portchanneld to Cisco ISR I do a ping to a destination that is connected with BGP. That works for me. The trace path looks like: 1: localhost (...
kockiren's user avatar
  • 423
1 vote
1 answer
2k views

How to enable SM-X Module in cisco ISR 4451 Router

While plug in a SM-X-ES3D-48-P Etherswitch Module into a Cisco ISR 4451 the Ports for this Module didn't came up. What I need to do to get the Ports enable with sh ip int br command? The Output of ...
kockiren's user avatar
  • 423
7 votes
2 answers
3k views

What is the difference between "ip domain name" and "ip domain-name"?

I'm running a ISR 4221 with "Cisco IOS XE Software, Version 16.04.02". I see that it has both ip domain name and ip domain-name commands. Why? Is this some sort of compatibility thing? My 7206 ...
Erik Bennett's user avatar
1 vote
2 answers
435 views

Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces?

As the question says, Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces? Let's I have 2 VLAN. interface vlan 1 ip address 192....
user avatar
1 vote
1 answer
271 views

How can I bridge multiple interfaces to a single one a Cisco ISR C891F but making each one able to communicate only to the destination interface?

As the question says: How can I bridge multiple interfaces to a single one on a Cisco ISR C891F, but making each one able to communicate only to the destination interface? Let's say I have ...
user avatar
1 vote
1 answer
217 views

How to install a SM-D-ES3G-48-P in a ISR 4451

While plugin a SM-D-ES3G-48-P into a ISR4451 the SM module didn't come up. What steps are needed to setup this SM into the ISR4451. Google only show me install documents for Catalyst Switches. Anyone ...
kockiren's user avatar
  • 423
1 vote
1 answer
196 views

Is ISR 4451 hotplugable

For a ISR4451 there is a SM-D-ES3G-48-P Module, is this module hotplugable or should I power down the ISR for install the SM Module? UPDATE sh hw-module all attribute Slot 0 Bay 0 Board 0 Module[...
kockiren's user avatar
  • 423
2 votes
1 answer
1k views

Does a "advsecurity" license enables "crypto isakmp" on a Cisco C891F?

As the title says, Does a "advsecurity" license enables "crypto isakmp" on a Cisco C891F? This is the show license output: Index 1 Feature: advipservices Period left: Life time License Type:...
user avatar
3 votes
3 answers
14k views

How to check if IPSec is available on Cisco ISR 4451

On a Cisco isr 4451 with base image I need to check if IPSec is available. Is there an command to list available vpn features? UPDATE The image name includes K9 (UNIVERSALK9-M) but the command failed ...
kockiren's user avatar
  • 423
1 vote
1 answer
293 views

Is it possible to use a interface of Catalyst on a ISR

We use Cisco Catalyst 3850 Switch (with Cisco One Foundation) as aggregation Switch for multiple Lines and connect it to a ISR 4451 for routing. Now we search for a solution to use the Interfaces of ...
kockiren's user avatar
  • 423
4 votes
1 answer
1k views

Cisco ISR L2TP VPN local vs radius authentication problem

I currently have a cisco 1841 router configured to authenticate users against a Windows NPS server. The strange thing is that when using local authentication the VPN connects first time every time. I ...
pieterk's user avatar
  • 181
2 votes
0 answers
1k views

NVI based NAT on Cisco ISR terrible performance

I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
pieterk's user avatar
  • 181
1 vote
0 answers
718 views

Cisco 2911 RAM memory upgrade

Does anyone knows what kind of DDR2 memory goes to DIMM0 slot in Cisco 2911 router? I tried with 512 Mb and 1 Gb with 533, 677, 800 MHz, nothing will work. It say Verification not passed.
John's user avatar
  • 812
1 vote
2 answers
475 views

Is a connect between Cisco SG300 and Cisco ISR 2921 a good choice for cross connect?

We use a Cisco SG300 for small routing issues in one Part of our Network, now we want to create a cross connect between two locations. Between both Location we use a dark fibre from a provider. On the ...
kockiren's user avatar
  • 423
1 vote
0 answers
549 views

Unable to receive return packets on Azure IPSEC VPN Connection

Trying to get the VPN tunnel to Azure working on a Cisco ISR 1941 but have been unable to get any traffic flowing back from Azure to site. The tunnel looks to be up and a machine in Azure is ...
atomicharri's user avatar
2 votes
1 answer
4k views

Cisco ISR - Dropping TCP Segment: - Reason: TCP reassembly queue overflow

Cisco ISR is reporting %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1979009128 1500 bytes is out-of-order; expected seq:1978984512. Reason: TCP reassembly queue overflow - session I have adjusted ...
stephen muth's user avatar
2 votes
3 answers
17k views

Performance License for 4321

I'am trying to install an FL-4320-PERF-K9 (Performance) License on an ISR4321 to increase throughput from 85 mbit to 100 mbit but it tells me that there is a better license installed already.. Does ...
user19366's user avatar
0 votes
1 answer
23k views

Cisco ISR 4431 Router GigabitEthernet Flow-control Disable

I've got a new Cisco ISR 4431 Router running IOS XE 03.13.02.S and IOS 15.4(3)S2. WAN connection is a Metro Ethernet circuit delivered over copper and ISP has requested that we force the port to 1Gbps ...
Mister_Tom's user avatar
7 votes
2 answers
5k views

"transport input" for AUX port in Cisco routers

On physical layer AUX port works on asynchronous serial RS-232 protocol. However, one can specify various application layer protocols like telnet or SSH as allowed input protocols under AUX line ...
Martin's user avatar
  • 1,217
4 votes
1 answer
1k views

Cisco C891F-K9 ISR latency?

What is the multicast routing latency of Cisco C891F-K9 ISR? Please cite references for your answer. I think it's store-forward type and isn't one of the fastest models (given its price!). I've ...
nodakai's user avatar
  • 143
5 votes
3 answers
4k views

Network Latency issues with Cisco AP

This question involves network latency as opposed to bandwidth. I have a small remote office with a single Cisco 881W Integrated Services Router (Ethernet WAN). The WAN modem is an AdTran NetVanta ...
ThomasMcLeod's user avatar
9 votes
4 answers
874 views

How does one specify certain IPs or MAC addresses for NBAR policy enforcement?

In an office environment, if I wanted to block youtube using a Cisco ISR router, I would set up the following with NBAR: class-map match-all YOUTUBE match protocol http host "*youtube.com*" ! policy-...
lamp_scaler's user avatar
10 votes
4 answers
24k views

Setting up DHCP server on the router or on the switch?

We're using the Cisco 1921/K9 with a SG300 L3 switch. Does one set up DHCP server on the router or on the SG300? If both is capable, what is the reason to choose one over the other? Note: I have 4 ...
lamp_scaler's user avatar
7 votes
4 answers
1k views

Website filtering via IOS

Our office network uses the 1921/K9 router along with SG300 L3 switch (and a few other L2 switches) all with base modules. If we wanted to block employees from visiting certain websites, what would be ...
lamp_scaler's user avatar
6 votes
3 answers
4k views

How to throttle speed for a particular computer with high activity?

We're in an office environment of about 50 people. A few departments send emails with large attachments extensively and doing so clogs up the WAN connection (10Mbps). I'm upgrading the networking ...
lamp_scaler's user avatar
2 votes
4 answers
2k views

Cisco 1921 security features in the default bundle

Bought a Cisco 1921 router without any additional modules. This is the first time I'm using a non-home router. What security features should I enable so that users are relatively safe when using the ...
lamp_scaler's user avatar
12 votes
1 answer
17k views

Cisco ISR G2 encrypted bandwidth restriction?

I have been having complaints of a "slow connection" from several new remote sites. The sites are connected via an MPLS L3VPN service into Cisco 2921's, and we are using Cisco GET-VPN to encrypt ...
Brett Lykins's user avatar
  • 8,288
11 votes
3 answers
6k views

What is the proper way to config a Site to Site IPSEC VPN and a Remote Access VLAN on the same external interface? Cisco 891 ISR

I'd be happy to post the config or logs for reference but I am having trouble getting my remote access VPN working on the same interface as my site to site IPSEC VPN. I am using a dynamic crypto map ...
Bill Gurling's user avatar