Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [cisco-isr]

Questions about Cisco Integrated Services Routers (ISR).

1
vote
1answer
35 views

Fair-queueing every class within CBWFQ

My question is similar to: What is benefit of using CBWFQ with fair-queue statement Given this policy-map (without class-maps) configuration: policy-map test class DSCP30 bandwidth percent 20 ...
1
vote
0answers
54 views

Cisco IP SLA HTTP request with frontdoor VRF

I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured ip name-server vrf ...
4
votes
1answer
106 views

Track crypto map state when using Policy Based Routing on Cisco Router

I have kind of a challenge and need some advice if the configuration I want to do is actually possible. Please don't kill me, I know that the configuration is not very "nice"... We are using DMVPN ...
2
votes
3answers
219 views

Cisco ISR4450 Router SSH access denied

I configured an ssh connection on an ISR 4451 router, which always worked perfectly. For several weeks, every time I want to connect with Putty via SSH, I get an "access denied". I also cant connect ...
1
vote
1answer
68 views

Cannot log in to a Cisco 891W via terminal, ssh

I have already referred to this similar question: Telnet or SSH into a Cisco router but the procedure did not work for me. I have a Cisco 891W. I am able to log in via the console port just fine with ...
4
votes
1answer
146 views

EHWIC-1GE-SFP for Cisco 1941

I was able to configure the interface but only the GE port is working, not the SFP port. Did I miss something?
3
votes
1answer
133 views

Vlan through ISR - Catalyst - Nexus doesn't work

I try to create a Vlan that route traffic through multiple Cisco Devices. For that I create a vlan13 on each device and setup a IP on the ISR and the Device attached to the Nexus also have a IP on the ...
5
votes
2answers
2k views

Cisco ISR 4000 Performance Levels, router shaper

I am trying to understand Cisco ISR 4000 Performance Levels. In the document ISR 4000, one can read the following paragraph: It's actually quite simple. The router shaper applies only to traffic ...
2
votes
1answer
564 views

Firewall and VPN functionalities for a Cisco ISR4321 V/K9

I would like to know if I can setup ACLs with the access-list command with a Cisco ISR4321 V/K9. Are there restrictions (in comparison with a Cisco ISR4321 VSEC/K9)? Note the SEC part in the reference....
4
votes
1answer
2k views

Create a internal connection between ISR 4451 and EtherSwitch submodule

In a Cisco ISR 4451 we install a EtherSwitch 48 Port Module. The ISR is working and the EtherSwitch Module too. Now I want to create a route from ISR to EtherSwitch and read some Manuals and Forum ...
2
votes
2answers
830 views

How to define a static route from LAN device through IPSec endpoint to Peer

From a PC that is attached to a Cisco Catalyst 3850 and Portchanneld to Cisco ISR I do a ping to a destination that is connected with BGP. That works for me. The trace path looks like: 1: localhost (...
1
vote
1answer
577 views

How to enable SM-X Module in cisco ISR 4451 Router

While plug in a SM-X-ES3D-48-P Etherswitch Module into a Cisco ISR 4451 the Ports for this Module didn't came up. What I need to do to get the Ports enable with sh ip int br command? The Output of ...
6
votes
2answers
986 views

What is the difference between “ip domain name” and “ip domain-name”?

I'm running a ISR 4221 with "Cisco IOS XE Software, Version 16.04.02". I see that it has both ip domain name and ip domain-name commands. Why? Is this some sort of compatibility thing? My 7206 ...
1
vote
1answer
252 views

Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces?

As the question says, Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces? Let's I have 2 VLAN. interface vlan 1 ip address 192....
1
vote
1answer
148 views

How can I bridge multiple interfaces to a single one a Cisco ISR C891F but making each one able to communicate only to the destination interface?

As the question says: How can I bridge multiple interfaces to a single one on a Cisco ISR C891F, but making each one able to communicate only to the destination interface? Let's say I have ...
1
vote
1answer
105 views

How to install a SM-D-ES3G-48-P in a ISR 4451

While plugin a SM-D-ES3G-48-P into a ISR4451 the SM module didn't come up. What steps are needed to setup this SM into the ISR4451. Google only show me install documents for Catalyst Switches. Anyone ...
1
vote
1answer
90 views

Is ISR 4451 hotplugable

For a ISR4451 there is a SM-D-ES3G-48-P Module, is this module hotplugable or should I power down the ISR for install the SM Module? UPDATE sh hw-module all attribute Slot 0 Bay 0 Board 0 Module[...
1
vote
1answer
495 views

Does a “advsecurity” license enables “crypto isakmp” on a Cisco C891F?

As the title says, Does a "advsecurity" license enables "crypto isakmp" on a Cisco C891F? This is the show license output: Index 1 Feature: advipservices Period left: Life time License Type:...
2
votes
3answers
5k views

How to check if IPSec is available on Cisco ISR 4451

On a Cisco isr 4451 with base image I need to check if IPSec is available. Is there an command to list available vpn features? UPDATE The image name includes K9 (UNIVERSALK9-M) but the command failed ...
1
vote
1answer
208 views

Is it possible to use a interface of Catalyst on a ISR

We use Cisco Catalyst 3850 Switch (with Cisco One Foundation) as aggregation Switch for multiple Lines and connect it to a ISR 4451 for routing. Now we search for a solution to use the Interfaces of ...
5
votes
1answer
633 views

Cisco ISR L2TP VPN local vs radius authentication problem

I currently have a cisco 1841 router configured to authenticate users against a Windows NPS server. The strange thing is that when using local authentication the VPN connects first time every time. I ...
1
vote
0answers
779 views

NVI based NAT on Cisco ISR terrible performance

I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
1
vote
0answers
421 views

Cisco 2911 RAM memory upgrade

Does anyone knows what kind of DDR2 memory goes to DIMM0 slot in Cisco 2911 router? I tried with 512 Mb and 1 Gb with 533, 677, 800 MHz, nothing will work. It say Verification not passed.
1
vote
2answers
256 views

Is a connect between Cisco SG300 and Cisco ISR 2921 a good choice for cross connect?

We use a Cisco SG300 for small routing issues in one Part of our Network, now we want to create a cross connect between two locations. Between both Location we use a dark fibre from a provider. On the ...
1
vote
0answers
468 views

Unable to receive return packets on Azure IPSEC VPN Connection

Trying to get the VPN tunnel to Azure working on a Cisco ISR 1941 but have been unable to get any traffic flowing back from Azure to site. The tunnel looks to be up and a machine in Azure is ...
2
votes
1answer
3k views

Cisco ISR - Dropping TCP Segment: - Reason: TCP reassembly queue overflow

Cisco ISR is reporting %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1979009128 1500 bytes is out-of-order; expected seq:1978984512. Reason: TCP reassembly queue overflow - session I have adjusted ...
2
votes
3answers
10k views

Performance License for 4321

I'am trying to install an FL-4320-PERF-K9 (Performance) License on an ISR4321 to increase throughput from 85 mbit to 100 mbit but it tells me that there is a better license installed already.. Does ...
0
votes
1answer
18k views

Cisco ISR 4431 Router GigabitEthernet Flow-control Disable

I've got a new Cisco ISR 4431 Router running IOS XE 03.13.02.S and IOS 15.4(3)S2. WAN connection is a Metro Ethernet circuit delivered over copper and ISP has requested that we force the port to 1Gbps ...
4
votes
2answers
4k views

“transport input” for AUX port in Cisco routers

On physical layer AUX port works on asynchronous serial RS-232 protocol. However, one can specify various application layer protocols like telnet or SSH as allowed input protocols under AUX line ...
4
votes
1answer
847 views

Cisco C891F-K9 ISR latency?

What is the multicast routing latency of Cisco C891F-K9 ISR? Please cite references for your answer. I think it's store-forward type and isn't one of the fastest models (given its price!). I've ...
3
votes
3answers
4k views

Network Latency issues with Cisco AP

This question involves network latency as opposed to bandwidth. I have a small remote office with a single Cisco 881W Integrated Services Router (Ethernet WAN). The WAN modem is an AdTran NetVanta ...
9
votes
4answers
735 views

How does one specify certain IPs or MAC addresses for NBAR policy enforcement?

In an office environment, if I wanted to block youtube using a Cisco ISR router, I would set up the following with NBAR: class-map match-all YOUTUBE match protocol http host "*youtube.com*" ! policy-...
10
votes
4answers
16k views

Setting up DHCP server on the router or on the switch?

We're using the Cisco 1921/K9 with a SG300 L3 switch. Does one set up DHCP server on the router or on the SG300? If both is capable, what is the reason to choose one over the other? Note: I have 4 ...
7
votes
4answers
1k views

Website filtering via IOS

Our office network uses the 1921/K9 router along with SG300 L3 switch (and a few other L2 switches) all with base modules. If we wanted to block employees from visiting certain websites, what would be ...
6
votes
3answers
4k views

How to throttle speed for a particular computer with high activity?

We're in an office environment of about 50 people. A few departments send emails with large attachments extensively and doing so clogs up the WAN connection (10Mbps). I'm upgrading the networking ...
2
votes
4answers
1k views

Cisco 1921 security features in the default bundle

Bought a Cisco 1921 router without any additional modules. This is the first time I'm using a non-home router. What security features should I enable so that users are relatively safe when using the ...
12
votes
1answer
14k views

Cisco ISR G2 encrypted bandwidth restriction?

I have been having complaints of a "slow connection" from several new remote sites. The sites are connected via an MPLS L3VPN service into Cisco 2921's, and we are using Cisco GET-VPN to encrypt ...
9
votes
2answers
5k views

What is the proper way to config a Site to Site IPSEC VPN and a Remote Access VLAN on the same external interface? Cisco 891 ISR

I'd be happy to post the config or logs for reference but I am having trouble getting my remote access VPN working on the same interface as my site to site IPSEC VPN. I am using a dynamic crypto map ...