Questions tagged [cisco-isr]
Questions about Cisco Integrated Services Routers (ISR).
50
questions
0
votes
1
answer
5k
views
Destination NAT on Cisco ISR
I know how to perform regular overload PAT in my lab running
sh ver
Cisco IOS XE Software, Version 16.03.09
Cisco IOS Software [Denali], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.3.9, ...
CommunityBot
- 1
1
vote
0
answers
561
views
Cisco IP SLA HTTP request with frontdoor VRF
I am trying to use a IP SLA for HTTP on my Cisco ISR 4321 router to check if a website is reachable. The challenge is that I need to do that in a frontdoor VRF. I have configured
ip name-server vrf ...
CommunityBot
- 1
0
votes
1
answer
167
views
Cisco C899G LTE ISR as transparent IP router/bridge
I have a Cisco ISR router C899G with LTE Cellular interface. I'd like to bridge the LTE into one of the eth ports in order to tap the wan link into my firewall device. When I try the BVI method as ...
1
vote
0
answers
561
views
Unable to receive return packets on Azure IPSEC VPN Connection
Trying to get the VPN tunnel to Azure working on a Cisco ISR 1941 but have been unable to get any traffic flowing back from Azure to site.
The tunnel looks to be up and a machine in Azure is ...
CommunityBot
- 1
1
vote
2
answers
691
views
Cisco ISR 4000 series with SM-X Layer 2/3 module
I have a Cisco SM-X-16G4M2X Layer 2/3 Service Module installed in an ISR 4000 series router, and I would like to configure its ports as level 2 in a vlan, and then configure that vlan with an IP ...
0
votes
1
answer
928
views
Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp
I'm looking after to use a setup with that objectives in mind:
Create a subinterface on interface GigabitEthernet0/0/1
create a Vlan and assign it to that subinterface
create a vrrf and assign it to ...
CommunityBot
- 1
1
vote
2
answers
414
views
What interfaces does a Cisco iOS Router allow SSH Console access on?
I am have trouble understanding how Cisco iOS maps console access services like SSH to IP addresses.
Assume the following:
There are no acls blocking traffic
There is the typical SSH server ...
- 135
1
vote
1
answer
235
views
ISR 4331 vs ISR 4331/K9?
We have cisco router. On its box/package ISR 4331/K9 is written. I am watching a youtube video at below link, its title has word ISR 4331
https://www.youtube.com/watch?v=bk-4jkb6Cwo&list=...
- 86.4k
2
votes
1
answer
1k
views
Does a "advsecurity" license enables "crypto isakmp" on a Cisco C891F?
As the title says,
Does a "advsecurity" license enables "crypto isakmp" on a Cisco C891F?
This is the show license output:
Index 1 Feature: advipservices
Period left: Life time
License Type:...
1
vote
2
answers
449
views
Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces?
As the question says,
Is it possible to do interVLAN routing on a router on a stick configuration on a Cisco ISR C891F with tagged interfaces?
Let's I have 2 VLAN.
interface vlan 1
ip address 192....
- 846
0
votes
0
answers
507
views
Cisco 4221 basic internet setup
I've just got a new cisco 4221 isr router that has sd-wan firmware. This is my first experience with this series and im trying to set ip up for basic internet access but no luck.
Here is an overview ...
1
vote
2
answers
1k
views
Cisco BDI not Forwarding L2 Traffic?
I'm new to interface bridging, and I have an ISR4431 running 03.16.04b.S on which I need to bridge between two interfaces for two hosts: One interface is connecting directly to a host, the other to a ...
- 36
0
votes
1
answer
4k
views
Disable TLS v1.0 in Cisco ISR4321/K9
I would like to know the command on how I can disable the TLS v1.0 and v1.1 in the Cisco ISR4321/K9 and just retain TLS v1.2 ?
John
3
votes
2
answers
317
views
Understanding traffic flow on SVIs [closed]
I have a simliar question to this one: Access-Lists and VLAN and understanding traffic flow
But my question is concerning service-policies. Have a look at the image above. I triet to make a traffic ...
- 21
11
votes
3
answers
6k
views
What is the proper way to config a Site to Site IPSEC VPN and a Remote Access VLAN on the same external interface? Cisco 891 ISR
I'd be happy to post the config or logs for reference but I am having trouble getting my remote access VPN working on the same interface as my site to site IPSEC VPN. I am using a dynamic crypto map ...
- 2,269
2
votes
1
answer
627
views
Prevent static NAT to respond to ARP requests
We are trying to merge 2 networks with overlapping IP spaces: This is the configuraiton so far:
interface Tunnel1
description VPN Port CompanyA
ip vrf forwarding LAN
ip address 172.18.0.79 255.255....
2
votes
1
answer
538
views
How to determine the required performance of my router?
I have currently a router in my office network which has maximum input rate of around 12 Mbps, and output rate of 27 Mbps on its uplink port to the ISP.
Now we want to replace this old router with ...
- 16.3k
1
vote
1
answer
297
views
Is it possible to use a interface of Catalyst on a ISR
We use Cisco Catalyst 3850 Switch (with Cisco One Foundation) as aggregation Switch for multiple Lines and connect it to a ISR 4451 for routing.
Now we search for a solution to use the Interfaces of ...
- 100k
1
vote
1
answer
393
views
Fair-queueing every class within CBWFQ
My question is similar to:
What is benefit of using CBWFQ with fair-queue statement
Given this policy-map (without class-maps) configuration:
policy-map test
class DSCP30
bandwidth percent 20
...
CommunityBot
- 1
3
votes
3
answers
15k
views
How to check if IPSec is available on Cisco ISR 4451
On a Cisco isr 4451 with base image I need to check if IPSec is available. Is there an command to list available vpn features?
UPDATE The image name includes K9 (UNIVERSALK9-M) but the command failed ...
- 67.9k
4
votes
1
answer
353
views
Track crypto map state when using Policy Based Routing on Cisco Router
I have kind of a challenge and need some advice if the configuration I want to do is actually possible. Please don't kill me, I know that the configuration is not very "nice"...
We are using DMVPN ...
- 1,071
4
votes
1
answer
215
views
EHWIC-1GE-SFP for Cisco 1941
I was able to configure the interface but only the GE port is working, not the SFP port.
Did I miss something?
- 100k
4
votes
1
answer
7k
views
Create a internal connection between ISR 4451 and EtherSwitch submodule
In a Cisco ISR 4451 we install a EtherSwitch 48 Port Module. The ISR is working and the EtherSwitch Module too. Now I want to create a route from ISR to EtherSwitch and read some Manuals and Forum ...
2
votes
3
answers
1k
views
Cisco ISR4450 Router SSH access denied
I configured an ssh connection on an ISR 4451 router, which always worked perfectly.
For several weeks, every time I want to connect with Putty via SSH, I get an "access denied". I also cant connect ...
9
votes
4
answers
886
views
How does one specify certain IPs or MAC addresses for NBAR policy enforcement?
In an office environment, if I wanted to block youtube using a Cisco ISR router, I would set up the following with NBAR:
class-map match-all YOUTUBE
match protocol http host "*youtube.com*"
!
policy-...
- 100k
1
vote
1
answer
258
views
Cannot log in to a Cisco 891W via terminal, ssh
I have already referred to this similar question: Telnet or SSH into a Cisco router but the procedure did not work for me.
I have a Cisco 891W. I am able to log in via the console port just fine with ...
- 19.8k
4
votes
1
answer
1k
views
Cisco C891F-K9 ISR latency?
What is the multicast routing latency of Cisco C891F-K9 ISR? Please cite references for your answer. I think it's store-forward type and isn't one of the fastest models (given its price!).
I've ...
- 100k
1
vote
1
answer
279
views
How can I bridge multiple interfaces to a single one a Cisco ISR C891F but making each one able to communicate only to the destination interface?
As the question says:
How can I bridge multiple interfaces to a single one on a Cisco ISR C891F, but making each one able to communicate only to the destination interface?
Let's say I have ...
- 100k
3
votes
1
answer
315
views
Vlan through ISR - Catalyst - Nexus doesn't work
I try to create a Vlan that route traffic through multiple Cisco Devices. For that I create a vlan13 on each device and setup a IP on the ISR and the Device attached to the Nexus also have a IP on the ...
CommunityBot
- 1
5
votes
2
answers
2k
views
Cisco ISR 4000 Performance Levels, router shaper
I am trying to understand Cisco ISR 4000 Performance Levels.
In the document ISR 4000, one can read the following paragraph:
It's actually quite simple. The router shaper applies only to traffic
...
- 2,426
2
votes
1
answer
1k
views
Firewall and VPN functionalities for a Cisco ISR4321 V/K9
I would like to know if I can setup ACLs with the access-list command with a Cisco ISR4321 V/K9.
Are there restrictions (in comparison with a Cisco ISR4321 VSEC/K9)?
Note the SEC part in the reference....
- 19.8k
2
votes
2
answers
2k
views
How to define a static route from LAN device through IPSec endpoint to Peer
From a PC that is attached to a Cisco Catalyst 3850 and Portchanneld to Cisco ISR I do a ping to a destination that is connected with BGP. That works for me.
The trace path looks like:
1: localhost (...
- 100k
1
vote
1
answer
2k
views
How to enable SM-X Module in cisco ISR 4451 Router
While plug in a SM-X-ES3D-48-P Etherswitch Module into a Cisco ISR 4451 the Ports for this Module didn't came up. What I need to do to get the Ports enable with sh ip int br command?
The Output of ...
- 423
7
votes
2
answers
3k
views
What is the difference between "ip domain name" and "ip domain-name"?
I'm running a ISR 4221 with "Cisco IOS XE Software, Version 16.04.02".
I see that it has both ip domain name and ip domain-name commands. Why? Is this some sort of compatibility thing? My 7206 ...
- 3,754
1
vote
1
answer
232
views
How to install a SM-D-ES3G-48-P in a ISR 4451
While plugin a SM-D-ES3G-48-P into a ISR4451 the SM module didn't come up. What steps are needed to setup this SM into the ISR4451.
Google only show me install documents for Catalyst Switches. Anyone ...
CommunityBot
- 1
1
vote
1
answer
242
views
Is ISR 4451 hotplugable
For a ISR4451 there is a SM-D-ES3G-48-P Module, is this module hotplugable or should I power down the ISR for install the SM Module?
UPDATE
sh hw-module all attribute
Slot 0 Bay 0 Board 0 Module[...
- 423
2
votes
3
answers
17k
views
Performance License for 4321
I'am trying to install an FL-4320-PERF-K9 (Performance) License on an ISR4321 to increase throughput from 85 mbit to 100 mbit but it tells me that there is a better license installed already.. Does ...
- 100k
5
votes
3
answers
4k
views
Network Latency issues with Cisco AP
This question involves network latency as opposed to bandwidth.
I have a small remote office with a single Cisco 881W Integrated Services Router (Ethernet WAN). The WAN modem is an AdTran NetVanta ...
- 611
4
votes
1
answer
1k
views
Cisco ISR L2TP VPN local vs radius authentication problem
I currently have a cisco 1841 router configured to authenticate users against a Windows NPS server. The strange thing is that when using local authentication the VPN connects first time every time. I ...
CommunityBot
- 1
1
vote
2
answers
505
views
Is a connect between Cisco SG300 and Cisco ISR 2921 a good choice for cross connect?
We use a Cisco SG300 for small routing issues in one Part of our Network, now we want to create a cross connect between two locations. Between both Location we use a dark fibre from a provider. On the ...
- 100k
2
votes
0
answers
1k
views
NVI based NAT on Cisco ISR terrible performance
I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
- 181
1
vote
0
answers
770
views
Cisco 2911 RAM memory upgrade
Does anyone knows what kind of DDR2 memory goes to DIMM0 slot in Cisco 2911 router? I tried with 512 Mb and 1 Gb with 533, 677, 800 MHz, nothing will work. It say Verification not passed.
- 812
12
votes
1
answer
17k
views
Cisco ISR G2 encrypted bandwidth restriction?
I have been having complaints of a "slow connection" from several new remote sites.
The sites are connected via an MPLS L3VPN service into Cisco 2921's, and we are using Cisco GET-VPN to encrypt ...
CommunityBot
- 1
2
votes
1
answer
4k
views
Cisco ISR - Dropping TCP Segment: - Reason: TCP reassembly queue overflow
Cisco ISR is reporting
%FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1979009128 1500 bytes is out-of-order; expected seq:1978984512. Reason: TCP reassembly queue overflow - session
I have adjusted ...
- 100k
0
votes
1
answer
23k
views
Cisco ISR 4431 Router GigabitEthernet Flow-control Disable
I've got a new Cisco ISR 4431 Router running IOS XE 03.13.02.S and IOS 15.4(3)S2.
WAN connection is a Metro Ethernet circuit delivered over copper and ISP has requested that we force the port to 1Gbps ...
- 27.4k
10
votes
4
answers
26k
views
Setting up DHCP server on the router or on the switch?
We're using the Cisco 1921/K9 with a SG300 L3 switch. Does one set up DHCP server on the router or on the SG300? If both is capable, what is the reason to choose one over the other?
Note: I have 4 ...
- 9
7
votes
2
answers
5k
views
"transport input" for AUX port in Cisco routers
On physical layer AUX port works on asynchronous serial RS-232 protocol. However, one can specify various application layer protocols like telnet or SSH as allowed input protocols under AUX line ...
- 655
7
votes
4
answers
1k
views
Website filtering via IOS
Our office network uses the 1921/K9 router along with SG300 L3 switch (and a few other L2 switches) all with base modules. If we wanted to block employees from visiting certain websites, what would be ...
- 61
6
votes
3
answers
4k
views
How to throttle speed for a particular computer with high activity?
We're in an office environment of about 50 people. A few departments send emails with large attachments extensively and doing so clogs up the WAN connection (10Mbps).
I'm upgrading the networking ...
2
votes
4
answers
2k
views
Cisco 1921 security features in the default bundle
Bought a Cisco 1921 router without any additional modules. This is the first time I'm using a non-home router. What security features should I enable so that users are relatively safe when using the ...
- 32.4k