Questions tagged [cisco]
The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.
3,749
questions
0
votes
0
answers
17
views
JunOS tagging aggregate route from more specific route - bgp communities
I have a certain use case with rtbh for the following:
A /32 route (say 10.1.1.1/32) is injected into the network with a specific bgp community
I'd like to match the aggregate prefix that /32 belongs ...
- 1,378
0
votes
0
answers
19
views
Need assistance with Cisco Firepower 5516X: Excluding a single IP from a specific Snort rule
I'm currently managing a Cisco Firepower 5516X device and have encountered a false positive for a specific Snort rule. Instead of disabling the rule for all traffic, I would like to selectively ...
- 1
0
votes
0
answers
12
views
ED137 SIP (VoIP) for Air Traffic control use & Cisco CUBE [closed]
I am working with a air traffic control client who is using a variant of SIP call ED137.
There are 2 main uses, Ground to Ground (basically telephone calls) and Air to Ground to Air (radio traffic to ...
- 583
0
votes
0
answers
26
views
Wireshark showing multicast flood that is bringing down vlans on Catalyst 2960 [closed]
I have 4 vlans in a medium-sized environment running on a Cisco Catalyst 2960 set up a core switch that connects to several other 2-layer Cisco SG350s. I recently did a firmware update on the SG350s ...
- 1
0
votes
0
answers
44
views
CCNA OSPF Loopback as the router ID
FYI, I am studying for the CCNA and new to this.
The scenerio, 2 routers R1 and R2.
R1 Loopback IP as 192.168.0.1
R2 Loopback IP as 192.168.0.2
Using the loopback IP's as the router ID.
I provisioned ...
- 1
1
vote
0
answers
44
views
Globally raise IP ARP inspection limit rate on Cisco
I am trying to raise the ip arp inspection limit rate from the default rate of 15 on my Cisco 9300 since I am getting to many %SW_DAI-4-PACKET_RATE_EXCEEDED: x packets received in xx milliseconds ...
- 81.6k
0
votes
1
answer
386
views
Simultaneous dynamic and static NAT not working
Cisco 4200 series running IOS XE with a single public IP address and dynamic NAT, which works just fine. I am trying to add Static NAT to access a server (map external port XX to internal port YY. ...
CommunityBot
- 1
1
vote
1
answer
69
views
Cisco ports shutting down temporally due to arp-inspection
We have a couple of Cisco 9300 switches. We had the switch configured using STIGS. A couple users have complained that their Avaya phones restarted. I started running the show logs and noticed the ...
- 8,739
7
votes
5
answers
3k
views
PAT and Static NAT not working together?
The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT.
Configs:
S_HQ
!
interface FastEthernet0/1
switchport ...
CommunityBot
- 1
1
vote
2
answers
329
views
Cisco Console Port to 1 Port Ethernet Breakout
I was thinking about making it a bit easier to access the console port on a few switches deployed at work. Basically these switches are located top of rack above a KVM, and this makes accessing the ...
- 31.6k
0
votes
0
answers
41
views
MPLS labels for BGP prefixes
I've just started studying about MPLS and the labels it uses and this was mentioned in my study resource.
When we use LDP on Cisco IOS, we locally generate a label for each prefix that we can find in ...
- 759
1
vote
1
answer
88
views
Why are 10.3(99w)F and 10.3(99x)F NX-OS named like that?
According to https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/nx-os-software/guide_c07-658595.html#TypesofCiscoNXOSSoftwarereleases the part in brackets - "99w" and "...
- 1,951
0
votes
1
answer
42
views
Recover Aironet AP-ESC doesn’t seem to break c2602 boot sequence
I am trying to reuse an old Cisco Aironet c2602 Autonomous AP; I need to reset the password. CCO instructions say that I need to hit ESC repeatedly while I am on the console during the AP boot ...
- 29.9k
0
votes
2
answers
415
views
Question about subinterface DHCP relay CISCO
I want to make 4 PC got DHCP IP address
No problem with left side, but right side 2 PC can't get IP automaitic. I think the problem is DHCP Relay.
How can I use ip helper-address for subinterface of ...
CommunityBot
- 1
2
votes
1
answer
323
views
Cisco IOS XE DHCP Starlink - Static route issue
Today i connected the Starlink dish to an Cisco ISO-XE Box (ISR1111) as a secondary wan link and noticed some strange behavior.
I installed a static host-Route to an VPN Tunnel endpoint via
ip route x....
CommunityBot
- 1
1
vote
1
answer
240
views
Cisco 9500 switch stack
I have a cisco 9500 switch that is live/up in productions but I need assistance or more information on how to add a few more switches to create a switch stack and would like to be pointed in the right ...
CommunityBot
- 1
0
votes
1
answer
903
views
SSH Config on Nexus Switch
Having trouble configuring SSH on 2 Fiber Channel Switches (NX-OS). Any Cisco experts here that can help?
I am pretty new with Cisco and having trouble looking for documentation on SSH config for ...
CommunityBot
- 1
0
votes
1
answer
70
views
Cisco DNAC - case insensitive search
Is there a way to do a case insensitive search using the Cisco DNA api?
Desired results: devices named “TEST”, “test”, “Test” etc
import request
url = "https:///dna/intent/api/v1/network-device?...
CommunityBot
- 1
0
votes
1
answer
814
views
HP 6120XG switch LACP is blocked - error condition
Folks,
I am dealing with very strange issue related LACP and not sure if its bug of 6120XG switch or something else. so let me explain my issue here.
Network Diagram:
I have two Cisco Nexus 9396PX ...
CommunityBot
- 1
0
votes
1
answer
161
views
link asa with core switch to wlc
have 4 switch 3560 POE-8 , 2 of them have been RESET, AND w l c 2100 RESET too, but there are firewall AND ONE switch. Keeps the OLD CONFIG. I try to restore the network to the same old ...
CommunityBot
- 1
7
votes
0
answers
1k
views
HSRP IPv6 configuration
Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'.
interface FastEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address 2020:...
1
vote
1
answer
468
views
Change RADIUS auth method for remote access ipsec vpn
We have a Cisco 3825 router with an IPSec Remote Access VPN configured to authenticate against a radius server. We're retiring the old server and moving to a new one (Windows Server 2012). We changed ...
CommunityBot
- 1
0
votes
0
answers
1k
views
Creating an overlay network using ASA and VXLAN over IP MPLS
I need to extend an existing VLAN from a branch LAN to DC. As a matter of fact I noticed that Cisco ASA 5500X have VXLAN capabilities. I am relatively new to VXLAN and I need some help to find the ...
1
vote
2
answers
61
views
Inter-VLAN using L3 switch
There are 3 VLANs 10, 20 and 30 on these switchs. Everything such as VTP, DTP are working fine. The problem is that inter-VLAN seems not to work correctly. IP routing is activated on the L3SW (even ...
- 27
0
votes
0
answers
68
views
Anyconnect Cisco 5505 VPN Group cannot Access Inside Network
Below is the Configuration to my Cisco ASA. I can connect to VPN but then trapped and cannot enter the inside network.
ASA Version 9.2(4)27
!
hostname AwBTech-ASA
domain-name awbtech
enable password ...
0
votes
1
answer
41
views
Non VLAN Tagged Traffic Not Going Through Trunk Between Cisco Switches
Good day all.
I am running through a packet tracer exercise and am stuck on where to go next. Forgive me if I am missing something obvious, I have not touched any cisco networking or networking in ...
- 1,951
0
votes
1
answer
37
views
What is the recommended destination public IP for Cisco IP-SLA?
I want to implement Cisco IP-SLA, but I am not sure what the destination IP I should use. Any recommendations or advice?
- 81.6k
0
votes
0
answers
12
views
Cisco WDS, FreeRadius and LEAP
Freeradius got rid of LEAP since some pointrelease of 3.2.x, and I'm stuck configuring Cisco WDS on their Aironet series.
Since forever there was a tweak with LEAP in Cisco configuration like this:
...
- 233
2
votes
1
answer
3k
views
Local Fallback Command Authorization on Cisco ASA when TACACS Server is Reachable
I have a cisco ASA I want to connect to a TACACS server for command level authorization (write and read-only access). This actually works quite good. Further, I have a local fallback user configured ...
CommunityBot
- 1
1
vote
1
answer
100
views
Manually specify a tunnel gateway for an IPSec VPN Connection (ASA)
I have currently got several VPN's on-premise that are setup on the outside interface and using the default gateway on the interface as an originating source of the VPN tunnel.
Although the outside ...
CommunityBot
- 1
0
votes
0
answers
19
views
Unable to connect to the router using ncclient on RedHat 9.0 on IBM PowerPC
I have a simple program using netconf client version ncclient 0.6.13 with Python3 running on PPC64LE Red hat Version Red Hat Enterprise Linux release 9.2 (Plow)
which is using netconf yang to connect ...
0
votes
1
answer
224
views
Issue w/ Cisco router and failed NAT and static default route
I have a cisco router that is using a VRF to support a site to site VPN tunnel. I have added a second network to the router for non-VPN standard internet use. My problem is that my default static ...
CommunityBot
- 1
1
vote
1
answer
57
views
CISCO cellular Router cannot reach network via my PC
I configured the cellular and my router is connected to the internet ping (5/5) Success
but I still cannot access the internet via PC
Here is my running-conf
Current configuration : 2271 bytes
!
! ...
CommunityBot
- 1
1
vote
0
answers
545
views
Unable to receive return packets on Azure IPSEC VPN Connection
Trying to get the VPN tunnel to Azure working on a Cisco ISR 1941 but have been unable to get any traffic flowing back from Azure to site.
The tunnel looks to be up and a machine in Azure is ...
3
votes
1
answer
290
views
very strange broadcast in LAN with Cisco ASA
Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
CommunityBot
- 1
3
votes
1
answer
299
views
Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6
I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
CommunityBot
- 1
2
votes
1
answer
193
views
Certain SSH shell script doesn't run well in Cisco APIC bash
The following ping script is running just fine in both script form and interactive shell
ping-only.sh
date
for i in 10.1.1.1 10.1.1.3 10.4.1.13
do echo -e "\nIP: $i"
ping -c 1 $i | grep ...
CommunityBot
- 1
1
vote
1
answer
33
views
RIP v2 Network Command
I am comparing the Boson ExSim Lab to the Neil Anderson's Lab on RIP.
On one of the labs on Boson ExSim, it asks to configure RIP on the routers, all of which are on some form of a 192.168..0.0/24 ...
CommunityBot
- 1
1
vote
0
answers
408
views
ASA cluster with named interface running PPPoE
I am trying to configure an A/S firewall cluster, and I have the interface configured as a PPPoE client. When I try to configure the clustering on ASDM, I get a message saying that high availability ...
0
votes
1
answer
30
views
IPv6 subnetting with different end device requirements
`I have three main buildings with building A with 242 end devices, building B with 54 end devices and building C with 894 device. And all the routers are connected to each other like ring topology. ...
- 81.6k
1
vote
1
answer
305
views
ASA ping outside to inside private IPs?
I can ping from pc0 to router0 in other way I can ping inside to outside, but I can't ping from router to pc0. In the other way I can't ping outside to inside, I don't know how to add this rule on ASA....
- 81.6k
0
votes
1
answer
375
views
Site-to-site IPsec and rerouting to another IPsec tunnel
We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
CommunityBot
- 1
1
vote
2
answers
116
views
What Does Exactly Happen When A Switch Is Connected To A Portfast Port?
I am trying to get a thorough understanding of what does happen when a switch is connected to a portfast port on another switch that is part of a stable STP network in case of:
1- the port has no ...
CommunityBot
- 1
0
votes
1
answer
153
views
CISCO 9800-L Controller internal dhcp not working - GUEST WIFI
I have been trying to configure a guest network for my Cisco Catalyst 9800-L Wireless Controller for some days now. For the guest network, i want it to use an internal dhcp on the controller. I have ...
- 66.9k
0
votes
1
answer
36
views
Cisco CP-7841 IP Phone backlight settings not working [closed]
I have a couple of Cisco CP-7841 IP Phones that are working otherwise well, but the backlight controls are not working. I would like to have the backlight off unless the phone is being used (IIRC this ...
- 11
1
vote
2
answers
960
views
Why do Cisco IOS switches send packets to DHCP servers with zero giaddr field when DHCP snooping is on?
I recently troubleshooted a network where the switch had DHCP snooping turned on and even though the router which was acting as a DHCP server was connected to a trusted port, the client wasn't able to ...
- 1
0
votes
1
answer
167
views
Cisco Nexus vPC Portchannel issues
I'm currently facing a network issue between Cisco Nexus 93108 (9.3.11) on an LACP port-channel configuration.
The replica below help us to reproduce the issue we had (using 4x Nexus 9000v qcow2 image ...
CommunityBot
- 1
2
votes
1
answer
7k
views
IPSec IKEv2 connection failure due to RSA authentication issue
I'm trying to get an IPSec/IKEv2 setup working, which was implement following this
I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
CommunityBot
- 1
0
votes
1
answer
42
views
How to configure IDr on Cisco ASA for AWS IPsec tunnels
I am currently facing an issue while attempting to establish IPsec tunnels between AWS and a Cisco ASA firewall. The AWS tunnel logs indicate that the Identity Resolution checks are failing, ...
CommunityBot
- 1
0
votes
1
answer
68
views
The Use of BGP Communities
I am studying BGP communities at the moment.
I understand that communities are path attributes which are a way of tagging specific BGP route advertisements in order to ensure proper route selection ...
- 17k