Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

208 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
0answers
436 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
6
votes
0answers
585 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
5
votes
0answers
206 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
5
votes
0answers
210 views

Where is the traffic going?

Here is a routing puzzle: I'm working on a poorly documented network, and I'm trying to document things as I discover them. R1 is a core L3 switch. R2 is a router. The FW is a, well, firewall. On ...
5
votes
1answer
582 views

Time Cisco Router reload not always mentioned

Im trying to measure our cisco router availability data based on downtime happened. I assume from show version, the time mentioned in tag "System returned to ROM" is when reload started, and next line ...
4
votes
0answers
853 views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...
4
votes
0answers
249 views

Need to configure site to site SSL VPN between two Cisco routers

I would like to configure site-to-site SSL VPN between two sites. I originally set up an IPSec VPN between the two Cisco routers and found I was only getting 10 percent of the available bandwidth. ...
4
votes
0answers
573 views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
4
votes
0answers
211 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
4
votes
0answers
446 views

Dual-Hub DMVPN Outage

Our backup links have always utilized a GRE tunnel based VPN to a hub. Recently we installed a second hub and migrated the primary links to GRE tunnel based VPN with EIGRP to handle routing between ...
4
votes
0answers
487 views

Cisco ASA 5505 Remote Access IPSec - Tunnel Rejected - The maximum tunnel count allowed has been reached

I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message: %ASA-4-713239: IP_Address: Tunnel Rejected: ...
4
votes
0answers
78 views

Customising Cisco Clientless VPN Password Change Screen ASA5525

I'm working with one of the network engineers to customise our login screens for the Cisco clientless VPN, which, apart form time consuming, has been fine (knowledge gap on both of our parts). As part ...
4
votes
0answers
183 views

Shaping on ES20/7606-S

I've recently moved from point-to-point WAN to a point-to-multipoint WAN, unfortunately this has really messed up my brain...in regards to shaping. These circuits are aggregated into three physical ...
4
votes
0answers
5k views

Change IP address in Cisco Prime infrastructure

Is it possible to change the Cisco Prime Infrastructure platform's IP address after PI has been installed ? This reference in the docs seems to indicate that you can. ncs/admin(config)# interface ...
4
votes
1answer
1k views

Enable SNMP traps for ACLs using Cisco IOS?

Does anyone know if it's possible to enable SNMP traps to be sent from a Cisco IOS device when an ACL blocks traffic? I'd like to send a trap whenever a deny statement gets a hit. I've only been ...
4
votes
1answer
432 views

Cisco nexus STP loopguard

I have cisco nexus switches in vPC and they are connected to HP c7000 blade center switches and all my c7000 blade server has Linux Bridge is running, i believe something went wrong somewhere in Linux ...
3
votes
0answers
300 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
3
votes
0answers
112 views

Can I do Q-in-Q vlans between Dell and Cisco switch

Our Head Office is connected to our DR location between an L2 tunnel provided by our ISP. I need to establish a Q-in-Q setup between both sides to pass multiple VLANs through. Our head office has a ...
3
votes
0answers
145 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
3
votes
0answers
94 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
3
votes
0answers
1k views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
3
votes
0answers
2k views

Multiple IPSec Tunnels on Cisco router's interface

I an trying to configure 2 IPSEC VPSN Tunnels on the Cisco 1941 WAN Port. The tunnel with the higher crypto map sequence pre-empts the lower sequence number so only one tunnel is active at a time. I ...
3
votes
0answers
2k views

Two-factor authentication for Wi-Fi?

We have a new requirement to have two-factor authentication for a certain SSIDs in our enterprise. Currently we run PEAP-MSCHAPv2 to pass windows credentials to a RADIUS server (NPS running on a ...
3
votes
0answers
1k views

Cisco 871, NAT, port formwarding and VOIP configuration - phone speaker buzz

I'm new to all Cisco stuff and I need to configure nettalk VOIP. I have Cisco 871 device with two ISP - one via PPP (public IP 666.666.666.666) and one via eth (public IP 999.999.999.999). Main ISP ...
3
votes
0answers
446 views

Policy Based Routing (not matching packets) - Virtual Template

I have this configuration runnning : Larger image I tested the policy based routing int the lab using two linksys router acting as ppp clients of the Cisco 7206VXR and another linksys emulating the ...
2
votes
0answers
614 views

Cisco AIR-AP1852i-E-K9 stuck in “waiting for uplink[…]” after startup

I pulled an old cisco AP from a shelf today at work to test something, and after starting up and connecting with PUTTy, i was greeted with (after startup), this - repeating over and over: [*02/16/...
2
votes
0answers
80 views

Cisco Prime: Accurate Wi-Fi association history?

I'm running Prime 3.7 with a 2504 WLC (8.5.151.0) and am finding that the client association history under Monitor -> Clients and Users -> [select a client] does not show associations that last less ...
2
votes
0answers
115 views

very strange broadcast in LAN with Cisco ASA

Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
2
votes
0answers
273 views

Cisco nexus spanning-tree logging to syslog

I am trying to send my spanning-tree events to remote syslog but somehow it doesn't work, This is what i have in my config. N3K# sh run | grep logg logging level spanning-tree 7 logging server 172.29....
2
votes
0answers
72 views

Certain SSH shell script doesn't run well in Cisco APIC bash

The following ping script is running just fine in both script form and interactive shell ping-only.sh date for i in 10.1.1.1 10.1.1.3 10.4.1.13 do echo -e "\nIP: $i" ping -c 1 $i | grep ...
2
votes
0answers
181 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
2
votes
0answers
45 views

Cisco Wifi phones unregistration from CUCME

I have: two Cisco Wifi access points AIR-AP1832I-E-K9 (AP1 and AP2) and two Cisco wireless phones CP-8821 (P1 and P2). Phone P1 P1 usually connects to AP1 and never connects to AP2 except if it is ...
2
votes
1answer
477 views

Cisco 2960 not receiving dhcp from the router

I have a problem with Dhcp of some the Vlans. here is how my network is : I have a router ASR1001, which connects 15 switches(2960) as a ring topology. each switch has a subinterface of the router ...
2
votes
0answers
174 views

Guidance on AdTran vs Cisco Configuration

I have just turned up two t1 lines hooked into two AdTran NetVanta 3430 routers. While the NetVanta boxes seem fine, what I really want to do is to configure some of my old Cisco boxes to handle the ...
2
votes
0answers
813 views

RSA key not working with trustpoint used for IPSec

I'am trying to setup an IPsec IKEv2 tunnel where the local authentication mechanism is based on RSA. Therefore I have setup a trustpoint and I got a signed certificate for this setup. Importing is ...
2
votes
0answers
149 views

Router as PPPOE concentrator, PPPOE clients unable to get to DMZed static NAT server

I've been trying to figure out this problem, and I'm just not up to the task. I have a Cisco 2911 router as follows: Internet connection on GigabitEthernet0/1. Which has it's own static IP: A.B.C.38/...
2
votes
1answer
4k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
2
votes
0answers
95 views

point- to – point local switching

I want to build an point- to – point local E-line carrier Ethernet services between IOS XRv routers using the link bundles. Once the two local EFPs linked with a point-to-point cross connect, the ...
2
votes
0answers
3k views

Local Fallback Command Authorization on Cisco ASA when TACACS Server is Reachable

I have a cisco ASA I want to connect to a TACACS server for command level authorization (write and read-only access). This actually works quite good. Further, I have a local fallback user configured ...
2
votes
1answer
916 views

using NAT with a difference IP/range from the outside interface + proxy ARP

I need to NAT the source address of the traffic from my local LAN going out of the ASA firewall. From the diagram above, my outside interface IP on the ASA firewall is set at 192.168.12.2 q1) Am i ...
2
votes
0answers
965 views

NVI based NAT on Cisco ISR terrible performance

I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
2
votes
0answers
853 views

Problems connecting to clientless vpn portal on a Cisco ASA 5505

Just started a job where they wanted us to re-purpose a local network that wasn't in use and to create a webvpn portal to allow web access to it. We've tried everything and looked every where and ...
2
votes
0answers
344 views

Cisco ISE 1.3 and 1.4 - Sponsored guest approval email - single click approval possible?

When self-registering guests generate a request to their Sponsor, how can one create a REST-based link that can approve new Guests with a single click from the email message? Has anyone successfully ...
2
votes
0answers
4k views

How can I configure intervlan routing using SG300-10, SG300-28MP, SG200-50 and RV042

I need help configuring inter-VLAN routing. I am setting up 2 VLANs plus the admin VLAN 1 as follows: RV042 is used as a firewall (i'll probably replace it with something else) LAN ip addr 10.1.1.10 ...
2
votes
0answers
158 views

Determine if cisco phone is on POE or adapter remotely

I'm looking to find out if there is a way to know if a Cisco phone (7940,7960,7911's and the like) either through Cisco Callmanager or through the direct Web interface on the phone. I'm looking for ...
2
votes
1answer
441 views

Remote Access VPN traffic is not properly routing through to Site-To-Site VPN tunnel (Cisco ASA)

We have two ASA 5505s. One accepts remote connections from clients coming into our office, the other has a tunnel from our office into AWS. In the attached diagram, the red lines denote ping paths....
2
votes
2answers
361 views

Switchport fail (edited)

I hope can someone help me with my problem on my Cisco 2960 switch. My question is this: when I configure the Gig0/1 port on my client 2960 switch as trunk, and connect it to my server 3560 switch ...
2
votes
4answers
77 views

Cisco N9K - Down an interface in response to another interface going down?

I currently have my transit providers plugged directly into my router. I really like this arrangement because when the ISP goes down this typically downs the interfaces which results in BGP peering ...
1
vote
0answers
22 views

How can I deny or block an IP Address in Cisco FTD

I have a Cisco Firepower Threat Defense firewall. I want to Block an IP and add blocked ip into BlockedIp rule. How can I achieve it via Web Interface or REST API ? Thank you!
1
vote
0answers
21 views

Mistakenly added switch configuration on Cisco router 2951 so now it is showing gibberish data on CLI

I have Cisco 2951 router in which my colleague mistakenly uploaded switch configuration from tftp server. Now it is showing gibberish data on CLI when it boots up. I tried to get into the ROMmon mode ...

1
2 3 4 5