Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

237 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
8 votes
0 answers
718 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
JBC's user avatar
  • 81
7 votes
0 answers
1k views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
dcrearer's user avatar
  • 499
7 votes
5 answers
3k views

PAT and Static NAT not working together?

The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT. Configs: S_HQ ! interface FastEthernet0/1 switchport ...
Thom's user avatar
  • 71
7 votes
0 answers
759 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
renwique's user avatar
6 votes
0 answers
726 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
Satish's user avatar
  • 4,379
5 votes
0 answers
1k views

Cisco nexus STP loopguard

I have cisco nexus switches in vPC and they are connected to HP c7000 blade center switches and all my c7000 blade server has Linux Bridge is running, i believe something went wrong somewhere in Linux ...
Satish's user avatar
  • 4,379
5 votes
0 answers
303 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
kyob's user avatar
  • 91
5 votes
0 answers
481 views

Dual-Hub DMVPN Outage

Our backup links have always utilized a GRE tunnel based VPN to a hub. Recently we installed a second hub and migrated the primary links to GRE tunnel based VPN with EIGRP to handle routing between ...
meekrobe's user avatar
5 votes
0 answers
587 views

Cisco ASA 5505 Remote Access IPSec - Tunnel Rejected - The maximum tunnel count allowed has been reached

I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message: %ASA-4-713239: IP_Address: Tunnel Rejected: ...
Ottootto's user avatar
  • 131
5 votes
0 answers
84 views

Customising Cisco Clientless VPN Password Change Screen ASA5525

I'm working with one of the network engineers to customise our login screens for the Cisco clientless VPN, which, apart form time consuming, has been fine (knowledge gap on both of our parts). As part ...
grunt121's user avatar
5 votes
0 answers
199 views

Shaping on ES20/7606-S

I've recently moved from point-to-point WAN to a point-to-multipoint WAN, unfortunately this has really messed up my brain...in regards to shaping. These circuits are aggregated into three physical ...
user4854's user avatar
5 votes
0 answers
5k views

Change IP address in Cisco Prime infrastructure

Is it possible to change the Cisco Prime Infrastructure platform's IP address after PI has been installed ? This reference in the docs seems to indicate that you can. ncs/admin(config)# interface ...
Jeremy G.'s user avatar
  • 787
4 votes
1 answer
3k views

VRF Leak global default route with a single router

I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
Geekman's user avatar
  • 1,478
4 votes
0 answers
180 views

Why does RSTP send proposal bit and agreement bit as '1' initially?

From a recent Wireshark capture of a RSTP BPDU on a switch, both proposal and agreement bits were set to '1'. In my understanding, initially both switches 'propose' themselves as root. The better root ...
noobmaster69's user avatar
4 votes
0 answers
823 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
Satish's user avatar
  • 4,379
4 votes
0 answers
144 views

Can I do Q-in-Q vlans between Dell and Cisco switch

Our Head Office is connected to our DR location between an L2 tunnel provided by our ISP. I need to establish a Q-in-Q setup between both sides to pass multiple VLANs through. Our head office has a ...
FixItSteve's user avatar
4 votes
0 answers
471 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
Maverick's user avatar
  • 1,412
4 votes
0 answers
130 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
NickP's user avatar
  • 41
4 votes
0 answers
1k views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
peter_s's user avatar
  • 131
3 votes
1 answer
347 views

very strange broadcast in LAN with Cisco ASA

Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
Satish's user avatar
  • 4,379
3 votes
0 answers
248 views

Router as PPPOE concentrator, PPPOE clients unable to get to DMZed static NAT server

I've been trying to figure out this problem, and I'm just not up to the task. I have a Cisco 2911 router as follows: Internet connection on GigabitEthernet0/1. Which has it's own static IP: A.B.C.38/...
Mike's user avatar
  • 131
3 votes
0 answers
2k views

Multiple IPSec Tunnels on Cisco router's interface

I an trying to configure 2 IPSEC VPSN Tunnels on the Cisco 1941 WAN Port. The tunnel with the higher crypto map sequence pre-empts the lower sequence number so only one tunnel is active at a time. I ...
mohun's user avatar
  • 31
3 votes
0 answers
2k views

Two-factor authentication for Wi-Fi?

We have a new requirement to have two-factor authentication for a certain SSIDs in our enterprise. Currently we run PEAP-MSCHAPv2 to pass windows credentials to a RADIUS server (NPS running on a ...
A L's user avatar
  • 3,310
3 votes
0 answers
1k views

Cisco 871, NAT, port formwarding and VOIP configuration - phone speaker buzz

I'm new to all Cisco stuff and I need to configure nettalk VOIP. I have Cisco 871 device with two ISP - one via PPP (public IP 666.666.666.666) and one via eth (public IP 999.999.999.999). Main ISP ...
Tttpsamw's user avatar
3 votes
0 answers
512 views

Policy Based Routing (not matching packets) - Virtual Template

I have this configuration runnning : Larger image I tested the policy based routing int the lab using two linksys router acting as ppp clients of the Cisco 7206VXR and another linksys emulating the ...
RS1983's user avatar
  • 501
3 votes
3 answers
432 views

Switchport fail (edited)

I hope can someone help me with my problem on my Cisco 2960 switch. My question is this: when I configure the Gig0/1 port on my client 2960 switch as trunk, and connect it to my server 3560 switch ...
Unchanging_Heart's user avatar
2 votes
0 answers
480 views

Cisco Access Switches: Monitoring AAA server dead via SNMP?

This is a new setup of Cisco access switches (2960S, 2960X IOS with 15.2(2)E9, but mostly C1000 with IOS 15.2(7)E*), with a Cisco ISE 3.0 as authentication server for 802.1X, config style is to be ...
Marc 'netztier' Luethi's user avatar
2 votes
0 answers
334 views

Cisco ISR cannot ping from WAN but internet works

Cisco ISR 4331 works but ping/ssh/web outside/GRE doesn`t I have changed an old router to Cisco ISR4331. Have set up everything, nothing fancy, no VLANs/OSPF/redundancy, etc. Just a gateway for an ...
blackraven's user avatar
2 votes
0 answers
277 views

Problem with BGP aggregate-address behavior in IOS when a large number of OSPF routes update all at once

We have a Direct Connect setup to AWS using BGP. We are running a ISR4451 with IOS XE 16.03.06. I have a strange situation where the AWS BGP neighbor drops our connection with the notification: ...
Appleoddity's user avatar
2 votes
2 answers
318 views

Static NAT and PAT

I have two private IP addresses, want to make them NAT to 203.0.113.0/2 public IP address. WAY 1 : Static NAT (2 ip addresses NATted to one by manually) WAY 2 : PAT (Router gives port number ...
CoderBoy's user avatar
2 votes
0 answers
4k views

Cisco AIR-AP1852i-E-K9 stuck in "waiting for uplink[...]" after startup

I pulled an old cisco AP from a shelf today at work to test something, and after starting up and connecting with PUTTy, i was greeted with (after startup), this - repeating over and over: [*02/16/...
Flying Thunder's user avatar
2 votes
1 answer
395 views

How can I configure a Cisco router 4300 to allow internal server ip:80 to be accessed on public ip:4500

I have an internal web server on port 80. I need help commands maybe to configure port forwarding to access the server on my private network from a public IP Current running config interface ...
Brandon Oluoch's user avatar
2 votes
0 answers
462 views

Cisco Prime: Accurate Wi-Fi association history?

I'm running Prime 3.7 with a 2504 WLC (8.5.151.0) and am finding that the client association history under Monitor -> Clients and Users -> [select a client] does not show associations that last less ...
Juffo-Wup's user avatar
  • 181
2 votes
0 answers
693 views

Cisco nexus spanning-tree logging to syslog

I am trying to send my spanning-tree events to remote syslog but somehow it doesn't work, This is what i have in my config. N3K# sh run | grep logg logging level spanning-tree 7 logging server 172.29....
Satish's user avatar
  • 4,379
2 votes
1 answer
241 views

Certain SSH shell script doesn't run well in Cisco APIC bash

The following ping script is running just fine in both script form and interactive shell ping-only.sh date for i in 10.1.1.1 10.1.1.3 10.4.1.13 do echo -e "\nIP: $i" ping -c 1 $i | grep ...
user11392987's user avatar
2 votes
0 answers
48 views

Cisco Wifi phones unregistration from CUCME

I have: two Cisco Wifi access points AIR-AP1832I-E-K9 (AP1 and AP2) and two Cisco wireless phones CP-8821 (P1 and P2). Phone P1 P1 usually connects to AP1 and never connects to AP2 except if it is ...
Léa Massiot's user avatar
2 votes
0 answers
242 views

Guidance on AdTran vs Cisco Configuration

I have just turned up two t1 lines hooked into two AdTran NetVanta 3430 routers. While the NetVanta boxes seem fine, what I really want to do is to configure some of my old Cisco boxes to handle the ...
Commerce's user avatar
2 votes
0 answers
2k views

RSA key not working with trustpoint used for IPSec

I'am trying to setup an IPsec IKEv2 tunnel where the local authentication mechanism is based on RSA. Therefore I have setup a trustpoint and I got a signed certificate for this setup. Importing is ...
Nicolas's user avatar
  • 69
2 votes
0 answers
126 views

point- to – point local switching

I want to build an point- to – point local E-line carrier Ethernet services between IOS XRv routers using the link bundles. Once the two local EFPs linked with a point-to-point cross connect, the ...
Magesh's user avatar
  • 21
2 votes
0 answers
1k views

NVI based NAT on Cisco ISR terrible performance

I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
pieterk's user avatar
  • 181
2 votes
0 answers
1k views

Problems connecting to clientless vpn portal on a Cisco ASA 5505

Just started a job where they wanted us to re-purpose a local network that wasn't in use and to create a webvpn portal to allow web access to it. We've tried everything and looked every where and ...
Sam B's user avatar
  • 21
2 votes
0 answers
390 views

Cisco ISE 1.3 and 1.4 - Sponsored guest approval email - single click approval possible?

When self-registering guests generate a request to their Sponsor, how can one create a REST-based link that can approve new Guests with a single click from the email message? Has anyone successfully ...
raidORlostark's user avatar
2 votes
1 answer
493 views

Change RADIUS auth method for remote access ipsec vpn

We have a Cisco 3825 router with an IPSec Remote Access VPN configured to authenticate against a radius server. We're retiring the old server and moving to a new one (Windows Server 2012). We changed ...
soooopahfly's user avatar
2 votes
0 answers
4k views

How can I configure intervlan routing using SG300-10, SG300-28MP, SG200-50 and RV042

I need help configuring inter-VLAN routing. I am setting up 2 VLANs plus the admin VLAN 1 as follows: RV042 is used as a firewall (i'll probably replace it with something else) LAN ip addr 10.1.1.10 ...
user2246935's user avatar
2 votes
0 answers
164 views

Determine if cisco phone is on POE or adapter remotely

I'm looking to find out if there is a way to know if a Cisco phone (7940,7960,7911's and the like) either through Cisco Callmanager or through the direct Web interface on the phone. I'm looking for ...
PsychoData's user avatar
2 votes
1 answer
401 views

Cisco IOS XE DHCP Starlink - Static route issue

Today i connected the Starlink dish to an Cisco ISO-XE Box (ISR1111) as a secondary wan link and noticed some strange behavior. I installed a static host-Route to an VPN Tunnel endpoint via ip route x....
Andreas Schaefer's user avatar
2 votes
1 answer
191 views

Routing failed after define static route on core switch

Current connection path: 10.40.20.0/24 desktop <-> access switch <-> core switch <-> 10.30.15.33 NAT firewall for internet access Objective: adding additional path as following to ...
Thomas G. Lau's user avatar
2 votes
1 answer
476 views

Remote Access VPN traffic is not properly routing through to Site-To-Site VPN tunnel (Cisco ASA)

We have two ASA 5505s. One accepts remote connections from clients coming into our office, the other has a tunnel from our office into AWS. In the attached diagram, the red lines denote ping paths....
derjur's user avatar
  • 121
1 vote
1 answer
54 views

Cisco BGP RTBH in EVPN fabric

I have Cisco basic EVPN fabric configuration in DC with two spine and couple of leafs using OSFP+iBGP for underlay fabric. My border leaf connected to my ISP using Vrf CUST. I want to configure RTBH ...
Satish's user avatar
  • 4,379
1 vote
0 answers
36 views

L2 Circuit ober BGP Signaled MPLS

We are providing MPLS Network services to Customers via Ethernet Links. Our CPEs (mainly Cisco) are linked via VLAN Subinterfaces to the PEs (Juniper MX). Due to the increasing demand of Multiple ...
Andreas Schaefer's user avatar

1
2 3 4 5