Questions tagged [cisco]
The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.
226
questions with no upvoted or accepted answers
8
votes
0
answers
656
views
CISCO ISE Identity Management Group assignment
The Scenario in Brief
Three types of devices can exist on our wireless networks:
AD joined, corporate owned (Windows PC/Laptop/Surface)
Non-AD Joined, corporate owned (iPad/Chromebook and their ...
- 81
7
votes
5
answers
3k
views
PAT and Static NAT not working together?
The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT.
Configs:
S_HQ
!
interface FastEthernet0/1
switchport ...
- 71
7
votes
0
answers
736
views
VirtualAccess Behavior with PPP
A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
- 71
6
votes
0
answers
652
views
Cisco nexus 9396 rebooted with reason xbar_client
Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
- 4,361
6
votes
0
answers
1k
views
HSRP IPv6 configuration
Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'.
interface FastEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address 2020:...
- 489
5
votes
0
answers
1k
views
Cisco nexus STP loopguard
I have cisco nexus switches in vPC and they are connected to HP c7000 blade center switches and all my c7000 blade server has Linux Bridge is running, i believe something went wrong somewhere in Linux ...
- 4,361
5
votes
0
answers
291
views
ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217
When I enabled debugging:
PIM#debug ip igmp snooping router
I get in logs:
Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217
Configuration for interfaces:
...
- 91
5
votes
0
answers
476
views
Dual-Hub DMVPN Outage
Our backup links have always utilized a GRE tunnel based VPN to a hub. Recently we installed a second hub and migrated the primary links to GRE tunnel based VPN with EIGRP to handle routing between ...
- 51
5
votes
0
answers
577
views
Cisco ASA 5505 Remote Access IPSec - Tunnel Rejected - The maximum tunnel count allowed has been reached
I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message:
%ASA-4-713239: IP_Address: Tunnel Rejected: ...
- 131
5
votes
0
answers
83
views
Customising Cisco Clientless VPN Password Change Screen ASA5525
I'm working with one of the network engineers to customise our login screens for the Cisco clientless VPN, which, apart form time consuming, has been fine (knowledge gap on both of our parts). As part ...
- 51
5
votes
0
answers
198
views
Shaping on ES20/7606-S
I've recently moved from point-to-point WAN to a point-to-multipoint WAN, unfortunately this has really messed up my brain...in regards to shaping. These circuits are aggregated into three physical ...
- 51
5
votes
0
answers
5k
views
Change IP address in Cisco Prime infrastructure
Is it possible to change the Cisco Prime Infrastructure platform's IP address after PI has been installed ?
This reference in the docs seems to indicate that you can.
ncs/admin(config)# interface ...
- 787
4
votes
1
answer
2k
views
VRF Leak global default route with a single router
I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
- 1,478
4
votes
0
answers
139
views
Why does RSTP send proposal bit and agreement bit as '1' initially?
From a recent Wireshark capture of a RSTP BPDU on a switch, both proposal and agreement bits were set to '1'.
In my understanding, initially both switches 'propose' themselves as root. The better root ...
- 63
4
votes
0
answers
725
views
TCAM utilization on Nexus 9396 switches
I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic.
I am reading about TCAM and wanted to ...
- 4,361
4
votes
0
answers
129
views
Can I do Q-in-Q vlans between Dell and Cisco switch
Our Head Office is connected to our DR location between an L2 tunnel provided by our ISP.
I need to establish a Q-in-Q setup between both sides to pass multiple VLANs through. Our head office has a ...
- 41
4
votes
0
answers
370
views
IPSec Tunnel not coming up: Issue with ACL?
I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
- 1,412
4
votes
0
answers
111
views
Cisco auto smartport - description removal
let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
- 41
4
votes
0
answers
1k
views
Dual ISP NAT Failover Not Working
I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
- 131
3
votes
1
answer
288
views
very strange broadcast in LAN with Cisco ASA
Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
- 4,361
3
votes
1
answer
296
views
Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6
I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
- 151
3
votes
0
answers
2k
views
Multiple IPSec Tunnels on Cisco router's interface
I an trying to configure 2 IPSEC VPSN Tunnels on the Cisco 1941 WAN Port. The tunnel with the higher crypto map sequence pre-empts the lower sequence number so only one tunnel is active at a time. I ...
- 31
3
votes
0
answers
2k
views
Two-factor authentication for Wi-Fi?
We have a new requirement to have two-factor authentication for a certain SSIDs in our enterprise. Currently we run PEAP-MSCHAPv2 to pass windows credentials to a RADIUS server (NPS running on a ...
- 3,310
3
votes
0
answers
1k
views
Cisco 871, NAT, port formwarding and VOIP configuration - phone speaker buzz
I'm new to all Cisco stuff and I need to configure nettalk VOIP. I have Cisco 871 device with two ISP - one via PPP (public IP 666.666.666.666) and one via eth (public IP 999.999.999.999).
Main ISP ...
- 31
3
votes
0
answers
507
views
Policy Based Routing (not matching packets) - Virtual Template
I have this configuration runnning :
Larger image
I tested the policy based routing int the lab using two linksys router acting as ppp clients of the Cisco 7206VXR and another linksys emulating the ...
- 501
3
votes
3
answers
418
views
Switchport fail (edited)
I hope can someone help me with my problem on my Cisco 2960 switch.
My question is this: when I configure the Gig0/1 port on my client 2960 switch as trunk, and connect it to my server 3560 switch ...
- 133
2
votes
0
answers
270
views
Cisco Access Switches: Monitoring AAA server dead via SNMP?
This is a new setup of Cisco access switches (2960S, 2960X IOS with 15.2(2)E9, but mostly C1000 with IOS 15.2(7)E*), with a Cisco ISE 3.0 as authentication server for 802.1X, config style is to be ...
- 8,674
2
votes
0
answers
270
views
Cisco ISR cannot ping from WAN but internet works
Cisco ISR 4331 works but ping/ssh/web outside/GRE doesn`t
I have changed an old router to Cisco ISR4331.
Have set up everything, nothing fancy, no VLANs/OSPF/redundancy, etc.
Just a gateway for an ...
- 21
2
votes
0
answers
203
views
Problem with BGP aggregate-address behavior in IOS when a large number of OSPF routes update all at once
We have a Direct Connect setup to AWS using BGP. We are running a ISR4451 with IOS XE 16.03.06.
I have a strange situation where the AWS BGP neighbor drops our connection with the notification: ...
- 123
2
votes
1
answer
316
views
Cisco IOS XE DHCP Starlink - Static route issue
Today i connected the Starlink dish to an Cisco ISO-XE Box (ISR1111) as a secondary wan link and noticed some strange behavior.
I installed a static host-Route to an VPN Tunnel endpoint via
ip route x....
- 497
2
votes
2
answers
277
views
Static NAT and PAT
I have two private IP addresses, want to make them NAT to 203.0.113.0/2 public IP address.
WAY 1 : Static NAT (2 ip addresses NATted to one by manually)
WAY 2 : PAT (Router gives port number ...
- 21
2
votes
0
answers
3k
views
Cisco AIR-AP1852i-E-K9 stuck in "waiting for uplink[...]" after startup
I pulled an old cisco AP from a shelf today at work to test something, and after starting up and connecting with PUTTy, i was greeted with (after startup), this - repeating over and over:
[*02/16/...
- 163
2
votes
1
answer
340
views
How can I configure a Cisco router 4300 to allow internal server ip:80 to be accessed on public ip:4500
I have an internal web server on port 80. I need help commands maybe to configure port forwarding to access the server on my private network from a public IP
Current running config
interface ...
2
votes
0
answers
407
views
Cisco Prime: Accurate Wi-Fi association history?
I'm running Prime 3.7 with a 2504 WLC (8.5.151.0) and am finding that the client association history under Monitor -> Clients and Users -> [select a client] does not show associations that last less ...
- 181
2
votes
0
answers
618
views
Cisco nexus spanning-tree logging to syslog
I am trying to send my spanning-tree events to remote syslog but somehow it doesn't work, This is what i have in my config.
N3K# sh run | grep logg
logging level spanning-tree 7
logging server 172.29....
- 4,361
2
votes
1
answer
192
views
Certain SSH shell script doesn't run well in Cisco APIC bash
The following ping script is running just fine in both script form and interactive shell
ping-only.sh
date
for i in 10.1.1.1 10.1.1.3 10.4.1.13
do echo -e "\nIP: $i"
ping -c 1 $i | grep ...
- 391
2
votes
0
answers
47
views
Cisco Wifi phones unregistration from CUCME
I have:
two Cisco Wifi access points AIR-AP1832I-E-K9 (AP1 and AP2)
and two Cisco wireless phones CP-8821 (P1 and P2).
Phone P1
P1 usually connects to AP1 and never connects to AP2 except if it is ...
- 399
2
votes
0
answers
240
views
Guidance on AdTran vs Cisco Configuration
I have just turned up two t1 lines hooked into two AdTran NetVanta 3430 routers. While the NetVanta boxes seem fine, what I really want to do is to configure some of my old Cisco boxes to handle the ...
- 21
2
votes
0
answers
2k
views
RSA key not working with trustpoint used for IPSec
I'am trying to setup an IPsec IKEv2 tunnel where the local authentication mechanism is based on RSA. Therefore I have setup a trustpoint and I got a signed certificate for this setup.
Importing is ...
- 61
2
votes
0
answers
215
views
Router as PPPOE concentrator, PPPOE clients unable to get to DMZed static NAT server
I've been trying to figure out this problem, and I'm just not up to the task.
I have a Cisco 2911 router as follows:
Internet connection on GigabitEthernet0/1.
Which has it's own static IP: A.B.C.38/...
- 121
2
votes
1
answer
7k
views
IPSec IKEv2 connection failure due to RSA authentication issue
I'm trying to get an IPSec/IKEv2 setup working, which was implement following this
I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
- 61
2
votes
0
answers
126
views
point- to – point local switching
I want to build an point- to – point local E-line carrier Ethernet services between IOS XRv routers using the link bundles.
Once the two local EFPs linked with a point-to-point cross connect, the ...
- 21
2
votes
1
answer
3k
views
Local Fallback Command Authorization on Cisco ASA when TACACS Server is Reachable
I have a cisco ASA I want to connect to a TACACS server for command level authorization (write and read-only access). This actually works quite good. Further, I have a local fallback user configured ...
- 1,049
2
votes
0
answers
1k
views
NVI based NAT on Cisco ISR terrible performance
I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
- 181
2
votes
0
answers
967
views
Problems connecting to clientless vpn portal on a Cisco ASA 5505
Just started a job where they wanted us to re-purpose a local network that wasn't in use and to create a webvpn portal to allow web access to it. We've tried everything and looked every where and ...
- 21
2
votes
0
answers
374
views
Cisco ISE 1.3 and 1.4 - Sponsored guest approval email - single click approval possible?
When self-registering guests generate a request to their Sponsor, how can one create a REST-based link that can approve new Guests with a single click from the email message?
Has anyone successfully ...
- 327
2
votes
0
answers
4k
views
How can I configure intervlan routing using SG300-10, SG300-28MP, SG200-50 and RV042
I need help configuring inter-VLAN routing. I am setting up 2 VLANs plus the admin VLAN 1 as follows:
RV042 is used as a firewall (i'll probably replace it with something else)
LAN ip addr 10.1.1.10
...
- 21
2
votes
0
answers
163
views
Determine if cisco phone is on POE or adapter remotely
I'm looking to find out if there is a way to know if a Cisco phone (7940,7960,7911's and the like) either through Cisco Callmanager or through the direct Web interface on the phone.
I'm looking for ...
- 221
2
votes
1
answer
147
views
Routing failed after define static route on core switch
Current connection path: 10.40.20.0/24 desktop <-> access switch <-> core switch <-> 10.30.15.33 NAT firewall for internet access
Objective: adding additional path as following to ...
- 526
2
votes
1
answer
469
views
Remote Access VPN traffic is not properly routing through to Site-To-Site VPN tunnel (Cisco ASA)
We have two ASA 5505s. One accepts remote connections from clients coming into our office, the other has a tunnel from our office into AWS.
In the attached diagram, the red lines denote ping paths....
- 121