Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

224 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7 votes
2 answers
444 views

Where is the traffic going?

Here is a routing puzzle: I'm working on a poorly documented network, and I'm trying to document things as I discover them. R1 is a core L3 switch. R2 is a router. The FW is a, well, firewall. On ...
user avatar
  • 62.5k
7 votes
0 answers
556 views

CISCO ISE Identity Management Group assignment

The Scenario in Brief Three types of devices can exist on our wireless networks: AD joined, corporate owned (Windows PC/Laptop/Surface) Non-AD Joined, corporate owned (iPad/Chromebook and their ...
user avatar
  • 71
6 votes
5 answers
3k views

PAT and Static NAT not working together?

The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT. Configs: S_HQ ! interface FastEthernet0/1 switchport ...
user avatar
  • 61
6 votes
0 answers
692 views

VirtualAccess Behavior with PPP

A small ISP I provide service for has recently been consolidating their equipment. One of their small branches only has a handful (5 or so) of users receiving their internet through a router, a Cisco ...
user avatar
5 votes
0 answers
422 views

Cisco nexus 9396 rebooted with reason xbar_client

Today my one of cisco nexus 9396PX switch got rebooted and this is what i found, based on following logs what could be wrong? We don't have Cisco support for this switch, trying to see if i can get ...
user avatar
  • 4,237
5 votes
2 answers
1k views

Enable SNMP traps for ACLs using Cisco IOS?

Does anyone know if it's possible to enable SNMP traps to be sent from a Cisco IOS device when an ACL blocks traffic? I'd like to send a trap whenever a deny statement gets a hit. I've only been ...
user avatar
  • 51
4 votes
0 answers
2k views

Cisco ASA IPsec tunnel QM FSM error

I am setting up Cisco 5585 ASA for IPsec tunnel with one of cloud company. we already have lots of tunnel for various cloud provider and life if good but recently this tunnel giving me hard time to ...
user avatar
  • 4,237
4 votes
0 answers
886 views

Cisco nexus STP loopguard

I have cisco nexus switches in vPC and they are connected to HP c7000 blade center switches and all my c7000 blade server has Linux Bridge is running, i believe something went wrong somewhere in Linux ...
user avatar
  • 4,237
4 votes
0 answers
881 views

HSRP IPv6 configuration

Looking at the Cisco documentation for HSRP IPv6 configuration I noticed the use of 'standby 1 ipv6 autoconfig'. interface FastEthernet0/0 no ip address duplex auto speed auto ipv6 address 2020:...
user avatar
  • 469
4 votes
0 answers
242 views

ASR920 - port Te0/0/3-tefp1 is not a router port on Vlan 217

When I enabled debugging: PIM#debug ip igmp snooping router I get in logs: Mar 30 15:58:36.275: IGMPSN: router: port Te0/0/3-tefp1 is not a router port on Vlan 217 Configuration for interfaces: ...
user avatar
  • 71
4 votes
0 answers
458 views

Dual-Hub DMVPN Outage

Our backup links have always utilized a GRE tunnel based VPN to a hub. Recently we installed a second hub and migrated the primary links to GRE tunnel based VPN with EIGRP to handle routing between ...
user avatar
4 votes
0 answers
540 views

Cisco ASA 5505 Remote Access IPSec - Tunnel Rejected - The maximum tunnel count allowed has been reached

I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message: %ASA-4-713239: IP_Address: Tunnel Rejected: ...
user avatar
  • 121
4 votes
0 answers
80 views

Customising Cisco Clientless VPN Password Change Screen ASA5525

I'm working with one of the network engineers to customise our login screens for the Cisco clientless VPN, which, apart form time consuming, has been fine (knowledge gap on both of our parts). As part ...
user avatar
4 votes
0 answers
191 views

Shaping on ES20/7606-S

I've recently moved from point-to-point WAN to a point-to-multipoint WAN, unfortunately this has really messed up my brain...in regards to shaping. These circuits are aggregated into three physical ...
user avatar
4 votes
0 answers
5k views

Change IP address in Cisco Prime infrastructure

Is it possible to change the Cisco Prime Infrastructure platform's IP address after PI has been installed ? This reference in the docs seems to indicate that you can. ncs/admin(config)# interface ...
user avatar
  • 767
3 votes
1 answer
374 views

VRF Leak global default route with a single router

I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
user avatar
  • 1,458
3 votes
0 answers
66 views

Why does RSTP send proposal bit and agreement bit as '1' initially?

From a recent Wireshark capture of a RSTP BPDU on a switch, both proposal and agreement bits were set to '1'. In my understanding, initially both switches 'propose' themselves as root. The better root ...
user avatar
3 votes
0 answers
480 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
user avatar
  • 4,237
3 votes
0 answers
121 views

Can I do Q-in-Q vlans between Dell and Cisco switch

Our Head Office is connected to our DR location between an L2 tunnel provided by our ISP. I need to establish a Q-in-Q setup between both sides to pass multiple VLANs through. Our head office has a ...
user avatar
3 votes
0 answers
223 views

IPSec Tunnel not coming up: Issue with ACL?

I'm trying to bring up a IPsec tunnel between router and a bridge. I can see the Ipsec tunnel configurations are up and running but I think I have made a mistake in the ACL and hence the encr and decr ...
user avatar
  • 1,362
3 votes
0 answers
104 views

Cisco auto smartport - description removal

let me preface by saying I have zero experience with macros and auto smartports. But, all I'm looking to do is when a port goes down, the interface description gets removed, is that possible and if so,...
user avatar
  • 31
3 votes
0 answers
1k views

Dual ISP NAT Failover Not Working

I have a Cisco 1841 router with an HWIC-4ESW switchport module attached to it. Fa0/0 is connected to ISP1 and Fa0/1 to ISP2 and both are "ip nat outside", the switchports are in interface Vlan 1, ...
user avatar
  • 121
3 votes
0 answers
2k views

Multiple IPSec Tunnels on Cisco router's interface

I an trying to configure 2 IPSEC VPSN Tunnels on the Cisco 1941 WAN Port. The tunnel with the higher crypto map sequence pre-empts the lower sequence number so only one tunnel is active at a time. I ...
user avatar
  • 31
3 votes
0 answers
2k views

Two-factor authentication for Wi-Fi?

We have a new requirement to have two-factor authentication for a certain SSIDs in our enterprise. Currently we run PEAP-MSCHAPv2 to pass windows credentials to a RADIUS server (NPS running on a ...
user avatar
  • 3,300
3 votes
0 answers
1k views

Cisco 871, NAT, port formwarding and VOIP configuration - phone speaker buzz

I'm new to all Cisco stuff and I need to configure nettalk VOIP. I have Cisco 871 device with two ISP - one via PPP (public IP 666.666.666.666) and one via eth (public IP 999.999.999.999). Main ISP ...
user avatar
3 votes
0 answers
476 views

Policy Based Routing (not matching packets) - Virtual Template

I have this configuration runnning : Larger image I tested the policy based routing int the lab using two linksys router acting as ppp clients of the Cisco 7206VXR and another linksys emulating the ...
user avatar
  • 501
3 votes
3 answers
390 views

Switchport fail (edited)

I hope can someone help me with my problem on my Cisco 2960 switch. My question is this: when I configure the Gig0/1 port on my client 2960 switch as trunk, and connect it to my server 3560 switch ...
user avatar
2 votes
0 answers
59 views

Cisco Access Switches: Monitoring AAA server dead via SNMP?

This is a new setup of Cisco access switches (2960S, 2960X IOS with 15.2(2)E9, but mostly C1000 with IOS 15.2(7)E*), with a Cisco ISE 3.0 as authentication server for 802.1X, config style is to be ...
user avatar
2 votes
0 answers
88 views

Cisco ISR cannot ping from WAN but internet works

Cisco ISR 4331 works but ping/ssh/web outside/GRE doesn`t I have changed an old router to Cisco ISR4331. Have set up everything, nothing fancy, no VLANs/OSPF/redundancy, etc. Just a gateway for an ...
user avatar
2 votes
0 answers
56 views

Cisco ASR9K Bridge Domain Loop

If multiples interfaces on a Cisco ASR 9K bridge domain are going to the same broadcast domain, can a loop occur ? Something like this : bridge-domain VLANX interface TenGigE0/0/0/0.X --> To ...
user avatar
  • 445
2 votes
0 answers
27 views

Cisco C9300 Drop Out And VLAN Table Loss

I have a Cisco C9300 is one of my main racks. Recently it has been restarting on it's own. My suspicion that the PSU is on the way out. Strange part is when it does this the VLAN table resets to ...
user avatar
  • 389
2 votes
0 answers
47 views

Problem with bgp aggregate-address behavior in iOS when a large number of OSPF routes update all at once

We have a direct connect setup to AWS using BGP. We are running a ISR4451 with IOS XE 16.03.06. I have a strange situation where the AWS BGP neighbor drops our connection with the notification: ...
user avatar
2 votes
1 answer
829 views

How do I split static IPs from an ISP for separate usage?

I have a lot of IT experience/consulting, but want to test what I have done against some of the real experts hre in the networking field so I can keep learning and do what's best. I have ISPs with 5 ...
user avatar
2 votes
0 answers
2k views

Cisco AIR-AP1852i-E-K9 stuck in "waiting for uplink[...]" after startup

I pulled an old cisco AP from a shelf today at work to test something, and after starting up and connecting with PUTTy, i was greeted with (after startup), this - repeating over and over: [*02/16/...
user avatar
2 votes
0 answers
263 views

Cisco Prime: Accurate Wi-Fi association history?

I'm running Prime 3.7 with a 2504 WLC (8.5.151.0) and am finding that the client association history under Monitor -> Clients and Users -> [select a client] does not show associations that last less ...
user avatar
  • 181
2 votes
0 answers
186 views

very strange broadcast in LAN with Cisco ASA

Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
user avatar
  • 4,237
2 votes
0 answers
451 views

Cisco nexus spanning-tree logging to syslog

I am trying to send my spanning-tree events to remote syslog but somehow it doesn't work, This is what i have in my config. N3K# sh run | grep logg logging level spanning-tree 7 logging server 172.29....
user avatar
  • 4,237
2 votes
0 answers
109 views

Certain SSH shell script doesn't run well in Cisco APIC bash

The following ping script is running just fine in both script form and interactive shell ping-only.sh date for i in 10.1.1.1 10.1.1.3 10.4.1.13 do echo -e "\nIP: $i" ping -c 1 $i | grep ...
user avatar
2 votes
0 answers
237 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
user avatar
  • 141
2 votes
0 answers
46 views

Cisco Wifi phones unregistration from CUCME

I have: two Cisco Wifi access points AIR-AP1832I-E-K9 (AP1 and AP2) and two Cisco wireless phones CP-8821 (P1 and P2). Phone P1 P1 usually connects to AP1 and never connects to AP2 except if it is ...
user avatar
2 votes
2 answers
573 views

Cisco 2960 not receiving dhcp from the router

I have a problem with Dhcp of some the Vlans. here is how my network is : I have a router ASR1001, which connects 15 switches(2960) as a ring topology. each switch has a subinterface of the router ...
user avatar
  • 121
2 votes
0 answers
218 views

Guidance on AdTran vs Cisco Configuration

I have just turned up two t1 lines hooked into two AdTran NetVanta 3430 routers. While the NetVanta boxes seem fine, what I really want to do is to configure some of my old Cisco boxes to handle the ...
user avatar
2 votes
0 answers
1k views

RSA key not working with trustpoint used for IPSec

I'am trying to setup an IPsec IKEv2 tunnel where the local authentication mechanism is based on RSA. Therefore I have setup a trustpoint and I got a signed certificate for this setup. Importing is ...
user avatar
  • 61
2 votes
0 answers
188 views

Router as PPPOE concentrator, PPPOE clients unable to get to DMZed static NAT server

I've been trying to figure out this problem, and I'm just not up to the task. I have a Cisco 2911 router as follows: Internet connection on GigabitEthernet0/1. Which has it's own static IP: A.B.C.38/...
user avatar
  • 121
2 votes
1 answer
6k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
user avatar
  • 61
2 votes
0 answers
118 views

point- to – point local switching

I want to build an point- to – point local E-line carrier Ethernet services between IOS XRv routers using the link bundles. Once the two local EFPs linked with a point-to-point cross connect, the ...
user avatar
  • 21
2 votes
0 answers
3k views

Local Fallback Command Authorization on Cisco ASA when TACACS Server is Reachable

I have a cisco ASA I want to connect to a TACACS server for command level authorization (write and read-only access). This actually works quite good. Further, I have a local fallback user configured ...
user avatar
  • 1,039
2 votes
0 answers
1k views

NVI based NAT on Cisco ISR terrible performance

I am trying to experiment with a Cisco ISR 1841 and have configured NAT on the device. The intention is to simulate it being a broadband router. I understand that this is not the best performing ...
user avatar
  • 181
2 votes
0 answers
914 views

Problems connecting to clientless vpn portal on a Cisco ASA 5505

Just started a job where they wanted us to re-purpose a local network that wasn't in use and to create a webvpn portal to allow web access to it. We've tried everything and looked every where and ...
user avatar
  • 21
2 votes
0 answers
359 views

Cisco ISE 1.3 and 1.4 - Sponsored guest approval email - single click approval possible?

When self-registering guests generate a request to their Sponsor, how can one create a REST-based link that can approve new Guests with a single click from the email message? Has anyone successfully ...
user avatar

1
2 3 4 5