Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

Filter by
Sorted by
Tagged with
48
votes
24answers
95k views

How can I see which switchports are not in use?

On a large Cisco Catalyst switch stack, almost all switchports are patched. I need to identify the ports, which are not in use, for connecting further devices. Following switchports, cabling, patch ...
37
votes
6answers
76k views

Difference between control plane, data plane and management plane?

I think I understand these concepts, but I'm a little rusty. Can someone give a concise, easy-to-understand explanation of these concepts? The planes are logical concepts, aren't they? Is this a Cisco ...
33
votes
1answer
73k views

Using SNMP to retrieve the ARP and mac-address tables from a switch

I would like to get ARP tables from a switch to a syslog-ng server that has been set up on Ubuntu Server 12.04 LTS. I have read about SNMP and I know the server will act as a manager and the switch as ...
32
votes
3answers
13k views

What is “oversubscription” in Networking?

I have a question about oversubscription in networking. I read a lot of documentation but I still don't understand what it means. I read the following on the Cisco website, oversubscription of the ...
28
votes
2answers
51k views

What is the meaning of the CRC counter on a cisco device?

If the CRC counter of an interface is high, normally it's a bad sign, but why? If the count is high, what does this mean technically? What can cause this counter to go up? On which layer in the OSI ...
26
votes
4answers
108k views

How can I capture traffic on Cisco IOS switches?

For investigating a problem in client to server communication, I need to capture packets for analysis. However it's not allowed to install a packet analyzer, such as Wireshark or tcpdump, on client or ...
24
votes
10answers
275k views

How to find the port a device is connected to, based on IP, on a Cisco Catalyst switch

On a Cisco Catalyst switch, I need to find what port an end device is connected to. I have the IP address/host name. How do I quickly find the port?
24
votes
5answers
27k views

Accidentally Removed Allowed VLANs from Cisco Switch Dot1Q Trunk

I am adding a new VLAN to an existing trunk port between two Cisco Catalyst switches (3750's). In the process of adding the new VLAN, it appears that I've removed the existing allowed VLANs on the ...
23
votes
8answers
55k views

How can I force VTP clients to update their VLAN database from the VTP server, on Cisco devices?

I was doing some cisco exercises on configuring a vtp server and client, something I can't figure out is : I setup a vtp server, added my VLAN's I then took another switch that was attached to this ...
22
votes
3answers
61k views

Protocols: EIGRP vs OSPF [closed]

EIGRP and OSPF are both IGP protocols, the former is a mostly Cisco protocol and the latter is a well established open standard. What are the benefits of one over the other? Put another way, when ...
22
votes
1answer
2k views

All WiFi clients losing connectivity at the same time

In order to provide WiFi coverage for a small office area, a Cisco autonomous single-band 1041 (AIR-AP1041N-E-K9) is used, running software version 12.4.25d-JA1. The access point is having a basic ...
21
votes
7answers
36k views

Difference between access list and prefix list?

Can someone explain with an example whats the difference between an access list and prefix list.
21
votes
3answers
4k views

CEF operations on L3 switch vs router

I understand that L3 switches use CEF for faster packet forwarding. However, CEF will not work for packets that need to undergo NAT. Does this mean CEF isn't used by edge routers and edge L3 switches? ...
21
votes
5answers
28k views

Cisco ASA site-to-site VPN failover

We recently replaced international MPLS with new ASA 5510s and site-to-site VPNs. However, when we deployed this we ran into a problem where each remote location has 2 ISPs for redundancy, but when ...
19
votes
5answers
18k views

Should portfast be used on a port potentially connecting to an unmanaged switch?

I understand the basics of how spanning tree works and why you would want to use portfast on user access ports. When dealing with a topology with a large number of dumb switches under desks and ...
19
votes
3answers
8k views

What factors drive a Cisco IOS upgrade?

In order of preference/priority, what factors do you consider in driving an upgrade (or downgrade) with Cisco IOS? If no compelling factors exist, how long would you allow a particular version of IOS ...
19
votes
7answers
12k views

Best practice for the combination of HSRP and ECMP

The combination of ECMP (or other causes of asymmetric paths) and HSRP is broken by default in Cisco IOS; the default behaviour with this design floods unicast traffic excessively. What is the best-...
19
votes
4answers
24k views

Cisco APs ignore DHCP Option 43 and use CAPWAP UDP broadcasts

Background I am trying to redeploy Cisco 1242 LWAPs on new Cat4507R+E switches, which means the IP address of the WLC is changing for that LWAP. For some reason, I have to configure ip helper-...
19
votes
1answer
3k views

Finding transparent firewall packet loss

We use the Cisco ASA 5585 in a layer2 transparent mode. The configuration is just two 10GE links between our business partner dmz and our inside network. A simple map looks like this. 10.4.2.9/30 ...
18
votes
3answers
27k views

How do you know if a Cisco switch is handling traffic well?

I have just read Jeremy's question about 2960-S and iSCSI traffic handling, which drove me to ask this question: We all have lots of switches deployed in distinct infrastructures, how can you know ...
18
votes
5answers
89k views

About the switchport mode

I am new to network Engineering. I find it is hard to distinguish and understand different switchport settings. Why can I have a switchport set to access, auto, or dynamic? What are they used for? ...
17
votes
4answers
69k views

Confusing A, B, C network classes

I'm studying IPv4 addresses and came across this whole thing about classful addressing. I get the idea behind it, bit there is something I find confusing: There are two "ABC" ranges: First one: A: ...
17
votes
8answers
17k views

When *not* to create a SVI for a L2 VLAN?

When creating VLANs for just L2 on a switch -- routing will be handled by a device within that VLAN such as a load-balancer -- it isn't necessary to create the vlan interface. As a matter of habit, I ...
17
votes
3answers
72k views

Is the “default VLAN” simply the default native (untagged) VLAN on all interfaces that have no configuration?

... or does the "default VLAN" have some wider meaning? Also, can it / should it be changed? For instance, if a switch is going into part of a network that is only one VLAN and it's not VLAN 1, is ...
17
votes
4answers
8k views

Are there any reasons to not use BFD?

In looking to implement Bidirectional Forwarding Detection (BFD) it seems to be very flexible in terms of timer tuning, light weight regarding any overhead and it's flexibility in terms of overall ...
17
votes
7answers
57k views

Cisco command to show which interfaces an ACL is applied to

For Cisco routers and switches, is there a show command, or something similar, that will display what physical and logical interfaces an ACL is implemented on and what direction it is applied in? I ...
16
votes
5answers
191k views

How can I reset a VPN tunnel on a Cisco ASA?

On a site-to-site VPN using a ASA 5520 and 5540, respectively, I noticed that from time to time traffic doesn't pass any more, sometimes just there's even missing traffic just for one specific traffic ...
16
votes
6answers
19k views

Automate configuration backup (every minute) in Cisco IOS

I'd like to make my Cisco router automatically do a copy run TFTP (and populate the fields automatically) every 1 minute. I'd also like it to be run in the background. Anyone know if this is possible/...
16
votes
4answers
52k views

Bad Mask for IP Address Error

I'm not too clear on subnetting rules and experienced an error when I tried to assign 148.26.1.176/28 to an interface on my Cisco router. Can someone please explain why it was not allowing me to ...
16
votes
5answers
75k views

What causes total output drops on a cisco switch interface?

I have an HP c7000 blade chassis which contains Cisco 3120X and Cisco 3120G switches running ios 12.2(58)SE1. The blades themselves are very lightly loaded yet many interfaces on different blade ...
16
votes
2answers
2k views

Router won't hold configuration

I have reset the password on a Cisco 1700 router, now when I copy run start or write mem then reload or reboot, it defaults to factory settings, i.e. it is not holding the configuration I have just ...
16
votes
5answers
23k views

Do I need to set the enable secret on Cisco device?

I'm setting up a Cisco 2901 router. I have a login password on the console line, and the vty lines are configured to only accept ssh connections with public key authentication. The auxiliary line is ...
16
votes
3answers
10k views

Backing up Cisco router configuration - including ssh keys

We have some Cisco 2821, 2921 and 1921 routers in our shop. I can back up and restore the configurations by copying out or in the startup-config file, but what about the keys for ssh? I don't want ...
16
votes
3answers
6k views

Writing text to the log

Is it possible to write an arbitrary line of text to the log of a Cisco IOS 12.x device? I should like to be able to put in markers when fetching configs via TFTP and I would like to be able to have ...
16
votes
2answers
4k views

Output Drops on Serial interface: Better queueing or Output queue size?

On Internet edge routers speaking eBGP to multiple carriers and iBGP to one another, all interfaces on the LAN and WAN side are GE except for one Serial full-DS3 (~45Mbps) on each router. Although I ...
16
votes
4answers
5k views

Why does this router fail to use multiple, equal-cost routes from OSPF?

A Brocade router running NetIron 5.2, and a Dynamips emulation running IOS 12.4 both fail to dependably use equal cost paths in what seems to be a very simple configuration. I say "dependably" because ...
16
votes
3answers
3k views

class-default matches control traffic?

I'm seeing an issue with BFD on a link that's being policed egress where it appears during times where the policer is maxed BFD packets are not getting to the other side. I'm wondering if BFD hellos ...
15
votes
8answers
9k views

How to connect 5 different networks together?

I have a network consisting of three servers in a data center, all of which are connected to each other via a switch. In addition to this I need this network to access 4 additional networks, most of ...
15
votes
5answers
21k views

How to factory reset IOS-XR?

I want to factory reset IOS-XR. The router used is ASR9000 I'm used to do that easily in IOS doing config-register 0x2102, write erase followed by a reload. I search on documentation, but found no ...
15
votes
3answers
6k views

Configure Cisco ASA in Transparent mode: Layer2 DMZ w/ Vlan translation

I am in the middle of a project to migrate some existing switched ethernet dot1q trunks behind an ASA firewall... these trunks have five vlans each (numbered 51 - 55). This is a simple drawing of the ...
15
votes
4answers
38k views

How are two “ip helper-address” statements handled?

I've discovered a subnet with two "ip helper-address" statements. This is not our normal configuration. interface Vlan300 ip address 10.1.3.2 255.255.255.0 ip helper-address 10.2.1.10 ip helper-...
15
votes
4answers
1k views

Is Nexus 7000 series line card “OIR” impact-free?

I have read many data sheets on the Nexus 7000 series and it's cards purporting to be capable of OIR (Online Insertion and Removal). However I have never needed to replace/reseat/add any Nexus line ...
15
votes
2answers
2k views

In what mode does the 2960-S IOS prompt ends with a colon “:”

QUESTION For a Cisco 2960-S switch, when connecting on the console port, normally the prompt is: SwitchName> then you issue an enable command and end-up with a prompt like: SwitchName# However,...
15
votes
2answers
10k views

BGP multipath with different ASNs feasible for production networks?

on Cisco (this command is hidden for some reason) #bgp bestpath as-path multipath-relax The default BGP behavior only installs only routes with exact the same AS_PATH into RIB. With multipath-relax, ...
15
votes
2answers
780 views

Wireless Probe Request Forwarding Best Practices?

I'm working with a couple Cisco WLCs and I know that they use information about client signal strength in determining device locations but I was reading up on "probe requests" and found that, by ...
14
votes
5answers
707 views

In a multi-tenant environment what should be done to make your switchports silent on Cisco and Juniper switches?

For example preventing it from sending arp, stp, etc and to reveal as little as possible about the rest of the network. Example use case would be connecting to a peering exchange.
14
votes
3answers
44k views

How to Monitor Vlan Traffic?

We have migrated to a new ISP who provide us several services (Internet+VoIP+VoD) and have divided each service in one vlan 100,101,102 respectively. Now I'm looking for a solution to monitor each ...
14
votes
4answers
4k views

Enabling MLS QoS on a production 7600

I am looking at a 7609-S with a RSP720-3CXL running 12.2(33)SRE3. I have been asked to help with rate limiting some servers attached to a couple of ports running as L2 ports (switchport mode access), ...
14
votes
4answers
5k views

What happens when 2 computers transmits at the same time to a 3rd one in a full duplex switch?

Consider the following scenario: I have 2 PC's (PC1 and PC2) that wants to transmit at the same time to PC3 in a full duplex ethernet switch. Let's consider that all ports are in the same VLAN, so ...
14
votes
4answers
12k views

How do you block bit torrent traffic with a Cisco ASA?

I have referenced an old external Cisco article on how to block Bit torrent traffic referenced on-line Here This procedure I have found only works 50% of the time. I find blocking bit torrent ...

1
2 3 4 5
69