Questions tagged [cisco]
The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.
3,759
questions
0
votes
1
answer
28
views
Web Access Certs No Secure Though It Is
I have a Cisco C9300 and I am securing the access to the web console to it with the HTTPS server. I created a trustpoint for our CA and imported the CA cert as well as created a certificate for this ...
- 82.6k
0
votes
0
answers
31
views
cisco business dashboard probe scanning outside of given range
we're deploying Cisco business dashboard with dedicated probe server in our LAN.
I've managed to make everything work, but one thing bothers me.
I configured the probe managed network to only discover ...
- 1
0
votes
1
answer
157
views
Can I update a Cisco RV320 v03 to v04?
I bought a Cisco RV320 dual-WAN Gigabit VPN router that keeps freezing after about 12 hours or so of use. On the System Summary page, it shows that it is a RV320-K9 v03, firmware version 1.3.2.02. I ...
- 82.6k
2
votes
1
answer
1k
views
How do I split static IPs from an ISP for separate usage?
I have a lot of IT experience/consulting, but want to test what I have done against some of the real experts hre in the networking field so I can keep learning and do what's best.
I have ISPs with 5 ...
CommunityBot
- 1
0
votes
1
answer
304
views
HSRP and DHCP problem
I have 2 layer 3 switches DS1 and DS2. There are the same VLANs but different IP addresses on VLAN interfaces.
On DS1:
VLAN 10: 192.168.10.1/24
VLAN 20: 192.168.20.1/24
On DS2:
VLAN 10: 192.168.10.2/...
- 27
2
votes
1
answer
213
views
Why No Ping When Use Static and RIP in This Network?
I am a learner. I learned somewhere that we could use static and dynamic routing in the network.
I built the simple network shown in the attached picture.
I configured router8 with static routes to ...
CommunityBot
- 1
0
votes
0
answers
92
views
MODBUS TCP server with CISCO C-9300
I am planning to use the MODBUS TCP Server with the C9300 switches. Yet, I found the following guide:
CIP and MODBUS Configuration Guide, Cisco Catalyst IE3x00 and IE3100 Rugged, IE3400 Heavy Duty, ...
- 5
0
votes
1
answer
42
views
Connect site-to-site private networks [closed]
I used VPN to connect site-to-site private networks from A to B. It worked fine. Then I used NAT for (1) hiding private networks and (2) LAN of 2 sites could access the Internet. The problem is that ...
- 8,826
2
votes
1
answer
7k
views
Packet Tracer: Ethernet interface up/down
I found that different interfaces have different behaviour on different device (router, switch) when no cable is attached on Packet Tracer 6.0.1.0011.
Router's serial : down down
Router's ethernet: ...
- 1
0
votes
1
answer
298
views
What Is The Difference Between OSPF Neighbors And Directly Connected Routers?
I have read somewhere that:
OSPF router’s neighbors are usually the routers directly connected to
it through its interfaces, from a layer-3 perspective. However, there
are some exceptions, such as ...
- 2,040
0
votes
1
answer
242
views
Best Practices for Configuring Port Security on a Layer 2 Switch
How to configure port security on trunk and interfaces
I'm learning about port security and have a few questions. I have a layer 2 switch with interfaces f0/1-22 in access mode to access VLANs, ...
1
vote
1
answer
79
views
Understanding the Role of Member Device in Cisco 3850 VSS Stack
Clarifying the Role of Member Device in VSS Domain Configuration
I am trying to understand the role of a device in a VSS domain as a "member."
What does it mean for a device to be a member?
...
0
votes
0
answers
30
views
How to allow cisco to log on to a specific ip port using nat
Good afternoon, I use Cisco 7201
I create a network on the gi0/0 interface connecting to a dhcp provider and get a static ip address, also on the gi0/1 interface I create a network where my 5 servers ...
0
votes
0
answers
79
views
Configure DHCP snooping with no option 82 on a pure layer 2 Juniper ex2300 using ELS
I have a Juniper ex2300 switch in a mostly-cisco environment (no MIST). On my cisco devices, I have DHCP snooping configured per vlan, with option 82 disabled on the access-layer switches because they ...
5
votes
1
answer
2k
views
Routing loopback using OSPF
Here is a simple network using OSPF. Router2 has got LoopBack0 with IP address 10.0.2.1 255.255.255.0. I add this network to OSPF:
Router(config-router)#net 10.0.2.0 0.0.0.255 area 0
When I dispaly ...
- 1
2
votes
2
answers
990
views
Cisco ASA context OSPF configuration issue
I've two cisco ASA configured in active/active HA. ASA is connected to switch with port-channel.
Switch configuration:
interface Port-channel47
description ASA2
switchport mode trunk
switchport ...
CommunityBot
- 1
1
vote
1
answer
101
views
VPN doesn't work
I'm trying to configure VPN between 2 routers:
R1: public IP is 200.0.0.6/30 on S0/0/1, private IP are 10.0.0.0/8 and 20.0.0.0/8
R3: public IP is 210.10.0.6/30 on S0/0/0, private IP is 192.168.3.0/24
...
- 27
0
votes
2
answers
80
views
Hide private IP address
DS has 7 VLANs and 7 DHCP pools respectively. There are 3 trunk links to 3 access layer switchs to share VLANs. Its VLAN interfaces and DHCP pools:
ip dhcp pool vlan10
network 192.168.10.0 255.255....
- 27
4
votes
2
answers
6k
views
NAT and ACL order - Cisco ASA, Palo Alto, Checkpoint
I've recently begun working with firewalls (Different brands) and what really confuses me is the order the different firewalls check the ACL and NAT rules.
For instance, allow HTTP traffic from the ...
- 1
0
votes
1
answer
30
views
what is the relation between DTP and VTP?
the ideas behind VTP & DTP are different, then why do we need to make sure that the VTP domain on both sides is the same otherwise the DTP will not work?
- 2,040
0
votes
1
answer
32
views
ACLs block connection
Here is my configuration on ISP router:
interface GigabitEthernet0/0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0/0.10
encapsulation dot1Q 10
ip address 192.168.10.1 255....
- 2,040
4
votes
1
answer
590
views
Cisco 2960L and ISR 4331 throttled WAN speeds
I have tried finding a solution to this issue and the closest I have found thus far can be found here. https://www.reddit.com/r/networking/comments/8f2sn0/throughput_limited_by_cisco_2960_switch/
My ...
1
vote
0
answers
100
views
Can't Pass 1 VLAN Through Trunk
I have 2 Cisco switches running IOS with VLANS 20,30,40,50. On SWITCH1 I have servers on Ports 1,2&3 on VLAN 30. I also have a laptop on port 5 on the same VLAN 30 and can ping the servers. They ...
- 461
3
votes
1
answer
6k
views
Packets failed to send to destination in static routing for parallel router topology in Cisco packet tracer
0
down vote
favorite
Ok, I was trying to connect routers in a parallel topology , as shown in the figure
I've configured the IP addresses for the fast Ethernet and serial interfaces.
Here are the ...
- 1
3
votes
1
answer
66
views
Spanning-Tree vlan priority on a pass through switch
I am still understanding a bit about this priority for spanning-tree on VLANs. I have a SWITCH A that is the root of a VLAN. It trunks through SWITCH B with no ports on that vlan. SWITCH B trunks to ...
- 82.6k
0
votes
0
answers
45
views
DNAC command accounting
We are trying to integrate DNAC with ISE purely for Tacacs. We are able to authenticate and authorize users fine via Tacacs but we are not getting any tacacs command accounting sent to ISE.
Intention ...
- 1
1
vote
2
answers
139
views
What issues can rise from web gui config changes then making other changes from the CLI?
I'm using a 9200L Cisco switch
If I make changes in the CLI, then I make changes in the Web interface and vice versa.
Will there be issues down the road with the config file getting corrupt or ...
- 31.7k
0
votes
1
answer
28
views
Do wiremap testers detect split pairs
I was watching a How-to video on Youtube on wiremap testers and the technician said that wiremap testers detect split pairs among other wiring faults. However, I came across a Networking question ...
- 82.6k
1
vote
0
answers
77
views
HSRP does not work on two switches. Cisco
The problem is this: clients receive IP addresses from the L31 DHCP server, but they cannot ping the gateway, although HSRP seems to be working, there are no problems, I suspect that this is a bug in ...
- 11
1
vote
0
answers
88
views
Cisco device chooses link with higher cost as the root
The problem is that psw11 (SG350-28P) is choosing the path to sw10 (C2960L-48TS-LL) with a cost of 20000 as the root instead of the path to sw56 (C2960L-48TS-LL) with a cost of 10000, even though the ...
- 11
1
vote
1
answer
61
views
Deleting description on Cisco 9300 switch
I have a port that has a description that is not needed. How do I go about just deleting that line. Sorry for the simple questions, I am very new to the networking world.
interface GigabitEthernet3/0/...
- 98.7k
0
votes
1
answer
82
views
Cisco ca-trustpoint Not Adding SAN For CSRs
When doing the following to make the CSR for a certificate I add the IP Address line. But when I look at the certificate it doesn't look like the IP address is added to the SAN. In fact the ...
- 8,826
3
votes
5
answers
12k
views
Propagate VLAN through VPN (IPsec)?
I have a question about connecting two LANs (logically same LAN) over a VPN.
In picture below you can see overall representation of our implementation.
Description:
On each side, we have distinct ...
0
votes
0
answers
19
views
I am getting Confused with host bits and Subnet bits [duplicate]
So i am playing with Cisco CML. I made up a random address 3.0.0.0/8.
I wanted to split up that subnet into 4 subnets, So 2^2 = 4. I kinda got confused along the way. In my train of though if we use ...
- 33
4
votes
1
answer
2k
views
ISR4000 ignoring boot system comand
i have an issue with an ISR4331 Box. My aim is to install IOS 16.09.04 on the box currently running at 155-3.S4b.
#sh run | sec boot
boot-start-marker
boot system flash bootflash:/isr4300-universalk9....
0
votes
0
answers
12
views
First usable addresses [duplicate]
Network id: 173.128.0.0/18
We have two different networks
Network A has 3319 usable hosts and Network B 126
I calculated their subnet masks, but now I am not sure how to calculate their first and last ...
- 1
0
votes
1
answer
61
views
Single-Mode Fiber Optics
I am learning for CCNA. The textbook says that a switch port costs more for single-mode optic fiber than for multi-mode fiber.
I guessed this is because the light source in the interface component ...
- 82.6k
0
votes
1
answer
142
views
How should edge switches have their routing configured (when there is a mgmt vlan in the mix)
I'm having trouble with a new network topology we are trying to implement onto our environment. The issue seems to be with the switches. The problem is not relevant to this question but for ...
- 82.6k
0
votes
2
answers
118
views
BGP outbound traffic engineering in multi-homed network with 2 ISP's
I have network with switches at access layer and 3 host networks, 2 core routers , 2 border routers , that have iBGP connection with each other and ospf with other 2 core routers, also each of them ...
4
votes
2
answers
365
views
Which device gets the helper-address?
Brand new to networking and trying different scenarios.
PC2 can successfully send packets to PC1 and the DHCP server if a static address is assigned. However, PC2 will not obtain a DHCP address from ...
- 82.6k
2
votes
2
answers
226
views
How to ensure startup-config is not changed, building CCIE rack
Let me start with short background for better understanding.
We have LAB at work (Cisco devices mostly), and we would like to allow other employers connect remotely from their homes, build own labs ...
0
votes
1
answer
83
views
No Ping Through Cisco Trunks
I am trying to ping on my management VLAN across a trunk between 2 Cisco switches. Both switches have the following configs
interface TenGigabitEthernt1/1/1
switchport trunk native vlan 5
switchport ...
- 461
0
votes
2
answers
227
views
Switch Renumbering
We have a switch stack with six Cisco 3850 switches in it and for some reason the physical order of the switches in the cabinet and the switch number are not in sync. This is causing confusion; when ...
- 19.5k
3
votes
2
answers
252
views
NETCONF namespaces
I am trying to extract information via NETCONF from an IOS-XE device.
I am using two separate methods to achieve this and cannot replicate the success of one method while using the other:
Successful ...
CommunityBot
- 1
1
vote
1
answer
35
views
Is there an IGMPv1 querier router after all?
I recently looked into the mechanics of IGMPv1 and v2. Reading RFC 1112, I understand that in IGMPv1, the Querier Router functionality does not exist. All IGMP configured routers in a local network ...
- 183
0
votes
1
answer
411
views
Bash script to gather serial numbers from list of cisco switches
I have pieced together a script to login to each switch listed in the file switch.txt, grab the serial number and place it with the IP address into the CSV serials.csv. The problem I am having is that ...
- 31.7k
0
votes
3
answers
2k
views
transfer vlan from one cisco switch to an other through a central cisco switch
I can't figure out how to pass one vlan from one switch to an other:
Let's say, I have 2 valns:
Vlan 1 and Vlan 2
3 cisco switches:
Cisco Catalyst 3560g (central switch)
Cisco SG-300 (with native ...
0
votes
2
answers
71
views
how can I find out deployment date?
How can I find out what date the switch is` deployed first time or any closer date or anything that I can estimate? Consider the switch is huwaei/dell/cisco/aruba.
Thanks
- 82.6k
2
votes
1
answer
1k
views
How to find out the IP of MAC Address?
Below is the "terminal monitor" output
%PM-4-ERR_DISABLE: security-violation error detected on Gi1/0/35, putting Gi1/0/35 in err-disable state
%AUTHMGR-5-SECURITY_VIOLATION: Security ...
- 82.6k
1
vote
3
answers
225
views
Cisco radius auto vlan assignment without ISE
I read in a lot of tutorials that i must have the ISE engine to implement auto vlan assignment using the
authentication event fail retry 3 action authorize vlan 2
command on a cisco switch? Is that ...
- 2,040