Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

Filter by
Sorted by
Tagged with
9
votes
1answer
8k views

Is 'switchport protected' supposed to block unicast flooding?

Does having switchport protected configured on an interface prevent unicast flooding for a MAC address the switch hasn't learned? The information that I'm seeing conflicts -- the wikipedia page on ...
6
votes
1answer
3k views

Cisco wireless: APs with and without CleanAir

We have a Cisco 5508 wireless controller, Cisco Prime NCS, and the Cisco MSE. Our company needs three SSIDs, and each SSID must have a different Vlan. We have a mixture of Cisco 1242 and Cisco 3602i ...
4
votes
1answer
263 views

SSH to switch on OUTSIDE of old PIX Firewall

A branch office has a small 2950 in front of their PIX firewall (so failover can plug into it. The upstream router (owned by teleco company) only has one input port). I'm attempting to manage the ...
6
votes
2answers
1k views

Cisco AAA authorization with no user group

Can anyone help me with understanding one thing about AAA authorization on Cisco IOS. Here is a config fragment: aaa authorization config-commands aaa authorization exec default group tacacs+ local ...
7
votes
3answers
4k views

Problem with remote access, fixed L2L and dynamic L2L IPSEC working together on ASA 5540 8.2

I have an issue with a mixture of remote access, L2L and dynamic L2L tunnels on an ASA5540 running 8.2 Here is a snip of the relevant config:- crypto dynamic-map outside-crypto-dynamic-map 10 match ...
10
votes
1answer
6k views

Cisco IOS Forward / reverse name lookups

I want to configure our Ciscos so they can do forward DNS resolution, but not reverse DNS resolution from the CLI. R01(config)#ip domain-name domain.local R01(config)#ip name-server 10.1.1.1 R01(...
3
votes
2answers
5k views

Cisco 3560G MTU options

Is there any way to limit the MTU per L2 interface on this switch if you configure the system MTU for Jumbo frames? Next question assuming no, are there any Cisco stackable switches with this ...
8
votes
3answers
21k views

Wifi dropping randomly on Cisco AP-1602

I have a single Cisco AP-1602 broadcasting 3 SSIDs in a small office. Some of my team are complaining about random drops in network connectivity. (Over 3 days, I've had 3 different users complain ...
9
votes
3answers
3k views

Using latency to calculate OSPF metrics

Is it possible to configure OSPF to use latency in its link cost/metric calculations. The idea being to enable performance based routing whereby the fastest and least congested links in the network ...
11
votes
1answer
2k views

Cisco Catalyst 3750/3560 SYN FLOOD protection

How could one mitigate SYN FLOOD DOS on Catalyst 3750/3560 as it has no control plane protection?
8
votes
1answer
7k views

About the inside local and outside local and inside global and outside global

I have some concept problem with the NAT. Here is the Cisco definition for the local and Global and the NAT operation. Local address—A local address is any address that appears on the inside ...
6
votes
2answers
6k views

SFP / Fiber Link Issue - Can't connect a Fiber CPE

I've a CPE connected to a 4506 switch. The interface is Up but I don't see traffic CPE MAC address on MAC sddes-table I've already replaced the cable, SFP and port. Now I've the minimal config (...
9
votes
1answer
5k views

switchport block multicast vs storm-control multicast

I'm not sure what is the difference in behaviour between switchport block multicast and storm-control multicast and I don't think cisco elaborates the difference very well in their documentation, ...
5
votes
2answers
16k views

Site-to-site VPN between Cisco ASA and Juniper SRX

I'm trying to create route-based VPN connection between Cisco ASA and Juniper SRX, but I have a problem with ACL and Proxy IDs. Cisco ASA log states that [IKEv1]Group = A.A.A.A, IP = A.A.A.A, ...
9
votes
1answer
740 views

Why does a Cisco AP keep its static IP when erasing NVRAM?

When I erase the nvram on a Cisco AP (1252 and 1262), the static IP assigned to interface BVI1 is not erased. When I do a show startup-config it says there is no startup config. But it always boots ...
4
votes
3answers
973 views

Can't connect to console on down Cisco 861 Router

I'm networking beginner I have a remote site without any servers and a Cisco 861 that has and IPsec VPN tunnel back to the main office. I get an alert that it's offline via a ping test. Yesterday ...
6
votes
1answer
5k views

Chassis temperature and Fan status on Cisco 3548 switch

I need to remotely check the status of the fans and temperature of a switch that I currently do not have physical access to. I have done so in the past on a 2950 with the command: Show environment ...
7
votes
2answers
3k views

Tacacs VRF authentication

We just got a new Supervisor7 with os 3.4.1. I'm trying to configure authentication with tacacs, and I can't understand how to make it work. This configuration works on our other switches, but it ...
1
vote
3answers
4k views

Default Stateful nature of Cisco ASA not working. What should I look for? [closed]

Scenario: Host A (trusted side of firewall) needs to talk to a web server on port 443 (untrusted side) Trusted rule exists on the Cisco ASA - permit Host_A Web_SVR port 443 The trusted rule should ...
7
votes
1answer
362 views

Nexus 1000V HA with appliance and VM

Can you make an HA pair out of an actual Nexus 1110 appliance vsm and a 1000V VM based vsm in one pair? If so can anyone point to documentation that allows it?
8
votes
1answer
2k views

Private-vlan configuration - connectivity issue

I've an issue leading with Private Vlans. I've fiber modem and they can't reach the DHCP/TFTP to be provision. I suspect from the configuration of Private VLANs. Can you review them ? My doubts are ...
4
votes
1answer
205 views

Strange ping over frame-relay network

Buffing up on Frame-Relay for testing EIGRP nuances over FR for CCNP - topology and relevant show command output here: http://imgur.com/a/Ch6Sh#0 Relevant PVC is between DLCI 103/301 (R1/R4) Why ...
3
votes
1answer
3k views

CISCO Wireless roaming: best practices

We are deploying a Cisco wireless network with a Cisco WLC 2504 controller and 2602 AP's. Can you tell about your recommendation to deploy good L2 wireless roaming? What about such features as 802.11k ...
5
votes
3answers
6k views

REP (Resilient Ethernet Protocol - Cisco Proprietary) configuration

I've the challenge to configure REP on a ring with 2 4500-X and 2 4506 as you can see on topologie picture. I was able to configure a basic REP ring but don't know how to define the block port as on ...
10
votes
2answers
5k views

How to infer 2960S switch base ethernet MAC Address

Cisco switches seem to allocate unique MAC address for each interface they have, this includes ports and vlan interfaces. These unique MAC are derived from a "Base ethernet MAC Address", which can ...
6
votes
2answers
3k views

Traffic policing on 3750-x Lan base

I am trying to split the bandwidth between 2 parties using a C3750-X. It has the Lan base licence and is running on the 12.2 train. The following is my config on an otherwise blank switch: ip access-...
15
votes
2answers
2k views

In what mode does the 2960-S IOS prompt ends with a colon “:”

QUESTION For a Cisco 2960-S switch, when connecting on the console port, normally the prompt is: SwitchName> then you issue an enable command and end-up with a prompt like: SwitchName# However,...
10
votes
2answers
2k views

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port: #sh interfaces Te3/4 TenGigabitEthernet3/4 is up, line protocol is up (...
6
votes
2answers
4k views

SNMP and Syslog in configuration

Really stupid questions guys so I apologize. When sending Syslog messages to a server we use the command logging x.x.x.x. I get that part. SNMP is used to gather stats or change configurations on ...
3
votes
1answer
1k views

How do I set up PBR for torrent traffic with a Cisco 891?

I am setting up a Cisco 891-K9 with dual WAN. How do I setup policy based routing for all torrent traffic to be sent over the secondary WAN link? I recall seeing routers that detect traffic type. ...
8
votes
1answer
1k views

DHCP Snooping Confusion

I'm trying to work out how to enable dhcp snooping and dynamic arp inspection on our guest network and I'm a little confused.... Here's the situation: We have a hub and spoke topology, with a ...
5
votes
2answers
2k views

EIGRP topology table - unexpected behavior

Prepping for CCNP - In my topology the path R1 takes to a Loopback Ip is via R2 by default. My goal is to have a feasible successor route through R3. I've attached a diagram of topology. http://...
3
votes
5answers
22k views

Routing Serial cables instead of Ethernet

I am doing some CCNA training videos and using packet tracer and they showed using a serial cable to connect two routers. Why are serial cables used instead of Ethernet cables? Does it depend on the ...
5
votes
2answers
2k views

Summarized route not being shared in EIGRP

Working through a lab for CCNP prep. Task is simple - create 4 loopback addresses on R3 - all 172.16.X.0/24 addresses, and share the routes to neighboring routers so that they appear as /22's instead....
7
votes
4answers
501 views

How can I avoid having to change the vlan back and forth when imaging pc's

We are using PXE boot to image computers from Win XP to Windows 7. The powers that be have created an imaging vlan dedicated specifically for this purpose, presumably for load balancing? The problem ...
5
votes
1answer
486 views

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE QOS marking problem

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE, need to understand how much traffic from the client comes to external resources, and how much goes to internal network resources. Mark incoming traffic to ...
8
votes
1answer
2k views

Staging Many Lightweight Cisco AP's for Deployment

My organization is soon going to be deploying approximately 600 new Cisco 2602i access points in a CAPWAP deployment with several 5508 controllers. This is an infrastructure refresh; currently we ...
5
votes
2answers
8k views

Why does the ASA 5512-X not support traffic shaping?

The cisco documentation claims that the ASA 5512-X does not support traffic shaping because it is a multi processor device. Why is this? Is shaping just inherently active? It seems like the ...
6
votes
2answers
5k views

Impact of IOS BGP soft-reconfiguration-inbound and peering options

This scenario is a network with four routers in a square; each has a connection to a different transit provider with a full BGP table from each. R1----R2 | | | | R3----R4 How do full BGP ...
5
votes
1answer
12k views

Calculating Cisco router memory requirements for full BGP feeds

This scenario is a network with four routers in a square; each has a connection to a different transit provider with a full BGP table from each. R1----R2 | | | | R3----R4 How do I calculate ...
6
votes
1answer
383 views

Spanning tree question

I have the following setup: Distro Switch 1 <-> Distro Switch 2 || || Access Switch One cable is going from port 47 to Distro switch 1 and another ...
7
votes
2answers
18k views

Cisco ASA 8.4(3); NAT multiple ports on public IP to private IP

I have the following configuration on an ASA running 8.4 already; object network SERVER-01 host 192.168.0.1 ! object network SERVER-01 nat (Inside,Outside) static interface service tcp 3389 5001 I ...
10
votes
1answer
36k views

How can I reasonably verify my QoS configuration is working?

Context I've deployed a standard QoS config to a customer site running a Cisco 891 router with IOS 15.1(4)M4. The WAN link is a single ADSL2+ link (24/1Mbps) connected to FE8. I've previously tested ...
17
votes
7answers
57k views

Cisco command to show which interfaces an ACL is applied to

For Cisco routers and switches, is there a show command, or something similar, that will display what physical and logical interfaces an ACL is implemented on and what direction it is applied in? I ...
7
votes
2answers
4k views

How to configure OOB access via IP

Single Cisco IOS device in a remote DC, I have an OOB connection delivered into the rack (length of Cat5e into my rack from another onsite providers rack, who have diverse routes from my own, in and ...
7
votes
4answers
9k views

SCP lost connection

Occasionally I have an issue when I try to SCP a file to one of our Cisco devices. When the connection starts, it immediately drops and says "lost connection". I've had this happen when there wasn't ...
3
votes
1answer
1k views

ASA Transparent Mode Route Lookup

In what situations will an ASA perform route lookup? (transparent mode)
6
votes
2answers
1k views

Converting to extended STP system-id

We have some Cisco switches running PVST. I need to convert them to use extended system-id so I can use high numbered vlans. The Cisco stp docs say When you enable or disable the extended ...
8
votes
1answer
11k views

Cisco ASA - Delete or rename “names”

I had a bad experience with Cisco ASA when changing/renaming "nameif" interface attributes. I would like to know if renaming or simply deleting existing names used in ASA config will do any damage to ...
5
votes
1answer
1k views

Is it possible for a private VLAN to have two simultaneous SVI mappings?

In our environment, we run our computers inline with Cisco IP phones to our switch. The problem is that our phones are on a separate VLAN from our normal access traffic. I would like to know if it is ...

1
62 63
64
65 66
69