Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

Filter by
Sorted by
Tagged with
6
votes
2answers
1k views

Converting to extended STP system-id

We have some Cisco switches running PVST. I need to convert them to use extended system-id so I can use high numbered vlans. The Cisco stp docs say When you enable or disable the extended ...
8
votes
1answer
11k views

Cisco ASA - Delete or rename “names”

I had a bad experience with Cisco ASA when changing/renaming "nameif" interface attributes. I would like to know if renaming or simply deleting existing names used in ASA config will do any damage to ...
5
votes
1answer
1k views

Is it possible for a private VLAN to have two simultaneous SVI mappings?

In our environment, we run our computers inline with Cisco IP phones to our switch. The problem is that our phones are on a separate VLAN from our normal access traffic. I would like to know if it is ...
19
votes
1answer
3k views

Finding transparent firewall packet loss

We use the Cisco ASA 5585 in a layer2 transparent mode. The configuration is just two 10GE links between our business partner dmz and our inside network. A simple map looks like this. 10.4.2.9/30 ...
5
votes
2answers
4k views

CISCO WLC: use LAG or not?

Could you advise from your own experience is it good practise to use LAG (Link Aggregation) on CISCO wireless lan controllers on not? Benefits (as for me): redundancy and a little bit simplification (...
5
votes
2answers
2k views

4500E / 4500X VSS pairing

Is it possible to combine a 4500E with a 4500X into a VSS pair or do they have to be the same model to pair up? If it requires same model, is it due to hardware or software? For example if it is ...
2
votes
1answer
3k views

Find negotiated speed on Cisco router

I am a bit lost. I'm trying to find the physical interface speed that is negotiated on a Gigabit interface on a Cisco 2900 and 3900 series ISR G2. On a switch, I am used to giving sh interfaces ...
6
votes
2answers
1k views

Backing up configs from a multi context firewall to Ciscoworks LMS Prime

We have Ciscoworks AKA Cisco Prime LMS version 4.2.2. We also have some multi context firewalls. Is LMS capable of going into the admin context of the firewall and backing up all of the configs from ...
4
votes
1answer
7k views

Trouble configuring AnyConnect to use a RSA token PIN only for authentication

I have a 5515X 9.1.2 configured with AnyConnect 3.1.04059. I have successfully configured it to accept RSA secureID tokens by means of using the PIN+TokenCode. Now I simply want to enable it so ...
10
votes
4answers
6k views

Is it possible to disable a single DHCP pool in IOS?

I am working on a Cisco L3 switch where most of SVIs are having ip helper-address configured for DHCP relay but also a couple of DHCP pools have been configured in the switch itself to serve dynamic ...
3
votes
1answer
86 views

3rd Party VPN Device Security

One vendor wanted to install their VPN device (Cisco 800) behind the firewall. They asked us to open ports so they can establish the tunnel. Another vendor wanted to install their VPN device (Cisco ...
9
votes
2answers
2k views

QoS woes - managed IP VPN

(First of all, I'm sorry for this wall of text. I don't know how to make it any shorter without losing important information. I originally wanted to use the chat room for this, like we do on ...
4
votes
1answer
9k views

Line protocol is down on Cisco Router / IOS 12.2

I have this error on a Cisco router running IOS version 12.2. This coincide with an error received on our alarming system saying that on this router we have an interface with "line protocol down". ...
4
votes
1answer
808 views

Will the Cisco 4500-X have OnePK/SDN Support?

At the Cisco 4500 Chassis model comparison page it says the Supervisor 7E is "Hardware Ready" for SDN. It was released in late 2011. URL for that page can be found here: http://www.cisco.com/en/US/...
2
votes
1answer
7k views

Cisco Prime NCS not starting

I have received the Cisco Prime OVA file and which we placed onto an Oracle virtual environment. We turn the VM on and the CLI boots, When we try to start the NCS service we get errors. HOSTNAME/USER#...
8
votes
2answers
4k views

ASA in multiple context: save config

I have an ASA running 9.0(1) with four security contexts. When we modify a context, our standard procedure is to do a "write mem" inside that context. But sometimes we have to modify all the ...
5
votes
1answer
8k views

QoS voice traffic on WAN of Cisco 1841

I have the following lab topology and I am using the below configuration on the 1841. What I want to achieve here is reserve 1000Kbps of bandwidth for traffic between the voice VLAN and the remote ...
7
votes
1answer
767 views

Is possible to configure a Cisco 881 by DHCP?

I'm wondering if is possible to configure a Cisco Router 881 from a file on a tftp instruct on a DHCP option. I know is possible to configure the wan port through DHCP by configuring "ip address dhcp" ...
6
votes
1answer
669 views

Intermapper SNMP trap probe

What I have got set up are my Cisco switches send SNMP traps to my intermapper server. I did that so I could see who is logging in or trying to log in. That part is working. What I need to do is ...
15
votes
2answers
10k views

BGP multipath with different ASNs feasible for production networks?

on Cisco (this command is hidden for some reason) #bgp bestpath as-path multipath-relax The default BGP behavior only installs only routes with exact the same AS_PATH into RIB. With multipath-relax, ...
12
votes
2answers
1k views

Syslog message for CDP interface down

I have been searching for this for a while and haven't found one yet. I need a Cisco IOS command to send a syslog message or snmp trap whenever an interface that has a CDP neighbor goes down. Some ...
6
votes
2answers
1k views

CISCO ASA: threat-detection vs. IPS module

There is threat-detection mechanism is CISCO ASA. We can configure different rate limits and actions. Also our ASA 5525-X has enabled integrated IPS module. We can setup protection rules on IPS. What ...
11
votes
1answer
9k views

How do you get rid of deleted sub-interfaces from NVRAM?

This is more of a cosmetic issue however it does bug me.... I removed the sub-interfaces off a 3845 router by issuing. no int fast1/0.10 no int fast1/0.15 default int fast1/0 When I do a show run......
8
votes
1answer
2k views

Catalyst 4500R+E, Sup7L-E Strange License Management

We have Catalyst 4500R+E with Sup7L-E (IOS XE 3.4SG). It was bundle with LAN Base License Installed. #show license summary Index 0 Feature: entservices Period left: 8 weeks 4 days ...
7
votes
2answers
12k views

ASA IPS issue: routing and management interface

We have management network (192.168.25.0/24) where we have management ip of ASA 5525-X IPS Bundle (.250) and IPS (.37). The IPS has a default gateway of our Layer 3 (.1) switch that is behind the ASA (...
10
votes
1answer
513 views

Does L-ASA-SC-10= require a reboot?

We have some existing ASA-5555X in multiple context mode, and we are using one context per-vlan as a transparent layer2 firewall. Over time, we have been adding to this solution, and we're about to ...
4
votes
3answers
6k views

How does one configure Cisco router for IPSec VPN for use with Windows 7 built in VPN client?

Actually, I would like to allow users to use either the 64-bit Cisco VPN client or the Windows 7 built in client. Is this possible? Additional information: The IOS host is the 881w-A-K9 ISR running ...
11
votes
3answers
1k views

Does Cisco 6500 VSS improve or hurt MTBF?

I understand the benefits of the Cisco 6500 VSS with the obvious selling points of single management, single routing instance, STP elimination, port-channels across chassis, etc. With two standalone ...
5
votes
3answers
4k views

Can you stack Cisco 3750 using ethernet cables?

I am just wondering if it's possible to stack Cisco 3750 switches using their ethernet interfaces? I don't have the proprietary stacking cables.
6
votes
3answers
2k views

3750 Temperatures for same rack

I have 2 switches in the same rack AC room etc. WS-C3750V2-48TS TEMPERATURE is OK Temperature Value: 41 Degree Celsius Temperature State: GREEN Yellow Threshold : 66 Degree Celsius Red Threshold : ...
6
votes
1answer
680 views

Passing Traffic through Traffic Management Device in transparent mode

We would like to pass traffic tagged (in the same vlan) from Router_1 to Router_2 throught a Traffic Management device (in transparent mode). Now, we are using two switches (running and aimed config ...
7
votes
3answers
14k views

Flow Control: to be or not to be?

We deploy two 3750-X switches in stack and connect Dell Storage to 10G-T ports. Dell recommends to use flow control on this ports, but some people have a lot of problems with this feature (packet loss,...
13
votes
3answers
5k views

Identifying a Cisco access point post-install

We have about 50 Cisco 1242 access-points and we're managing them with a Cisco 4404 Wireless Lan controller. The guy who installed the APs did not assign a location to the access points in the ...
22
votes
1answer
2k views

All WiFi clients losing connectivity at the same time

In order to provide WiFi coverage for a small office area, a Cisco autonomous single-band 1041 (AIR-AP1041N-E-K9) is used, running software version 12.4.25d-JA1. The access point is having a basic ...
12
votes
2answers
7k views

Tracing TCN Messages in STP

We have about 20 vlans on a L2 network running Rapid PVST+ where the root bridge is a stack of Cisco's 3750 switches. I am a bit puzzled by the number of TCN notifications I receive on the switch.. ...
4
votes
3answers
2k views

Layer 2 switch send VLAN frames over fiber connection to another Layer 2 switch?

We have 2 network rooms in our building and each are connected via a fiber link. One room is very tiny and is where our Comcast Internet comes into the building. I want to place our Cisco ISA570 into ...
8
votes
1answer
1k views

traffic engineering - policies for BGP vs static routes

Considering a transition of specific public Internet site via a new location. At the current location, I've got a static route configured in my Cisco router pointed to my internal firewall. The new ...
8
votes
1answer
1k views

Private VLANs on a switch that doesn't support Private VLAN trunks

I have a Catalyst switch that doesn't support PVLAN trunks (Sup4, 4500, 12.2(54)S). I have multiple other Catalyst switches, 3750 metro, that do. Am I correct in assuming that because the C4500 does ...
15
votes
3answers
6k views

Configure Cisco ASA in Transparent mode: Layer2 DMZ w/ Vlan translation

I am in the middle of a project to migrate some existing switched ethernet dot1q trunks behind an ASA firewall... these trunks have five vlans each (numbered 51 - 55). This is a simple drawing of the ...
7
votes
2answers
1k views

Multiple WANs/Out-of-band (Cisco 1900)

I've got a Cisco 1900 router which connects to the Internet using a primary and a secondary WAN connection. When the primary connection is up, all traffic use this link. When the primary connection ...
13
votes
2answers
28k views

Open a range of TCP ports in Cisco IOS NAT

ip nat inside source static 192.168.1.10 10.10.10.9 route-map RANGE ! route-map RANGE permit 100 match ip address 102 ! access-list 102 permit tcp host 192.168.1.10 range 3000 3389 any The ...
6
votes
1answer
20k views

What is the difference between “permit tcp any any eq telnet” and “permit tcp any eq telnet any”?

I'm a CCNA student and during a LAB I found that for some rules on an incoming extended ACL using a rule like permit tcp any any eq (protocol) would work fine while on other rules I needed to use the ...
8
votes
3answers
1k views

DHCP Relay by MAC Address of CPE

We are testing a new Provisioning Server in DOCSIS/CMTS environment and we need to setup a lab with 5 models of CPE. I'm wondering if we can configure on Cisco Routers the dhcp relay (ip helper) ...
19
votes
7answers
12k views

Best practice for the combination of HSRP and ECMP

The combination of ECMP (or other causes of asymmetric paths) and HSRP is broken by default in Cisco IOS; the default behaviour with this design floods unicast traffic excessively. What is the best-...
7
votes
2answers
3k views

Configuring redundancy using floating static

I wanted to post my network layout, but I dont have the required reputation. So I have made up a network diagram below: ISP / \ / \ / \ HQ------Branch | ...
9
votes
3answers
3k views

Trying to test a virtual lab VRRP configuration for STP issues

I'm in the middle of setting up a lab with a VRRP configuration, and I'm trying to search for any possible issues we might run into in production. One issue I am aware of with VRRP is that it seems ...
12
votes
1answer
20k views

WLC - How to disable 2.4Ghz

Is there any way I can disable the 2.4Ghz and just leave 5.0Ghz channel enabled on a per WLAN (SSID) basis? Or the only way is to disable the AP's radio and leave 5Ghz enabled?
9
votes
2answers
1k views

Can one configure several static EIGRP Neighbors on one interface?

Can one configure several static EIGRP Neighbors on one interface and are there any considerations apart from disabling split-horizon that one should consider?
8
votes
1answer
396 views

IOS changes the SNMPv3 engineId

I have encountered a very strange problem when configuring remote target engineId on a Catalyst 3750 switch. The switch changes the engineId, it puts a zero between the two last digits. As shown below ...
14
votes
3answers
44k views

How to Monitor Vlan Traffic?

We have migrated to a new ISP who provide us several services (Internet+VoIP+VoD) and have divided each service in one vlan 100,101,102 respectively. Now I'm looking for a solution to monitor each ...

1
63 64
65
66 67
69