Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

Filter by
Sorted by
Tagged with
1
vote
1answer
723 views

Communication Manager Business Edition 6000 - understanding bundle equipment

I have a Cisco Communication Manager Business Edition 6000 specifications. Can you explain some facts about it. Link to specification According to this, we have BE6K-ST-BDL-K9 (#1) and it contans: 1....
1
vote
3answers
26k views

Why doesn't my port-channel interface come up, between Cisco Catalyst switches?

To connect two Catalyst switch stacks, I use EtherChannel, i.e. I aggregate several ports on each switch to get more bandwidth and higher availability than with just a single port. However, the link ...
6
votes
1answer
2k views

Can FlexConnect ACLs be combined with Local mode ACLs on the same Cisco WLC WLAN?

There's a limitation (stated below in Cisco's documentation) that FlexConnect ACLs in Cisco WLC cannot be combined in the same WLAN with local mode ACLs. The GUI allows the entry of a local mode ACL ...
10
votes
5answers
3k views

How can I speed up CLI typing in Cisco IOS using shortcuts?

I know we can use auto-completion (tab key) and abbreviated commands (such as sh ip int bri) to speed up typing. However, I'm still not satisfied with typing crypting chains such as sh ip dh sn bi | ...
6
votes
1answer
3k views

Cisco 867 forward UDP port range

I need to forward an UDP port range to a specific private IP address in my LAN. In order to forward one port to an internal IP I do: access-list <acc_list_number> permit <port_type> any ...
19
votes
5answers
18k views

Should portfast be used on a port potentially connecting to an unmanaged switch?

I understand the basics of how spanning tree works and why you would want to use portfast on user access ports. When dealing with a topology with a large number of dumb switches under desks and ...
5
votes
3answers
395 views

Cisco Nexus 5000 grounding

I have heard that all 10G switches must be grounded. We have two Cisco Nexus 5000 running for years without any grounding, but I am worried about possible outages caused by ESD. Nexus 5000 has system ...
7
votes
2answers
4k views

Is a DSP required with a SIP trunk?

Assuming a Cisco 3825 router, if the Cisco SCCP phones on the network are using G.711 µ-law and are traversing a CUCME system connected to a SIP trunk that supports G.711 µ-law, is a PVDM2 DSP card ...
14
votes
4answers
4k views

Enabling MLS QoS on a production 7600

I am looking at a 7609-S with a RSP720-3CXL running 12.2(33)SRE3. I have been asked to help with rate limiting some servers attached to a couple of ports running as L2 ports (switchport mode access), ...
13
votes
3answers
5k views

Management network. Best practises: big VLAN or routed interfaces

We are going to deploy a campus network with approximately 50 switches (Core, Agg, Access). Some of them will be L2 (20), and others will be L3 (30). We are thinking about how to manage these devices: ...
9
votes
1answer
17k views

What is the NO PAYLOAD ENCRYPTION version of the IOS software?

When looking at the downloads available on the Cisco site, they have a regular version of the file and a NO PAYLOAD ENCRYPTION version. What is the difference? And why would one choose one over the ...
6
votes
4answers
352 views

Cisco SFP module: Determing Priority?

I have two 3750 Cisco switches that have two fiber cables/sfp modules hooked up on each. The second fiber is just for redundancy. I have installed two new 3750X switches on the rack for the upgrade, ...
10
votes
1answer
19k views

Cisco config example for Policy Based Routing

I find my self in a situation I was in not too long ago, but I can't remember how I resolved it :) The Scenario I have a Cisco IOS router with a LAN interface (fa0/0) and a WAN interface (fa0/1), ...
15
votes
4answers
38k views

How are two “ip helper-address” statements handled?

I've discovered a subnet with two "ip helper-address" statements. This is not our normal configuration. interface Vlan300 ip address 10.1.3.2 255.255.255.0 ip helper-address 10.2.1.10 ip helper-...
6
votes
2answers
554 views

How to use “Pattern Recall” pattern matching in Regex

I'd like to match the 0's in this output, specifically using "Pattern Recall" feature mentioned in Cisco documentation. The pattern is: Gi4/3 0 0 0 ...
10
votes
1answer
369 views

Deconfigure an interface in IOS with one command

I was wondering if there is a single command to clear a single network port's configuration? (wipe switchport, portsecurity,...)
10
votes
3answers
14k views

Cisco: prevent vlan's of communicating with eachother on cisco router (ACL alternative)

Setup: Cisco router with multiple VLAN's configured on it. How can you prevent 2 VLAN's communicating with eachother? Normally I would do this with ACL's like this: access-list 102 deny ip 1.1.1.0 0....
9
votes
5answers
10k views

Monitor specific traffic type on a Cisco router

Is it possible to monitor a specific traffic type going through a cisco router? (like monitoring via wireshark) Ex: I want to monitor http traffic specifically that is passing through a router. (or ...
18
votes
3answers
27k views

How do you know if a Cisco switch is handling traffic well?

I have just read Jeremy's question about 2960-S and iSCSI traffic handling, which drove me to ask this question: We all have lots of switches deployed in distinct infrastructures, how can you know ...
7
votes
1answer
2k views

AP's at remote faciltiy will not join local controller

I currently have a WLC 4404 running 7.0.240.0. Management Interface IP is 10.128.55.10. AP-management interface is 10.128.55.15. Remote facility (facility A) has a VLAN created for wireless (455) ...
6
votes
4answers
7k views

Which is the Preferred location of an IPS within a network? [closed]

In the context of protecting a campus network, which is the Preferred location of an IPS within a network? Within an ISR router IPS as a separate device Within ASA
9
votes
3answers
966 views

ASA Netflow support

Cisco ASAs support a version of netflow called NetFlow Secure Event Logging (NSEL). Is special support for the protocol required on the collectors to view the flows? Is the protocol compatible with ...
7
votes
2answers
725 views

Etherchannel on 6509 (VSS) with interfaces from different type of modules supported?

We currently have 1 10GB Multi-Chassis etherchannel Between 2x 6509 (VSS) and 2x 3750-E (Stack). On the 6509 the etherchannel interface members currently run on the supervisor module VS-S720-10G. We ...
2
votes
4answers
2k views

Cisco 1921 security features in the default bundle

Bought a Cisco 1921 router without any additional modules. This is the first time I'm using a non-home router. What security features should I enable so that users are relatively safe when using the ...
6
votes
2answers
955 views

What are the best Cisco 6500 Ethernet modules for iSCSI?

I have a SAN environment built on FC (Fibre Channel), which is a standalone network from the rest of the DC Ethernet network, and have only Cisco 6509s with Sup720s available for this project. Most ...
17
votes
8answers
17k views

When *not* to create a SVI for a L2 VLAN?

When creating VLANs for just L2 on a switch -- routing will be handled by a device within that VLAN such as a load-balancer -- it isn't necessary to create the vlan interface. As a matter of habit, I ...
5
votes
2answers
4k views

Cisco: No autostate on GigabitEthernet interfaces, any alternative? (not working)

I recently tried the command "no autostate" on a GigabitEthernet interface (on a newer router) and this didn't work anymore, does anyone know why this is occuring? This use to work on FastEthernet ...
21
votes
7answers
36k views

Difference between access list and prefix list?

Can someone explain with an example whats the difference between an access list and prefix list.
10
votes
1answer
5k views

PPPoA ADSL Configuration with external modem on Cisco 891

Context We use Cisco 891 routers as CPE for several client sites. They are all running IOS 15. Cisco IOS Software, C890 Software (C890-UNIVERSALK9-M), Version 15.0(1)M8, RELEASE SOFTWARE (fc1) The ...
6
votes
1answer
591 views

After a memory upgrade of my Cisco WAAS, why is the connection limit still the same, how can I raise it?

We use Cisco WAAS appliances for WAN optimization. With increasing traffic, we noticed that the connection limit was frequently reached. In case of our WAVE-574-K9 with 3 GB RAM, there was a limit of ...
7
votes
2answers
558 views

Multi-tenancy TACACS server

Is it possible for Cisco ACS 5.4 (or any other version) to work in a multi-tenancy environment? I would like to have two ACS servers, one primary, one secondary, with completely different routing (...
10
votes
3answers
5k views

Oversubscription in cisco 6500

What is oversubscription?When selecting a 16 port 10 gig blade for cisco 6500 , it says oversubscription as 4:1. What will happen if I populate all 16 ports, will some ports be blocking or dropping ...
1
vote
1answer
344 views

How do I obtain access to buy from Cisco directly? [closed]

I'm fairly new to the purchasing and licensing of new Cisco equipment. In the past, I have used eBay for all of my Cisco shopping needs. I know that I can purchase new equipment and licenses from ...
5
votes
2answers
2k views

Cisco active/standby FWSM pair went active/active after switch upgrade

PROBLEM: Both FWSM in our core switches went active/active and protected subnets have partial accessibility. SETUP: We have 2 x Cisco Catalyst 6509 switches running IOS version 12.2(18). Each ...
48
votes
24answers
95k views

How can I see which switchports are not in use?

On a large Cisco Catalyst switch stack, almost all switchports are patched. I need to identify the ports, which are not in use, for connecting further devices. Following switchports, cabling, patch ...
16
votes
5answers
191k views

How can I reset a VPN tunnel on a Cisco ASA?

On a site-to-site VPN using a ASA 5520 and 5540, respectively, I noticed that from time to time traffic doesn't pass any more, sometimes just there's even missing traffic just for one specific traffic ...
26
votes
4answers
108k views

How can I capture traffic on Cisco IOS switches?

For investigating a problem in client to server communication, I need to capture packets for analysis. However it's not allowed to install a packet analyzer, such as Wireshark or tcpdump, on client or ...
13
votes
1answer
13k views

What is the 5 level QoS model (through config example)?

I have heard people stating that their network "operates a 5 level (or layer) QoS model" Sometimes they also mention a 7 level QoS model. Can anyone provide me with a Cisco IOS config example of ...
17
votes
4answers
8k views

Are there any reasons to not use BFD?

In looking to implement Bidirectional Forwarding Detection (BFD) it seems to be very flexible in terms of timer tuning, light weight regarding any overhead and it's flexibility in terms of overall ...
12
votes
1answer
15k views

Cisco ISR G2 encrypted bandwidth restriction?

I have been having complaints of a "slow connection" from several new remote sites. The sites are connected via an MPLS L3VPN service into Cisco 2921's, and we are using Cisco GET-VPN to encrypt ...
15
votes
8answers
9k views

How to connect 5 different networks together?

I have a network consisting of three servers in a data center, all of which are connected to each other via a switch. In addition to this I need this network to access 4 additional networks, most of ...
10
votes
1answer
3k views

Cisco WLC External WebAuth Apparent Random Behavior

On Cisco 5508 v7.2.103.0, I have a couple of WLANs configured. Call them ABC and XYZ for the sake of this question. ABC uses 802.1X and gets a splash page redirect URL pushed down. XYZ uses PSK and ...
24
votes
10answers
275k views

How to find the port a device is connected to, based on IP, on a Cisco Catalyst switch

On a Cisco Catalyst switch, I need to find what port an end device is connected to. I have the IP address/host name. How do I quickly find the port?
10
votes
2answers
2k views

Why does my Cisco 6509 BGP table use two entries in my TCAM?

I have a problem on my Cisco 6509, each entry in my BGP table occupies two entries in the TCAM. If I show capacity forwarding, I see MPLS entries in L3 forwarding resources. But, I do not use MPLS on ...
5
votes
3answers
2k views

Unable to connect via VPN to remote network

PROBLEM: I'm unable to connect via VPN to our production network while connected to my home wireless network. SETUP: Internet | ISP router at home | Cisco ASA 5505 firewall | Buffalo wireless ...
7
votes
2answers
2k views

Cisco Catalyst cluster heartbeat switch issue - increasing input errors

PROBLEM: The servers in two clusters keep losing heartbeat connectivity with each other thus causing database outages. Outages are brief but disruptive. SETUP: There are two clusters of three ...
7
votes
5answers
3k views

Cisco: monitoring users input

Is there a way to monitor a user's input on a cisco device? Clarification: the commands a user have entered as in configuration mode AND normal mode. (especialy normal mode. Configuration mode can ...
10
votes
5answers
5k views

Static redistribution into EIGRP as internal failure

I am redistributing a static route into EIGRP on a 6500. I had read here if you enter a network statement matching a static route that it would be redistributed as an internal route by EIGRP. However, ...
15
votes
5answers
21k views

How to factory reset IOS-XR?

I want to factory reset IOS-XR. The router used is ASR9000 I'm used to do that easily in IOS doing config-register 0x2102, write erase followed by a reload. I search on documentation, but found no ...
6
votes
1answer
10k views

A FEX port remains inactive - how can I bring it up?

When implementing Cisco Nexus 5k switches (5596UP), I connected a server to a dual homed 2000 FEX (2232T), the port belonging to a virtual port channel. However, the port changed the status from ...