Questions tagged [ios-xe]
For questions about the Cisco IOS XE system software for switches and routers. It is built on Linux and provides a distributed software architecture that moves many operating system responsibilities out of the IOS process and has a copy of IOS running as a separate process.
44
questions
0
votes
0
answers
36
views
Cisco IOS XE NAT port-forwarding wtih multiple ports
I am looking for the best approach to organize NAT port-forwarding. The setup is simple: router with one global IP and a local network behind it. Sometimes I need to pass multiple ports into office ...
- 203
1
vote
1
answer
100
views
Limiting SSH/HTTP/etc. access to LAN only on IOS-XE
On a Cisco ISR 1000 series router, I have SSH, and the HTTP(s) management interface running. The router is doing PAT.
Issue is, all of these services are accessible from WAN too. For a temporary ...
- 87
0
votes
2
answers
139
views
Built-in variable for cli commands in EEM (IOS-XE)
So i want to write an EEM that basically starts a seperate script where i check what user is logged on, to which group it belongs and then define if they can or cannot run the command. Example:
event ...
- 1,729
3
votes
2
answers
275
views
OSPF Advertise only loopback not transit VLAN
I have this topology:
and this configuration:
R1
interface Loopback0
ip address 10.0.0.1 255.255.255.255
ip ospf 1 area 0
interface GigabitEthernet0/0
ip address 192.168.0.1 255.255.255.252
ip ...
- 399
0
votes
1
answer
83
views
logging host 1.1.1.1 on Cisco C9300
My Catalyst C9300s running IOS-XE have logging host 1.1.1.1 in the config by default. Is that because it is sending logs to it's internal logs store? I can't seem to find a straight answer in the ...
- 461
0
votes
1
answer
31
views
Web Access Certs No Secure Though It Is
I have a Cisco C9300 and I am securing the access to the web console to it with the HTTPS server. I created a trustpoint for our CA and imported the CA cert as well as created a certificate for this ...
- 461
1
vote
0
answers
55
views
Restconf not getting switchport vlan information
I have a couple of catalyst switches which I'm experiencing an interesting issue using APIs not pulling all the information I need.
The switches are running IOS-XE 17.6.3, but I have also seen the ...
- 11
1
vote
2
answers
322
views
Cisco 9200L has empty config after IOS update
I have uploaded the newest recommended image on a C9200L switch, and its running the new version now. But the config is empty. Do i need to copy the old config again or how do i recover the old config ...
- 89
3
votes
2
answers
439
views
NETCONF namespaces
I am trying to extract information via NETCONF from an IOS-XE device.
I am using two separate methods to achieve this and cannot replicate the success of one method while using the other:
Successful ...
0
votes
1
answer
328
views
What is the ssd LUKS file on the (boot)flash of newer 9k Catalyst switches?
On a couple of our recent Catalyst 9k switches running IOSXE 17.3.x we've noticed a file with the name 'ssd' on the (boot)flash: filesystem.
switch#dir flash:
Directory of flash:/
270353 -rw- ...
- 11
2
votes
2
answers
2k
views
How do I view BGP communities of received routes in IOS XE before they go through route-map import policy?
I want to see the communities that are attached to a route when I first receive the route before it goes through the BGP import route-map. In my instance the route-map strips communities off so I ...
- 21
5
votes
1
answer
4k
views
VRF Leak global default route with a single router
I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
- 1,488
1
vote
0
answers
231
views
Using PBR or similar for an IP SLA for a C1111-8P-TLELA with a dynamic Cellular WAN IP
I am trying to get 4G Failover working on a Cisco C1111-8P-LTELA router. I have a known working solution that I usually use with IP SLA, and a local PBR route-map that forces traffic out of the ...
- 1,488
1
vote
1
answer
3k
views
Catalyst 3850 password recovery
I think I may have fat fingered the username/password when setting up my Catalyst 3850. I found password recovery instructions. However when I type the command "SWITCH_DISABLE_PASSWORD_RECOVERY=0&...
- 11
0
votes
2
answers
171
views
Automatically connect to Cellular Network (LTE)
I am working on implementing a LTE configuration on IOS-XE (ISR1000) devices. Issue we have is, that we have to "genereate" some traffic in order for the cellular interface to initiate a ...
- 1,729
0
votes
1
answer
826
views
Cisco IOS - Delay DHCP offers
I have two routers in the same subnet that have a HSRP configuration in order to take over, if one of the device fails. There is the same DHCP configuration on both devices:
ip dhcp pool LAN
network ...
- 1,729
3
votes
1
answer
712
views
Does Cisco CSR 1000v have a management interface?
According to Mapping Cisco CSR 1000v Network Interfaces to
VM Network Interfaces document, the newer CSR 1000v routers no longer have the dedicated management interface Gi0:
In Cisco IOS XE Release 3....
- 1,111
2
votes
1
answer
4k
views
Accessing HTTP Secure Server on Cisco IOS
I have a Cisco ISR4331/K9 running IOS XE Version 16.09.04 which I have configured with a hostname, domain name, and generated 2048 bit RSA keys on, I have also verified the clock is set correctly.
...
- 231
5
votes
1
answer
988
views
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
- 1,488
1
vote
2
answers
167
views
Prime Infrastructure IOS-XE device type recognition
Catalyst switches usually form a stack on boot up, even if they are not stacked. They just form a stack with themselves. So Prime Infrastructure reads out the model of the switch, that says it is a ...
- 1,729
3
votes
1
answer
1k
views
Cellular interface in VRF (LTE)
We are testing an LTE configuration with a Cisco C1113-8PLTEEA router. We already have a wired internet connection in a specific VRF called DSL. As far as i understand the LTE backup, we do have to ...
- 1,729
2
votes
1
answer
357
views
SNMPv3 context on IOS-XE does not seem to work with Prime
We recently switched to SNMPV3 and experience the issue, that there is no client data available within prime anymore. So we quickly read about the SNMP context we need to add to our devices ...
- 1,729
-1
votes
1
answer
536
views
Port Channel issue on Cisco gear
I have a lab where I'm connecting a Cisco CSR1000V and a Nexus 9000 switch. These devices are connected back to back. Relevant configuration is:
Router:
interface Port-channel1
mtu 9216
!
interface ...
- 101
2
votes
1
answer
1k
views
Cisco 3850: Process responsible for Softbuffers
There is a command to increase the SoftMax Buffers on 3850 switches:
qos queue-softmax-multiplier 200
This is done in percent which means i am doubling the amount of softmax buffer.
Before, the ...
- 1,729
2
votes
1
answer
1k
views
Cisco IOS: DNS Servers via DHCP
Simple question: I have following switch configuration:
interface Vlan1
ip address dhcp
end
ip domain-lookup
I receive and IP and DNS servers along with it from our DHCP server. At least Windows ...
- 1,729
0
votes
1
answer
495
views
c9300 command state
I have a C9300-24P switch removed from stack which was configured as slave, after restarting it stops after checking hardware and indicating the switch number as one.
The switch ends with
Switch:
...
- 1
2
votes
2
answers
1k
views
Restricting TFTP access from Host to Router using extended ACL in Cisco IOS
I am trying the below Extended ACLs to restrict TFTP but still I am able to upload files to the router using tftp. Not sure, what is wrong, can you all help?
Approach 1:
permit udp host <ip> ...
- 57
1
vote
3
answers
1k
views
How to exclude interfaces without description on 'sh int description' command using regex?
[Cisco IOS-XE] [4507R+E]
How to exclude interfaces without description on 'sh int description' command using regex?
Couldn't find any related/previous questions.
- 22
0
votes
1
answer
2k
views
Cisco qos, service-policy on output interface on 1100 ISR seems ignored
I am trying to configure QoS for a specialty purpose application, and it is the first time I have done QoS. This is on an 1100 ISR with IOS XE 16.09.03.
The device is a set of 4 that establish a mesh ...
- 227
1
vote
1
answer
691
views
Cisco dVTI - Virtual-Access interface has no IP address
i'm struggeling with some dVTI Issue on a Cisco ASR1000 box.
here is my configuration for the hub site:
crypto keyring FOO-KEYRING
pre-shared-key hostname r2-foo key iawg8b32hah
!
crypto isakmp ...
- 536
0
votes
2
answers
4k
views
High availability confiugration in Cisco 4331 routers
I need to configure high availability for 2 Cisco 4331 routers. First i was planning to configure using HSRP but later i realized there is another way around called as "stateful Interchasis Redundancy"...
- 433
2
votes
2
answers
596
views
What are metrics to measure the load in Cisco Routers
I have a setup of Cisco CSR 1000v routers. I established a GRE tunnel between 2 routers, where the tunnel's source is the GigabitEthernet1 interface.
I aim to measure the load on that GRE tunnel. The ...
- 145
3
votes
1
answer
528
views
Use BFD on a Virtual-Template Interface
I would like to know how I can configure Bidirectional Forward Detection on a Virtual-Template interface. Tested on IOSv and IOS-XE (ISR-4451):
router#configure terminal
Enter configuration commands,...
- 1,729
0
votes
1
answer
2k
views
How to enable RESTCONF server in IOS-XR?
I aim to enable RESTCONF server on Cisco IOS-XRv 9000.
I did not find online anything about enabling HTTP server in this IOS-XR version. However, with NETCONF server can be enabled.
For IOS-XE is ...
- 145
0
votes
1
answer
571
views
Unable to configure SR-TE (Segment Routing Traffic Engineering) in CSR 1000v
I'm trying to configure SR-TE (Segment Routing Traffic Engineering) in CSR 1000v IOS XE 16 using the official tutorial in here Segment Routing Traffic Engineering (SR-TE)
I have the same topology in ...
- 145
1
vote
0
answers
578
views
SNMPv3 traps on Catalyst 9500
with our new Catalyst 9500 switches we want to use snmpv3 to send traps.
Thats what I configured:
snmp-server engineID local 1234567890ABCEDF
snmp-server group SG_SERVERFARM v3 priv
snmp-server trap-...
- 11
5
votes
1
answer
635
views
Cisco 3850-24p stable firmware 16.x.x
Have a query towards the 3850 series switches.
Currently making a plan to upgrade a few remote sites from old, stable and steady 3650-24ps (eol awhile back) to 3850-24p.
Nothing fancy to support, 1 ...
- 1,051
2
votes
1
answer
3k
views
Default QoS Behavior on Catalyst 3650/3850 Running IOS XE 16.3.6
I am trying to better understand the default queuing behavior on Catalyst 3650/3860 running IOS XE 16.3.6 Denali.
Is QoS enabled globally by default? Coming from working with Catalyst 2960X on IOS 15 ...
- 562
1
vote
1
answer
11k
views
Upgrade Catalyst 9300 stack without downtime
I have a pair of C9300-24T switches running as a stack and where all connections use symmetric LACP etherchannels.
Is it possible to do a software upgrade without downtime? (Meaning that one side of ...
- 113
2
votes
2
answers
831
views
Match DSCP in IPv4/IPv6 packets is not supported for this interface
i have cisco asr 903 (ios xe)
i need to limitation Traffic for google-traffic
this my configuration
ip access-list extended ip-google-traffic
permit ip 8.8.4.0 0.0.0.255 any
permit ip 8.8.8.0 0.0....
- 331
2
votes
1
answer
132
views
Edit BGP on IOS XE3
i need to edit my BGP Running , and add more Neighbor
but when try this
FiberISP-Cisco(config)#router bgp 203725
BGP is already running; AS is 203735
FiberISP-Cisco(config)#
how to edit and add ...
- 331
1
vote
2
answers
3k
views
Can NOT match ACL in an output policy-map
this it my config ,
access-list 2000 permit ip 8.8.8.0 0.0.0.255 any
access-list 2000 permit ip 8.34.208.0 0.0.15.255 any
access-list 2000 permit ip 8.35.192.0 0.0.15.255 any
access-list 2000 permit ...
- 331
3
votes
1
answer
528
views
CSCvg76186 - Cisco Smart Install Remote Code Execution and Denial of Service Vulnerability
If you missed this Catastrophic severity 1 vulnerability, check the temporary solution below, if you do not want to upgrade your software to a not properly tested software. There are currently, at the ...
user36472
8
votes
1
answer
824
views
Struggling inbound and outbound traffic engineering to/from iBGP peers at different POPs
We are a managed service provider running a small sized network in a single datacentre in Sydney. We've recently deployed a new POP inter-state in Melbourne (both are on the east coast of Australia), ...
- 1,488