Questions tagged [ios-xe]

For questions about the Cisco IOS XE system software for switches and routers. It is built on Linux and provides a distributed software architecture that moves many operating system responsibilities out of the IOS process and has a copy of IOS running as a separate process.

Filter by
Sorted by
Tagged with
1
vote
1answer
30 views

Cisco 3850: Process responsible for Softbuffers

There is a command to increase the SoftMax Buffers on 3850 switches: qos queue-softmax-multiplier 200 This is done in percent which means i am doubling the amount of softmax buffer. Before, the ...
2
votes
1answer
59 views

Cisco IOS: DNS Servers via DHCP

Simple question: I have following switch configuration: interface Vlan1 ip address dhcp end ip domain-lookup I receive and IP and DNS servers along with it from our DHCP server. At least Windows ...
0
votes
1answer
207 views

c9300 command state

I have a C9300-24P switch removed from stack which was configured as slave, after restarting it stops after checking hardware and indicating the switch number as one. The switch ends with Switch: ...
1
vote
2answers
108 views

Restricting TFTP access from Host to Router using extended ACL in Cisco IOS

I am trying the below Extended ACLs to restrict TFTP but still I am able to upload files to the router using tftp. Not sure, what is wrong, can you all help? Approach 1: permit udp host <ip> ...
1
vote
3answers
103 views

How to exclude interfaces without description on 'sh int description' command using regex?

[Cisco IOS-XE] [4507R+E] How to exclude interfaces without description on 'sh int description' command using regex? Couldn't find any related/previous questions.
0
votes
1answer
148 views

Cisco qos, service-policy on output interface on 1100 ISR seems ignored

I am trying to configure QoS for a specialty purpose application, and it is the first time I have done QoS. This is on an 1100 ISR with IOS XE 16.09.03. The device is a set of 4 that establish a mesh ...
1
vote
1answer
109 views

Cisco dVTI - Virtual-Access interface has no IP address

i'm struggeling with some dVTI Issue on a Cisco ASR1000 box. here is my configuration for the hub site: crypto keyring FOO-KEYRING pre-shared-key hostname r2-foo key iawg8b32hah ! crypto isakmp ...
0
votes
2answers
364 views

High availability confiugration in Cisco 4331 routers

I need to configure high availability for 2 Cisco 4331 routers. First i was planning to configure using HSRP but later i realized there is another way around called as "stateful Interchasis Redundancy"...
0
votes
0answers
50 views

How to route dynamic PPPoE prefix delegated IPv6 prefixes to a layer 3 switch on IOS XE

Network setup: IOS XE 16.x --> Cisco 3560G layer 3 switch --> clients The IOS XE device does PPPoE dialing to our ISP and runs some VPNs to other sites. The 3560G does inter-VLAN routing and ...
2
votes
2answers
138 views

What are metrics to measure the load in Cisco Routers

I have a setup of Cisco CSR 1000v routers. I established a GRE tunnel between 2 routers, where the tunnel's source is the GigabitEthernet1 interface. I aim to measure the load on that GRE tunnel. The ...
3
votes
1answer
245 views

Use BFD on a Virtual-Template Interface

I would like to know how I can configure Bidirectional Forward Detection on a Virtual-Template interface. Tested on IOSv and IOS-XE (ISR-4451): router#configure terminal Enter configuration commands,...
0
votes
0answers
327 views

How to enable RESTCONF server in IOS-XR?

I aim to enable RESTCONF server on Cisco IOS-XRv 9000. I did not find online anything about enabling HTTP server in this IOS-XR version. However, with NETCONF server can be enabled. For IOS-XE is ...
0
votes
1answer
187 views

Unable to configure SR-TE (Segment Routing Traffic Engineering) in CSR 1000v

I'm trying to configure SR-TE (Segment Routing Traffic Engineering) in CSR 1000v IOS XE 16 using the official tutorial in here Segment Routing Traffic Engineering (SR-TE) I have the same topology in ...
0
votes
0answers
134 views

SNMPv3 traps on Catalyst 9500

with our new Catalyst 9500 switches we want to use snmpv3 to send traps. Thats what I configured: snmp-server engineID local 1234567890ABCEDF snmp-server group SG_SERVERFARM v3 priv snmp-server trap-...
5
votes
1answer
469 views

Cisco 3850-24p stable firmware 16.x.x

Have a query towards the 3850 series switches. Currently making a plan to upgrade a few remote sites from old, stable and steady 3650-24ps (eol awhile back) to 3850-24p. Nothing fancy to support, 1 ...
2
votes
1answer
2k views

Default QoS Behavior on Catalyst 3650/3850 Running IOS XE 16.3.6

I am trying to better understand the default queuing behavior on Catalyst 3650/3860 running IOS XE 16.3.6 Denali. Is QoS enabled globally by default? Coming from working with Catalyst 2960X on IOS 15 ...
1
vote
1answer
6k views

Upgrade Catalyst 9300 stack without downtime

I have a pair of C9300-24T switches running as a stack and where all connections use symmetric LACP etherchannels. Is it possible to do a software upgrade without downtime? (Meaning that one side of ...
2
votes
2answers
419 views

Match DSCP in IPv4/IPv6 packets is not supported for this interface

i have cisco asr 903 (ios xe) i need to limitation Traffic for google-traffic this my configuration ip access-list extended ip-google-traffic permit ip 8.8.4.0 0.0.0.255 any permit ip 8.8.8.0 0.0....
2
votes
1answer
40 views

Edit BGP on IOS XE3

i need to edit my BGP Running , and add more Neighbor but when try this FiberISP-Cisco(config)#router bgp 203725 BGP is already running; AS is 203735 FiberISP-Cisco(config)# how to edit and add ...
1
vote
2answers
1k views

Can NOT match ACL in an output policy-map

this it my config , access-list 2000 permit ip 8.8.8.0 0.0.0.255 any access-list 2000 permit ip 8.34.208.0 0.0.15.255 any access-list 2000 permit ip 8.35.192.0 0.0.15.255 any access-list 2000 permit ...
3
votes
1answer
393 views

CSCvg76186 - Cisco Smart Install Remote Code Execution and Denial of Service Vulnerability

If you missed this Catastrophic severity 1 vulnerability, check the temporary solution below, if you do not want to upgrade your software to a not properly tested software. There are currently, at the ...
8
votes
1answer
505 views

Struggling inbound and outbound traffic engineering to/from iBGP peers at different POPs

We are a managed service provider running a small sized network in a single datacentre in Sydney. We've recently deployed a new POP inter-state in Melbourne (both are on the east coast of Australia), ...