8 votes
Accepted

What is the difference between "ip domain name" and "ip domain-name"?

They are the same. Cisco IOS also supports the command ip domain name starting from its 12.2 Software release. You can check it here: IOS: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr/...
Hung Tran's user avatar
  • 3,754
8 votes

What is the difference between "ip domain name" and "ip domain-name"?

The two forms are equivalent. "domain-name" is the older form, and newer versions seem to prefer "domain name". Maybe at some point Cisco realized that removing the hyphen allowed them to extend the "...
mere3ortal's user avatar
  • 2,416
6 votes
Accepted

EHWIC-1GE-SFP for Cisco 1941

You can change to the SFP interface. Under the interface configuration, configure: media-type sfp To change back to the copper interface: media-type rj45
Ron Maupin's user avatar
  • 98.7k
4 votes
Accepted

Is ISR 4451 hotplugable

Enhanced Ethernet modules on ISR are hot swapable, but please note you need to Use the hw-module slot <1-4> oir-stop command when removing or replacing a hot-swappable Cisco enhanced EtherSwitch ...
Mr.lock's user avatar
  • 1,723
4 votes
Accepted

How to check if IPSec is available on Cisco ISR 4451

Check your license boot: show run | include boot And if you don't see it there already, add it like this: license boot level appxk9 *edit: in your case, you need license boot level securityk9 After ...
thorr18's user avatar
  • 208
4 votes

How to check if IPSec is available on Cisco ISR 4451

On the router console, type show version If the image name includes the letters "K9", as in C3000-UNIVERSALK9-M, then yes. Otherwise, no. You can also type a command like show crypto isakmp sa ...
Ron Trunk's user avatar
  • 67.1k
4 votes
Accepted

Cannot log in to a Cisco 891W via terminal, ssh

Since you have line vty 0 4 password mypassword you need to connect with "mypassword". If you want to connect with the user "mysuser" you need to enter the command line vty 0 15 login local ...
JFL's user avatar
  • 19.5k
3 votes
Accepted

How to determine the required performance of my router?

You need to determine the average and peak workloads and estimate their change over the lifetime of the router. For instance, you might have 50 total users with on average 15 users surfing online ...
Zac67's user avatar
  • 82.6k
3 votes
Accepted

Prevent static NAT to respond to ARP requests

We can see that the router responds to arp requests for this IP. Disable proxy ARP on the router (no ip proxy-arp) so that the router does not answer ARP for devices on a different network. Proxy ARP ...
Ron Maupin's user avatar
  • 98.7k
3 votes
Accepted

Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp

EDITED: Here are a few things to check: Can your PC really send tagged frames (most PCs can't)? Your VRF is named VRF200, but your config shows VLAN200 Be sure you enter vrf forwarding VRF200 before ...
Ron Trunk's user avatar
  • 67.1k
3 votes

What interfaces does a Cisco iOS Router allow SSH Console access on?

Absent an ACL that blocks using an interface, you can connect to any router interface that is up and active. Generally, you want to use a loopback address because a loopback interface does not go down ...
Ron Maupin's user avatar
  • 98.7k
3 votes
Accepted

What interfaces does a Cisco iOS Router allow SSH Console access on?

Given the above, should you expect SSH to be accessible on every interface with an IP address? Unless otherwise restricted, yes. Is there an interface setting to allow/disalow this? You can apply ...
Ron Trunk's user avatar
  • 67.1k
2 votes
Accepted

Is it possible to use a interface of Catalyst on a ISR

No, the switches cannot be configured as part of the ISR. The switch stack can be configured as if it were a single switch, but the switch stack and the ISR are going to be two separate network ...
Ron Maupin's user avatar
  • 98.7k
2 votes
Accepted

Cisco ISR L2TP VPN local vs radius authentication problem

I found the problem. I did not think this would be it so I overlooked it multiple times but after trying it, it worked. I feel so silly now. On the virtual template 1 I changed ppp authentication ms-...
pieterk's user avatar
  • 181
2 votes

How to check if IPSec is available on Cisco ISR 4451

On this datasheet we can read : When combined with an optional Cisco IOS XE Software Security license, enables WAN link security and VPN services. So it seems that the K9 indicate that the image ...
JFL's user avatar
  • 19.5k
2 votes

Performance License for 4321

If throughput (performance) license is enabled as it is shown on the attached picture, your throughput is 100mbps. Using a 4321 you have 2 options. 50mbps without performance license, and 100mbps with ...
deczcool's user avatar
2 votes
Accepted

How to install a SM-D-ES3G-48-P in a ISR 4451

deleted. SM-D module only work on ISR G2 series..
Roger Sanghee Gold's user avatar
2 votes
Accepted

Firewall and VPN functionalities for a Cisco ISR4321 V/K9

Yes you can setup ACL on any Cisco IOS device, this is a base feature. Regarding the VPN, to my surprise, for the IRS4321, according to this datasheet it seems you need the Security (SEC) feature ...
JFL's user avatar
  • 19.5k
2 votes

Understanding traffic flow on SVIs

It is necessary to determine the true egress interface towards the destination for traffic sourced from VLAN10 to the WAN site, are red boxes interfaces on a single device or different devices with ...
Last_remote_'s user avatar
2 votes

Cisco BDI not Forwarding L2 Traffic?

I have a very similar configuration that works fine. A few things stand out to me: The BDI interface (7) doesn't match the bridge domain (111) on the L2 interfaces. On the top switch, you should not ...
Ron Trunk's user avatar
  • 67.1k
2 votes

ISR 4331 vs ISR 4331/K9?

K9 is both an ordering code as well as a designator in an image filename to indicate that the unit has the strong encryption license included. On a ASA, that means the 3DES-AES license. https://...
Zac67's user avatar
  • 82.6k
1 vote
Accepted

Track crypto map state when using Policy Based Routing on Cisco Router

As I have not received an answer yet and did not find a solution myself I had to assume that it is simply not possible. As we are changing our cloud security provider anyway and can now work with VTIs,...
Daniel's user avatar
  • 1,059
1 vote

Cisco ISR4450 Router SSH access denied

If you're using putty, then it's likely that you have "Attempt GSSAPI authentication" enabled. You can find this under Connection>SSH>Auth>GSSAPI. GSSAPI is usually used in Kerberos and not used in ...
ashraf's user avatar
  • 11
1 vote

Cisco ISR4450 Router SSH access denied

If you dont use TACACS or RADIUS authentication, for the local SSH access you should have this commands in your running-configuration (checked with ISR4321): aaa new-model aaa authentication login ...
mrczr's user avatar
  • 11
1 vote

Cisco ISR 4000 Performance Levels, router shaper

I believe you are misinterpreting this statement: The router shaper applies only to traffic on the data plane forwarding CPU, and it applies only to egress traffic leaving the data plane. It ...
mere3ortal's user avatar
  • 2,416

Only top scored, non community-wiki answers of a minimum length are eligible