8
votes
Accepted
What is the difference between "ip domain name" and "ip domain-name"?
They are the same.
Cisco IOS also supports the command ip domain name starting from its 12.2 Software release.
You can check it here:
IOS: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr/...
- 3,754
8
votes
What is the difference between "ip domain name" and "ip domain-name"?
The two forms are equivalent. "domain-name" is the older form, and newer versions seem to prefer "domain name". Maybe at some point Cisco realized that removing the hyphen allowed them to extend the "...
- 2,406
6
votes
Accepted
EHWIC-1GE-SFP for Cisco 1941
You can change to the SFP interface. Under the interface configuration, configure:
media-type sfp
To change back to the copper interface:
media-type rj45
- 97.7k
4
votes
Accepted
Cannot log in to a Cisco 891W via terminal, ssh
Since you have
line vty 0 4
password mypassword
you need to connect with "mypassword".
If you want to connect with the user "mysuser" you need to enter the command
line vty 0 15
login local
...
- 19.3k
4
votes
Accepted
Is ISR 4451 hotplugable
Enhanced Ethernet modules on ISR are hot swapable, but please note you need to Use the hw-module slot <1-4> oir-stop command when removing or replacing a hot-swappable Cisco enhanced EtherSwitch ...
- 1,723
4
votes
Accepted
How to check if IPSec is available on Cisco ISR 4451
Check your license boot:
show run | include boot
And if you don't see it there already, add it like this:
license boot level appxk9
*edit: in your case, you need license boot level securityk9
After ...
- 208
4
votes
How to check if IPSec is available on Cisco ISR 4451
On the router console, type
show version
If the image name includes the letters "K9", as in C3000-UNIVERSALK9-M, then yes. Otherwise, no.
You can also type a command like
show crypto isakmp sa
...
- 66.1k
3
votes
Accepted
How to determine the required performance of my router?
You need to determine the average and peak workloads and estimate their change over the lifetime of the router.
For instance, you might have 50 total users with on average 15 users surfing online ...
- 79.8k
3
votes
Accepted
Prevent static NAT to respond to ARP requests
We can see that the router responds to arp requests for this IP.
Disable proxy ARP on the router (no ip proxy-arp) so that the router does not answer ARP for devices on a different network. Proxy ARP ...
- 97.7k
3
votes
Accepted
Cisco IOS Software [Everest], ISR 4331. Vlan+Vrf+Dhcp
EDITED:
Here are a few things to check:
Can your PC really send tagged frames (most PCs can't)?
Your VRF is named VRF200, but your config shows
VLAN200
Be sure you enter
vrf forwarding VRF200
before ...
- 66.1k
3
votes
What interfaces does a Cisco iOS Router allow SSH Console access on?
Absent an ACL that blocks using an interface, you can connect to any router interface that is up and active. Generally, you want to use a loopback address because a loopback interface does not go down ...
- 97.7k
3
votes
Accepted
What interfaces does a Cisco iOS Router allow SSH Console access on?
Given the above, should you expect SSH to be accessible on every interface with an IP address?
Unless otherwise restricted, yes.
Is there an interface setting to allow/disalow this?
You can apply ...
- 66.1k
2
votes
Accepted
Is it possible to use a interface of Catalyst on a ISR
No, the switches cannot be configured as part of the ISR. The switch stack can be configured as if it were a single switch, but the switch stack and the ISR are going to be two separate network ...
- 97.7k
2
votes
Accepted
Cisco ISR L2TP VPN local vs radius authentication problem
I found the problem. I did not think this would be it so I overlooked it multiple times but after trying it, it worked. I feel so silly now.
On the virtual template 1 I changed
ppp authentication ms-...
- 181
2
votes
How to check if IPSec is available on Cisco ISR 4451
On this datasheet we can read :
When combined with an optional Cisco IOS XE Software Security license,
enables WAN link security and VPN services.
So it seems that the K9 indicate that the image ...
- 19.3k
2
votes
Performance License for 4321
If throughput (performance) license is enabled as it is shown on the attached picture, your throughput is 100mbps. Using a 4321 you have 2 options. 50mbps without performance license, and 100mbps with ...
- 21
2
votes
Accepted
How to install a SM-D-ES3G-48-P in a ISR 4451
deleted.
SM-D module only work on ISR G2 series..
2
votes
Accepted
Firewall and VPN functionalities for a Cisco ISR4321 V/K9
Yes you can setup ACL on any Cisco IOS device, this is a base feature.
Regarding the VPN, to my surprise, for the IRS4321, according to this datasheet it seems you need the Security (SEC) feature ...
- 19.3k
2
votes
Understanding traffic flow on SVIs
It is necessary to determine the true egress interface towards the destination for traffic sourced from VLAN10 to the WAN site, are red boxes interfaces on a single device or different devices with ...
- 21
2
votes
Cisco BDI not Forwarding L2 Traffic?
I have a very similar configuration that works fine. A few things stand out to me:
The BDI interface (7) doesn't match the bridge domain (111) on the
L2 interfaces.
On the top switch, you should not ...
- 66.1k
2
votes
ISR 4331 vs ISR 4331/K9?
K9 is both an ordering code as well as a designator in an image
filename to indicate that the unit has the strong encryption license
included. On a ASA, that means the 3DES-AES license.
https://...
- 79.8k
1
vote
Accepted
Track crypto map state when using Policy Based Routing on Cisco Router
As I have not received an answer yet and did not find a solution myself I had to assume that it is simply not possible. As we are changing our cloud security provider anyway and can now work with VTIs,...
- 1,049
1
vote
Cisco ISR4450 Router SSH access denied
If you're using putty, then it's likely that you have "Attempt GSSAPI authentication" enabled. You can find this under Connection>SSH>Auth>GSSAPI. GSSAPI is usually used in Kerberos and not used in ...
- 11
1
vote
Cisco ISR4450 Router SSH access denied
If you dont use TACACS or RADIUS authentication, for the local SSH access you should have this commands in your running-configuration (checked with ISR4321):
aaa new-model
aaa authentication login ...
- 11
1
vote
Cisco ISR 4000 Performance Levels, router shaper
I believe you are misinterpreting this statement:
The router shaper applies only to traffic on the data plane forwarding
CPU, and it applies only to egress traffic leaving the data plane. It
...
- 2,406
Only top scored, non community-wiki answers of a minimum length are eligible