i have managed to create a community of cisco devices however although i can add the pix to the community it does not show up in the topology? HTTPS is enable. I can also access the pix via ASDM.
View 2 RepliesI'm experiencing considerable difficulties with CNA and my 4948E cat's. Front panel view, vLans and VTP utterly fail...and I have gone to GREAT lengths. I initially configured them all for comprehensive use in a vSphere environment. Storage switch fabric and multi-vlan guest networking. I wiped the config's across the board, factory reset all of them in an attampt to get CNA working. NO GO and it's been wildly frustrating, 80+ hrs spent with no results.
So is CNA truely compatible with the 4948e? And if so, WHAT IN THE **** AM I DOING WRONG!!?!?!?!!!!!?
Config and info:
C4948#show verCisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-ENTSERVICESK9-M), Version 15.1(1)SG2, RELEASE SOFTWARE (fc1)Technical Support: [URL] Copyright (c) 1986-2012 by Cisco Systems, Inc.Compiled Wed 24-Oct-12 02:27 by prod_rel_team
ROM: 12.2(44r)SG11C4948 uptime is 22 minutesSystem returned to ROM by reloadSystem image file is "bootflash:cat4500e-entservicesk9-mz.151-1.SG2.bin"Hobgoblin Revision 21, Fortooine Revision 1.40
Last reload reason: Reload command
[Code]...
CNA 5.8(1)
32 devices
When I first launch the application, it promots for CCO login information, but then tells me the username or password is invalid. I reset it once, and it appeared to work. Next time I launched the application though, it gave me the same login error and did not store any of the device credentials. This is a new install of CNA and it just has one community setup on it now. I've tried 2 different CCO accounts and they both give the same login failure. I know the passwords I'm using are correct though.
I'm trying to get a network of SGE2000 switches mapped into Cisco network assistant.It always comes back with the device type unknown and status unsupported device.Is there a way to fix this ? I'm using Cisco network assistant ver.5.7(6)
View 4 Replies View RelatedSince I updated a Catalyst 2960 switch to IOS version 12.2(55)SE1 I can't do searchs by MAC address, when I do "Monitor->Search" the following error appears:"The software version of the selected switch does not support some of the CLI commands in read-only mode for this window. You must have read-write access to this switch to display complete information in this window" If packets are captured you can see that the issued command by the CNA host is "GET /exec/show/mac-address-table/", the answer from the switch is:"show mac-address-table ^% Invalid input detected at '^' marker.
If I do "Configure->Switching->MAC Address" instead I get the mac address-table correctly. In this case the issued command is "GET /exec/show/mac/address-table/dynamic" and no error is displayed, the answer from the switch is the list of mac-address table.
2950s work fine when upgrading the IOS using CNA. On all 2960s I get Failed to execute the command archive download-sw /overwrite /http iosFile
If I run the command using telnet and tftp server it works fine.
I have tried by deleting the old image then trying upgrade using CNA, but no luck
CNA version is 7.5(6)
router: Cisco 2951
error: unable to connect
are able to connect to other switches, such as 2970 questions:
1. is there any configuration needs to be done to connect to 2951 though CNA?
2. is 2951 supported device in CNA?
With my brand new Cisco 3850 Switch, I got it configured with a LAN IP. Then, on my PC I opened up Cisco Network Assistant (version 5.8.5.1 which supports the 3850). I went to add the 3850 to the community by discovering the device, and was prompted with the user/pass box. The password I set was not allowing me to connect, and I realized it's because a username was required and I had not set up a username on the switch. So, I then configured an admin user with level 15 privileges on the switch. However, now when in CNA I try to add the 3850 to the community, it doesn't even prompt me for user/pass, it just says "unable to connect".
What do I need to do to add this 3850 to my community?
I have a Cisco 2948G switch that I am trying to communicate to through this program. It has both an IP address and is hooked up through a cable. I can get Cisco Network Assistant to come up and ask for it's Username and Password, and that it is where I am stuck! I have no clue as to what to put in there as a username and password? I do have a password setup on the switch to login in to it during terminal mode, but that is it.
View 1 Replies View RelatedI have a network running some 20 switches, two controllers and many AP's. All the devices that should be able to connect to cisco network assistant can successfully. However there is one switch that will show in neighbours but will give the message of “unable to connect to device” when I try and add it to the topology.
As far as I can see the config is identically to all other similar switches in the network. I can telnet from a switch (management VLAN) to the switch in question. However when I try to ping or telnet from the PC running network assistant (different subnet) I am unsuccessful. However I can ping/telnet to all other cisco device from this PC. The switch is a WS-C3560-48TS and I have included the config for firstly the switch in question and another switch of the same model and config that works correctly.
sho run
Building configuration...
Current configuration : 7363 bytes
!
version 12.2
no service pad
service timestamps debug datetime localtime
[code]......
Does the latest version of the Network Assistant support the AP1131AG / AP1131G model?
From the "supported device list" documentation it seems yes, but I've tried to import them into the map and received the message indicating that is not supported as a device...AP1242AG/1242G are not having this problem.
Is there any management software as the Cisco Network Assistant for smb switch as SLM224G or SRW224G4-K9-NA, or only works with models 2960 and higher?
View 3 Replies View RelatedI am trying to connect my Cisco 2911 router to my community in CNA. I can see the routers on the topology map, but when I try to add to community I get an error message stating that the router is unreachable (Unable to connect). I can ping device from ame client. I can view Device Properties for map (Device type: CISCO2911/K9). Telenet attempt to connect but we only use SSH for connectivity (the same as all of my switches that are connected to community). 2911 is listed as a supported router on Cisco site.
View 3 Replies View Relatedwhy Windows Server 2008 is not a supported OS for Cisco Network Assistant?I am currently evaluating switch management solutions for use with Catalyst 2960 and 3750 series switches, and would like to be able to backup and restore configurations, as well as make configuration changes. My management Server is running Server 2008.Is Prime LMS my only option?
View 5 Replies View RelatedI have two WS-C2950G-24-EI switches each of which were running software version 12.1(22)EA2-C2950-I6Q4L2-M. Both swtiches were viewable from Network Assistant version 5.6(3) and part of a community. I then updated the software on one of the switches to 12.1(22)EA14, and now Network Assistant will not add the new updated device to the community and gives an error of "WS-C2950G-24-EI is not supported as community member". Is the latest version (12.1(22)EA14) not supported by Network Assistant? The release notes indicate the Minimum Software Release is 12.1(22)EA4.
View 1 Replies View RelatedI have a Cisco PIX515E-R and I will like to set up a VPN tunnel together with a Netgear ADSL router. I want to access a network at work from my computer at home.
View 14 Replies View RelatedI have a routing problem here with routing in PIX515E version 6.35. I have some Client PCs located in the DMZ interface of the PIX515E, they connect to PIX using Cisco VPN Client (IPSEC VPN), after that these PCs can be routed to access Servers (static route) located behind Internal interfaces of PIX. I have some Servers located remotely having Internet Access, the gateway router remotely connect to PIX Outside Interface (Internet) using IPSEC VPN then routed to inside Interface (static route).
View 9 Replies View RelatedI have a PIX 515E UR which I would like to activate the VPN-3DES-AES license. I did find a link to register the license, but after following the link and logging into my old CCO account i found that as I didn't have access to anything, so couldn't complete the procedure.Is there any way that I can get the license activated? I bought the unit from a Cisco partner quite some time ago, but never needed the 3DES license. Now I do.
View 3 Replies View RelatedI'm having trouble in connecting a SG 300 switch with CCA v3.2. I have already connected the switch with CCA, however I can't see anything in my CCA's Front Panel and Topology view. Here is the view of my Front Panel view after I connect the switch ?
View 2 Replies View RelatedI need configuring a newly reinstated PIX515E with IOS 6.3 to test the configuration of a load balancer.I would like to setup with two Inside interfaces (or simply two interfaces) for testing. I just need it to pass traffic (basically HTTP and HTTPS) between these two interfaces without using NAT.The older IOS is causing me some problems. I don't have an outside interface configured for Internet access,but trying to connect via IP address does't work either. I may be able to configure a second DNS server for the 192.168.12.X network for testing purposes if needed. I even tried to set the default route to the Interface of the production ASA's inside interface (3.1), but that did not work either.
View 6 Replies View RelatedI just added a PIX515E to my lab (since this is a lab, if I need to change IP address, that is not a problem)....I thought I configured it right, but I am not able to ping any of my other routers/PCs.I have EIGRP on the other three routers, but not sure if I configured it right on the PIX.The diagram below shows my current network topology....(right now the PIX is connected vai Ethernet 1 to the switch, not the router itself) [code]
View 13 Replies View RelatedI just bought a used PIX515e. It is running version 8.0(3) and ASDM 6.1.5 Because I do not know the history of the unit, how can I tell if the image used came from cisco and not some download site? I guess I should've thought about this before buying it but hindsight is...you know. Worse case is that the person who had it before me dl the software that was infected with a backdoor or something else. I don't have a service contract so I'm kinda stuck.
Can I download the image from the firewall flash and compare a MD5SUM?
i have PIX515E firewall but i need to know through CLI how can i see the usernames for my VPN clients?
SH vpnclient? or sh ?
We are planning to upgrade the PIX515e (128 MB, 16 MB flash) adaptive software from 7.2(4) to 8.0.3(ED). In our environment the two PIXes are working in active-standby mode and experiencing high memory utilization.
1) What are the bug fixes(like memory leak fix) and new configuration options in the 8.0.3(ED)?
2) Is there any issues to upgrade 7.2 to 8.0.3(ED)?
3) Is the upgrade to new version software fix the memory utilization issue?
why the ethernet 3,4,5 is not licensed here ?
View 3 Replies View RelatedLooking to setup a backup router for our disaster recovery plan. We currently have a Cisco 877W that was setup by our ISP. I can log into the device with Telnet and a console cable, but I am not good using IOS commands, so I would like to use CCA. Unfortunatley, I cannot access the router using the software. I assume something is disabled in the config. Like HTTP or something.
View 1 Replies View Relatedi wounder why i'm getting such log message whenever i'm trying to reach my remote site: No translation group found for tcp src outside XXXX dst dmz ZZZZ, i have a Cisco PIX515E firewall and that message is captured there, the traffic is going through a VPN tunnel (the VPN are up on both ends)
View 2 Replies View RelatedWe have two PIX515E ( 6.3), one is Primary( Active) and second one is Standby. after configuration of Secondary Firewall as Standby. getting problem.
1. Configuration part everything is fine
2.we have done failover text also .
Aster Some time , we are not able see Standby Firewall its going down .
Quick question. I have a site - site tunnel that is up and running between a Pix 515E and a 3050 appliance.Tunnel is up and running but on the pix side I dont see traffic from a couple of subnets behind the inside interface.On the vpnallow access list there are no hits So I setup a capture on the inside interface to see if the packets is making it to the inside interface and nothing. There is some traffic making it thru the tunnel that would have to hit the inside int first and even that doesnt showup in the capture.
View 1 Replies View RelatedI have a PIX515E. I need to create a vpn to my clients office. PIX is alerady having two VPN, among two one is a dynamic VPN to a dynamic IP of netgear router.
It has two gateway(public IP). Configuration in MH2001 is pretty simple. and i have completed it.I have also completed configuration in PIX using ASDM. But the VPN is not up till now.
[code]...
I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can you review my config and make sure I have everything setup the way it is supposed to?
PIX Version 8.0(4)32
!
hostname pixfirewall
domain-name jkkcc.com
enable password DQucN59Njn0OjpJL encrypted
passwd DQucN59Njn0OjpJL encrypted(code)
I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can you review my config and make sure I have everything setup the way it is supposed to?
PIX Version 8.0(4)32
!
hostname pixfirewall
[Code].....
We have got an issue with an IPSec tunnel between Cisco PIX515E and Juniper firewall, the last one is managed by ISP. The tunnel is set up over the Internet.
There are a number of subnets running via this tunnel. The issue is that sometimes the connectivity between some of the subnet halts. So the users (and nagios) would report they can not access the service over the tunnel, while I would access the PIX over the tunnel by telnet just fine (from another side), then issue 'clear ipsec sa', and the connectivity would be restored. This happens randomly, one or few times a day.