I've got very basic problem but I cannot find the solution... I am sitting on the Cisco 4948E switch. And, I wanted to allow to guys who have not enable password to issue command sh running-config.I used the the following command to do that:SW4948E(config)#privilege exec level 1 show running-config.
View 3 RepliesI am experiencing a problem that when I telnet a router ip.It prompts for username and password.After entering username and password the router enter into exec mode with > prompt.But when trying to enter in privilege exec mode by typing en or enable it gives error:
"Translating "en" %unknown command or computer name.or unable to find computer address".
This problem started on removing easy vpn configuration which include aaa new model configurations. The router is in production environment and have remote and console access.
Is there a way to configure a ASA 5500 firewall so that when i access the firewall via SSH, my user is in privileged exec mode immediately after i have entered the log in credentials? So no need to enter "enable" anymore. I know how to do that with a router but couldn't figure it out for the ASA.
View 2 Replies View Relatedhow to straight away enter priv EXEC mode when authenticated for asr1002?? Using XR12000, it can be done but asr1002 have to input enable passwd...my username for asr1002 have privilege 15 and i want to enter priv EXEC mode straight away after login without asking the enable passwd.
View 4 Replies View RelatedI am currently setting up a 2800 Series router, and prefer a username/password type authentication rather than a single enable password. To do this, I did:
Router(config)# username <myuser> privilege 15 secret 0 <mypassword>
Router(config)# username2 <myuser> privilege 15 secret 0 <mypassword>
Router(config)# aaa new-model
Router(config)# aaa authentication login default local
This basically does what I want - when I connect to the router through console, it immediately asks me for a username and password. The thing is - as soon as I provide the right credentials, it takes me to USER EXEC mode (the default command mode). Is it possible to change that so that after entering the credentials, I go right into privileged exec mode?
Bonus question: As it is now, I just have no enable password, so when I login with my credentials, I issue "enable" to enter privileged exec mode without it prompting for an additional password. Is it safe to do it this way - having no enable password but requiring a username and password for login?
I have a switch 4948, with version 12.2.31.sga4 ( I dont found bug about monitor session) and we try to made port mirroring with a monitor session from a VLAN and port belong at this VLAN have traffic input and output, but in the destination port, I always see it output traffic..
Global command
Red-127#sh run | in moni
monitor session 1 source vlan 1127
[Code].....
Is there any chance the Wireless Repeater mode work with WPA2-AES ?If not, which model of AP should I buy to connect it with my wap54g as Wireless Repeater?
View 4 Replies View RelatedI downloaded all updates packages of the device for the Cisco View and I could not the show the image
View 1 Replies View RelatedI have a stack of 8 3750x switches connected via Stackwise. In addition, I have these switches configured as two Powerstacks. When I look at the Powerstacks, they are showing as being in power-sharing mode. When I look at the individual switches, they show as standalone. Right now, I have 1 switch in each powerstack that has two power supplies, and then the other three have a single power supply. Below is the output for "Show stack-power detail" as well as the Powerstack configurations.
Power Stack Stack Stack Total Rsvd Alloc Unused Num NumName Mode Topolgy Pwr(W) Pwr(W) Pwr(W) Pwr(W) SW PS-------------------- ------ ------- ------ ------ ------ ------ --- ---Powerstack_1 SP-PS Ring 2145 45 570 1530 3 3Powerstack_2 SP-PS Ring 2860 60 760 2040 4 4Powerstack_1-1 SP-PS Stndaln 1430 520 190 720 1 2
Power stack name: Powerstack_1 Stack mode: Power sharing Stack topology: Ring Switch 4: Power budget: 700 Power allocated: 190 Low port priority value: 20 High port
[code].....
When I click on to my wireless network list nothing shows up, but I use my work pc and about 20 networks show up. What is going on with my lap top.
View 1 Replies View RelatedI have a pair of ASA 5520 firewalls running in active/standby mode on 8.3.2.34 code. My configuration performs authentication/authorization into ACS 5.1, however command authorization is failing when I try to execute a command on the standby from the active unit...
failover exec standby dir disk0:/
Fallback authorization. Username 'adminuser' not in LOCAL database Command authorization failed
I don't even see the authentication attempt going into ACS.
I have a customer with a 861 ISR.I want to block all the privilege 0 users from access the enable command
If i telnet into the device, as a priv=0, enable does not work
If i telnet into the device, as a priv=15, enable does work
If i telnet into the device, as a priv=0, enable does not work
If i telnet into the device, as a priv=15, enable does not work
I have issued the command:privilege exec level 15 enable Should block everyone except 15's from accessing the enable command SSH and TELNET are on the same vty:
line con 0
login authentication local_authen
no modem enable
line aux 0
line vty 0 3
[code]....
Basically TELNET is following the rules ( priv=0 not allowed to access enable ) but SSH is not following the rules ( both priv=15 and priv=0 cannot access the command ) is there a way from blocking somes users from login in completely?
internet only work in safe mode?
View 1 Replies View Relatedhardware version D3, FW 4.10 and 4.11 same problem.
i tried with 4 wlan adapters: two of them support 802.11b/g, they always work find no matter which settings. the other two support 802.11b/g/n, as default "n" is enabled, so does DIR-615, both wlan adapters can be connected to DIR-615, they get their LAN-IP, but they can access neither DIR-615(no respone to ping) nor internet. but if i disable "n" mode either in the adapter or in DIR-615, everythin works fine, of course only with 54mbit max.
so what can i do to use the n mode?
I have a ASA 5510 that is connected to my ISP and the inside interface that is connected to my router. I have a /30 and need to determine if the configuration of x.x.x.121/30 which is my ISP and also the BVI address on the ASA. The inside router address is x.x.x.122/30 same subnet as my ISP will allow me to pass traffic. Management interface works using a different ip address but not able to get the traffic to pass traffic out to the internet thru the ASA
ISP-------->ASA-------->Router
Bottom Line is that I only have one usable address that is being used by the router and the ISP and ASA are using the other. Will this work?
I am doing some really rough budget numbers. What can I expect for a life cycle on some Cisco gear like a 2801 router and a 48 port PoE switch? Is 4 years pushing it too much? We usually don't upgrade unless something breaks.
View 15 Replies View RelatedJason9 i'm having the exact same problem as above, don't mean to hijack but I'm using talktalk isp, I have AVG 9.0 and have a static IP and forwarded the required port on the router.
View 19 Replies View RelatedSeems like there those saying they have gotten there DIR-655 and XBOX 360 Wireless N Adpater to work in 802.11n mode. The adapter will only connect in 802.11g mode (and yes I have the correct adapter). I have set the settings to following
802.11 Mode: Mixed 802.11n and 802.11g
Wireless Channel 2.462 ghz - Ch 11
Transmission Rate Best
Channel Width 20/40
WPA-Personal
WPA2 Only
Cipher Type: AES
Does this router really work with XBOX 360 Wirelss N Adapater. If so, how has others got this to work.
I have a DSL router Pirelli PDF A1000G.I have a Linksys e3000 and I have a dap-1522.When I bought a dap-1522 I thought it could do access point in fact i saw many videos in dlinktv before choosing an access point from DIY with mike etc to youtube there are 2 videos one showing bridged mode and another ap mode!Now what happens is this I have upgraded from firmware 1.11 that came as default to 1.21 i connect it wired to my linksys e3000 when it is connected with the ethernet cable wired I can connect to the internet and navigate and open sites and my ps3 can connect to it but my range is not very good only 40%!
Now I bring it downstairs remove the ethernet cable and connect it to the power and then you can connect to it but since it isn't connected to my router which is upstairs i can't access websites neither can I play on my ps3!I don't know does only ap mode works when it is connected to the router wired because what happens is if you don't put ethernet cables in the back of the dap-1522 and just connect it to power then here doewnstairs you can connect to the dap-1522 my signal is like 87% but while I'm connected with my laptop I can't access websites and in the ps3 I can't connect!
and choose access points there are (4) listed: dap-1522, dap-1160, dap-1353 and dap-2553, I thought of buying dap-1522 because it could support abgn while 1160 only supports g and 1353 only supports n to repeat to signal here downstairs and be a good access point!
I realized that when I connect dir825 on bridging mode to my current voip router provided by my ISP (dvg-n5402) ,shareport does not work as it seems to be using the default gateway to find the usb, which in this case default gateway goes to the gateway of my voip router. Is there any way that I can make shareport use the gateway of my dir825 instead?
View 5 Replies View RelatedI'm paying for 18 Mbps download speed, and my laptops and one desktop get this speed, but the computer from which I write only gets 5 Mbps. He didn't know why.I'm pasting my HJT and DDS logs, and attaching Attach.txt. Ark.txt will be copied to this also.
[code]....
I recently configured a Cisco AP 1242, software version 12.4, via the web interface using the default Cisco credentials. At that time I setup an administrator account with read/write access and changed the Cisco to a read only access. Now went I attempt to login to the web interface it won't accept the administrator password. It will except the administrator password in a telnet session however. So via the telnet session I setup another user with privileged exec level access and that wont work on the web interface either. The Login box keeps coming back requesting a password. Strangely enough, I can login to the web Interface using admin username, with the Cisco password; but I can't do anything, and I also can't view everything. I've tried the following:
I've turned on SSH and created a certificate in the AP, but the login box continues to pop on the https://url.I've attempted to setup a user with a non-encrypted password, but have been unsuccessful.I've tried a different browser - login box continues to pop.I've made sure the web interface is activated in the API've tried a differnet computerI've tried disabling password-encryption service. Reset the enable password , I've successfully setup other 1240 APs but must have done something wrong on this one.
We are deploying a new office and exploring the options for WLAN deployment. We were pretty impressed with 3500 series APs and that it supports CleanAir.However, we have decided to go for standalone AP deployment model now. As 3500 does not work in standalone mode, so we are looking for APs that can work in standalone mode ( and later can be converted to lightweight if needed). We can go for 1140 in that case. However, it would be better for us to know the main differences between features supported by 3500 lightweight AP and 1140 standalone AP. CleanAir looks like the main one. Are there other important ones as well?
View 2 Replies View RelatedI have purchased 4 of these devices about 2 months ago and have experienced all of the issues reported within this thread. The came with the 2.0.0.5 FW rev installed, so unless the 2.0.0.5 on the cisco DL site is different, nothing I can do with that.I've tried making them work as stand alone AP's, Bridge<-> Bridge, etc... all modes seem to lock up eventually needing a reboot to get any functionality back.Ultimately, I need to make them work in AP<->Client-Repeater mode. I've not been successful in making them work in any mode for a prolonged period of time.
having just rfound this thread today, I have not tried hard coding the NIC's to 100/full, but will give it a try. If it works, great, but then that would defeat the purpose of buying an N radio AP. I would like the potential 300Mbps throughput.
I have an extended acl on my VLAN interface in bound and it is working like I need it to, securing one side of my network from the other allowing only what I want from my desktops to my servers. The acls look something like this:
vlan70 -----> inbound acl (allows 80/443) ---> vlan100
I need vlan100 to have access to something on vlan70 now and I cannot get it to work. My question is would this work?
vlan70 -----> inbound acl (allows 80/443) ---> vlan100
vlan100 <----- outbound acl (allows 9100) <---- vlan70
Traffic is initiated from vlan100 not from vlan70 then back through so an established rule does not work. Also there are many more ports open in my inbound acl but this is simplified for ease of reading.I want to make sure if I place both an inbound and outbound rule on my vlan and that it is in the right place, both on the same vlan.
I have an ADSL Modem WAG200G Annex A, with latest firmware. I recently purchased a Linksys E2000 to upgrade my wireless to N, plus to get 4 gigabit Ethernet Ports for my NAS.
The problem is, I set WAG200G to "Bridge mode only", and from within E2000, I provided PPPoE credentials (user name and password), it does not work, no Internet connection!
Normally, with the WAG200G, PPPoE credential is set as followings (and it works)
Type: PPPoE Multiplexing: LLC Virtual Circuit: "0" for VPI (0~255) and "33" for VCI (0~65535) "Keep Alive" option
on E2000 Router, PPPoE does not have the above option for me to select. Only User Name and Password field
access-list <#> permit/deny <protocol> <sourceAddress> <sourceMask> <destinationAdd> <destinationMask>Say I applied an ACL inbound on Fa0/0, would the source address be the outside the LAN?So if took the same ACL and applied it as outbound, would the source need to be change to an IP inside the LAN?I am a bit confused by the data flow I'm seeing in packet tracer simulation mode to. I set up an ACL for testing purposes "access-list 199 permit ip 193.20.30.0 0.0.0.63 any" set as inbound, the idea being it permits any traffic from the .0 subnet.When I watch the packet in the simulation, it makes it to the destination address then is dropped by the router on it's way back out to the sender.
View 4 Replies View RelatedWhat 113X AP model will work in Autonomous and LightWeight Mode? I want to buy some 113X AP's for my lab and want to make sure I don't get stuck with the ones that only run in one mode. I am looking at buying this one AIR-AP1131AG-N-K9 802.11a/b/g. Will this model work in both modes?
View 1 Replies View RelatedI have 10 new AIR-CAP3502I-A-K9 connected to a WS-C3750X-48PF-L switch. 8 of the APs power on and connect perfectly, but two are problematic. Both devices are granted power, but they never go past the stage of getting power from the switch. A look at POE shows: [code]
Where the AP that is not working is connected to Gi1/0/4. The interface shows down/down. I've tried shutting the interface, removing power, cdp etc.
Are there any other tricks you can think of to get it working or would you say that it's 2 faulty APs? I am not based at site unfortunately so I cannot console to the APs and check them out.
I'am using router E1500 in a bridge mode (aka WiFi access point N standart). I want have two chanel transmitions, but i see only one chanel. In a specification write 2T3R (up to 300 Mbps).
View 6 Replies View RelatedI'm trying to configure my WAG200G to work in bridge mode so that it can transfer my external IP address to my ISA server.My network map is very simple,Internet -- WAG200G -- ISA Server -- LANCan
View 7 Replies View RelatedUsually, when I connect to nearby game servers I would have 10 - 60 ping. However, recently my NETGEAR CG814WG stops working randomly (The lights are all on, I can connect to it, but there's no internet connection) and I have to reboot it. (I had this router for a bit longer than a year, by the way)Currently I get around 80 - 300 ping connecting to servers in sydney. Ping directly from my router:
Ping statistics:
Pings sent: 25 (4 per second); Replies received: 25 (4 per second)
Bytes sent: 1600 (266 per second); Bytes received: 1600 (266 per second)
25 replies passed verification (0 failed)
Min time: 10 ms; Max time: 400 ms; Avg time: 132 ms; Total time: 6090 ms
When I reboot the router it has low ping (~30) for a minute or two but then the ping increases.
I have a CSS 11503 with a basic content rule for TCP 10000 going to a few backend servers. I was looking into the default timeout values for flows and when testing using telnet the flow didn't terminate as expected?
For example, i have no 'timeout multiplier' specified in the config and when i look at the output of 'show flow-timeout default' it tells me the default 16 seconds timeout is in effect for *. With that in mind, i telnet to the content rule vip on TCP 10000 and on the backend server using wireshark i can see the TCP threeway handshake. With no data passing i'd expect the CSS to terminate this flow after 16 seconds.. yet it takes exactly 128 seconds before wireshark shows the RST and the flow is terminated. 128 being 8 times the default 16 second flow timeout.
If i try to force the connection to close early by specifiying 'flow-timeout-multiplier 2' in the content rule, or even a multiplier of 40, it still waits 128 seconds to close the telnet connection.