Which transmit hash policies are supported by the SLM2008? I can't find this information in any of the documentation for this switch, all that is stated is that it supports Link Aggregation using IEEE 802.3ad LACP. I'm connecting to a Netgear ReadyNAS Pro that supports Layer 2 and Layer 3+4 transmit hash policies and I'm not sure which to choose (or whether it matters).
View 2 RepliesI have an E4200 v1 wireless router, F/W 1.0.04.
Article ID 4041 [URL] says I can have up to 10 Internet Access Policies but the web based GUI has a pull down with only 5 possible.
Is 10 policies possible? If so, how?
I would like to edit .cfg configuration file of Cisco SLM2008. However, I can't read the file because I don't have a good editor(.cfg is a binary file).
View 1 Replies View RelatedI have just attempted to load the latest firmware on an SLM2008, everything appeared to work as expected BUT, the switch is no longer pingable on its static IP doesn't appear to have attempted get an address via DHCP. I have attempted power cycling the switch but it has made no difference. The switch is still switching but I have no management any more. What to do next ?
View 1 Replies View RelatedI had a SG200-8/SLM2008TNA switch that I was using on my lab network (192.168.9.x)One of my clients had an emergency so I moved the switch to their network (10.1.2.x)I can't see the switch at all! Cisco FindIt toolbar won't discover it (other switches on the client network are discovering OK)I changed my computer's IP to the range where the switch used to live...still can't find it I also don't see any new devices in DHCP with cisco-looking MAC addresses.Of course, the SG200-8 doesn't have its MAC address printed anywhere on it, and doesn't have a factory reset button.It's passing traffic OK but I was hoping to get it configured via web console and set for SNMP monitoring. how to discover/reset IP/factory reset this thing?
View 2 Replies View RelatedBoth the SLM2008 switch, and the AP1262n-a-k9 are currently at factory defaults. I can web into the switch from my laptop, but when I connect one of the 4 AP's I am trying to set up, the switch doesn't see it.
View 4 Replies View RelatedI'm new on this site and having SLM2008 switches. I've been trying to solve the problem for quite a while, but so far I was unable to solve it. So here it is:
I'm trying to send IP TV from ADSL box (aka Free box) located in a small annexe of the house where the telephone line enters. Whole house is wired with 1Gb CAT6 cable. I'm using this wiring to get internet connectivity in different parts of the house and this works great. Now the idea was to create a separate VLAN on my 3 SLM2008 switches to get IP TV stream from ADSL box to the media box (also provided by ISP, aka Freebox HD). Different V LAN configs did not work for me: Free box HD would stuck on boot claiming it doesn't "see" the network. So then I've decided to go from simple things to more complex and removed the V LAN (came back to default config) and connected ADSL box with Free box HD with just one SLM2008 in between. Surprisingly it did not work! Same error on Free box HD! So I plugged the hub and started my Wire Shark to see what is going on.
First tried without the switch (just with a hub in the middle) and I saw successful connection:
1) Freebox HD send DHCP Discover
2) ADSL box responds with DHCP Offer
3) HD sends DHCP Request
4) ADSL issues a DHCP lease
Free box HD is ready to show any channel from ISP.
Secondly I plugged SLM2008 back and looked at traffic right after ADSL box: No DHCP packets seen at all! Then I moved hub next to Free Box HD and I saw it keep sending DHCP Discover every 30 seconds or so.... And it was not getting reply back.
So my conclusion is that SLM2008 for yet unknown reason would not let DHCP discover pass.... I've tried un managed Net Gear switch and *boom* Free box HD booted without a problem. I looked through SLM2008 settings and I have not found something relevant.
How to make my switch pass DHCP discover? If yes my next question would be how to configure V LAN on 3 switches to make it deliver IP TV to my TV set.
I have the E3000 wired/wireless router and want to be able to manage my two SLM2008 switches with 192.168.1.253 and .254. Following the guides with adding vlan 2 and tagging the ports in which the two switches are wired together disables my ability to manage them seperately. I have added the gateway on 192.168.1.1 to both switches and told them that management vlan is 2 but no luck accessing them still.
View 1 Replies View RelatedHow the one-way hash is generated given the challenge number and shared secret password?It's just that I was reading Cisco 3 chapter 7, and it doesn't explicitly outline how the one-way hash is actually generated, it simply states that it is generated given the challenge number (randomly generated for every challenge message) and the shared secret password.
View 1 Replies View RelatedIs there any other way to configure the checks using the hash value of an application instead of register key ??? I have read and confirmed that the hash value does not change never. Its the same value....But I did not find a way to configure the rule on the CAM.... ? By the way I am using Cisco NAC 4.8.2
View 3 Replies View RelatedI connecting to a Cisco ASA 5500 using a third party IKEv1 client. The initial connection and all rekey attempts that start on the client are successful. A tunnel is established, data cna be transferred between the client and the ASA's internal network etc.However, when the ASA initiates rekeying of a Quick Mode SA this is rejected on the client. The rejection occurs due to QM3's HASH payloading having a length of 4, which is wrong.
ASA log:
ISAKMP Header
Initiator COOKIE: 48 81 9e 1b 80 94 41 a9
Responder COOKIE: fa ab 87 c7 a5 d9 8d 35
Next Payload: Hash
Version: 1.0
Exchange Type: Quick Mode
[code]...
Since the initial negotiations work, pre-shared key, IKE/IPsec settings etc should be correct; if they weren't the connections wouldn't work in the first place.
What's type of ACS v4.2 Database password hash?
example:
-------------------------------------------------
Name : ###postureuser
Password : 0x0020 fe fc f0 11 24 dc dd bd 0f d9 78 56 b8 4a fc f4 40 d0 bd 1d 19 5b 56 7e 14 f0 4e 1a b0 83 66 24
Chap password : 0x000e 22 07 e4 28 c0 09 7f 1a b7 e6 2a 78 a1 52
-------------------------------------------------
So, I spent some time this weekend troubleshooting the issues I've had with the new SG300-28P switch and POE to many of my devices in the office. As a recap, I cannot utilize all of the 24 POE ports on the switch for POE purposes. Really only every other port [with a few odd combinations thrown in between]. In addition, the SG300-28P switch, on occasion, is sending POE to non-POE devices [e.g. my Ruckus Zone Director 1106].
Here are my POE devices [all 802.3 af-compliant]: 3 Ruckus 7982 access points1 Pakedge access point2 home-automation controllers2 Polycom voip phones I called Cisco support several times in regards to this problem, and they figured it was a hardware issue - a faulty switch. So, Cisco sent me a replacement SG300-28P, which I hooked up today. The exact problem still occurs. Default configuration [fresh out of the box]. No way I can land, for example, the 3 Ruckus 7982 AP's on ports 1, 2, and 3 [or ports 1,13, and 2]. I have to put them on ports 1, 3, and 5 in order for them to power up. In addition, I can't plug any other POE devices on the ports either between or below them. I had to skip another port bay. This is very odd behavior!! Two Cisco SG300-28P's in a row with the same problem.
However, I also had one of the new Cisco SG300-10P switches in my possession for a recent project of ours. I decided to hook up the same POE devices to this switch. ALL POE devices were recognized and worked! No need to skip a port. And it didn't matter what device was plugged in first or not. I am now convinced that it is either a hardware issue [bad power supply/transformer?] inside all of the SG300-28P switches, or a firmware issue.
Both of the SG300-28P switches were running firmware 1.1.2 [the latest on Cisco's website]. So, I decided to install an older firmware version on the SG300-28P switch that I'm returning [installed 1.1.1.8]. Here's what I found out. I could then plug 2 POE devices [e.g. two Ruckus AP's] in adjacent horizontal ports, but not three in a row. In addition, not all adjacent ports. It's funky. For example, I could plug an access point in ports 20 and 21, but not in 21 and 22. No rhyme or reason in how it worked. And I still couldn't plug an access point in adjacent vertical ports [e.g. ports 1 and 13]. BUT...
It's interesting that the same exact switch that would not initially allow 2 horizontally-adjacent POE ports to be utilized WOULD allow 2 horizontally-adjacent POE ports to be utilized when running a different firmware version. It's also interesting to note that when plugged into a "non-working" POE port, the SG300-28P would actually make a small whining noise. Very subtle noise; I could hear it when approx. 1ft away from the switch. The noise was not noticeable when ports were skipped [and POE actually worked]. Therefore, I believe that Cisco has some SG300-28P firmware bugs [at least in the last two versions of firmware] that is not truly allowing all 24 ports to utilize POE correctly. This problem does not exist with the SG300-10P switch.
In addition, I'd like to know when they think a solution could be created if it's firmware-related. If hardware-related, I don't think I'll be recommending any 28P switches in our projects. Perhaps just the regular SG300-28 with a separate SG300-10P. It's a shame because the SG300-28P is more of a bargain when compared to the two separate components.
I have a CiscoWorks LMS 2.6 and i would like to know if the new Switches Catalyst 2960-S Series are supported with this LMS version?
View 1 Replies View Relatedwhat are all the CLI commands supported by Cisco SFE 2000 switch?
View 2 Replies View RelatedI know the white papers say that the RPS 2300 supports the 3750-E series and the 3750 series, but we have 3750-G and -X series. Wanted to make sure that these switches are supported and if we need anything special?
View 3 Replies View RelatedIs WAN Optimization supported on Cisco ASA5520 Firewall and Cisco 3750 Switches. We need to add/enable WAN Optimizer functionality to make 3PAR data replication?
View 9 Replies View RelatedSFP-10G-ER are not supported on Catalyst 3750-X and on other switches ....
%PHY-4-SFP_NOT_SUPPORTED: The SFP in Gi1/1/1 is not supported
Why ?When will ER be supported ?
We have the 3750G with the IOS version 12.2(35)SE5. Does this IOS version and switch support the TCP Window Scaling detailed in this doc? The doc says Release 12.2(8)T. And I don't see the 3750G or the 2960G platforms listed in the doc.
[URL]
What all the catalyst models support VPC with Nexus ? I knew Cat6K and 3750. Any other model supports VPC ? Can I configure vpc between 2960 and N7K ?
View 3 Replies View RelatedIs it possible to assign 2 ports to a vlan on this switch and have the 2 machines connected to those ports be able to see each other without having to go off of the switch? If so, how would it need to be setup on the switch?
View 4 Replies View RelatedI have two 5508 and a few hundred 1142 in our internal net. Now I bought some OEAP 600 to do tests in some small branch offices, but I would like to enable AP policies with MAC filtering to block that anyone else can connect an OEAP through our firewall. If I enable 'Accept Self Signed Certificates (SSC)' and 'Authorize MIC APs against auth-list or AAA' as suggested in Cisco document 'Aironet 600 Series OfficeExtend Access Point Configuration Guide', will that effect only my OEAP 600 or will I have to also include the MAc addresses of my internal 1142?
View 2 Replies View RelatedWe have two device groups ASAs for VPN accessWireless ControllersThere are 2 AAA devices in each group.
We have 4 Identity Stores
ACS Internal User Store - This is used for external suppliers doing SSL VPN on ASAsExternal Radius server - this is a two factor authentication server that in turn looks up our AD and its own internal token database. This is used for IPSEC VPN access for internal employees.We have mapped AD groups - this is used for allowing access for wireless users.LDAP group mapped from other AD domain - used for allowing wireless access to an associated organisation.
Our requirements
We need to create a rule for the VPN access that first of all looks through the ACS internal store - if a user is not found there then it checks the external Radius server. If no users are found there then access is denied.We needto create a similar rule for wireless users so that it will check AD - if a user is not found there then it checks LDAP. If no users are found then access is denied.
I've got an ASUS G50V that I normally connect to the net through a wireless router but I recently bought a router so I can make a physical connection and increase speed. However I cant get it to connect to the router no matter what I do (i had it working for a few hours at one point but it dropped off again).I confirmed it wasnt the router but running a crossover cable from the laptop to my desktop, setting static ips on both. Now I can ping the laptop from my desktop but for some reason I cannot ping the desktop from the lappy. I've tried everything I can think of but no dice.
View 4 Replies View RelatedI recently bought a Nintendo 3DS but unfortunately my University's wireless security (WPA2 Enterprise) is incompatible with the system. As such, I was looking for a way to transmit a wireless signal from my computer, and place an alternative form of security onto it (such as WEP), so that the 3DS can connect to it.
At the moment, my desktop is connected via ethernet cable, which plugs directly into a wall socket. I'm pretty unsure as to what to use, I've heard of things such as 'wireless bridges', but I'm not sure how they work. Also, I'm looking for the device to transmit a signal even if my desktop isn't turned on. Is a router my only option?
i have ipod but i dont have wireless modem i need software thats work from my pc as wireless modem
View 2 Replies View RelatedI am trying to configure a Unified Wireless solutions with ACS 5.1 and am having trouble with the access policies. We have corporate laptops authenticating via PEAP and 7921 phones authenticating using EAP-FAST.
I have one access service configured to allow PEAP and authenticate against AD and another access service configured to allow EAP-FAST and authenticate the 7921 phones against the "internal user" database.
I have configured 2 service selection rules. Each one points to one of the access services. The only condition I have currently configured is the "protocol" field to be RADIUS. Because both the 7921 phones and the client laptops are generating RADIUS requests I can only have one EAP type working depending which rule is at the top. Because the RADIUS protocol field is always matched, requests never get past the first rule.
how I modify the rule to be able to distinguis between VoIP handsets on one WLAN and client laaptops on another so that correct access policy is used for each device?
A bit of a Catch-22 here: I am trying to delete VPN Group Policies but receive the error message that the policy is in use by a particular Connection Profile. When I try to delete the Connection Profile I receive the message that it is in use by a VPN Group Policy..
What else is there to delete or do I have to use the CLI?
Using Microsoft IAS as the auth server, how do I get the ASA (v.8.2.1) to take different user groups defined in AD, and control access to different group policies on the VPN? We're setting up the ASA for many different vendors, and need to control access for each vendor with different policy.
For example, Vendor one is in AD group Vendor1 and will only be permitted access to a specific group of defined IPs in our network. Vendor two is in AD group Vendor2 and will only be permitted access to a different group of defined IPs in our network from Vendor1.
We have a major poblem going on with our VPN router.We have a 7206vxr router which has an mGRE tunnel forming EIGRP neighbourship with about 800 remote locations using GRE over IPsec.
We have a problem where the EIGRP neighbourship keeps flapping intermittently and this happens to 30-40 locations at one time and very frequently.What I noticed was that the GRE tunnel transmit bandwidth was showing as 8 Mbps. I guess there is an option to change it.Will this 8 Mbps limit cause any issues of EIGRP neighbourship flaps and will increasing the bandwidth useful.
We are also seeing output drops on the tunnel interface.
pcvpnstore#sh int tu0Tunnel0 is up, line protocol is up Hardware is Tunnel Internet address is 10.254.254.254/16 MTU 17912 bytes, BW 30000 Kbit/sec, DLY 50000 usec, reliability 255/255, txload 244/255, rxload 110/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel source x.x.x.x (GigabitEthernet0/2) Tunnel protocol/transport multi-GRE/IP Key 0x328CDF, sequencing disabled Checksumming of packets disabled Tunnel TTL 255 Tunnel transport MTU 1472 bytes Tunnel transmit bandwidth 8000 (kbps) Tunnel receive bandwidth 8000 (kbps) Tunnel protection via IPSec (profile "dmvpn") Last input 00:00:00, output never, output hang never Last clearing of "show interface" counters 00:17:06 Input queue: 0/800/0/0 (size/max/drops/flushes); Total output drops: 732
I have a client(C) and a server(S) nodes plus an intermediate node(I). Each node has a public IP. What I want to do is to transmit some data(whatever) from C to S but this data to go through I. So C ---> S will become C ----> I ----> S. I read something to create a tunnel(ip add tunnel) between C and I and add a route between them ? I tried different examples but did not work at all.
View 2 Replies View RelatedI need to transfer live video and if possible video from station A to station B over wireless network. So what are the hardware requirements and setup cost...
Secondly how should i connect my CCTv cameras atleast 5 to computer's webcam so that i can transfer video over internet.
With firmware 2.06 my DIR-600 had transmit power choices 100%, 50%, 25% and 12,5%.(even 12,5% gave me excellent strength on all my devices, what is really the difference)But after updating to firmware 2.11 (via 2.10, othervise my DIR-600 refused to use 2.11)the choices for transmit power is now only "High", "Medium" and "Low". know the percentage values for those three settings?
View 2 Replies View Related