I just find there is no "Crypto key generate" command line in my Catalyst4506-E with cat4500e-universal.SPA.03.01.01.SG.150-1.XO1.bin image. Is there any other command I can use to enable ssh access? this command is always able to use on other catalyst switch like 3750X.
View 4 RepliesI recently rebuilt the configuration of our Cat6500 multilayer device for use as a user stack. The device is funtioning as it should be, but I am unable to set SSH using the 'crypto key generate rsa' command. The crytop command isn't avaiable at all, which suggests a firmware issue.
I have configured a hostname and Ip domain-name and the image is the only one available.
The show version output is listed below.
show verCisco Internetwork Operating System SoftwareIOS (tm) s72033_rp Software (s72033_rp-IPSERVICES_WAN-VM), Version 12.2(18)SXF12, RELEASE SOFTWARE (fc2)Technical Support: [URL] Copyright (c) 1986-2007
[Code].....
I am unable to generate bug summary report in RME. Even I can not generate PSIRT report as well..LMS always gives error "incorrect cisco.com credential. enter correct credential" I have checked my credentials are correct... it gives me error no BTKT:0014..I am using LMS 3.1 attaaching snap shot of my patch level and application version running on LMS...
View 3 Replies View RelatedI have a WCS server running the version 6.0.170.0. I have already added few WLCs running the version 7.0 to this WCS. It is working fine. And now I have added two new controllers running the version 7.0.98.0 to the existing WCS server. When i add the floor layouts to the WCS and position the access points from the new controllers, the heat map is not generated automatically.
View 2 Replies View RelatedI have installed the six new WAP with model Cisco AIR-SAP2602I-E-K9, and we have two SSID for the new WAPs. When the users are connected to this WAP they can able to access the intranet but not able to access the internet. What could be the problem? I have checked and verify that they can able ping to the IP address of google from the CMD but when try from internet explorer they are fail (both with www.google.com & with IP address of google).
View 2 Replies View RelatedI am using a Cisco SG-300 28 port switch in layer 3 mode as my default gateway for all my devices. I have two vlans on the switch, vlan 1 and vlan 4. Both are pulling valid IP addresses in their scope from the DHCP server, and both have valid DNS settings. I set a static route to the Internet on the switch to our firewall (192.168.5.254). All devices connected to vlan 1 are able to access the Internet, however all devices connected to vlan 4 cannot get past the switch. A tracert from one of these devices shows it hits the switch as the gateway, but gets no further. [code]
View 4 Replies View RelatedUnable to access switch from outside the local network. Can get to all routers and PC's
View 2 Replies View RelatedI have 2960 switch and i can't access it using my console cable .I can access other switches in my network ( 3560 & 2960 ) but i can't access only this switch.may be the console port in the switch damaged? or it's a bug ?? !!! although the switch is worked normally.
View 11 Replies View RelatedI am having trouble trying to configure my cisco 2509 cisco router for access server. I have two guides shown below: URL and URL
However I am running into some problems. I can go through the second guide up until it asks me to do this command
Step 5: Configure the transport input protocol on the async lines to Telnet.
Access_Server(config-line)#transport input telnet
I cannot put in Transport Input, I only have the option of doing Transport Output let me show some lines from my console:
---------------------------
Access_Server(config)#line 0 14Access_Server(config-line)#no execAccess_Server(config-line)#transport input ?% Unrecognized commandAccess_Server(config-line)#transport ? output Define which protocols to use for outgoing connections preferred Specify the preferred protocol to use
Access_Server(config-line)#transport
------------------------
Im not sure whats going on. I have two routers(cisco 2600 series) plus my 2509 cisco router I am going to use for a access server. I have a two switches 2950 series and I have the access server connected to all of them via a octal cable.
Here is the configuration from the access server:
--------------------------------------
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-IS-L), Version 12.3(26), RELEASE SOFTWARE (fc2)
Technical Support: [URL]
Copyright (c) 1986-2008 by cisco Systems, Inc.
Compiled Mon 17-Mar-08 14:39 by dchih
cisco 2509 (68030) processor (revision M) with 14336K/2048K bytes of memory.
Processor board ID 22840809, with hardware revision 00000000
Bridging software.
I have one issue on Vlan in Cisco 3750X switches , I have 2 Offices , I am sitting at corp OFfice and i have one 3750 ( 10.10.1.36)Switch at my location , in my remote office i have one more switch 3750 ( 10.10.33.1) and i am able to access the both vlan IPS with out any issue , now i have some network components in Vlan33 ( 10.10.33.1) at my remote office . i am able to ping 10.10.33.1 IP from my corp office , but i am not able to ping any network devices in 10.10.33.5 example : 10.10.33.5 is my Cyberoam IP at remote location and i am not able to ping , i have taken a trace route and not able to find the issue as i am not much femilar , ping 10.10.33.5 at remote location devicec
I am giving the Configuration for both locaitons below :
10.10.1.36 - Corp Office 3750 Switch:
sh run
L3-#sh running-config
Building configuration...
[Code].....
I have configured vlans in 3560G switch but vlans notable to accessing Internet
View 6 Replies View RelatedI have setup a home lab for my CCNASecurity studies and have purchased a 2511 to serve as an access server. The 2511 was advertised as fully operational but when I powered it up this is the first error message I get.....
ERR: Invalid chip id 0x80B5 (reversed = 0x1AD ) detected in System flash
From my research it appears this may have something to do with an old ROM and newer flash, here is the ROM info....
System Bootstrap, Version 4.14(9.1), SOFTWARE
Copyright (c) 1986-1994 by cisco Systems
2500 processor with 16384 Kbytes of main memoryHere is the info on the IOS..
[Code].....
Could this be a simple as a ROM upgrade which I have found on eBay for $10.00? Or do I have a larger problem?The boot continues appearing normal until it gets to ....
%SNMP-5-COLDSTART: SNMP agent on host Terminal is undergoing a cold start and then completely hangs.
I not able to access cisco 2811 router (AC operated) through console port when I try to access it by selecting COM Port, but I able to access by selecting the TCP/IP option.
View 5 Replies View RelatedWe recently purchased Cisco 3560X Layer3 Switch. We need to perform simple Inter VLAN routing. We have configured VLAN1 (name-server_vlan) and VLAN2 (name- user_vlan). We have also assigned the Ports and IP address to both the VLANs. After assiging this if we plug Laptop A into VLAN1 then it doesnt communicates with Laptop B (btw, Laptop A is able to Ping VLAN2 Gateway ) in VLAN2 but on the other hand Laptop B is able to communicate with Laptop A and ping everything i.e. Gateway of VLAN1.
View 17 Replies View RelatedI have bought Cisco ISR 881 C880DATA-UNIVERSALK9-M with c880data-universalk9-mz.150-1.M7.bin ios.
command "show ver" tell me:
License Information for 'c880-data'
License Level: advsecurity Type: Permanent
Next reboot license Level: advsecurity
So I have advsecurity. On cisco site there was a thing URL
"Table 5. Cisco IOS Software Features on Cisco 880 Series: Advanced Security Feature Set (Default)"
that tell me I have RIP protocol to use. But when I type "router rip" command and sub router sommands like: network, passive-interface, redistribution. There are no in runnning-config such things after all I've done. It have not been saved.
then the command "show licence":
#show license
Index 1 Feature: advipservices
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
I need even RIPv2 to have simple routing information to exchange.
And I don't know. Cisco 880 series is G2 or G1. Cisco ISR beginning from 890 series is G2. About 880 I don't know. There no informanion about it or at least I have not found it yet. On one 891 is the same problem. When I type "router eigrp 1" everything is great. But when "router rip" - do no work.
I have a 6513 with redundant sup 720-3B's that I cannot get onto. In short, one of the power supplies failed, it still passes traffic but I can't console or ssh to the box. Other than the two sup 720's, I have a 4 port 10gig card, a 16 port GBIC Card and an IDS module. I have tried removing the 10Gig, IDS and one of the sup's but still don't get anything on the console. I have rebooted the entire chassis and don't get anything on my console while booting. I have tried changing the speed of my terminal to every setting available incase someone has changed it at some stage but to no avail. I have tried swapping sup's, using only one at a time in the chassis but not getting anything. Is there anything else I can try to get onto this chassis? The power supply is a 3000w with a 32amp input. The failed power supply had tripped a switch, when i brought it back up, the power supply came out but the output failed LED is on. My #questions are, is there anything else I can do to try get onto the console, and is the power supply goosed when the RED LED is lit? I have reseated the power supply also but the same result.
View 2 Replies View RelatedI have 2 routers, one is an Apple AirPort Extreme with a static outside IP address, I also have a Cisco 871 with a static outside IP address. The Airport Extreme connects to a switch on the private network and has an IP address ending in .1. The Cisco 871 connects to the same Private network and it ends in .2. The 871 is setup as a VPN Server. now when clients connect to the VPN they can ping the VLan IP Address on the 871, but they can t ping any other hosts on the smae network. The hosts on the private network can ping the vlan on the 871.
View 7 Replies View RelatedI just tried to upgrade my Cisco 2600XM router from 12.3-6 IOS to 12.4-25d IOS, but I was unable to start the router with this new IOS.
flash:c2600-ipbase-mz.123-6.bin (old IOS)
flash:/c2600-ipbasek9-mz.124-25d.bin (new IOS)
=================================================================
Output sh flash
=================================================================
System flash directory:
[Code].....
I'm been telnetting onto a 2955 and then upgraded the IOS and enabled ssh version 2 and then issues a "write", when I came back the exec-timeout had been issued and I was logged out of the router and now it is asking for a username and password and not just a password liek it did before enabling ssh. I havent yet put a username and password on yet, just the telnet.What would the username be if I havent set one?
View 12 Replies View RelatedWe have a 3750 and a 3560 defined as a layer 2 switches. One gig port on each switch is trunked to layer 3 switches, which containall the VLAN definitions etc. The other gig port on the 3650 and 3750 switches are trunked together to provide an alternative path in the event of a failure.
We have added a new device to the 3750 and given it a VLAN 9, and the VLAN added to allowable VLANS on both trunk ports between the layer 3 and layer 2 devices ie:
switch port trunk allowed vlan 9,10,20,30,40,50,60,90,200,202,206,211,212,700.
From either of the 3750 or the 3560 we can ping any device on any VLAN on any switch in this group with exception ofVLAN 9. We can however ping the ip address of VLAN 9 on the layer three switches.
I have an issue with a customers 6503 with Sup-2T cards, where we are locked out of the console due to an authentication configuration error. So tried several times to get the card into rommon, with no success.
Checking through the various documents on CCO I dont find any reference to rommon on this card, but do find information on using the CMP to support the supervisor. I logged into the CMP but couldn't find a way from there to do a password reccovery either.So, is the `normal' IOS rommon/password recovery method supported.
I can see the boot file at 192.168.100.1 but I can never get into the GUI. The unit boots up, fans running. Eventually the power light flashes red. I don't have the unit hooked up to anything else except a laptop to try and configure it.
View 0 Replies View RelatedThe Nexus 5548 is running 5.1.3.N2.1a and has the L3 daughter card (N55-D160L3)I have the EIGRP feature enabled. By the way, when doing a 'sh feature' four EIGRP features show up like this: [code] To create the L3 SVI, I go into config mode and attempt to type 'interface vlan 10'. but this doesn't work. These are the only options under the keyword 'interface':
- ethernet
- loopback
- mgmt
- port-channel
I must be missing something simple but can't seem to see what that is. What do I need to do in order to create an L3 SVI on this 5548?
Interestingly enough I've seen about 3-4 posts with the exact same problem and yet not a single one is ever answered.. The task is simple:
"username USER password 5 SOMEPASS role network-admin"
It consistently outputs: "String failed to match token pattern at '^' marker." - always the carat is at the first character in whatever password I input. I've ensured passwords I input meet the conditions of "password strength-check" and I have also disabled this feature and repeated with numerous passwords to no effect.
I just barely put in a Cisco 3925 on our network. I've configured gigabitethernet 0/2 to live on our management VLAN with an IP address of 10.129.0.31/16. I did a "no shut" on the interface. Everything should be ready to allow me to ping and/or SSH to that interface but I can't. It's really weird because I've done this a thousand times (at least on ASAs). I must be missing something. At any rate, the default gateway of the management VLAN is 10.129.0.1. I can ping that from the router. I can also ping that from my laptop (which lives on a completely different VLAN). But I can't ping the router from my laptop or vice versa.
Building configuration...
Current configuration : 1360 bytes
!
! Last configuration change at 19:05:13 UTC Thu Jan 10 2013
!
[Code].....
I have a vlan defined in FWSM for server farm there is a one server with two IP addresses and teaming has done on it how ever from FWSM i am able to ping both IP addresses but from core 6509 switch i am only able to ping one ip address. from FWSM show ARP command displays the same virtual mac addresses against both IPS of the same server.
View 2 Replies View RelatedThe Cisco 1921 router has two routed adapters. One is GE0/0 which I am using for my WAN interface. It is working properly. The 2nd interface is GE0/1 which is being used as my internal adapter. It is running NAT. When I attempt to reach the internet it fails while checking the exit interface. Here is the report.
AttributeValueRouter ModelCISCO1921/K9Image Namec1900-universalk9-mz.SPA.151-3.T.binIOS Version15.1(3)THostnameBulldog
Interface Details
AttributeValueInterfaceGigabitEthernet0/1IP address192.168.1.1DescriptionNOC Link Test Activity Summary
[Code].....
I have a 6509-E chassis that was prevoius in a VSS configuration. Due to some VSL failures I had to cobvert it to a standalone chassis but would like to bring it back to a virtual system.
Whenever I try to convert it by using the command "switch convert mode virtual" I get the msg %Please configure local switch number first". After doing so by entering the CLI cmd "switch set switch_num 1 local" I still get the same message.
i have a Layer3 Switch Cisco WS-c3750G -24T , initially i have a IOS version c3750-Ipbase , recentely i have upgraded my IOS to c3750-Ipservices-M to enable to PBR for my network , i have created all the acl and tried to give the route-map with PBR , the command was initiallying but i am not able to see the applied route-map in my policy route , i have gone through the blog and enabled SDM prefer routing , but no luck .
View 1 Replies View RelatedThis isn't a big deal as the rest of the ACL works fine, but this is an annoynace since the web auth redirects to our company website (internal for now) after successful login.We have a Cisco WLC that provides access to our production and guest wireless environments. The guest environment of course is in a separate vlan (10.10.50.0/24). So I created this ACL:
access-list 107 permit udp any host 10.10.2.13 eq bootpc <----internal DHCP server
access-list 107 permit udp any host 10.10.2.13 eq bootps
access-list 107 deny ip any 10.10.0.0 0.0.255.255 <---all internal networks
access-list 107 deny ip any 172.28.16.0 0.0.0.255 <----DR Network
access-list 107 permit ip any any
int vlan 50
Desc "Guest wireless network"
ip access-group 107 in
This ACL basically gives the wireless guests access to an internal DHCP server and full access to the internet. For the 10.10.50.0/24 scope, the DHCP server assigns Internet DNS servers and my rationale is that wireless clients would access it via the external IP address but I suppose it doesn't work quite like that with the website being behind the same router as the client machines.
I'm unable to apply a policing limit in a switchport of the CISCO861 router. This is my configuration:interface FastEthernet0, service-policy input wired-input,service-policy output wired-output end.
View 3 Replies View RelatedI am having issues trying to combine two modules into one VDC. The modules are as mentioned below: When I try to combine module 1 & 10 as shown above, the nexus 7000 switch displays 'Not compatible'. I've read the online guide and it mentions that the F2 and M1 module cannot be combine into the same VDC. Problem is, my customer has already purchased the module, how do i solve this problem? If I separate the VDC, how does module 1 talk to module 10 if user wants to send traffic to Internet or Server Farm?
View 3 Replies View RelatedCustomer is using SUP720 with SP rommon image version 8.1(3), he is trying to boot the new ios image from disk0, but he gets invalid magic error. he fomat the disk0 but still he gets error when he boots from disk0. He suspect that it can't be flash problem but can be software of hardware as he has two flash with same issue on 2 switches.
Customer wanted to recreate, I tried in the lab, i was able to load from disk0, but sup in lab had 8.5(4).
Customer wanted me try with 8.1(3) version. But i was unable to downgrade the SP Rommon image. SP rommon is running in Gold region and I loaded the 8.1(3) from both disk0 and sup-bootdisk, even preferrence was given to region1 but still sup came up with gold region itself.
* Will i be able to downgrade from 8.5(4) to 8.1(3), if so, what are the steps.
* is there any limitation or bug where 8.1(3) will be unable to read disk0.