I am new user of cisco router i can access the hardware and login in the account but the problem is if i use the command "enable" asking for a password, old I.T. personnel who setup this router already resign.
View 2 RepliesI have aaa new model configured on a number of isr's(1800, 1900, 2900, 3800 etc). When i have aaa configured, the telnet logins use that authentication and not the password in the line vty portion. Is this by design. would disabling aaa enable both telnet and aaa authentications, essentially making it a dual login.
View 3 Replies View RelatedI try to setup a ASA5510, but without success. Actually, I have Cisco1800(192.168.96.1/21) from my ISP connected to a Cisco 3825 (via port with IP 192.168.96.2) all is working good. Now I want to insert a asa firewall between ISP router and 3825.
For that, I tried a more simple config :
ISProuter (192.168.96.1/21) ---- ASA outside port(192.168.96.2/255.255.255.248) ASA INSIDE port (192.168.100.1/255.255.255.0) --- a pc with IP 192.168.100.2, netsmask 255.255.255.0, gateway 192.168.100.1
From my ASA, I can ping 192.168.96.1. but a "ping INSIDE 192.168.96.1" fail
from py pc, can ping 192.168.100.1, but not 192.168.96.1
Here, my ASA config :
ASA Version 7.0(8)host name cisco asa
enable password 8Ry2YjIyt7RRXU24 encrypted
password 2KFQnbNIdI.2KYOU encrypted
names dns-guard
!
interface Ethernet0/0
shutdown
no nameif
no security-level
no ip address
[code]....
I have strange problem with 1800 router , I can't see any debug messaging , the ping from PC to this router is Ok , but no icmp debug appears , even I enable "debug ip icmp " the version of router is : C181X Software (C181X-ADVENTERPRISEK9-M), Version 12.4(6)T6
View 2 Replies View Relatedload balancing and automatic failover between two isp
View 13 Replies View RelatedI am very new to configuring ports on a switch. My boss usually does the port configurations but I am starting to learn some of the basic commands. The commands I know how to do are; close a port by typing config t, int gi0/port# and typing shut. I know how to enable a port, but how can I add info to a port or copy settings from one port to another?
We have some ports that are configured for 192.168 addresses but most are 10.128 addresses. I need to configure a certain port to be able to receive 192.168 addresses.
I have to add some new ACEs on a Critical production 6500 running CatOS.The documentation that I have seen so far explains how to create, commit and vlan map a VACL ... however I see no instructions or comments on best practices for editing VACLs.
View 1 Replies View RelatedWhen using Cisco IOS c2960-lanbasek9-mz.122-50.SE3.bin we can delete line in SNMP group config with
no snmp-server group <group-name> v3 priv context vlan-<vlan-id>
without problems.
But, after upgrade on version c2960-lanbasek9-mz.122-58.SE2.bin there is output:
#####% Ambiguous command: "no snmp-server group <group-name> v3 priv context vlan-<vlan-id> "
It looks like some bug, but there is nothing in the bug toolkit.
I have an 1800 isr that is running with port forwarding only. It is running a series of ip nat inside source static address port address port commands. It does not have an access list bound to the outside interface. This is working fine, but i am wondering if this is a security concern?
View 1 Replies View RelatedI would like to configure IP SLA with ICMP tracker. What is the minimum IOS & Feature required in cisco 1800 Router?
View 2 Replies View RelatedI've just started out playing with a Cisco 1800 router to gain some knowledge of Cisco devices before taking a CCNA. I also have a 2950 switch but will start with the router.
I'm using an Android phone as a wireless Internet access point. This issues IP addresses by DHCP in the 192.168.43.x range with 255.255.255.0 subnet.
Also I have a Linksys WRT54G router running DD-WRT firmware acting as a wireless bridge to the Android phone, and it has 4 LAN ports.
This bridge is up and running and I have successfully connected my laptop to the Linksys for testing and can use the Internet provided by the phone.
Connected to the Linksys is a Cisco 1800 router. Connected to the router is my Citrix XenServer PC and a NAS box.
The XenServer and NAS are on another network 07.05.19.x range with 255.0.0.0 subnet using their own static IPs. One of the virtual clients on the XenServer will be a DHCP server to service other virtual clients. All still in the 07.05.19.x range.
Basically I want the devices on the 07.05.19.x IP range to be able to use the Internet gateway at 192.168.43.1 to access the Internet.
How would I set up my 1800 to achieve this?
Also, am I right in understanding that the 1800 will ignore DHCP leases from the Android phone due to it being a Layer 3 device.
I setup a GRE tunnel between two cisco 1800 & 1900 routers. I can't received multicast.
Here is a copy of my configs:
R3#Building configuration...
Current configuration : 1238 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname R3!boot-start-markerboot-end-marker!logging message-counter syslog!no aaa new-modeldot11 syslogip source-route!ip cefip multicast-routing no ipv6 cef!multilink bundle-name authenticated!archivelog config hidekeys! interface Loopback0ip address 10.0.0.3 255.255.255.255!interface Tunnel0ip address 192.168.24.2 255.255.255.252ip pim sparse-modetunnel source Loopback0tunnel destination 10.0.0.1!interface FastEthernet0/0ip address 10.0.3.1 255.255.255.0ip pim sparse-modeduplex autospeed auto!interface FastEthernet0/1ip address 192.168.23.2 255.255.255.252ip pim sparse-modeduplex autospeed auto!interface Serial0/0/0no ip addressshutdownno fair-queueclock rate 2000000! router eigrp 1network 10.0.0.3 0.0.0.0network 10.0.3.1 0.0.0.0network 192.168.23.2 0.0.0.0no auto-summary!ip forward-protocol ndno ip http serverno ip http secure-server!control-plane!line con 0line aux 0line vty 0 4exec-timeout 5 0privilege level 15no login!scheduler allocate 20000 1000end
[code]....
I ahve a requirement to configure static crypto for 1800 site and I need to configure on two sepaarte interfacs at spoke site which means I need to configure 1800*2 = 3600 peers at central site. The challenge I have is due to load balancing , the traffic dynamic crypto can not be used since traffic may be initiated from Dc on other link which may get dropped incase not encrypted.
View 5 Replies View RelatedI don't know much about routers, but lately I've been playing around with router configuration and getting better but I am kind of stuck now.
The scenario is this.
I have 3 ip net from the ISP:
178.249.51.0/255.255.255.248 Gateway 178.249.51.1
178.249.51.8/255.255.255.248 Gateway 178.249.51.9
178.249.51.16/255.255.255.248 Gateway 178.249.51.17
[Code]....
I am also wondering - when we get more public IP net from the ISP, is this the correct way to do it?
I am position to migrate from CatOS 6509 switch to native IOS 6509 switch. long time ago, there was some site to convert automatically based on copy and paste onto the tool, but i can not find.
Does anybody know how to convert CatOS configuration to Native IOS configuration ? It is not IOS change, but it is configuration convert.
about to install first UC320w and wanted some sample 800 series router configurations showing required port fowarding, ACL entries and QoS examples.
View 5 Replies View RelatedI have recently configured a cisco 1921 router for internal routing on my network. Here is what i am trying to accomplish:
Main network 10.65.1.0 mask 255.255.255.0- all office devies and computers.
Second network 10.65.2.0 mask 255.255.255.0 - All plant equipment machinery and production lines
i have configure gig 0/0 for my company network and gig 0/1 for my plant network. I can ping the router from both networks but am unable to route traffic betwenn them. what am i missing?
Im using a 2801 router with a nat configuration.
The issue im having is the nat seems to be allowing only one machine at a time through the nat.
the range i am testing is 192.168.243.0
The firmware is c2801-spservicesk9-m
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
[Code].....
the router IPSec VPN config for remote users using Cisco VPN Client 5.0.07
Router 3945 IOS C3900-UNIVERSALK9-M Version 15.1(4)M4
Here is VPN related config part and log from router and client.
aaa new-model
!
!
aaa authentication login default none
aaa authorization network default none
!
!
crypto isakmp policy 5
encr aes 256
authentication pre-share
[Code]...
I highlighted strings with possible problems of of unabling to connect but doesn't know what to do with it.
i have floor with 10 users with DATA vlan and VOICE vlan , WIRELESS vlan , my questions :
Basement floor Core switch fiber -----> my floor switch <--------my internet DSL router827
- In this scenraio the switch in my floor will be as L2 or L3 ?
- What is the configuration it will be in the switch if it is L3 ?
- What is the configuration it will be in DSL router with Subinterfaces for each vlan ?
Any sample for configuration that can work for switch nad DSL router ?
my trouble is I have a cisco 857w and I have never configured a wireless config for a cisco router before. Ok so i have had a go through the web interface (i know, last resort) and still no joy
Basically what im looking for is to have a visible (broadcast ssid) network with a password (WEP/WPA/WPA2, not picky) and it to be joined to the same vlan as the ethernet ports (VLAN 1).
I have a Cisco 2811 Router. I have two VLANS on the router. The first one of course is VLAN 1 and the second one is one that I created from reading everything from this forum.. it is called VLAN 531
On VLAN one I have an IP address of 10.8.1.1 and on VLAN 531 I have an IP Address of 172.16.1.1, now what I can do is this... I can.. from a workstation on the 10.8.0.0 segment, ping 172.16.1.1 and one server on that segment that has an IP address of 172.16.1.50, which is fine, but what I really want to be able to do is ping our email server which is on a 10.21.0.0 segment and I cannot. Any commands on what I would need to do to make this work as I would like the 172.16.0.0 segment to ping any other part of my LAN of my choosing.
Here is my current config, how to enable and setup NVI on a cisco 1941 router.i think it would fix my issue but i'm unclear on how to implement it to test.
i would like to be able to access an internal server from an outside address.
Will 2811 Router with 4 switch port module, How to do dual ISP configuration on this router.
View 10 Replies View RelatedI have a 1711 Catalyst router hooked up behind a cable modem. I configured the router, copied running-config to start up-config then wrote it to memory with "write mem". I unplugged router to move it and when I plugged it back in, I had to start from scratch.
Is this normal, or should router be able to save configuration if powered down?
BTW, I'm using Putty to access router console. Is that the hot setup for Windows 7 or is there something better?
I currently am trying to program the config for a 1720 router however i cannot get the config to stick. I boot up to the command prompt put in all the configurations use the "write mem" command and then hard reset the router but when it boots back up I get the initial system configuation dialog.
I have tried booting to the rommon prompt and typing "confreg" and following the prompts keeping all options set to no except for this setting
"enable "ignore system config info"? y/n [n]: Y"
Is set to yes. but when i get to the end of the config it just loops and starts over with
"you wish to change the configuration? y/n [n]: Y"
If i choose yes it loops if I choose no it goes back to the rommon prompt.
i have to configure 80 Cisco 876 routers, so i planned to copy config via tftp from one configured router to PC, edit it in text editor (change ip addresses, dhcp pools, vpn keys...) and then copy it via tftp to another router, etc... Configuration looks fine and it works when i paste it in cli, but when i copy it via tftp i'm getting strange problems like dhcp not working or snmp not accessible. Am I missing something.
Here's config from router with dhcp problem:
ROUTER#sh run
version 15.1
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers(code)
I have customer that we have configured netflow on the 2821 router that their traffic is on. Currently the company they have contracted with for the analysis is seeing data duplication. Below is the configuration for the interface and the router
Cisco 2821;
interface GigabitEthernet0/0
description TVC-FI-Ethernet-Fiber-Ethernet link
ip address 216.255.164.33 255.255.255.248 secondary
ip address 192.168.5.1 255.255.255.0 secondary
ip address 216.255.166.129 255.255.255.128 secondary
[code]....
I have not been able to figure out the resolution. The basic premise is to have 3 inside vlan networks controlled by a 1900 series router. Then have that primary LAN router connect to the inside of my ASA5505 Basic, then go out to my ISP Gateway. I have tried hundreds of different static route configurations on my router and asa. I have tried equally as many NAT and PAT configurations, but nothing seems to work. I have even tried using all the commands (specific to my topography of course) on this weblink from cisco: url...
View 12 Replies View Relatedi am currently using 2 DSL WIFI modem and wants to combine them to my RV042 dual wan router but as i set them up using WAN1 and Wan2 as "Obtain IP Automatically" there is no internet connection?
View 2 Replies View RelatedI have an 877W router that I would like to have a 2nd pre-configured backup for. I was thinking of getting another 870 series (probably an 877) router, as the more expensive wireless option is not actually required. Am I right to assume that I could simply copy the contents of my current config.txt file onto the second router?
View 4 Replies View RelatedI've recently purchased a Cisco catalyst 2960S-24TS-L & setup 3 V LANS 10 (no current IP),20 (192.168.2.1) and 30 (192.168.3.1) to reflect the router V LAN configuration & ip information. When connecting my PC to the switch to test connectivity on (2.1 & 3.1) I'm unable to connect to the the net but can successfully ping GW (int FE0.20 & FE0.30) 192.168.2.1 & 3.1.
The router is an Cisco 1801 & it seems this is where the configuration issue is but I'm unable to figure out how to complete the setup. It has been quite awhile since I've configured a Cisco router.
Ive never had this router connected to a switch so all router switch ports are in the default VLAN1 (192.168.1.2), with FE0 disabled. In trying to get the switch to communicate with the router I made the following router config modifications.
FE0 enabled with subinterfaces configured
FE0.10-currently no ip
FE0.20-192.168.2.1/27
FE0.30-192.168.3.1/27
I have two issues I want to resolve:
1) I do not know what additional steps are required to allow 2.1.& 3.1 V LANs to access the net.
2) I want to disable VLAN1 if possible & use the network IP for VLAN10 (192.168.1.0). I'm unsure how to do this as any change on VLAN1 immediately breaks router access and the router reconfiguration becomes more complicated with changes to the FW ACL etc.
I want to edit existing wireless network in DLINK router. But I can't find any option to do it. If I go to "wireless settings" option, it shows the three options "wireless network setup wizard", "add wireless device with WPS", "manual wireless network setup", but I cannot find any option to edit the wireless network that was already set up.
View 3 Replies View Related