I'm not sure how to tell if I'm running ssh version 1 or ssh version 2, or both.I thought a show run would show a line like, "ip ssh version 2" or "no ip ssh version 1", but I don't see these anywhere.
View 4 RepliesI've downloaded Prime Infrastructure 1.2 eval and wanted to see what it looked from WCS that I am currently using to manage the wireless network and I added the WLC (4404) device but it list the device as "Managed with Warning" and I can't find what the warning is.
View 3 Replies View RelatedI have 2x WLC 5508 running version 7.2. 1st one is setup and running. My questions is: If I want to setup Active-Passive redundancy, do I need to manually setup the 2nd one exactly as the 1st one and put them in the same group? Or is it a way to copy all of the configs I made on the 1st one over to the 2nd one?
View 4 Replies View RelatedI need to confirm that the 4510R+E switch with the SUB7-E/2 running version 15 IOS will not support NAT. I am 99% convinced that it does not but i am looking for confirmation, as i am a bit surprised by the lack of NAT support on this platform.
View 0 Replies View RelatedI have several older 2950's running on my network. This one in particular became of interest to me because I couldn't set up SSH on it or enable any QoS features on it, so I did some research. What I found was there are basically 2 versions of the IOS, c2950-i6q4l2 or c2950-i6k2l2q4. I also read that the c2950-i6q4l2 IOS versions (like the one in the switch I am referring to) have both the SI and EI feature sets integrated, but the one that gets enabled is entirely dependent upon the switch model you are running it on. Did I understand this correctly? Does the IOS check the hardware on the switch and then decide with feature set to use? If so, what is prohibiting the EI feature set from being enabled on this switch? Is there a way to force the EI feature set to be enabled since it is integrated in this image?
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA12, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2008 by cisco Systems, Inc.
Compiled Mon 07-Jul-08 23:39 by amvarma
Image text-base: 0x80010000, data-base: 0x80570000
[code]....
using a Cisco 5508 controller (code version 7.4.100.0) with an ACS appliance running version 4.1 or 4.2?I've found that the ACS constantly reports a 'Bad request from NAS' (Invalid message authenticator in EAP request). message. This usually indicates a mismatched shared secret but this isn't the case.The controller works fine opposite a Microsoft NPS Radius Server.
View 6 Replies View RelatedI am wondering if it's possible to convert a Pix 501 configuration running version 6.3(5) to a new ASA5505 which we just purchased? We have site to site VPN on this device and i am just trying to save some time. I believe Cisco TAC might have a tool to do this but i am not sure.
View 4 Replies View RelatedI have a DIR-655 Version B running the stock 2.0 firmware and a Motorola SB6120 cable modem and my ISP is comcast. I have had comcast come out and test my line and everything is fine. I have a desktop directly wired to the internet and several portable devices accessing the router.I cannot connect to the internet. My network is available and none of my devices ever indicate the network isn't available. When I try to load a website it just says "waiting for reply..." and nothing happens. The solution that always works is rebooting both the modem and the router. What is odd is that this problem comes and goes, I will go a week with zero issues, then I go all week with rebooting my stuff 5-8 times a day..What have I tried? I tried the settings that are recommended by Furrynuts to users complaining. I have also tried changing the wireless band settings to different channels as well.
View 6 Replies View RelatedI set up my new WAG320N yesterday. I have no problems connecting with my notebook running windows 7 or my IPad. My Mac Mini running Mac OS x version 10.6.6 simply won't connect.
View 1 Replies View RelatedI'm running firmware version 1.1.28.14856 on EA6500 series.
View 4 Replies View RelatedI have an ASA 5510 running ASDM 6.4(9) and Cisco Adaptive Security Appliance Software Version 8.4(4)1.I am trying to configure for the first time and I am accessing the ASA via its Management Interface.I am successfully able to connect to the device and get to the Cisco ASDM 6.4(9) page.When I try to run the startup wizard, a couple of prompts displays up to the point where the java applet runs and aks me to enter my IP, username and password.As it is a new system, password and username is blank so I enter and I get a message saying "loading software from cache" which later changes to "software Update completed" and then nothing happens.I am running MacOSX 10.7 Lion, Java version 1.6.0_33.I did try and run this on a Windows system and i was able to load the interface.
View 2 Replies View RelatedMcAffee scan of acs 1113 appliance running the 4.2 build 124 patch 12 version reports that a medium vulnerability exists because the system has SSH version 1. Any way to specify only version 2 or turn off SSH?
View 9 Replies View RelatedI have 30 switched in my corporate network it’s all up and running all switches running by default configuration and connected to WS-C4506 core switch our dhcp server pooling 192.168.100.1/27 network. Now we need to configure new Vlan for finance department this department has more than 200 users. If my server distributes 192.168.200.0 range ip can vlan2 automatically assign ip 200.0 addresses to finance department.All switches running default config no ip address assigned.
View 9 Replies View RelatedI need to replace an existing ASA 5540 with a new ASA 5525X. I would like to pre-stage and configure the new box with the existing config, migrate license and export certificate files before swapping it with the old one during a change window. The new firewall will run 9.1 on deployment. Now the same 7.2(4) cannot just be copied over to 5525X running the minimum 8.6 version. There is a Web based tool available at [URL] according to Cisco documentation but the page does not load for me (Cisco intranet only tool ?). Is there another tool for automatic conversion ?
View 3 Replies View RelatedCan we use ACS 4.1 version recovery disc on 4.2 verison to recover the forgotten password.
View 1 Replies View Relatedwhich version of prime infrastructure supports wlc5508 version 7.4
View 2 Replies View Relatedprovide me with the important links which can show me how to do the software upgrade for my ASA 5520 ver 7.0(1) to ver 8.4 ? as well as the ASDM
View 10 Replies View Relatedi am using Cisco ASA 5510 with ASA Version 8.0(4) and memory 256MB. me to Upgrade it to 8.3
View 6 Replies View RelatedWe are looking to upgrade our WiSMs to version 7.0.230.0, but the Cisco compatibility matrix suggests we need to upgrade WCS to the same version (it is currently on 7.0.172.0). My question is can we upgrade the WiSMs and do the WCS at a later date with no issues or do we need to do them at the same time to keep visibility of everything?
The reason I ask is that some of my clients use lobby ambassador for some of their users and they will need wireless access on the day we are due to upgrade WCS (the WiSMs are due to be upgraded and rebooted earlier that morning.
connecting PRI to BRI interface on ISDN. I have all this information provided by the TELCO and i have configured it but due to some reason i am not able to connect them. I have given the questions with answers provided by the TELCO. I am also providing the running configuration of the PRI interface and also the error message i am getting when trying to test call itself.
1. Is the PBX designed for Pre-National or NI-2 protocol? -
Protocol using C7MATL
2. Are there any DID station numbers that your CPE cannot accept? -
No
(i.e. 0 or 9 in the 4th position)
3. Which carriers will be your choices for your PIC and LPIC? -
Carrier using DChannel
[code]....
I am running LMS 4.1on a VM, it runs very slow, what specs my vm should be running to support this application?
View 2 Replies View RelatedI can't seem to get my DIR-655 up and running again.I had a DLINK DIR-655 hooked up via RJ-45 cable(s) to my AT&T U-Verse 3800HGV-B Gateway. The DIR-655 was serving as a wireless connection for my laptops and also as a wired networked all-in-one printer that was plugged into it.The Ethernet (RJ-45 cable) traveled from the gateway, through a 4-port switch, and then to the Internet (WAN) jack on the back of the DIR-655.There's a couple of wire- connected computers connected via that switch in between that's why it's there. At the DIR-655 end I had an HP Photo Premium AIO printer (Model: 309A) connected by wire; and of course, the two laptops would connect via that unit too. The laptops are WinXP and Win7.Everything worked fine... BUT, the upstairs iMac and a downstairs home office XP machine couldn't see the networked printer for some reason. That reason (apparently) is that the DIR-655 is part of a "separate network" or something.Well, long story short - I tried to adjust the settings on the DIR-655 but that didn't work and then I tried to go back, but that didn't work. So then I decided to just start from scratch to re-setup the whole thing but NOW I can't even access the router via a browser at url...
View 14 Replies View RelatedPlatform: LMS 3.2.1 with RME 4.3.2 on Windows 2003.I'm having a problem with several devices that were backing up fine until this week - suddenly they aren't backing up their running configurations, but RME is fetching their startup configurations fine and VTP backups are fine. At first I thought it might be timeouts, so I used inline edit to incease the telnet timeout for a device to 180s. However, the job fails well within this time period (debug shows on i/o error?). My order of protocols is SSH, Telnet, TFTP. I took a stab in the dark that this suggested a database problem so I picked one at random and deleted it from DCR, and readded it and it worked. However, for the other 48 devices affected it did not.
I'm wondering if I need to do anything to the RME database to get things back to where they were? Do I need to reinitialize the RME database, and if I do that what do I lose? [code]
we have two ACS 5.0.4.46.1 and since a few weeks, it reports the following error:
I stopped and restarted ACS, reconfigured the repository, reconfigured the backup and so on. I even rebooted the ACS but it sill has this problem. I can see "Please contact TAC..." but I first wanted to ask the community.
I hardly try to get WDS running with two WRVS4400N v2.The manual (and the web interface) says: "Note: The WDS feature allows WRVS4400N to connect with up to 3 wireless repeaters that can be either WRVS4400N or WAP200." But I wasn't successful by now in getting it working..What I've done so far:
- Setup the primary WRVS as Gateway, WAN through Modem, LAN and WLAN using WPA2 Personal Mixed, DHCP
- works perfect
- Setup the second WRVS as Router using the same WLAN settings, no WAN and no DHCP
- Enabling WDS on both WRVS, giving each the MAC address of the other
- no connection to LAN or WAN through the second WRVS
I really need the second WRVS act like a bridge. Since the manual is saying that I can connect both devices through WDS I bought two of them. On the other hand I've now read somewhere in the community, that this isn't possible with two WRVS (?)
I have a particular site that is causing me trouble, this site is connected in a back to back configuration using 2811 at CO and 2621XM at CPE. The CO end is also the CO for 3 other sites so has a total of 4 wics installed (WIC-1SHDSL-v2), these other sites also have 2621XMs for the CPE.
The problem i am getting is when one site in particular transfers large files to/from client machines, the CPU on the 2811 jumps to 99%:
CPU utilization for five seconds: 99%/98%; one minute: 26%;
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
11 12881868 37249378 345 0.49% 0.50% 0.51% 0 ARP Input
54 8548592 30375358 281 0.40% 0.45% 0.41% 0 XDSL BACKGROUND
[Code]......
we have a situation that we need to run ASA as a router. we have two sites connected via a private p2p link, we also have ASA5520 in each site and we have L2L IPsec tunnel over Internet, we want to failover to IPsec over Internet pipe in case p2p link fails. With BFD/OSPF this design works at L3 level. But we have problem to keep existing TCP connections when failover happens, the reason is, I believe, when ASA sees a new connection coming in without seeing SYNC flag in the packet, it will not create a connection entry and drop the packet unless a new connection is initiated from either side. So my question is, is there anyway I can configure ASA to behave more like a L3 device, ideally to turn off L4 checking for IPsec traffic?
View 4 Replies View RelatedI have installed WCS 7.0 now i have installed Navigator on WCS server.Installation is completed.but when I check the status of WCS, it says "healthmonitor running with errors"any one knows what could be the problem and how much will that effect on WCS performance?
View 6 Replies View RelatedI have an existing 1800 router that is using NAT and VPN to HQ. I now have a new ISP provider and so now i need to chane the Fastethernet1 IP address. I know how to do that but what else do I need to change to make everything continue to work?
View 10 Replies View RelatedIm planning to install a WAN Switch on our network basically this WAN switch will be the core WAN switch in our WAN segments where all WAN connections coming in and will use EBGP peering to every CE WAN router.
is Advanced BGP supporeted in WS-C3750X-24T-S?
I was going through the release notes on cisco website of ASA 8.4.6 and ASDM 7.1.3 but I just can not find a definitely answer: if ASDM 7.1.3 can run with 8.4.6?
View 2 Replies View RelatedI'm having an issue configuring NAT on an ASA running 8.3. 've managed to configure NAT from the Inside interface to the DMZ, using PAT, so that the traffic is hidden behind the IP of the DMZ interface. This seems to work ok.
object network obj_any-18
subnet 0.0.0.0 0.0.0.0
object network obj_any-18
nat (inside,dmz1.005) dynamic interface
The problem I have is when I try to configure a rule for traffic that originates in the DMZ back to the Inside. I can't seem to get any traffic to flow from the DMZ to the Inside, and sometimes I manage to stop traffic flowing in both directions!
What would be the best way to configure the return traffic from the DMZ to the Inside.
I have an ASA running 8.4(2) code.
I have been trying to get a VPN tunnel established between this device and a Checkpoint R70 firewall, but have been getting nowehere.
The settings are:
Encap: ESP
Encryption: AES256
Hash: SHA1
DH: Group 2 (1024)
Authentication: pre-share
lifetime: 1440 min / 4096000 KB
I can open the tunnel from the ASA to the Checkpoint, but the Checkpoint cannot open a tunnel with the ASA. It looked like the issue originally was the KB timout which was turned off on the Checkpoint side. They have since added that (4096000), but we are getting Phase2 failures.
How to create a tunnel between an ASA running 8.4(2) and a Checkpoint R70?
I am beginning to think that I have incompatible systems Is it a PFS issue? If so, how do I enable that in the policy section?