I have created a username and password with command username Cisco privilege 15 pass Cisco. when i telnet to switch it ask me for enable secret password?????? though i have specified a privilege level 15 to a user.Switch is authenticating with ACS and i have specified a privilege 15 to a specific user on ACS.The IOS is c2960-lanbasek9-mz.122-55.SE.
View 14 RepliesRecently I came across a router (Cisco 3845, IOS 12.4) configured for TACACS, one local username and an enable password. Going through the configuration I noticed the router didn't have an enable secret password which I thought was strange. The TACACS config is below, comments regarding the TACACS config and the consequences of not having an enable secret or if there is a need for one.
aaa authentication login default group tacacs+ aaa authentication login no_tacacs enable aaa authorization exec default group tacacs+ aaa authorization commands 1 default group tacacs+ aaa authorization commands 15 default group tacacs+ aaa accounting exec default start-stop group tacacs+ aaa accounting commands 1 default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+ aaa accounting network default start-stop group tacacs+
I enabled the "no service password-recovery" command on my C2960 switch. All seems to work as discribed. Only issue I have is --- which show command is used to reveal if the password-recovery feature is enabled of disabled as the command doesn't show up in the running config after you enable it ?
NOTE: The command does show up in the C2960 switch in config t mode (unlike the IOS router 2800 series), but doesn't show up in the running-config after you enable or disable it.
On the 2800 series routers (latest IOS) in config t mode the command does not show up but if you type "no service passowrd-recovery" the command function correctly and it does list it in the running configuration.
what is difference btw c2960-lanbasek9-mz.122-44.SE1.bin with c2960-lanbase-mz.122-44.SE1.bin.I found that these two IOS are available in below link and both two are released in same time... [URL]
View 2 Replies View RelatedI want to know what is the different between IOS of the catalyst WS-C2960-48PST-S and the IOS of catalyset WS-C2960-48PST-L.a want to upgrad the IOS of a WS-C2960-48PST-S with the IOS of WS-C2960-48PST-L (because this reference has a LANBASE version of IOS).
View 4 Replies View Relatedim having confused with those command "username (username) privilege (0-15) secret 5 (word)", what should i put into (word) part ?cause when i tried to put a "cisco" an error comes up. "privilege" command function and how that commands work?
View 4 Replies View RelatedGetting the following error when trying to Authenticate.Check whether the Shared Secrets on the AAA Client and ACS Server, match. Ensure that the AAA Client and the network device, have no hardware problems or problems with RADIUS compatibility. Also ensure that the network that connects the device to the ACS, has no hardware problems
Where in the settings on the Cisco ACS 5.2 Appliance can you verify/change the shared secret?
We currently have a distributed PR and DR ACS 5.3 setup, set up with tacacs devices and one radius device.The radius device is used Opnet's AppResponse Xpert Admin. We are trying to intergrate AppResponse Xpert Admin with ACS.
The GUI for AppResponse Xpert Admin is asking for the radius server ip address - i.e our ACS , radius port - i.e 1812 and "secret" - I'm guessing this means the shared secret of the actual ACS itself (not the shared secret used by network devices) .
On our ACS 4.2 systems we have a field for a shared secret regarding the ACS server itself (to authorise replication?).
Using the search function for "Shared Secret" in pdf "User Guide for Cisco Secure Access Conrol System 5.3" has only found references to setting one for network devices and not a field for the ACS itself.Is a ACS server shared secret still relevant for the ACS 5.x system?
I was trying to make an Ethernet cable about 100 feet long and what I found; it was not working in non-standard color scheme. However it works fine when re-arrange its color combination into standard, (Same cable, only color difference).So, why this Color scheme is important? And what is the secret behind its color combination?This is Standard Color Scheme for Ethernet.
View 3 Replies View Relatedhow the Cisco VPN works, as i already have a post on here about not being able to connect an android device to my firewall, i am now struggling to get an Iphone 3gs iOS v4.3 (8F190) connected to the VPN Either.I have checked the Network (client) Access settings on the firewall, and confirmed the group names im after including the protocols it supports L2TP is Disabled so it looks like i can only connect via IPsec.so i fill out the required details in the IPhone but keep getting a message back from the phone
"The VPN Shared Secret is incorrect"
Now im sure i have this right as i use the same details on my laptop which connects to the VPN perfectly fine. but i am starting to bang my head against the wall, no matter what i try and do i cannot seem to get either device to connect to the firewall.i have a pair of ASA 5520 boxes running cisco software 8.2
I’m deploying new images on my switch 2960 24TT L. After installing the new image (c2960-lanbasek9-mz.122-58.SE1.bin) and reboot the switch I have always this error message : “Error loading "c2960-lanbasek9-mz.122-58.SE1.bin"
Interrupt within 5 seconds to abort boot process.
Loading "flash:/c2960-lanbasek9-mz.122-58.SE1.bin"...@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ”
But the switch still boot well. Why do I have this error message?
I want to restore a backup from c2960 to other one.Why is recommended to remove any security commands, like AAA?
View 2 Replies View Related i upgrade the IOS for switch c2960 and the swtich do not boot from the new image.
-show version
-show boot
-show flash
I would like to ask you that how can i know detail P/N on switch WS-C2960-24PC-S I want to know detail what is PC-S and some swith LC-S
View 2 Replies View RelatedI'm having problems with a cisco switch WS-C2960-24TC-L version 12.2 (50) SE5. every night the equipment goes down, and every morning around 8am comes up.
I know it comes up at 8am because at that time I arrive at my workplace and see the alarm that the switch did not backup the config. ip using his web page and see what's up for a few minutes.
but I never could discover what time vai below. is there any way to see?? with the command show logging don't appear the hoursthat came down...he was only following the hours that he came up ...
I have a problem with adding a Cisco switch to the NMS (Smarts). When I start a discovery process from the snmp manager (Smarts NMS) it does resolve the ip address into the host name but once the discovery process is completed the device in question is not added in the list of managed devices. Attached is basic configuration.
View 4 Replies View RelatedI upgrade the IOS for switch c2960 and the switch do not boot from the new image.See the files attached.
show version
show boot
show flash
There is a mistake with settings?
We have a customer who uses about 20 x c2960's switches for access layer and 2 x c3560e for distribution layer. C2960's uses C2960-LANLITEK9-M , Version 12.2(58)SE1. Everything was working fine. Now we got information, that sometimes there are problems with connectivity. Customer tries to reach internet.
SW11#sh int fa0/18
FastEthernet0/18 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is e8ba.806a.4412 (bia e8ba.806a.4412)
[Code].....
I have a 3com 2948 switch and is needing to put the configuration on a Cisco WS C2960 48 port switch. I am attaching the config to heck if that is correct. I know my IP will need to change to .123
View 7 Replies View RelatedI am having problem in upgrading Cat2960 because I deleted the flash in this switch already and now I need installing an IOS image? [code]
View 1 Replies View RelatedI am trying to configure RSPAN for one of my client. They have Server-Client VTP architecture. Voice Recording Server is connected to C4507. Agents are connected to C2960 and C3750. I got 2 sessions configured and the connectivity is a as follows:
1. Voice Recording Server-----C4507-----C2960-----C2960-----Agent IP Phones (Session 1)
2. Voice Recording Server-----C4507-----C3750-----Agent IP Phones (Session 2)
Recording works with Session-2 but not with Session-1. I understand the problem could be due to multiple reasons: 1.1. C2960 is working in client VTP mode so i cannot add remote span command under the vlan configuration. 1.2. C2960 has LANLITE IOS image which i am not sure if it supports Remote Span.
I have a C2960-24TT-L Switch with the following problem:When the Power Cord is plugged in the Switch, all switch indicator LEDs go on very briefly. Then SYST LED blinks very briefly, goes on steady and remains at this state without any indication at the console.Tried the reset by holding the MODE button while plugging in power but I still get no indication at the console. All is fine with console, meaning that if I take out the cable and plug it in another switch, then I see all that there is there to be seen.My question: Is the switch beyond repair or is there something that can be done to get the switch to run POST and boot at rommon so that I can reload SW and configs?
View 3 Replies View Relatedwe have a setup of about 14 WS-C2960-48FPS-L all running from a 3750G stack.What i want to be able to do is create dedicated accounts so that local IT admins can tag ports via CNA without calling me everytime something needs to change. How and where can i create these on CNA? Is it as simple as using the Users and Passwords options?What privledge level should i assign to these accounts so that it will give the least amount of previledge required to tag ports. I dont want them being able to change much else.
View 2 Replies View RelatedI have two WS-C2960-24TC-L Switch with Software Ver 12.2(25r)SEE6 with image c2960-lanbase-mz.122-35.SE5.bin and 12.2(25r)SEE1 with image c2960-lanbase-mz.122-25.SEE2.bin currently on it.
I want to enable SSH connections on the switches and believe I need to import the cryto image onto the switch. I would like to upgrade it to new version that can also support ssh connection but not sure which image to download from cisco. The switches are now live.
System image file is "flash:c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin"
cisco WS-C2960-24TC-L (PowerPC405) processor (revision H0) with 61440K/4088K
[Code].....
I've got a C2960 (sw01) and a C2948. (sw02) The sw02 switch is trunked with sw01, and is meant to serve as an extension to the VLANs (1-4) that exist on sw01. It is trunking properly, however, how would I go about giving the sw02 an IP so that I can access it via SSH? Would I have to create a VLAN specifically on sw02 with an ip and switchport an interface to use it? I know that a VLAN can only have a single IP, but I'd like sw02 to have an IP on VLAN1 (192.168.1.0 subnet), is that possible?
View 5 Replies View Relatedi am trying to upgrade the firmware in my C2960 switch to 15(1) SE2, and i get the error:Failed to execute the command archive download -sw /overwrite /http iosFile
View 2 Replies View RelatedI am not sure why the CRC and input errors are increasing in fastethernet port...This port is used as Intradomain cross connect to Data Center service provider for LAN extension between two Data Centers in different locations... The link is 100 MB. The switch port is directly connected to patch panel of DC provider and I believe they have some L3 switch or some other device that is providing LAN extension...
#sh interfaces fastEthernet 0/23
FastEthernet0/23 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is 0019.3050.1497 (bia 0019.3050.1497)
Description: ASA_VPN_TO
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
[code]....
It looks like pretty basic config, but it does not work. I have 1x 2602i autonomous mode AP, 1x C2960 switch (with inter-vlan routing prefered SDM template) and 1x 1841 router.
I trunk between Switch and Router works smoothly, but it does not work between AP and Switch or AP and Router.
Configuration looks like this:
AP2602i:
interface GigabitEthernet0
no ip address
duplex full
speed 100
[code]....
I am not sure why the CRC and input errors are increasing in fastethernet port...This port is used as Intradomain cross connect to Data Center service provider for LAN extension between two Data Centers in different locations... The link is 100 MB. The switch port is directly connected to patch panel of DC provider and I believe they have some L3 switch or some other device that is providing LAN extension...
#sh interfaces fastEthernet 0/23
FastEthernet0/23 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is 0019.3050.1497 (bia 0019.3050.1497)
[Code].....
I have an issue with one of our switches, switch model WS-C2960-24TC-L, i am not able to display switch temperature as below,
Switch#sh verCisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 15.0(2)SE2, RELEASE SOFTWARE (fc1)Technical Support: URL ) 1986-2013 by Cisco Systems, Inc.Compiled Tue 05-Feb-13 12:41 by prod_rel_team(code)
We just purchased (3) WS-C2960-24CT-S and (1) 3750G, what's the proper way to cascade this switches? Do I need to use crossover cables from port to port? Do I need to change the mode for the ports to use?
View 6 Replies View RelatedI am facing high memory utilization in Cisco 2960 switch having IOS version 12.2(55)SE3.
The error we are getting is:
A "LiveHealthAlarm" event has occurred, from SwCiscoIOS device, named Switch2960. eHealth Alarm Start Time - Fri 09 Nov,2012 - 03:02:48 eHealth. Switch2960-RH-MemoryPool-Processor-Processor-1.Memory utilization high-Threshold set at 70%SPECTRUM ALARM ID|22233284 I have attached the logs also.
I am trying to get a C2960-8tc-L linked to a sge2000p via the Gbic ports using GLC-SX_MM gbics but having no luck.Are these compatible and should I need to configure anything?
View 1 Replies View Related