I have two C1941.The first C1941 does not support SNTP but the second C1941 supports SNTP. The only difference which I can spot is their license. The first C1941 does not have security license but the second C1941 has. What is the URL that has info on what IOS commands are supported on IPbase license, sec license..etc
First C1941
C1941_1(config)#do sh ver Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.0(1)M4, RELEASE SOFTWARE (fc1)Technical
I received an SG300-MP as an RMA replacement for a Linksys SRW2008MP and I can't seem to get the SNTP to work.Previously on other devices I have only had to set the SNTP server name or IP address and that was it. So some of the options of the SG300 are foreign to me.So I first set
Administration > Time Settings > System Time > Main Clock Source (SNTP Servers) [X]
Then I set several SNTP server IP addresses
Administration > Time Settings > SNTP Unicast SNTP Client Unicast [X] Enable > Add Other / 64.147.116.229 (nist1-la.ustiming.org) Other / 24.56.178.140 (wwv.nist.gov) Other / 128.138.141.172 (utcnist2.colorado.edu) Other / 129.6.15.29 (time-b.nist.gov)
Some servers I set "Poll Interval" and some I didn't because I wasn't sure what this does.The status for all servers indicate "Down" with 31.12.1899 0.0.0 for the "Last Response"/I found those IP addresses via [URL] Also the setting
Administration > Time Settings > System Time SNTP Multicast / Anycast
I have disabled, and I don't know what this does either...
I had connected a computer and NTP to the SG500. i had successfullly sync the internet time on the computer. but when i type 'show clock' on the terminal. The switch did not manage to sync the ntp time.
i have Cisco 1941 router with following IOS image:Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.0(1)M5, RELEASE SOFTWARE (fc2) below mentioned commands are not working :
In the above case it's showing refused by remote host. If the port 80 is opened in firewall also if we get this error what will be the issue. As i understood when firewall port is opened we wil get as OPEN
why the command "source cpu rp" has been removed from IOS15.0(1)SY1. I can succesfully configure the following ERSPAN on 12.2 SXJ3 but not on ios 15.x. Did not understand why cisco has descoped this command.
monitor session 10 type erspan-source shutdown source cpu rp rx (--- 15.0 has no such option on 6500 ) destination
I would like to implement a zone based firewall on my ASA5510. Is ZBF possible on ASA? or is it strictly for routers? I know we've implementd ZBF using Sonicwall firewalls before. A little confused here as to why my ASA doesnt have the right commands.Maybe my version of ASA software is too old? It's 8.2 if i remember right.
I am trying to change SNMPv2 community string on 6509 remotely, without using expect script. I tried EEM applet (we cannot use TCL scripts), but it does not work. EEM command "action 10 info snmp oid 1.3.6.1.2.1.1.4 get-type exact" is supposed to store the result into an environment variable. It does not. Or at least not in the one that is documented. Is it a bug? We have IOS 12.2(17r)SX5. To get EEM version i ran "sh event manager version" and got "eem: (v240_throttle) 2.21.32". Does it mean i have EEM version 2.21?
I was just brushing up few things in GNS3 and after setting up an SLA.Now when I want to set the track ip I get not option for sla why??I am running c3725-adventerprisek9-mz.124-15.T5 shouldn't it be available?
We recently purchased the Cisco Router 2951 router with the IOS 15.0. I have tried to put in my VIC2-4FXO card in it. When I did show invetery, it detected the card.[code] When I tried to configure the voice port by typing voice port, it shows % Invalid input detected at '^' marker. I have tried to reset the cad and replace with another one.
We have an issue with ACS server 5.1.0.44.X. We want make a one user with few commands: show ip route static-table(deny other show commands)configure terminal, terminal length 0 ip route (with all possible arguments). All works fine except ip route command, when i try to type it I see - "This command is not authorized".
I have recently bought cisco 2901 in order to replace it with our 1811W that we have at the moment.When I try to set a failover / backup with rtr; it seems like the function is not valid.Once I select rtr and set the object #, the reachability command is not available.Does that mean this function is not a part from the license package I have?
I am in the process of migrating a production firewall from PIX 6.3 to ASA 8.4(2). This is going to be a complete firewall rebuild and I will not be upgrading the configs because they have become out of date and very bloated. I am in the process of converting the NAT commands.[code] I am hoping these commands would be enough to replicate the previous functionality. I removed all the static identity NATs because NAT control is no longer in place so those rules are not required. Additionally I didn't re-create the rules that had NAT ID 0 or 1 because it didn't look like they were doing anything. correct way to do the static NAT commands at the bottom.
I have to created command set under "Policy Elements>Authorization and Permissions>Device Administration" for limited access user in ACS 5.3. Like i triyed to give them permission to only few show commands. I have set user priviledge 1, 7, 10 however either of the priviledge level user was able to run those commands. I works like the shell priviledge level.
I am designing a new NAT configuration for an ASA 8.4
On my PIX 8.0 configuration I needed to allow bidirectional traffic between interfaces with different security levels. For example, Inside at 100 and dmz at 50.To accomplish this in 8.0 I used a static NAT command along with any necessary ACLs.
I now need to apply this same 8.0 config for 8.4. With the static command not availablein 8.4 I am unsure of which NAT commands to use to achieve the bidirectional traffic.
The only QoS command i have in global config is (no MLS qos) :
REMOTE-ROUTER1(config)#qos ? restore-show-output Restore old show output shape-timer Set the HQF shape timer interval
The router is running IOS:
System image file is "flash:c2801-ipbasek9-mz.151-4.M5.bin"
Am i just running the incorrect IOS or am i missing somehting, i need to change the QoS Map for my Nortel VoIP. The VoIP phones connect to a 3750 PoE which used to conenct to a 2651XM to route VoIP and data traffic over the same copper pairs (WAN link to hub site) hence the need for a Service policy but being Nortel phones, require changing the cos-dscp map. the 2801 is going to replace the 2651XM using a new HWIC.
I'm trying to set up a command set in Cisco ACS 5.3, I can't get i to work no mather who I try What I'm trying to accomplish is that some users, say Bob can run every priv. level 1 command + show run, or just to specify which commands Bob will be able to run, whatever is easiest to set up.
In my switch I have the commands:
aaa new-model aaa authentication login default group tacacs+ local aaa authentication enable default group tacacs+ enable aaa authorization config-commands aaa authorization commands 1 default group tacacs+ aaa authorization commands 15 default group tacacs+ <--- tried diffrent apporaches whith priv level.. (and specied a tacacs server)
is the "default" under "aaa authorization commands 1x default group tacacs+" the name of the command set?
In the ACS I have specied a Authorization group and binded it to the command set, should the user have priv 15 for this to work or priv 1?(I have also specied a user and an identity group and specied ip ranges under "Network Devices and AAA Clients")
I have a problem with the ACS 5.2 configuration: I am trying to use the AAA authorization to centralize privileges and commands but only the privilege level is sent to router, the command set aren't sent.
The test cenary is this:
ACS 5.2Router 2900 family IOS 15.0 The ACS is configured with:
Shell Profiles (to match with a privilege level), Command Sets (with the command list), Service Selection Rules (to set to one service) and Authorization (to assign one shell profile and one command set).
The router is configured with the follows commands:
I have a 7606 router with sup 720-3bxl. IOS has been crashed recently and i can use only Roman mode now. Ive tried to upload ios image using tftp server but the command tftpdnld id not available in this router. I don't know why. Then i tried to boot from flash disk but finally it also shows an error like
System received a Software forced crash signal= 0x17, code= 0x24, context= 0x42359674 PC = 0x402d248c, Cause = 0x1020, Status Reg = 0x34008002
I just purchase Cisco LAP-1042N for my office network expansion. When i console into the AP via serial. I am not able to used "configure terminal" command to set my AP name,static IP address.
I tried using "debug lwapp console cli" command it did not work. below is the capture screen of the error i am getting when assigning AP hostname. Error message : command is disable.
What is the command switch (the letter/s that you use withsign after the command) that can be used for displaying the per protocol statistics with the above command
I am using ASA 5520 Image in GNS3, when i come in Configuration Mode and try to create Tunnel through command "interface Tunnel 0", but this command doesn't exist. I need this command to create Tunnel for GRE Lab.
I have copied status codes from show ip bg command output and its explanation (from Cisco documentation site)., d and h (suppressed, dampened and history). I read somewhere that these are to control flapping routes. But not able to understand it completly.Raised this question in a couple of forums but didnt get a proper reply.The table entry is suppressed.??The table entry is dampened. ??The table entry history. The table entry is validThe table entry is the best entry to use for that network.
