2960S - no connectivity to interface fa0 mgmgt?

Similar Questions

• The connection manager interface

  Hi all

  I'm just around trying with the Oracle connection manager. The reason is I want to use it as a firewall to dynamically enable our developers access to our databases of production. Now, I'm looking for a way to add and remove the list of rules dynamically. First I thought that I could script using cmctl, but then I realized that cmctl has no command to add/remove the rules at cman.ora

  Is it mayby any other way to dynamically add/remove the rules? The Administration should be made by people who don't know much about IT, so I have to provide them with a tool for that kind of work.

  Thanks in advance

  I wrote my own script to manage the connection manager

  Thanks anyway

• currently connected network interface "network adapter 2" uses 'portgroup' is not accessible ".

  I'm vmotion a VM from one host to another also well using standard switches but continue to get this error.

  I checked that both hosts have the same portgroup.

  Why is this sayng the portgroup is not accessible?

  OK, I discovered that one of them had a tiny and the other had a capital letter on the portgroup.

• 6248 FI Cisco's UCS with Cisco catalyst 2960 connectivity

  In our environment, UCS, connects the two fabric as a Cisco Nexus 9 k switch upstream with vPC and it works well. But we need to isolate some virtual servers on the blades of the UCS on an entirely separate DMZ switch which is Cisco catalyst 2960.

  (1) so can we connect cables separate physical twinax of FI uplink ports to catalyst 2960 and connectivity to the servers in the DMZ keeping YEW to nexus connectivity as it is?

  (2) in this case, as there are 2 switches to nexus core 1 and 2 so we will require 2 cisco catalyst 2960 for disjoint such a network? or otherwise we can connect A FI and FI B to one on his 2 numbers 2960 switch. Gig SFP ports + 10?

  (3) also suggest things must be taken in charge, the best guides practice or an illustration in this context.

  The assignment is static and cannot be changed.

  location 1 - uplink 1

  slot 2 - uplink 2...

  If a property has no blade, the corresponding uplink is not used and that can not be changed!

  This dedication of uplinks of IOM is of course a lot of resources: cables, ports on FI, allowed port,...

• Install the HR schema and now I can not connect more hollow the web interface

  Hello
  
  I just ran hr_main.sql success. But now can't more hollow connect web interface of Oracle applications.
  I get this error: "Unable to authenticate the session."
  
  What has gone wrong?
  
  Thanks in advance.

  There is something right more important here. I guess that you are referring to the demo tables included with the database software. Do not these things on an Oracle Applications database.
  the hr_main.sql script removes and recreates a database schema called "HR".
  But Oracle Apps itself also contains a schema called HR that has nothing to do with the demo tables.
  So, when trying to install the demo tables, you destroyed a standard scheme of applications. This is almost certainly the cause of your problem.
  I'm guessing you also a lot of invalid objects now...

  Marc

• No dhcp use connected vrf ip

  Hi experts,

  I would like to know what this command does? I can't found on cisco.com.

  Hi John,.

  This command indicates the router if requests from DHCP directly connected interfaces VRF to allocate IP addresses from a global DHCP pool (which is not specifically related to any VRF), or if a DHCP by VRF pool should be used to assign addresses.

  Consider the following configuration:

  IP vrf MyVRF1

  RD 1:1

  !

  IP vrf MyVRF2

  RD 1:2

  !

  Global IP dhcp pool

  192.0.2.0/24 network

  !

  dhcp ForMyVRF1 IP pool

  VRF MyVRF1

  192.0.2.0/24 network

  !

  dhcp ForMyVRF2 IP pool

  VRF MyVRF2

  192.0.2.0/24 network

  !

  interface Fa0/0.10

  encapsulation dot1Q 10

  192.0.2.1 IP address 255.255.255.0

  !

  interface Fa0/0.20

  encapsulation dot1Q 20

  IP vrf forwarding MyVRF1

  192.0.2.1 IP address 255.255.255.0

  !

  interface Fa0/0.30

  encapsulation dot1Q 30

  IP vrf forwarding MyVRF2

  192.0.2.1 IP address 255.255.255.0

  With no dhcp ip use vrf connected, if a query DHCP comes which interface here, he will be assigned an IP address of the overall global DHCP pool, with no regard for the VRF the interface through which the request is entered in. DHCP VRF ForMyVRF1 and ForMyVRF2 pools will remain completely unused and intact, although only being defined.

  With the dhcp ip protocol use the vrf is connected, the behavior becomes what you would normally expect-Fa0/0.10 requests will be served DHCP Global pool, the requsts which crosses the Fa0/0.20 in MyVRF1 VRF will be served by the DHCP ForMyVRF1 pool and Fa0/0.30 requests will be served DHCP ForMyVRF2 pool as the Fa0/0.30 is assigned to the MyVRF2.

  Best regards

  Peter

• ACL FTP connection problem

  I have a problem with the ACL I have FTP transmitted by PAT to an internal server on my border router. I have a pretty extensive ACLs that refuses the spider servers and some beaches I know senders of junk e-mail. The problem in FTP. When the ACL is applied to my external interface (fa0/1) I can not connect via FTP. When I drop the group access, I can connect to FTP a-okay. When the ACL is applied all my other services work as well (http on port 1337, ssh, PPTP, IRC and teamspeak - 9987 UDP). Here is my config. Any help will be highly appreciated:

  Building configuration...

  Current configuration: 6674 bytes

  !

  ! Last configuration change at 11:07:17 PST Sunday, December 30, 2012, by admin

  ! NVRAM config last updated at 19:12:53 PST Sunday, December 30, 2012, by admin

  !

  version 12.4

  horodateurs service debug datetime msec

  Log service timestamps datetime msec

  no password encryption service

  !

  hostname R1

  !

  boot-start-marker

  boot-end-marker

  !

  enable secret 5 *.

  !

  No aaa new-model

  clock timezone PST - 8

  clock to summer time recurring CDT

  no location network-clock-participate 1

  No network-clock-participate wic 0

  IP cef

  !

  !

  !

  !

  IP domain name * *.net

  IP-server names 4.2.2.2

  inspect the IP log drop-pkt

  property intellectual auth-proxy max-nodata-& 3

  property intellectual admission max-nodata-& 3

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  user admin name secret 5 *.

  !

  !

  !

  !

  !

  !

  !

  interface FastEthernet0/0

  Description main switch Port

  IP 172.16.0.254 255.255.255.252

  IP nat inside

  no ip virtual-reassembly

  Speed 100

  full-duplex

  !

  interface FastEthernet0/1

  Description Internet Port

  DHCP IP address

  IP access-group WANACL in

  NAT outside IP

  no ip virtual-reassembly

  automatic duplex

  automatic speed

  !

  router ospf 100

  Log-adjacency-changes

  passive-interface FastEthernet0/1

  network 172.16.0.252 0.0.0.3 area 0

  default information are created

  !

  IP forward-Protocol ND

  !

  !

  no ip address of the http server

  no ip http secure server

  overload of IP nat inside source list 101 interface FastEthernet0/1

  IP nat inside source static tcp 10.50.0.250 1723 interface FastEthernet0/1 1723

  IP nat inside source static tcp 10.20.0.200 22 interface FastEthernet0/1 22

  IP nat inside source static tcp 10.20.0.100 6667 interface FastEthernet0/1 6667

  IP nat inside source static tcp 10.20.0.200 80 interface FastEthernet0/1 1337

  IP nat inside source static udp 10.20.0.100 9987 interface FastEthernet0/1 9987

  IP nat inside source static tcp 10.20.0.250 21 interface FastEthernet0/1 21

  IP nat inside source static tcp 10.20.0.250 20 interface FastEthernet0/1 20

  !

  WANACL extended IP access list

  Note * established connections permit *.

  allow tcp any a Workbench

  Note * Immediate deny forbidden beaches *.

  ----------------------------------------------------

  * Lost prohibited beaches *.

  ----------------------------------------------------

  Note * deny spiders *.

  ----------------------------------------------

  * Ranges of Spider lost *.

  -----------------------------------------------

  Note * DHCP allow *.

  allow udp any any eq bootpc

  Note * specific permit ICMP *.

  permit any any icmp echo response

  Note * deny bogon beaches *.

  deny ip 127.0.0.0 0.255.255.255 everything

  deny ip 169.254.0.0 0.0.255.255 everything

  deny ip 10.0.0.0 0.255.255.255 everything

  deny ip 172.16.0.0 0.15.255.255 all

  deny ip 192.168.0.0 0.0.255.255 everything

  Note * allow all UDP traffic *.

  allow a udp

  Note * NAT services permit (recorded in SNMP) *.

  permit tcp any any eq ftp log

  permit tcp any any eq 1723

  permit tcp any any newspaper of ftp - data eq

  permit tcp any any eq 22 log

  permit tcp any any eq 6667 newspaper

  allow a gre

  allow udp any any eq newspaper 9987

  permit tcp any any eq 1337

  refuse an entire ip

  !

  record 10.50.0.250

  access-list 101 permit any one

  access list 101 ip allow a whole

  !

  !

  !

  control plan

  !

  !

  !

  !

  !

  !

  !

  !

  !

  !

  access controller

  Shutdown

  !

  exec banner ^ C

  WARNING: Unauthorized access to this system is prohibited and will be

  pursued by the law. By accessing this system, you agree that your

  actions can be monitored if you suspect unauthorised use.

  ^ C

  connection of the banner ^ C

  *************************************************************

  WARNING - PRIVATE - ACCESS FORBIDDEN ELECTRONIC DEVICE

  This device is a private network device.  Access to this device is

  not allowed.  Any attempt of unauthorized access will be connected

  and appropriate legal action will be taken.

  *************************************************************

  ^ C

  !

  Line con 0

  password 7 *************************************

  Synchronous recording

  local connection

  line to 0

  password 7 *************************************

  Synchronous recording

  local connection

  line vty 0 4

  password 7 *************************************

  Synchronous recording

  local connection

  length 0

  preferred transport ssh

  line vty 5 15

  password 7 *************************************

  Synchronous recording

  opening of session

  preferred transport ssh

  !

  NTP-period clock 17180466

  NTP 184.105.192.247 Server

  !

  end

  is your server FTP active or passive?

  ACL will change you accordingly. try to capture the transaction successful with FTP in wireshark and analyze the source and destination ports.

  http://www.SlackSite.com/other/FTP.html

• EA-4500 cannot connect in the configuration page

  I try to connect to my EA4500 Setup page. I have the firmware "cloud connect" and when I get redirected to the "Linksys Smart Wi - Fi" page in my browser, I try to log in as usual. He accepts my username and password, then I get a page that contains a rotating chart and it says "waiting...". "He eventualy expires and brings back me to the login screen. I have tried rebooting my router and it does not help. I also unplugged the modem from the internet connection and entered the main router password, and gives me the same answer that if I tried to connect via the cloud.

  The only thing I can think of would be to do a factory reset of the router, but based on what is happening here, I'm frankly scared that I will never get my router online. I really wanted this cloud thing to work, but if I can get connected I will probably be back to the old firmware. Linksys gave us?

  I tried on several computers in the House and still have the same answer - no access to the router. At the end of the day, I did a factory reset and was finally able to get into the router. It was a pain to have to re - install my router, but at least I got all devalued parameters.

  For memory, the firmware had not changed since the introduction of the services cloud in June/July. I have the same exact firmware I downloaded in July. The only thing that has changed is that Cisco renamed "cloud connect" web interface for "Smart Wifi."  The web interface seems a little faster, but there are still a lot of wait time.

  I must be honest, based on this event, I was ready to go back to the old firmware, however, I'll give it one more chance to see if things will be better, or at least stabilize...

• Interface WLC 5508 AP-Manager

  Hi, I own a WLC 5508 and (probably), I do not understand the AP Manager interfaces. I have a laboratory with 2 x 1242AG and 1 x 1252AG connected to c2960. APs in vlan 10 (192.168.10.0/24, configured via DHCP), APs are connected to interface 'switchport access mode. C2960 is connected via a trunk to c4506 and WLC is plugged into article gi1/3 and article gi1/4 (both through twingig). The two ports are configured as 'switchport mode trunk ". WLC management interface is IDE oucederomsurlesecondport WLC 8 (linked to article gi1/4), and AP-Manager is on port 1 (connected to article gi1/3) WLC. WLC management interface has 'Management dynamic AP' set to off, and AP-Manager defined activated. The two are interfaces to management and AP-Manager tag, vlan id 12 and 13 (subnets 192.168.12.0/24, 192.168.13.0/24) respectively. APs receive their IP through DHCP configuration (server located in vlan 20, 192.168.20.0, in use ip helper-address) and try to discover DNS resolution WLC (CISCO-CAPWAP - CONTROLLER.some.domain resolves to AP-Manager IP correctly). But AP has the status "not connected" in monitor/statistics/AP join APs do not join to the controller, said WLC "Discovery request Ignoring received on the management interface".

  But if I put management interface as "Dynamic AP activated" and change the DNS to resolve CISCO-CAPWAP... it's IP everything works well - AP is associated with the time. Please help, how to reach the KNEES a AP-Manager interface? Sign up for the Manager of WLC is simple, but my design requires at least 2 interfaces AP Manager.

  If you have a 5508, why you have the AP Manager?

• SSH connection on SAA issue.

  Hello

  I configured to connect to the outside using ssh ver 1/2 on the SAA. but I can't connect using SecureCRT and PuTTY ssh client software...

  In addition, I have tred to connect outside the witch ASA router ssh command.

  but the result is the same...

  Here is the configuration on SAA.

  I would like to know why I can't connect external interface of the ASA.

  ASA Version 7.1 (2)

  !

  hostname ASA 5540

  cisco.com-domain name

  enable password xxxx

  names of

  !

  interface GigabitEthernet0/0

  Description * Outside *.

  nameif outside

  security-level 0

  IP 192.168.200.2 255.255.255.0

  !

  interface GigabitEthernet0/1

  Description * inside *.

  nameif inside

  security-level 100

  192.168.100.2 IP address 255.255.255.0

  !

  interface GigabitEthernet0/2

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface GigabitEthernet0/3

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface Management0/0

  Description * management only *.

  nameif management

  security-level 0

  IP 192.168.250.2 255.255.255.0

  management only

  !

  passwd xxxx

  boot system Disk0: / asa712 - k8.bin

  passive FTP mode

  DNS server-group DefaultDNS

  cisco.com-domain name

  permit same-security-traffic inter-interface

  pager lines 24

  Enable logging

  logging of debug asdm

  Debugging trace record

  Outside 1500 MTU

  Within 1500 MTU

  MTU 1500 management

  no failover

  ASDM image disk0: / asdm512.bin

  don't allow no asdm history

  ARP timeout 14400

  Route outside 0.0.0.0 0.0.0.0 192.168.200.1 1

  Route inside 172.16.0.0 255.255.0.0 192.168.100.1 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00

  Timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  xxxx xxxx password username

  privilege 15

  xxxx xxxx privilege 15 password username

  Enable http server

  http 0.0.0.0 0.0.0.0 outdoors

  http 0.0.0.0 0.0.0.0 inside

  http 0.0.0.0 0.0.0.0 management

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown cold start

  Telnet 0.0.0.0 0.0.0.0 inside

  Telnet 0.0.0.0 0.0.0.0 management

  Telnet timeout 5

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH timeout 60

  Console timeout 0

  access to administration management

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  Policy-map global_policy

  class inspection_default

  inspect the dns-length maximum 512

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the netbios

  inspect the rsh

  inspect the rtsp

  inspect the skinny

  inspect esmtp

  inspect sqlnet

  inspect sunrpc

  inspect the tftp

  inspect the sip

  inspect xdmcp

  !

  global service-policy global_policy

  des-sha1 encryption SSL rc4 - md5

  Cryptochecksum:xxxx

  : end

  ]

  Router #ssh-l cisco - c of the 192.168.200.2.

  Password:

  % Authentication failed.

  [Connection to 192.168.200.2 closed by foreign host]

  Router #.

  You must specify the authentication method.

  the ssh LOCAL console AAA authentication

  for example.

  SSH x.x.x.x x.x.x. inside | for increased security outside

  Hope this helps,

  THX

  Jay

• Interface VLAN traffic information

  Hi all

  Could someone please advice what traffic demonstrated Interface VLAN?

  For example, I have two interfaces, VLAN 10, and I created the layer 3 Interface VLAN 10.

  If I monitor the traffic of 10 to VLAN, the two interfaces combined traffic statistics?

  Thank you

  Prasanna Kumar deully

  Oh sorry I thought you meant span monitor where you register the interface traffic combined with the terms of a vlan

  To answer your question, it will display the number of ip layer 3 traffic in packets to all interfaces grouped under the vlan, then Yes, the two interfaces will show the interface of layer 3 vlan, some platforms will also show some L2 information like below and its shows 30 sec count on VLAN interfaces, but number five on the physical interface FA0/1

  Vlan149 is up, line protocol is up
  Material is EtherSVI, the address is 0008.e3ff.fd90 (bia 0008.e3ff.fd90)
  The Internet address is x.x.x.x/24
  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  KeepAlive not supported
  Type of the ARP: ARPA, ARP Timeout 04:00
  Last entry of 00:00:14, exit ever, blocking of output never
  Last clearing of "show interface" counters 24w4d
  Input queue: 0/75/0/0 (size/max/drops/dumps); Total output drops: 0
  Strategy of queues: fifo
  Output queue: 0/40 (size/max)
    30 second entry rate 2134000 bps, 381 packets/s
  exit rate of 30 seconds 2019000 bps, 460 packets/s
    L2 switching: ucast: 30595061 pkt, 2268569227 bytes - mcast: 0 pkt, 0 bytes
  L3 in Switched: ucast: 5882988002 pkt, 1908218042989 bytes - mcast: 1623 pkt, 775020 bytes
  L3 on Switched: ucast: 5579358870 pkt, 1872959920772 bytes - mcast: 322 pkt, 138259 bytes
  5886751734 packets input, 1885010127367 bytes, 0 no buffer
  Received 0 emissions (28 of IP multicasts)
  0 Runts, 0 giants, 0 shifters
  entry 0, 0 CRC errors, frame 0, saturation 0, 0 ignored
       5618600472 packets output, 1854023804196 bytes, 0 underruns
  0 output errors, 0 interface resets
  output buffer, the output buffers 0 permuted 0 failures

• Secondary LAN IP VS sous-interface

  Hi all

  I have a 1941 installed on a customer site with subnet required 10.0.0.0/16. WAN is via VPN MPLS.

  someone can let me know if it is advisable to use secondary IP addresses or should I go with subinterface? What are the advantages and disadvantages of the use of one over the other.

  always contemplating on the Installer (not yet in production) and must be reading your thoughts. Thanks in advance!

  #sh worm

  Cisco IOS software, software C1900 (C1900-UNIVERSALK9-M), Version 15.0 (1) M6, RELEASE SOFTWARE (fc1)

  Technical support: http://www.cisco.com/techsupport

  Copyright (c) 1986-2011 by Cisco Systems, Inc.

  Updated Thursday, June 1, 11 15:31 by prod_rel_team

  #sh run int g0/1

  Building configuration...

  Current configuration: 410 bytes

  !

  interface GigabitEthernet0/1

  Description network client

  the IP 10.0.0.1 255.255.255.0 secondary

  IP 10.0.1.1 255.255.255.0 secondary

  IP 10.0.2.1 255.255.255.0 secondary

  10.0.3.1 IP address 255.255.255.0 secondary

  10.0.4.1 IP address 255.255.255.0 secondary

  10.0.5.1 IP address 255.255.255.0 secondary

  IP 10.0.8.1 255.255.255.0

  full duplex

  Speed 100

  No keepalive

  Subinterfaces will also keep the traffic areas of separate broadcast which is another advantage. However, this means that you must apply additional configuration for relay emissions between the VLANS. For example, so that DHCP clients can communicate with a DHCP server in a VIRTUAL local network. Order support - ip address will send the most common, such as DHCP. Place it on the subinterface where DHCP clients reside and set address of assistance as the DHCP server. Google and I'm sure you will find many examples.

  Subinterfaces are traffic with the VLAN ID tag, so I presume your connected devices are also capable of brand VLAN traffic. What devices you connect your interface GigabitEthernet0/1 of the router?

• inside the user initiates the connection to the vpn user

  Hi, couldn't solve this problem:

  I have to the customer. A and B.

  Connected via VPN for remote access and the applied filter A

  B is inside the user connected inside interface with sec - lvl 100.

  For example,.

  Pings B A but without success

  B connect A, but without success

  I know of sec - lvl 100 all the conn is allowed and ASA allows a connection established to the rear. Why B is not allowed at a.

  (after adding the ACL to allow b to A, I've been successful)

  First of all, security levels don't matter when it comes to traffic-vpn - all traffic in both directions is allowed without restriction as long as sysopt-permit vpn connection is present in the config (default).

  Secondly, when you applied the filter-vpn functionality, ACL works for traffic in both directions, i.e. you explicitly allow traffic in both directions in this single ACL.

  These vpn filter ACL is a little special ACL, cause it is written from the perspective of the (client) remote site, but should include entries for both directions. You can take a look here (or elsewhere)) on how it works:

  http://popravak.WordPress.com/2011/11/05/Cisco-ASA-VPN-filter-as-i-see-it/

• serial interface T1 routers back-to-back 1841

  Hello everyone, I'm trying to set up my CCNA lab environment and I everything works fine, including crossover between my three 1841 routers connections (all interfaces are on the rise, and line protocols are all)

  With regard to connections, through cards to Interface WAN WIC-1DSU-T1-V2 series, I'm not able to ping any of these specific interfaces of the router IP addresses, they are on, I am able to ping from one node on the network 1 (ROUTER1) across Network2 (ROUTER2).

  Did I miss something like OSPF or another protocol to get this last step to work?

  Any help would be appreciated!

  Kind regards

  Jon

  Jon

  Good luck in your studies for CCNA. You should not have a protocol such as OSPF for a router to ping a neighbor connected. If you want to ping something that is not directly connected, you may need a routing protocol (or static routes). If all interfaces show that upward and with the Protocol appear as that would seem like things should work and ping should work. But if it does not, then, he need a little more information from you to determine what the problem is. First post you the output of show ip interface brief each of the routers. It would also help if you would be after the release of the cdp neighbor see command and see the cdp interface.

  HTH

  Rick

• VPN SSL from the inside on the external interface

  Hi all

  First of all I know that I can activate the SSL interface inside, but that's not what I need or want.

  Scenario:

  Several interfaces and VLAN on the SAA (running 8.0.5).

  SSL VPN configured and enabled on the external interface.

  Need to know if it is possible to access the SSL VPN from other interfaces directly to the IP address external interface, something like her hairpin.

  Possible a solution (if it exists) with or without NAT (I have public IPs on some interfaces).

  This will be useful for users who can connect any interface (inside, outside, or other) and with only a DNS record, I'll be able to manage everything.

  Concerning

  PS: Is DNS doctoring an option? The tests that I have done this does not work.

  Post edited by: rcordeiro

  Hello

  Unfortunately, it is not possible. You cannot communicate with an ASA interface which is not directly connected through the firewall.

  Kind regards

  NT