Cisco series ESP 540

Similar Questions

• Cisco series C Top Bar top in presentation Mode

  In presentation Mode, the C Series codec displays an overlay of bar status (IP address, Cisco logo, time etc..).

  Unfortunately, this can be a source of distraction or worse, can cover the parts of the presentation to the local public.

  Is it possible to remove this bar?

  Eric,

  This has been fixed in a later version of TC5.x, see below for more details.

  CSCtx15428 : bar the top is always visible, even in full screen and in calls

  Symptom:
  Banner with Cisco logo and clock widget appears on the display when in a call.
  Conditions:
  Running TC software before TC 5.0 and a connected over HDMI device loses connection and is re-connected.
  Workaround solution:
  Perform a reset of the device factory.
  Alternative procedure via GUI:
  (1) connect to the web interface of the codec.
  2) go to Advanced Configuration > output > HDMI > OverscanLevel
  (3) change the overscanlevel to high and save. The video will be reduced to the
  middle of the screen.
  (4) change the overscanlevel to zero, as it was before and save. The video will be
  return to normal.
  Widgets and Cisco header should be gone.

• Cisco series C - Open Ports TCP 4043 & 4044

  Anyone can respond to what these ports do on C-Series codecs?

  They are generally used for the nearby identity resolution protocol and Protocol location tracking and known to be used by malicious software. Are they used for these protocols, can they be closed without loss of functionality. I have a client who has many systems placed on public networks and they wonder if this can be / should be done

  I looked in the paper without finding the answer:

  http://www.Cisco.com/en/us/docs/Telepresence/infrastructure/VCs/config_guide/Cisco_VCS_IP_Port_Usage_for_Firewall_Traversal_Deployment_Guide_X7-2.PDF

  Any ideas?

  MW

  How are Mattias Hei, you?

  The firewall vcs guide here helps you.

  If I see just the tcp ports 4043 and 4044 are used for business communication (cisco contact 8) & upgrades.

  If no malware :-)

  You can be sure that you can close it from external networks. An intouch would most likely be

  plugged into the secondary port or the LAN in all cases.

  I do it vice versa, all close and open just need ssh and http (s) of networks including access management

  and allow only necessary media ports and signage from the outside.

  You will find that the media ports used TC5.1 ports in the Administrator's guide

  Value space:
  
      Dynamic: The system will allocate which ports to use when opening a TCP connection. The reason for doing this is to avoid using the same ports for subsequent calls, as some firewalls consider this as a sign of attack. When Dynamic is selected, the H.323 ports used are from 11000 to 20999. Once 20999 is reached they restart again at 11000. For RTP and RTCP media data, the system is using UDP ports in the range 2326 to 2487. Each media channel
  
      is using two adjacent ports, ie 2330 and 2331 for RTP and RTCP respectively. The ports are automatically selected by the system within the given range. Firewall administrators should not try to deduce which ports are used when, as the allocation schema within the mentioned range may change without any further notice.
  
      Static: When set to Static the ports are given within a static predefined range [5555-6555].
  
      

• Cisco series ASR DMVPN Phase 3 Support

  Hello

  You have an idea if the routers Cisco ASR takes in charge phase 3 of DMVPN recently? Or when they will support?

  Although there is no support for the ASR on Cisco documantations, you can see the shortcut commands and redirect PNDH

  on the IOS of the ASR. I have it configured, but it doesn't seem to work.

  Thank you very much

  Best regards

  3 phase DMVPN is supported from version 2.5 front.

  If you are already running this version or later, please kindly open a TAC case to better study the question.

• CISCO SERIES: 1700 - Config will not save in NVRAM.

  I tried 'memory to write' a config and also attempted to save it to the startup-config, but every time I turned off and turned on, it does not record the prior config. Anyone know what could be the problem?

  Dear S,

  Are you through your problem?

  Hope Thisishanky and rburts soloution that worked, if you want, you can IM/PM me on yahoo.com my id is [email protected] / * /. Cool. If you still face any problem :)

  EM

• Cisco's C series server using direct connect to UCSM ping

  We have the 2 C of Cisco series connected servers (VIC 1225 cards) direct connect to the fabric of the interconnections and managed via UCSM but cannot get network working.

  Service profiles have been created and pushed with only 1 VLANS and VLAN as the default native but cannot communicate with the configured IP address.  Address Mac is learned at the northbound Nexus 5 K switches.  Seems to be a VLAN tagging problem somewhere

  You can test the MMIC?

  I bet it has to do with the tagging Vlan; I would advice to set your vlan natively and it will work!

  PS. I assume of course that you have installed the appropriate driver enic

• in Cisco licenses a single model controller WLAN HA

  Hi all

  I am performing an estimate on the CCW. I have to configure a wireless controller with 12 licenses the AP based on the Cisco model. Please find below the BOM:

  C1-AIR-CT5508-K9	Range Cisco ONE - 5500 controller WLAN w / 0 AP PFR
  CON-SNT-CT5508K9	SNTC-8X5XNBD C1-5500 Wireless LAN Con w / 0 AP PFR
  LIC-CT5508-BASE	Basic software license
  ECMU-CON-LICCT8BAS	Southwestern Scotian platform upgrades the software Base Licens
  C1-MSE-PAK	Cisco MSE license a PAK
  C1FPAIRK9	Cisco ONE perpetual Foundation - wireless
  ECMU-CON-C1FPAIR	Southwestern Scotian platform is LEVEL C1 perpetual Foundation - wireless
  C1-WLC-1	THE Cisco Wireless LAN Controller PA license (any WLC)
  C1-WLC-PAK	THE Cisco Wireless LAN Controller AP License PAK (all WLC)
  C1-PI-LFA-AP-K9	PI license Cisco FOR LF & as WLAN device
  C1-ISE-BASE-AP	Cisco identity services 25 Lic endpoint database engine
  C1-MSE-LS-1	A Base of CMX Cisco (location + Connect) - 1AP license
  C1-CEM-25-K9	Cisco energy Mgmt Perpetual Lic - 25 end Points
  C1-CAND-1	Cisco connected THOSE Analytics Net deployment - 1 Dev Lic 1 year
  C1-LC-5-1Y	Cisco a 5 fps 1 year Lic StealthWatch
  C1F1VAIR-02	Tracker PID v02 Fnd Perpetual AIR - no delivery
  SWC5500K9-80	Cisco Unified Wireless Controller version 8.0 SW
  AIR-PWR-CORD-THIS	AIR Line Cord Central Europe
  AIR-PWR-5500-AC	Cisco series 5500 redundant power wireless controller

  Now, I have to configure a controller HA. In the CISCO model, the SKU is the same as the controller, which I configured above.

  Configure the controller HA without AP licenses?

  Please give me the best way to configure the WLC HA in the Cisco model

  Hi Angel,

  If you get a C1-AIR-CT5508-K9 , then you should not have licenses on the secondary unit (who you called unit HA). However if this is not the case then the usual requirement of license AP 50 County should hold to convert a secondary WLC. The number of licenses AP 50 can be registered license C1-WLC-1 pool.

  Hope I was able to clear the confusion.

  Best regards

  www.wifitrainers.com

  Learn from the best to be the best!

  Change the way you look at connectivity of wireless clients forever by registering to watch this free webinar and also a chance to win our starter kit worth $ 8000 wireless for free!

• CISCO WIRELESS SOLUTION

  Dear experts,

  I want to give a solution to one of my clients. But I am new to cisco wireless. I list the products below. This will fill requirement

  I have a doubt, can I could put AIR-AP1262N-N-K9 to LWAP and can connect this AP to WLC (AIR-WLC4402-12-K9)?

  It is urgent please suggest.

  AIR-AP1262N-N-K9	802.11a/g/n Standalone AP; Ext Ant; Domain N Reg
  AIR-ANT2422DW-R	2.4 GHz 2.2 dBi rotating dipole white antenna, RP - TNC
  AIR-ANT5135DW-R	3.5 GHz 5 dBi rotating dipole white antenna, RP - TNC
  AIR-AP-SUPPORT-2	1040, 1140, 1260, 3500 universal, mounting bracket
  AIR-AP-T-RAIL-R	Clip of grid ceiling for Aironet APs - (default) recessed mounting
  S126W7K9-12425JA	NETWORK without WIRE Cisco series 1260 IOS
  CON-SNT-AP1262N	SMARTNET 8X5XNBD 802.11a/g/n Standalone AP; Ext Ant
  Product code	Description
  AIR-WLC4402-12-K9	4400 series WLAN controller for up to 12 Lightweight APs
  AIR-PWR-CORD-AP	AIR Line Cord Asia - Pacific (APAC)
  SWLC4400K9-60	Cisco Unified WLAN controller SW version 6.0 - MD
  SWLC4400K9-60-ER	WLAN controller of emergency SW for 4400 - ED
  CON-SNT-WC440212	SMARTNET 8X5XNBD 4402-12 WLAN controller
  Product code	Description
  POE-180 X =	802.3af PoE Module, power 80W power supply and cable
  ACR-AC2E	AC Europe power cord
  GLC-SX-MM-RGD =.	1000Mbps SFP robust multi-mode

  Yes.

• Servers blades Cisco and BS chassis house?

  Or they re-brand? They are manufactured by HP, IBM, Cisco, etc. ? Basic question, but I wonder if they have renamed them as they do the serial MCS Unified Communications servers.

  Thank you!

  Cisco series B blade servers and the C-Series rack servers are designed by Cisco. There is no product so 3rd party without re-branding. In fact, there are a number of patents and standards that have been put forward with the implementation of Cisco servers.

• Site to IP - sec site ASA 9.1 worm problem vs IOS

  Hi all

  I'm trying to set up the vpn site-to site between ASA and IOS, but unsuccessfully router,

  newspapers are:

  (1) this is not behind a nat device

  (2) an encrypted packet received with no counterparty SA

  networks are:

  172.25.0.0 (inside ASA) A.A.A.A (outside of ASA) is required to connect to the address B.B.B.B router IOS with inside the network 192.168.1.0

  Here are the configs:

  ASA:

  ASA 5505 # sh run
  : Saved
  :
  ASA Version 9.0 (1)
  !
  hostname ASA 5505
  KZ 1 domain name.
  names of
  vpn_pool_ASA-5505 192.168.172.2 mask - 255.255.255.0 IP local pool 192.168.172.100
  local pool SAME_NET_ALA 172.25.66.200 - 172.25.66.210 255.255.255.0 IP mask
  !
  interface Ethernet0/0
  switchport access vlan 2
  10 speed
  !
  interface Ethernet0/1
  !
  interface Ethernet0/2
  !
  interface Ethernet0/3
  !
  interface Ethernet0/4
  !
  interface Ethernet0/5
  !
  interface Ethernet0/6
  !
  interface Ethernet0/7
  !
  interface Vlan1
  nameif inside
  security-level 100
  IP 172.25.66.15 255.255.255.0
  !
  interface Vlan2
  nameif outside
  security-level 0
  address IP A.A.A.A 255.255.255.252
  !
  passive FTP mode
  clock timezone ALMST 6
  summer time clock ALMDT recurring last Dim Mar 0:00 last Sun Oct 0:00
  DNS server-group DefaultDNS
  KZ 1 domain name.
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  network obj_any object
  subnet 0.0.0.0 0.0.0.0
  network of the NETWORK_OBJ_172.25.66.0_24 object
  172.25.66.0 subnet 255.255.255.0
  network of the NETWORK_OBJ_192.168.172.0_25 object
  subnet 192.168.172.0 255.255.255.128
  network of the NETWORK_OBJ_172.25.66.192_27 object
  subnet 172.25.66.192 255.255.255.224
  network of the ALA_office object
  subnet 192.168.1.0 255.255.255.0
  network of the NETWORK_OBJ_172.25.0.0_16 object
  172.25.0.0 subnet 255.255.0.0
  Standard access list SAME_NET_ALA_splitTunnelAcl allow 172.25.66.0 255.255.255.0
  SAME_NET_ALA_splitTunnelAcl list standard access allowed 10.0.0.0 255.0.0.0
  Standard access list SAME_NET_ALA_splitTunnelAcl allow 172.0.0.0 255.0.0.0
  list access VPN-OUT-INS scope ip 192.168.172.0 255.255.255.0 allow no matter what paper
  VPN-IN-INS scope any allowed ip access list no matter what paper
  extended VPN OUTPUT access list permits all ip 192.168.172.0 255.255.255.0 connect
  access list permit VPN OUT ALL standard any4
  standard access list net172 allow 172.25.0.0 255.255.0.0
  access-list standard net10 allowed 10.0.0.0 255.0.0.0
  outside_cryptomap list extended access permitted ip NETWORK_OBJ_172.25.66.0_24 object ALA_office
  pager lines 24
  Enable logging
  asdm of logging of information
  Within 1500 MTU
  Outside 1500 MTU
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  ICMP allow any inside
  don't allow no asdm history
  ARP timeout 14400
  no permit-nonconnected arp
  NAT (inside, outside) static source NETWORK_OBJ_172.25.66.0_24 NETWORK_OBJ_172.25.66.0_24 NETWORK_OBJ_192.168.172.0_25 NETWORK_OBJ_192.168.172.0_25 non-proxy-arp-search of route static destination
  NAT (inside, outside) source static obj_any obj_any NETWORK_OBJ_172.25.66.192_27 NETWORK_OBJ_172.25.66.192_27 non-proxy-arp-search of route static destination
  NAT (inside, outside) static source NETWORK_OBJ_172.25.66.0_24 NETWORK_OBJ_172.25.66.0_24 ALA_office ALA_office non-proxy-arp-search of route static destination
  !
  network obj_any object
  NAT dynamic interface (indoor, outdoor)
  !
  NAT source auto after (indoor, outdoor) dynamic one interface
  group-access VPN-IN-INS in the interface inside
  group-access VPN-IN-INS interface inside
  Route outside 0.0.0.0 0.0.0.0 88.204.136.165 1
  Route inside 10.0.0.0 255.0.0.0 172.25.66.1 2
  Route inside 172.0.0.0 255.0.0.0 172.25.66.1 1
  Timeout xlate 03:00
  Pat-xlate timeout 0:00:30
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  identity of the user by default-domain LOCAL
  the ssh LOCAL console AAA authentication
  Enable http server
  http 192.168.1.0 255.255.255.0 inside
  http 172.25.66.16 255.255.255.255 inside
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown warmstart of cold start
  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac
  Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA-TRANS-aes - esp esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-TRANS-aes - esp esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-DES-SHA-TRANS esp - esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-DES-MD5-TRANS esp - esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 Alma-series esp - aes esp-sha-hmac
  Crypto ipsec ikev2 ipsec-proposal OF
  encryption protocol esp
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 proposal ipsec 3DES
  Esp 3des encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES
  Esp aes encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES192
  Protocol esp encryption aes-192
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 AES256 ipsec-proposal
  Protocol esp encryption aes-256
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec pmtu aging infinite - the security association
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
  card crypto outside_map 1 match address outside_cryptomap
  outside_map game 1 card crypto peer B.B.B.B
  card crypto outside_map 1 set ikev1 Alma-set transform-set
  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  outside_map interface card crypto outside
  inside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  inside crypto map inside_map interface
  trustpool crypto ca policy
  IKEv2 crypto policy 1
  aes-256 encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 10
  aes-192 encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 20
  aes encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 30
  3des encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 40
  the Encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  Crypto ikev2 allow outside
  Crypto ikev1 allow outside
  IKEv1 crypto policy 1
  preshared authentication
  3des encryption
  md5 hash
  Group 2
  life 86400
  IKEv1 crypto policy 5
  preshared authentication
  aes encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 10
  authentication crack
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 20
  authentication rsa - sig
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 30
  preshared authentication
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 40
  authentication crack
  aes-192 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 50
  authentication rsa - sig
  aes-192 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 60
  preshared authentication
  aes-192 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 70
  authentication crack
  aes encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 80
  authentication rsa - sig
  aes encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 100
  authentication crack
  3des encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 110
  authentication rsa - sig
  3des encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 120
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 130
  authentication crack
  the Encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 140
  authentication rsa - sig
  the Encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 150
  preshared authentication
  the Encryption
  sha hash
  Group 2
  life 86400
  Telnet timeout 5
  SSH 0.0.0.0 0.0.0.0 inside
  SSH 0.0.0.0 0.0.0.0 outdoors
  SSH timeout 5
  Console timeout 0

  dhcpd outside auto_config
  !
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  WebVPN
  allow outside
  No anyconnect essentials
  internal web_access group policy
  attributes of the strategy of group web_access
  clientless ssl VPN tunnel-Protocol
  WebVPN
  the value of the URL - list PRTG
  internal SAME_NET_ALA group policy
  SAME_NET_ALA group policy attributes
  value of server DNS 8.8.8.8
  Ikev1 VPN-tunnel-Protocol
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list SAME_NET_ALA_splitTunnelAcl
  internal GroupPolicy1 group strategy
  attributes of Group Policy GroupPolicy1
  Ikev1 VPN-tunnel-Protocol
  internal GroupPolicy_to_ALA group strategy
  type tunnel-group SAME_NET_ALA remote access
  attributes global-tunnel-group SAME_NET_ALA
  address SAME_NET_ALA pool
  Group Policy - by default-SAME_NET_ALA
  IPSec-attributes tunnel-group SAME_NET_ALA
  IKEv1 pre-shared-key *.
  type tunnel-group web_access remote access
  tunnel-group web_access General-attributes
  Group Policy - by default-web_access
  tunnel-group B.B.B.B type ipsec-l2l
  attributes global-tunnel-group B.B.B.B
  Group Policy - by default-GroupPolicy1
  IPSec-attributes tunnel-Group B.B.B.B
  IKEv1 pre-shared-key *.
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  Review the ip options
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  inspect the icmp
  inspect the http
  !
  context of prompt hostname
  no remote anonymous reporting call
  Cryptochecksum:932099620805dc22d9e48a5e04314887
  : end

  and router IOS:

  R1921_center #sh run
  Building configuration...

  Current configuration: 6881 bytes
  !
  ! Last configuration change to 12:22:45 UTC Friday, August 29, 2014 by yerzhan
  version 15.2
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  hostname R1921_center
  !
  boot-start-marker
  boot-end-marker
  !
  !
  logging buffered 51200 warnings
  !
  AAA new-model
  !
  !
  AAA authentication login userauthen local
  AAA authorization groupauthor LAN
  !
  !
  !
  !
  !
  AAA - the id of the joint session
  !
  IP cef
  !
  !
  !
  !

  !
  !
  !
  !
  "yourdomain.com" of the IP domain name
  No ipv6 cef
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  Crypto pki trustpoint TP-self-signed-260502430
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 260502430
  revocation checking no
  rsakeypair TP-self-signed-260502430
  !
  !
  TP-self-signed-260502430 crypto pki certificate chain
  certificate self-signed 01
  30820229 30820192 A0030201 02020101 300 D 0609 2A 864886 F70D0101 05050030
  2 060355 04031325 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 30312E30
  69666963 32363035 30323433 30301E17 313331 31323630 35343131 0D 6174652D
  355A170D 2E302C06 1325494F 03550403 32303031 30313030 30303030 5A 303031
  532D 5365 6C662D53 69676E65 642D 4365 72746966 69636174 652 3236 30353032
  06092A 86 4886F70D 01010105 34333030 819F300D 00308189 02818100 0003818D
  C178A16C 26637 HAS 32 E2FE6EB2 DE63FC5D 2F4096D2 1A223CAF 52A122A1 F152F0E0
  D2305008 FA312D36 E055D09C 487A01D5 629F8DE4 42FF0444 4B3B107A 730111B 6
  F6439BA2 970EFE71 C9127F72 F93603E0 11B3F622 73DB1D7C 1889D57C 88C3B141
  ED39B0EA 377CE1F7 610F9C76 FC9C843F A81AEFFE 07917A4B 2946032B 207160B 9
  02030100 01A 35330 03551 D 13 51300F06 0101FF04 05300301 01FF301F 0603551D
  23041830 1680146B B9F671FA BDD822DF 76802EEA 161D18D6 1 060355 9B8C4030
  1D0E0416 04146BB9 F671FABD D822DF76 802EEA16 1D18D69B 8C40300D A 06092, 86
  01010505 00038181 00B0C56F F1F4F85C 5FE7BF24 27D1DF41 7E9BB9CE 4886F70D
  0447910A E780FA0D 07209827 3A969CD0 14AAA496 12929830 0D17F684 7F841261
  56365D9C AA15019C ABC74D0A 3CD4E002 F63AA181 B3CC4461 4E56E58D C8237899
  29F48CFA 67C4B84B 95D456C3 F0CF858D 43C758C3 C285FEF1 C002E2C5 DCFB9A8A
  6A1DF7E3 EE675EAF 7A608FB7 88
  quit smoking
  license udi pid CISCO1921/K9 sn FCZ1748C14U
  !
  redundancy
  !
  !
  !
  !
  !
  !
  !
  crypto ISAKMP policy 1
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 3
  BA 3des
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 5
  BA aes 256
  preshared authentication
  Group 2
  PSK - KEY key crypto isakmp A.A.A.A address
  PSK - KEY crypto isakmp key address 6 0.0.0.0
  !
  Configuration group crypto isakmp ALA-EMP-VPN client
  key *. *. *. *
  DNS 8.8.8.8
  domain cisco.com
  pool ippool
  ACL 101
  netmask 255.255.255.0
  !
  !
  Crypto ipsec transform-set esp-3des esp-md5-hmac dmvpn_alad
  transport mode
  Crypto ipsec transform-set esp-3des esp-md5-hmac RIGHT
  tunnel mode
  Crypto ipsec transform-set esp-3des esp-md5-hmac TRIPSECMAX
  transport mode
  Crypto ipsec transform-set AES - SHA aes - esp esp-sha-hmac
  tunnel mode
  !
  Profile of crypto ipsec MAXPROFILE
  game of transformation-TRIPSECMAX
  !
  !
  Crypto ipsec profile dmvpn_profile
  Set transform-set dmvpn_alad
  !
  !
  Crypto-map dynamic dynmap 10
  Set transform-set RIGHT
  market arriere-route
  !
  !
  !
  map clientmap client to authenticate crypto list userauthen
  card crypto clientmap isakmp authorization list groupauthor
  client configuration address map clientmap crypto answer
  20 ipsec-isakmp crypto map clientmap
  defined by peer A.A.A.A
  game of transformation-AES-SHA
  match address VPN_ASA_PAV
  !
  !
  !
  !
  !
  interface Loopback1
  IP 10.10.10.10 address 255.255.255.255
  !

  interface tunnels2
  IP 192.168.101.1 255.255.255.240
  no ip redirection
  authentication of the PNDH IP NHRPMAX
  dynamic multicast of IP PNDH map
  PNDH id network IP-4679
  dissemination of IP ospf network
  IP ospf hello-interval 30
  IP ospf priority 10
  source of tunnel GigabitEthernet0/1
  multipoint gre tunnel mode
  tunnel key 4679
  !
  the Embedded-Service-Engine0/0 interface
  no ip address
  Shutdown
  !
  interface GigabitEthernet0/0
  Description to_LAN
  IP 192.168.1.253 255.255.255.0
  IP nat inside
  IP virtual-reassembly in
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/1
  Description to_ISP
  address IP B.B.B.B 255.255.255.252
  NAT outside IP
  IP virtual-reassembly in
  automatic duplex
  automatic speed
  clientmap card crypto
  !
  router ospf 100
  Auto-cout reference-bandwidth 1000
  0 message digest authentication box
  area 192.168.1.0 digest authentication message
  redistribute static subnets
  passive-interface default
  no passive-interface Tunnel1
  network of 10.10.10.10 0.0.0.0 area 192.168.1.0
  network 192.168.1.0 0.0.0.255 area 192.168.1.0
  192.168.222.0 network 0.0.0.15 area 0
  !
  router ospf 1
  router ID 1.1.1.1
  redistribute static subnets
  passive-interface default
  no passive-interface tunnels2
  network of 10.10.10.10 0.0.0.0 area 192.168.1.0
  network 192.168.1.0 0.0.0.255 area 192.168.1.0
  192.168.101.0 network 0.0.0.15 area 0
  !
  IP local pool ippool 192.168.33.1 192.168.33.20
  IP forward-Protocol ND
  !
  IP http server
  23 class IP http access
  local IP http authentication
  IP http secure server
  IP http timeout policy slowed down 60 life 86400 request 10000
  !
  overload of IP nat inside source list 111 interface GigabitEthernet0/1
  IP nat inside source static tcp 192.168.1.11 22 Expandable 8022 B.B.B.B
  IP route 0.0.0.0 0.0.0.0 B.B.B.C
  !
  extended ACL - NAT IP access list
  deny ip 192.168.1.0 0.0.0.255 172.25.0.0 0.0.255.255
  allow an ip
  IP extended ACL - VPN access list
  ip permit 192.168.1.0 0.0.0.255 172.25.0.0 0.0.255.255
  VPN_ASA_PAV extended IP access list
  ip permit 192.168.1.0 0.0.0.255 172.25.66.0 0.0.0.255
  !
  access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.33.0 0.0.0.255
  access-list 111 deny ip 192.168.1.0 0.0.0.255 192.168.33.0 0.0.0.255
  access ip-list 111 allow a whole
  !
  !
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport output pad rlogin lapb - your MOP v120 udptn ssh telnet
  StopBits 1
  line vty 0 4
  exec-timeout 0 0
  privilege level 15
  transport input telnet ssh
  line vty 5 15
  exec-timeout 0 0
  privilege level 15
  transport input telnet ssh
  !
  Scheduler allocate 20000 1000
  !
  end

  The biggest problem is the incompatibility in the VPN access lists.

  The ASA said

  outside_cryptomap list extended access permitted ip NETWORK_OBJ_172.25.66.0_24 object ALA_office

  The router said

  ip permit 192.168.1.0 0.0.0.255 172.25.0.0 0.0.255.255

  Match them. If it still does not work then please post the revised configurations.

  HTH

  Rick

• E3000 VPN Client

  Hi, I'm in the strong for the purchase of a new router for my home network and want to use a router from Cisco series e.

  On this router, I want to be able to connect with a client through the Internet to my home network using a VPN client.

  I have some experience with the E2000, but this model does not have this feature.

  The E3000 has this feature? If not, is there a model of the E series that does?

  Thanks in advance for your answer.

  Robert

  Linksys consumer routers do not have this feature. You look at Cisco Small Business or better for VPN access.

• Cannot connect to my wireless HP Photosmart C4780

  Evertime I try to connect my HP Photosmart C4780 to my wireless network, I get this message:

  "Your computer is unable to communicate with your printer at 192.168.1.127. This can be the result of firewall software. If you use firewall software, make sure that the 427 UDP port is unlocked for the incoming and outgoing traffic.

  Your PC cannot communicate with your printer at address 192.168.1.127. Check all cable connections. Check that the printer and the PC and the router are powered on and connected to the network. »

  I tried to disable my firewall and that did not work. All the cables are connected and is turned.

  OS: WIndows 7

  Wireless router: Cisco series router Linksys E1000

  -Elliott Crouch

  OK, let's check some basic first things.  Are you printer connected to YOUR router or your PC?  Print a Test of the network wirelessly from the configuration > network area of the front of the printer.  There, it will tell you the name of the network to which it is attached.

  Compare the IP address to your printer.  Is - it the same, except the last numbers?

• SSD 1 TB upgrade in Latitude E7470

  Stopped on this laptop choice list a M.2 SSD 512 MB as the best choice.  The tech specs list also 512GB like the max, but I wonder if it shows just what Dell offers.  There are now versions 1 to the market of the m2, it would be this work as an upgrade?

  Hello!

  I tried with a series of 540 Intel SSD 1024 GB SATA-600 m2. Works like a charm.

• Half the width of the blade of bandwidth and IOM

  Hi, gurus from Cisco:

  I read that Cisco series B width blade has a total bandwidth of 20 GB, can I looking for answers by authorities of this forum?

  Example:

  2 FInterconnect IOM/2 with 8 blades half-width in UCS 5108 Chassis-2 server links by IOM-left and the other 2 links on the right server IOM

  Q1.

  With the above configuration, what fabric or IOM is used, A or B?

  Static pinning

  Server Blade/link 1 Slot 1,3,5,7---qui IOM will be used for these blades?

  Server Blade/link 2 Slot 2,4,6,8---qui IOM will be used for these blades?

  Q2.

  How to calculate the bandwidth of 20G in the Cisco documentation?

  Q3.

  If blade 1 o/s performs an i/o write request, said deterministically by the IOM (left of the chassis), if there is another reading of e/s issued by blade 1 once again, the I/O path passes by the IOM B(Right of Chassis) or by IOM to happen again? Here, no matter what algorithm to determine this?

  Q4.

  How to design a solution that will be to balance the load between the IOM 2? Or we can leave to Cisco UCSM decide automatically?

  I undertsand that I can verify failover allow the use of UCSManager to manually select fabric or fabric B as the main way and the other as secondary in A - B (A is the Pri) or B - A B as the Pri.

  Please help me help the UCS Cisco more than the foregoing is questions to the fire of some of us.

  Thank you.

  SIM

  Inline.

  ciscoucsisit wrote:
  Rob:
  Getting better understanding now. Excellent help from you.
  Assuming I create 1 service profile with the following:
  Adapter 1 as seen within UCSM
  vHBA-A- Fabric A - Is this 4GB as of now or can we treat it as 10G Port too likes vNIC?
  Depends on the Mezz card.  M71/M81 have 4GB FC chipsets.  M72KR uses an 8GB FC chip.
  vHBA-B- Fabric B - Same as above
  vNIC-A-Fabric A-This is 10G port, for sure, right.
  Yes
  vNIC-B-Fabric B-Same as above
  For VMware vDS setup, say for vMotion/Service Console to have Active and Failover/Redundant vmnic, should I team the 2 vNIC-A and vNIC-B or
  I should CREATE another Adapter and team the 2 ports or 1 port here with Adapter 1?
  Depending on which adapter you're using, you can create max to 2 NICs (M71KR/M72KR) or up to 56 NICs (M81KR).  If you can only create a max of 2 NICs you'll need to use both NICs as uplinks to your vDS - both will be active. With Palo (M81KR)
  It is creating a lot of confusion for non-Cisco Blade folks even from VMware and me too here as "physically" it is still only 1 M81KR with Dual-Ports for vHBA and vNIC alike???
  The value add for the M81 (Palo) is you're able to create multiple virtual NICs/HBAs which can all be treated individually (VLANs, QoS, Security, Stat Counters etc).  You are correct that you're still limited to two phsyical underlying NICs on each blade - where your design questions come into play is how you want to manage the behavior & performance of each NIC.
  Can you please throw some light into it as I think it is all in your head?
  You have done a great job in enlightening me and the rest.
  Sim
  

  Kind regards

  Robert

• for authentication single controller 5508 AP

  Hello

  in our project, they are two of 5508 wireless controller

  We need to set up sso AP for two wlc

  the licenses we bought for only for a controller

  as shown below

  Cisco	AIR-CT5508-500-K9	Cisco 5508 wireless controller series APs up to 500
  Cisco	CON-SNT-CT08500	Range Cisco 5508 SNTC-8X5XNBD
  Cisco	LIC-CT5508-BASE	Basic software license
  Cisco	LIC-CT5508-500	AP 500 Base license
  Cisco	SWC5500K9-80	Cisco Unified Wireless Controller version 8.0 SW
  Cisco	AIR-PWR-CORD-UK	AIR Line Cord United Kingdom
  Cisco	AIR-PWR-5500-AC	Cisco series 5500 redundant power wireless controller
  Cisco	AIR-CT5508-HA-K9	Cisco series 5508 wireless controller for high availability
  Cisco	CON-SNT-CT5508HA	1 year, SNTC 8X5XNBD Cisco 5508 series Wi

  My question to switch to wlc reduancy we're going to assign for each AP in high availability of the primary and secondary ip address

  APSSO how will tip work

  in each access point how to assign IP primary and secondary for each APs at APSSO

  and the licenses are purchased for a single controller

  specialists please advice of the work of these APSSO topology for two controller

  Syed,

  With SSO, you must initially have an ip address for both controllers.  Then when configure you SSO, the controller HA will be the primary backup.  License is required on the controller sku non-HA.  Failover will automatically happen without problem for the AP or end users.

  If you went with N + 1 and not use the SSO, then you need an ip address for each controller and each controller must be configured.  There are many deployments of N + 1 there, but SSO becomes popular due to rapid failover.  The only question is if SSO gets corrupted then both are in decline and that's the advantage of N + 1.

  Your list is great for either.

  -Scott

  Please evaluate the useful messages *.