Funny moment with CISCO SPA112

Similar Questions

• Cannot reset the user vmail with Cisco Unified CM Administration password

  We use Cisco Unified CM Administration ver 7.1 with Cisco 7945 IP phones. I have a user who came to tell me that they could access is no longer the voicemail, getting PIN disabled. Ichanged the PIN with the Cisco Unified CM Administration that accepts the new pin without problem, but when we try from the phone, it does not work. Any ideas... Thank you Don

  Hi Don,

  For voicemail partners changes/updates, you should choose

  2 cisco Unity Connection Administration.

  Then; Users > Find/list > user associated with selectect > drop-down Edit > change passwords >

  Change voicemail password

  See you soon!

  SoC

  "Spend your life waiting,
  a moment that all do not come.
  Well, don't waste your time waiting.

  -Springsteen

• Cisco SPA112 line 2 noise problem

  Hello

  I hope that someone could help with this.

  I got 1 line to set up SIP account. Which works fine, no problem. I'm putting in place 2 line exactly the same way. I have configured the SIP 2 account on line 2, but when I answer a call, I get a lot of noise like a fax machine or noise modems 56 k used to which it tried to connect to the internet a long time ago!

  I rechecked the settings for both lines and the settings are identical apart from SIP account information.

  Any ideas?

  Oh, you are using an old version and very buggy firmware. Another important information, that you missed in the original question. It's waste of time on both your's and our aside to try to solve any problem in this regard. Upgrade to something more recent (latest firmware favorite), then try again. I wish that the upgrade will solve your problem (and then mark this thread as a response). If the problem remains unresolved, leave a notice here.

  After the upgrade of the 1.0.2 firmware version read:

  Software for card 2-port phone Cisco SPA112

• Compatibility of VLAN with Cisco

  Hello

  We just bought 10 x new Netgear switches (all M4100) to add to an existing Cisco infrastructure.

  Simple configuration with only 6 Valns.

  5: Admin, 30: VOIP, 101: management, 100: a set of Workstations, 102: second series of Workstations, 200: IPTV, 400: Internet, 401: Wireless Management

  All I wanted to do was: 2 last ports each switch netgear = T and all the VLANS. I have not identified all ports if I want to use in the appropriate vlan

  101 of VLAN is my Managementt Vlan. (Need to configure inter vlan routing for this to work)

  I only turned on three switches up to now and all three do not work. They work for a while and that packets but do not receive all.

  What I am doing wrong?

  What I need to get rid of the original vlan1 on the netgear?

  Is that what I need config in the STP to make these compatible with Cisco (300 and 400 series) switches.

  I use an optical backbone on Cisco and Netgear switches.

  Sincere greetings,

  OLAF

  Hi Moussa,.

  Thanks for reaching out.

  We got it working.

  Step 1: upgrade to the latest firmware.

  Step 2: Forget the MISTLETOE.

  We had a few questions about the old firmware - causing links to trunk have some incompatibility with their tag and removed the images between Cisco and Netgear brand.

  After the upgrade of the firmware that we had access to "switchport mode access" and "switchport mode trunk" orders fixing the access port and trunking issues.

  Thank you Mr President,

  OLAF

• iOS 10 with Cisco Jabber

  Dear Cisco support community,

  as seen on http://www.apple.com/ipad/business/work-with-apple/cisco/

  Only the spark is described here. There will also be a better integration of the call with Cisco Jabber?

  Spark.PNG

  

  According to me, they're trying to transmit only apple ios 10 best interactive aura to the customer of the spark. This does not mean that jabber for iphone will be less functional in ios 10.

• AnyConnect + possible PSK (pre-shared key) as under with cisco vpn client ikev1 and ikev2

  Is it possible to create a VPN Anyconnect of RA with just the name of user and password + pre-shared key (Group) for the connection, as could do for ikev1 with cisco VPN client? I am running 8.4.X ASA code and looks like tunnel-group commands have 8.2.X somewhat change. If you change the group type of the tunnel for remote access, now there is no option for IKEv2 PSK. This is only available when you choose the type

  Type of TG_TEST FW1 (config) # tunnel - group?

  set up the mode commands/options:
  Site IPSec IPSec-l2l group
  Remote access using IPSec-IPSec-ra (DEPRECATED) group
  remote access remote access (IPSec and WebVPN) group
  WebVPN WebVPN Group (DEPRECATED)

  FW1(config-tunnel-General) # tunnel - group TG_TEST ipsec-attributes
  FW1(config-tunnel-IPSec) #?

  configuration of the tunnel-group commands:
  any required authorization request users to allow successfully in order to
  Connect (DEPRECATED)
  Allow chain issuing of the certificate
  output attribute tunnel-group IPSec configuration
  mode
  help help for group orders of tunnel configuration
  IKEv1 configure IKEv1
  ISAKMP policy configure ISAKMP
  not to remove a pair of attribute value
  by the peer-id-validate Validate identity of the peer using the peer
  certificate
  negotiation to Enable password update in RADIUS RADIUS with expiry
  authentication (DEPRECATED)

  FW1(config-tunnel-IPSec) # ikev1?

  the tunnel-group-ipsec mode commands/options:
  pre-shared key associate a key shared in advance with the connection policy

  I'm getting old so I hope that it is not in another complaint curmudgeonly on the loss of functionality. :)

  Many small businesses do not want to invest in the PKI. It is usually a pain to deploy, backup, make redundant, etc..

  But it would be nice to have a bit more security on VPN other than just the connections of username and password.

  If this is not possible, it is possible to configure the Anyconnect customer to IKEv1 with PSK and name at the level of the Group client?

  If this is not possible, WTH did cisco end customer VPN cisco as a choice of VPN connection (other than to get more fresh mail of license)?

  I really hope that something like this exists still!

  THX,

  WR

  You are welcome

  In addition to two factors, you can also do double authentication (ie the two using the user name and password). Each set of credentials can come from a Bank of different identities.

  With this scheme, you can can configure a local user name (common) with password on the SAA (think of it as your analog PSK) and the other be the AD user identification information.

• ISA500 site by site ipsec VPN with Cisco IGR

  Hello

  I tried a VPN site by site work with Openswan and Cisco 2821 router configuration an Ipsec tunnel to site by site with Cisco 2821 and ISA550.

  But without success.

  my config for openswan, just FYI, maybe not importand for this problem

  installation of config

  protostack = netkey

  nat_traversal = yes

  virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%4:!$RIGHT_SUBNET

  nhelpers = 0

  Conn rz1

  IKEv2 = no

  type = tunnel

  left = % all

  leftsubnet=192.168.5.0/24

  right =.

  rightsourceip = 192.168.1.2

  rightsubnet=192.168.1.0/24

  Keylife 28800 = s

  ikelifetime 28800 = s

  keyingtries = 3

  AUTH = esp

  ESP = aes128-sha1

  KeyExchange = ike

  authby secret =

  start = auto

  IKE = aes128-sha1; modp1536

  dpdaction = redΘmarrer

  dpddelay = 30

  dpdtimeout = 60

  PFS = No.

  aggrmode = no

  Config Cisco 2821 for dynamic dialin:

  crypto ISAKMP policy 1

  BA aes

  sha hash

  preshared authentication

  Group 5

  lifetime 28800

  !

  card crypto CMAP_1 1-isakmp dynamic ipsec DYNMAP_1

  !

  access-list 102 permit ip 192.168.1.0 0.0.0.255 192.168.5.0 0.0.0.255

  !

  Crypto ipsec transform-set ESP-AES-SHA1 esp - aes esp-sha-hmac

  crypto dynamic-map DYNMAP_1 1

  game of transformation-ESP-AES-SHA1

  match address 102

  !

  ISAKMP crypto key address 0.0.0.0 0.0.0.0

  ISAKMP crypto keepalive 30 periodicals

  !

  life crypto ipsec security association seconds 28800

  !

  interface GigabitEthernet0/0.4002

  card crypto CMAP_1

  !

  I tried ISA550 a config with the same constelations, but without suggesting.

  Anyone has the same problem?

  And had anyone has a tip for me, or has someone expirense with a site-by-site with ISA550 and Cisco 2821 ipsec tunnel?

  I can successfully establish a tunnel between openswan linux server and the isa550.

  Patrick,

  as you can see on newspapers, the software behind ISA is also OpenSWAN

  I have a facility with a 892 SRI running which should be the same as your 29erxx.

  Use your IOS Config dynmap, penny, you are on the average nomad. If you don't have any RW customer you shoul go on IOS "No.-xauth" after the isakmp encryption key.

  Here is my setup, with roardwarrior AND 2, site 2 site.

  session of crypto consignment

  logging crypto ezvpn

  !

  crypto ISAKMP policy 1

  BA 3des

  preshared authentication

  Group 2

  lifetime 28800

  !

  crypto ISAKMP policy 2

  BA 3des

  md5 hash

  preshared authentication

  Group 2

  lifetime 28800

  !

  crypto ISAKMP policy 3

  BA 3des

  preshared authentication

  Group 2

  !

  crypto ISAKMP policy 4

  BA 3des

  md5 hash

  preshared authentication

  Group 2

  !

  crypto ISAKMP policy 5

  BA 3des

  preshared authentication

  Group 2

  life 7200

  ISAKMP crypto address XXXX XXXXX No.-xauth key

  XXXX XXXX No.-xauth address isakmp encryption key

  !

  ISAKMP crypto client configuration group by default

  key XXXX

  DNS XXXX

  default pool

  ACL easyvpn_client_routes

  PFS

  !

  !

  Crypto ipsec transform-set esp-3des esp-sha-hmac FEAT

  !

  dynamic-map crypto VPN 20

  game of transformation-FEAT

  market arriere-route

  !

  !

  card crypto client VPN authentication list by default

  card crypto VPN isakmp authorization list by default

  crypto map VPN client configuration address respond

  10 VPN ipsec-isakmp crypto map

  Description of VPN - 1

  defined peer XXX

  game of transformation-FEAT

  match the address internal_networks_ipsec

  11 VPN ipsec-isakmp crypto map

  VPN-2 description

  defined peer XXX

  game of transformation-FEAT

  PFS group2 Set

  match the address internal_networks_ipsec2

  card crypto 20-isakmp dynamic VPN ipsec VPN

  !

  !

  Michael

  Please note all useful posts

• Problem with Cisco ACS and different areas

  Hello

  We are conducting currently a problem with Cisco ACS that we put in place, and I'll try to describe:

  We have ACS related directory AD areas, where we have 2 domains and appropriate group mappings.

  Then we have our Cisco switches with the following configuration,

  AAA new-model

  AAA-authentication failure message ^ CCCC

  Failled to authenticate!

  Please IT networks Contact Group for more information.

  ^ C

  AAA authentication login default group Ganymede + local

  AAA authorization exec default group Ganymede + local

  AAA authorization network default group Ganymede + local

  AAA accounting exec default start-stop Ganymede group.

  orders accounting AAA 15 by default start-stop Ganymede group.

  !

  AAA - the id of the joint session

  But the problem is that with the users in a domain, we can authenticate, but not the other. Basically, the question is that when we check on the past of authentication, two authentications are passage and the display of 'Authentic OK', but on the side of the switch, there is a power failure.

  There may be something wrong with the ACS?

  Thank you

  Jorge

  Try increasing the timeout on IOS device using radius-server timeout 10.

  Do we not have journaling enabled on the ACS server remotely?

  -Philou

• Are Cisco 1130ag APs compatible with Cisco Wireless LAN Controller virtual?

  Are Cisco 1130ag APs compatible with Cisco Wireless LAN Controller virtual?

  It's... AP compatibility depends on the code that runs on the WLC. This is a matrix that is a good reference.

  http://www.Cisco.com/en/us/docs/wireless/controller/5500/tech_notes/wire...

  Sent by Cisco Support technique iPhone App

• SX 20 with Cisco Call Manager

  Dear team,

  If I add the SX20 with Cisco Call Manager, do I need to install the software cmterm - s52010tc6_2_1.cop.sgn the SX20. If this isn't the case, then what I have to do, I can see only administrator external field in my SX20, where I gave my callmanager IP address but it is not save.

  BR

  Hello

  In order to save the SX20 in CUCM you for CUCM version 8.6.2 or later, and your SX20 must be running TC5 version or a later version.

  This file you mentioned, cmterm - s52010tc6_2_1.cop.sgn, is just a upgrade file that you install on CUCM, so that CUCM can update your point of SX20 endpoint automatically. But you can upgrade your SX20 manually using the file s52010tc6_2_1.pkg.

  To get help on how to register to CUCM SX20, take a look at these guides with the name "administer endpoints TC on CUCM". The Guide according to the version of CUCM you run:

  http://www.Cisco.com/en/us/partner/products/ps11424/prod_maintenance_guides_list.html

  I hope this helps.

  Concerning

  Paulo Souza

  My answer was helpful? Please note the useful answers and do not forget to mark questions resolved as "responded."

• can plan us the Conference from Outlook with Cisco TMS

  Hi team,

  is it possible to provide to the Conference by the prospect with Cisco TMS, we have no license to Exchange provisoning. Y at - it a plugin that can be used with Microsoft outlook.

  Please advise.

  See above for my response, either you need to purchase the license and install / configure Setup

  or you program something yourself.

  I would not exclude that there could be tools external hookin upward on the MSDS as well, but I'm not aware of anything.

  The other way is to do it by politics, rent rooms and is a participant dials up to the

  others or if the meeting is greater everyone connects the mcu...

• View of the horizon 3.5.0 and ThinApp v4.7 with Cisco ASA Smart Tunnel 9.3.3

  Hello

  The problem:

  Our technology smart tunnel doesn't seem to be forward traffic to our new customer from the view.  I wonder what kind of configuration changes must be considered to enable such a connection.  The error returned when searching for the host name goes in the direction of the hostname not found.  Error finding of intellectual property is related to the time-out.

  Background information and specifications:

  We are in the process of upgrading our servers from 5.2 to 6.2 connection.  As part of the upgrade, we want to improve our customers for the Horizon to use version 3.5.0.  To make it easier on vendors and remote computers we prefer also to our Horizon View Client with ThinApp 4.7.3 ThinApp.  We currently have a Cisco ASA, supporting a SSL VPN portal with "Smart Tunnel" technology.  The ASA is currently on firmware 9.3.3 in production, but we have access to version 9.5 in test.

  Preferred connection scenario:

  User > PC > VMware View Client (ThinApp would be) > Cisco ASA Smart Tunnel > view connection server > Virtual Office

  .exe running on the client to view ThinApp:

  It seems the ThinApp Client version view is only launching VMware - view.exe.

  .exe running from the customer view full/thickness:

  VMware - view.exe

  -ftnlsv.exe

  -vmwsprrdpwks.exe

  -ftscanmgr.exe

  There is something else to consider when the view client configuration ThinApp or thickness to work with Cisco SSL VPN Portal and the Smart Tunnel?  We should have ports configured in the client in connection with the same view Firewall works with SSL VPN Portal port redirector functionality.

  We have not been able to find any documentation on how to properly configure the smart to work with the New Horizon 3.5.2 client Tunnel.  A ticket of troubleshooting with Cisco suggests that the Smart Tunnel feature still perhaps not compatible with this new Horizon (thin or thick) client.  Currently, we are looking at other options because it is not not clear whether Cisco will be able to get us the confirmation or offer a solution without delay of our project to upgrade.  Maybe stick to the previous VMware View Client version 5.4.0 which we know work with Smart Tunnel in some situations and with the redirector port for others.

• Help with Cisco PIX 506th

  I need help setting up a Cisco PIX 506th Version 6.3 (5)

  I use the PDM to configure the device, because I don't know enough of CLI. I want to just the simplest of configurations.

  Here is what is happening, I set up then I hang the Interface 1 to my laptop and use DHCP to get an ip address, but I can't get out to the internet like that. Thanks PDM tools, I can ping outside the IPS very well.

  6.3 (5) PIX version
  interface ethernet0 car
  Auto interface ethernet1
  ethernet0 nameif outside security0
  nameif ethernet1 inside the security100
  activate the encrypted password of DkreNA9TaOYv27T8
  c4EBnG8v5uKhu.PA encrypted passwd
  hostname EWMS-PIX-630
  domain ciscopix.com
  fixup protocol dns-length maximum 512
  fixup protocol ftp 21
  fixup protocol h323 h225 1720
  fixup protocol h323 ras 1718-1719
  fixup protocol http 80
  fixup protocol rsh 514
  fixup protocol rtsp 554
  fixup protocol sip 5060
  fixup protocol sip udp 5060
  fixup protocol 2000 skinny
  fixup protocol smtp 25
  fixup protocol sqlnet 1521
  fixup protocol tftp 69
  names of
  object-group service udp test
  port-object eq isakmp
  inside_access_in ip access list allow a whole
  access-list inside_access_in allow a tcp
  access-list inside_access_in allow icmp a whole
  Allow Access-list inside_access_in esp a whole
  inside_access_in tcp allowed access list all eq www everything
  inside_outbound_nat0_acl list of permitted access interface ip inside 10.10.10.96 255.255.255.240
  inside_outbound_nat0_acl ip access list allow any 10.10.10.192 255.255.255.224
  pager lines 24
  timestamp of the record
  recording of debug trap
  host of logging inside the 10.10.10.13
  Outside 1500 MTU
  Within 1500 MTU
  IP outdoor 75.146.94.109 255.255.255.248
  IP address inside 10.10.10.250 255.255.255.0
  alarm action IP verification of information
  alarm action attack IP audit
  location of PDM 10.10.10.1 255.255.255.255 inside
  location of PDM 10.10.10.13 255.255.255.255 inside
  location of PDM 10.10.10.253 255.255.255.255 inside
  location of PDM 75.146.94.105 255.255.255.255 inside
  location of PDM 75.146.94.106 255.255.255.255 inside
  location of PDM 10.10.10.96 255.255.255.240 outside
  location of PDM 10.10.10.192 255.255.255.224 outside
  PDM logging 100 information
  history of PDM activate
  ARP timeout 14400
  NAT (inside) 0-list of access inside_outbound_nat0_acl
  NAT (inside) 0 0.0.0.0 0.0.0.0 0 0
  inside_access_in access to the interface inside group
  Route outside 0.0.0.0 0.0.0.0 75.146.94.110 1
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225
  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00
  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00
  Timeout, uauth 0:05:00 absolute
  GANYMEDE + Protocol Ganymede + AAA-server
  AAA-server GANYMEDE + 3 max-failed-attempts
  AAA-server GANYMEDE + deadtime 10
  RADIUS Protocol RADIUS AAA server
  AAA-server RADIUS 3 max-failed-attempts
  AAA-RADIUS deadtime 10 Server
  AAA-RADIUS (inside) host 10.10.10.1 server timeout 10
  AAA-server local LOCAL Protocol
  Enable http server
  http 10.10.10.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  SNMP-Server Community public
  No trap to activate snmp Server
  enable floodguard
  Permitted connection ipsec sysopt
  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac
  ISAKMP allows outside
  ISAKMP peer ip 206.196.18.227 No.-xauth No.-config-mode
  ISAKMP nat-traversal 20
  ISAKMP policy 20 authentication rsa - sig
  encryption of ISAKMP policy 20
  ISAKMP policy 20 md5 hash
  20 1 ISAKMP policy group
  ISAKMP duration strategy of life 20 86400
  part of pre authentication ISAKMP policy 40
  encryption of ISAKMP policy 40
  ISAKMP policy 40 md5 hash
  40 2 ISAKMP policy group
  ISAKMP duration strategy of life 40 86400
  ISAKMP policy 60 authentication rsa - sig
  encryption of ISAKMP policy 60
  ISAKMP policy 60 md5 hash
  60 2 ISAKMP policy group
  ISAKMP strategy life 60 86400
  Telnet 10.10.10.0 255.255.255.0 inside
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  dhcpd address 10.10.10.2 - 10.10.10.5 inside
  dhcpd dns 68.87.72.130
  dhcpd lease 3600
  dhcpd ping_timeout 750
  dhcpd allow inside
  btork encrypted Ww3clvi.ynWeGweE privilege 15 password username
  vpnclient Server 10.10.10.1
  vpnclient-mode client mode
  vpnclient GroupA vpngroup password *.
  vpnclient username btork password *.
  Terminal width 80
  Cryptochecksum:5ef06e69c17b6128e1778e988d1b9f5d
  : end
  [OK]

  any HEP would be appreciated.

  Brian

  Brian

  NAT is your problem, IE.

  NAT (inside) 0-list of access inside_outbound_nat0_acl
  NAT (inside) 0 0.0.0.0 0.0.0.0 0 0

  presumanly first NAT is fot your good VPN that acl looks a little funny, what exactly are you doing with that?

  The second NAT is the real problem but for outgoing internet access - the NAT statement, you said not NAT one of your addresses 10.10.10.x which is a problem as 10.x.x.x address is not routable on the Internet.

  You must change this setting IE. -

  (1) remove the second NAT statement IE. "no nat (inside) 0 0.0.0.0 0.0.0.0.

  (2) add a new statement of NAT - ' nat (inside) 1 0.0.0.0 0.0.0.0.

  (3) add a corresponding statement global - global (outside) 1 interface.

  This will be PAT all your 10.10.10.x to external IP addresses.

  Apologies, but these are some CLI commands that I don't use PDM.

  Jon

• Ethernet VMware with Cisco EtherChannel and Trunking Question

  Hello

  Trying to get our etherchannels works correctly with our network administrator. Here is our config with a few questions.

  1. as it is to create the trunk between switch and host directly, can I use spanning tree portfast chest edge ?

  2. when don't we use no ip address and when not for this configuration? I see online showing examples with and without it.

  3. in some articles, he described in access mode , while in others he said dot1q trunk mode. See here for the access mode. Admin think it should use dot1q.

  4 Etherchannel is fully support and preferred extending from links on maps, right? Not all of the links on the same card?

  5 is this the case in order to change the load balancing algorithm in vmware first or first to the work of cisco? I did first vmware. (IP-hash)

  It's on a series with 4 cards/blades 6500 switch.

  !
  interface Port-channel200
   switchport
   switchport access vlan 81
   switchport trunk encapsulation dot1q
   switchport trunk allowed vlan 69,81,172,896
   switchport mode trunk
   switchport nonegotiate
  !
  interface GigabitEthernet2/35
   switchport
   switchport access vlan 81
   switchport trunk allowed vlan 69,81,172,896
   switchport mode trunk
   switchport nonegotiate
   spanning-tree portfast edge
   channel-group 200 mode on
  !
  interface GigabitEthernet8/10
   switchport
   switchport access vlan 81
   switchport trunk encapsulation dot1q
   switchport trunk allowed vlan 69,81,172,896
   switchport mode trunk
   switchport nonegotiate
   spanning-tree portfast edge
   channel-group 200 mode on
  

  DITGUY2012 wrote:

  Wow Josh. If only you had written documentation. That's the trouble with him. People like me get final instructions, because we're not the guys from network 24 x 7. Great documentation would be layout, the reasons to go this way or that way you did just. That being said, here's my summary based on this discussion.

  1. we have several VLANS that descends from 3 links on the etherchannel. Thus, we should use mode trunk because there is not a single.

  2. we have an another etherchannel with just 1 vlan (vmotion), but in all of two links. This should be the access mode. Or is it still trunk because it's the multiple links?

  3. I don't know what crash dump logger is, or how it applies to my situation.

  4. I saw the bpduguard setting before what exactly is the syntax to use for us? 6500 series.

  5. I don't know if our switch would deliver on that port. How can I tell? At this moment I have switchport setting in there.

  Thank you!

  No problem for reference, the other question of documentation is one of the languages. Their word etherchannel on HP networking hardware, 'trunk' and has nothing to do with the discussion of port "access vs circuit", which they call "tag unidentified vs.

  1 Yes

  2. you would certainly make an access port.

  3. If your server never begins to have a problem with break, VMware can a copy of the accident for the debug log. You can see an article on setting up here: put in place the collector of Dump ESXi 5.0 | VMware vSphere Blog - VMware Blogs.

  4 I'm sorry I'm not familiar with this model

  5. I think if the switchport parameter is here and connectivity seems to work, you can consider yourself safe

• HotSpot iOS 9.3.1 works do not with Cisco AnyConnect

  Does anyone else have this problem? Since the upgrade to 9.3.1 iOS I am more able to use one of the hotspot from my iPhone to connect to the VPN from my company using Cisco AnyConnect.  I can still connect via Wi-Fi, but not with the iPhone 5s or 6s hotspot feature.

  Ideas?

  TIA,

  DM

  Hello, I'm from the Italy, and I have the same problem on my 5 64 GB iPhone.

  I have updated to iOS 9.3.1 and now I don't have the Hotspot feature in the phone settings Menu.

  What is happen? I work with this feature and now I need to change the phone!