Support of Cisco

Similar Questions

• What support DH Cisco ASA 14 group and more

  What support DH Cisco ASA 14 group and more.

  Model and IOS

  Hi John,.

  You must have ASA executes code 9.1 and above for DH group 14 and this only work for ikev2 only.

  Kind regards

  Aditya

  Please evaluate the useful messages and mark the correct answers.

• Changes in prices for the contracts of Support for Cisco IDS/IPS

  Nice day

  My boss asked me if there is no value added regarding Cisco's recent move to charge separately for hardware and software support for IDS/IPS product line.

  Other than what is obvious (need software support for updates of signature, need of material support in case something breaks), I'm having a hard time to provide a response.

  Can anyone suggest what is the increased value, other than annual recurrent costs more we get as a result of this change of license?

  Also, was there any release press or other notice to the client about this change?

  I am at a loss...

  Alex Arndt

  Alex,

  Cut through the spin and the hype... the software support allows us to finance a development team dedicated to signature, which has improved our signature rejection rates and response times. In addition, it is allowing us to expand our coverage to keep IDS 4.1 to get the support of the signature. It is contrary to our previous policy which would have seen 4.1 updates to signature cut shortly after 5.0 released.

  A side effect of this is that our development team is now free to focus on the development of the feature, and you will see more updates, more often.

  Can't comment on press releases and others, they make your head spin my ;)

  Scott

• Support VPN Cisco 881

  Hi all

  I am not cisco trained or worked with cisco, im a complete beginner in Cisco platforms. We are an IT support MPH and we have recently taken on a client that has an office abroad using a Cisco 881 device with a Draytek router to the United Kingdom. Site to site connectivity is necessary. I watched and watched videos of youtube on how to configure the VPN and think I have it in place by using the config on the cisco below:

  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  lifetime 28800
  isakmp encryption key * address *.
  !
  Crypto ipsec transform-set esp-3des esp-sha-hmac sha3des
  !
  crypto map 1 VPN ipsec-isakmp
  set peer *.
  Set transform-set sha3des
  PFS group2 Set
  match address UK

  !

  interface FastEthernet4
  IP address
  IP access-group netbios in
  IP access-group netbios on
  no ip proxy-arp
  NAT outside IP
  IP virtual-reassembly in
  no ip-cache cef route
  no ip route cache
  automatic duplex
  automatic speed
  No cdp enable
  VPN crypto card

  !
  interface Vlan1
  secondary IP address
  IP 255.255.255.0
  IP access-group netbios in
  IP access-group netbios on
  no ip proxy-arp
  IP nat inside
  IP virtual-reassembly in
  no ip-cache cef route
  no ip route cache
  !

  UK extended IP access list
  allow IP 0.0.0.255 0.0.0.255
  allow IP 0.0.0.255 0.0.0.255

  It shows the VPN and active but there is no movement between the two and I do not know why...

  Current state of the session crypto

  Interface: FastEthernet4
  The session state: UP-ACTIVE
  Peer: port of 500
  IKEv1 SA: local remote 500 500 Active
  FLOW IPSEC: ip allow /255.255.255.0 /255.255.255.0
  Active sAs: 0, origin: card crypto
  FLOW IPSEC: ip allow /255.255.255.0 /255.255.255.0
  Active sAs: 2, origin: card crypto

  So it all seems perfect, however, if I try and ping the remote remote sites over ip LAN router I get the following:

  Type to abort escape sequence.
  Send 5, 100 bytes to ICMP echoes, waiting time is 2 seconds:
  .....
  Success rate is 0% (0/5)

  I also can't ping the remote site in the Cisco lan.

  I think that it is towards the end of cisco, the Draytek is a basic router and no routing is able to be configured. It does it automatically. The VPN is so no traffic...

  Please can someone point me in the right directoin?

  Thank you

  The additional ip route does not harm even if it is not needed. I love these additional routes that they can serve as a sort of "online documentation" when it is used with a keyword "name" extra at the end.

  Your NAT - ACL does not have the traffic. Just add the following:

   ip access-list ext 102 1 deny ip  0.0.0.255  0.0.0.255 

• L2TP over IPSEC VPN is supported in Cisco SRP 521w?

  I now try to configure a Cisco Small Business Pro SRP 521w for a branch office router, I try to get the router to connect to a VPN L2TP server inside my data center, but it seems to me that the client VPN L2TP function is not supported within the SRP 521w router.

  Can Cisco implementing in the future in the firmware for the router in SRP 521w client VPN L2TP?

  Hello

  This is correct, without L2TP over IPSec tunnels.

  (L2TP only supported on the primary Ethernet WAN interfaces).

  Kind regards

  Andy

• Not entirely taken TLS supported in Cisco IPS 4240

  I am trying to contact a Cisco IPS 4240 device while having security settings FIPS enabled on the client using SSL. This is not possible because the device does not support TLS extensions in the Client Hello packet (RFC 5746) sent by the client when using TLS (SSL3 and lower are not FIPS compatible). The IDM application that communicates with the device does not send these extensions (im seeing this with WireShark) TLS is able to connect to it.

  Is it possible to provide the 4240 support these TLS extensions?

  This is related to the bugs below.  The original solution will be included in the 7.1.5 release which is preparing to take in charge the platform 4240 among others.  This will allow the Web server IPS to ignore short-term extensions.  The long-term solution will require an update to the Web server so that it is fully compliant with RFC 5746.

  http://Tools.Cisco.com/support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtt18382

  http://Tools.Cisco.com/support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtx43502

  Todd

• SHA version supported on Cisco IOS

  Guys,

  What is the SHA version that we support on the devices that support VPN from Cisco IOS? Just configuration options tell SHA...

  I do apreciate if you could point me to a cisco document to support your theory because client would require...

  Thanks in advance.

  hash (IKE policy)

  To specify the hashing algorithm in a policy of Internet Key Exchange, use the command hash policy Internet Security Association Key Management Protocol (ISAKMP) configuration mode. IKE policy define a set of parameters to use when the IKE negotiation. To reset the hash algorithm for the algorithm of hash-1 defaultsecure hash algorithm (SHA), don't use No form of this command.

  hash {sha | SHA256 . SHA384 | md5}

  no hash

  Description of the syntax

  SHA	Specifies the hash algorithm SHA-1 (HMAC variant).
  SHA256	Specifies the family of SHA-2 256 bits (HMAC variant) as the hashing algorithm.
  SHA384	Specifies the family of SHA-2 384 bits (HMAC variant) as the hashing algorithm.
  MD5	Specifies the MD5 (HMAC variant) as the hashing algorithm.

  Default values

  The SHA-1 hashing algorithm

  Control modes

  The ISAKMP policy configuration

  Order history

  Release	Change
  11.3 T	This command was introduced.
  12.4 (4) T	IPv6 support has been added.
  12.2 (33) SRA	This command was integrated into Cisco IOS version 12. (33) SRA.
  12.2SX	This command is supported in the Cisco IOS release 12.2SX train. Support in a specific 12.2SX release this train is dependent on your hardware platform game and platform functionality.
  Cisco IOS XE version 2.1	This command was introduced on the ASR 1000 series Cisco routers.
  15.1 (2) T	This command was modified. Sha256 , sha384 , and keywords have been added.

  Of course, depends a bit on your IOS.
  HTH,
  Ian

• Cisco first 2.1 / 2.2 support for Cisco ise 1.3?

  Hi, I just tried to connect cisco IP 2.1 to cisco ISE 1.3, but fails.
  I read the Release Notes, only 1.2 ISE ist supported.
  But I was wondering that the ssl negotiation fails (I made a packet capture).
  So PI 2.1 has not tried to connect to the ise 1.3 via api, because of the connection fails during the ssl handshake.

  Anyway, does anyone know if ISE 1.3 will be supported with a PI or PI 2.2 version 2.1.x?

  ICC 2.1.2 supports up to 1.2 ISE.  ICC 2.2 release date is scheduled for December 2014.  Read below.

  Table 4 The Infrastructure first, Cisco and Cisco wireless version compatibility matrix

• Cisco SF302 - 08 p (SRW208P-K9-NA) support for Cisco IP 7942 phones

  Hi all

  I'm looking for, citing the SF302 - 08 p for a customer who will have three small offices interconnected via single-mode fiber. I plan connecting them to a 3560 switch. Each office will have not more than 3-7942 phones. I have reviewed the notes on this switch, and it seems that it should support this type of phone with no problems. Could you tell if you have run into problems of support/reliability with this switch and the 7942 s?

  Thank you

  Hi RevereORL,

  My concern is that there is;

  • the slight nuances or differences between the configuration of the CLI on the SG300 compared to the range of catalyst.
  • I am also very very slightly concerned post service customer interaction of the TAC and HWC, but these days there is much more to talk between these two support groups cross.
  • Different SKU SFP for fibre-optic connectivity Series GLC for catalyst and set of Construction on 300, although I have no problem with the plug of the GLC SKU of my product in the 300 series.

  The SF302 - 8 p has of a POE budget defined as 62W on all 8 ports or 62 watts / 8 ports = 7.75 watts about which may be drawn from each port.

  Power should not be a problem with the software upgrade to 1.1.1.8 300 series now also supports POE before standard as well as the 802.3af...

  I guess the beauty of buying from a dealer, and keep the packaging, is that you can validate your application.

  Give it a try.

  Best regards, Dave

• Support Cisco jobless number... 0800-187-3652

  This number is not affected in france.

  Quickly access the technical assistance Center (TAC) Cisco in

  sending a service request

  .  The way this is the fastest of the contact the Cisco technical assistance service to registered Cisco.com users with of one of the valid service contract. Join me the

  Cisco Community assistance

  pour to exchange information, solve problems, and develop your skills on Cisco products. Pour emergency network, call 0800-187-3652 (green number) service, then to option 3, 1.

  This number is preferable.

  08 05 54 04 27

  Cisco has change your chat message...

  Dear customer,

  Please contact the small business support community.

  Thank you for your comments, we enjoyed it a lot.  Just for future reference below is the link to the Small Business Support Center contacts

  https://www.Cisco.com/en/us/support/tsd_cisco_small_business_support_center_contacts.html

  Feel free to contact me if there is extra help, we can help you.

  Kind regards

  Jeffrey Rodriguez S... : | :. : | :.
  Support Engineer Cisco client

  * Please rate the Post so other will know when an answer has been found.

• Supported Cisco ISE Appliance virtual HyperV

  Hello

  ISE Virtual Appliance supports VMWare ESXi hypervisor. Is there a Plan on the roadmap that ISE will rely on HyperV (or, possibly, XEN) in the future, because some customers do not have VMWare, but using only HyperV.

  The same question can be for other virtual devices as vWAAS, vASA, etc.

  Best regards

  It is a question that gets brought up in the Business Unit from time to time.  From now on, there are no plans on official Support from Cisco on any virtual platform other than ESXi from VMWare.

  There were successful on HyperV achievements, but if you have problems, the first thing that should be noted is that you use on a platform not supported.

  Please rate useful messages and mark this question as answered if, in fact, does that answer your question.  Otherwise, feel free to post additional questions.

  Charles Moreton

• LAN does not work when the Cisco E1000 router hangs

  Original title: Download sp3

  Remember - this is a public forum so never post private information such as numbers of mail or telephone! I bought recently a new Cisco E1000 router. My computer is a laptop model Lenovo 0769.

  I am running windows XP with sp2. The cisco software requires sp3. I called support of cisco and even they couldn't get to download sp3. My network is wireless on the router and I had to install from another laptop computer on the system. My LAN does not work when hooked. What do you suggest to me.

  Ideas:

  • You have problems with programs
  • Error messages
  • Recent changes to your computer
  • What you have already tried to solve the problem

  Hi mdenrique,

  1. what exactly do you mean by LAN (Local Area Network) does not work? You get the error message?

  If you have not installed Service Pack 3, try the following steps:
  Step 1: Download Service Pack 3
  see How to obtain the latest Windows XP service pack .
  b. scroll the window and click on "Download now the Windows XP Service Pack 3 package" to download the service pack.
  c. save the file on the desktop.

  Step 2: Install Service Pack 3
  a. open the file downloaded and follow the instructions in the wizard to complete the installation.
  b. restart the computer once the installation is complete.

  For more information, see steps to take before you install Windows XP Service Pack 3

  Note: Once you have installed service pack 3, install the router and check if the problem persists.

  Step 3: To troubleshoot LAN, run home and small Office Networking Troubleshooter
  a. Click Start and then click Help and Support.
  b. under Pick a help topic, click Network and Internet.
  c. under network and the Web, click on resolution of networking or Web problems and then click on home and small Office Networking convenience store.
  d. answer the questions in the troubleshooter to try to find a solution.

  For more information, see the following articles:
  1 see How to troubleshoot a network in Windows XP
  2 see two resources to solve the problems of connection network in Windows XP

  Visit our Microsoft answers feedback Forum and let us know what you think.

• Cisco Applications on Windows Vista professional.

  Original title: Applications of Sisco.

  I have Windows Vista Business and have a program called Cisco.Does someone knows what it is?

  Hello Murphy,

  What program do you use to Cisco?

  Cisco designs and sells several services and electronics, networks, voice and communications technology.

  For more information, you can contact Cisco support.

  Support of Cisco

  Hope this information is useful.

• Installation of Cisco Application Centric Infrastructure Simulator

  Morning,

  I want to know if it is possible to install Cisco Application Centric Infrastructure Simulator on ESXI or VMWare WorkStation. If so, what is requirements.

  Thank you.

  Morning,

  I regret to inform you, there is no VM for ACI Simulator. There is a hardware Simulator that can be purchased, it is a series of UCS - C that runs a modified version of IPEC and virtualizes the cluster three APIC and fabric Nexus 9000 sheets/thorns switches. Its a great place to get acquainted with the GUI to configure policies, interact with vCenter and L2/L3 network but is limited to the configuration of the policy, there is no traffic data plan.

  Here is the Simulator "APIC-SIM-S =" product ID

  Hope that answers your question, thank you for the use of forms of support of Cisco: ACI have a good day.

• Cisco RV042 cannot create a simple VPN?

  Hello

  I'm confused because I'm trying to set up a simple VPN (client of the bridge), but I can't!

  A SSL VPN or an IPSEC VPN, whatever...

  The RV042 firmware is up-to-date, and I try QuickVPN as a customer vpn (also updated...)

  My configuration details:

  I'm at the: 192.168.2.14/24

  My RV042: 192.168.2.250/24

  And the VPN intend to connect to: 192.168.4.x

  I am currently in testing... that's why I use private IP...

  Customer gateway

  Add a new VPN group Tunnel ofgroup VPN Group No. 1 Name of the tunnel: VPN TEST Interface: WAN1WAN2 Activate:

  Configuration of local groups Type of local security group: Range IPSubnetIP IP address: 192.168.4.0 Subnet mask: 255.255.255.0

  Remote Client installation Remote client: Domain Name (FQDN) Email address (USER FQDN) Client Microsoft VPN XP/2000 Domain name: Microsoft.com

  IPSec configuration

  Input mode:	IKE with preshared key
  Group of the phase 1 of DH:	Group 1-768 bitGroup bitGroup 2-1024 bit 5-1536
  Encryption of the phase 1:	DES3DESAES-128AES-192AES-256
  Authentication of the phase 1:	MD5SHA1
  Phase 1 time in HIS life:	28800 seconds
  Perfect Forward Secrecy:
  Group of the phase 2 DH:	Group 1-768 bitGroup bitGroup 2-1024 bit 5-1536
  Encryption of the phase 2:	DES3DESAES-128AES-192AES-256
  Authentication of the phase 2:	MD5SHA1
  Time for phase 2 of HIS life:	3600 seconds
  Pre-shared key:	123456

  so far, nothing fancy... Ok?

  So I create my username for the test:

  VPN Client Access User name: New password: Confirm the new password: Allow the change of password: YesNo. Active: DTSInfo-online Active

  The user is created and activated...

  For the test, I have disabled the firewall (router + windows 7).

  A dnow, when I lunch the QuickVPN client:

  

  Then, when I have lunch:

  > Connection...

  > Activation of policy...

  > Verification of network...

  > The remote gateway is not responding. You don't want to wait? [NO]

  > Disconecting from the server...

  This means that, after activation of the policy, I am connected on the router (user status: active). But when he check network... I am offline!

  There is the newspaper of the RV042:

  dec 18 12:57:50 2012	The VPN log	description of the additional connection (qknips1)
  dec 18 12:57:50 2012	The VPN log	listen to IKE messages
  dec 18 12:57:50 2012	The VPN log	forget the secrets
  dec 18 12:57:50 2012	The VPN log	loading of the secrets of ' / etc/ipsec.d/ipsec.secrets'
  18 12:57:57 dec 2012	The VPN log	(qknips1): removal of connection

  If I'm signed for 7 seconds... Why?

  Can someone help me?

  When I try with the built-in Windows VPN client, newspapers are filled just more... ^ ^

  Help! hour

  Thanks (and sorry for my bad English ^ ^)

  Hello

  Please use our forum

  Hi Skip my name is Johnnatan and I'm part of the community of support to small businesses. I ve seen your post and I see you are using Windows 7 and that you disable your firewall to test your connection. A configuration of the computer and the router must be in order to solve your problem.

  Computer

  As you use Windows 7, you must enable the Windows Firewall and create 2 rules, also make sure that Ipsec communication is allowed, you can follow these steps:

  http://www6.nohold.NET/CiscoSB/Loginr.aspx?login=1&PID=2&app=search&VW=1&articleid=2922

  Router:

  Go firewall > basic settings and

  Disable: Block WAN request

  Enable: Remote Management

  Go to VPN > VPN Passthrough and make sure everything is activate.

  I hope that you will find this answer useful, if it was satisfactory to you, please indicate the question as answer. Please note post you consider useful.

  Greetings,

  Johnnatan Rodriguez Miranda.

  Support of Cisco network engineer.