Articles in the networking category

  1. [Cisco] Telnet/SSH work, HTTP Gives Permission Denied

    Posted on in Networking

    Here are a few tips that might be helpful if you are having trouble accessing your Cisco router or switch via the web server.

    • Make sure you have the right password! This is pretty obvious, but it's definitely the first thing worth checking.
    • If you're using aaa new-model, you will …
  2. Disable Spanning-Tree Per VLAN

    Posted on in Networking

    If you need to disable spanning-tree on a particular VLAN in your Cisco-based network, use the following command:

    Switch(config)# no spanning-tree vlan 13
    

    This will disable spanning-tree on unlucky VLAN 13.

    If you have some good examples of why you might want to disable spanning-tree for a VLAN, please …

  3. Recover Lost Pre-Shared Keys

    Posted on in Networking

    Not everyone has a great password maintenance process. If you run into a situation where the group pre-shared keys for your VPN are lost, you face the option of changing the existing key (and breaking any users that are currently working), or creating a new group with a new key …

  4. Cisco IPS Inline Bypass Mode

    Posted on in Networking

    On occasion, you may need to put your Cisco IPS into bypass mode. Bypass mode allows the IPS to pass traffic without inspecting it. This may be useful if you suspect the IPS is causing a problem, if you are going to run a one-time scan that would set the …

  5. Enabling Stateful Switchover in the Cisco ASR1000

    Posted on in Networking

    When you get your brand new Cisco ASR1000 series router, Stateful Switchover (SSO) is disabled by default:

    Router# show redundancy states
           my state = 13 -ACTIVE 
         peer state = 1  -DISABLED 
               Mode = Simplex
            Unit ID = 6
    Redundancy Mode (Operational) = Non-redundant
    Redundancy Mode (Configured)  = Non-redundant
    Redundancy State              = Non Redundant
    

    Enable SSO!

    Router# config …
  6. What are BGP Update-Groups?

    Posted on in Networking

    You've certainly noticed when look at individual BGP routes on your Cisco routers that the route is advertised to specific update-groups. It isn't obvious from that output just what those update-groups are.

    Router#show ip bgp 8.8.8.8       
    BGP routing table entry for 8.8.8.0/24 …
  7. Cisco Catalyst NVRAM Corruption

    Posted on in Networking

    This is an annoying problem:

    Switch#write
    startup-config file open failed (Not enough space)
    
    Switch#dir nvram:
    Directory of nvram:/
    
    %Error opening nvram:/ (Function not implemented)
    
    1048576 bytes total (1034573 bytes free)
    

    Cisco Catalyst switches simulate NVRAM on their flash. Once in a blue moon, this simulated NVRAM will become …

  8. QM FSM Error? Check Your Transform-Set

    Posted on in Networking

    If you see an error like the one below in your Cisco ASA log files, check with the other end and make sure your transform-set matches.

    QM FSM error (P2 struct &0xd7fed708, mess id 0xcc86fb64)!
    

    The QM FSM error message usually relates to a configuration mismatch. Although checking the crypto …

  9. Alternative to 'show policy-map interface' on Catalyst Switches

    Posted on in Networking

    Old Cisco Systems LogoIf you're using policy-maps on your Cisco Catalyst switches to handle rate-limiting, you may have noticed that on some models, the show policy-map interface command does not seem to work. The CLI accepts the command and returns properly formatted output, but the output is all zeroes. There is no information …

  10. Brand New ME3400G Can't Ping!

    Posted on in Networking

    Old Cisco Systems LogoAfter cracking open a brand new Catalyst ME3400G, we weren't able to get it upgraded to the latest version of software. In fact, we couldn't even ping anything on the local subnet.

    In order to use Cisco's Metro Ethernet switches, it's important to understand the new concepts that are introduced …

Slaptijack's Koding Kraken