Hi, I recently upgraded our router. In the process I simply copied the config to the new router. Now ssh refuses connections. Do I need to delete and regenerat the RSA keys on the router? I.e. I can't just copy them? thanks, Simon ... View more

Hi, Trying to reset the root password on an NM-NAM in 15.1. I have the instrcutions, however when I do a reload I can never get and console outout so I can type in "***". The session doesn't repsond until the NM-NAM has reloaded, i.e. I can never see the boot sequence. Shark#service-module analysis-module 1/0 reload Do you want to proceed with reload?[confirm] Trying to reload Service Module Analysis-Module1/0. Shark#service-module analysis-module 1/0 session Trying 192.168.2.1, 2066 ... Open Authorized access only! User Access Verification Username: Any ideas? Simon ... View more

Hi, I've just installed an NM-NAM in a 3825 running 15.1 and the card is seen an initial boot, but can't be seen when iOS is booted - throws the errors below in this abridged concole output - the card also doesn't have a CF card - is that an issue? Initializing ATA monitor library....... program load complete, entry point: 0x8000f000, size: 0xc0c0 Initializing ATA monitor library....... program load complete, entry point: 0x80010000, size: 0x40c2dac Self decompressing the image : ############################################################################################################################################################################################################################################################################################################################################################################################################################# [OK] Smart Init is enabled smart init is sizing iomem   ID            MEMORY_REQ                 TYPE 00042A          0X010D78F3 C3825 motherboard 00046A          0X0004FE00 NAM Sensor NM 0002A9          0X001E4E2F 16 port ethernet switch                 0X00288860 Onboard PVDM2 SIMM                 0X0027250A Onboard VPN                 0X000021B8 Onboard USB                 0X00660670 public buffer pools                 0X0078F000 public particle pools ----------------------------------------------- TOTAL:          0X025F8AB4 export@cisco.com . Installed image archive Cisco 3825 (revision 1.1) with 485376K/38912K bytes of memory. Processor board ID FTX1014A0K8 16 FastEthernet interfaces 3 Gigabit Ethernet interfaces 1 Virtual Private Network (VPN) Module DRAM configuration is 64 bits wide with parity enabled. 479K bytes of NVRAM. 126000K bytes of ATA System CompactFlash (Read/Write) Press RETURN to get started! *Sep  6 22:41:31.751: %I82559FE-1-NOT82559: NM slot 1: PCI device ID seen as 0xFFFFFFFF, expected 0x12298086 *Sep  6 22:41:31.751: %JETFIRE_SM-1-INITFAIL: NM slot 1: PCI device 0 initialization failed ... View more

Hi, I have a router running 15.1 and have two VLANs defined (I have an NM-16ESW, so they are defined using the 'vlan' command). Everything works great and I can set the swithports to access or trunk etc. I then bridged the VLAN1 and a gigabitethernet routable port using a BVI1 interface. In pseudo config: Interface gigabitethernet0/1 no ip address bridge-group 1 interface BVI1 ip address 10.1.1.1 255.255.255.0 interface vlan1 no ip address bridge-group 1 interface vlan2 ip address 192.168.2.1 bridge irb bridge 1 protocol ieee bridge 1 route ip ...now VLAN2 is no longer accesible from the switchports, and in fact appears not to exist on the router. For example I configure a switch port as switchport access vlan 2 and I get an error that VLAN 2 does not exist. How do I tie my switch and routable port togther and include the VLANS? Simon ... View more

Hi, I'm trying to bridge an HWIC-4ESW to FastEthernet0/1 in an 1811 router. I've followed indtructions I've foundf on m any sites, but none of my inside ports are picking up DHCP from my router, or passing any traffic. Here is my lab config. Any help would be appreciated. version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname QA1841 ! boot-start-marker boot-end-marker ! logging message-counter syslog enable secret 5 $1$Wpcr$C7dTXPFFQKM29ktFR2RuP0 ! no aaa new-model ! dot11 syslog ip source-route ! ! ip cef no ip dhcp use vrf connected ip dhcp excluded-address 192.168.31.1 192.168.31.99 ip dhcp excluded-address 192.168.31.200 192.168.31.254 ! ip dhcp pool newguest    import all    network 192.168.31.0 255.255.255.0    default-router 192.168.31.1 ! ! ip inspect name cbac1 dns ip inspect name cbac1 ftp ip inspect name cbac1 h323 ip inspect name cbac1 https ip inspect name cbac1 icmp ip inspect name cbac1 imap ip inspect name cbac1 pop3 ip inspect name cbac1 netshow ip inspect name cbac1 rcmd ip inspect name cbac1 realaudio ip inspect name cbac1 rtsp ip inspect name cbac1 esmtp ip inspect name cbac1 sqlnet ip inspect name cbac1 sqlnet ip inspect name cbac1 streamworks ip inspect name cbac1 tftp ip inspect name cbac1 tcp router-traffic ip inspect name cbac1 udp ip inspect name cbac1 vdolive no ipv6 cef ! multilink bundle-name authenticated ! ! voice-card 0 ! crypto pki token default removal timeout 0 ! ! ! ! ! no spanning-tree vlan 1 archive log config   hidekeys ! ! ! !         ! ! class-map match-any ratelimitclassmap match any ! ! policy-map trafficrate class class-default     shape average 1024000 ! bridge irb ! ! ! ! interface FastEthernet0/0 ip address dhcp ip access-group inboundfilters in ip access-group outboundfilters out ip nat outside ip inspect cbac1 out ip virtual-reassembly duplex full speed auto no mop enabled service-policy output trafficrate ! interface FastEthernet0/1 no ip address duplex auto speed auto bridge-group 1 ! interface FastEthernet0/3/0 ! interface FastEthernet0/3/1 ! interface FastEthernet0/3/2 ! interface FastEthernet0/3/3 ! interface Vlan1 no ip address bridge-group 1 ! interface BVI1 ip address 192.168.31.1 255.255.255.0 ip nat inside ip virtual-reassembly ! ip forward-protocol nd ip http server no ip http secure-server ! ! ip nat inside source list 5 interface FastEthernet0/0 overload ! ip access-list extended inboundfilters permit udp any any eq bootps permit udp any any eq bootpc deny   ip any any ip access-list extended outboundfilters permit ip any any ! access-list 5 permit 192.168.31.0 0.0.0.255 control-plane ! bridge 1 protocol ieee bridge 1 route ip ! ! ! ! ! ! ! ! ! line con 0 session-timeout 35791 exec-timeout 35791 0 line aux 0 line vty 0 4 session-timeout 35791 exec-timeout 35791 0 etc.... ... View more

We have a system that uses DNS to communicate back to our systems, returning an A record with the contents 0.0.0.0 that indicates some state to us. Any reason what this is being blocked by a router? Even with CBAC turned off? An answer of 255.255.255.255 works fine... 0.0.0.0 gets blocked. thanks, Simon ... View more

Having issues getting CBAC to work - does my confiuguration also require an ACL inbound on the port config below that does "deny any any" etc. then CBAC uses this ACl top open ports selectively etc,. interface GigabitEthernet0/0 description DS-WAN ip address 173.228.21.210 255.255.255.240 no ip unreachables no ip proxy-arp ip flow ingress ip nat outside ip inspect SDM_LOW out ip virtual-reassembly in duplex full speed 100 crypto map VPN_MAP service-policy output IPCoS thanks, Simon ... View more

Some routers use 15.x version and some models have the option of 12.x and 15.x versions - likely a dumb question, but what is the main difference here? Simon ... View more