Hello, I've got a Cisco 887 (C887VA-W-A-K9) router connected to an Ethernet WAN service. I know 887s are typically meant for DSL connections, but the customer didn't want to spend money on a new router. The ISP requires that traffic is shaped on the upload to match what they are paying for. The customer is paying for a 40/40Mbps connection. The WAN comes in on port FastEthernet1. Config is below.  IOS Version: c800-universalk9-mz.SPA.151-4.M4.bin ! policy-map SHAPE-WAN class class-default shape average 38000000 ! interface FastEthernet1 switchport access vlan 999 no ip address duplex full speed 100 service-policy output SHAPE-WAN ! interface Vlan999 description WAN  ip address 111.111.111.111 255.255.255.252 ip nat outside ip virtual-reassembly in I'm finding that the policy map isn't actually doing anything. All of my research has lead me to believe that it is not possible on the type of router i'm using because it doesn't have any native Layer 3 ports.  Anyone got thoughts on how to make this work? Regards, Peter ... View more

Hello, Is it possible to dynamically expand the width of a table column when running certain show commands in IOS? For example when running 'show int status' The output truncates the Name column (Refer to the attachment).  If it makes any difference, I am ssh'ing to the switches.  Thanks Peter ... View more

Hello, I'm just having a bit of trouble getting some RADIUS and NPS policies working. I want to have 3 NPS Policies 1. VPN Access 2. SSH Access Level 1 3. SSH Access Level 15   The VPN is a Cisco Anyconnect SSL vpn, and the SSH Access is obviously vty access to the router. My NPS server is configured with these three policies in that order. The NPS Policies are secured by three AD Groups (with the same names as the NPS Policies), with the exception of the VPN policy that has an additional condition of 'NAS Port Type = Virtual (VPN)'. My problem is that when a user in a member of the 'VPN Access' and 'SSH Access Level 1', when they try and log onto the router it brings up an error message 'This line may not run PPP'. If I reorder the NPS policies, so VPN is down the bottom it lets me log in fine. The second problem is that when a user is a member of ONLY the 'SSH Access Level 15' group, they also get access to the VPN.   Below is an extract of the config. Anyone got some clues as to why it's not working? Regards, Peter aaa new-model ! aaa authentication login AUTHEN_LOGIN local group radius aaa authorization exec AUTHOR_EXEC local group radius if-authenticated aaa authorization network AUTHOR_NETWORK local group radius if-authenticated ! aaa session-id common ! line con 0  logging synchronous  no modem enable line aux 0 line vty 0 4  session-timeout 60  access-class SSH in  authorization exec AUTHOR_EXEC  logging synchronous  login authentication AUTHEN_LOGIN  transport input ssh ! ! webvpn gateway HOME  hostname XXXXXXXXX  ip address XXXXXXXXX port XXXXX  http-redirect port XXXX  ssl trustpoint XXXXXXXXX  inservice  ! webvpn install svc flash:/webvpn/anyconnect-win-3.1.06073-k9.pkg sequence 1  !  webvpn import svc profile HOME flash:/webvpn/XXXXXX.xml  ! webvpn context CONTEXTPOLICY1  ssl authenticate verify all  !  !  policy group POLICY_1    functions svc-enabled    functions svc-required    svc address-pool XXXXXXXXXXX    svc default-domain XXXXXXXXXXXXXX    svc keep-client-installed    svc module XXXXXXXXXXXXX    svc profile XXXXXXXXXXXXX    svc split dns XXXXXXXXXXX    svc split include XXXXXXXXXXX    svc dns-server primary XXXXXXXXXXXXX    svc dns-server secondary XXXXXXXXXXXXXX  virtual-template 1  default-group-policy POLICY_1  aaa authentication list AUTHEN_LOGIN  aaa authorization list AUTHOR_NETWORK  gateway XXXXXXXXX  max-users 5  inservice !          end   ... View more

Hello, I was able to get my hands on a Cisco  AIR-CAP3602I-N-K9, but understand it will only work with a WLC. Is it possible to convert it into a standalone AP? Thanks Peter ... View more