Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About clyde.wilson
Stats
Member since
09-10-2003
26
Posts
0
Helpful
0
Solutions
Created by
clyde.wilson
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-26-2013
04:04 PM
02-26-2013
04:04 PM
I have a large wireless network in a hospital i support. After an upgrade of all the wireless PCs to Windows 7 my wireless network is being crushed by IPv6 traffic. This has affected our Vocera system to the point where it is no longer usable. I am trying to find a way to block all IPv6 traffic. Our system admin guys dont want to disable IPv6 via GPO and have suggested that i find a way to block it on the network. Vocera support claims an access list on the VLAN that our wireless PCs are on blocking IPv6 traffic would solve the issue. I'm not 100% sure how to do this. If anyone else has had this issue and knows a fix i would appreciate any help. -Clyde
... View more
01-28-2013
08:46 AM
Our routing table is massive. several hundred routes. the address of the server is 172.20.24.57. below is a sh ip route for that subnet. sr01-sah-mrmc#sh ip route 172.20.24.57 Routing entry for 172.20.24.0/22 Known via "eigrp 2784", distance 90, metric 2563584, type internal Redistributing via eigrp 2784 Last update from 172.21.190.1 on GigabitEthernet0/1, 02:33:53 ago Routing Descriptor Blocks: * 172.21.190.1, from 172.21.190.1, 02:33:53 ago, via GigabitEthernet0/1 Route metric is 2563584, traffic share count is 1 Total delay is 100040 microseconds, minimum bandwidth is 1000000 Kbit Reliability 255/255, minimum MTU 1500 bytes Loading 34/255, Hops 4 sr01-sah-mrmc#
... View more
01-28-2013
06:02 AM
Below is the config. the devices i am having issues with can communicate via ICMP, RDP and everything else except the app they run which uses port 2000. I have confirmed routing and there no firewalls or ACLs. When I do a packet capture I see the packets coming back from the server but they are not forwarded through the router back to the devices. version 15.1 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname sr01-sah-mrmc ! boot-start-marker boot system flash:c2800nm-advipservicesk9-mz.151-4.M5.bin boot-end-marker ! ! logging buffered 4096 enable secret 5 XXXXXXX ! no aaa new-model ! ! dot11 syslog ip source-route ! ! ip cef ! ! ! no ipv6 cef ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! voice-card 0 ! crypto pki token default removal timeout 0 ! ! ! ! license udi pid CISCO2851 sn FTX1129A2A8 ! redundancy ! ! ! ! ! ! ! ! ! ! interface GigabitEthernet0/0 ip address 192.168.2.11 255.255.255.0 ip nat inside ip virtual-reassembly in duplex full speed 10 ! interface GigabitEthernet0/1 ip address 172.21.190.2 255.255.255.192 ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface Serial0/1/0 no ip address shutdown no fair-queue ! ! router eigrp 2784 distribute-list 30 in GigabitEthernet0/1 network 172.20.0.0 network 172.21.0.0 no eigrp log-neighbor-changes ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source list 1 interface GigabitEthernet0/1 overload ip nat inside source static 10.2.0.19 172.21.190.39 ip nat inside source static 10.2.0.11 172.21.190.40 ip nat inside source static 10.2.0.12 172.21.190.41 ip nat inside source static 10.2.0.13 172.21.190.42 ip nat inside source static 10.2.0.14 172.21.190.43 ip nat inside source static 192.168.2.34 172.21.190.44 ip nat inside source static 192.168.2.35 172.21.190.45 ip nat inside source static 192.168.2.36 172.21.190.46 ip nat inside source static 192.168.2.37 172.21.190.47 ip nat inside source static 192.168.2.42 172.21.190.48 ip nat inside source static 192.168.2.8 172.21.190.49 extendable ip nat inside source static 192.168.4.21 172.21.190.50 ip nat inside source static 192.168.4.22 172.21.190.51 ip nat inside source static 192.168.4.23 172.21.190.52 ip nat inside source static 192.168.4.27 172.21.190.53 ip nat inside source static 192.168.4.30 172.21.190.54 ip nat inside source static 192.168.4.41 172.21.190.55 ip nat inside source static 192.168.4.42 172.21.190.56 extendable ip nat inside source static 192.168.4.43 172.21.190.57 extendable ip nat inside source static 192.168.99.11 172.21.190.58 ip nat inside source static 10.2.0.15 172.21.190.59 ip nat inside source static 10.2.0.16 172.21.190.60 ip nat inside source static 10.2.0.17 172.21.190.61 ip nat inside source static 10.2.0.18 172.21.190.62 ip route 0.0.0.0 0.0.0.0 192.168.2.254 ! access-list 1 permit 192.168.14.0 0.0.0.255 access-list 1 permit 192.168.15.0 0.0.0.255 access-list 1 permit 192.168.16.0 0.0.0.255 access-list 1 permit 192.168.17.0 0.0.0.255 access-list 1 permit 192.168.18.0 0.0.0.255 access-list 1 permit 10.0.0.0 0.255.255.255 access-list 1 permit 192.168.2.0 0.0.0.255 access-list 1 permit 192.168.3.0 0.0.0.255 access-list 1 permit 192.168.4.0 0.0.0.255 access-list 1 permit 192.168.5.0 0.0.0.255 access-list 1 permit 192.168.6.0 0.0.0.255 access-list 1 permit 192.168.7.0 0.0.0.255 access-list 1 permit 192.168.8.0 0.0.0.255 access-list 1 permit 192.168.13.0 0.0.0.255 access-list 30 deny 172.16.0.0 0.0.255.255 access-list 30 deny 172.17.0.0 0.0.255.255 access-list 30 deny 172.18.0.0 0.0.255.255 access-list 30 deny 172.19.0.0 0.0.255.255 access-list 30 deny 172.22.0.0 0.0.255.255 access-list 30 deny 172.23.0.0 0.0.255.255 access-list 30 deny 172.24.0.0 0.0.255.255 access-list 30 deny 172.25.0.0 0.0.255.255 access-list 30 deny 172.26.0.0 0.0.255.255 access-list 30 deny 172.27.0.0 0.0.255.255 access-list 30 deny 192.168.1.0 0.0.0.255 access-list 30 permit any access-list 101 permit tcp any any eq 8888 log access-list 101 permit udp any any eq 8888 log access-list 101 permit tcp any any eq www log access-list 101 permit ip any any access-list 102 permit tcp any any eq 8888 log access-list 102 permit udp any any eq 8888 log access-list 102 permit tcp any any eq www log access-list 102 permit ip any any access-list 144 permit ip host 192.168.4.42 host 172.20.24.57 access-list 144 permit ip host 172.20.24.57 host 192.168.4.42 access-list 144 permit ip host 172.21.190.56 host 172.20.24.57 access-list 144 permit ip host 172.20.24.57 host 172.21.190.56 ! ! ! ! snmp-server community antvs5 RO snmp-server community chevron RW snmp-server location SAH Comm Room snmp-server contact Network Services Team ! ! control-plane ! ! voice-port 0/0/0 ! voice-port 0/0/1 ! voice-port 0/0/2 ! voice-port 0/0/3 ! ! ! mgcp profile default ! ! ! ! ! ! line con 0 password 7 XXXXXXX login line aux 0 line vty 0 4 password 7 XXXXXXX login transport input all line vty 5 15 password 7 XXXXXXX login transport input all ! scheduler allocate 20000 1000 ntp server 172.28.1.34 end
... View more
01-25-2013
04:03 PM
So I have two networks that are connected together via a 2851 router running PAT as well as several static NATs. Their network is a 192.168.x.x addressing scheme and mine is 172.21.x.x addressing scheme. The other day the old router takes a dump and stops working (it was a 2600) so i get someone to run over and drop this 2851 in. Everything works just fine with the exception of 4 machines that communicate with a server exclusively on port 2000. Packet captures show the packets coming in from the 192.168.x.x address reaching the server but the packets the server sends out hit the router and just disappear. I've never seen anything like it. Anyone have any idea what might be going on. Any help would be greatly appreciated!
... View more
- Tags:
- static_nat
Labels:
09-25-2012
07:13 AM
Is there anyway to pull the usernames and passwords from a switch via SNMP or write a new username and password to switch via SNMP. I have switch that was apparently misconfigured and i am not feeling like driving all the way down there to console in. Thanks!
... View more
Labels:
Created by
clyde.wilson
in Wireless Security and Network Management
in Wireless Security and Network Management
09-16-2010
07:23 PM
09-16-2010
07:23 PM
Look like im gonna have to wait. I have some backups from late last year but I have no idea what version I was running then.
... View more
Created by
clyde.wilson
in Wireless Security and Network Management
in Wireless Security and Network Management
09-16-2010
06:40 PM
09-16-2010
06:40 PM
I noticed that 6.0.196 does not support an automated upgrade. Anyone have any idea how i can upgrade. I tried to install it and then import a backup of the 6.0.196 database and that does not work.
... View more
09-10-2010
08:17 AM
We were running WPA-PSK before the upgrade. We are running the same version of code as you are and even when we remove all the security settings opn the SSID it wont connect. We did notice that the silex box behaves very oddly as far a channel and power settings are concerned. I may have GE reset the silex box to default and reconfigure and see if that help.
... View more
09-09-2010
02:31 PM
I run a network for a hospital system. we recently upgraded our wireless controllers at one of our hospitals to the 7.0 code. Since then all of our GE EKG carts using a Silex SX-500 Wireless Serial Terminal Server to connect to our wireless network are not functioning. I was wondering if anyone else in the healthcare environment has seen this issue? Is there a fix for it. When we take a cart to another of our hospitals running 6.0 code it works fine.
... View more
Created by
clyde.wilson
in Network Access Control
in Network Access Control
05-20-2010
03:33 PM
05-20-2010
03:33 PM
Don't worry about it. I just found what I needed.
... View more
Created by
clyde.wilson
in Network Access Control
in Network Access Control
05-20-2010
03:02 PM
05-20-2010
03:02 PM
I have 2 Cisco ACS 4.2 servers that I currently use to authenticate wireless users via EAP-TLS. I am trying to figure out if I can use those 2 ACS server to allow access to routers and switches with a users AD username and password. Our network security and audit group are pushing password changes every 45 days and this would solve the problem very nicely. Thanks for any info. -Clyde
... View more
Labels:
02-16-2009
08:25 AM
I'm using ACS V4.2 to authenticate wireless users using EAP-TLS. I get the following error message in my logs for some users. Anyone have any idea what it means? AUTH 02/16/2009 11:10:16 I 2310 2008 0x277 External DB [NTAuthenDLL.dll]: Insufficient space for all of user rcher-cart9@ads.bshsi.com certificates AUTH 02/16/2009 11:10:16 I 2355 2008 0x277 External DB [NTAuthenDLL.dll]: User 'rcher-cart9@ads.bshsi.com' was found [ADS]
... View more
Labels:
12-23-2008
06:51 AM
Every now and then I get a rogue DHCP server on my network. When i do a sh arp on the address the MAC comes up incomplete. Does anyone know a way to track this down?
... View more
Labels:
Created by
clyde.wilson
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
11-27-2006
07:31 AM
11-27-2006
07:31 AM
I recently upgraded our core 6509s to Sup720s. When I did all of our 1200 series APs stopped working. They were all running 12.3(7)JA. I noticed that the one running 12.3(4) is still working. Does anyone know if there is an interoperability problem with 12.3(7)JA and the Sup720s. I am really not looking forward to visiting each AP and upgrading them.
... View more
08-14-2006
12:47 PM
I reboot the ACS server. I have no access to our AD domain controllers.
... View more
Created by
clyde.wilson
in Other Wireless - Mobility Subjects
02-26-2013
02-26-2013
I have a large wireless network in a hospital i support. After an
upgrade of all the wireless PCs to...
01-28-2013
Our routing table is massive. several hundred routes. the address of the
server is 172.20.24.57. bel...
01-28-2013
Below is the config. the devices i am having issues with can communicate
via ICMP, RDP and everythin...
01-25-2013
So I have two networks that are connected together via a 2851 router
running PAT as well as several ...
09-25-2012
Is there anyway to pull the usernames and passwords from a switch via
SNMP or write a new username a...
Created by
clyde.wilson
in Wireless Security and Network Management
09-16-2010
09-16-2010
Look like im gonna have to wait. I have some backups from late last year
but I have no idea what ver...
Created by
clyde.wilson
in Wireless Security and Network Management
09-16-2010
09-16-2010
I noticed that 6.0.196 does not support an automated upgrade. Anyone
have any idea how i can upgrade...
09-10-2010
We were running WPA-PSK before the upgrade. We are running the same
version of code as you are and e...
09-09-2010
I run a network for a hospital system. we recently upgraded our wireless
controllers at one of our h...
Created by
clyde.wilson
in Network Access Control
05-20-2010
05-20-2010
Don't worry about it. I just found what I needed.
Created by
clyde.wilson
in Network Access Control
05-20-2010
05-20-2010
I have 2 Cisco ACS 4.2 servers that I currently use to authenticate
wireless users via EAP-TLS. I am...
02-16-2009
I'm using ACS V4.2 to authenticate wireless users using EAP-TLS. I get
the following error message i...
12-23-2008
Every now and then I get a rogue DHCP server on my network. When i do a
sh arp on the address the MA...
11-27-2006
I recently upgraded our core 6509s to Sup720s. When I did all of our
1200 series APs stopped working...
Public Statistics
| Date Registered | 09-10-2003 11:31 AM |
| Date Last Visited | 08-18-2017 03:57 AM |
| Total Messages Posted | 26 |
