Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Jonn cos
Stats
Member since
03-25-2010
692
Posts
49
Helpful
8
Solutions
12-09-2014
06:25 AM
Hi Neno, I think i am not clear in my question. I want to do authentication from Radius server using mac address. I dont want to use MAB and the command that you have said, is assigning vlan locally, i want to authenticate device using its mac address. And since my switch doesnt support MAB so leave it out of the equation :-) Is such a thing possible
... View more
12-09-2014
03:30 AM
Cant we authenticate devices just using their MAC address and Radius Server ?
... View more
12-09-2014
12:39 AM
In the user guide its mentioned that Cisco provides two features to accommodate non-802.1x devices. For example, MAC Authentication Bypass (Host Lookup) and the Guest VLAN access by using web authentication. But if i have a switch that doesnt support MAB, then what shall i do in that case ?
... View more
Created by
Jonn cos
in Network Access Control
in Network Access Control
12-09-2014
12:16 AM
12-09-2014
12:16 AM
Hi guys, I am doing it in a lab so please guide me to understand this concept. I have Cisco 3560 switch. What i want to achieve is Any device that connects to port 1 of switch, switch should be able to communicate with 802.1x server, tell it the mac address of connecting device and assign vlan recieved from the server The device connecting on port 1 is mainly a printer, or any other device that doesnt support 802.1x agents. Is there anyway to do it ? or am i going in the wrong direction. Also, i dont think i need MAB here, cause i want to do authentication based on mac.
... View more
Labels:
12-02-2014
11:27 PM
Hi all, I am using freeradius to authenticate Cisco router. In TACACS+ we can have separate enable passwords for every user. Can we do the same in Radius also ? It was mentioned in the wiki that when user enters enable, Cisco sends request for $enable$ username, but that is defined globally in the users.conf file. If i want enable password to be different for every user , can we do that using radius ?
... View more
Labels:
12-02-2014
08:44 PM
Guys any way to confirm this information ? Is there any support number i can call and confirm ?
... View more
Created by
Jonn cos
in Small Business Switches
in Small Business Switches
12-02-2014
06:25 AM
12-02-2014
06:25 AM
Hi All, Can someone please confirm that does Cisco 300 switch supports tacacs authorization and accounting ? or just authentication ? Kindly guide
... View more
Labels:
12-02-2014
03:59 AM
Hi All, Can someone please confirm that does Cisco 300 switch supports tacacs authorization and accounting ? or just authentication ? Kindly guide
... View more
Labels:
11-30-2014
08:31 PM
This is a lab scenario and i want to test for my learning how IPSec would work in such a case. I have tried it but IPSec doesnt work with standard configuration. Below is the configuration I have configured 2 loopback. on R1: 100.1.1.1 on R2: 200.1.1.1 R1: crypto isakmp policy 10 auth pre enc des hash md5 group 2 crypto isakmp key 0 cisco address 10.1.1.1 (R2's IP) crypto ipsec transform-set test esp-des esp-md5-hmac mode tunnel access-list 101 permit ip host 100.1.1.1 host 200.1.1.1 crypto map test 10 ipsec-isakmp mat address 101 set peer 10.1.1.1 set transform-set test ip route 0.0.0.0 0.0.0.0 10.1.0.2 R2: crypto isakmp policy 10 auth pre enc des hash md5 group 2 crypto isakmp key 0 cisco address 10.1.3.1 (R2's IP) crypto ipsec transform-set test esp-des esp-md5-hmac mode tunnel access-list 101 permit ip host 200.1.1.1 host 100.1.1.1 crypto map test 10 ipsec-isakmp mat address 101 set peer 10.1.3.1 (it will be 10.1.3.1-natted ip right ?) set transform-set test ip route 0.0.0.0 0.0.0.0 10.1.1.2 Now when i ping from R1: ping 200.1.1.1 source 100.1.1.1 its not successful. Why doesnt it work any idea ?
... View more
11-30-2014
12:18 PM
Hi all, I have a very simple setup. I have 3 routers as shown below. ISP is translating R1's interface IP from 10.1.1.1 to 10.1.3.1 R1--Fas0/0-----------------------------------Fas0/0---ISP---Fas0/1------------------------------Fas0/1----R2 R1: int fas0/0 ip add 10.1.1.1 255.255.255.0 ISP int fas0/0 ip add 10.1.1.2 255.255.255.0 ip nat inside int fas0/1 ip add 10.1.2.2 255.255.255.0 ip nat outside ip nat inside source static 10.1.1.1 10.1.3.1 R2 int fas0/1 ip add 10.1.2.1 255.255.255.0 As you can see, ISP is translating R1 10.1.1.1 <-> 10.1.3.1. If i want to configure IPsec between R1 and R2, what shall i configure ?
... View more
Labels:
09-26-2014
12:31 AM
Hi All, We have a customer who is Juniper shop mainly. They are currently at 100 branch setup and planning for 500 branches. Since i have implemented DMVPN before, this is what i proposed to them (they dont require full mesh but strict hub and spoke). They are insisting that we provide them non-propriety and scalable solution since they dont want any vendor locking. So i thought i should ask you guys, how others are doing it ? i mean not all implementations in the enterprise world use DMVPN right ? or do they ? should they go for creating a separate tunnel for every spoke ? if they follow this approach, will it have any impact on the performance/memory ? Any idea guys, m totally lost here
... View more
- Tags:
- dmvpn
Labels:
08-05-2014
10:25 PM
Hi Peter, This question was bothering me for years and i asked it on different forums. There were times when i was able to solve specific nat issue using route-map only. I mean when i replaced acl with route-map the issue was solved. I know i sound weird and without a scenario its meaningless but i am sure there is some advantage of using route-maps with simple access-list matching and using just a acl.
... View more
08-04-2014
12:31 AM
Hi All, i need to understand technical difference between using a route-map vs access-list in a natting statement. I have seen an old white-paper about some extended translations occurring due to use of route-maps but now if check, both access-list and route-maps are same in that regard. I would appreciate if someone can highlight what technical difference there is ?
... View more
Labels:
07-06-2015
Ok, so 2 questionsSince my users are connected to CUCM, uploading and
running custom audio on gatewa...
07-06-2015
how will user know ? is it possible to run any custom audio telling user
that currently no line is a...
Created by
Jonn cos
in Unified Communications Infrastructure
07-06-2015
07-06-2015
Hi All,is there any way for CUCM 10 to check its gateway (ideally ISR
2900) to see if outside line i...
12-09-2014
Hi Neno, I think i am not clear in my question. I want to do
authentication from Radius server using...
12-09-2014
In the user guide its mentioned that Cisco provides two features to
accommodate non-802.1x devices. ...
12-09-2014
Hi guys,I am doing it in a lab so please guide me to understand this
concept.I have Cisco 3560 switc...
12-02-2014
Hi all, I am using freeradius to authenticate Cisco router. In TACACS+
we can have separate enable p...
12-02-2014
Guys any way to confirm this information ? Is there any support number i
can call and confirm ?
Created by
Jonn cos
in Small Business Switches
12-02-2014
12-02-2014
Hi All, Can someone please confirm that does Cisco 300 switch supports
tacacs authorization and acco...
12-02-2014
Hi All, Can someone please confirm that does Cisco 300 switch supports
tacacs authorization and acco...
Public Statistics
| Date Registered | 03-25-2010 10:03 PM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 692 |
| Total Helpful Votes Received | 49 |
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 9 | |
| 5 |
