Hello,

We need some assistance uploading a custom AnyConnect VPN client profile to a Cisco CSR v1000 router and configuring the profile as the default client profile via CLI. I've tried searching the documentation and the web for solutions with no luck. Does anyone have experience configuring AnyConnect VPN profiles on a Cisco Router (not ASA firewall)?

Thanks!

Hi, there's an Edgemark router connected to a Cisco small business switch.  I'm curious what's the benefit of connecting the to the G1 interface over the standard 1 - 24 switch ports.  Also, is there any down (network degrade?) side to hanging additional network devices off the typical 3 or 4 LAN ports on the router when it's a flat network?

trying to create a script using plink.exe and keep running into this issue:
when i use this syntax, it works:

C:\WINDOWS\system32>plink.exe -ssh me@12.12.12.12 -pw password123 -m "c:\temp\cisco.txt"
The first key-exchange algorithm supported by the server is
diffie-hellman-group1-sha1, which is below the configured warning threshold.
Continue with connection? (y/n) y
Type help or '?' for a list of available commands.
ciscoasa> en
ciscoasa#*************

but i want to get rid of the prompt (continue with connection?) (y/n)
so i use this:

C:\WINDOWS\system32>@echo y | plink.exe -ssh me@12.12.12.12 -pw Password123 -m "c:\temp\cisco.txt"
The first key-exchange algorithm supported by the server is
diffie-hellman-group1-sha1, which is below the configured warning threshold.
Continue with connection? (y/n) Type help or '?' for a list of available command
s.
ciscoasa> en
Password: ***************
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa# FATAL ERROR: Server unexpectedly closed network connection

C:\WINDOWS\system32>

anyone knows why the fatal error?

thanks,

I have 70 brand new Cisco switches that need configured. Is it possible to do a base configuration on multiple switches simultaneously? This way I can program say 10 at a time with a base config.

Thanks for any help if it's possible.

I ma looking to setup VLans for few reasons. Right now we have a stack of Cisco C3750X and all machines are in VLan10. VLan10 has an IP address of 10.10.10.235. Our current IP scheme is 10.10.10.x 255.255.254.0. All devices have a default gateway of 10.10.10.254 which is out firewall. If i bring up say Vlan 20 give it and IP of 10.10.20.1 with a SM of 255.255.255.0  i know i would have to issue ip route on the switch to route between the two Vlans, my questions is since the 10.10.10.x network is looking to 10.10.10.254 as the default gateway will those devices still be able to communicate with the 10.10.20.x network? and would all devices on 10.10.20.x be able to get out to the internet?
Drawing1.vsdx

We currently have two Nexus 93180YC-EX and two Nexus N2K-C2248TP-E-1GE in our environment. From all the articles that I've read so far, the Nexus 9K will only support topology 1, but doesn't support topology 2 (see attachments), is that correct? Any input will be greatly appreciated.
Nexus-vPC-Topolog-1.jpg
Nexus-vPC-Topolog-2.jpg

I had this question after viewing Cisco switch ports showing line protocol is down (notconnect).

Dear Experts, I'm testing this network diagram with EVE-NG


Without the NAT translation and access-list, all 3 VLAN PCs can ping to 8.8.8.8, SLA also work OK to switch from default route to backup route.

With the NAT and access-list, PCs from VLAN11 and 12 could not ping 8.8.8.8 although I allowed icmp on R1's interface. The PC on VLAN13 (not it NAT and access-list still could ping to 8.8.8.8). How can I fix it with NAT and access-list?

I attached the configuration files.
Desktop.zip

device: cisco asa5515

objective:  setting up two internet connections on the two wan ports

current setting:
interface 0/0 is active with isp assigned ip

what needs to be done is:
interface 0/4 to be assigned an isp ip (different wan ip)

is this something doable?  any suggestions?

thank you,

I need to find the 0 subslot. I am searching by the last four characters of a MAC address. I have found the MAC Address on six Cisco switches in the format something like this Gi1\1\1 dynamic. What I need is some foo in order to find the Gi1\0\1 version of the MAC Address. I need to find the 0 sub slot.

Would the following configuration elements be sufficient to export netflow information from  Nexus switch from a particular vlan?

feature netflow

flow exporter splunk
  destination 172.20.1.99
  transport udp 20066
  source loopback0
  version 9

flow record netflow-record
  match ipv4 source address
  match ipv4 destination address
  match ip protocol
  match transport source-port
  match transport destination-port
  collect counter bytes
  collect counter packets

sampler netflow-sampler
  mode 1 out-of 4956

flow monitor flows01-monitor
  record netflow-record
  exporter splunk

interface vlan 100
 ip flow monitor flows01-monitor input sampler netflow-sampler

(cisco Nexus 6004 Chassis; Version System version: 7.1(3)N1(2))

Hello

I connect to a remote computer with an IP Address of 10.x.x.x via Cisco Anyconnect Secure Mobility Client on a Windows 10 pro host with IP Address of 192.168.1.xx. I need a virtual machine with Windows 10 Pro (VM Workstation) currently IP Address of 192.168.1.x on the Windows 10 Pro Host to access that computer. I can ping the remote computer on the Host, but not on the vm workstation. I tried installing the Cisco Anyconnect Secure Mobility Client on the VM, and it connects, but I still can't ping the remote computer. I tried setting tweaking the VM Workstation's network adapter to Bridged, Bridged with replicate physical network state, NAT, Host Only, but no ping. I turned off Firewalls on Host and VM....

Thank you!

Hey Guys,

 I am a complete newbie to Cisco so excuse my ignorance,

I have just setup the device and want the Outside interface  to receive traffic from my  home Netgear broadband router and then pass it through to inside interface.

How do i go about doing this? I have tried different ways but none seem to work.

All I want is the ASA to act as the firewall.

current setup is as follows



Netgear Router / Modem 10.0.1.1 (gets dynamic ip from ISP using PPPOA and does the NAT) Please note my router does NOT have bridge mode option
ASA 5506 Outside Interface ip 10.0.1.7 (Static)
ASA 5506 Inside Interface ip 192.168.1.1

The bit i can't work out it adding static routes and do I need to NAT on the ASA as the router already does that

Thanks
J