Cisco Licence Differences LAN-Lite / LAN Base / IP Base / IP Services
Jan11

Cisco Licence Differences LAN-Lite / LAN Base / IP Base / IP Services

KB ID 0001270  Problem Actually finding the answer to this question is far more challenging than it needs to be! As usual Cisco can change this on a whim so before you purchase any equipment it’s still a good policy to check on the feature navigator. Solution This is about the best reference I’ve found. Although anyone who can tell me what the correct Layer 2 differences between Enterprise Access and Complete Access are,...

Read More
Cisco IOS – How To Find VLAN IPs (SVI’s)
Nov16

Cisco IOS – How To Find VLAN IPs (SVI’s)

KB ID 0001258  Problem If you have a complicated network, you can spend more time finding out how it’s configured, than actually doing any work on it! Today I had a client that needed some changes made on their LAN, I knew their name, and their network address, and common sense told me which of the core switches they were connected to. Solution A quick search on the client name told me what VRF they were in, and what VLAN they...

Read More

Cisco IOS ‘Crypto’ Unrecognized Command?

KB ID 0001246 Problem I was working on a Cisco 3750-G last week, and I was in the process of setting up SSH access. When I went to generate the crypto key and enable SSH, It fired an error at me. In fact it wouldn’t execute any crypto commands; Core-SW(config)#crypto ? % Unrecognized command   Now I have seen this before, (but not for a while). You need to be running a K9 version of the code. A quick ‘show version’...

Read More
Microsoft Azure To Cisco ISR Router Site to Site VPN
Jul19

Microsoft Azure To Cisco ISR Router Site to Site VPN

KB ID 0001220  Problem Last week I was having problems getting a VPN up from a client’s Cisco ASA into Azure. This was because the Azure estate was using ‘route-based’ or a ‘dynamic routing VPN’. See the following article; Azure to Cisco VPN – ‘Failed to allocate PSH from platform’ So the firewall was a non-starter, but Cisco ISR routers are supported, and they can handle virtual tunnel interfaces...

Read More
Device Boots to ROMMON (Cisco ASA)
Jun01

Device Boots to ROMMON (Cisco ASA)

KB ID 0001199  Problem After recently picking up some second hand ASA5512-X firewalls, I went to run them up, and make sure they were ok, however on boot up they went straight to ROMMON like so; Use ? for help. rommon #0> Now I know what ROMMON is, it’s the base operating system of the device, its job is a bit like the BIOS on a PC, it locates and loads the operating system. The only time you should ever see a rommon prompt...

Read More
Microsoft – NDES Site Shows ‘HTTP Error 500.0 – Internal Server Error’
May06

Microsoft – NDES Site Shows ‘HTTP Error 500.0 – Internal Server Error’

KB ID 0001181 Problem I was doing some testing for a client this week, a while ago I had deployed a three tier PKI solution for them, and as part of the rollout we deployed NDES for their network devices, (they were going to use certificates to secure site to site VPNs). The client was concerned, and wanted the auto renewal process testing. This could not be done on the live system. So myself and a colleague went to the test bench, I...

Read More