Cisco IOS – Return an Interface to Default (Remove all Settings)
KB ID 0001010 Problem The configuration for a particular interface can get quite long, you could go to interface configuration mode, and prefix all the commands with a ‘no’. But this can be a bit repetitive and time consuming. Solution To remove the configuration for interfaces use the ‘default’ command. for example take a look at the following config for FastEthernet1/0/5. Petes-Switch>enable...
Cisco IOS and ASA Showing the Config Without the ‘More’ Breaks/Pauses
KB ID 0001017 Problem When looking at a router, switch or firewall running config, it will usually display a page at a time, you can page down with the space bar, or line down with the Enter/Return key. Normally that’s fine, but what if you want to capture (take a quick backup,) of the config? If you do that, and page down you get a copy of the config that looks like this; –More– Yes, you can delete...
Cisco IOS – Interface is up, line protocol is down (monitoring)
KB ID 0001027 Problem I had an ASA Active/Standby problem last week, each time I tried to make the primary firewall active, it would fail straight straight back. A look on the ASA told me the problem was one of the clients DMZ connections, (it was stuck in a ‘waiting’ state). A no monitor-interface DMZ command let me bring the primary ASA up active, but I had to visit the site to investigate the problem. The firewall...
Sync Microsoft Domain Time To A Cisco NTP Device
KB ID 0001038 Problem I’ve been posting domain time articles for a long time, and on more than one occasion I’ve really needed to take my Windows time from a Cisco Device and failed miserably. I’ve even used third party NTP software to solve this problem on my own test network. On a client network, my colleague deployed ACS5 this week, I secured the ASA5585-X for AAA and it failed authentication. Logging revealed a...
Cisco – Using a Mini USB Console Cable
KB ID 0001073 Problem A colleague asked me if I had a USB console cable, because the switch he was working on had a failed RJ45 console port. I thought it was just the same cable that charged my phone (USB A to micro USB). But it isn’t, it’s mini USB. I thought, that might happen to me at some point, and rather than carry yet another cable I got onto eBay and got a female micro USB to male mini USB converter for about...
Cisco IOS – Find The ‘Default Route’ For A VRF
KB ID 0001086 Problem Routing is one of my weaker subjects, and today I was trying to chase some routes though a network to locate all the firewalls. The core of the network has a bunch of 6500 Switches in various data centers. I tracked the network I was working on to an SVI on one of the core switches, that was in a VRF. But how could I find the ‘next hop’, the routing table on these switches is very large. Solution...
Cisco ISE – Basic 802.1x With WindowsPart Three – Adding Network Devices (Authenticators)
KB ID 0001077 Problem Back in Part Two we configured the specific 802.1x policies in Cisco ISE. Remember with 802.1x it is a three tier system there is a supplicant, (a machine that wants to authenticate), the Authenticator, (the device the supplicant connect to, in our case a switch), and finally an Authentication server (Cisco ISE). Below I will add our switch into ISE, as a RADIUS device and create some groups, and locations for...
Cisco – Error opening tftp://255.255.255.255/cisconet.cfg
KB ID 0001099 Problem A friend was rolling out some PC’s for a client and wanted me to give him a network with the same subnet etc so he could build everything on the bench. I grabbed a router and set it up for DHCP, and to NAT all traffic for him, but annoyingly it kept doing this; %Error opening tftp://255.255.255.255/cisconet.cfg (timed out) %SYS-4-CONFIG_RESOLVE_FAILIURE: System config parse from...