https://blog.han.life/tags/cisco/Recent content in Cisco on Logan's NestHugoen-auThu, 05 Jul 2012 00:00:00 +0000https://blog.han.life/posts/2012/2012-07-05-l2l-vpn-with-asa-connection-established-but-no-packet-coming-from-one-side/Thu, 05 Jul 2012 00:00:00 +0000https://blog.han.life/posts/2012/2012-07-05-l2l-vpn-with-asa-connection-established-but-no-packet-coming-from-one-side/<p>Symtom:</p> <p>1. Connection established.</p> <p>2. 0 en/decapsulated packet from one side.</p> <p>Solution:</p> <p>Seems like ASA pickup Dynamic VPN profile if it has higher priority than L2L.</p> <p>Resolved after change dynamic profile priority.</p>https://blog.han.life/posts/2012/2012-05-16-device-credential-for-cisco-license-lookup-and-transfer/Wed, 16 May 2012 00:00:00 +0000https://blog.han.life/posts/2012/2012-05-16-device-credential-for-cisco-license-lookup-and-transfer/<p><a href="https://tools.cisco.com/SWIFT/LicensingUI/LicenseAdminServlet/licenseLookup">https://tools.cisco.com/SWIFT/LicensingUI/LicenseAdminServlet/licenseLookup</a></p> <p>in CLI:</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">license save credential flash0:/credentials.lic </span></span><span class="line"><span class="cl">more flash0:/credentials.lic </span></span></code></pre></td></tr></table> </div> </div><p>Try SSH if you can&rsquo;t get full strings from serial connection.</p>https://blog.han.life/posts/2011/2011-12-21-cisco-router-config-for-acme-packet/Wed, 21 Dec 2011 00:00:00 +0000https://blog.han.life/posts/2011/2011-12-21-cisco-router-config-for-acme-packet/<p><code>sip-ua</code></p> <p><code>authentication username</code> <code>-snip-</code> <code>password</code> <code>7</code> <code>-snip-</code></p> <p><code>registrar dns:realm.domain expires</code> <code>3600</code></p> <p><code>sip-server dns:</code>realm.domain</p> <p><code>connection-reuse</code></p> <p>``</p> <p><code>voice service voip</code></p> <p><code>no ip address trusted authenticate</code></p> <p><code>allow-connections sip to sip</code></p> <p><code>no supplementary-service sip moved-temporarily</code></p>https://blog.han.life/posts/2011/2011-09-30-using-additional-public-ip-address-over-pppoe-nat-with-cisco-router/Fri, 30 Sep 2011 00:00:00 +0000https://blog.han.life/posts/2011/2011-09-30-using-additional-public-ip-address-over-pppoe-nat-with-cisco-router/<p>To allocate router a non-NAT IP (for AWS VPC etc etc)</p> <p>1. Create a loopback interface and put given ip &amp; subnet 2. profit!</p> <p>Otherwise,</p> <p>ip nat inside source route-map NONAT interface Dialer1 overload ip nat inside source static 192.168.?.? PUBLIC_IP_HERE</p>