The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.
Questions tagged [ios]
309 questions
2
votes
2 answers
Simple road warrior IPv4 VPN configuration in Cisco IOS
I'm looking to setup a reasonably simple road warrior VPN configuration on our Cisco routers. Frustratingly, I've been searching for this but cannot find a simple complete guide.
Multiple (not necessarily many) remote users
IPSec / ISAKMP…
MikeyB
- 39,291
- 10
- 105
- 189
2
votes
2 answers
Basic IPv6 firewall on Cisco IOS for small network
Now that I have IPv6 connectivity to my network, I'm looking for a basic IPv6 firewall configuration for IOS.
It used to be that we could rely on NAT to 'hide' internal (read: outgoing connections only) machines but thankfully we no longer have NAT…
MikeyB
- 39,291
- 10
- 105
- 189
1
vote
2 answers
Split horizon, route filtering, and having RIPv2 announce a non-attached route to host
Routers A, B & C live at 10.1.1.1, 10.1.1.2 and 10.1.1.3 on a /24 metro Ethernet subnet. Each router also has its own private subnet on another interface. Router B's private subnet links thru a firewall to a 10.20.20.0 network at another…
Paul
- 779
- 1
- 9
- 18
1
vote
0 answers
PHP cURL on AWS starts returning error 0 after long uptime
We're using Ubuntu 16.04 on AWS (4.4.0-1066-aws x86_64) to send pushes to Android and iOS clients from PHP application using curl. This is the bit of code used to send a push to Firebase:
$ch[$i] = curl_init();
curl_setopt($ch[$i], CURLOPT_URL,…
roundowl
- 11
- 2
1
vote
1 answer
Using strongSwan as VPN server to supervised (always-on) iOS VPN clients. Two associations to the server are established by iOS clients. Why?
I’m using rightsourceip=%dhcp on the server so two clients cannot have the same leftid.
Prior to using rightsourceip=%dhcp, I used uniqueids=never and 10.0.2.0/24 to allow multiple clients with the same leftid, but that doesn’t appear to work with…
sunknudsen
- 701
- 3
- 14
- 28
1
vote
1 answer
How to check which crypto a strongSwan client is using?
When you configure an IKEv2/IPsec client on iOS or macOS using the built-in VPN client, you can’t configure which crypto the client uses (unless you are using deployment profiles). So how can you know which crypto is used to encrypt the VPN traffic?
sunknudsen
- 701
- 3
- 14
- 28
1
vote
1 answer
Recommended deployment for public kerberos
I have configured and enabled an environment that does seamless X.509 / Kerberos authentication for iOS devices. The security concern is the KDC needs to be exposed to the public internet for this to work. I'm trying to determine the best way to…
jekennedy
- 113
- 3
1
vote
3 answers
cisco config delayed apply?
On a Cisco 800 series router, I am trying to swap the ip addresses for the WAN and Vlan1 interfaces both at once, but one of them is the one that I'm currently connected to over a Wifi Connection from another router (see picture). When I hit enter…
captcha
- 578
- 5
- 16
1
vote
1 answer
Transfer ovpn file from CentOs 7 to iOS without iTunes
My openvpn server running on CentOS 7, I've got 20 or so users with modern IOS devices half with iOS 11. We generate .ovpn scripts with python, and used iTunes to configure the IOS OpenVPN client, until Apple broke it.
As of iTunes 12.7, all…
Charlweed
- 249
- 3
- 14
1
vote
1 answer
Cisco ISR 4431 ACL Blocking when it should permit ssh traffic
The intention here was to create a access-list that would permit any device with an IP from two different /24 subnets (lets call them 192.168.1.0 and 192.168.2.0) to SSH into the ISR while denying anyother IPs. so I created the following standard…
Zygodactyl
- 11
- 5
1
vote
0 answers
Network requests on Mac time out when site is opened from iOS
The problem: When I make HTTP requests from iOS to my server, it will be unaccessible from the Mac.
The test: I run Simon (net monitoring tool) on macOS to check my domain in every 1 minutes. The checking makes a HTTP request to the server and marks…
gklka
- 111
- 4
1
vote
1 answer
Confused about meaning of SE and EX releases in cisco IOS
I have been looking into this for a while now, but I can't find an explanation anywhere (the closest I could find was in wikipedia and cisco )
The switch is a 2960s that I need to stack to a 2960x (so I need the exact ios versions on both), I can…
aseques
- 718
- 4
- 12
- 28
1
vote
4 answers
In Cisco IOS, how can I view OSPF network areas?
Suppose I configure OSPF using the following commands in Cisco's IOS:
router ospf 201
network 10.0.0.0 0.255.255.255 area 10.0.0.0
network 192.168.0.0 0.0.255.255 area 0
How can I subsequently list the network areas that were defined? I.e. suppose…
Jim Marquardson
- 21
- 4
1
vote
1 answer
"tunnel mode ipsec ipv4" seems to be missing from my CISCO router
I'm trying to set up a LAN-to-LAN IPsec tunnel and at one endpoint I have an old CISCO 871W running IOS 12.3(8)YI2. The command "tunnel mode ipsec ipv4" doesn't work:
router#configure terminal
Enter configuration commands, one per line. End with…
Silvian Cretu
- 13
- 3
1
vote
0 answers
EJBCA Response Envelope encryption - DES algorithm phase out for iOS devices
As per Apple WWDC this year, DES encryption algorithm will be phased out soon.
I noticed that DES is the hard coded encryption algorithm in ScepResponseMessage.java in EJBCA's code.
CMSEnvelopedData ed = edGen.generate(new…
Test Cloud
- 11
- 1