Latest revision as of 22:22, 21 January 2025

Summary

Cisco IOS (Internetwork Operating System) is a proprietary network operating system developed by Cisco Systems. It runs on Cisco routers, switches, and other networking devices, providing the foundation for network operations and management. Cisco IOS offers a rich set of features for routing, switching, security, and network management, making it a cornerstone of Cisco's networking solutions.

General

ACLs

Insert into existing Standard ACL

# show access-list 24
(config)# ip access-list standard 24
(config-std-nacl)# 15 permit 10.1.2.0 0.0.0.255
(config-std-nacl)# exit
(config)# ip access-list resequence 24 10 10

Insert into existing Extended ACL

# sh access-lists vlan2-out
(config)# ip access-list extended vlan2-out
(config-ext-nacl)# 1421 permit tcp object-group VPN.CLIENTS host 10.1.49.23 eq 3389
(config)# ip access-list resequence vlan2-out 10 10

Packet Capture

(This example is on a Catalyst 6506-E)

# show monitor
# Show run | inc monitor session
(config)# no monitor session 1
(config)# monitor session 1 source vlan 1309
(config)# monitor session 1 destination interface Gi2/1/3

VPN

Some Useful Links

LAN-to-LAN IPsec Tunnel Between Two Routers Configuration Example

Cisco IOS VPN Configuration Guide

Site-to-Site IKEv2 Tunnel between ASA and Router Configuration Examples

@@ Line 1: / Line 1: @@
-Packet Capture (Catalyst 6506-E)
+=Summary=
-# show monitor
-# Show run | inc monitor session
+Cisco IOS (Internetwork Operating System) is a proprietary network operating system developed by Cisco Systems. It runs on Cisco routers, switches, and other networking devices, providing the foundation for network operations and management. Cisco IOS offers a rich set of features for routing, switching, security, and network management, making it a cornerstone of Cisco's networking solutions.
-(config)# no monitor session 1
+=General=
-(config)# monitor session 1 source vlan 1309
+==ACLs==
-(config)# monitor session 1 destination interface Gi2/1/3
+===Insert into existing Standard ACL===
-ACLs
+# <code># show access-list 24</code>
-Insert into existing Standard ACL
+# <code>(config)# ip access-list standard 24</code>
-# show access-list 24
+# <code>(config-std-nacl)# 15 permit 10.1.2.0 0.0.0.255</code>
-(config)# ip access-list standard 24
+# <code>(config-std-nacl)# exit</code>
-(config-std-nacl)# 15 permit 10.1.2.0 0.0.0.255
+# <code>(config)# ip access-list resequence 24 10 10</code>
-(config-std-nacl)# exit
-(config)# ip access-list resequence 24 10 10
+===Insert into existing Extended ACL===
-Insert into existing Extended ACL
+# <code># sh access-lists vlan2-out</code>
-# sh access-lists vlan2-out
+# <code>(config)# ip access-list extended vlan2-out</code>
-(config)# ip access-list extended vlan2-out
+# <code>(config-ext-nacl)# 1421 permit tcp object-group VPN.CLIENTS host 10.1.49.23 eq 3389</code>
-(config-ext-nacl)# 1421 permit tcp object-group VPN.CLIENTS host 10.1.49.23 eq 3389
+# <code>(config)# ip access-list resequence vlan2-out 10 10</code>
-(config)# ip access-list resequence vlan2-out 10 10
-VPN
+=Packet Capture=
-Some Useful Links
+(This example is on a Catalyst 6506-E)
+# <code># show monitor</code>
+# <code># Show run | inc monitor session</code>
+# <code>(config)# no monitor session 1</code>
+# <code>(config)# monitor session 1 source vlan 1309</code>
+# <code>(config)# monitor session 1 destination interface Gi2/1/3</code>
+=VPN=
+==Some Useful Links==
 [https://www.cisco.com/c/en/us/support/docs/routers/1700-series-modular-access-routers/71462-rtr-l2l-ipsec-split.html LAN-to-LAN IPsec Tunnel Between Two Routers Configuration Example]