i have firwall ASA5400, and the outside interface connected to internet router but i noticed that the interface speed in the outside interface is 1000M, but on the internet router is 115 M. so the interface in the router is highly utilized and also the firwall cpu highly utilized. [code]
View 0 Replies
i have a problem regarding VPN setup on 5510 ASA and other side 5520 ASA. previously we created the VPN but it works only when the other side start pinging to our side.i have to mention here that we created the BI- Directional traffice on for both side .we have to configure tunnel up for both side .
View 2 Replies View RelatedWe have a single 4500 connecting to two non-cisco devices. We need to enable port channelling or link aggregation between these two.The links are carrying mulitple vlans , hence are trunked and the ip address on either side is used for routing.
From each of the two non-cisco device, i am taking 2 ports each to connect to the 4500.On each non-cisco device side, two ports will bundle together as one aggregated interface (ae1) and the other will be called ae2.
my query is how do i do the configuration for etherchannel on the cisco 4500 side , as it will need two different Po's( port channels).I need a single ip address on both sides of port channel to be present for routing.
According to Cisco's site the WS-X6748-GE-TX is a "10/100/1000" module.URL
View 7 Replies View RelatedI ran into a strange problem. When I want to change the ethernet0 interface of a Cisco 828 sdsl router, but there is no command to do that in the interface configuration mode (speed 100 and duplex full). A show interface gives 10MB half duplex and I want to change this.
This is the running config (a little censored):
!
!
interface Ethernet0
[Code].....
we have connected gig interface Ethernet on Cisco 2900 series router to mpls link connected to our corporate network ,the issue here is our router interface speed and duplex settings are set to auto negotiation.The interface is negotiating speed and duplex at 10 and half where the provider side interface is hard coded to 100 and full duplex.when we tried to hard code the settings on our router to match the provider the interface never come up.
View 4 Replies View RelatedI believe that the Cisco Unified Communications Manager Express matches the outbound VoIP dial peer digit-by-digit, because:
1. when using the debug command it shows how it works digit-by-digit till it match a pattern
2. It says in the study guide ( If a match is found, the router immediately processes the call - chapter 6) so I understand its not en bloc
my config and all the show's ive run sofar tryign to figure this out, but the policy map isnt matching the traffic for some reason
View 9 Replies View RelatedI am facing port speed issue on WS-C2960G-48TC-L series switch.This switch gig0/X ports connected to onother switches (Cisco and HP both switches are also gigbit ports and directly connected ).but interface is giving only 100mb/s output.ios on WS-C2960G-48TC-L is 12.2(44)SE6
View 15 Replies View Relatedi'd like to force the speed/duplex of the integrated Gigabit interface on a LAP1042N, managed by a 4402 running software version 7.0.98 but I cannot find the command either by command line or on the GUI.
View 3 Replies View RelatedI have a Cisco ASA running 8.2 in routed mode.The ASA has three interfaces, inside, outside and DMZ. They connect to the following three networks:
Inside: 10.1.1.0/24
Outside: 10.1.2.0/24
DMZ: 100.1.1.0/24
I have the following dynamic PAT configuration:
nat (inside) 1 10.1.1.0 255.255.255.0
global (outside) 100.1.1.1
nat control is turned off.
By my understanding any traffic from the inside to outside interface will be PATted to 100.1.1.1. However, communications between inside and the DMZ will not be PATted, and should work with no problems.This seems to be corroborated by this document: [URL]Which states:"The adaptive security appliance translates an address when a NAT rule matches the traffic. If no NAT rule matches, processing for the packet continues."EDIT: I may have misunderstood the above statement.I found this guide to configuring NAT/PAT: [URL]It states:"When you specify a group of IP address(es) in a nat command, then you must perform NAT on that group of addresses when they access any lower or same security level interface; you must apply a global command with the same NAT ID on each interface, or use a static command. NAT is not required for that group when it accesses a higher security interface because to perform NAT from outside to inside you must create a separate nat command using the outside keyword. If you do apply outside NAT, then the NAT requirements preceding come into effect for that group of addresses when they access all higher security interfaces. Traffic identified by a static command is not affected."My problem is that packet tracer does not seem to bear me out. It tells me the packet is dropped due to "no matching global" when I source traffic from the inside interface and send it to the DMZ.
I have a command line from ASA 5505 like below :
nat (inside) 0 access-list NO_NAT
The problem is I cannot see any matching ID of 0 at the (outside) like :
nat (outside) 0 xxxxxxxxxxxxx
Another problem is there is also no any access list with the name of NO_NAT.
I have a question about speed negotiation process between interfaces. I have 3650X Sw and 2960S-48port. All ports of two are GigabitEthernet, however the link between them is only 100Mb/s, Full duplex. I try to set the speed 1000 Mb/s manually in the interface then the interface never up. Its status is down/down. I must set back to speed auto. I show interface Gigabit0/24 in Sw 3650-X and figure out that there are many output drop (over 600000). I clear counter then after two days the output drop is over 70000. This link is trunk link between two switches, all ports of access SW are Gigabit and connect to PC. First, I thinks the 3650X is throttled somewhere in output direction of trunk link. But there is another trunk link (Gi0/23) to another 2960S-48port and no output drop number in this interface. This Giga 0/23 speed is 1000 Mb/s (auto speed, auto duplex)
Does any outside things impact the speed negotiation process between 2 interfaces? And output drop number may caused by abnormal speed between two Gigabit interface?
Got to set up a site to site VPN to one in a clients office and we're struggling to get Phase 2 working, just seems to loop around saying "Received encrypted packet with no matching SA, dropping" which to me means the ACLs arent mirrored correctly?
View 3 Replies View RelatedI am trying to set up remote access vpn on an asa 5520 running 8.4.1. I have the ipsec group, policies, and ip pool set up. When I try and connect with the cisco vpn client I see the following in the logs. Deny icmp src outside:214.67.39.42 dst outside:24.252.51.73 (type 3, code 3) by access-group "acl_inbound". Do I need to put in some firewall rules to allow this traffice so that the VPN can connect?
View 9 Replies View RelatedI am trying to remove a static route I added: [code]
I was practicing setting up static routing on three routers r2 (2600xm) connected to r1(2600xm) via T1 module cards on the serial ports. connected to r1 is an old 2500 router called PC.
I removed the static routes off r2 and PC but when I get to r2 which I am connecting to via console cable from another 2500 that I use for an access server I get the above error. all the IPs are just generic subnets I created to play around with static routing. I
my office is looking in ordering a HWIC-1FE to supply our cisco 1841 router with a second ISP connection. i wanted to find out if this card support load balancing and fail over? not sure if fail over is the right terminology so ill explain, i need it so that if one ISP connection goes down (as it does often) it fails over to the second ISP.
View 3 Replies View RelatedASA is the server, 2651 is the client. Phase 1 is negotiating, after entering XAUTH on the 2651, the ASA is showing:
Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 10.250.2.0/255.255.255.0/0/0 local proxy 10.10.3.0/255.255.255.0/0/0 on interface Outside
Not sure what this means in this instance, the maps are setup the same as the article below. I guess I more expected that sort of error if this was a static tunnel and there was an ACL issue. I don't have a lot of knowledge on the Easy VPN with the ASA. [code]
We are configuring a twice-nat to send traffic for scansafe, its on a asa5505 ve 8.4(3) on a remote location for the customes. The nat redirecion is working but we also have a VPN tunnel to the corporate network. Through the tunnel we need to reach a http server. The problem we are having is that when we add the scan-safe nat, all http traffic gets redirected to scansafe, includind the traffic to the http server on the corporate network.
10.2.1.0 ---<ASA5505> ---Internet,scansafe ---- <Corporate> --- 10.1.1.0
the http server is 10.1.1.75
the remote location network is 10.2.1.0/24
[Code].....
I'm performing tests with following desired scenario: We have several remote offices, connected to our HQ via MPLS. In these remote offices, we have several vlan's. Each vlan has it's own ip-range. The MPLS cloud is routed, so we cannot switch our HQ vlan's to the remote offices. In this case, the client pc is in a guest vlan which allows him internet access. The uplink for this internet access is hosted in our HQ datacenter.
basic scheme:
client pc --> MPLS cloud (managed by ISP) --> 6500 switch LAN --> Checkpoint Firewall --> 6500 switch DMZ --> ASA Firewall
My test scheme:
Client pc is in a subnet A (guest vlan range office).
We receive this traffic on our first LAN 6500.
[Code].....
Is there a way to know from the web interface the wifi speed of the connected clients?
View 1 Replies View RelatedMy company is composed of three different campuses, all with a similar network topology. We currently are experiencing high bandwidth on our serial interface at one of the campuses in particular. The network is composed of about 20 VLANS routed internally using a Cisco 6509. Traffic to the outside is PAT’d by an ASA 5510 and then forwarded through our edge router interface. Each VLAN is PAT’d to a specific public address.Due to the PAT, how would you recommend determining what specific private addresses are consuming our resources on the serial interface. When I look at our NMS, it reports the public address, but that only narrows it down to a VLAN. For example, all the devices in VLAN 6 are translated to 146.34.118.245, and 146.34.11.245 is a top talker.
View 1 Replies View RelatedRV220W - I'm trying to create a one-to-one NAT connection to a PC on my network. I have 5 static IP's assigned by my ISP. I've gone through the step of 'registering' each IP in turn on the WAN port, and pinging that IP from an external device until it starts to respond, then I set the WAN IP back to the one I want to use to manage the device.
I think what I want to do is simple. I simply want to NAT ALL traffic hitting my 2nd IP address, let's call it 24.15.120.73 (not the real value) to 192.168.1.10 internally. I want ALL ports both UDP and TCP to be forwarded. This Server is then going to be one end of a VPN tunnel going to another site, but I don't want to complicate things with that for now. So I can't even seem to get one-to-one NAT working! I created the one-to-one NAT on the Advanced tab of the firewall and created rules for all ports for UDP and TCP, but I can still never 'see' the internal server from the Internet. Also, the server will not get out to the Internet (can't hit Google, etc).
My router password is "55xxxxx"
But when I want to change the router password in CCC, it warns me "Current password is not match"
Im having a (from google-fu) seemingly unique issue with load balancing. So for background, I am running the ACE 4710 device in "on a stick" mode, so I am using NAT and all that good stuff. I am also utilizing class maps and host header matching so I can save on IP space. [code]
Basically, as soon as I add that ACL_CLASS_beta.mainsite.com class map, all I get back from the ACE is RST packets and it comes back with an L7 LB Policy Miss.
It SEEMS like it should work, but it doesnt seem to like matching on those source addresses at all.
I have a ASA5510 and I have a question about the speed the ports can handle, here is one port:
-interface Ethernet0/2
- speed 100
-shutdown
- no nameif
-no security-level
-no ip address
it's ethernet and not fastethernet so I figure it will only go to 10Mbps, but at the same time I can hard code the speed to 100.
What s the fabric speed (backplane speed) of a Nexus 2232 10G EX?What is the forwarding rate (Mpps) of the same 2232 FEX?
View 6 Replies View RelatedI just discovered that my wireless download speeds are 5Mbps, compared to 16Mbps if my laptop is connected directly to the modem or wired through the router. Uploads are 2Mbps either way. I have a WRT54GS v.6 with firmware version v1.52.8 which I updated today, completed by setting factory default through the router webpage after I discovered this discrepancy. The firmware update did not improve the download speed appreciably, if at all.Should the wireless connection be that much slower than the wired connection through the router? If not, what sort of issues could I be having to account for this?
I did just replace my modem when I discovered I was having erratic speedtests and that corrected that problem. That is when I became aware of the wireless issue, so not sure how long that has been the case. I have Charter's 16/2 HSI, living in a sparsely populated area with solid internet service. There is no external nor internal interference on this 2.4Ghz band.
I have a Arris DLS with 12 Mbps Download and when I Connect my laptop directly I get the same speed as 12 Mbps but when I do the speed test with my linksys I get only 5 Mbps. How to upgrade to the new WRT54GL or WRT54GS?
View 1 Replies View RelatedRecently my desktop has experienced very slow download speeds (~0.11 Mbps), however the upload speed appears to be in line (~2.0Mbps). These numbers are taken from Comcast's speed test (my ISP). It is obviously a problem with my PC because everything else on the network (PS3, Laptop) have great signals with no problems. I just recently reverted the Desktop back to its factory state, and everything was working fine for a couple of months. The desktop in question uses Vista 32-bit and the Belkin Basic USB Wireless Adapter.
View 1 Replies View RelatedI am using Linksys wirelless G router, will my wired speed on desktop increase when I change to a wirelless N router for laptop and ethernet for wired desk top? I don't need anymore wireless speed but am wondering if I upgrade will my wired desktop pick up more speed.
View 2 Replies View RelatedOn board NIC: Intel 82579V Gigabit Network Controller (asus sabertooth x79 motherboard)I installed the drivers for it from intel's site.f I set link speed to auto (chooses 100mbps full duplex) or 100mbps full or half duplex, any HTTP downloads get slowed to a crawl (30kbps) (steam downloads remain at normal speeds). If I set it to 10mbps full duplex, download speeds jump to normal (500kbps for most HTTP sources)his happens on just this new computer (wired connection), any other computers on the network (wireless) work just fine
View 8 Replies View RelatedI live in the tampa bay area, I have bright house (BHN) as my service provider, which provides a Road Runner Lightning (40/5) package. I previously used BHN's top tier (20/2) back in July (and prior) with no problems.
After converting to Lightning in August of this year (2010). Of course, BHN (and every other provider) wants to force a modem/router down your throat, so I had them bridge it (in short, turn it into a dummy modem with no routing). I had an SMC branded modem gateway at the time. I work from home 2 days a week (so I can spend more time with my kids during morning, lunch, right after work) and this requires me to use QoS to ensure my VOIP work calls don't get dropped, if the family is watching youtube videos or watching netflex.
My network was as follows SMC Modem >WAN IP>>WAN Port>>D-link DIR-655>>Switch Ports>PC1, PC2, PC3
Everything seemed fine (from a usability stand point) till about 2 weeks ago when my upload speed seemed to grind to halt. Normally I was able to upload about 200-300K per second, and I noticed this dropped to about 45K per second during a drop box upload. First thing I did was power cycle both my modem and router (in the proper/usual order). After they both come up, I start using speed test to find out what my upload speeds were. I was getting about 39Mbps down, but only .56Mbps up still. I factory reset my router.... test, similar speeds. Power cycle all computers (just in case), and then modem/router. Tested, similar speeds. Updated the firmware to the latest. Same issue
Called BHN customer service, they factor reset it, but it wasn't in bridge mode. If I by passed the 655, in factory mode (non bridge mode) upload speeds returned to better than expected states. If I bridged the cable modem, upload speeds seemed to crash.
Had BHN replace the modem, seemed fixed for a day, then issue came back. Had them come back out and replace it again, this time with a Motorolla Surfboard modem... same issue. Fine during factory reset, however after they bridge the modem, upload speeds were fine. Told BHN I would take it from there.. Connected up the DIR-655, and upload speeds crashed again. (.6Mbps). Called D-Link Support, and the Chinese English speaking rep seemed to not be listening to me and tried to have me adjust my MTU as well as Wireless settings. Long story short... the rep was a level 0 id10t and I hope D-link will consider hiring better employees/contractors. So I was all about to give up and replace it with a DD-WRT capable router (which it takes me a lot to want to swap hardware), when I discovered the wan shaping was on. Which I thought to myself... nah... QoS has never messed up before... why would it be the cause. Turned off wan shapping... and voila. Issue seemed to be insta-resolved.
Unsatisfied with that... I decided to dig a lil deeper. I turned on Wan shaping again, but decided to set the settings manually instead of auto detect.
Here are the settings I used... (Advanced Tab>QoS)
Enable Traffic Shaping - Checked
Automatic Uplink Speed - Unchecked
Manual Uplink Speed - 5000
Connection Type: Cable or Other Broadand Network
Enable QoS Engine - Checked Automatic Classification - unchecked (this checked seemed to affect my upload speed by about 5-10% during testing) Dynamic Fragmentation - unchecked (this checked seemed to be the worse enemy for upload speed)
While I know I'm not any network guru (still have to use a subnet calculator for subnetting), I think I did a pretty good job drilling down the issue (once I got passed my service provider replacing modems).
Anyways, I've had overall good luck with D-Link products, even have a 5 port 10/100 switch (all metal) from 1998 that works great. Hopefully, D-Link will just either put more documentation on the web, or hire better employees.
