Cisco :: BGP Selecting Paths - All Sites Are Configured With The Same AS Number (55555)?
Mar 1, 2012
I look after 5 sites in total.All sites are connected together via MPLS. Two of the sites, HQ1 and HQ2 are also connected together via 1Gb Metro so traffic is just switched between the 2 networks.EIGRP is fed into BGP to pass the routes between the sites with all sites in the same EIGRP AS.
All sites are configured with the same AS number (55555) and connect into the same service provider network so each site is connecting to a neighbor in the same AS (444).
I want all incoming traffic from the 3 sites to come in through HQ1 always. Can I influence the service provider's network to make sure this happens? Is this done via "set local-preference 20" on my side or do I have to get the service provider to make changes on their side too.
We have a Cisco 2505 WLC which can support 5 Ap's based on license. Is there any limitation on the no. of ssid's that can be configured on a wlc, how to determine that detail.
What is the maximum number of WLANs/SSIDs that can be configured on a H-REAP access point? I have a network with 3502i AP's, centralised WLC's in the data centre running 7.0.116.0, and WCS version 7.0.172.0.
I was successfully running 2 SSID's at a remote site, one SSID was configured for H-REAP local switching, dropping out to the local site VLAN X, and the other SSID was a central switching guest WLAN anchored to a WLC in a DMZ.I configured a third SSID at the local site running H-REAP local switching, and now I cannot see the guest SSID anymore, it does not appear to be broadcasting.Is there a maximum of 2 WLANs/SSIDs when operating in H-REAP mode?
I am testing rogue on wire using 5508 WLC and , I have a dedicated AP configured as rogue detector and configured the switch port where the Rogue detector is connected as trunk. I have plugged in an autonomous AP with open authentication to the same switch so that it can act as a rogue. On the WLC, I can see that Autonomous AP as rogue on Wire. But along with that I am seeing another AP as rogue on wire, even though i have plugged in only one Autonomous AP to the switch.
I purchased the Dir-655 yesterday. My home network was all gigabit except for my router which was working fine, but I wanted the whole network within my house to be at gigabit speed. I move a lot of big files around to my network storage device and wanted to speed that process up, which it has.After streaming a movie through the router out a hard wired port to my PC when I finished that movie I noticed that no other path through the router would work including Wi-FI, till I rebooted then they all worked again.
Last night watched a movie through the Wi-fi channel to my media PC in the basement and when the movie finished, no other port on the router worked until a reboot.In each case the channel/path in use continued to work although other paths were not working.It seems like a firmware/ buffer management issue.I made a couple changes. Enabled the Multicast option and turned of QOS.Failed again but not under the same conditions as before so I just turned off the Defragmentation option, I forget exactly how it was labeled.
We have a 3750 at the center of one of our offices. This office has two internet connections, and applications that we want to use the seperate Internet connections, but not both. Currently we have an ip route statement on the 3750 sending Internet traffic to one of the Internet routers. Whats the easiest way to send speciffic applications to the other using the 3750?
I have a local DSL line in our remote office. We are connecting a microwave antennae that carries our main office internet to the remote office.I want to be able to connect both paths to a Layer 3 switch and route traffic through the main office with the router connected to the DSL as a fail-over solution.I would really like to stick with HP Procurve's if possible.
I've recently switched to an ASA 5510 on 8.4(3) coming from a Checkpoint NGX platform (let's say fairly quickly and without much warning ). I have a couple questions and they're kind of similar so I'll post them up. I've read docs about regex and creating them both via command line and ASDM, but the examples always seem to include info I don't need or honestly something I don't understand yet (mainly related to defining classinspect maps). If someone could provide a simple example of how to do these in ASDM that would be useful in understanding how regular expressions are properly configured. So here we go.
I know this is basic but I need to make sure I understand this properly - I have a single web server (so this won't be a global policy) where I need to allow access to a specific URL pathfile and that's it. So we'll call it est estfile.doc. Any other access to any other path should be dropped. What's the best way to do this in ASDM (6.4)? I think if I saw a basic example for this I could figure out next few questions but I'll post them as well just in case.
I have another single public web server (again this won't be a global policy) where I'd like to specify blocking file types, like .php, .exe., etc... again a basic example would be great.
Lastly, and this is kind of related, but we have a single office/domain and sometimes we get spam from forged addresses appearing to be from our domain. On Checkpoint I used to use its built-in SMTP security server and could define if it received mail from *@mydomain.com to drop it because we would never receive mail externally from our own domain name. I saw something similar with ESMTP in ASDM and it looks kind of like how you set up the URL access mentioned above. Can I configure this in ASDM as well, and if so how?
Trying to select a router that will work well networking a computer with a nettalk duo, on a limited bandwidth connection: .3/3Mbps up/down. From what little I've been able to find on this, QoS bandwidth control seems critical, yet the list of recommended routers from Nettalk seems to favor routers that don't have this feature. On the other hand, the list apparently hasn't been updated in a year and a half.
MY ISP installed one router in my lab.for internet connectivity they mail me steps :connect your Laptop directly to gi0/3 port to check internet connectivity with public ip 1.1.1.x and Gateway 1.1.1.1 with subnet mask 255.255.255.240 after connection I surprised because I am able to access only google sites like gmail,google search etc. but I am able to ping/traceroute all sites.from browser I am able to access only google sites only.In Router no firewall no such access list.
I have two offices in rural area with a quite distance between them. Offices are connected with private wireless 100Mbps and cooper 100Mbps links provided by different ISP. Wireless connections are delivered as a private L3 Ethernet link but cooper as private L2 Ethernet trunk link. In both offices I have Cisco 3750 L3 switches. I would like to use both link (equal-cost paths) in load balanced configuration but not sure how. Both switches running EIGRP. Asymmetric routing is not an option. Per-destination load-balancing or something else?
I am researching routers for a large emnterprise application, and their useability as firewalls. Also, is their one that is considered to be better over another?
I have a query on how the 6500s running in VSS mode would route the traffic over an OSPF environment where it has leant about two equal cost paths, but one via the 2nd chassis.Proposed setup - 2 6509s running in VSS. Switch-1 in VSS has a layer 3 connection (via a LES circuit) to one of a pair of Nexus 7Ks at another office. Switch-2 in the VSS has another layer 3 connection (via LES by another provider) to the other N7K at the other office. The L3 connections would use /30 ranges and allow each Nexus to form an ospf neighbour relationship with the VSS. We want to keep both offices environments separate so although we do have L2 circuits we're using these to provide L3 connectivity between sites & exchange routing info via them using ospf.
Each Nexus will advertise all the directly connected networks it knows about to the 6509s running in VSS. Thus I couldn't figure out if for example we have users/servers behind our VSS 6509s, these would need to go via their default gateway to get to a network located off the LAN, the default gw ip in VSS setup exisits on the control plane on switch-1 (in normal operation). Then to get to a network that is located off the Nexuses at the other site it would have 2 equal cost paths to it, however one of these paths would be via the VSL link and off the switch-2 chassis. I wasn't therefore sure if we'd actually ever see any transmit traffic via the 2nd L3 connection because I have a funny feeling that I've read the VSS always choses the local chassis egress rather than going via the VSL to use another port...
All of the above is theorectical at the moment as currently both circuits are connected to a single Nexus/6509 chassis however for improved resilence I want to move one of the circuits to be physically attached to the other Nexus & 6509 chasis at each site but I wasn't then sure how the traffic flows would be affected.
I have a SRP547W which I'm trying to replicate a configuration I had on an old Cisco 847 that recently died.
My ISP has allocated me a /29. The DSL configuration means that the IP address on the PPP session is assigned randomly. I have a mix of internal devices on a private IP range and a few devices with publically accessible addresses. All of the devices on the internal network need to be NATted to a public IP from the range allocated to me.
I can see that I can use the software or hardware DMZ to set up the servers, but I can't see any way to configure the external NAT address.
I would like to upgrade my older router to a new one that I can connect my laser printer and storage via USB. I was looking at the Belkin N750, but it seems to get bad reviews. Is there another router that someone would recommend that has 2 USB ports (one for printer and one for storage)?
I recently got a cable modem. It is Netgear CBC-382d1. It has one ethernet port and no wireless.I have 3 laptops (one will be using ethernet not wireless), 2 iphones, 1 ipad and a PS3 that needs to go online. All but one laptop are wireless. Which 300 Mbps wireless 4 port ethernet router is recommended?
I have some tunnels which terminate to my home router. I'm allowing the other ends of the tunnels to use my voice setup. I need to prepend *67 to all called numbers which don't originate from my house. I don't want people calling my home number based on the caller-id number they see when someone across one of the tunnels calls.
So if 5008 calls 212-333-4444 I want it sent to my provider as *672123334444. If 5001 calls a number, I don't want it touched. Can I do this? I can use IOS or CUCM here.
The problem is.....When I log in, the client does its start-up bit, and then displays a "This certificate is intended for the following purpose(s):" message. If I decline the certificate, it gives me the error message shown in the image, but I can otherwise continue and establish my VPNs with no problem.
Unfortunately, the certificate it selects has nothing to do with my organization ( in fact, the certificate is for "*.whitepages.com" - see images). To make matters worse, I can not find this referenced certificate anywhere under my user context in Windows.
I have tried removing, rebooting, and re-installing - it does no good.How do I force the client to stop using this incorrect certificate, and to at least use one that belongs to my organization?
I am having anyconnect version 3.1.03103, windows7 & 8 and asa 5520 (8.4). I have gone through alot of work to solve this issue but it not hapening. On clientless ssl vpn it prompts me for manual certificate selection but on anyconnect client it is not. profile configuration is mentioned below. In the highlighted line below i have changed UserControllable="true" still no results.
I have a Dell E6420 running WIN7 32bit. It is running the Dell broadband utility. I am trying to find a way to keep the users from selecting auto-connect in settings>config. I am looking for a registry key or something that can be done from the admin side to stop this.
I have an E3000 Dual Band. On my 5Ghz channel, I can select Auto(DFS) or I can manually select a channel.First of all, what does the DFS stand for? My 2.4 GhZ channel only has Auto, not Auto(DFS).
Second, when I select Auto(DFS), my wireless speed defaults to 144Mbps, and is only a single channel (I can see it in the in SSIDer utility). When I manually select a channel, no matter what channel it is, I get 300mbps and I can see that the signal is two channels (for instance, 36+40). Why Auto(DFS) doesn't automatically select the best channel and fastest speed?
BEFSR81 v3.0.I selecting Enabled UPnP and now I cannot access the router. When I enter the default admin for the password in the Authentication Required screen. I get the following screen: 401 Authorization RequiredThis server could not verify that you are authorized to access. Either you supplied the wrong credentials(e.g., bad password), or your browser doesn't understand how to supply the credentials required.I didn't enter anything new into the username or password fields.
I purchased a Cisco 520 and am trying to set it up on my home network.Its ADSL PPPoA for WAN.I am trying to setup 2 LANS. One General Network,One DMZ for webhosting.Now, since this router has 4 ethernet ports, i assumed i did not need VLANS. Except when i try configure an interface with an IP address i get this error: % IP addresses may not be configured on L2 links.Now. Ive looked around on the internet about this error. And it seems that since these interfaces are not Layer 3 interfaces,they need to be associated with VLANS.This would be OK. Except this requires an IP address on an interface on the router! Back to square one.
I am having an ASA 5510 and have configured Clientless SSL VPN in it. Now I need to allow my SSL VPN user to access on a particular application(like mspaint.exe for example).When the user login to the SSL VPN, he should see only the particular aplication or must be able to access on the particular application.
I purchased 2 Cisco WAP4410N and i configured them on the network as 192.168.1.241 and .242.I see both SSIDs i created and they are named Cabo1 and Cabo2.
When i initially did the setup I was able to log into the webbased interface through both ip addresses.
I just tried again now, and Im able to log into the interface for .242 but not the .241. I am connect to the router with .241 via wireless because it is with the SSID of Cabo1.
I would like to know if we can use the following card i.e. WS-X6704-10GE along with SUP-2T which will be configured in VSS.
This line is supported with SUP-2T, however not sure if the sup 2t will be configured in VSS. If any supporting document can be provided for the same , that would be great.
If this is supported than whether i would be getting line rate/non blocking capacity with WS-X6704-10GE. Since SUP-2T provides 80 Gbps bandwidth per slot.
I'm having issues with SSH on my 3750G-12S. I'm not able to SSH to another switch when VRFs are configured.I've tried ip ssh source-interface, ssh -vrf doesn't exsist and I've upgraded the IOS to the latest version.
Can a PA-1GE module in a 7206VXR with an NPE-G2 be configured to negotiate/work with a 100mbps Vendor provided Ethernet Port? The router sees the interface but it is in up/down.
I am running Win 7 32-bit for my OS. I am on a desktop PC. I have a Internet modem only without the router. I have a Motorola SurfBoard SB5101.When I go into the Network Connections and do a diagnose. I get the following message. I tried doing netsh int ip reset reset.txt, and restart my PC, but it doesn't fix the error.Your computer appears to be configured, but the device or resource (DNS Server) is not responding.
I have an old Dlink DI-604 that I'd like to configure to work as a switch. I think this is possible but not sure how to do it. Switches are cheap but if I could save a few bucks with some tweaking I'd prefer that. Plus I figure I'd learn a bit about networking.Dlinks site on the DI[URL]Uverse and I'm out of wired ports on the Residential Gateway. I would like 2 more ports to network my PC and NAS, so my laptop and Xbox can access their files.
I'm trying to automate our rollout process with kiwi cat tools. I want to copy a file via TFTP or FTP: Cisco tftp menu knows the latest ip address which it was connected to.
