I will be configuring all the MEC links on my 6500 VSS chassis tomorrow morning and one thing I am a bit confused about.According to the best practices guide they suggest you configure all etherchannels trunks to be in desirable mode. All the trunks are using LACP active - active right now but that's only to one chassis.Should I change all my MEC etherchannel trunks to desirable mode or just leave them active-active?
View 6 RepliesI am working in a environment that is classed as collapssed Layer 3 environment. We have a core 6500 with routed links to 3560's which are access switches.
We have layer 3 vlans on the access switches, one for data one for voice.On the layer 3 vlans we have ip helper addresses that are used for DHCP. The DHCP servers are located on the 6500.
I recently had a incident where someone plugged a netgear router into a desk point because they thought they could use it for a switch. This router then started to dish out IP addresses to people in the morning for those who came in and docked their laptops. 99% of people weren't affected because they have desktop PC's are their leases hadn't expired.
Now we have bpduguard, bpdufilter to prevent people from plugging in switches that send out BPDU's. However this doesn't prevent the above senario where someone plugs a router or a 'dumb' switch that doesn't send BPDU's.Because of the above senario I started looking at DHCP Snooping, but I am unsure on a couple of things.
With the topology of our network I understand that I don't need to configure IP DHCP Snooping Trust on the L3 uplinks to our core switch. From what I understand I just need to enable IP DHCP Snooping globaly and then on the VLAN's on the access switch (because of the L3 topology VLAN's are local to the access switches). Only if I had L2 uplinks to the core would I need to configure IP DHCP Snooping Trust on the trunk links.
I'm configuring VSS with two Sup2T but the Sup2T of the standby not coming active
View 6 Replies View Relatedhow can we upgrade 6500 non modular ios to normal 6500 ios?
View 5 Replies View RelatedI have configured four E1 links between two locations on my 3745 using WIC-2T cards. At both ends all the serial links are configured as ip unnunmbered fastethernet 0/0 encapsulation ppp OSPF is enabled without CEF I would like to know how load balancing will occur in this scenario?Will all my links be utilised at the same time? Will multiple links be used only when the need (in terms of bandwidth) arises?
View 3 Replies View RelatedI have a customer with a unique configuration. They have two point to point connections - one using a laser link between buildings, and a backup fiber connection running ospf. Issue is when the laser link goes down, there is loss/no forwarding during the reconvergence, causing issues with transffering video feeds.
View 7 Replies View RelatedI got a Cisco 870 router. running C870-ADVSECURITYK9-M), Version 12.4(15)T7, does this support two link from different ISP.
View 2 Replies View RelatedI purchased a Cisco 520 and am trying to set it up on my home network.Its ADSL PPPoA for WAN.I am trying to setup 2 LANS. One General Network,One DMZ for webhosting.Now, since this router has 4 ethernet ports, i assumed i did not need VLANS. Except when i try configure an interface with an IP address i get this error: % IP addresses may not be configured on L2 links.Now. Ive looked around on the internet about this error. And it seems that since these interfaces are not Layer 3 interfaces,they need to be associated with VLANS.This would be OK. Except this requires an IP address on an interface on the router! Back to square one.
View 6 Replies View RelatedThe regular problem with the LMS topology and WAN Links when you see the branches are disconnected from the HQ BUT in my case the branches are already connected via Layer2 links but unfortunately some intermediate layer2 modem/switch exist in some branches which prevent CDP discovery but you will find both HQ and branch router in the same subnet .
View 1 Replies View RelatedWe have a 3845 router at one of our remote sites. We want to connect the router to our central office using the two gigabit ports. One link would be the primary and the other would be the secondary (backup).
The router is running EIGRP and the two ports would have different ip addresses. How can we set up the router to use gi0/0 as the primary port and gi0/1 as the secondary (backup) port? The backup port would only be used if there was congestion on the primary port or if the primary port went down. Is there a way to force the router to make the primary link the best route?
Remote Router Sample Config:!
int gi0/0
desc primary link to Central Office
ip addr 10.0.1.84 255.255.255.0
[code]....
I have two Internet links:ISP1: only Site 2 Site VPNsISP2: only HTTP/HTTPS traffic and incoming remote access VPNs With the security plus license I could correctly configure them both as active at the same time on the same ASA device. Also, I've successfully accomplished the following traffic separation:
Site to Site VPNs goes out through ISP1HTTP/HTTPS traffic goes out through ISP2 The customer request is that, when ISP1 fails the S2S traffic is relayed through ISP2 -> This is working fine, I've already tested!But when ISP1's service is restored and that link is working fine, I want that the S2S VPN traffic gets relayed through it again automatically, which didn't happen. My question is: using SLA will the S2S traffic be relayed through ISP1 again automatically when it's services are restored? If not, which technology should I use to accomplish this?
PS: This is all configured on only 1 ASA 5505 whose license was upgraded.
a few of my links (all BT ADSL on Cisco IAD887s) suffer from drops in PPP, the physical circuit doesn't drop out, just the PPP and LCP
000489: Aug 12 12:13:22.085: Vi2 PPP: Missed 5 keepalives, taking LCP down
000490: Aug 12 12:13:22.085: Vi2 PPP DISC: Missed too many keepalives
000491: Aug 12 12:13:22.085: Vi2 PPP: Sending Acct Event[Down] id[19]
000492: Aug 12 12:13:22.085: Vi2 IPCP: Event[DOWN] State[Open to Starting]
000493: Aug 12 12:13:22.085: Vi2 IPCP: Event[CLOSE] State[Starting to Initial]
We have a site to site VPN from one client location to our production center in offshore. At the client side we have a PIX 515 used for the tunnel. Since the client requires a backup VPN over a different ISP we will have to add the ISP to the same PIX and then create the secondary VPN.
how we can acheive two ISP's on one PIX since only two Ethernet ports are availble.
PIX Details:
Cisco PIX IOS 7.2(2)
PIX-515E, 128 MB RAM
i have two links between two sites in my company. The second one is new and uses IPVPN connection. I am searching a way to use both of them. I don' t want to load balance. I want to send some protocols from the first link and some other from the second. ex. rdp from link 2 and everything else from link 1
View 3 Replies View RelatedAny good way of depicting serial links in Visio? Manually drawing is pretty clunky and quick searches in google isn't turning up much.
View 10 Replies View Relatedcan a Cisco 2811 router bundle 2 or 4 ADSL lines ? Reason am asking, we need a device that would be able to bundle 2 or 4 ADSL lines from ISP so that we can you it as backup link in-case the company Internet link does down.
View 5 Replies View RelatedI am using Cisco 861 router for simple network access. I have configured the router correctly with support from few folks of this community but now I am facing a different problem. I am able to ping, tracert and nslookup any internet destination. I am also able to brows secure sites like [URL] but normal URLs like [URL] is not working. I have tried to debug IP TCP Packet Port 80 but it is not showing any results.
View 2 Replies View RelatedI have two sites with identical asa 5505's and each has the dual wan/ISP links and are set for failover using sla monitor tracking. I would like to create a vpn between these two sites that stays active regardless of which ISP link is online. Do I simply make two crytpo map statements10 and a 20 inside each of the asa's to each of the other ASA's STATIC PUBLIC IP's? [code]
View 6 Replies View RelatedI work with the topology view in LMS 4.1. I can see all the links between the differrent switches (N7K, 3750, 3040).I miss only the links between the different N7K's. This links have one special thinks: they are configured as " rate-mode dedicated force" In the N7K cli this interfaces are displayed with the SN too.
sw-bb13# show cdp ne.The links to sw-bb11 and sw-bb21 are not painted in the topoloyview.
Using Topology I can show device view from all my managed VTP domains. I don't understand why all links are "not in network"!?
View 3 Replies View RelatedWe suffer some problems with our remote 2811, that has two WAN links (two different ISP) - we cannot get access to both of WAN at the same time.
At first, the aim was to load balance the traffic between wan links: at first we tried to use OER, but users complained about instable internet connectionthen we tried PBR + NAT Generelly we have just the same scheme as [URL] : dual WAN linksPPTPPPPoE over ADSLequal static routesNAT using route map The problem itself: When both links are up, the 1st WAN is pingable, and the 2nd is notWhen the 1st link goes down the 2nd becomes pingable and accessible and vice versa. When I disabled the CEF, the 1st was still pingable and the 2nd became pingable too, but very unstable
I currently admin a WAN link between two international sites. I have a 2800 at each end. The primary connection between the two sites is 20MB Ethernet PIP MPLS BGP circuit. I also have a pair of T1's in a PPP multilink that I switch over to in the event the primary circuit goes down. I currently am doing the switch over manually. It takes me about 15 minutes to complete it, but I know there must be a way to make this an automatic process.
So a couple questions:
1) Is there a way to create an "enhanced multilink" with the 2 T1's and the Ethernet circuit in the same bundle, in effect giving me 23MBps bandwidth while still being able to maintain connectivity if one of the 3 links goes down? This is my preferred solution
and if 1 is not possible then
2) Is there a way to configure the router so if the Ethernet circuit goes down, all traffic will be automatically directed over the T1's, and then come back to the Ethernet when it's back online?
I have the following setup, eBGP to the same ISP, iBGP inside the AS between the routers and 6509s
I would like to do the following, lets say I have 1.1.1.0.... 1.1.6.0
These are advertised by my 6509s through BGP. I would like to balance the traffic across both of the links, so inbound/outbound traffic would be
[code]...
I have a cisco 2801 router and I want to connect two ADSL links on it and balance the load but not that kind of IOS that team would need
View 2 Replies View RelatedI have one Cisco router 3845 and one switch 6509, they have two links connected each other via OSPF, I want to have link 1 as high priority, and link 2 as low priority. When the link 1 is down, it can be kicked in to the link 2. How I can implement this setup.
View 8 Replies View RelatedI'm workig with a friend on a project. The setup in place is on yacht that has 4 V-Sats and they are wanting to load balance across all four of these links via a Cisco 2911. My recommendation to him was to just create 4 static default routes to each V-SAT's ip address.
Would this accomplish the goal of load balancing? My concern is that would it actually load balance amongst the 4 links or just choose one and then move other to another link once the initial primary went down? Also would enabling CEF be an option if its a feature the 2911 can do? I've attached the visio to give a better idea.
cannot access the link to renew my password - links always disabled.Have tried in the browser; does not work.cannot open any links in emails at all.
View 1 Replies View RelatedWho is your Internet Service Provider (ISP)? India- AirtelWhat type of Broadband connection are you using? DSLWhat is the exact Make and Model of your Modem, Router or Modem/Router Please refer to this page with detailed specs: Brand New Beetel 450TC1 Wifi Wireless Modem Router DSL ADSL 2+ BSNL AIRTEL MTNL | eBayWhat is the Name of the Anti-Virus, Security or Firewall Software installed from the problematic computer -Microsoft Security Essential. i have tried uninstalling the antivirus software but no effect!The issue is when i click any link online it displays the following message. Then i go back and do this 3-4 times till its able to load the link.I have had this issue with other browsers. Mostly i use Google chrome. This issue is with wired and wireless connection both.PS: My router is transmitting 2 ssid's at the same time. I am unable to change it.
View 5 Replies View RelatedI have a links wireless system, I am trying to make this a secure connection. I have gon into the property settings and everytime I try to set the security to wpa2 or even wpa it I lose my internet connectivety. I can't get the security key needed.
View 1 Replies View RelatedMy router (DIR-655) is all up and working but the only thing thats not working is a link to a picture posted on a web site. If you take the link and paste it in the web browser it displays fine, on a web site that should show the image in a forum, All I get is a white box with a X in it.
View 7 Replies View RelatedI have one cisco 3925 router in my HO and 1905 routers in my Branches (40 Nos). I have 2 MPLS links from deifferent ISP's at 10 locations including HO. I have enable BGP in Both links at HO.In branches, i am using floating static routes.I have 2 kinds of traffic - Application and mail.From Branches i am able to route these 2 traffics through 2 ISP linksBut from HO all my traffics are routing through only one link which select via BGP.I had once routed these two traffic through 2 ISP links using route-map by setting next hop. But if one links goes down, traffic routed through that link using routemap drops.From branch it is shifting to the available link.
View 4 Replies View RelatedI want to configure Reliable static routing with object tracking. I have a cisco 3825 and 3925 router in which the hsrp will be configured . Now these two routers are connected a remote site via three different WAN connectivity as under
1. MPLS
2. LL-1
3. LL-2
The priority of routing is also the same sequence.
Now if the MPLS goes down the remote site should be connected via LL-1. If both the MPLS and LL-1 goes down the remote site should be connected via LL-2.
The LL-1 is terminated on cisco 3825 and LL-2 is terminated on cisco 3925. MPLS is terminated on both cisco 3825 as well as 3925 router.
Whether multiple tracking options are available so that i can achieve the same. Topology diagram is attached.
Does the ASA 5505 will allow the addition of a 2nd external link to its configuration? I know the device is capable of Redundant or Backup ISP Links, but that’s not what I need. I will have two different links for two different purposes. Currently we are using the ASA 5505 just for Internet access, so only the ISP link is connected, very basic configuration. We are planning a connection to a client’s global (MPLS) network and we need to be protected against any traffic coming from that network, ergo we need to use a firewall for connection to that external link.Now with the final configuration the Internet traffic must keep being routed to the ISP link, and some other traffic must be routed to the new external link. Can the ASA 5505 be configured for this scenario?
View 7 Replies View Related