What is the difference between DWDM/CWDM and "regular" SFP's? By "regular" I mean Rx and Tx are fixed to specific wavelength. As I have understood, at least Rx of WDM SFP's accepts a range of wavelengths
View 2 RepliesWe are currently monitoring approximately 50 locations each having one or more cisco devices, Catalyst 3750 and 3560.Locations are connected via CWDM.We would like to monitor interface errors, signal loss and power on CWDM SFP transceivers on Catalyst 3560 and Catalyst 3750 switches. We tried to get these values (as shown using „sh interface transceiver“ command) using SNMP but we didn't get any SNMP result. What MIB or other functions/ modules/ features need to be used/activated on switch?Do we need any additional piece of hardware?
View 25 Replies View RelatedI'm used to seeing DWDM and muxes being used in the service provider world, but when and why would an enterprise want to use this kind of gear?The two basically lets you combine streams of signaling from many different physical sources into one media, but can't a VLAN trunk or a routed link, for example, do the same? Sure, they all operate at different layers of the OSI model, but in all cases you're still getting separate streams of data from Point A, putting it all on one wire, and sending it to Point B.
View 8 Replies View RelatedI have recently set up a MDS9000 san fabric in two locations connected by DWDM. My DWDM links come up fine but I am looking to test this link before we go live. How to test this?
View 1 Replies View RelatedAre there any plans to allow DWDM SFP+ on new 4500x ? If so, how soon?
View 2 Replies View Related have 2 inside networks:
object network INSIDE_10.6
subnet 10.6.0.0 255.255.0.0
object network INSIDE_192.168
subnet 192.168.0.0 255.255.255.0
I grouped these 2 into 1 object-group:
object-group network INSIDE
network-object object INSIDE_10.6
network-object object INSIDE_192.168
Public IP address used for PAT:
object network PAT
host 152.x.x.x
I used the following statement to create Dynamic PAT to public IP address:
object network INSIDE_10.6
nat (any,any) dynamic PAT
object network INSIDE_192.168
nat (any,any) dynamic PAT
Is that correct? Also I'm using one public address to PAT both inside networks. Is there any dvantage of using 2 different ones, so each inside network would be PAT to its own address?
We have a customer in a country where the local telecom hands out the data E1 link in a G703 interface with two coaxial cables (Tx & Rx) out of a Watson/Schmidt Telecom SHDSL modem.
We need a way to convert the G703 cables and signaling to a regular RJ45 so that we can connect it to the customer firewall which has regular gigabit Ethernet connections. Some have suggested a 1941 with a serial and gigabit cards. We just need a affordable solution for this and the configuration.
I use my laptop in Italy most of the time on a wireless router that uses a PPPoE connection. Once I'd got my head around setting that up it works fine.However since I've come back to the UK today I now cannot connect to a regular wireless router, its just not 'seeing it'. I have used this connection in the UK before without problems and the setting are all still saved from my last trip back but it doesnt show up when I try to connect.Is this something to do with the laptop being set up on the PPPoE connection in Italy? Ive deleted the PPPoE connection but that hasnt made a difference
View 3 Replies View RelatedI'm connected to my remote access vpn and am getting the below error, wierd thing i only get this error for ICMP, i can browse data on our network retrieve files etc, but pings fail for some reason
NAT-T is enabled
NAT rules are in place
ICMP is not blocked as can ping elsewhere
Where to being looking as to why only ICMP fails?
I am configuring a pix 525,i just found out how to activate the subinterface on it so that's good,the box has a primary unit and secondary unit, both are connected from G0 to redundant switches,if i do a show failover, it says it's using the serial based lan failover, which is fine by me,however, do i need to create a single, regular interface.. or a redundant interface?,i.e. if i create a regular subinterface, will failover still apply to this interface?,or for failover to work, do i need to create a redundant interface (with a redundant id)? i do not seem to have the option to create a subinterface when adding a redundant interface.
View 7 Replies View Relatedi have a Cisco ASA 5520 8.4(1) with a ASA 5520 VPN Plus license
i want to use the management interface as a regular interface (using the no management-only command)is this interface a Gig interface as well ?
I have a ASA 5510, it does webfilter using regular expression. [URL]
I block ".facebook.com" and it was successfull. But somehow other users is using https to access to FB. how do i filter HTTPS?
I am having an issue with a specific server that is not reachable from other sub nets. Every other device on the same sub net as the server is reachable via the other sub nets. This server is special because it's NAT'd to an external IP address and has several site-to-site VPN's set up. The firewall is a Cisco ASA 5510.
This is the error I see on the ASA syslog when I try to ping the server from another sub net: 3 Dec 05 2012 10:58:49 10.0.15.101 regular translation creation failed for icmp src inside:10.0.20.8 dst inside:10.0.15.101 (type 0, code 0)
The problem server is on sub net 10.0.20.0/24 and the server IP address is 10.0.20.8. Every device on the 10.0.20.0/24 sub net can hit the server, but devices on other sub nets cannot. For instance, a device on 10.0.15.0/24 cannot reach 10.0.20.8, but can reach other devices on 10.0.20.0/24.
I am connecting to a Wireless network, through a ZyXel ZyAIR G-4100v2 router. My problem is that I am experiencing very regular packet loss every minute or so. This lasts for around 5-10 seconds on average. I am running XP with the latest service pack. So far, I have checked out;Wireless Zero Config scanning of new stations (disabled that feature).Xirrus network scan (signal is fine and consistent). I am not suffering from any degredation in signal, the problem seems to be that the router is simply not allowing anything through at regular intervals.
View 1 Replies View RelatedI am trying to secure changes to switches using ACS 5.3 and allowing our technicians to only change the vlan for user ports on the switches. How can I use regular expressions to filter out the 1/1/# ports so that those ports cannot be accessed in config mode? If I allow the following, it allows access to all interfaces with 'gi' in them.
View 1 Replies View RelatedWe are running WLAN using WPA2-enterprise with AES & IAS server.Mostly we are using AP's 1131 and Cisco WLC 4400.I added on a new location 2 AP 1142G and since the installation I got 3-4 clients having regular disconnections.Basically they are connected immediately to the infrastructure but after a certain amount of time the Win7 icon is having this yellow exclamation sign, and we can see that the connectivity is gone (however the IP settings seems to be still in place, but ping or network browsing is not possible).Stopping the WLAN and starting it again solve immediately the issue (via software or via the notebook switch). Normally the problem doesn't resolve by itself.
I was working beside the laptop having the problem with (my own laptop) during the person got 3 disconnections, mine was running like a charm.We have 85% of the people there working errors free.Checked the 1142 AP for any logs or errors, interfaces status etc...Checked the switches behind, interfaces seems running smoothlyChecked IAS / WLC / WCS for any logs that can indicate an issueCompared WLAN adapter settings of the faulty laptop with mine, discovered some differences and adapted it.Compare the WLAN SSID config in Win7 with mine and adapted the slighty differences found.Used WCS troubleshooting client tool.What I will do again :Verify if the persons having the issue have the same laptop modelVerify settings in the BIOS Verify WLAN adapter driver versionVerify BIOS versionUse WCS troubleshooting client tool on my own laptop at this place.
I've recently switched to an ASA 5510 on 8.4(3) coming from a Checkpoint NGX platform (let's say fairly quickly and without much warning ). I have a couple questions and they're kind of similar so I'll post them up. I've read docs about regex and creating them both via command line and ASDM, but the examples always seem to include info I don't need or honestly something I don't understand yet (mainly related to defining classinspect maps). If someone could provide a simple example of how to do these in ASDM that would be useful in understanding how regular expressions are properly configured. So here we go.
I know this is basic but I need to make sure I understand this properly - I have a single web server (so this won't be a global policy) where I need to allow access to a specific URL pathfile and that's it. So we'll call it est estfile.doc. Any other access to any other path should be dropped. What's the best way to do this in ASDM (6.4)? I think if I saw a basic example for this I could figure out next few questions but I'll post them as well just in case.
I have another single public web server (again this won't be a global policy) where I'd like to specify blocking file types, like .php, .exe., etc... again a basic example would be great.
Lastly, and this is kind of related, but we have a single office/domain and sometimes we get spam from forged addresses appearing to be from our domain. On Checkpoint I used to use its built-in SMTP security server and could define if it received mail from *@mydomain.com to drop it because we would never receive mail externally from our own domain name. I saw something similar with ESMTP in ASDM and it looks kind of like how you set up the URL access mentioned above. Can I configure this in ASDM as well, and if so how?
I have site-to-site VPN and IPsec VPN installed on ASA 5505. VPNs work OK except few stranges:I can't ping 192.168.17.104 from remote ip 192.168.17.138 - 305006 192.168.17.138 regular translation creation failed for icmp src OLD-Private:192.168.17.104 dst OLD-Private:192.168.17.138 (type 0, code 0) in the same time I able to ping 192.168.17.104 from my network 192.168.10.0 and can ping from ASA No firewall at 192.168.17.104?How to fix it?
There is my config:
ASA Version 8.2(2)
!hostname ASA5505domain-name domainenable password password encryptedpasswd password encryptednames!interface Vlan1 description INTERNET mac-address 0000.0000.0001 nameif WAN security-level 0 ip address a.a.a.a 255.255.255.248 standby a1.a1.a1.a1 ospf cost 10!interface Vlan2 description OLD-PRIVATE mac-address 0000.0000.0102 nameif OLD-Private security-level 100 ip address 192.168.17.2 255.255.255.0 standby 192.168.17.3 ospf cost 10!interface Vlan6 description MANAGEMENT mac-address 0000.0000.0106 nameif Management security-level 100 ip address 192.168.1.2 255.255.255.0 standby 192.168.1.3 ospf cost 10!interface Vlan100 description LAN Failover Interface!interface Ethernet0/0!interface Ethernet0/1 shutdown!interface Ethernet0/2 shutdown!interface Ethernet0/3 shutdown!interface Ethernet0/4 shutdown!interface
[code]....
I have deployed a cisco 2504 wireless controller along with four (04) lightweight access points (1041N) in four floors respectivly. The clients connect to the AP which is deployed in the lowest floor have regular timeouts/packet drops. Further this particular ap operates at channel 11 and it has around 11-13 rough access points in the same area and operates in channels such as 1,3,6,9,11. The DCA (dynamic channel allocation) is set to auto in the WLC. Further each ap has maximum of 07 -10 clients at any given time and I have changed this particular ap and checked still the result is same hence there is nothing wrong with the ap.
View 1 Replies View Relatedmy DSL light is blinking at evening around 6:30 evening every day.
View 1 Replies View RelatedI tried multiple times to register a username here and no matter what I chose I would only get "An Error Has Occurred" when I submit the info. I've tried this over several days and keep getting the same dead end. So, I went to bugmenot.com and I'm using a generic username that was given there in order to post this. So...there's that...
Starter info... I'm running Hardware Rev A4 of the DIR-655 on the 1.33NA firmware. I never upgraded past that firmware because of all the horror stories I'd read about new firmware here. Up until lately it's been fairly stable. The issues I refer to SEEM to coincide with my recent installation of Apple TV hardware on my wireless network, though I can't confirm. It's never been great with this router, so that could be coincidental. On my network I have a hardwired Mac Mini, wireless Macbook Pro, a hardwired D-Link DNS-321 NAS box, Apple TV, Logitech Revue, iPad, iPod Touch, iPhone and occasionally one each of a Samsung and LG Bluray player (only when they're powered up, which is rarely). I'm also using a wireless repeater in the middle of my house because the DIR-655 doesn't yield a very usable signal in my master bedroom, which is on the opposite side of the house as the router.
With all that being said... I have had terrible issues being able to keep a steady connection wirelessly with this router as of late. Streaming Youtube videos will stop after a few seconds, loading websites will just stop responding all together, and I can't even keep a connection to stream music from my Mac Mini to my phone or AppleTV using Home Sharing in iTunes. I'll get a few seconds of a song and it will just drop out completely. It's been extremely annoying and I'm ready to take a hammer to this router, to be honest.
I've checked my logs and there were all kinds of FIN:ACK, PSH:ACK and SYN:ACK TCP packets that are being blocked. I noticed many of them were coming from Apple IP addresses, so I assume that the AppleTV had a lot to do with those. I actually used the Inbound Filter settings to allow requests from a whole block of Apple IP's, which seems to have settled log items from them down a lot. There are still quite a few that seem to be coming from Google IP addresses (I presume the Logitech Revue since it uses the Google TV interface?), but the Google IP's are too random to go allowing a large block. [code]
I have Advanced DNS disabled. All Traffic Shaping and QoS boxes are checked to enable. Comcast is my cable internet provider. I've noticed that my WAN Connection Up Time is often a fairly low number like the connection to the cable modem drops out frequently.
i have cisco asa 5510 as firewall, i was trying to block some site using the link provided below
[URL]
and its working fine, but the problem i am having, when i go to download attachment from hotmail its not downloading, from gmail and other mails its
We have a PIX with 3 interfaces. Inside, Outside,DMZ.
On my DMZ we have some clients that come in and remotely connect back to there office via MSPPTP. I setup the ASA with this to get rid of the error message: regular translation creation failed for protocol 47 src
policy-map global-policy
inspection_default
inspect pptp
Now when the dmz client tries to connect back to there PPTP server I get the following error.
172.31.10.204 0 24.172.85.162 37624 Teardown dynamic GRE translation from dmz:172.31.10.204/0 to outside:24.172.85.162/37624 duration 0:01:30
172.31.10.204 1069 173.188.74.155 1723 Deny TCP (no connection) from 172.31.10.204/1069 to 173.188.74.155/1723 flags PSH ACK on interface dmz
172.31.10.204 173.188.74.155 63767 Teardown GRE connection 8393958 from dmz:172.31.10.204 to outside:173.188.74.155/63767 duration 0:01:08 bytes [ code]...
i use ASA 5510 and i want to block some urls :
-192.168.2.70 to 79 allow every thing
-192.168.2.80 to 89 : block facebook , myspace, twiter,
-192.168.2.90 to 99 : block facebook , myspace, twiter, youtube , dailymotion
-192.168.2.100 to 199 deny everting
When I boot my laptop in safe mode my internet speed is high but when i boot in regular mode, with stopping the right programs for regular mode so my internet speed is high like it is in safe mode.
View 4 Replies View RelatedSo I have a WRT160N firmware v3.0 wired connection to my PC, and at least once a day my connection speed drops from 2mbs down to almost dial up speeds at 60kps. Just unplugging the router then plugging it back in seems to fix it every time. I've contacted my service provider and they say there's no issue on their end, and since I don't get this problem when I plug the modem directly to the PC I agree with them. I've done a factory reset and that didn't work. I've gone through the FAQ and can't find anything useful in there.
View 7 Replies View RelatedI would like to change my DNS settings and I can not figure it out through the routers gui. I tried Google'ing it but I got nowhere.
View 2 Replies View RelatedWe have an ASA 5505 and I want to block www.facebook.com for all users on the inside network. I followed the instructions laid out in Cisco support document ID 100513 using regular expressions with MPF but am running into some problems.
[URL]
Once the configuration has been changed based on these instruction www.facebook.com is blocked. However I can't access any other websites except my Google News home page comes up just fine for some reason.
ASA Version 7.2(3)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password 4nJloDG8uYd8w4D3 encrypted
names
!
interface Vlan1
[code]....
this is ASA5520 associate with 8.4(1). very simple scenario , three ports: inside . outside . DMZ my problem is how to use network object NAT to perform Regular Dynamic PAT and Identity NAT.
for example, this is my configuration
**** first i configured Regular Dynamic PAT****
object network myinside
subnet 10.200.11.0 255.255.255.0
nat (inside,outside) dynamic interface
**** then , i met problem when i want to make identity NAT between inside and DMZ****
**** if i add below CLI , the first nat line will be replaced ****
**** SO IF I ADD THIS****
[code]......
my 866vae Router doesn't sync on a regular VDSL50 German Telekom Line (with regular Phone and a dsl splitter, no voip)!?
IOS is 15.1(4)M4. "show controllers vdsl 0" shows, that the modem status toggles:
Modem Status: Handshake
Modem Status: Idle
Modem Status: Unknown
I tried to configure the controller to fix to vdsl2
controller VDSL 0
operating mode vdsl2
but that didn't work. Modem Firmware is
Modem FW Version:23i
Modem PHY Version:B2pvC032b.d23i
IOS image file is c860vae-ipbasek9-mz.151-4.M4.bin
How to proceed next? If i remember correctly, a 886va Router was able to sync on this line...
I recently updated my WRT54G V3 to frimware 4.21.5 and now get regular wireless connection issues. The wired connection never has any problem (can connect to the router and the internet), but none of the wireless devices can see either.
The problem happens every couple of days, and cycling the power seems to be the only fix. When the problem does occur, the wireless devices don't even see the broadcasted SSID. But cycling the WRT54G's power fixes that.
I've gotten a few suggestions to do a "30-30-30" reset, but can't find exactly what that entails.
So here's my issue, I just bought this EA4500 so I could use the 5.0 Ghz and get a new 2.4Ghz as my old Netgear would drop the signal on a fairly regular basis. I've set the channel on 2.4 to 1, 20 Mhz Channel, and my neighbors are for the most part using channels 6 and 11 (one guy is using channel 2 at 40Mhz but has a very low signal strength). The signal drops out sometimes as often as every 5 minutes, and now it is doing it on my new router. Here's the kicker, the 2.4 band falls out from my router and some of my neighbor's routers, no new signal seems to come up, but the 5.0 band on the EA4500 is just fine, as is the wired route. Is the 2.4 band just being assaulted at my home and I'll have to deal with it, or is it that my new router, old router, and my neighbor's routers, all suck, and we should all get refunds? Any solutions to troubleshoot this beyond running a netstumbler like software, setting hard channels (including width), and long hours of trial and error? I am running this all from my macbook air, the 5.0Ghz is at 40Mhz, is the only signal, and is on a fixed channel.
View 7 Replies View RelatedWhen i connect the Router 2821 through the Consol get error message at regular interval of time %ENVMON-4-FAN_LOW_RPM: Fan 1 service recommended.
View 2 Replies View Related