Cisco Infrastructure :: 1921 / Implement Dynamic QoS Between Two Sites Across Low Speed WAN Link (512k)?
Jan 15, 2013
I have a trouble to implement dynamic QoS between two sites (Site A, and site B) across low speed WAN link (512k). On each site I have Cisco 1921 router. Most important app is Oracle. Because of slow speed WAN links, I want to avoid exact bandwith reservation for Oracle. I only reserve 5% bandwith for network control(icmp, ssh, telnet...) and want configure next Qos scenario:
1. If Oracle traffic exist on a network, it must have 70% of link speed guaranteed, all other apps (e.g mail, file share, ftp) use rest of the bandwith.
2. If there isn't Oracle traffic on a network, all other apps can use all available bandwith.
Issue descrtption:I used all Cisco guides, but when I implemented this on production it simply didn't work. There is no any significant improvement after implementing this (when I start network file sharing accross wan link, Oracle becomes etremly slow.).Here is configuration wich I trying to implement:
ACL-s and class-maps used to mark traffic:
access-list 119 remark ###QoS-MGMT###
access-list 119 permit tcp any any eq 22
access-list 119 permit tcp any any eq telnet
access-list 119 permit icmp any any
access-list 120 remark ###QoS-DB_ORA###
I need to implement the backup between two sites I have router 2800 which is having a point to point connectivity with the far end.At the far end there is no router ,only one firewall is there on that firewall one access-list is there to allow the traffic .To implement the back up link i have created a site to site vpn .But the problem is as soon as the tunnel is establised .For the time being i have removed by site to site config from both firewall.
We are having problems configuring NAT on our Cisco 1921 Router. Below is the running config. The problem we're having is for example our FTP server 192.168.1.16, cannot be accessed from its outside IP address, which is NATed on the router. The server is verified to be up and running and when we do a show debug ip nat, we see the router is translating outside users attempting to access the ftp server to it's correct internal IP address.
I've been trying to set up my new Cisco 1921 Router to provide internet access to my local network but with no success. I've been reading guides and looking at videos and I have to be missing something becaouse I can't access internet (ping/tracert) from my local network.
The DHCP server works fine and the clients on my local network gets ip-adresses from the router but can't ping or tracert outside the local network.
How many AP in h-reap mode recommend with WAN link 512k ?,i have read in document it show h-reap mode must requirement minimum link is 128k for connect to wlc but i don't know this requirement for 1 ap or all ap to connect across WAN to register and send traffic across WAN. Because now i have 2 site HQ -> Branch (link 512k) it can use for this solution.
I am using a USB modem to go online when i'm not in a wifi zone.. The internet speed is very slow (512 kbps) so I configured my browsers to connect via proxy to boost the speed which is now (2 Mbps)..Everythings working fine except that I cannot connect to SSL sites, e.g Gmail, Facebook, Ebay.
I have a 100mbps internet connection from my ISP but once the connection hits the ASA the download speed gets reduced to 15mbps. My network is setup as follows: ISP Modem ---- Edge Switch ----- ASA --- Internal Cisco Switches
If I plug my computer into an extra port on the Edge Switch I get speeds around 92mbps with normal traffic still going to the ASA. But when I plug into the ASA and internal switches I have speeds of 15mbps.
I have made sure that duplex/speed match on the links. I have done packet captures and within two minutes I do have several dup acks and retransmissions. The retransmissions don't seem to match the dup acks. (The retransmission is not for the dup ack requested so the dup ack keeps being resent)
The only interface error is on the inside interface which includes 700 overruns in a weeks worth of time.I am not using an IPS/IDS. I do have several vpns on it but was not going through a vpn tunnel. I am also using NAT.I am using an ASA 5510 8.2(1)
I live in the tampa bay area, I have bright house (BHN) as my service provider, which provides a Road Runner Lightning (40/5) package. I previously used BHN's top tier (20/2) back in July (and prior) with no problems.
After converting to Lightning in August of this year (2010). Of course, BHN (and every other provider) wants to force a modem/router down your throat, so I had them bridge it (in short, turn it into a dummy modem with no routing). I had an SMC branded modem gateway at the time. I work from home 2 days a week (so I can spend more time with my kids during morning, lunch, right after work) and this requires me to use QoS to ensure my VOIP work calls don't get dropped, if the family is watching youtube videos or watching netflex.
My network was as follows SMC Modem >WAN IP>>WAN Port>>D-link DIR-655>>Switch Ports>PC1, PC2, PC3
Everything seemed fine (from a usability stand point) till about 2 weeks ago when my upload speed seemed to grind to halt. Normally I was able to upload about 200-300K per second, and I noticed this dropped to about 45K per second during a drop box upload. First thing I did was power cycle both my modem and router (in the proper/usual order). After they both come up, I start using speed test to find out what my upload speeds were. I was getting about 39Mbps down, but only .56Mbps up still. I factory reset my router.... test, similar speeds. Power cycle all computers (just in case), and then modem/router. Tested, similar speeds. Updated the firmware to the latest. Same issue
Called BHN customer service, they factor reset it, but it wasn't in bridge mode. If I by passed the 655, in factory mode (non bridge mode) upload speeds returned to better than expected states. If I bridged the cable modem, upload speeds seemed to crash.
Had BHN replace the modem, seemed fixed for a day, then issue came back. Had them come back out and replace it again, this time with a Motorolla Surfboard modem... same issue. Fine during factory reset, however after they bridge the modem, upload speeds were fine. Told BHN I would take it from there.. Connected up the DIR-655, and upload speeds crashed again. (.6Mbps). Called D-Link Support, and the Chinese English speaking rep seemed to not be listening to me and tried to have me adjust my MTU as well as Wireless settings. Long story short... the rep was a level 0 id10t and I hope D-link will consider hiring better employees/contractors. So I was all about to give up and replace it with a DD-WRT capable router (which it takes me a lot to want to swap hardware), when I discovered the wan shaping was on. Which I thought to myself... nah... QoS has never messed up before... why would it be the cause. Turned off wan shapping... and voila. Issue seemed to be insta-resolved.
Unsatisfied with that... I decided to dig a lil deeper. I turned on Wan shaping again, but decided to set the settings manually instead of auto detect.
Here are the settings I used... (Advanced Tab>QoS) Enable Traffic Shaping - Checked Automatic Uplink Speed - Unchecked Manual Uplink Speed - 5000 Connection Type: Cable or Other Broadand Network
Enable QoS Engine - Checked Automatic Classification - unchecked (this checked seemed to affect my upload speed by about 5-10% during testing) Dynamic Fragmentation - unchecked (this checked seemed to be the worse enemy for upload speed)
While I know I'm not any network guru (still have to use a subnet calculator for subnetting), I think I did a pretty good job drilling down the issue (once I got passed my service provider replacing modems).
Anyways, I've had overall good luck with D-Link products, even have a 5 port 10/100 switch (all metal) from 1998 that works great. Hopefully, D-Link will just either put more documentation on the web, or hire better employees.
We want to puchase new Cisco ISR 1921/K9 . i want to know does it support the following sample IP-SLA commands
ip sla 2icmp-echo 172.16.1.2timeout 500frequency 1ip sla schedule 2 life forever start-time now
track 10 rtr 1 reachability delay down 1 up 1 ! track 20 rtr 2 reachability delay down 1 up 1 ip route 0.0.0.0 0.0.0.0 192.168.1.2 track 10ip route 0.0.0.0 0.0.0.0 172.16.1.2 track 20
Im asking above question because we will need to enable ip-sla on the mentioned router. as i read on the cisco webside, it says Cisco-ISR-1921/K9-IP Base support only IP-SLA RESPONDER feature nothing else. If Cisco-921/K9 does not support the above commands , should i go for ordering Cisco-1921-SEC/K9 ?
I followed the instructions in the manual for checking and changing the MTU on the router. It didn't have any effect. When I take the router out of the system and go directly to the modem, I can get the sites.
I have two sites linked by fibre a few miles apart, site A is on a 10.0.0.0 range, site B is on a 192.0.0.0 range, at site b there is a firewall with 2 cards, Site A also has a firewall, it external is poiting to the internet at site B, so basically site A get it internet from site Bs internet. Now they have decided that site A needs to be able to have access to one sql server at site B, how can this be achieved without allowing all traffic across the link, as, for example, both sites have their own DHCP for and cannot have site A giving out IPs to site B, so its a bitmore complicated than just linking the two can it be as simple as a masquerading rule at site B, with a second card in the sql server or 3 VLANs at site B (one for site b one for site a and one for the external internet, with site As traffic tagged), idk i cant get my head around it.
I have just started using D-Link 655 router and ATT DSL connection at home. There is an internet signal. Skype is working. But I can't open any sites. Ie tried typing hotmail, Google, anything - sites do not open. Ive tried to plug in the Ethernet cable directly into my laptop and I get the same result sites don open.
I have dir655 Hardware Ver B1 Firmware Version: 2.10NA.Comcast Motorola cable modem surfboard SB5101. The problem started happening a couple of days ago. When my computer is hooked up to the cable model directly, i am able to connect to outlook.com just fine but when i go through my router, it can't connect to the site. I played with MTU (lower it by 10) all the way to 1300 but it didn't work.The problem started happening all the sudden without any changes in the cable modem, router or my computer.
I also tried cloning MAC address from my pc but didn't work.I also tried turn off both modem and router, wait 2 minutes, start modem, wait for all lights to come up and start the router.Sites i can't connect are: outlook.com, starcraft2, Comcast, eBay, Facebook.One thing that i noticed weird is that i am able to connect to cnn.com using IE9 just fine but ping shows: [code]
MY ISP installed one router in my lab.for internet connectivity they mail me steps :connect your Laptop directly to gi0/3 port to check internet connectivity with public ip 1.1.1.x and Gateway 184.108.40.206 with subnet mask 255.255.255.240 after connection I surprised because I am able to access only google sites like gmail,google search etc. but I am able to ping/traceroute all sites.from browser I am able to access only google sites only.In Router no firewall no such access list.
I have the dir-601 as my main router. Its IP settings are dynamic, not static. My second router, the router I'd like to use as the access point is a Belkin Wireless G Mimo. My goal is to setup the Belkin as an access point downstairs away from the main router. I'd like to do this wirelessly. I'd like to phsycialy plug devices into the Belkin, while the Belkin receives access to the internet wirelessly from my main router, the dir-601.
Here's my issue. There's an easy option to use the Belkin as an access point. So I do this and set the Belkin router to an IP outside the DCHP range ( currently 192.168.0.100 - 192.168.0.199 ) to 192.168.0.250. My dir-601 will only recognize the Belkin access point while plugged in physically. I know this because when I did a ping test it only see's the Belkin when plugged into the dir-601 via ethernet cables. My ultimate goal is to simply set the dlink dir-601 to recognize the Belkin as an access point.
So I can't seem to access ANY site related to my university (www.concordia.ca) anymore from my home network. I've tried to visit URL or any of its' sister sites from my desktop, my laptop, my iTouch, even my ps3, I've also tried cross-browsing to no avail. I've checked the router page, apparently my Hardware Version is B1 and my Firmware Version is 2.00NA. Access Control is unchecked and there are no sites at all listed under Website Filter. I've also tried resetting using the reset-hole and also by pulling off the power chord. Also did a factory-reset from the router page, the problem persists despite all of that.Every other site works just fine, it's just my university site that refuses to load up. I've browsed the last 7-8 pages of this forum, this doesn't seem to be a common problem based on that little sample. So what gives exactly? I used to be able to visit those sites just fine prior to few days ago.
I have fiber optic net, going into a TP Link 1043 ND router out in my garage.All of the 4 lan ports go into one of the rooms in the house. I also have two more routers of the same kind, one downstairs and one upstairs.They are configured in a way, that DHCP server is only turned on, on the one in the garage, the other two act as switches.My problem is that 50 % of the time I can't acces facebook, and some other random sites.The interesting bit is that when I chat with someone on FB, I can see what they write, but my message doesn't go through.The way it goes, is that I can browse on facebook for like 5 minutes, after that its unavailable for another 5 minutes.I can still access the site from my smartphone, but only if its not connected to the wifi network, meaning the problem is somewhere within my setup.I've already tried turning the router firewall off, but that doesn't make any difference.
I need to restrict access or rather, block altogether if i can, access of one of the computers on my local wireless network, to online multi-player gaming sites, in particular Age of Empires and Voobly.com, which also uses a messenger type program for them to chat.I've searched and searched online, but alas, have come up with nothing that i understand. I've tried doing the block ports thing, but am unsure if what i've been doing is right. I have blocked Voobly.com under domain and URL settings via the router admin page, but for some reason, it only seems to be denied on my computer. I even went so far as to register and download relevant programs to my computer, for Voobly, so i could see if the blocking worked. Seems it's only my computer that's blocked, i didn't specify ip or mac addresses.I am unable to get on the other computer as it's not mine, and it's also password locked. I don't know the password
We are having two sites seperated by half a mile and we are using dedicated 100 Meg link at the moment for intranet traffic, and now we got new 1 gig link and I am working to set it up, Service Provider came on site installed two circuits on both sites and fiber connectivity is tested succesfully betweeen sites, now I need to connect the circuits to our network and make the 1 gig link active to make traffic flow between sites and as well bring 100 meg as standby.
So to brief the issue:
Connectivity at the moment SiteA: Switch1(3560)------100Meg--------.SiteB: Switch 2(3560)
I Want to configure SiteA: Switch 3(4507)------1gig (Active)--------.SiteB: Switch 4(3560) SiteA: Switch1(3560)------100Meg(Standby)--------.SiteB: Switch 2(3560)
simple as connecting a fiber or ethernet link from external circuit on both sites to respective switches on their interfaces and configuring hsrp to enable redundancy. A
Region : Sweden Model : TL-WR1043ND Hardware Version : v1 Firmware Version : TL-WR1043ND_V1_120405_ ISP : Tele2 (fiber)
I recently bought your router and I am trying to install it.The problem that I get is that when the router tries to get the dynamic IP from my provider, it gets nothing.I have typed in the DNS servers but no go. Without the router, my uplink works fine. The provider does not lock onto a specific MAC adress.
I recently noticed my 'Number of Dynamic DHCP Clients' on Network Settings is always empty. Before, it always registered a list since there are several devices that are connected to our wireless network (laptops, mobile phones, desktops).
'Use Unicasting' is selected by default in the Dynamic IP (DHCP) connection type.I turned it off based upon the router's support text since the router gets an IP address from my cable modem.I don't understand this option at all. I've searched for data on the topic and I can't make sense of it.I think I made the correct selection by un-selecting 'Use Unicasting.'
i have a adsl modem tp link td 8840, and i had this up and running well for about 3 days. then we decided to get a router cause my little sis got a ipad2.the router is dlink dir 61.so basically i followed all the instructions and the internet was working fine.then for some reason ign site stopped working, i thought that it was down for some reason and didn't think much of it and today when i tryed to go into hotmail or facebook it doesn't work either. so i can get into the log in pages of both, but when i put in the id and password, the screen goes blank and just says waiting for .... on the bottom (using google chrome).and it never loads.i tryed with other internet browsers and it din't work so i took out the router and re wired the adsl modem only and voila. all the sites started working again.i want to use my router but i don't know why i can't acess some sites when i have it connected.
Region : UnitedKingdom Model : TD-W8960N Hardware Version : V4 Firmware Version : 1.4.0 Build 111130 Rel.55990n ISP : DEMON
I'm using parental controls to block all devices in the house from using tumblr. I cannot do this at a device by device level as it is being used on iphones/androids, laptops and desktops.Unfortunately, the way that tumblr works is that it use many URLs for the different pages people set up so it is not just a case of blocking url... - so I'm struggling to work out if I can do this via URL blocking on the router settings. How to do this at router level.
I'm trying to set up a website filter on my DIR-601. I created a policy for 2 MAC addresses, with a schedule from 10AM-6PM, selected "Block some websites", and disabled logging. Under website filter, I added some entries, and selected "DENY computers access to ONLY these sites". When the policy is enabled, and I try to access one of the blocked websites, it gets blocked correctly ("The URL access was denied by administrator.") However, for all other websites, I get "server unexpectedly dropped the connection" errors, eg "Safari can�t open the page [URL] because the server unexpectedly dropped the connection. This sometimes occurs when the server is busy. Wait for a few minutes, and then try again." or in Chrome "No data received. Unable to load the webpage because the server sent no data." This happens with ALL non-blocked websites. I'm using hardware version A1, firmware version 1.01NA.