I have started to notice an increase in traffic from all my LAN workstations to the multicast address of 224.0.1.20, all with the same destination port (79). IANA shows this address as reserved for "experimental testing". Are there any typical applications or protocols that use this multicast address? My first thought was malware running on the hosts but it's a little tricky to prove.
View 5 RepliesOne of our Cat5513 has been displaying a lot of the error message below:
%SYS-4-P2_WARN: 8/Invalid traffic from multicast source address 01:00:5a:52:4c:4d on port 8/58
The frequency of this is quite disturbing. What this error is about? Module no.8 is our Gigabit Ethernet WS-X5410. Can that multicast address be mapped to an IP address or unicast mac-addresS? How can i go about resolving this?
I have configured a Aironet 1310 bridge as a WGB and is connected to a Aironet 1242AG AP wirelessly!A sensor(IP device) is wired into the 1310WGB. The sensor needs MULTICAST to operate!I checked the DETAILED STATUS of the RADIO and both the 1310 and 1242 are blocking multicast!The RELIABLE MULTICAST TO WGB option is enabled on the 1242AP already!
View 1 Replies View RelatedIhave a 3560 w/multicast support and I'm trying to configure a simple environment. I have 2 ports configured, one for the multicast server and the other for the client. Each are on their own subnet, so I have an ip route between the two. My run config on both ports is:
ip multicast-routing distributed
interface fastethernet 0/3 & 0/4
ip pim version 2
ip pim sparse-dense-mode
I'm using vlc server /client configured to use 224.0.0.1 on my isolated network. I can see the mulitcast traffic going into the port, and I the client is sending reports, but I think the 3560 is dropping the packets, since I don't see them coming in the client port. Need to configure a simple multicast environment using 2 ports on a Cisco 3560.
i already created a vpn server on my 878 router.. so that i can connect with ip-sec (cisco vpn client) to this router and network..
all working great... however... when i also want to allow multicast traffic over my vpn connection. do i then need a GRE vpn? or what?or is this only needed when you use a site to site vpn..?And how can i enable this?
I have a 3560X switch with interfaces 36-48 on the same LAN. All interfaces are switchports. Hosts on 38, 39 and 40 are multicast senders: all sending to the same single multicast address. Hosts on 36 and 37 are receivers, having joined that multicast group. I created an SVI for the LAN and put it in ip pim passive. (That is the only PIM mode allowed for an SVI with my IOS.) Show ip igmp snooping groups shows that 36 and 37 are the only interfaces in this group. I attach a laptop to interface 42 and Wireshark, and the laptop is receiving the multicast traffic. The laptop does not join the group. I expect it would not see the traffic.
View 4 Replies View RelatedI ' m not able to configure the asa 5510 to allow the multicast traffic to pass through ASA.The multicast traffic have to pass from inside interface to outside interface.Can I configure the multicast traffic to pass through asa with a static nat ?
View 1 Replies View Relateddoes 6500 with SUP-720 support nat on multicast traffic?
i know it support Multicast service reflection based on SXI4 which can facilitate me on destination address nat.
but if i need only source nat, does the defualt NAT feature supported on multicast traffic ?
I am trying to resolve a situation where we need to send multiple (2 atleast) multicast feeds from a source to our multilayer switch (3560x).
The problem with the source is that it can only send a feed to a single switch at a given time. It can not send 2 (identical) feeds to two 3560x devices (on 2 different subnets/vlans). I was wondering if i could make the two 3560x devices appear as 1 device (using virtual chassis system or a similar feature). I am running ip services IOS feature set (c3560e-universalk9-mz.122-58.SE2.bin).
Attached setup i am planning for testing multicast output from different vendors using VLC and STB. This Setup made to test the picture quality between the vendors at the same time on the multi viewer screen.
1) Only a 2960 Gig port switch with only one L2 v lan with IGMP snooping enabled.
In this scenario where Source and receivers are in the same L2 v lan ( no L3 interface is involved) hope i would able to test all the multicast sources with out any additional configuration on the Cisco switch.
I have configured multicast (ip pim dense-mode) on two 2911 routers that are connected by a Multilink (3Mbps) Wan connection.The configuration work fine for awhile and sometimes all day but at some point one of the Multilink interfaces stop passing multicast traffic.I perform a sh multilink 1 on the interfaces and one interfaces show the multicast packets incrementing and the other does not, it just stops.The only fix for this is to hard reboot both routers and the multicast traffic begins to flow once again.
View 3 Replies View RelatedI have configured multicast(ip pim dense-mode) on two 2911 that are connected by a Multilink( 3 Mbps) Wan connection.The configuration works fine for awhile and sometimes all day but at some point one of the Multilink interfaces stops passing multicast traffic.I perform a SH Multilink 1 on the interfaces and one show multicast packets incrementing and one does not, it just stops.The problem acts like there is a buffer that gets full and after that happens it just stops working.
View 2 Replies View RelatedI am having trouble getting some multicast traffic across a link. I have a 3750G setup, with IP routing and IP multicast routing, between two laptops. This will eventually sit between two networks that cannot be physically connected to each other for security reasons. I have static joins on the ports but cannot see the multicast traffic on the receiver. I am attaching the latest config. The sender(10.10.4.2) sits on gi1/0/24 and the receiver(10.10.3.2) sits on gi1/0/1. I am using VLC to test this and it will connect if I point the receiver to the address of the sender, but will not receive any multicast. The multicast traffic is not making it to the 10.10.3 side, I used wire shark to verify that it was not making it across.
View 3 Replies View RelatedMulticasting. The configuration is I have a 6506 as my core switch receiving multicasts from an interface assigned to VLAN10. I have a monitor port setup with a PC running Observer which says multicasts are being received on the core switch. On a different interface on the core switch I have a 2960G switch connected to it and this interface is on VLAN 10. The 2960G switch has a workstation connected to it that needs to receive the multicasts. How do I configure the 6506 and/or the 2960G to process the multicast traffic?
View 0 Replies View RelatedI have two Catalyst 6506 in VSS mode with VS-S720-10G running 12.2(33)SXI1 IP SERVICES.I have two firewalls that communicate on to the other through a dedicated VLAN created on Catalyst 6506.
One firewall is able to ping the other one on this dedicated VLAN but if I send multicast traffic from firewall-1 I didn't receive it on firewall-2.I found a bug related to multicast issues on Cisco WS-C6509-E with VS-S720-10G. The bug ID is CSCtc59038.
I have an 871 setup at home with a fairly basic configuration (NAT, Firewall, EasyVPN, Wireless). What I've noticed is that for traffic going from the WAN interface (FastEthernet4), it seems to be hitting the ACL in place for NAT. My config: [Code] .......
Where 76.22.98.39 is the dynamic IP address from the cable provider. If the traffic isn't passing through the router, why is it trying to NAT it?
IOS Version is 12.4(6)T9
There is a remote server that downloads info from a server here at HQ. When the dowloads start the rxload on the S0/0/0 interface jumps to 98 percent or so; rxload 250/255. I needed to limit the bandwidth utilization between the servers, so I added the below line to the LAN interface on the remote router.By adding the command, it reduced the download utilization -which is what I wanted.
access-list 185 permit ip host 10.6.27.1 any
!
int f0/0
traffic-shape group 185 10000 8000 8000 1000
Question:How would applying this to the LAN interface cause the download utilization (Coming from s0/0/0) to decrease?
We have a data center with servers set up for different projects, some servers from partner companies and several small LANs. The traffic between all those needs to be controlled and firewalled. The servers and LANs are divided into different subnets and VLANs. Physically, their traffic is aggregated on a couple of 4506 and then sent to a FreeBSD server, where the logical gateways are set up and traffic is filtered between them.The BSD server is dying and having it there is incorrect in the first place, so we are planning to replace it with two ASA (5520) in failover.The question that arises is how to correctly implement firewalling between VLANs. Originally we thought to set up the firewalls in transparent mode and logically terminate VLANs on a stack of 3750 switches behind them, but would that filter the traffic between the VLANs? Then we thought to perhaps terminate the VLANs on the ASAs, use routing mode, and do filtering there, as well. Or should we implement multiple contexts? We have about 20 VLANs and all of them differ in rules of what should go there. None of this can be concidered an "inside" - trusted - zone, nor "outside". Internet and external links are connected and filtered in a different place.
View 1 Replies View RelatedWe have the next Settings in our SW. We crate an ACL and aplied to a SVI for Incomming Traffic, I understand that is not necesasry to allow the returning traffic in ACL, but we can't access to rdp for example when we add the ACL, if we remove it, the acces is ok, buet when we add again the access is deny, even we have a log entry, and the ACL i just for Incomming traffic. There is no another ACL.
See attached file
[code]...
How I can prioritize Web Ex, Skype and some two websites on Cisco equipment. My set up is such that my 512kbps link goes to a Cisco 1941 router>Cisco ASA 5505>Cisco Catalyst Switch 2960>Computer.I want to be able to prioritize this on my network and test that it actually works.
View 1 Replies View RelatedMy issue: I have installed a firewall within my network. Currently all my clients default gateway defaults to GW:192.168.1.1. I would like all my internet traffic to route to the firewall ip 192.168.1.30. My Primary switch ip is 192.168.1.10, which is a 3560G running 12.2(25)SEE2 IPBASE-M.
My main problem is, I do not have access to the gateway, so I am trying to route internet traffic from within my switch to the firewall. I have already tried Route-Map, but seems this version of the OS does not support. I have already tried Policy-Map, but same as above. I have also tried IP ROUT command, but it did not work either.
And remember, I would like to perform the routing from the switch, because I do not have access to the default gateway which is a router to perform forward internet traffic to the firewall.
Why do we need MP-BGP (and not BGP) to exchange multicast prefixes between multicast domains?
View 2 Replies View RelatedI try to pass multicast traffic between two vrf on the same 3750 switch. I have IP services IOS and sdm template routing.
here is my config:
ip routing
!
ip vrf vpn2
rd 1:1
mdt default 232.1.1.1
route-target export 1:1
route-target import 1:1
[code]....
Now I'm stuck - I don't know what to do to pass multicast traffic. Do I have any chance to run this config on 3750 chassis?Perhaps "Configuring Multicast VPN Extranet Support" document will be useful, but it concerns Catalyst 6500? [URL]
I came across a interesting symptom. Refer to the following topology.
host 1 <-> R1 <-> R2 <-> FW<-> host2
host 1 is configured to send syslog to host2, however due to firewall ACL is not configured, this has caused a spike to 99% in R1 which already has 70% - 80% cpu.
My questions are :
1) Even if the firewall is sending RST back to host 1, it should not caused an 20% cpu increase in R1 cpu. Why this is so? Router model is 3620.
2) How do i prevent this from happening in future? This could potentially allow someone to send random traffic to hosts and cause network performance issue. Is there a way to turn off the RST response from the Firewall? This is an Cisco ASA.
We had 1.5 Mbps, but we just upgraded to 8 Mbps. Right away we noticed that we couldn't connect to the Playstation network on the PS3, and loading Google would take several tries. In some cases you couldn't even refresh the page to load Google, you would have to open a new tab. We would have bursts of good speeds from online speed tests, ranging from 8.6Mbps down to not being able to load the test, and everything in between. urls... live in Wisconsin and my ISP is Centurylink (formerly Centurytel), a technician came over yesterday and checked our box outside and inside and said that it was our Margin (db), if I remember correctly. Here is the info from my router: [code] The technician ended up lowering our speed to 6 Mbps, and said that everything looked good, and left. The Margin (db) was at 7.3 inside and 9.7 outside before he lowered it, and he thought that if we could hit 10, we would be fine. If that's the case then it seems like the margin is not the problem. If we are using too much speed could we set QoS on a router (would need a different router) to limit the bandwidth?
View 3 Replies View Relatedi just increased my band width from my provider to 50 down ..3 up ..I can get almost the 3 up while connected to my d link but only about 2.5 down ..when i bypass my d link i get mid 40's down and 2.8 up .. for some reason my d link is slowing down my speed . I have a DIR825 hardwear B1 Ferm wear 2.07 NA
View 5 Replies View RelatedI just needed more insite into the function of the ip tcp adjust-mss command which can be used to adjust the MSS value in the tcp syn packet which passes that interface. But here is a question which I had. Consider that i have two sets of systems in my LAN one with an MTU value of 1300 ( MSS 1260 ) and with a MTU of 1500 ( MSS -1460 ). If I go ahead and put an ip tcp adjust-mss 1456 (for reducing the packet size from 1500 to 1496) on the WAN . Does the command only lower the MSS for the set of systems which have 1460 or will it also increase the MSS in the tcp syn packets send by systems with MSS of 1260 ( which can potentially break some communication ).
View 1 Replies View RelatedIs it possible to bond two T1 lines for increased throughput and for possible failover situations? I currently have the second T1 as just a fail over.
View 3 Replies View RelatedA short while ago, I had my data backed up onto a new HDD, as the old one was showing signs of failing soon. When I got the computer back, I noticed a problem where I need to constantly hit "Diagnose" in the Wireless Network Connection Status to get my internet working again. When it gets into this stage, several websites continue to work, I don't lose my connection to them. Some websites I can still connect to without a problem. However, many websites, even google, keep giving an error that the host could not be found. It appears that it stops accepting new connections until I reset the wireless card. My Laptop (using wireless) and other PC (Connected directly) have had no issues at all with our wireless router.
View 4 Replies View RelatedHave been experiencing speeds of max 2.5 Mbps for transferring files between Windows 7 machines connected wirelessly to a Billion 800VGT router. A speed of maximum 18 Mbps was achieved. No matter what I did to adaptor settings it was the best possible. Have 6 wireless machines which I cross checked multiple times using Lan Speed Test by Totusoft.I then disabled the wireless security (WPA-PSK) on my Billion 800VGT router and secured the network by using the Wireless MAC address filter. My speed immediately increased to 11Mbps between wireless machines. Speeds to machines on fixed lan increased to 26 Mbps.
View 1 Replies View RelatedWe have cisoc 2821 at one of branch and created five sub inetrfaces for different vlans.Output of Show interface shows very frequent increase in the input error count.I have changed the physical cable and switch port on the other side.But still error rate is increasing.When the traffic is less error rate is low but with high traffic it is increasing drastically.My router process is very less(4%) only.What could be possible reason. [code]
View 8 Replies View RelatedWe are looking to implement traffic shaping/policing primarily for P2P traffic. As natively the ASA5550 is only capable of p2p inspection if the traffic is tunneled via port 80 is the AIP-SSM the way forward? We have 2 5550s in active/active failover config. As a side note we are also looking to implement an IDS/IPS system so could this module cover all?Is this module going to provide the desired outcome or is there another module/device out there better suited for this? I would prefer to use the ASA5550s as opposed to implementing another product if only that we can make use of the investment we already made on these devices.
View 1 Replies View RelatedI am testing limit bandwith using my ASA 8.2, i am trying to limit internet access for certains users , i order to save Bandwith for the important things but i can´t get any limitation
My configuration is the following, the acces list is just for my pc in order to test, and the service policy is applied to outside interface (called internet in my case) for incoming traffic
access-list Internet_mpc_1 extended permit ip host 172.16.127.70 any class-map Internet-class-TEST match access-list Internet_mpc_1 policy-map Internet-policy-web class Internet-class-TEST police output 1024000 1500
service-policy Internet-policy-web interface Internet
With show service policy i can´t see any activity on the policy , but if i do a similar configuration for inside interface outgoing traffic i can see packets allowed and dropped