CPU and memory graps are showing up in pollers on left of Monitoring page.
When trying to graph switchports using histo graph, some ports show up in Available instances, but most are ports that are in admin down.
I do not have the capability to graph the ports I want to see.
Is it possible to to have Multiple AS instances on an ASA5510?
View 1 Replies View RelatedI am Implementing Cisco IP Routing (CCNP ROUTE FLG) book and right now I am reviewing IPv6 chapter. This part of OSPFv3 multiple instances over a single physical interface caught my attention
View 6 Replies View RelatedI read that maximum spanning tree instance number is 128, is there any switches that can go more than128 instances ? or can we do this from IOS updates ?
View 3 Replies View RelatedI have one Cisco ISR 2921 with VPN module. I'd like to be able to use it in order to "virtual-ice" independent instances for ipsec tunneling.
What I need is something like Asa security contexts, but the problem with Asa contexts is that don't support Vpns.
I'd like to use something like independent crypto maps, so if I need to take one down, or reconfigure, I need the others to keep working. It'll be for a production environment that must be up 99.9999
I have 2 3550 12G switches that I use as core fiber switches. Switch 1 is the primary for 1/2 the V LANs and Switch 2 is the primary for the others using MST with 2 instances (I am not including the default 0 instance). I am using HSRP to provide redundancy. So far so good.
Recently a tenant in my building would like to use their own switch for data but still needs access to a V LAN on mine for voice. Again not a problem as I can configure a trunk port and give them what they need. My concern is that if they try to configure STP on their switch can they take down mine. Are there some preventions that I can put into place, such as root guard, that work with MST? What happens if they too set up MST can they kill mine?
Switch 1 is the root for 1/2 the v lans and Switch 2 is the backup root. The scenario is flipped for the other 1/2.
I'm having some weird issues with our 3560 that's connected to an MPLS line. The speed of the port plugged into the providers equipment is 100Mb, but we're only allocated 10Mb of bandwidth from them, I tried to police our traffic out of the port using srr-queue bandwidth limit 10, however when I do that I get some really weird bandwidth results.
Using iperf I've run bandwidth tests with srr-queue bandwidth limit enabled and with it disabled, when it's disabled I get the full 10Mb as expected, however once I enable it I'm lucky to get 5Mb, and while the test is running connectivity between sites is almost useless (which is not the case if I disabled bandwidth limit). Is there anything special I should be doing when I have this enabled? I also have priority-queue out enabled with only one dscp marking placed in queue 1, with very little traffic hitting that queue, but regardless of what I do I can't get the expected bandwidth with the bandwidth limit command, even if I place my iperf traffic in that priority queue.
My clients switch is running out of Spanning-Tree instances (c3560 only supports 128 instances). I know that running RSTP with VSTP can mitigate this that all instances over 128 will be handeled by RSTP, but before I implement this are there any other thoughts out there on how to mitigate this. Would MSTP be able to handle more STP instances or MISTP perhaps?
View 3 Replies View RelatedWe have an ASA 5505. 5505 comes with two default vlans 1&2 with each of them marked as inside & outside respectively.My query is , if i do not want to use vlans on 5505 and only want to use the Ethernet ports as pure physical layer 3 ports, is it possible?i.e. i want to assign a layer 3 ip address on eth0/0 and eth0/1 and make them as the inside & outside interfaces rather than vlans. is it possible to do away with vlans in 5505 & will it work otherwise?
View 3 Replies View RelatedIs there a way to associate spare firewall ports with another port that is being used..For example...int gi 0/2 is being used currently for my web dmz. Its ip is 192.168.10.1..Is there a way for me to associate gi 0/3 with the same layer 2 as gi 0/2 ?
In my webdmz I use 2 ACE 4710 proxys in FT mode. I used a layer 2 switch to connect firewall and proxys together.
I would like to eliminate this switch if possible..and connect both 4710's (layer 2) direct to firewall.If I could make gi0/2 - 4 part of the same vlan, then I would be good to go.
How many of the 881 switch interface ports can be used as router ports, have used the 877 etc where i can use 2 but need a low cost router that supports 3 for routing. (needs to be physical ports)
View 2 Replies View RelatedOne of techs accidentally connected two access ports from different switches together. Since then, LMS is alerting them as being Link ports down. I tried to default the config and set them to access ports without any success. what I should do in LMS to recognize them as access ports?
View 2 Replies View RelatedIs it possible to use one port on a cisco 837 ADSL Router as a wan port and others as LAN Ports if we don't want to use its ATM Interface?
View 3 Replies View RelatedI have seen several cases where ISP's block traffic on both UDP and TCP ports 135-139 even in core firewalls. Port 135 should be Microsoft EPMAP service and ports 136-139 should be NetBIOS services. However, why do ISP's sometimes block traffic on those ports?
View 4 Replies View Relatedi am deploying some SG 300's to some remote sites and will have static IP's assigned to them. the elements that will be plugged into the SG 300's ports will be DHCP. Is there a way to find out what IP's are assigned by port? Either by the Web GUI, the console, a log, etc?
View 2 Replies View RelatedI have a Cisco 877 connected to a VSAT modem, and I can't open ports outside, I dont know why?The Cisco 877 Fa0 port is connected to the VSAT modem at VLAN9, and the rerst of ports are connected to the local lan network at Vlan2. I can enter to Internet, but I can't open port outside. ADSL over pots is not used here.I need to open port 81 for ip address 192.168.1.130 and I dont know why this isn't working. Also if I do: sh ip nat translations I see this:
sh ip nat translations
cisco877#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 172.30.xx.122:81 192.168.1.130:81 --- ---
udp 172.30.xx.122:81 192.168.1.130:81 --- ---
[code].....
I've set up a WLC2504 with interface "mgmt" and "guest" (2 different VLAN IDs) both configured on port1.Now I'd like to be able to connect to PoE ports (port 3 and 4) 2 LAPs which should be able to get IP addresses from the DHCP as if they were connected to port1.
View 14 Replies View Relatedif i have four LAN ports on my modem+router , three of which are already occupied and i wish to add another three PCs to the same network, what hardware should i add to the fourth LAN RJ45 port so as to attach the other three PCs too.
View 1 Replies View RelatedSo the 2T comes with 2 10GE and 3 GE uplink ports. Can you use all 5, one or the other, a mix, or what? How does that work? It's not really clear from reviewing the products webpage or data sheet.
View 3 Replies View RelatedI would like to know if I can connect 4 sets of NX5596 (each NX 5596 will have 5 NX2K attached) to one set of NX7010 (each NX7K has 4 X N7K-F248XP-25 modules) and using 16-way port-channel for each set? I did some digging on the Cisco website and noticed on some of the old document stated that the NX7K only support up to 8 active vPC ports between both vPC peers.
View 8 Replies View RelatedI wonder if any of you now if there exists a small IPSEC box that can be put between units that don't support IPSEC? I'm not looking for a Wireless router with a WAN port. Only a small box with 2 ethernet ports and IPSEC client support.
View 5 Replies View RelatedI have a telephony system already in place with 6 FXO active ports configured on a 2821 Router.The thing is that I am not able to make an ip phone forward calls to a mobile No.I can make calls to the same mobile number when dialed from the phone but the call routing seems not to function correctly when call-forward all is configured on the ephone-dn.I would like to focus only on voice-port 0/0/0 and 0/0/1?
voice-port 0/0/0
supervisory disconnect anytone
output attenuation -3
echo-cancel coverage 32
compand-type a-law
cptone GB
[code]....
We have a DVR here at work that has a web interface on port 100. From our internal network we just use http:192.168.100.40:100. What is the best way to set that up on cisco 5510 firewall. I have cisco asdm and set a access rule: enabled=checked ; source=any ; destination= 192.168.100.40 ; service= tcp 100 ; action=permit. It shows a couple of hits when I go to [URL]
View 7 Replies View RelatedI need to configure a Cisco 887va router for a customer with a firewall that doesn't support PPPoA. I basically need to ensure all traffic that is recieved from the internet (ADSL connection) is NAT'd to a LAN interface so the firewall can do the specific NATing. I have the following route map and NAT rule in mind, but what I am confused about is that if the atm0 interface needs to be configured as the outside interface and vlan2 as the inside interface. How will the following work?
View 0 Replies View RelatedI have a Cisco 5508 controller and am considering using LAG. Can I enable LAG but only use 2-4 of the 8 available ports on the 5508? I am asking because currently I don't have enough ports on my 3750G switch to accomidate all 8 ports on the 5508.
View 2 Replies View RelatedWe just got a new ASA5510 (straight out of the box). I’m new to the Cisco but feel we followed the directions. We connect to the management port and have our workstation set to get an ip via dhcp. A cat5 is connected to the management port, that goes into a hub (tested to work) and a cat5 is connected from the hub to the workstation (tested to work). Nothing else is connected. The workstation does not get an ip address. (assigns APIPA) Both the 5510 and workstation have been rebooted.The workstation works otherwise. We have also connected both a crossover and straight through cable from the 5510 to the workstation. We have statically assigned an ip of 192.168.1.2 to the workstation and cannot ping the cisco (192.168.1.1).
View 2 Replies View RelatedI have a SA 520W with the following configuration:
-WAN port: Internet access for web browsing and QuickVPN access for remote users
-Optional port: Configured as WAN, for VPN access to another office (Office 2) in the same building throung a public network
-Ethernet ports: Computers on Main Office.
So far I have been able to configure communication between Main Office and Office 2 via VPN.Office 2 have no Internet access, so I need to share the Internet access from Main Office.QuickVPN clients have no access to Office 2, only to Main Office.
I need to open ports 25, 993, 995, 443 and 465 to setup MS-Exchange. I don't have an inhouse IT guy and this seems pretty straight-forward in theory but I can't figure it out I need to open ports 25, 993, 995, 443 and 465 to setup MS-Exchange.
View 5 Replies View RelatedWhat are these ports used for? What can I do with them?
View 2 Replies View RelatedI have a problem and I dont know much on Cisco Products
The router is Cisco 887 VA
When it starts the Leds Ok AND Fe lan are blinkng then are always on .After 10 seconds lan led is off a and pc shows cable is unplugged
I tried all ports and same thing happened .I tried with different ethernet cord but the problem persists
I installed Cisco Configuration Professional and it hangs on Retrieving Port
I have a site that is connected to the internet via T1 into 2811 runing C2800NM-ADVENTERPRISEK9-M), Version 12.4(11)X. I have noticed that when i do a port scan on the outside nat pool i see well know ports in the closed state .ie...7,21,22,23,25,99,100,80,443. These pools for end users to access internet. Does this pose a security risk? What can i change to provide end user access to web but not let these well know ports open?
View 6 Replies View RelatedMy SG20-50P Switch Log appears as follows with Random ports going up and down. I am trying to find out if this links to another problem I'm having with a Client Server software locking up on the client end. The hardware, thin clients and desktops, are working and have checked all sleep and power settings. All items in working order, now I'm wondering about the switch
Code...
How does the ESW 500 or SF300 line guarantee QoS of voice traffic when trunking switch to switch? I have (2) ESW 500 series switches in series. The phone on switch 1 have no audio issues, but the phones on switch 2 (the last in the series) have intermittent voice quality issues when dialing across a WAN circuit to another office. The phone on switch 1 do not have that issue though they traverse the same circuit. They are all using the same VLAN 100.
View 1 Replies View Related