Here is the current logical routing path of the network I've inherited:ISP_ASA_1800 --- P2P link_ LAN, However, the equipment is setup up in this inefficient physical topology: Internet_ASA_LAN switch --- 1800 --- P2P link_LAN, The 1800 is the default gateway for all LAN hosts. This means that all traffic not destined for the LAN goes first to the 1800 which has routes for the Internet and for the P2P. If traffic is destined for the P2P, this is no problem. If traffic is destined for the internet, then in my opinion this is an inefficient routing path because the traffic ends up doing this:LAN host > switch > 1800 > back to the same switch > ASA > Internet, So I am thinking of setting up the physical topology to match the logical topology like this:Internet, ASA_1800 ---- P2P link_LAN switch_LAN hosts This means I will connect the 1800 and ASA directly to one another. Am I on the right track? Is this the best way?
have just set up a WLC 4402 as a Guest WLAN controller on the DMZ of our network. I have successfully managed to get our internal controllers to connect to it, with the exception of 1. it says the control path is up but the data path is down. the other 14 controllers worked fine, and in testing the last one was OK but it is now not working properly. the 2 controllers can ping each other but just won't create the data tunnel. there is a firewall in the middle but that has been set up to allow traffic between the 2 groups of controllers to be unrestricted.
the internal controllers are 4404's and all controllers are running the same version of code. 5.1.151.0.
What is the best way to add more ethernet ports to my router? Is it to daisy chain a hub /switch to it? I'm all out and I often work on many computers at a time. Currently I have the cable modem, my computer, printer, one spare for computers I work on, and one to vonage modem. I would like more available for computers that I work on so I can hook up at least one more.
I am completing a project as part of my 2nd year studies and I am at the stage of testing on the network but before I go ahead with this stage, I would like some feedback on what I could do to make my network more efficient and secure.passwords are: ciscothe link is the packet tracer file I am working on.url
This is just a general question... is there a good way to organize the ASA's access rule list to increase its efficiency? Maybe by service or hit count (Top 10). I am using the Cisco ASDM 6.2 to manage our ASA 5520.
Looking at it looks very unappealing and I'm in the process of adding names and descriptions to all the Network Objects.
Looking for the most efficient setup of my home network. I recently bought the netgear 3700 and it has been great. I also have a trendnet green 8 port giga switch. Both of these will be located in my equipment closet.
I also have an ooma voip hub. before i did the router upgrade i had modem>ooma hub>router. Mainly had it that way since the previous router was a wrg614 and i thought the hub probably had better qos routing. I now have the 3700 infront since i think it does that. I need to learn how to setup the qos though. Problem is that having the hub after the router loses one of my 11 ports (i have pleanty now).
Will speed through the switch be as fast as straight from the router? should my netflix devices connect directly to the router or does any of this matter. [code]
I've Cisco7609-S with IOS 12.2(33)SRC2 met an issue is that "show ip route x.x.x.x" and "show ip cef x.x.x.x" shown next-hop is not actual switched next-hop.
For example, "show ip route 192.168.1.1" and "show ip cef 192.168.1.1" shown correct next-hop is 10.1.1.1, but the traffic destine to 192.168.1.1 actually not through 10.1.1.1, but always through the default route next-hop. Everything works normal after rebooted the router. Suppose it should caused by a bug? BTW, my Cisco7609 is runing BGP with ISP which received about 10K routes.
I'm studying for a Cisco certification and I'm trying to wrap my head around the routing. I understand how routers work for the most part and how the get updates about networks and how many hops away they are, but I don't get what happens when a router doesn't know the path to a network.
I would like to perform nondisruptive upgrades on two Cisco Nexus 5010s that currently run NX-OS version 4.1(3)N2(1) to Release 5.1(3)N2(1a). Is this possible? Or, do I need to upgrade to Release 5.0(2)N1(1) first?
Nexus infrastructure is pair of N7K switches, with dual homed 5K/2K devices connected, links use vPC. They want to extend vlan's from the 5K/2K side across a L2 path into another DC, this path is only connected into one of the N7K switches, call this 7K switch A.I'm concerned that packets from the 5K/2K side back to the remote DC could get dropped due to the vPC loop dectection process. If a packet from the 5K/2K side traverses the path into the same N7K (7K switch A) as the L2 extension, I dont see a problem. But, if the etherchannel load balance in the 5K sends traffic to the packet to N7K B, in order to get to the L2 path extension to the remote DC the packet gets forwarded across the vPC. My understanding is that this packet will get dropped by N7K A as its local L2 path to the remote DC is up, is this the case?I see a solution is to plug the L2 path into a 2K, but before I suggest this is my understanding of the loop detection process correct?
May I know how to manually set the priority (root ID and bridge ID priority) and for spanning tree? Which one should I use based on the command below? and how does it affect the path cost of it?
Is there a known bug for Nexus 7K version 6.0(4) related to route redistribution?I have few vlan interfaces and being redistributed to the BGP.vlan interfaces are all up ang pingable.After configuring redistribution, vlan route is not in the bgp table.sho ip bgp is saying "path invalid"
BGP routing table entry for 10.165.101.192/28, version 26302 Paths: (3 available, best #3) Flags: (0x180c0021) on new-list, is not in urib, need resync with RIB, exported, has label vpn: version 47719, (0x100002) on xmit-list local label: 492294
Lets say i have 2 3750 switches stacked via backend stack cables. Now if a packet needs to go from 1 switch in the stack to second switch in the stack, will it travel via stack cable or do we need to connect both switches via uplink ports (ethernet or sfp). I tried reading datasheet but it no wheres mention the actual frame path between switches in stack.
I have an issue that I am trying to track down. When I have 2 servers on the same VLAN on my AS pair, all is good because nothing leaves the switch. Where the issue is, is when I have 2 servers on different VLAN's and it requires a hop across the Core router pair. This hop drops the throughput rate by about 20-25% (from 44M to 35-36M)I think I know the issue, but want some input to from other to make sure I am not off-base. I have a pair of 6509E chassis' running Sup720 (VS-S720-10G) with CEF720 (X6748-GE-TX) modules. This is my Access Pair running VSS to look as 1 switch.
These tie into the Core pair of 6500E chassis' running Sup720 (Sup720-3B). This issue I see is that the core has a CEF720 card (6724-SFP), but the AS pair does not connect to the core on that card, they connect on a RJ45 Ethermodule (6148A-GE-TX) card. Would the fact that the AS pair does not connect to the core on the CEF7220 module on the core, cause the traffic to not make use of the CEF features of the Core and make each packet then have to be processed by the core instead of Express Forwarded?
I am in the process of upgrading our stack of 4 switches consist of WS-C3750G-48PS. Upon reading release notes found that there are two versions of release notes 1 day apart, the one 02 Sep 2012 saying that WS-C3750-48PS is not supported in this version. Then in release next day 03 Sep 2012 that note has been removed. Which one is correct. Is it supported with my model of switch or not.also unable to update boot path in the stack switches, "switch all" is not supported in the current IOS. Master switch has new boot path but unable to change in slaves.
I finally can upgrade my 1841 routes from 12.4 to the latest 15.1 IOS. Any info about upgrade path , do I need to modify config file and provide me with upgrade instruction link or something like that ?
I have a problem with the return path of NAT'd traffic on a Cisco 877W router. Here's the network setup:
gatekeeper1 (192.168.0.1) is a Cisco 857gatekeeper2 (192.168.0.253) is a Cisco 857gatekeeper3 (192.168.0.251) is a Cisco 877W The default route is 192.168.0.1 on all devices, however there are some static route defined so that traffic to certain IP addresses bounce off to 192.168.0.253 and use that Internet connection instead. This new connection is designed so that traffic aimed for a certain internal IP address (192.168.0.190) comes via this third internet connection in order to take the load off of the main line. NAT is all configured and appears to be working when .251 is the default route but as soon as I set it back to .1, the traffic appears to come in but doesn't go out again.
Where can I find information regarding the details and upgrade path for the 2821 Intergrated services router. We are looking to upgrade from 12.4 (c2800nmc-spservicesk9-mz.12.4xxx.bin) to 15.1. Is their a spefici location to look for in the download or IOS area for upgrade paths?
I have one questions regarding if C6509 suports "ip tcp path-mtu-discovery" ? apply this command to GRE interface on C6509? if yes, let me know what is the the IOS for that.
I multi homed to dual ISPs using a single 6509e. Currently, I am only receiving a default from wash ISP and marking one with a higher local pref. most of my traffic flow is inbound, so this config meets my need. The issue I have: if either ISP has has an outage upstream from my directly connected peer, my router does not detect that and continues to send traffic out thru that provider only to be black holed. My 6509 will only support 256k routes, so full route tables isn't an option. I could receive partials from each ISP. Is there any other method to detecting this upstream ISP issue and then adjusting my local pref on my default to use the alternate provider path?
I am trying to bring the mobility group between 5508 wlc (dmz) and internal 5508 wlc but it says control and data path down. (Ihave allowed port 97 and ports 16666-16667 both ways), should the ntp be sinked inline iwth other controllers ?,should the Mobility group need to match (already discussed this in another forum but experts suggested they never had to match the mobility group), should i first create the ssid and anchor - at the moment i havent created the ssid to anchor.
ASA running 8.2(5).When I enable ip spoofing on my network interfaces I see this getting logged:
Deny UDP reverse path check from 10.100.100.102 to 10.100.100.255 on interface SPECTRA-LAN
This is because interface SPECTRA-LAN (VLAN50) is the interface connected to the network with ip 10.100.100.0/24 but the interface do not have a ip address so it does not exist in the routing table I believe?However interface INTERN do also belong to network 10.100.100.0/24 which also is the management interface and the default route for hosts in network 10.100.100.0/24, but has no vlan.
1. move the management0/0 to SPECTRA-LAN and give SPECTRA-LAN ip 10.100.100.1?
2. give SPECTRA-LAN a ip address in the 10.100.100.0 range?
My routing table and interface list is:
Current available interface(s): DATA-BACKUP Name of interface Redundant1.10 DMZ Name of interface Redundant1.900 GUEST Name of interface Redundant1.990 HOSTING Name of interface Redundant1.100 Infrastruktur Name of interface Redundant1.20
I multi homed to dual ISPs using a single 6509e. Currently, I am only receiving a default from wash ISP and marking one with a higher local pref. most of my traffic flow is inbound, so this config meets my need. The issue I have: if either ISP has has an outage upstream from my directly connected peer, my router does not detect that and continues to send traffic out thru that provider only to be black holed. My 6509 will only support 256k routes, so full route tables isn't an option. I could receive partials from each ISP. Is there any other method to detecting this upstream ISP issue and then adjusting my local pref on my default to use the alternate provider path?
We are planning to upgrade our controller 5508 from 7.0.116.0 to 7.1.91.0. Is this directly possible or i have to put some other image before directly upgrading it?
I recently bought my book live 3TB everything works well with it, I can stream movies upload them, remote access and much more with a good speed, the problem is when I direct connect my book live to my PC via Ethernet, windows can't find the path of the drive. However, I tried to direct connect via Macbook and it works with no problem.I tried to fast reset my book live to factory default settings and direct connect from my book live to my PC via Ethernet, simply it worked! But then it stopped working for some unknown reason.Its a pain when i need to transfer large files via wireless.
Recently I've changed my all local I.P. series in the server from 192.168..to 10.219..& the server 2008 providing through DHCP.So, I've to re mapped the share folder to change the path in every system.But few files in 1 PC are still keeps the old share folder path when trying to open & failing or taking long time! NOT all files in that machine
I'm a network admin for a medium-sized (500-700 people) multi-site business and I have a simple question. Is there any utility or method I can use to identify the physical path a packet of data takes from a workstation on the LAN to a server on the same LAN?
For example, if I send a tracert command at google.com, I can see every router the packet touches before it gets to Google's router. Is there a method I can use to determine a similar path with switches in my internal network? If I use tracert or pathping, I only get a single hop since the workstations are on the same LAN as the servers even though I know there are two physical switches between them.
Basically, I want to send packets from a group of workstations behind a couple switches to a server and see if the packets are being lost in the switch somewhere to identify if there is a failing switch or something causing network slowdowns. map out the network more accurately so it would be useful to know.
i have 9 pcs on a lan. when i attempt to view the workgrp i get a message that indicates the the workgrp is not accessible and network path not found. i have tuned off windows and mcafee firewalls so that the only firewall functioning is with the modem/router(netopia) if i change the workgrp to the default(mshome) i can see the pcs.
I have a wireless network of PC, Acer Extensa laptop (laptop1), and Acer Aspire notebook (laptop2) which connect wirelessly to a Livebox. All machines are running XP (SP3). Laptop2 connects to the Livebox via a Broadcom 802.11g adapter.There is no problem with any of these accessing the internet. Until recently (not sure how long ago) there was no problem with any of them accessing each other.Yesterday we discovered that laptop2 has lost contact with PC. All other connections are fine (including PC to laptop2). I have checked evrything I can think of and have carried out a System Restore taking the machine back as far as I can but that has made no differenceLaptop2 appears to recognise the workgroup in its 'preferred networks' box but the PC does not appear in its list of computers on the network and any attempt to access the network (My Network Places>Entire Network>Microsoft Windows Network & click on MSHOME) results in "you do not have permission ..." then followed by "Windows cannot find the network path.."
I have attached my home network configuration. Only one part is not working. When the David-PC (win 7) tries to access the SharpeLaptop (XP) i get error code 0x80070035; NETWORK PATH NOT FOUND. This fails on wireless or ethernet hookup. All PC's are using McAfee Virus software which is supplied with ATT U-verse service. Trying to access the the daves-dell PC (XP) works fine Either of the 2 XP PC's can access the David-PC OK. The only failure is trying to access the laptop from the David-PC.If I disable the McAfee firewall on the laptop, then the David-PC can access the laptop. I have tried duplicating all the McAfee settings of the two XP P
what the upgrade path is for 5505 ASA . I have one which is version 7.2 and need to upgrade it to 8.4(5). I have read that it needs to upgraded btwn major release versions.Not sure if I need to upgrade from 7.2 - 8.0 , then form 8.0 - 8.2, then from 8.2 - 8.3 and finally 8.3 to 8.4 or can I just upgrade from 7.2 - 8.2 and then from 8.2 - 8.4 .Also what is the minimum memory requirements for vers 8.4 .my ASA running on vers 7.2 currently has 256Mb Memory and I will be upgrading this to 512MB before I do the upgrade the image above?
I have always connected to other computers in my network, including my file server, and all of a sudden, it will not work. This is only happening on one computer. You can connect fine on all the others. I am running Windows 7 SP1, and in the network window, I can see the computers, but when I click on them to connect, it says "The network path was not found". If I access them via their IP in windows explorer, then I can access them . I have never seen this before. I attempted to disable Norton, I even un-installed it, and it still does the same thing.
