Cisco :: No DR / BDR Concept In EIGRP Multi-access Networks?
Jul 8, 2012
Why is there no DR/BDR concept in EIGRP multiaccess networks? If the purpose of a DR/BDR is to limit excess traffic when there is a change in the topology, why isn't there one in EIGRP? I understand that DR/BDR share LSAs and not routes but the concept is still the same: there is a change in the topology and the change gets flooded to all neighbors, those neighbors in turn flood it to their neighbors on the multiaccess network thus causing excess traffic.
View 11 Replies
ADVERTISEMENT
May 8, 2013
We have a NEXUS 7000 running PIM SM. A checkpoint firewall is networke to it configured for PIM Dense mode. The RP is configured on the NEXUS Siwtch that the firewall is connected to.The firewall statically forwards multicast to the NEXUS.
I need the NEXUS to register the Multi cast so it can be routed to other networks.I've been able to get it working with 3750's but no answer.
View 3 Replies
View Related
Sep 15, 2010
We have a 5508 WLC with a few WAP's (1131's and 1242's). Our wireless clients use certificate base authentication against our AD (i.e. both computer cert and user cert are required). However, from time to time I see clients being associated but not authenticated as reported by the WLC. Could it be possible, as some literatures indicate that a client can only be "associated" after it's successfully authenticated? Perhaps I'm not quite clear about the concept.
View 7 Replies
View Related
Oct 24, 2011
I am looking for the procedure of the router 3900 series failover. I have got two 3900 series router with the same ISO and other interface cards. What are the main things that I should watch ? Does the standby router takes the same ip of active router if the active router fails ? How should I configure it.
View 1 Replies
View Related
Feb 1, 2012
CEF concept working in cisco 3750 , 4500, and 6500 switch.If we implement in router how it s working...
View 1 Replies
View Related
Feb 10, 2013
OK. I think Im going crazy here. Im studying OSPF and I'm working on the DR/BDR election process. I have a topology where three devices (RIDs 1.1.1.1, 2.2.2.2, and 9.9.9.9) are on the same ethernet segment so they need to elect a DR. 9.9.9.9 is a switch and Im using a SVI for the OSPF interface. Van't get the darn thing to show up in the post but here is the topology.URl After OSPF came up, I noticed that router2 was selected as the DR and that switch1 was selected as the BDR. I thought initially that it was a matter of timing and that perhaps router2 just came up first and the slower SVI interface came up second. Shutdown the interfaces, cleared the OSPF process, and set the OSPF router priority on the VLAN interface to 10.
View 11 Replies
View Related
Apr 4, 2011
I have a situation here where the company is rapidly expanding through acquisition. They are essentially a holding company and own several smaller entities. However most IT is consolidated as new entities are brought in and run out of Headquarters because the Board of Directors/Executive Mgt do not see IT as important and so the budget is extremely limited.
They have approximately 200 remote users at any given time, but they all work for these smaller entities. Currently each location has its own Dedicated Internet Access and VPN appliance (Netgear ProSafe, Cisco ASA 5510, I know of one entity that is just port forwarding to each workstation for RDP ).
They would like to route all traffic back through Corporate so they can consolidate this VPN mess and quit paying for all different kinds of licensing, and also stop paying for dedicated internet access for each location and just use the MPLS and have all traffic inbound/outbound run out of the corporate office.
The only issue is they dont want users to be able to access network resources at other organizations.
Like I said earlier the Board of Directors/Executive Mgt do not see IT as important and so the budget is extremely limited; so if there is an OpenSource option available that would be best. Also the IT dept there is 3 people (IT Manager (IBM AS400 guy), two Helpdesk guys (no certs, HS GED)) So the knowledge resources are limited as well.
View 4 Replies
View Related
Jan 23, 2013
I have setup a 5515-X in transparent multi-mode and setup 5 security contexts with inside and outside ports, one admin and 4 others. The problem I have run into is setting up a management IP for each context. On one of my other transparent firewalls in production we were able to apply an IP to the security context (not interface) however the new firewall is running the latest software and this same functionality is not available. The only options for IP in context mode is IP AUDIT. So my next plan was to create sub-interfaces of the management interface and assign one to each context however the 5515-x does not allow sub-interfaces on the management interface. How I setup a management IP on each context?
Another interesting thing i read is that the managment IP assigned to a context (if i could figure out how to set it up), has to be in the same subnet as the data interface which if fine but it also says that the management interface should not be connected to the same switch as the data interface because of MAC address table update issues, meaning that i could not use a sub-interface of one of the already configured context ports.
View 3 Replies
View Related
Feb 21, 2013
I have just set up anyconnect vpn on my box. I'm running ASA 8.4. I can connect with anyconnet client, but i cant access any networks. [code]
View 3 Replies
View Related
Dec 4, 2011
i have Cisco 5505 and i configured a remote VPN clients. here is my scenario
Cisco switch 2950 === holds two private network 192.168.8.x and 192.168.4.x
vlan 2 outside interface - Eth 0/0 155.155.155.x
Vlan 1 inside interface -- Eth 0/1 192.168.8.180
VPN pool ip address = 192.168.8.100 --110
I drag i cable from my Cisco switch and put in to Eth0/1. and i want to access this two private networks 192.168.4.x and 192.168.8.x . Now i can access to 192.168.8.x . But i can't access 192.168.4.x ..
View 3 Replies
View Related
Apr 26, 2011
I have two separate network with their own internet access as shown below I want to keep all setting of the left network unchanged. I can change the IPs and setting of the right side network.I want to be able to access all devices of the two network from my computer but in the same time the two network work as usual with no problems ( the same when they are sperate).One option is to set the LAN of modem 2 to 192.168.2.2 and connect one of the LAN port to LAN port of the Mkrotik router. Set the WAN of my private home router as
IP: 192.168.2.100
subnet mask: 255.255.255.0
gateway: 192.168.2.2
Home router LAN: 192.168.3.1
Is their another method to connect the two network and keep the same setting for the network on the left side?
View 2 Replies
View Related
May 4, 2012
I'm configuring an asa device for web access: SSL VPN service. I can have a user authenticate for web session with their active directory domain credentials (username and password). Once their web session has started, moving to the "browse networks" feature for a share viewing requires them to authenticate once again - "authenitcation required". I'd like to configure the device so that authenticating to the windows file share will be attempted using the previously entered credentials.
View 2 Replies
View Related
Jan 17, 2013
A customer has a ASA 5505 with a remote access vpn. They are moving their internal network to a new scheme and would like users who come in on the vpn to access both the exisiting and new networks. Currently the can only access the exisiting. WHen users connect to the remote access vpn, the asa gives them an address of 192.168.199.x. The current internal network is 200.190.1.x and they would like to reach their new network of 10.120.110.x.
Below is the config:
:
ASA Version 8.2(5)
!
hostname ciscoasa
[Code].....
View 2 Replies
View Related
Oct 24, 2012
I have an ASA 5520 8.2(3) and allowing my remote client-to-site-vpn clients to access resources directly connected to my ASA on separate lower security interfaces (not the outside) besides just clients on my internal networks. Someone mentioned to me configuring 'VPN on a stick' however from what I've read this seems to be only applicable when it comes to split-tunneling back out the outside interface (could be off on that). Is this possible on other lower security interfaces as well, and if so what would a mock config that accomplishes that look like (acl's, nat, etc)? Also, if I want internal users to be able to connect to these remote clients once they are active, are there any nat statements necessary (such as nonatting them) or are the vpn clients just seen as internal clients from the rest of the internal network's standpoint by default?
View 5 Replies
View Related
Mar 12, 2011
Modem >> switch router1 >> switch >> computer
same Modem >> same switch >> router2 >> switch >> computer
Now I want to access computers from router 1 to router 2 computers.I opened the router 2 web page and forwarded it. I put service port no. 3389, ip address of a computer of router 2 network. Now I can access the specific computer via remote desktop from router 1 computers using public ip .But what I need is I want to access via mstsc all computers of the router 2 network. using service port, ip address of one computer, I can access only one computer.
View 2 Replies
View Related
Oct 20, 2011
I want to share one broadband connection between network A 192.168.1.xxx and network B 192.168.0.xxx. Network A is SBS 2008 while B is Linux with static IPs.
View 5 Replies
View Related
Feb 19, 2013
I have access to network 10.3.1.0 /24 but I am not able to access 10.3.2.0/24 and other networks behind the Easy VPN server.I am using a software client to connect to the server.I have configured split tunnel to the network 10.3.0.0 /16 and it shows up in the route details too. I can ping 10.3.1.0 network but not 10.3.2.0 and so on.The Easy VPN server is configured on Cisco 861 with VPN module. [code]
View 6 Replies
View Related
Apr 10, 2013
I am looking to create an office network with each person having internet access but on a private network. however everyone will need to be able to access a communal printer. would they be able to see it if they were all on a different subnet or would i need to set up vlans?
View 4 Replies
View Related
Dec 9, 2011
Social Networks, And E-mails Are Not Worked..... It Shows That This Connection Is Untrusted.
View 1 Replies
View Related
Jun 19, 2011
I hear a lot these days about ethernet deployment in metropolitan areas as access networks. Does this mean that there would be one big optical ethernet LAN (or MAN if you prefer) with fiber to the home connected by switches? Wouldn't this lead to massive spanning trees in large cities? One bad,configuration in the network would affect the whole network.Will all IP traffic have to travel to the core even if it is destined for an intra-MAN destination? I cannot imagine that a ARP broadcast in a large MAN is feasible.
View 1 Replies
View Related
Oct 23, 2012
I have five (5) sites all connected via static VPN tunnels. They are all using Cisco ASA 5510s running 8.4(4)1. Any internal IP on each site can ping any IP on a remote site, because of the static VPN tunnels. I have the external IP (routeable) addresses connecting to each other.
Site A: 10.1.0.0 /24
Site B: 10.2.0.0 /24
Site C: 10.3.0.0 /24
Site D: 10.5.0.0 /24
Site E: 10.10.0.0 /20
I have remote users who connect using Cisco AnyConnect 3.1 to Site E. They get a static IP within the 10.10.100.0 /24 subnet (vpnpool00) and can access anything in the 10.10.0.0 /20 subnet. So far, so good.No management wants users to access devices within the other sites, specifically Site A using teh same AnyConnect connection. In other words, they get an Ip address of say, 10.10.100.5 and now need to access a server on Site A's subnet or 10.1.0.5.I have checked my NAT statements and they appear to allow this, but so far when I do a ping I get the following: Routing failed to locate next hop for ICMP from outside: 10.10.100.5/1 to inside: 10.1.0.5/0 What am I missing? Is there a NAT statement that is wrong, or an access-list statement or possibly a static route?
View 10 Replies
View Related
Jan 19, 2013
We have a two separate businesses in the same building who will both need access to shared resources and the same internet connection. They will need to remain on separate subnets and cannot communicate directly to each other. The current switch is a Cisco ESW-520-48P and we are looking at purchasing an SG-300-20P for the new business moving in. Heres how we envisage setting it up:
ESW-520 will host Company A's network. Workstations, servers etcSG-300 will have two VLANS. VLAN1 will host all Company B's network. Workstations, servers etc. VLAN2 will host the shared resources such as printers. The internet gateway is a UNIX based system with 3 NICS. 2 NICS are taken up by ADSL connections while the other NIC is the LAN, which would connect to VLAN2 on the SG-300. We would like to define which ADSL connection to route through depending on which subnet traffic is originating. The ESW-520 will need access to the shared resources and internet gateway on VLAN2 on the SG-300.
View 4 Replies
View Related
Oct 19, 2012
I have: ASUS Netbook with Windows 7 Starter.
As of last night, I cannot connect to any of the wireless networks I use every day (my personal home network or my school's WPA2).
The signal strength is very good, but it says "Limited Access" next to the network name. Apparently "Limited" means "No" because I am not connected. Here's what happened:Lavasoft Ad-Aware was blocking a site that I needed to access. I haven't used Ad-Aware in months, and it did not even appear to be running. So uninstalled it with Add/Remove programs in the control panel. BUT, mid-way through the uninstallation, I got a blue screen and my computer restarted. When my computer booted back up, I could no longer connect to my home's wireless. I'm at school now and I cannot connect here either. Ad-aware is gone from the add/remove programs list, but there is still an Ad-Aware folder in Program Files. The folder still has a bunch of stuff in it, including adaware.exe. I dont see an uninstaller (but i havent really investigated that yet). so now i can't connect to any network. Here's What I've TriedRan troubleshooter. Useless. Turned off my netbook's wireless. turned it back on. Device manager says my Network Adapters are working fine. No yellow or red icons next to them. also tried resetting stuff with the command prompt. something about winsock and netsh. I don't know what I was doing though. just following instructions from other people on yahoo answers when i googled the problem.
View 2 Replies
View Related
Aug 3, 2012
I've been having this issue for quite some time on my Windows 7 SP3 x64 machine. It's a desktop, connected via ethernet to a TP-Link WR740N router, that also provides wireless coverage. My ISP is a local one (the country is Latvia), and it offers a decent 100 MBps up/down optical fiber internet service. Now for the problem - there is only one home network on my computer, that seems to work, and that is 'Network 2'. Whenever I have to reboot the router for whatever reason, it attempts to reconnect, but sometimes reconnects to a 'Network 3' and once even to a 'Network 4' and 'Network 5'. None of these other networks have internet access. I tried to run the diagnostics tool on the issue, and usually it told me that there's a problem with the default gateway. Additionally, twice I've had the issue of the computer completely freezing when connected to one of the Internet-less networks (eg 'Network 3'), and trying to disable the network adapter, forcing a restart that consequently caused a fail boot - from there on I had to use System Restore to actually get my PC to function.
The way I've been fixing it, apart from random rebooting, reconnecting, and hoping for the best (that it decides it wants 'Network 2'), is by putting in the Resource Mini CD that came with my router, and running the Wizard for the WR740N router. It has 4 steps, the 2nd of which is 'Installing the router' (configuring the network adapter), at which point, my internet starts to work (always connects to 'Network 2'). If, I however, decide to continue this process to the step 'Configure router', and attempt to set up my wireless connection, it will begin to reset itself, and once again connect to 'Network 3', leaving me without internet access.
View 4 Replies
View Related
Mar 4, 2013
I am having trouble connecting my device to certain WiFi networks. We work with hotels and we have a handful of devices that are just not able to connect to their network. Te device works fine in my office. When I get to the Setup page and do a site survey, it'll get to 100% and then display a "page can't be found" as oppose to showing me that it has been connected. We had the MAC address cleared in their network and still no luck. Firmware has also been updated.
View 7 Replies
View Related
Sep 18, 2011
I just bought a WRT54GL which is working perfectly. I needed it to extend my home network for my kids (I have not a very fast internet connection and my kids are eating all of it... With the WRT54GL I can choose how much they can have. So my own network has a netgear modem and a netgear wifi access point which is in this network : 192.168.0.x.
This network is not blocked in any way (just password protected). For my kids network, the WRT54GL gives addresses in this network : 192.168.1.x and is limited in speed. Everything is perfect, I have internet connection on both of my network, There is just the problem that I cannot access my printers, my servers, my computers.... that are on the 192.168.0.x network from 192.168.1.x. Is there a solution ? I already tried to force the WRT54GL to go to 192.168.0.x network but no more connection. Should I "bridge" the two networks ? How can I do it ?
View 1 Replies
View Related
Nov 24, 2011
I have a sonicwall firewall connected to the LAN port of the RV016 router and two DSL modems connected to the WAN ports.
Ip address allocation:
Firewall
192.168.50.9
RV016
LAN - 192.168.50.10
WAN - 192.168.60.1
WAN - 192.168.61.1
What configurations do I need to enter into the RV016 to allow other networks connected to the firewall(192.168.3.0, 192.168.2.0) to access the internet?
View 1 Replies
View Related
Mar 21, 2012
Multi brands ips in one PC?
View 1 Replies
View Related
Dec 15, 2010
We have network consisting of approx. 8 7200's running LNS/MPLS/BGP and we provide predominantly private networks to clients(Majority of client networks are a mix of Ethernet tails and DSL).We have received a request from one client to support multicast - Having never implemented multicast, have a few questions:
1. Is is supported/possible to provide multicast within a vrf on 7200's?(From initial investigations, it appears to be)
2. Is it possible to only enable mutilcast in a vrf(i.e. not globally)?
3. Any recommended guides/best pratices?(Googling has revealed nothing really that is similiar to what we want to do)4. What are the potential ramifications?(Resource overhead, Security implications, anything else?)
View 1 Replies
View Related
Jan 18, 2013
I wish to build a test rig in my office that will act as 2 separate geographic locations with a router at each location connecting to a make believe MPLS kind of network. I then wish for these sites to communicate with each other but obviously be on separate IP ranges .I know each site would have a router and I assume that there ideally should be 2 corresponding (provider) routers on the MPLS network. What I do not know is how the the routers at each site should connect physically to its partner router at the MPLS and also how the two MPLS routers would connect together. For example, if I wanted to later scale up to have 4 geographical sites how would the 4 MPLS routers connect together (using a switch?)?
View 5 Replies
View Related
Feb 6, 2013
I have configured my two vdsl link with ppp multilink but i am not getting the desired bandwidth. Here is my configuration is this okay or i need something more in the configuration. My router is 2921 what is the maximum WAN throughput of 2921? [code]
View 3 Replies
View Related
Feb 19, 2012
is there any known issue in configuring multilink ppp using an old WIC-1T and a newer HWIC-1T on the same Cisco 1841 router ?
View 2 Replies
View Related
Mar 15, 2012
Is it possible to install LMS 4.2 in multiserver mode but with possibility to select installed components/applications? I'm talking about Solaris version. I can't see such an option. It will install all the components on every server which I don't want to. We have LMS 3.2 working in such setup: one server with most major components, other running just DFM and third one with only HUM installed.
View 3 Replies
View Related