Cisco Switching/Routing :: 1841 - 1 ISP / Public IPs And Bandwidth Distribution + VLANs?
Oct 9, 2012
This is existing network diagram and find attached file for configuration of Router and L3 Switch:ISP provided 6 Mbps internet access link with ethernet Handoff which is terminated over Cisco 1841.ISP also provided pool of 30 Public ip's 125.63.74.33 /27 , range from 125.63.74.34 to 125.63.74.62.In my current setup, all Inside to ouside traffic going out through 125.63.74.34 public ip because this public-ip NAT overload with Router F0/1 interface.
1) I want to divide 6 Mbps link physically into three parts 2Mbps, 2Mbps, 2Mbps for three VLANs.
2) I want to also configure each vlan IN/OUT traffic with different Public ip. is it possible or not ?
Vlan2 = 172.25.162.0 /24 => Inside to outside / Outside to inside traffic through 125.63.74.40
Vlan3 = 172.25.163.0 /24 => Inside to outside / Outside to inside traffic through 125.63.74.41
Vlan4 = 172.25 164.0 /24 => Inside to outside / Outside to inside traffic through 125.63.74.42
How can i configure above desired setup with CBWFQ
Currently, we have a Cisco router (28xx), ASA 5520, and a core switch 4500. We have different vlans. We also have Auto QoS running for our Cisco IP Phones.My manager just asked me to see if I can either reserve some certain bandwidth for one vlan, or give that vlan higher priority on internet traffic than the others.
1.) Anyway we can reserve some more bandwidth for one vlan than other vlans?
2.) If #1 cannot be done, how can we provide higher priority on the internet traffic to one vlan than the others?
3.) Is #1 or #2 the same config? If not, which one would be easier (without changing our current QoS settings)?
4.) If 1 or 2 can be done, which device I should config the settings on?
5.) This question may be duplicate, but do we need to reset our current QoS to achieve the goal?
due to upcoming changes to our network I'd like to be able to pass vlans across the FE ports of a Cisco 1841 router.1 port would go to a managed switch and then to local devices on different VLANs.the 2nd port would go upstream to a Cisco 3825 at a different location which would then connect to the internet.due to monitoring behind the Cisco3825 we would like all NAT to occur on the 3825.
what I would like to happen is this example device connected to port 7 on managed switch gets an IP (10.0.7.10) from the Cisco 1841 in VLAN 7 (10.0.7.0/24).traffic from that device goes to the switch, then in f0/1 on the 1841 and out f0/0 still with the same IP info, no NAT occuring.traffic is received on the 3825 port 0/1 and then NAT occurs and out port 0/0 to the internet.
I have 1841 router with Gigabit Ethernet HWIC with One SFP Slot installed in it and connected via SX Multimode cable to 2950 switch. I have 5 VLans in trunk. The question is what will be the speed rate between VLans - 1 Gbps or less?
The case:
Port 1 assigned to a VLan10 and Port 2 Assigned to a VLan20 on 2950 switch.
InterVLan routing is configured on 1841.
Computer A is connected to Port 1 and Computer B is connected to Port 2 on the switch.
What be a file transfer rate from Computer A to Computer B assuming that NICs on both computers are 1000Base-T.
I need to know the Cisco 1841 Router FE Maximum Bandwidth Support and the Cisco 3825 Router GE Maximum Bandwidth Support. I cannot find this information in Cisco for these old devices.I would like to have the platform capability for all situation (only IP base, with QoS, with ACL, with encryption, etc.)
Am having an issue with my cisco 1841. I recently brought some IP Publics. Now that i need them i just can't use them, I don't know much about routers but till now have successfully manage to do some stuffs with the router after googling ,OK we already have some other ip publics and when i look at the config file i can see something like this:
using the 55xx as a L3 Distribution switch or even as a Core. By enabling the L3 features does it allow you enabled L3 SVI's for VLAN interfaces or are there interfaces on the daughter card that are used for routing instead?
We have 4507 distribution switch in our network.I am trying to enable ssh in those switches but seems that ssh command is not supporting. IOS version - cat4500e-universal.SPA.03.03.00.SG.151-1.SG.bin
Imagine I am designing a small network with a C2900 router running OSPF and in the future BGP with service provider. Please see attached diagram.The router is connected to (2) C3750 Layer 3 distribution switches. Then one C3560 layer 2 switch to serve future IP phone users and desktops.
Question:
a)If I connect the router interface to the (2) 3750 switches, if I make the router interface fa0/0 and fa0/1 as a trunk to accomodate VLAN 200 and other future VLANs, don't I have a problem with overlapping networks between router interface fa0/0 and fa0/1?
b)Alternatively, I could make the Router1 fa0/0 and fa0/1 configured with IP addresses and advertised in OSPF. Then the SW1 fa0/24 and and SW2 fa0/24 I could make as 'no switchport and create a routed interface port' with IP addresses, also running OSPF. Question is, from a scalable design perspectie, would you create 2 management networks and use those when assigning the IP addresses for Router1 fa0/1 and fa0/2? Because again Router1 fa0/1 and fa0/2 obviously need to be placed on different networks to avoid overlapping. So my question is more about proper network planning design to make this scalable to accomodate future VLANs in the future.Using trunks between the Router1 and SW1 option:
Router1 int fa0/0 description connection to SW1 no ip add int fa0/0.200
The two stacked Cisco 3750G Access switches on a particular floor in my coy just lost connectivity to the distribution Switch this morning. This meant that all Users connected to it couldnt connect to the Internet nor access local network resources.I couldn't ping the Switch IP, I couldn't also access the Switch via Console port. Each time I tried to gain access via the console port, I keep getting "Authentication Failed" message.What should I do next? How do I gain access to the Switch?
I had a lot of questions when I began planning a pair of Nexus 7000 switches as a replacement for our 6500. How to publish my design and config. This is a medium sized network. I would have loved to see somone's configs for a similar implementation.
I have some questions in regards to network equipment I want re-utilize for my distribution layer in one of my buildings.The choices at the moment are:
OPTION 1.) 2x WS-3550-12G's (HSRP)
OPTION 2.) 1x WS-6509 with cards:
What option would be better from a performance aspect? We want to have network, voice, and wireless data go through this distribution layer switch(es).This is exisiting equipment I already have and can not buy anything else at the moment.
To setup SG300-20 as CORE switch and SF100-48 as Distribution switch.SG300-20 will have 2 VLAN(DATA and VOICE)
-192.168.14.1/24 DATA -172.168.0.1/24 VOICE
SF100-48 will also have 2 VLAN(DATA and VOICE)
-192.168.14.1/24 Desktop/Laptops -172.168.0.1/24 IP phones
Problem is when I tried to assign IP to any VLAN's the switch will just hang and loose my connection the light will stop blinking it will steady and i unable to access the switch until i turn off again?
I got 1 public IP for router and 16 Public IP's for NAT from ISP. Both router IP in one range and the NAT IP's are in different range. I want to use 1 NAT public IP for one of my windows server.Am using cisco 1841 router, in which I ve configured the public IP provided by the ISP for router.
My ISP insists on using a /30 IP WAN block to connect to its equipment even though it is an ethernet handoff. They wil then route a /27 public IP block to my firewall. I would have liked to skip the WAN block and connect my PIX directly to the interface but now have to deal with two sets of IP blocks and routing between them but I still want to avoid having to use a router in between their equipment and my firewall.Is it possible to use one of the switch ports on the PIX and configure it as a separate VLAN to handle the WAN block and then route internally to another VLAN with the public block and still be able to use NAT, ACL and IPSec on the PIX?
I'm really bad on networking so I have a question about NAT. I got two public IP addresses from my ISP: 92.x.x.252 - 92.x.x.254. 92.x.x.254 is configured as secondary on external interface and clients will use it two connect (vpn) it from outside through cisco 1841 to zywall p1 with wan ip address 92.x.x.253. Is this configuration (look at picture) allowed? How can I route traffic from 92.x.x.254 to zywall p1, if posible?
How to setup 3 SG300-52 (in L2 mode) as per this diagram:Port 1 on all switches should be able to talk to each other and access the blob at the right.The ports 25 on the other hand should only be able to talk among themselves in their own private vlan. They are to carry sensitive traffic. So I created 3 vlans, vlan 78 for ports gi1, gi51 and vlan 10 for port25,49,50 and a dummy vlan: 666 with the intent of segratating vlan 10 from vlan 78. My attempts so far have failed. ports gi49-50 are configured as trunk ports and gi1,gi51 as access ports as the following cli output (excerpts of the startup config):
Ports gi1 can talk to each other and access the blob but ports 25 refuse to talk to each other. But as soon as I remove the access links to the blob they can! Obviously, at that point port gi1 lose access.Is such a topology feasable or even advisable?
I am trying to figure out how this works. I have an ISP device that connects to my 1841. ISP and fa0/0 hold the /30 WAN addresses. Fa0/1 hold one of the public IPs, lets say 1.1.1.1/29. Then the outside interface of the ASA holds 1.1.1.2/29. Now I have two routes in the 1841, one for default route going back to the ISP device, and a route for the 1.1.1.0/29 network going to the ASA.Now I have 4 more publics I can use 1.1.1.3 - 6. I do not want to assign these IPs to the servers, but yet just NAT them. I know this is possible, but cant figureI took an internal host and did a one to one static NAT from private to public. Packet tracer says my NAT rules are ok. Allowed all IP traffic for testing and still can't ping the server.
I've got an existing Cisco 1841 connecting to a 10Mbps Internet Leased line. With my current setup I've configured PAT for internet access for my users, and we also have some servers on site which are assigned public ip addresses, these can be accessed from the internet. Now we have procured a Cisco 1921 ISR to replace the old 1841, when I connect the 1921 with an identical configuration in place of the old router, 2 things happen.
1) The users accessing the net via the nat are able to work without any inconvenience (good)
2) My servers which have public IP addresses are unable to reach the internet and subsequently I am unable to reach them via the internet (very bad)
I have installed ASA 5520 firewall and 1841 Cisco router. firewall is connected to internet and the router. Router is connected to Network. There two networks available. I have completed the configuration. but problems. i dont know how to do the bandwith sharing for these networks.
I am trying to restrict bandwidth for a particular LAN IP address on my network using policy maps but it does not seem to be working, My LAN IP address is 192.168.20.199 which i am trying to limit the bandwidth on.
VLAN ===> FE 0/1 {With subinterfaces - ALL INSIDE LAN INTERFACES} ==> ROUTER ===> BVI 0/1 {WAN Interface - OUTSIDE}
i am doing NAT for my clients in LAN to WAN - Static NAT i want one of my client who is excessing some service with his Public IP to get a specific amount of bandwidth ... as right now he is hogging all the bandwidth .i have 1841 router.
I am trying to provide internet access to public and private SSID's on Cisco AP541n using VLAN's connected directly to ASA5505. VLAN1 is inside interface (private) and VLAN12 is wlan interface (public SSID). The AP541n is plugged into switch port 0/7 on an ASA 5505.Port 0/7 is configured as trunk mode. I have internet access when connected to private SSID but no internet access when connected to public SSID. why I can't access internet on public SSID?
logging class ip history emergencies mtu inside 1500 mtu outside 1500
On an 887VA running 15.x IOS, is there a way to support both public and private addresses on inside vlans? The outside interface is public static ip, so the requirement would be to not nat anything if coming from inside vlan10 but nat if coming from inside vlan20.I didn't think this was possible since the outside interface would have to use an outside nat command that would not be ignored for traffic coming from vlan10.
we have a bandwidth pipe terminating on 1841 BVI interface... now we want to limit all the traffic going from inside to WAN circuit to half... for example 10 Mb pipe we want to reduce to 5 mb on bvi interface.. how this can be done .. as of not there is not need to police any specific type of traffic .. this needs to be done for any traffic from inside to outside...
I have a cisco Swtich SGH 300-20 Gigabit switch i configure 2 vlan one is default and one is vlan 10
Vlan 1 ip range 172.16.0.0/23 Vlan 10 ip range 172.16.2.0/24
Client on Vlan getting Proper IP from DHCP Server all i need is to distribute internet bandwidth we have 6/3 mb and i want to give 4/2 mb to vlan 1 and 2/1 mb to Vlan 10
Int Gi16 on switch is configured as trunk port and is connected to cisco 2811 router
what are the command used to distribute bandwidth between these 2 vlans
i am using a Cisco 1841 with subinterfaces instead (NAT on a stick).From the internet i can access services on public IP being hosted in LAN2. But when i try to access the same services on the same public IPs but sitting on LAN1, it does not work.
i am using a Cisco 1841 with subinterfaces instead (NAT on a stick).From the internet i can access services on public IP being hosted in LAN2. But when i try to access the same services on the same public IPs but sitting on LAN1, it does not work.
We have a pair of N7K distribution switches connected to a pair of N7K Aggregation switches.We run vPC on both pairs of n7k's.
-n7k-d1 has two interfaces in a Port-Channel connecting to n7k-a1 & n7k-a2. (PC1) -n7k-d2 also has two interfaces in a Port-Channel connecting to n7k-a1 & n7k-a2. (PC2)
My problem is that Spanning-Tree is blocking PC2 and all traffic from n7k-d2 is traversing the Peer-Link before reaching the Aggregation layer. Is this the best design for connecting two pairs of n7k's with vPC or if a better design would be to connect all 4 links into the same Port-Channel and vPC?
I have cisco 1841 router and two types of ISP line (Different provider):
1. Lease line = 2 mbps ( it is terminated over cisco 1841 router); For internet-access purpose 2. DSL = 1 mbps; For internet-access purpose
Our cisco 1841 router have only two fastethernet port, first for WAN Port where 2 mbps lease line terminated , second for LAN which is connected to Cisco switch and 1 mbps adsl line running seperatly which is not part of cisco 1841 router. i am planning to buy HWIC card for extra wan port on existing router where i will terminate 1 mbps adsl line or may be other provider lease line.I want to merge or aggregate both WAN link, My concern is to merge both line (2+1) and get single one (Just like as Etherchannel thing) , get 3mbps for LAN for internet access.
I have a quick query which i need ratified before proceeding. I have the following scenario -
Two Cisco 3750v2 switches with stackwiseISP allocated block of /26 (64 addresses)8 customers each with a VLAN and SVIInternet facing VLAN and SVIDefault route to ISP router Lets say the ISP has given me the network range 10.10.10.0/26 (we'll assume this is routable on the internet for the purposes of this example) and a default gateway to the internet of 10.10.10.1 within this range. I have configured a public facing VLAN as follows -
VLAN 300 name PUBLIC int VLAN 300 IP Address 10.10.10.2 255.255.255.252
I have then created a default route as follows -
ip route 0.0.0.0 0.0.0.0 10.10.10.1
With this configured, the switch can successfully route upstream to the internet with no problems. I have then moved onto the customers and depending on what service they have purchased, I have subnetted the 10.10.10.0/26 range into smaller subnets. See as follows -
Customer A - 10.10.10.4/30 Gateway IP - 10.10.10.5 Useable IPs - 10.10.10.6 Customer B - 10.10.10.8/29 Gateway IP - 10.10.10.9 Useable IPs - 10.10.10.10 - 10.10.10.14
This continues for each customer depending on how many IP's the have purchased. I have then assigned these IP ranges to a customer VLAN and SVI as follows -
Customer A VLAN 10 name CUST-A-VLAN int VLAN 10 ip address 10.10.10.5 255.255.255.252
[code].....
It is then up to the customer as to what equipment they use and how they NAT or firewall their internal networks.
We have some point-to-point sites linked with our HO with 10-30mbps speed. We have provided DID telephone lines to these sites as well.
We want to limit the bandwidth with 1mb bandwidth only and also make sure that the voice traffic (DID telephone lines) gets the priority over all other traffic even if they are utilitizing the 1mb link completely. We have some Cisco 1841 routers that we are planning to configure on the main uplink on each of these sites. how to give the priority to the voice traffic yet limiting the bandwidth to 1mb.
