I have a working BGP session established. With "debug ip bgp events" I see many (2/3 every second) messages like this:
*Jul 23 11:23:48.773: BGP: default originate timer at max delay of 64 sec
*Jul 23 11:23:48.997: BGP: default originate timer at max delay of 64 sec
I can find nothing about this message. IOS version is 12.4(24)T and platform is Cisco 2811
I had setup a lan infrastructure with 5 3750 stack swithes. In these 3 of them are in one stack which is acting as access switch, 2 of them in another stack which is as core switch where all the SVI is configured. Now, when i tried to ping from our edge pc which is connected in access switch to default gaeway, which is configured in core switch, the ICMP is getting delayed . But when try to ping from the same edge pc to another user PC, it is getting less tahn 1 millisecond icmp replies.
why icmp is delaying to default gateway , but working with another edge to edge pcs without any delays?
i am facing a problem when the client vlan is commmunicating with the default gateway on the core 3750-x.
ios in 3750-x core is 3750e-universalk9-mz.150-2.SE.bin. But, client to client communication is happening without any dealy and icmp is less than 1 ms always.
When try to ping default gateway of client vlan, it is getting delayed (variable icmp delays). Is this an ios bug?
how to change the ARP timer in CISCO. I know how to change th mac-address aging timer, but can't seem to find any documents on how to change the ARP timer from 4 hours.
View 2 Replies View RelatedAmazed I cannot find this in any documentation but I want to know the default aging timer for ICMP redirects on a 3750 switch running at layer 2.
View 10 Replies View RelatedI am having an issue on a Cisco 3750 stack where when the stack master is rebooted, all my lacp port-channels drop and then come back up again. After doing some investigation It seems that it is happening because of lacp using the stack master mac-address as part of the system-id, so when the stack master reboots, the stack mac changes. I see that there is the command: stack-mac persistent timer 0
There is this warning about using this command:
When you configure this feature, a warning message displays the consequences of your configuration. You should use this feature cautiously. Using the old master MAC address elsewhere in the domain could result in lost traffic.
My question are:
Are there any other consequences to using this command (apart from moving the switch/mac to another location in the network)It mentions 'If the entire switch stack reloads, it acquires the MAC address of the master as the stack MAC address' Is this still the case if you have the stack-mac persistent timer to 0? Does using channel-group mode on for the port-channels still use the same mechanism of having a system-id? (Will the channels flap using 'mode on' when rebooting the stack master.
I have 2 Servers connected to same cisco switch i3560 n same L2 VLAN, i ping from Server 1 to Server 2 i got delay 800ms?why is that?
View 4 Replies View Relatedi am facing time daely issues on cisco 2960 s series switch while booting .It is taking time for electing masrer and sleeve for stacking.can i disable the election process for stcking while booting.
View 4 Replies View RelatedWe have two devices connected through a several miles DWDM connection (two switchports 10GBSR).We would like to measure the delay for that connection.
View 4 Replies View RelatedWe have recently purchased 2 x 4900M switches with the following configuration:
2 x X2-10GB-SR installed in port te1/1, 1/2 (optical)
1 x 20 x 1GB RJ45 installed in the top left of chasis ge2/1 - 2/20
1 x WS-X4908-10G-RJ45 8 port 1/2 card in the top right of chassis te3/1 - 3/8
We have te1/1 connecting the 2 switches, and various vlan's and connections on the 1GB RJ45's with no problems.
However, we have a number of 10Gbps BaseT connections te3/1 - te3/5 which are causing us issues. On a reload of the switch or removal / re-install of the cable it can take anywhere up to an hour for the port to become active again. So when we reload the switch, we may get a connection come up after say 3 mins, but the port next to it may not come up for 15-60 min. The cabling is all the same (CAT6 and has been tested/verified) and all connections go to Broadcom 10Gb cards in Dell 820 servers running vmware. We have the following set on the ports:
switchport mode access
spanning-tree portfast
No speed or duplex can be set on these ports - these options are not available in the config.
Once a link is finally established, it will hold the link solid with no problems, but this is a problem for us, we can't have a reboot take an undetermined amount of time for the link to come back.
i have 2811 router can, i use the below image on it , i m thinking to run bgp with ISP to accept just default route.
View 1 Replies View RelatedI'm trying to get a 2811 router with a NM-AIR-WLC6 Wireless Controller Module to work with an c1200 series access point. The LWAP is connected to a 2690 switch which has a trunk connected to the router. My configuration looks very similar to example 2 on this page: [URL] . The LWAP does get an IP from the DHCP pool on the router. I can also connect to the GUI of the controller from a PC on VLAN 250 (which also is connected to the switch).
[URL]
The moment I join my Wireless network I get no IP and when I enter a valid static IP, I still can't ping the gateway. I also noticed that the controller could ping the gateway before I configured the interface. After configuring an interface with that gateway, the controller loses the ability to ping to it. I can't seem to figure out why. I've been working all week on getting this controller and LWAP to broadcast a fully working network.
My 2811 is connected with two ISP,s as below and have VPN with Central branch.I want to set DSL as primary and WiMax as secondary but problem is that routes learned via BGP get precedence over default route as they are specific one.I think i may need to put all static specific routes of central branch over DSL along defautl but I want any idea if my default route stay active and when it down then BGP neighborship can be establish (like ip sla tracking.)
View 3 Replies View RelatedDoes ip default-gateway have any effect on a L3 device such as a 2811 router? I always thought that on a L3 device the default route would supersede any such command assuming it is accepted.
We have a client device that cannot be reached for managment directly and wanted to add that statment only if it might work.
I can't find any specific information on the implementation of packet inspection in a zone based policy firewall. In other words, is there a specification or even just a set of values that define the default inspection parameters for all protocols? With DPI I can manage 'some' of the inspection capabilities but I have some fairly rigorous and specific requirements to meet and I need to validate that the IOS ZBFW will meet those requirements. Specifically, I'm interested in HTTP, DNS, and ICMP but all other protocols would be useful as well.I'm working with basic routers; 871's, 2811's, 1841's, etc. The IOS in use in most cases is adventerprisek9-mz.151-3.T.
View 4 Replies View Relatedi want to know the definition of "Routing Delay in a network".
View 1 Replies View RelatedI have four 2811 routers with IOS 12.4(15)T installed. Embedded Event Manager was introduced in IOS 12.3(4)T, why do I not have it?! I've been at this for over a month, when I try to see the command 'event manager' I get Unrecognized command? According to all EEM documentation I can find, this should work on our machines!
View 4 Replies View RelatedI have a 1941 router configured for Policy based routing with two ISPs.Two static default routes configured to point the gateways of respoective ISPs with same metric.But the problem is, packets are going throug the one ISP only while doing traceroute.
N/W connectivity:
ISP1-----> <----------------------> LAN1
| Router |
ISP-------> <----------------------> LAN 2
Below is my configuration :
Current configuration : 5958 bytes
!
! Last configuration change at 05:18:56 UTC Mon Jun 25 2012
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
[code]....
I have two ISPs. Each is on it's own subnet connected to the 6509 MSFC/Switch. FW1 is on 100.1.100.0/30 and FW2 is on 200.1.200.0/30 subnet. My goal is route all traffice going to the Internet from subnet 10.133.3.0/24 to FW1 and all other subnets across the organization to FW2. I am not sure if I need to use ACL / Static route combo, or just a static routes or ACLS?
View 5 Replies View Relatedi have 2811 router and i am coneccted via concole so i want to copy the 2811 ios to my PC is that possible?
how or give my the right decument to do this.
* idon't want to use TFTP becuse i have no ethernet connection to the router(only concole)
[URL]The Cisco 2811 does not support the HWIC-4T1/E1 module. But, I installed HWIC-4T1/E1 on the 2811 running 124-24.T2.
View 3 Replies View RelatedThis is a 2811 rotuer running Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.4(24)T3, RELEASE SOFTWARE (fc2) Not sure why this isn't working. Can see it expects to parse the command. Can see this device is vtp server. Can see other vlans were defined here.
Router(config)#vlan ?
accounting VLAN accounting configuration
ifdescr VLAN subinterface ifDescr
Router(config)#vlan 35
^
% Invalid input detected at '^' marker.
[code]....
Just double-confirm that 2811 is compatible with HWIC-2FE based on your experience? Which IOS is compatible with HWIC-2FE? [URL]
View 3 Replies View RelatedI am facing a problem on a 2811 router. The CPU is remaining around 60% and the router throughput is reaching at most 18 MB while according to the data sheet the 2811 maximum throughput is 61MB. I have checked the output interpreter in order to try and figure out the cause of the high CPU and to determine if it is affecting throughput but there are not processes consuming more than 10%. I have attached the show tech-support and the show process cpu history outputs.
View 11 Replies View RelatedI currently have a 2811 and a LAN setup via a sub-interface FA0/1.3 and using a HWIC-AP I have a sub-interface dot11radio 0/1.5. I have them setup to work and surf the inet great, but I have recently been overly annoyed with the fact that the wifi cannot access windows shares on desktops and visa versa with the laptops.
The trick to make this happen is currently they are not on the same subnet. I know the answer is bridging the interfaces but when I do this using the simple commands:
bridge 1 protocol ieee
interface x & y
bridge-group 1
Although what should be simple has failed (good thing I tftp'd my working config). Here is my current configuration.
interface FastEthernet0/1.30
encapsulation dot1Q 30
ip address 192.168.3.1 255.255.255.0
[Code].....
Whether Cisco has part number for the large fan in 2811. I know p/n for small fan is already there, but I can't find any for large one( I think it s fan 3).
View 10 Replies View RelatedWe have a site and on that site we have a server which is down form last two days. However , to manage these devices we are not using any tools. We are not able to find this server that where it is located and on which switch it is connected to.
I want to know that the timer for mac address is 5 minutes and arp timeout is 4 hours . Is there any way to find out the mac address of the server . I feel like this can we done with cef ? Is it true or not I am not sure. I am running 3750 stacks and 2811 routers. 3750 stacks are working as layer 3 devices. They are also running the pretty new IOS 12.2(53)SE.
According to my understanding now a days CEF entry does not expire if we are not using them. They remain in cache as we are running with destination base CEF.
I purchased several Cisco 2811 with Advanced IP Services - they are version 12.2.X
The product number looked like this
CISCO2811-HSEC/K9 2811 Bundle w/AIM-VPN/SSL-2,Adv IP Serv,10 SSL lic,128F/512D
I need to upgrade the IOS to version 15.1 - Do I require a license ? What happens if I install it without a License ? Am I entitled to a free license as I am not changing the software type (ADV IP Serv) ?
We have two catalyst 3560 switches running c3560-ipbasek9-mz.122-58.SE2.bin They are connected using etherchannel using gi 0/21 - 24 interfaces.
on 3560-1 switch, there isn't any ip-default gateway or ip route configured. It only have 1 interface vlan configured.
on 3560-2 switch, there is ip default gateway configured along with 1 interface vlan.
What i dont understand here is that, i can reach out to other subnets from 3560-1 switch in which the routing is not enabled?
I have a remote site on a 2811 IOS 12.4(15). Interface FA 0/0 faces the ISP and is set for DHCP. What command can I run to see all of the information given out with the IP lease from the ISP? I need to find out what the IP address of the DNS servers are.
View 3 Replies View Relatedwe have 2811 router with multiple servers connected to it's lan from which there are monitoring servers in between , the router suffers always from high cpu utilization
configuration has alot of ACLs & NAT & IPSEC Tunnel with wan bandwidth 20 M? Is there any method to reduce the high CPU utilization shown below !!
CPU utilization for five seconds: 90%/80%; one minute: 93%; five minutes: 90%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
104 737029848 427864243 1722 5.45% 5.65% 5.65% 0 IP Input
253 63392216 11081854 5720 1.04% 1.15% 1.12% 0 IP NAT Ager
260 82602372 137425723 601 0.64% 0.64% 0.66% 0 PDU DISPATCHER
[code]....
I have a Cisco 2811 Router. I have two VLANS on the router. The first one of course is VLAN 1 and the second one is one that I created from reading everything from this forum.. it is called VLAN 531
On VLAN one I have an IP address of 10.8.1.1 and on VLAN 531 I have an IP Address of 172.16.1.1, now what I can do is this... I can.. from a workstation on the 10.8.0.0 segment, ping 172.16.1.1 and one server on that segment that has an IP address of 172.16.1.50, which is fine, but what I really want to be able to do is ping our email server which is on a 10.21.0.0 segment and I cannot. Any commands on what I would need to do to make this work as I would like the 172.16.0.0 segment to ping any other part of my LAN of my choosing.
I have a Cisco 2811 router and i want to experiment on the IOS firewall.The thing is, none of the commands that are proposed in online guides - like ip inspect, ip audit, etc. - seem to be working. I just get "unrecognized command" on a router that is supposed to support such features. I'm wondering if it has something to do with the IOS image.
My show version output is this:
Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.3(11)T9, RELEASE SOFTWARE (fc3)
Technical Support: [URL]
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Tue 13-Dec-05 08:24 by ccai
[code]....