i have facing problem in my Cisco Secure router 2811. It hanging every 5 to 10 minutes and restart. IOS of cisco router is 12.4 ipsecurity. I have attached the error log and configuration file of my router. Kindly see the log and let me the problem in my router.
View 9 RepliesI have Cisco 2811 secure router in my network. Seven day before it has been hanging every 3-4 hour. i have updated "c2800nm-advsecurityk9-mz.124-17.bin" IOS in the router. After that it giving some error and every 7-10 hour network has been delay in LAN as well as WAN and not pinging.
View 7 Replies View RelatedI am having issue with a RV082 with firmware:
v4.1.0.02-tm (Sep 16 2011 18:40:48)
On setup 1 I have;Using 2 WAN, 1 from fiber 5mbps symetric fixed public IP and other is DSL private dynamic dhcp address 3mbps/900kbps
On setup 2 i have:Using 1 WAN, from fiber 5mbps symetric fixed public ip Both router have exact same firewall configuration, subnet and port forwarding and we have the seccont backup DSL coming in a few day for setup 2.on both setup, the RV082 is the main internet gateway/firewall for a set of server...
Setup 1 work perfectly and been online for 2 week (since install) without issue
Setup 2 worked for 2 day then had to reboot, then work for few days then need reboot, now it look like it need to be rebooted every day. the internet just stop working and a simple reboot does the trick... also, when that happen I can stil remote in server that have port forwarded in the router or connect to router management port, but internet on the server is down... I tried opendns and google dns on both WAN connection and still no luck.I have followed instruction on various support forum;
-more reliable dns server
-lower MTU
-failover vs load balance
-disabling SPI and DoS protection
at this point I'm about to swap both router to see if it not a defective hardware or disconnect DSL WAN on setup 1 to see if its more stable but the whole point of installing this router was for Internet redundancy which so far dosent work as expected.
Using webvpn on a 2811 w/ adv ent 12.4(20)THTTP sites work fine (in the url-list)
But when we try to use an HTTPS site, clicking on that site just hangs forever. Debugs show the connection is making it, and the servers are getting the connections...
The destination servers are using self-signed certs, as well as the router. They are not requiring client certs.
We have a 1841 Cisco router for one of our remote sites and we have the GRE over IPSec tunnel on it (with our datacenter router) for the connectivity. The LAN facing interface becomes UP/Down (status 'UP', Protocol 'Down'). When I login the router and 'shut' and then 'no shut' the interface, the interface becomes UP and everything starts to work. Traffic starts to flow across it. But after some time, some hours or sometimes some days, the interface is again back to up/down status. The router is connected to a non-Cisco switch. I do see some CRC's increasing very slowly, but apart from that there seems nothing wrong with the interface in sho int fas0/0 command:
!
RTR01#sho int fas0/0
FastEthernet0/0 is up, line protocol is down
Hardware is Gt96k FE, address is 0026.cb91.ee48 (bia 0026.cb91.ee48)
[Code]....
Was building a small network in Cisco Packet Tracer and ran in to an issue. I have 4 routers running OSPF, and off one of the routers I have 5 3560 Multilayer switches. The router that the switches hang off of, I have a sub-interface with dot1q encapsulation, set for vlan 10 and an IP Address. 10.14.16.1/24. The switches have interface vlan 10 configures, and have IPs in the same subnet. From that router, I can ping/telnet to all the switches without issue. My problem arises when I try and reach those switches from any other router. OSPF is set to redistribute static and connected subnets.The routing table is populated correctly on all the routers. When I ping and trace the packet, it looks like it makes it all the way to the respective switch, but the packet never makes it back. I've played with the default route on the switches to no avail. Am I trying to implement this incorrectly, or am I just missing something?
View 4 Replies View RelatedI encountered an issue while trying to boot Catalys WS-C4948-S switch. I power on the switch and I'm able to see the boot messages thourgh serial console cable. But it gets stuck at line "Image text-base: 0x1000000, data-base: ..... ". Also I can enter into rommon mode. I tried to use different kinds of IOS images, tried to boot from tftp but with no luck, the issue is the same.
There are no erros on the screen, it just gets stuck when it enters into IOS, so I don't see the IOS prompt.
We have Cisco 4507-R installed at customer site which got hang twice and became normal after getting booted.I have analyzed show tech-support for this switch after reboting but not found relevant logs for hang issue,
View 7 Replies View RelatedWe having a VSS switch (9 slot chasis) with ios "s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI4", slot 7-9 are currently free. We wanted to install WS-X6708-10G-3C module on slot 7. Once we installed the module it didnt come, after waiting for 15-20min again we removed and inserted, but module didnt come up and we could see following logs on the console:
Jan 12 08:57:40.146: %ISSU-SW2_CFC2-3-ERP_AGENT_SEND_MSG: client/entity send failed; error code is timeout
*Jan 12 08:57:40.330: %ISSU-SW2_SPSTBY-3-ERP_AGENT_SEND_MSG: client/entity send failed; error code is timeout
Jan 12 08:57:40.146: %ISSU_ERROR-SW2_CFC2-3-START_NEGO_FAILED: ISSU NTI Client(2040): failed to start negotiation (ISSU_RC_CLIENT_ENTITY_DOES_NOT_EXIST_IN_PEER)
[code]....
Afer some time VSS switch didnt response to console commands and all the users in access switches were not able to reach the gateway (VSS). Then the problem disappeared once we rebooted both the switches in VSS.why the VSS switch become non-responsive?
I am setting up a Cisco 1941 series router for our department in Denmark. As we quickly relised we had to reset the router to it's defult settings. As we comunicated with the router thorugh HyperTerminal, the router asked me to restart. After we did so the router only sends encrypted messages wich is unreadable. We neither get any respons in the terminal when we try to write commands back to the router.We have tried to use different terminal programs as well as the USB port on the router.
View 4 Replies View RelatedIn my customer having 3750 switch and they have simply assign IP address for vlan and enable telnet in switch and other things are same as default switch.In this switch they have connected 8 cisco layer 2 switches(6 managed and 2 unmanged switch) and approximately 5 servers connected in this switch.In a particular interval,users accessing File server are connected to 3750 switch become hanged for few min.This happen for some particular interval.users accessing this server becomes entirely hanged for few min,then i have configured port monitor cmd and i have installed one wildshark tool to host connected directly to that switch.
View 3 Replies View RelatedI have a Nexus 5548 Recently restart itself for no reason I ran the command:
sh system reset-reason
----- reset reason for Supervisor-module 1 (from Supervisor in slot 1) ---
1) At 469203 usecs after Sat May 11 14:02:07 2013
Reason: Reset triggered due to HA policy of Reset
Service: eth_port_sec hap reset
Version: 5.1(3)N1(1a)
sh processes log details
Start type: SRV_OPTION_RESTART_STATELESS (23)
Death reason: SYSMGR_DEATH_REASON_FAILURE_SIGNAL (2)
Last heartbeat 6.09 secs ago
RLIMIT_AS: 189894144
System image name: n5000-uk9.5.1.3.N1.1a.bin
I've been searching in Google/Cisco about the eth_port_sec hap reset and cannot find any reason, just something about the same error but in different technology:
[URL]
CSCub36000 #SNMP polling on eth_port_security objects no longer causes an eth_port_sec hap reset.I just to want to be sure, is the same reason...Or do you know something than can cause it on a Nexus Switch?
I have an sg300-10 unit. I have recently swapped it into my LAN network to replace an aging switch that was exhibiting problems.
The SG300 is reporting near constant 100% cpu load with 11pps input. there are only 3-4 active ports on the switch at a given time. One of those ports does lead to my router and another switch with another half dozen devices.
By itself this doesn't concern me overly much, but I have found that the SG300 is occasionally freezing up for about 20 minutes then restarting. Syslog and SNMP traps don't appear to provide any hints as to what is going on.
I have tied my switch into my monitoring system (packettrap MSP, so if there is something I should be watching that I am not, that would be good to know). I am still troubleshooting getting all the monitoring functions working as well.
So, I have some questions there as well, which OID should I be monitoring for CPU utilization?
I have a Cisco 2811 Router. I have two VLANS on the router. The first one of course is VLAN 1 and the second one is one that I created from reading everything from this forum.. it is called VLAN 531
On VLAN one I have an IP address of 10.8.1.1 and on VLAN 531 I have an IP Address of 172.16.1.1, now what I can do is this... I can.. from a workstation on the 10.8.0.0 segment, ping 172.16.1.1 and one server on that segment that has an IP address of 172.16.1.50, which is fine, but what I really want to be able to do is ping our email server which is on a 10.21.0.0 segment and I cannot. Any commands on what I would need to do to make this work as I would like the 172.16.0.0 segment to ping any other part of my LAN of my choosing.
I have a Cisco 2811 Router with a NM-16ESW card installed. I've connected this to my DSL connecting and I'm trying to build myself a learning lab. From the router I can ping to the internet and back to a test computer I have connected to one of the card's ethernet ports. From the test computer, I can ping the router's WAN interface, but no further. [code]
View 10 Replies View RelatedWill 2811 Router with 4 switch port module, How to do dual ISP configuration on this router.
View 10 Replies View Relatedrouter 2811 has 2 files ios in flash
Router#sh fla
-#- --length-- -----date/time------ path
1 35202336 Mar 3 2008 16:12:28 +00:00 c2800nm-adventerprisek9-mz.124-8d.bin
...
13 59374168 Mar 5 2012 12:49:22 +00:00 c2800nm-adventerprisek9-mz.124-24.T.bin
151076864 bytes available (105431040 bytes used)
Router#
I try to make it load c2800nm-adventerprisek9-mz.124-24.T.bin
[Code] ...........
I did
verif flash:c2800nm-adventerprisek9-mz.124-24.T.binit is ok
is it corrupted memory? how to fix it?and aslo with System image file is "flash:c2800nm-adventerprisek9-mz.124-8d.bin"it dos not show voice ports for WIC2-FXO in runn conf
I know only one method to restart Cisco switch through Telent using command " RELOAD". How can we restart Cisco 2960/3560 switch phyically....can i use mode button to restart cisco switch ?
View 11 Replies View RelatedWe have a 3750G 12S that is connected to its clients with 1000 Mb SFPs. On the switch is a simple Vlan all the ports are assigned to. The ports are auto-sensing gig connection speed and full duplex when I run the show interface command.What happens is that if a client workstation is restarted or shut down and powered back up, the client cannot reconnect to the switch unless we cycle the switch itself (power off and back on)I know only the very basics of switch configuring and finding it difficult to source any trouble shooting info on issues like this.
View 13 Replies View Relatedhow we can select a network module for 2811 router?gigabit or ethernet Hwic?
View 1 Replies View RelatedI have working internet behind cisco 2811 on all vlans however upload speed is very slow and ftp server download is slow and times out, previously when directly connected to modem/router was fine? This is router config below:
Current configuration : 2229 bytes
!
! Last configuration change at 02:21:18 UTC Tue Mar 12 2013
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
[code]....
we have cisco 2960 switch which is connected to a cisco 2811 router. flapping issue between these two devices??
The following actions i have taken, but no result.. I have changed cables. have set speed to 100 and duplex full on both the interfaces but the interfaces are showing up up still not getting connectivity. same i have to auto on both sides still no result what configurations should i set to resolve this issue...?
I have a switch 2960 with 15 multicast groups (for video) and now I am configuring a router 2811 to send two multicast groups to another network.But despite of there is no client sending join yet, the router is joinning in all multicast group, and because of that the router are not standing all the traffic. why the router is joinning in all multicast groups?How could I choose what groups router will join?
Router Config:
ip multicast routing
ip pim bidir-enable
interface f0/0
description Conected to Multicast Source Network
ip address 10.1.1.1 255.255.255.0
ip pim sparse-dense-mode
I upgraded a 2811 router to the latest version and apparently everything went smooth. I reloaded and did a sh ver the IOS show the correct version, but the boot strap shows the old IOS. How can I change the boot strap to show the new IOS.
View 4 Replies View RelatedIn the existing network we have Cisco 2811 router connected to Corporate MPLS cloud. Cisco 2811 is connected to Catalyst 6509 switch(set based IOS with MSFC card). Along with that we have two Catalyst 5509. We are upgrading the access layer by replacing catalyst switches with Nexus 5548 & 2248.
For a purpose of testing I have connected 5548 & 2248. Created cPC and ether channels between two. SVI and HSRP configuredon 5548. I am terminating 2651 (test router) on 2248 port 101/1/1. On 5548 I have enabled EIGRP on vlans. I am unable to ping to 2651 from nexus switch 5548 and vice-versa. I can see both devices on CDP but I do not see eigrp neighborship formed.
What configuration should go in 2248 and 2651 in order to establish a connection between two? If test is successful then I will connect 2811 to 2248 during actual migration. I assume that in testing if it works for 2651 then it must work on 2811 router.
We are using WS-C3560G-48PS connected via UPS power supply. Whenever raw power supply gets fluctuates few of the IP phones (Alcatel) gets reset although switch is remain up and running. We checked the same by disconnecting the raw power supply but we didn't found any packet loss from the node which are connected through this switch. But few IP phone gets reset. What could be the reason
View 2 Replies View RelatedI am trying to configure router on a stick with 2811 and 3750, but I just cannot get it to work - vlans are not getting propagated from 3750 to 2811: 3750:
Code...
I have a task of setting up bandwidth limit on the 2811 router Fastethernet interfaces.The scenario is:We have a 4MB Internet connection and would like to allocate bandwidth usage to users.
Fastethernet 0/0 needs to be set with 256KB output and 2048 input. This is going to be connected to a wireless router. Fastethernet 0/1 needs to be configured with 2048 output.I could also use SDM if that's easier than using CLI.
I have to configure router 2811 for Data and Voice network.However I have only one Fast Ethernet interface. [code]
what else do I need to configure on switchport on which Avaya phones are connected.And is there any extra command, i need to configure on the router and 2950 switch.
I need to upgrade the IOS and therefore change the flashcard on a router 2811.
What is the procedure to change the flash (64MB to 256MB) on a 2811 router?
I can remove the flashcard when the router has already started, change the flashcard and load the new IOS?
hsrp+bgp+site to site vpn on router 2811.
View 2 Replies View RelatedI have Cisco 877 router it is losing connectivity almost after every one hour (freezing or hang) after reboot comes up back.
View 3 Replies View RelatedI have four 2811 routers with IOS 12.4(15)T installed. Embedded Event Manager was introduced in IOS 12.3(4)T, why do I not have it?! I've been at this for over a month, when I try to see the command 'event manager' I get Unrecognized command? According to all EEM documentation I can find, this should work on our machines!
View 4 Replies View Related