Cisco Switching/Routing :: 2900 - Multiple Default Gateways On One Router?

Apr 4, 2013

I have a small network that i want to setup, i have 1 2900 router and i'd like to create subinterfaces for the internal.  but more importantly i'd like to have the dsl modems connected to the router with traffic from one subinterface going through one modem and traffic from the other going through the other.

View 1 Replies


ADVERTISEMENT

Cisco Switching/Routing :: 5505 Inter-vlan Routing With Multiple Gateways

Feb 15, 2013

We have two Cisco 5505 firewalls connecting to two ISP's . The two internal LAN's on the firewalls are 192.168.184.0/24 & 192.168.186.0/24. We also have a Cisco C3560x layer3 switch with vlan interfaces 184.3 & 186.3. We have two DGS-3100 Dlink layer 2 switches connecting our users to the Layer 3. Ip routing is enabled for intervlan communication & I can reach the Switch interfaces & firewall gateways from machines on both on the vlans.We have pbr enabled on the 3560 & users only on the .186 network can get to the internet. The switch is running the ipservices license & the sdm template is "desktop routing" .

Users on the .184 cannot access the internet but we can ping the layer3 interface & the firewall gateway. [code]

View 20 Replies View Related

Cisco Switching/Routing :: ASA5505 / Network Design With Multiple Gateways?

Apr 11, 2013

remote location on MPLS circuit terminated on a Cisco router that has Internet connectivity through Central Site router.  We are installing a cable modem at the remote location that is to be used  as the Primary Internet Connection but still be able to use Internet through MPLS if the cable Internet goes down.  We want the failover/fallback to be handled automatically.
 
We have an ASA5505 for the cable Internet which then feeds into the ISPs modem. 
 
At first I was thinking about getting a module for the remote router so the cable Internet could be terminated on the remote router as well but that introduces a single point of failure.  I would also like to firewall both the MPLS and the cable Internet but if I do so on the ASA there is another single point of failure.

View 2 Replies View Related

Cisco Switching/Routing :: 2900 - Multiple Vlan Access On Standalone Switch

Feb 3, 2013

The field engineer has a stand alone 24 port 2900 series switch that he has different equipment connected to and are segmented using VLANs. So for example, he's got ports 1-4 assigned to VLAN 10, 5-12 assigned to VLAN 20, 13-19 assigned to VLAN 30 and 20-24 assigned to VLAN 40. He would like all the gear on VLAN 30 to have the ablity to talk to all of the other VLANS, but VLAN 40 should not be allowed to talk with any other VLAN. Trunking would do no good here since the switch isn't connected to anything and you can only assign one VLAN per port.
 
Is there a way to do this within the stand alone switch? The only possible way I could think of would be to ensure that each VLAN has an assigned IP number (subnet) and doing this through access lists.

View 2 Replies View Related

D-Link DIR-655 :: Why Router Giving Two Separate Default Gateways And SSIDs

Jul 2, 2011

My router is showing two separate SSIDs, dlink and dlink 2 it only recently started doing this and around the same time my router has been constantly rebooting when there's little or heavy internet traffic.I have a DIR 655 Hardware Version: A4.Firmware: 1.21 NA

I refuse to go to any version above 1.21 as 1.21 is the most stable firmware for the 655, I have tried all other with terrible outcomes and wireless performance.I've looked around and most people think it's a joke or something, always saying it's probably a neighbors wireless, but that's impossible since I'm on an acreage and my neighbors are too far away for us to be receiving their wireless signals, and if I change the password and encryption type (WPA/WEP/WPA2) I have to change the security settings on both dlink and dlink 2.

Also I have the normal 192.168.0.1 gateway to access the router under the "LAN" section under Status on the router, but under WAN I have a completely different gateway that just recently showed up. I have no idea where this came from or what happened.

View 4 Replies View Related

Routers / Switches :: Multiple Gateways On A Single Router?

Feb 28, 2011

We are in the process of installing time clocks at some of our sites around the USA. Our security department has asked that the time clocks be completely isolated from the rest of the network. The time clocks will be administered by ADP via a centralized firewall utilizing NAT. We have multiple subnets available at each site. Let me give an example to calrify what I would like to do. Example: Site A has 10.168.19.0 /24 user subnet and is configured for VLAN1 using 10.168.19.1 on the router as the default gateway. I would like to use subnet 10.168.20.0 /24 for the time clocks, configure it for VLAN2 and use 10.168.20.1 as the router gateway address for VLAN2. This should allow me to NAT one of our additional public IP addresses to the 10.168.20.1 gateway address thus completely isolating the time clocks from the remainder of the network. Problem is I have not done this before so I'm a little confused about how to configure it in the Cisco 3750 switches.

View 6 Replies View Related

D-Link DIR-615 :: Can't Have Two Default Gateways

Feb 18, 2011

I  have a scenario which i would like to discuss with you people. I have a branch office connected with the Head office using wireless radio bridge(point to point connectivity). Here is the configuration at branch office.Things are working fine until now. The branch office has a DSL internet connection and required to be shared among the users. option 1 (problem)DSL terminate on swtich and all clients have a DSL modem as their default gateway and ISP's DNS. Internet works fine but here comes the problem, now they lost the connectivity with head office.Now my question is i cant have two default gateways then what should i do?

I bought dlink dir615 router and want to configure in such a way that internet terminate on dir 615 and branch office pc's should be able to use the internet as well as get connected with the head office with default gateway configuration.

View 7 Replies View Related

Auto VPN Failover Using Multiple WAN Gateways

May 9, 2012

We our currently using site-to-site VPN tunnels to connect our multiple offices using static public IP's via ADSL connections.We wanted to get an additional ADSL connection from a different ISP so that if one connection drops, the other could be used.Are there any hardware devices or tricks we can use to automatically get our networks to failover to use the backup ADSL connection and have our VPN traffic remain up?

View 1 Replies View Related

Cisco Switching/Routing :: ASA 5510 / Routing Mobile Users Via VPN To Different Gateways

Oct 6, 2012

I have mobile users using air cards that connect to the network with a VPN product called Net Motion. Our  firewall is a ASA 5510. Once connected to the Net Motion VPN server the user will get a DHCP address from our network. In the past we could not get the VPN tunnel to complete since our layer 3 switch (3750G IP services) has 3 egress points and the egress point that we needed the VPN traffic to go out of is not the default gateway. To solve this we had the air card carrier set switch our air cards to static IP addresses and using route statements for the public IP addresses and access lists we got it to work.
 
The problem with this is that every new air card we provision needs a static IP address. My question is would policy based routing work in this scenario? The problem has been that the VPN tunnel was not able to complete the negotitaion phase as the traffic came into the switch and was trying to go out the default gateway. The VPN client wont get an internal IP address until the VPN tunnel is created.
 
I would like to get away from using static IP addresses.

View 1 Replies View Related

Cisco Switching/Routing :: Router 2900 Fail After Power Outage

Apr 22, 2013

I recently copied a configuration from a router 2800 to a 2900. After a power outage no one can connect outside of the network through the new router. Before the outage all was fine. I put back the old router and all is fine which eliminates any cable or switch error. I have the router totally disconnect. I notice the configuration is in place.  My question is there any diagnostics that I can run to see if there is any hardware failure. It seems to boot up fine.

View 1 Replies View Related

Cisco Firewall :: HP Procurve 5412zl Switch / Multiple VLANs And Gateways?

Feb 9, 2013

We have a HP Procurve 5412zl switch as our default  gateway for all our VLANs from there the traffic will be going to a  Cisco ASA 5515 and then to a Cisco 3800 Router then to our ISP.
 
We have yet to purchase the ASA but my question is  about my future configuration.  I will have the router of last resort on  the 5412zl setup to point to the ASA inside interface, how does that  work with multiple VLANs?  For instance the ASA inside interface would  be 10.0.0.1 but traffic could come from another VLAN via the switch with  a 192.168.1.x address.  Would the ASA just pass it on to the router?   Or would it conside this spoofing and drop the packet?
 
Lastely, if we have WCCP set for the ASA's inside  interface, how would it handle the redirect for multiple VLANs ip addresses? Would I  use GRE for the redirect to my web filter?

View 4 Replies View Related

Cisco Switching/Routing :: Web-sense Security Gateways Connected To 2x 6500 SUP720

Dec 8, 2011

I have 2x v10000 Websense Security Gateways that are connected to 2x 6500 SUP720. When I turn on cluster management function between Websense appliance, they speak to each other only if they are connected in the same 6500. When they are connected one in every 6500 cluster management does not work. They are connected on the same physical vlan. Do I need multicast to be configured in the 6500 switches?

View 5 Replies View Related

Cisco Switching/Routing :: IP SLA Between 2900 (15.0) And 2800 (12.4)?

Apr 11, 2013

I've problem with IP SLA probes between two different routers.2900 (c2900-universalk9_npe-mz.SPA.151-4.M4.bin) here is set "ip sla responder" only and 2800 (c2800nm-advipservicesk9-mz.124-24.T2.bin) here is set two type of tests "udp-jitter" and "icmp-jitter" - temporary, used to check for availability of 2900 router.As a result, I've what udp-jitter doesn't work at the same time icmp-jitter test is OK.Here are the settings of IP SLA tests
 
ip sla 281
icmp-jitter 172.25.28.1 source-ip 192.168.28.6 num-packets 100
tos 128
frequency 120
ip sla schedule 281 life forever start-time after 00:05:45

[code]...

View 3 Replies View Related

Cisco Switching/Routing :: MEM-2900-2Gb For 2921

Nov 20, 2012

I have bought DRAM MEM-2900-2Gb for 2921, and received the following error...
 
Validation failed for DIMM0
*****System halted*****
%SPD info: DIMM0: Invalid DIMM type (only UDIMMs are supported)

View 5 Replies View Related

Cisco Switching/Routing :: AutoQoS On Catalyst 2900 And 3560?

Oct 15, 2012

Cisco C2960S IOS:12.2(55)SE5
Cisco C3560X IOS: 12.2(55)SE3
 
The 3560 switch is serving as an access and distribution layer switch. End devices are connected to it and it also implements IP routing via SVI and L3 ports.Auto qos voice cisco-phone has been implemented on applicable access layer ports. SRND4 is being used.
 
2960:
 
mls qos map policed-dscp  0 10 18 24 46 to 8
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7

[code].....
 
Question 1:Why is the auto qos generated policed-dscp map different on these two switches?The Cisco Smart Business Architecture LAN configuration files guide [URL] does not specifically use the 3560 in their examples, they use the 3750 but it's my assumption that the same techniques, configs apply with regard to my specific feature questions. When using a 3750 in the Access layer, the guide shows (page 15) the same auto qos generated policed-dscp map configuration that is on my 2960. The SBA LAN config guide shows that when using a 3750 as a Distribution layer switch (page 26), the policed-dscp map configuration is the same that I see on my 3560.In the configuration guide for the 3750 distro switch, there is no auto qos applied as there are no access ports, so the mls qos commands are manually input. Since my 3560 does have access ports, auto qos generated the mls qos commands, and the results are the same be it following the guide and manually entering (per distro switch guidelines) or using auto qos. This leads to question 2...
 
Question 2:Why is the mls qos map policed-dscp configuration different depending on use as an access vs. distribution switch?
 
Question 3: On the 3560, access ports that have "auto qos voice cisco-phone" applied are put into queue-set 2 (output). Queue-set 2 (output) uses default values (not configured). Is this correct and desirable? If so, why? The 2960 has all ports in queue-set 1, regardless of being an access device port or a trunk port connected to the 3560 (as per the SBA LAN config guide EgressQOS macro commands). The 3560 trunk ports are all also configured to use queue-set 1 (output), again as per the SBA LAN config guide EgressQOS marco commands.

View 1 Replies View Related

Cisco Switching/Routing :: HSRP On Secondary IP Address - 2900

Feb 21, 2013

I have a few old 2600 routers (2621, different IOS's) which I'm now replacing for new one's from the 2900 series (2901, Version 15.1(4)M4).In my configuration I have two IP addresses in my LAN interface and I have HSRP configured within the secondary IP subnet range. It would be something like this:
 
interface GigabitEthernet0/1
ip address 172.x.x.x x.x.x.x secondary
ip address 10.z.z.z z.z.z.z

[Code].....
 
Now, in the new 2900 routers, my interface configuration hasn't changed however I can see that the hello packets are now sent with the source within the respective HSRP IP subnet so I had to edit my acl for that:
 
permit udp 172.x.x.x x.x.x.x host 224.0.0.2 eq 1985
 
Is there a way I can force the HSRP to work as it previously did in the old IOS's?

View 3 Replies View Related

Cisco Switching/Routing :: 2900 - Restricting Bandwidth From A Particular Vlan

Jan 17, 2012

I have a 2900 router at branch office. This router has a 4 port switch card and two gigabyte ports. The gigabyte port is use for wan connection and the 4 port switch card is use for lan connection. I have two separate networks on my lan side. (network 1 and network 2)
 
I have assigned port 0,1 of the switch card to vlan1 for network 1 Ports 2,3 of the switch card is assigned vlan 20 for network 2
 
My problem is I would like to applied a bandwidth restriction for all data coming out from vlan20 capping same to 384 kb.
 
Note I do not want use QOS because this will only kickin when saturation occurs,

View 8 Replies View Related

Cisco Switching/Routing :: Change The Baud Rate On 2900 SW?

Mar 18, 2013

how to change the Baud Rate on Cisco 2900 SW utilizing ROMON ?

View 8 Replies View Related

Cisco Switching/Routing :: How To Copy Configuration From 2900 Series To Another One

Oct 11, 2012

I know we can use copy & Paste, my questions are:

1.       Before that, do I need to wipe out the existing confi on the brand new switch?

2.       About using TFTP, how does this new switch connects to the TFTP? Does it mean I have to assign a real IP and put it on our network?

View 3 Replies View Related

Cisco Switching/Routing :: Changing E-Delivery PAK From 2900 To 1900

May 15, 2013

we ordered a data e-delivery PAK L-SL-29-DATA-K9= (FOR A 2900 SERIES ROUTER) but after we received the PAK we discovered that the client actually has a 1900 router. Any easiest way of rectifying this mistake so that we can use the PAK on a 1900 series router?

View 1 Replies View Related

Cisco Switching/Routing :: 2900 Duplicate System ID Configured In Ip

Feb 24, 2013

Trying to apply  this config  to a 2900 router and getting this error message. [code] This works ok in in a 2800 router using 12.4(25d) spservices IOS
 
Not working on 2911 using 15.2(3)T2 ipbase image.

View 3 Replies View Related

Cisco Switching/Routing :: 2900 - How To Configure Module NM-16ESW

Apr 1, 2013

How to configure a module NM-16ESW because with the command "show diag" and "show int" can not query it.
 
Note: the default IOS is installed, you will need to upgrade to a specific '.

View 1 Replies View Related

Cisco Switching/Routing :: 6509 - Configure Multiple Dhcp Pools On Switch For Multiple VLANs

Mar 9, 2010

Is it possible to have multiple dhcp pools for multiple VLANs? The switch is a 6509 and/or 4506 catalyst. I don't want to use server-based products.

View 5 Replies View Related

Cisco Switching/Routing :: 2900 - Testing Home Connection Qos VPN Phone?

Jan 18, 2012

I have asked to test an VPN phone for home Users. I have a BT adsl broadband at home which is going into a cisco  2900 switch.  Port One  is connect to the computer port 3 is connected to the Avaya VPN phone this work's. The quality is not very good, so the question is could I have qos on Port 3 which is connected to the phone?

View 4 Replies View Related

Cisco Switching/Routing :: 2900 Will Work As Access Port For More Than Vlans

Mar 27, 2012

I have came across this topic, and I am wondering if this images can be uploaded to any 2900 series switches or not, and if this will work as access port for more than vlans. URL...

View 2 Replies View Related

Cisco Switching/Routing :: License Upgrade In 2900 For Security K9 Feature?

Dec 18, 2012

i have 2921 router with base license . i want to upgrade to it to security k9 feature or want to enable it. i have license file with product activation key. how should i do it. if any body have screen shot file

View 1 Replies View Related

Cisco Switching/Routing :: Catalyst 2900 XL Console Access Disabled

Jun 30, 2012

I just purchased a used Catalyst 2900 XL switch and have not been succesful in connecting to the console via minicom 2.5 running on Ubuntu 12.04 or 11.10, I don’t even get junk charecters in the terminal or echo on input. The switch passes POST according to the LEDs on the front and the network ports are fucntional for switching purpouses.
 
I’m using a Prolific PL2303 USB-Serial adapter, which works with minicom to console into another device.  I’ve tried every baud rate available and tried combonations of hardware flow control, software flow control, and niether.I’ve tested the pinout of the console cable and all pins map correctly according to Cisco spec.I’ve also tried Cutecom, putty, and screen. I have not tried HyperTerminal because I do not use windows.Is it possible that the previous owner disabled console access? Do I need to reboot the switch each time I test a different baud rate?

View 4 Replies View Related

Cisco Switching/Routing :: SOHO RIPv2 Redistribution To OSPF On 2900?

Jul 27, 2012

I am having a problem reaching a soho linksys e1000 router through a second hop cisco 2900 router.Here is a brief topology of the network: I am using OSPF area 100 for all networks except for

192.168.2.0 on R1 to E1000 which is RIPv2
R1 directly connects to R2 with a point-to-point serial on network 192.168.12.0 /30 with ip 192.168.1.13
R1 directly connects to a a switchport using network 192.168.2.0 /24 with ip 192.168.1.75
R3 directly connects to a switchport using network 192.168.1.128.0 /25 with ip 192.168.1.129
R3 directly connects to a different cisco router using ethernet on network 192.168.1.0 with ip 192.168.1.1
E1000 directly connects to a switchport using network 192.168.2.0 /24 with ip 192.168.2.1

The switch has a vlan ip on 192.168.1.128 /25?I can ping from R1 to E1000?I can ping from R3 to R1 192.168.2.75? I can't ping from R3 to E1000 192.168.2.1?show ip route on R2 indicates that network 192.168.2.0 is reachable via the serial connection on 192.168.1.12?I have redistributed rip to ospf area 100 and OSPF to RIP on R1?I am wondering why R1 can reach E1000 on network 192.168.2.0, and why R3 can reach R1s 192.168.2.0 newtork, but R3 can't reach the E1000.There is an R2 router than can reach R1 and also cannot reach E1000, but I assume it's for the same reasons R3 can't, so I've omitted the remainder of that topology for this question.

View 4 Replies View Related

Cisco Switching/Routing :: 2900 XL VLAN Drops / Relearning Addresses?

Dec 16, 2011

Had an odd issue that started up last few days..  Have a port on a cisco 2912 XL that keeps dropping (drops all packets) on a certain VLAN, but still passes others.  Spanning-tree for that vlan says all ports are in forwarding status.  VTP says that VLAN is still active.
 
This network is a little strange...  2924XL -> MotoPTP -> 2912XL -> Moto Canopy Array -> Some sites with cisco, some without all feed through canopy controller switch to single port (fa0/8) on 2912.
 
Getting a few of these on terminal monitoring, %RTD-1-ADDR_FLAP: FastEthernet0/8 relearning 5 addrs per min...  Sometimes this is fa0/8, fa0/10, or fa0/1.
 
I'm thinking the switch has just gone nuts, cause fa0/1 is direct connected to a router used for VLAN1.  fa0/8 is connected to a dumb switch on a canopy CMM as a trunk which i enabled bpdufilter on because of some spanning tree issues on VLAN1.  fa0/10 is connected to canopy PTP back to the 2924 as a trunk. VLAN69s router is off the 2924. So there aren't really any possible alternate packet paths to this switch from another switch.
 
I also setup SPAN and captured all packets from fa0/8 and fa0/10 (seperately) and never seen packet storms of any kind on either VLAN1 or VLAN69.Further testing with debug, nothing on spanning tree, nothing on vtp, but on ethernet-controller addr I got some interesting results showing one mac moving from fa0/1 to fa0/8 and back to fa0/1 but it never moves, its the routers mac that is connected directly to fa0/1.  Same with some macs on the other side of the PTP link saying they are bouncing from fa0/10 to fa0/8 and back to fa0/10 which isn't possible

View 5 Replies View Related

Cisco Switching/Routing :: 3750 Connect To 3com Baseline 2900 Series?

Jun 12, 2012

We need to implement VLANs on my company's network. I have 3750 L3 swtich, ive setup 3 vlans for testing. ive setup SVI everything.now how do I connect it to 3com that will also use VLANs. should I set trunk port of cisco and 3com? or no need?

View 2 Replies View Related

Cisco Switching/Routing :: 2900 All Switches Don't Have Cascade Cable Port In Back Panel

Jun 15, 2012

We have multiple cisco cat 2900 switches. all switches don't have cascade cable port in back panel. i want some sort of solution to manage those switch remotely.

View 9 Replies View Related

Cisco Switching/Routing :: Default Gateway Of VOICE Providers 2600 Router

May 21, 2012

We have two MPLS circuits managed by two different suppliers, one carries VOICE the other DATAWe are to decommision the VOICE MPLS and have increased the bandwith of the DATA MPLS to carry VoIP traffic too. 

At both of our sites A & B ,devices connected to the LAN have a default gateway of the VOICE providers Cisco 2600 router , which then goes into the LAN switching. (see diagram)So what I am trying to achieve is toto simply replace these 2600 routers from the VOICE MPLS provider with our own so we dont have to change the default gateways at both sites. 
Testing
 
Our Cisco 2600 routes are plugged into each LAN switching environment with two subinterfaces configured, one for voip and the other for dataThe problem is from the router and respective subinterfaces we can get to the other sites destination without any issue, but if for example a user is at site A with Ip address 10.16.11.12/16 they cant ping the VOIP subnet at site B 10.3.11.0/24. But If a ping is issue from the Site A test router then the 10.3.11.0/24 subnet is reachable but only on the 10.3.12.0/24 configured subinterface.So i guess what Im saying is 10.16.0.0/16 from the LAN needs to be able to get to 10.3.11.0/24Note at site A 10.16.0.0/16 & 10.3.12.0/24 can communicate no problem and at site B 10.207.0.0/16 & 10.3.11.0/24 can communicate no problem.We are using IP routing, should we be using route-maps? 

View 15 Replies View Related

Cisco Switching/Routing :: 2900 - Nexus 7010 Layer 2 VLan 11 Active But Interface Shutdown

Sep 13, 2012

I understand the vlans on the catalyst side of the house on 2900 to 6500 Catalyst switches.
 
This 7010  running nx-os 5.1(3) I did not setup, but have to manage it.  Hasn't really been a proble till now.
 
My nexus 7010 has a Layer 2 only vlan 11. It is "Active" but the interface is "shutdown".  Yet, it is passing traffic across the directly connected  ports on the nexus 7010 and to other switches in my network.  Vlan 11 is being set out via VTP to all my switches and things are running fine.
 
I need to create another L2 only Vlan.  I can't seem to find any docs  that indicate that a Layer2 vlan Interface on nx-os should be in  "shutdown" mode as part of the setup. I do see in the docs where it has  to be set "Active" as part of the process.
 
Is this the correct way to seutp a L2 only vlan on nex-os? Leave the interface in "shutdown" but make it "Active"?
 
Mystery Vlan 4 and 6
The mystery deepens.  I have other L2 vlans ,Vlan4&6 that are NOT defined as "Interface Vlan4" in the nexus config, yet it is applied to GigE ports on the nexus and these Vlans 4/6is also being sent out VTP to all switches.  Even weirder is that these vlans have names associated with the numbers.  These are valid Vlans that were configured on the old 6509 before the Nexus was installed.
 
I have checked all switches, NONE are running in Server mode for VTP, all are in CLIENT. The nexus 7010 is the only device running in VTP Server mode. 

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved