how to go about config my bureau connected to HQ and separated by a WAN link of 60mb.
This is my plansplit into halves that is 30 mb for LAN connections, internet and file serving for strictly video streaming, bureaus have routers 2800 conected to HQ HQ has a router 3900
Now I have a 172.16.0.0/16 network with a def. gw. for internet where is a MS Forefront TMG 2010 with BSplitter for traffic shaping. I purchased an 2921, 2,5 GB RAM, security+data license and an EHWIC-D-8ESG.
I made 4 subnets in a test environment with some access-lists, nothing fancy yet. How can I use FF TMG for bandwidth management, where should I put it? For those 4 subnets the def. gw. is, normally, the 2921 router. TMG is splitting traffic by client IP.
I would like to connect to a 1Gb routed uplink, and then impose bandwidth limits (via shaping/policing/whatever) on a per port basis. The ports could either be configured to route, or as switchports on separate VLANS. I'm trying to identify hardware that will let me do this. The set up I have in mind is shown below.
I am wondering if the IP Services Adv software on that switch will allow that functionality?
i have a cisco router (3900 series) and a add on module (4 x 1 Gig port module). For some reason i cant seem to port channel them and cant do routing (can set an ip address on those ports). I can do port channel and routing on on-board ports. Do i have to enable any commands to do this ?
View 3 Replies View RelatedI am trying to configure ISP failover using IP SLA tracking in Cisco 3900 router(C3900-SPE100/K9).
I want to configure below commands:
R1(config)# ip sla 1
R1(config)# icmp-echo 2.2.2.2 source-interface FastEthernet0/0
R1(config)# timeout 1000
[Code].....
configure IP sla static route tracking in Cisco 3900 series router.
I would like to configure the policy base routing (PBR) on router (3900) base on the "specific tcp port" (TCP port 16255) to re-direct the traffic to another FE port.
From cisco web portal, CAT 4500 should support PBR as below:"Policies can be based on IP address, port numbers, or protocols. For a simple policy, use any one of these descriptors; for a complicated policy, use all of them." url...
Does 3900 router has the same features on the PBR? if yes, can it support "source tcp port" and/or "destination TCP port"?
Can the 3900 series router be ordered or upgraded to a license with advances enterprise services? I have a few of these routers and I'm looking to get the license upgraded if possible.
View 1 Replies View RelatedI have a question concerning about how many ospf and bgp route entries does 3945E isr g2 router support?
View 6 Replies View RelatedI have Mediacom cable and internet and I was trying to hook both up in the same room.When I connect it directly from the internet cord to my modem it works fine.But when I connect it using a splitter to hook it up to my modem and tv, only the tv works.So, how would I get this to work??
View 1 Replies View RelatedI have a cisco 3900 integrated services router. I am a little new to the cisco IOS. I am having an issue getting my LAN network to communicate with the WAN gateway. From hosts I can ping the interface IP address but not the gateway. I have used the default route command of IP route 0.0.0.0 0.0.0.0 [wan gateway from ISP] I have already set up NAT, DHCP, I just cant seem to get the internet working, the following is my config.
Code...
I know this is not a the preferred way to do it, but this just an interim network configuration until the Remote Site gets re-located and reconfigured. I'm trying to bridge and route traffic and hoping the community can offer a review of the sample configuration and/or some ideas to make this a reality.
Existing network is bridged across site-to-site private line (p-2-p) so 192.168.100.0/24 devices exist at both locations. In order to reduce bandwidth consumption across the p-2-p, the 172.20.100.0/24 devices (end user PCs and new to the environemnt) will be routed out a local Internet connection which in turn reduces the p-2-p traffic to just private network traffic for the two networks. That same network requires routing through the 192.168.100.0/24 network in order to access the private WAN connected to the 3900 router with IP 192.168.100.1.
I have a little weird request at work. One of our offices would like to split the VOIP traffic. At that office we have a 10MB primary and 3MB backup circuit. Currently the phones are routing over the 10MB circuit. The General Manager would like to use the 3MB backup circuit for VOIP traffic. For the 3MB we have two T1 lines bundled together in a multilink. Configuration is bellow if needed
3MB Circuit
In one of our offices in Tokyo, we used to connect to the internet using a PPPoE connection from an ASA5505 and then ran multiple IP SEC tunnels to our remote sites. We have a /28 public range, but I couldn't work out how to utilize the other addresses, as the firewall was assigned a /32 on it's dialer.
To try to use more of the address space, we changed the topology and put a 1921 router at the internet perimeter terminating the PPPoE and then connected the inside of that to the outside of our ASA5505. We split the /28 into two /29 sub nets. the dialer interface of the router has a /32 from one of the /29s and the link between the inside of the router and the outside of the firewall used the other /29.
Since that change, we have had a number of performance problems to devices located behind the firewall (over VPN). If there's no traffic going over it, then response times to the public facing interfaces of the eqpt there are good. The more traffic we push over it the more packet loss we get. The response times are consistent, it's the packet loss that's the problem. There are no errors or drops on the PPPoE interface.The obvious answer to this is that we're pushing more traffic over it than we should, but it's a 100Mb circuit and I'm having severe packet loss if I try to push about 2 or 3 Mbps through it.
We're pretty certain that it's an ISP problem and can't say for sure that the problem started when we changed the topology out there, but anything to do with the way we've split the subnets out like that?
I have 128KB Dsl connection and two Computer i need to splite them equal. i mean 64KB for each computer, it's very annoying when another computer start downloading or something like that then my computer is totally down.
View 4 Replies View RelatedI'm trying to connect a second desktop to my internet connection. My current setup has my primary desktop using a wireless card and getting internet from the wireless router. Then I bridged the connection from my desktop to my xbox. Everything worked perfectly.
However, I recently got a second desktop(running lubuntu if it matters) and I'm trying to get it connected so that I can use Synergy and share a mouse with it. I found an old router laying around the house and was hoping I could use it to share the bridged connection to my xbox with the second desktop. Like this:
I couldn't get that to work though. The second desktop knew it was connected, but it couldn't connect to the internet. It would also throw off my primary desktop and it would try to connect to the old router.
I also tried to set it up like this:
Using an ethernet plug in the wall that normally just went to the TV and trying to split it there. The TV still worked, but the second desktop didn't.
How I can get this all working. I'd like to do it without having to order a wireless card/usb and just use what I have.
I have a pair of ASA5510 currently running as a failover pair. For some reason we need to move one of the firewall to another site, is there any best practice on splitting up the failover pair then I can re-configure the secondary unit offline?
I'm thinking to power down the secondary unit, unplug it from the network totally then erase the configuration on the secondary unit on console so I can re-configure it. For the primary unit, I will disable the faiolver config by "no failover" on the primary unit. Is that necessarily all thing for splitting up the failover cluster?
Hardware: ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB(code)
I have cable internet with 12 Mbit download and 1.25 Mbit upload speed. I'm using Thomson TGW850-4 router and I'm sharing the connection with my brother. Each of us have our own PC, of course.
Problem is, my brother downloads torrents while I play online games which completely screws up with my ping (from 40-80 to 350+) which makes them pretty much unplayable.
Is there a way to split the connection in two so that each of us gets 6 Mbit download and 0.625 Mbit upload at all times so that his torrents don't interfere with my online games?
Trying to split a supplied fixed IP address to multiple wireless devices so that I can piggy back on the internet connection in my office. Cause the IT dept refuse to provide a router.I plank to use a router for the job above.
View 4 Replies View RelatedI have a desktop with a "black screen", but the computer is running. I need to get files/documents off that computer. How can I get them without being able to see the monitor? I have a netbook, a portable hard drive, and regular ethernet cables, but not a cross over cable.
View 1 Replies View RelatedI was wondering if the EA3500 would support splitting the USB (buying a USB tree) to allow for both a printer and hard drive to connect at the same time?
View 1 Replies View RelatedI have some simple rules on 2 extended lists:ip access-list extended FWINpermit tcp any host 192.36.86.231 eq ftp-data ftp 22 www 443 516 666 671 672 2222permit tcp any host 192.36.86.231 eq 4500 8008 8443permit tcp any host 192.36.86.231 range 5900 5950permit tcp any host 192.36.86.231 range 33434 33550permit tcp any host 192.36.86.241 eq ftp-data ftp 22 www 1935 2195 3306 8888permit tcp any host 192.36.86.241 range 8080 8090permit tcp any host 192.36.86.241 range 33434 33550ip access-list extended FWOUTpermit tcp host 192.36.86.231 any eq ftp-data ftp 22 www 443 516 666 671 672 2222permit tcp host 192.36.86.231 any eq 4500 8008 8443permit tcp host 192.36.86.231 any range 5900 5950,The issue is that 192.36.86.231 can access internet, and 192.36.86.241 can not.Is there a way to troubleshoot 192.36.86.241's connection/packets flow?
View 1 Replies View RelatedWat will be the default memory and hard disk for SM-SRE-710-K9 and wat will be the maximum support for this module.
View 1 Replies View Relatedprovide my some (official) info regarding the MBTF for the C2900 and C3900 routers (2911 and 3945)? This info is currently not part of the data sheets.
View 0 Replies View RelatedOn my 3900 Router my port seen to be shutting themselves off, they are connected antenna.
View 2 Replies View RelatedThe datasheets indicate that the 39xx series ISR G2 routers support AES, but they don't indicate if they handle both AES128 and AES256 in hardware. Via our account manager, we've heard that they only support AES128 in hardware, but not AES256. Given there's no equivalent of an AIM-VPN/SSL-3 module for a 39xx router, this could be a problem for a deployment we're looking at doing.
I can find no document anywhere on cisco.com that confirms that AES256 specifically is supported IN HARDWARE on, say, a 3945E router.
And, if it is supported, are there any performance numbers available for throughput? We're trying to find out if a 3945E is appropriate, or if we need to go with a 7206VXR w/NPE-G2 and VAM2+ module.
I just replaced 2800 router this did not have a VPN hardware accelerator with a 3925 that does have a VPN accelerator built in. I copied the same VPN (ISPEC/ISAKMP) config from the 2800 to the 3925 and it works. Is there something special I have to do to enable the hardware acceleration or is it automatically used for every VPN session?
View 1 Replies View RelatedI am setting up a DMVPN between several dozen sites using 2800, 2900 and 3900 series ISRs. The DMVPN Design Guide recommends current 12.4 or 12.4T IOS, but the DG was last updated in July 2008. I cannot seem to find any recommendations newer than this. I'm hoping Cisco or the community can give me an updated recommendation.
View 5 Replies View RelatedI run streaming multicast video cameras on my network. I stumbled upon the command ip multicast rate-limit. When I configured a test setup in my lab (multicast camera source and a few routers) and tried the command it simply did not work. Moreover, when I went to use the command on a 3900 router in my lab, it was not there.
I take it this command has been deprecated?
I've been trying to find the right information on Cisco's site, and I'm not having success.
We have a 3900 router that we would like to do authentication via a local userdatabase. We want ssh access and console access using a local user on the router. I've been working on the console piece and everytime I try it, I get prompted for a username, but it is not accepted.
i have a gateway router going to the internet....using public IP addresses on both interfaces. starting on Monday, traffic would suddenly stop flowing from the inside of the network going out, though i can still ping the outside interface , but when I log in to the router I am able to ping to the internet. so its like traffic is not passing from the outside int to the inside int. I have a 3900 router. other thing is, when i restart the router it will work for some time and then just stop again....
View 6 Replies View Relatedwe've had an issue with our network, we have 2 6509 connected with redundancy, which are connected with 2 x 4900 Switches, from which are connected to a ESX Chassis for visualization, the thing is that the ESX stopped working, and the 4900 switches, and the main core were suffering from overload, they hang on it very well, in order to stop the overload, one of the links to the ESX Chassis were disconnected from one of the 4900 switches. The CPU usage from the 4900 and the core(6509) went down below 40%, and then they started to migrate the virtual servers from the chassis to another 2 chassis that were added right after. They were actually working well, but suddenly the 6509 changed to the other supervisor after everything was OK. We were wondering what could have been the cause of this, maybe the virtual servers migrations, maybe the overload from the ESX ? We also had a few question, is there any need to reload the cores every few months as a planned task ? Because the cores have been up for more than 1 year. And also is there any kind of of tool to monitor the CPU status, or the status overall from the cores or the switches ?
View 3 Replies View RelatedAny actual limit on the number of IPSEC SAs that can be negotiated on the crypto module of a 3900 series G2 router? When I issue the command on a 2900 G2,This implies the 2900 series can handle 1800 IPSEC tunnels with an SA used for each direction. All of the documentation and support requests have stated that the crypto module is better than the AIM module in the older series routers but I have been unable to get a concrete answer to the limit.
View 21 Replies View RelatedHow many ipsec tunnels are supported in Cisco 3900 routers(with & without the hardware processors)?How much is the throughput of the 3900 routers?
View 1 Replies View Related