Can the 3900 series router be ordered or upgraded to a license with advances enterprise services? I have a few of these routers and I'm looking to get the license upgraded if possible.
View 1 RepliesAm trying to do a dynamic configuration of a 3900 series router (3925 to be precise).For the software and licenses, under the IOS technology Package Licenses, what's the significant of SL-39-DATA-K9 and SL-39-SECNPE-K9? Are they really necessary for the router?
View 3 Replies View RelatedI am looking for the procedure of the router 3900 series failover. I have got two 3900 series router with the same ISO and other interface cards. What are the main things that I should watch ? Does the standby router takes the same ip of active router if the active router fails ? How should I configure it.
View 1 Replies View RelatedIs there a router (1900-3900 series router) that will support a 100FX fiber connection. We use to use 2800-3800 and 2600-3700 series routers with FX fiber interface now these routers are no longer available and our need for 100Mbps FX is still a requirement.
View 3 Replies View RelatedI would like to configure the policy base routing (PBR) on router (3900) base on the "specific tcp port" (TCP port 16255) to re-direct the traffic to another FE port.
From cisco web portal, CAT 4500 should support PBR as below:"Policies can be based on IP address, port numbers, or protocols. For a simple policy, use any one of these descriptors; for a complicated policy, use all of them." url...
Does 3900 router has the same features on the PBR? if yes, can it support "source tcp port" and/or "destination TCP port"?
I have some simple rules on 2 extended lists:ip access-list extended FWINpermit tcp any host 192.36.86.231 eq ftp-data ftp 22 www 443 516 666 671 672 2222permit tcp any host 192.36.86.231 eq 4500 8008 8443permit tcp any host 192.36.86.231 range 5900 5950permit tcp any host 192.36.86.231 range 33434 33550permit tcp any host 192.36.86.241 eq ftp-data ftp 22 www 1935 2195 3306 8888permit tcp any host 192.36.86.241 range 8080 8090permit tcp any host 192.36.86.241 range 33434 33550ip access-list extended FWOUTpermit tcp host 192.36.86.231 any eq ftp-data ftp 22 www 443 516 666 671 672 2222permit tcp host 192.36.86.231 any eq 4500 8008 8443permit tcp host 192.36.86.231 any range 5900 5950,The issue is that 192.36.86.231 can access internet, and 192.36.86.241 can not.Is there a way to troubleshoot 192.36.86.241's connection/packets flow?
View 1 Replies View RelatedWe have the ASA firewalls in our environment - two 5510's and one 5520.Our 5510's are currently used in our production environment and the 5520 is our firewall for pre-production and support personnel. My question is about the AnyConnect VPN licenses we have. Currently we have 100 seats for AnyConnect on our production ASA's, but we'd like to see if we can move half of these to the 5520 ASA?
View 1 Replies View RelatedI am setting up a DMVPN between several dozen sites using 2800, 2900 and 3900 series ISRs. The DMVPN Design Guide recommends current 12.4 or 12.4T IOS, but the DG was last updated in July 2008. I cannot seem to find any recommendations newer than this. I'm hoping Cisco or the community can give me an updated recommendation.
View 5 Replies View RelatedWe are migrating from a Microwave T1 WAN to a Fiber ring WAN which I'll be connecting to our providers Ciena Metro E switches. Eventually we are going to move away from the routers, but the network is a little too complex as well as spanned across a lot of miles. Since I am the only networking personnel here, I would like to first simply migrate to the fiber by simply moving the connection configs off of the T1 interfaces, and onto one of the Gig interfaces on the 7206 and on one of the Fe interfaces on the 3900 (which is actually a 3700 series because the line card on the 3900 is toast). If this works, I will need to purchase Fe line cards for the 7206, because I found out that the virtual interfaces do not support Policy Mapping for our QOS and Multicasting.
View 6 Replies View Relatedi have a cisco router (3900 series) and a add on module (4 x 1 Gig port module). For some reason i cant seem to port channel them and cant do routing (can set an ip address on those ports). I can do port channel and routing on on-board ports. Do i have to enable any commands to do this ?
View 3 Replies View RelatedI am trying to configure ISP failover using IP SLA tracking in Cisco 3900 router(C3900-SPE100/K9).
I want to configure below commands:
R1(config)# ip sla 1
R1(config)# icmp-echo 2.2.2.2 source-interface FastEthernet0/0
R1(config)# timeout 1000
[Code].....
configure IP sla static route tracking in Cisco 3900 series router.
We have just purchased and installed the L3 daughter card for our 5548UPs and have also installed the L3 Enterprise Services pkg. The problem is, I cannot enable the EIGRP feature even though we have the Ent Svc lic. After doing a little more research, I see that the Lan Base lic is required to enable the L3 card and many of the L3 features (the card is currently in an "offline" state).
From what I have read on this board, the Lan Base lic is a free license that should be included with the L3 daughter card -- however, Cisco licensing will not issue me that license without a sales order (even though a Nexus engineer said it was included, the licensing group will not issue with an official sales order). Well, our vendor ordered the card and the Ent Svcs lic but for some reason we were never sent a PAK for the LAN Base lic.
how to go about config my bureau connected to HQ and separated by a WAN link of 60mb.
This is my plansplit into halves that is 30 mb for LAN connections, internet and file serving for strictly video streaming, bureaus have routers 2800 conected to HQ HQ has a router 3900
I currently have a 3560G switch running c3560-ipservicesk9-mz.122-58.SE2 I have a spare 3560 V2 switch I want to configure and have ready in case of a failure. This spare switch is running c3560-ipbasek9-mz.122-55.SE5 My plan was to pull the IOS image from the current switch and upload it to the spare that way I have an "idnetical" switch. From what I have read, there are some feature differences between "ipbase" and "ipservices". However, when I run the show license command on the production switch, I get an unrecongnized command error. So that throws into my confusion as if its running an ipservices image, shouldn't it have a license file?
View 4 Replies View RelatedWe have two 3750-x stacked switches with IP base license. We need to upgrade them to IP services license. I read some where that it is possible to install IP serivces license to only management switch and no need to purchase/install same license to other switches on the stack. But, I could not find/recall where I read it and as far as I know it was not official cisco documentation.
View 1 Replies View RelatedI upgraded an image on 3750 from Lan base to IP base, it worked fine. howver im just wondering if there any licensing implications, did the upgrade a few weeks ago, would the switches still work on a temp license somehow?
View 2 Replies View RelatedWe have ordered a new 4507 chasis with a supervisor engine.We have also ordered a spare supervisor engine.As per Cisco documentation WS-X45-SUP7L-E is shipped with a default IP base license.My question is that is this a e-delivery or a paper base license.The Cisco documentation also states that we can use the same license to upgrade both the redundant and active supervisor from lan base to IP base.
View 2 Replies View RelatedI have a question concerning about how many ospf and bgp route entries does 3945E isr g2 router support?
View 6 Replies View RelatedI will be start with the disclaimer that I am very technical, but a huge novice to the enterprise-grade Cisco swtiches.
How IOS software versions are licensed on a Catalyst 4507 switch? I am very confused at this point.
For example, if I buy IOS Enterprise Services for a new Catalyst 4507 switch, what form does the software license take? Is the license embedded on the switch? Does it come as an e-mail or certificate with a PAK? Does it come on a CD?
We sold a 4507 with Enterprise Services to a client, and they are saying they don't have the right IOS version installed. I assumed there must be some license key they needed, but the Cisco licensing help desk does not seem to indicate there are any licenesable items on our sales order number (even though IOS Enterprise Services is a line item on the sales order).
I know there was a disk that came with the switch with an Enterprise Services .BIN file on it, but I had assumed that was just a software version image, similar to the images I can download off the Cisco website. But is this actually the license key?
Since I can download image files off the Cisco website, I assumed there must be some other key needed to activate the license.
Switch is Catalyst WS-C4507R+E
Redundant Supervisors are WS-X45-SUP6-E (Supervisor 6-E)
about to install first UC320w and wanted some sample 800 series router configurations showing required port fowarding, ACL entries and QoS examples.
View 5 Replies View RelatedI have a Cisco 800 series router that I need to set NAT up on. There will be four computers connecting to the internet through it. I already have the IP address coming from my cable modem I just do not know the command to get it to translate to my internal dhcp pool I have setup.
View 1 Replies View RelatedI have Router 2800 series Global nating is configured on it.
ip nat inside source list 111 interface Dialer1 overload
!
access-list 111 deny ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 111 permit ip 192.168.1.0 0.0.0.255 any
My object is that i want give internet access only for few users ip E.g IPs addresses from range 192.168.1.0-10 can acess intenet access other all are deny.How i do this with ACL .
I would like to setup RDP on my cisco router so I can access my server from outside my network. I also have a router from my ISP that has DHCP for my external IP address and DHCP for my internal as well.
View 3 Replies View RelatedI have a Cisco 800 series router that I need to set NAT up on. There will be four computers connecting to the internet through it. I already have the IP address coming from my cable modem I just do not know the command to get it to translate to my internal dhcp pool I have setup. I have also been doing some research, seeing as I only have one public IP address coming from my ISP will I have to use PAT as well?
View 1 Replies View RelatedI have a Cisco 881 router running 15.1(4)M4. I am trying to configure SPAN on it to mirror my outside interface (source) to one of my LAN interfaces (dest).
!--- WAN interface
interface FastEthernet4
description Comcast WAN$ETH-WAN$
[Code]......
As you can see from the above output there is a problem with the command on this interface. When I try to set Fa0 as my source it works fine:
rtr(config)#mon session 1 source int fastEthernet 0
rtr(config)#
Is this because fa4 is layer 3 and fa0 is a switchport? If so, is there another way to set fa4 as the source?
I have a 2600 Router series and I cannot remember the Password. I have tried following web pages that state to use control Break on the boot up but its not working.can reset that pw and write erase my configuration file?Here is my boot up. I have tried hitting control break at the very beginning over and over and then again when at the cold boot it has not worked....
System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)Copyright (c) 2002 by cisco Systems, Inc.C2600 platform with 131072 Kbytes of main memory
program load complete, entry point: 0x80008000, size: 0x1c9468cSelf decompressing the image : ######################################################################################################################################################################################################################################################################################################################################################################################################################################################################## [OK]
Smart Init is enabledsmart init is sizing iomem ID MEMORY_REQ TYPE00036A 0X000B3B80 C2610XM Single Fast Ethernet 0X00098670
[code]....
I m having 2500 series router. when i boot router automatically get into router(boot)> . how to solve?
View 6 Replies View RelatedI just setup my homelab today, after having Cat5e installed so I can run my servers and network equiptment over wired network as well as setting up a wireless system. I got everything setup and its going great I can access everything from my office now including a E4200 Linksys router that I setup to do RiP (was only choice pretty much, or NAT), and my 891 Cisco Router which is my internet connection.
I use to have the linksys setup to do port forwarding but now I need to figure out how to do it on the cisco 891 router via command line.
Below is my current configuration. I need to be able to access my server which is behind my router by Remote Desktop. I also have a web server, and the kids also play minecraft, and have a server setup so I need to be able to forward their port as well.
[URL]
Ths is from the link above, would I just do like that but then put in my IPs and is that my Private IP I use this or my public facing. Also he has "interface Dialer1 6881" again after the port in the second and third row. I dont really understand what they have there. I understand basic access list and such though I am extremely rusty.
!
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 10.0.0.2 6881 interface Dialer1 6881
[Code].....
I am trying to add WCCP to be configured for websense. My first option seems to be either purchase an IPServices license for the stack of 3750E switches, but i am thinking this will require us to license all three switches in the stack. The second option i am looking at is to do the WCCP configuration on the 2800 router we have on the edge. The problem is both Gig ports are in use, one going to the firewall and the second going to the ISP. My first question would be, which option is better in terms of manging as well as cost of implementing it.The second question is, if WCCP on the router is a better option, what is the add on module i should be looking to get to add the additional ports to hook up the Websense cache.
View 8 Replies View RelatedI've got a problem with DHCP running on a cisco 1900 series router, 1921 to be precise. The Data VLAN works perfectly, i configured a ip helper address and its working. Problem tough is VLAN 20. This is the voice vlan. As u can see in the config below, this has been configured using VRRP and VRF for failover purposes. I did more of these configurations, and they all worked fine, just not with this particular router!
As u will notice i deleted all the not needed to know information or i X'ed it!
Jan-Aart
version 15.1
service timestamps debug datetime msec
[Code]......
how do i recover username and password for 870 series router
View 5 Replies View RelatedI was able to setup my router c819 with Verizon 3G but there is one minor thing that on the console it keeps saying:
Aug 7 21:04:30.067: %LINK-5-CHANGED: Interface Cellular0, changed state to reset
Aug 7 21:04:35.111: %LINK-3-UPDOWN: Interface Cellular0, changed state to down
Aug 7 21:06:18.423: %LINK-3-UPDOWN: Interface Cellular0, changed state to up
The interface Cellluar0 is connected to Verizon 3G network and I'm able to ping and get to the internet just fine. I did few research and some people said it was access list. My ACL is below but I can't find anything wrong with it.
!
!
interface Cellular0
ip address negotiated
[Code].....
I have a Cisco 887M router which I wish to restrict the devices allowed to be connected/allocated an IP address to two, and *only* two.
I can't, for the life of me, find out how to allow these two devices to connect to ANY port - I can configure a MAC restriction on a single port, but I don't know how to make it so that I can allow JUST these two devices to connect to any port in the 4 port switch/VLAN (VLAN 1 is used because the mongrel who set this up was lazy). I know the MAC addresses I want to allow
How I can do this? I *can* restrict any given port to the two MAC addresses - but if I try to add the MAC addresses to another port, they get removed from the initial one. I need to be able to have them connect to ANY port and work, but allow NOTHING else to work.
For those wondering, this is to counter a user who is utilising company resources for purposes not approved - and costing us quite a bit of money in the process.