Cisco Switching/Routing :: 861 As Main Gateway To Ethernet From ISPs Modem?

Oct 8, 2012

I am moving a very small branch office to a new location, but we have a centrally controlled IT infrastructure team in Europe. I would like to implement a hosted VOIP solution without impacting the current network setup (i.e., VPN/Firewall) or asking this IT team to change anything on the existing LAN Network except the IP address/gateway. The VOIP system will have its own cabling.
Here is the configuration I would like:
•          Cisco 861 as main gateway to the Ethernet from the ISP’s modem
•          2 static public IPs from the ISP, one for the VOIP network and one for the LAN
•          Cisco 861 acting as NAT/DHCP for the VOIP system on one static public IP
•          My company’s Juniper device on the second static public IP managing NAT for the LAN
I have a diagram here to map out what I am considering:
Two options I have seen:
•          Setup Proxy ARP on the Cisco router, allowing the Juniper device a transparent (and unsecured/firewalled) route to the internet to get the Public IP and manage the LAN (seen in picture)

• Install an additional switch (with proper QOS prioritizing VOIP) at main entry point of location, and have both routers behind this (to minimize configuration of the Cisco router).

View 3 Replies


Cisco Switching/Routing :: ISR 881-SEC-K9 Vs 891-K9 And 2 ISPs Redundancy

Nov 1, 2012

have main office of 70 people.Also I have 2 redundant ISP:One give me 20 mbit/s Other only 2 mbit/s and it is my backup ISP.
I have some resources in data center and I need a IPSec VPN to it and some other location. I suppose there will be up to 3-5 IPSec tunnels. I choose Cisco ISR 881-SEC-K9 with one wan port and 4 LAN switch. But know I’m looking for Cisco 891-K9. There is no security bundle for it. But in this router is marked Cisco 891-K9 Security router. Does it support security features like VPNs, ZBF, IOS Firewall, NBAR and IP SLA for ISP redundancy? Also if my boss will choose chipper Cisco router 881-SEC-K9. Will I be able to organize 2 ISP redundancy on 4 LAN switch port inside VLAN interfaces because there is only one WAN port?

View 2 Replies View Related

Cisco Switching/Routing :: 7000 / 3750 Stack - HSRP Between ISPs Router And L3 Switch

Dec 27, 2012

We have our WAN setup as explained in the attachment herewith. As of now, We have a IP 1 configured as HSRP IP in the LAN switch end at Site A and Site B. As per the HSRP priority, Site A's WAN router will preempt to be the Active WAN router. 1*1Gig link at both DCs connect to the respectve WAN router.
But with this setup, we experience a WAN outage whenever there is a link disconect at Site A - as HSRP fails over from Active to Standby(Site B) and again when the link at Site gets restored. To avoid this :
Is it possible to have the HSRP configured over a port channel at Site A and B (or atleast at Site A) ? In that case, will there be a need for the ISP to change their configuration except to configure a port channel ? The ISP has Cisco 7000 series router which connects to 3750 stack at DC lan.

View 2 Replies View Related

Cisco Switching/Routing :: 3560E Connecting A Fiber Between Remote And Main Site

Apr 15, 2012

We have a Site that is connected via Wireless Bridge to the Main Site, the site is on separate VLAN with Cisco 3560 switch. The main site has 6509 swith. Configuration as per attached diagram. We are connecting a fiber between the remote and the main site and adding a 3560E switch at the remote site, however we would like to keep the wireless connection as a backup in case the fiber is severed the wireless will be availble. Attached diagram shows detailed cofiguration. I would like to know what should I change to make this working. STP is enabled on all switches.

View 3 Replies View Related

Cisco Switching/Routing :: 7604 WS-X6724-SFP - Can Apply Service Policy To Dot1q Main Port

Jul 9, 2012

Example config

int g2/24
service-policy output test
int g2/24.10
encap dot1q 10
ip address
service-policy output test

View 5 Replies View Related

Cisco Switching/Routing :: 6500 Ethernet Sub-interfaces Over Metro Ethernet

Feb 20, 2012

I curently have 2 Data centers connected with a Metro Ethernet Connection.  Each Data Center has 6500 with Sup720s.  The Metro Ethernet connection is currently conected by a L3 routed interface. I now need to enable VRFs between the locations and want to determine the best way to adjust the Mero.  I was considering adjusting the routed interface to use Ethernet sub-interfaces.  Each VRF would be given a different subinterface over the Metro Ethernet connection.  I have done this on internal LAN connections but am concerned about exteding across data centers over Metro E. 

View 1 Replies View Related

Netgear Wireless ADSL Firewall Modem Router DG834 / Connection Loss - Routers Or ISPs Fault

Apr 14, 2012

Lately I encountered random Internet connection issues?My router is a Netgear Wireless ADSL Firewall Modem Router DG834 (Firmware V1.05.0) and my ISP, isn't the most reliable regarding bandwidth... All clients (max 3 at the same time) connect wireless.The problem is that the last few weeks my connections is very unstable, all clients lose the internet connection until you restart the router manually.I can't even connect to the webinterface (, during the downtimes.

View 4 Replies View Related

Cisco Switching/Routing :: 3560E - HSRP Gateway Failover And Routing Table

Nov 12, 2012

We have two Cisco 3560E layer 3 switches at the core of our network. The switches are configured as an HSRP pair and the clients on our network point to the HSRP address as their default gateway. So if CORE-A dies, then CORE-B will pick up the address and the default route for the clients will continue to be available.We also need to specify a few static routes on the core switch to allow us to get to specific networks. Is there a way to do this so that the routes failover in the same way that the default gateway does?

View 2 Replies View Related

Cisco Switching/Routing :: Policy Routing Based On Client Gateway (6509-E)

Feb 26, 2012

If client gateway = then next-hop = else use default-route
I know it's possible to do a route-map match ip-address ACL list. But is it possible to match on gateway?
Some info about hardware and config:

6509-E in VSS (IOS 12.2(17r)SX5) withVS-S720-10G supervisor.

All routes are static, IP for is on SVI vlan.

View 3 Replies View Related

Cisco Switching/Routing :: 6509 MSFC - LAN Default Gateway Routing

Mar 6, 2012

I have two ISPs. Each is on it's own subnet connected to the 6509 MSFC/Switch. FW1 is on and FW2 is on subnet. My goal is route all traffice going to the Internet from subnet to FW1 and all other subnets across the organization to FW2. I am not sure if I need to use ACL / Static route combo, or just a static routes or ACLS?

View 5 Replies View Related

Cisco Switching/Routing :: Cannot Reach Gateway Through Routing Switch (3750)

Mar 11, 2012

I'm running into what seems a basic ip routing config problem with a Catalyst 3750 (IP Base) switch. I have several VLANS configured on the switch with IP routing enabled, and the switch is connected to the inside interace of a new ASA 5520 as follows:
ASA5520 IP (Default gateway): Gi1/0/1 is configured as a routed port, IP address VLAN is VLAN 100, IP address From the switch CLI, I can ping all VLAN addresses, as well as the ASA5520, and the client laptop I'm testing with from VLAN 100.
From the client laptop on VLAN 100, I can ping all switch interface and VLAN addresses (inter-VLAN routing is working), including, but I CANNOT ping the default gateway at
Here is the relevant configuration information on the 3750:
no aaa new-model
switch 1 provision ws-c3750x-24
system mtu routing 1500


View 4 Replies View Related

Cisco Switching/Routing :: Catalyst 3560 - Routing Enabled With / Without Default Gateway Or IP Route Command

Feb 25, 2013

We have two catalyst 3560 switches running  c3560-ipbasek9-mz.122-58.SE2.bin  They are connected using etherchannel using gi 0/21 -  24 interfaces.
on 3560-1 switch, there isn't any ip-default gateway or ip route configured. It only have 1 interface vlan configured.
on 3560-2 switch, there is ip default gateway configured along with 1 interface vlan.
What i dont understand here is that, i can reach out to other subnets from 3560-1 switch in which the routing is not enabled?

View 4 Replies View Related

Cisco Routers :: RV220W Gateway-to-Gateway Inter VLAN Routing?

Jul 6, 2012

I picked up a pair of RV220W's and before I spent loads of time at a remote site, I figured I'd go through some VPN testing at home to make sure I could get it setup properly.  What this means is I've plugged the Internet uplink into a switch, then from the switch into both routers & configured them (using unique static IP's for each) from there.  For what its worth: While I have some IT experience, I don't have strong networking experience.
I setup several VLAN's on the local RV220W, and the end result is to make it so that an asset at the remote site with an IP in any of the ranges (,, and any future VLANs) can communicate with/access resouces at the local site.  Likewise, an asset at the local site with an IP in any of the ranges (.121, .131, .141 + any future VLANs) should be able to reach the remote resources (currently just, but future VLANs as well).
This evening I tried to focus on the relevant VPN pages of the Administration Guide to get the VPN up.  Leaving the defaults I got as far as establishing a link between both sites and it seems that things are working right: From the remote site (.181) I can access the local site (.121, .131, .141); and from the local site I can at least ping resources (a laptop) on the remote site. (Yay!)
However, when I physically connected an asset that had a 192.168.121.X, 192.168.131.X and 192.168.141.X IP addresses to the remote RV220W (which is, I couldn't see it from the remote or local sites.I assume this is expected.  But I'm reaching out to the community to see what other possibilities might be available becuase networking is a weak area for me.  I figured it might be something like a Static [or Dynamic] Route but I really am not 100% sure.
 Local Router LAN/WAN Settings:
LAN IP: on default VLAN (1)
VLAN 13 defined with DHCP enabled; Reservations created outside of DHCP scope
VLAN 14 defined with DHCP enabled, Reservations created outside of DHCP scope
Inter VLAN Routing enabled for all VLANs


View 7 Replies View Related

Cisco Switching/Routing :: Default Gateway And VLAN200

Oct 18, 2012

imagine I want to make VLAN200 workstations communicate like the show in the attachment. What would be the default gateway to be configured in the workstation? If I configure as the default gateway (R1 interface fa0/0) is this right?That could be possible because the switch should be configured with command "ip default-gateway"?

View 4 Replies View Related

Cisco Firewall :: ASA 5510 Nat / Routing DMZ With Dual ISPs (4 Legged)?

Apr 11, 2013

I am in the process of configuring a ASA 5510 to replace an older PIX.  This change is part of migrating to a new ISP, so the process is complicated by the existence of two outside interfaces.  I have virtually everything working, but there is a requirement to be able to access hosts from the internal networks using both their private IPs and their public IPs.  The older PIX took care of this silently with little configuration, but the ASA has me twisted on the details.  Some of the hosts with public IPs are on the internal network and some are on a DMZ (not my design, inherited).  For the internal ones I implemented hairpinning to take care of the requirement, but I am having trouble with the DMZ based hosts.. Since there are two external interfaces each internal host has two IPs and two static NAT rules to handle incoming traffic from each external interface.
The routins and dynamic NAT entries we have in place take care of accessing the hosts using their private IPs on the DMZ, but I cannot figure out how to get the public IPs to work from the internal network.  It seems like a simple Static D-Nat shoudl do it, but when I add a Static D-Nat on the DMZ the public IP works, but the private IP breaks..  Is there a way to get them both to operate ?
Network layout looks like this (IP ranges altered):

DMZ Class C
Outside  Class C
Outside2  Class C


After applying it I could access the public IP ( from the internal network, but I could no longer access the DMZ IP ( from the internal network. Is there any way to get this configuration to allow access to both IPs from the internal network ?
The problem here is that there are website links based on the public IP and the DNS is split so DNS returns the internal IP to users. As a result both need to be accessible from the internal network.. Not my favorite design, but the client (or in this case the boss) is always right so I need to get it working somehow.

View 8 Replies View Related

Cisco Switching/Routing :: Set Management IP Address And Gateway On A 4500?

Apr 24, 2012

In mucking around with my 4500 I accidently deleted the ip address that I use to get into it with telnet and CNA. I have a console cable hooked up to and I'm in that way but the commands I got off the internet did not work. Those commands were set interface sc0 10.x.x.x/xx and set interface me1 10.x.x.x/xx. It didn't like interface and I notices when I did a set ?

View 6 Replies View Related

Cisco Switching/Routing :: 3750 - Can't Ping The Default Gateway

May 3, 2012

This would probably sound like a stupid question but it took at least 2 hours of my time so far. I have a 3750 switch where a router and a server is connected. From the switch I can ping the router and server with no issue (directely connected). But from the server I am not able to ping the router. The router and the server are in the same subnet. The router is configured as the default router for the server. I am not able to ping the server from the router either. Here's the output of the ip route from the router. The server IP address is and the router IP address is is variably subnetted, 8 subnets, 3 masks
C is directly connected, FastEthernet0/0.30
C is directly connected, FastEthernet0/0.20


View 14 Replies View Related

Cisco Switching/Routing :: 2960 Default Gateway Ip Route

Jan 24, 2013

I have a Cisco 2960 ( WS-C2960-8TC-S)  running 12.2(46)SE  C2960-LANLITEK9-M  image.I would like to set an ip route  but the current image does not allow.Will ip default-gateway work or do I need ip routing ?The ISP has provided a /30 address and we are using an additional /29 for our network devices.  I dont think this image can be upgraded.  I need to forward routes directly out to ISP. [code]

View 5 Replies View Related

Cisco Switching/Routing :: 3750 - Default Gateway And IP Redirects?

Apr 10, 2013

I have a bit of a mystery on my hands. I had a whole campus of Cisco 3750's cache a new default gateway. Example
Cisco3750#sh ip redirects Default gateway is
 Host               Gateway           Last Use    Total Uses  Interface172.16.0.5        0:00        185749  Vlan1172.16.0.76        0:01         47254  Vlan1192.168.0.154        0:00        183090  Vlan1
My question is what generates a IP Redirect packet or how does the switch know what to change the gateway to? As in my case the changed gateway was a dead IP address. So I am at lose how this happened. I this case the Host IP's are network management servers conducting polling.

View 3 Replies View Related

Cisco Switching/Routing :: 1800 - How To Use Gateway On Separate Network

Sep 30, 2012

I've just started out playing with a Cisco 1800 router to gain some knowledge of Cisco devices before taking a CCNA. I also have a 2950 switch but will start with the router.
I'm using an Android phone as a wireless Internet access point.  This issues IP addresses by DHCP in the 192.168.43.x range with subnet.
Also I have a Linksys WRT54G router running DD-WRT firmware acting as a wireless bridge to the Android phone, and it has 4 LAN ports.
This bridge is up and running and I have successfully connected my laptop to the Linksys for testing and can use the Internet provided by the phone.
Connected to the Linksys is a Cisco 1800 router. Connected to the router is my Citrix XenServer PC and a NAS box.
The XenServer and NAS are on another network 07.05.19.x range with subnet using their own static IPs. One of the virtual clients on the XenServer will be a DHCP server to service other virtual clients.  All still in the 07.05.19.x range.
Basically I want the devices on the 07.05.19.x IP range to be able to use the Internet gateway at to access the Internet.
How would I set up my 1800 to achieve this?
Also, am I right in understanding that the 1800 will ignore DHCP leases from the Android phone due to it being a Layer 3 device.

View 4 Replies View Related

Cisco Switching/Routing :: WS-C2960G-8TC-L / Can Ping Gateway But Not The Switch In Between

Jul 4, 2011

Default Gateway of ISP----> Switch------->Router
From my router, I can ping Gateway, however I cant  ping the switch (WS-C2960G-8TC-L) in between.

View 2 Replies View Related

Cisco Switching/Routing :: Management IP On 4500X When VLAN Gateway Is A SVI?

Dec 5, 2012

I'm trying to figure out how to (or if I can) setup the management interfaces (fa1) on a couple of new 4500X switches. My issue is that the 4500X's themselves are the gateway for my management VLAN (.1 HSRP virtual, .2 and .3 SVIs on the pair of switches).
I would like to assign addresses from the management VLAN to the router Fa1 management interfaces but the software configuration guide seems to note this is not supported (and indeed it doesn't seem to work).
Physically I have Fa1 from core-1 into a port on an adjacent switch. Fa1 from core-2 also goes into a port on that adjacent switch. Both are in my management VLAN, whose SVIs are on the cores themselves.

View 5 Replies View Related

Cisco Switching/Routing :: 3750e InterVLan With RVS4000 Gateway

Jan 4, 2012

I have a RVS4000 connected to my cable modem which I use as my gateway, the IP address of the RVS is
I have a 2811 with 3 subinterfaces of which I can ping all of them from my PC which at the minute is in VLAN 1, the only network that can connect to the outside world is VLAN 1, how can I enable the other 2 vlans to connect to the internet?
My set-up details are
interface FastEthernet0/0.1
description *** Data Network***
encapsulation dot1Q 1 native


View 1 Replies View Related

Cisco Switching/Routing :: Sub-50ms Protection Switching At Ethernet Layer (ERPS G.8032)

Jul 24, 2011

It is understood that sub-50 ms ERPS convergence can be achieved with certain HW/SW combinations.
1) What are the platforms supported (and with what FW/SW) has this been tested ?any results that can be shared?
2)  Link failure detection in GigE on Copper is slower compared to GigE  over "pure" Fibre; so no sub-50ms would be possible with Copper ring sub-50ms convergence achievable with "combo SFP ports" ?

View 1 Replies View Related

No Connection Via Ethernet No Default Gateway?

Jul 3, 2011

I got a hand-me-down laptop the other day. Wireless (WLAN) works fine, but I can not connect via ethernet.

It gives the "Limited or no connectivity" message, even if the ethernet cable is unplugged (no "a cable has been unplugged" message)

The laptop is plugged in to an EWIRE modem/router. Desktop connects fine via ethernet, as does my PlayStation 3 console via wireless. So I don't think it has to do with the modem/router. It's a Compaq from 2005 or so. Windows XP Pro SP3.

Microsoft Windows XP
Media Center Edition


I have a general knowledge of fixing the typical internet connection problem (obtain DNS automatically, repair connection, unplug modem for 20 seconds, etc) but I've never been this stumped before.

View 6 Replies View Related

Cisco Switching/Routing :: 3500 XL - Remove Default Gateway IP Address

Aug 9, 2012

I have a 3500 XL switch with the following default gate IP address that i need to clear from the switch but not quite shore how to remove it.
I've removed the customer original Ip for security reason as this is an open discussion forum and just replaced with
switch#show ru
Building configuration...
Current configuration:


View 2 Replies View Related

Cisco Switching/Routing :: ASA5505 - Gateway Of Last Resort - Layer 3 Switch

May 23, 2012

I'm building the below network configuration:
WAN -------- ASA5505 ------<802.1q trunk>----- L3 switch -----<802.1q trunk>----- L2 switch w/ VLAN support
The following VLANs exist on the ASA and both switches: VLAN 10 (, VLAN 11 (, and VLAN 99 (
The ASA5505 performs the following functions: routing to/from the WAN, firewall, NAT, and DHCP for each VLAN.  It has an interface on each VLAN (10.10.x.2) for a DHCP server.
The L3 switch provides inter-VLAN routing and layer 2 switching.  The L2 switch provides layer 2 switching, with VLAN support.
What should the default gateway on the L3 switch be?  Should I set the IP of the physical interface connected the L3 switch to the ASA5505.

View 8 Replies View Related

Cisco Switching/Routing :: 3750x Application Not Working When Switch As Gateway

Jun 2, 2011

In change network topology, we are going to assign PC's Gateway as Switch (3750X) IP Address rather than server IP Address. Currently we have configured all Sytems's Gateway is Internet Server IP Address which we are going to replace with Switch IP as Gateway.Issue is while connecting specific application like team viewer in which application tried to send keepalive message to the live server and in case of switch/router IP as gateway. Connection doesn't established. However it is working fine when Internet Server IP treated as gateway.

View 1 Replies View Related

Cisco Switching/Routing :: Isolated VLAN Cannot Ping Gateway ASA 5520

May 30, 2012

I have an ASA that houses 11 VLANs, and I am trying to add a 12th.One of the VLANs is for PCs that have internet only access.The new VLAN will be similar, but for multifunction printers only.VLAN 99 is for internet only and works fine, I can ping the gateway of from any PC in that VLAN.I am creating VLAN 98, modeling it after VLAN 99, and I cannot get a PC in the vlan to ping the gateway of10.98.3.17.Both switch and ASA show the new VLAN 98 as UP, switchport is UP/UP.I have deleted and recreated VLAN 98 a few times, but I cannot get a PC VLAN 98 connectivity.Once it is working on the core switch, I will add it to the trunk to the IDS switches. VTP is not in use, everything is manual. [code]

View 4 Replies View Related

Cisco Switching/Routing :: SGE2010P VLan Cannot Ping Default Gateway

Oct 15, 2012

I have created two vlans, vlan 1 data and vlan 200 voice. the issue is that when an on one vlan i cannot ping the default gateway of the othe vlan from my PC. An using sge 2010p switches.
below is my configuration
p route
ip dhcp relay address
ip dhcp relay enable
ip dhcp information option
interface vlan 1
ip dhcp relay enable(code )

View 3 Replies View Related

Cisco Switching/Routing :: 3560 - Servers Updated When Gateway MAC Address Changes?

Feb 7, 2012

We have a server connected to a 3560 switch which in turn connects to 6500s. The gateway interface is on the 6500. We will be changing the 6500s so the mac address for the gateway will change, however the IP address will remain the same. As we change out the 6500s the uplink connections to the 3560 will go down. This will flush the old mac address from the 3560.When the 3560 removes a MAC address does it update servers so they have to relearn the correct MAC address?

View 4 Replies View Related

Cisco Switching/Routing :: 3750 Switch Configured - Only Can Ping Gateway

Sep 27, 2012

how my switches are configured, a cisco 3750 and a cisco 4506.[code] i can ping the gateway from the 3750  however cannot get anything past that or enything to it.

View 12 Replies View Related

Cisco Switching/Routing :: 1841 Tunnel Without Default Gateway Not Connecting

Feb 12, 2012

I'm trying to configure an IPSEC VPN + tunnel for multicast data. When the default gateway is set on the router (1841) it works fine but if I only set a route to the IPSEC peer via our gateway then the tunnel fails to come up. The end point is to a 3rd party. [code]
I found that if I add a static route for the tunnel destination via fa0/0, the public facing interface, the tunnel comes up..ip route 255. 255. 255. 255 FastEthernet0/0
and I can then ping the tunnel IP at the far end - would that be? Is there a better way to do this without using a default route??

View 4 Replies View Related

Copyrights 2005-15, All rights reserved