I want to know how to configure kompella l2vpn between 2 cisco devices in CISCO IOS. We know Martinna l2vpn type runs on LDP. but kompella runs on BGP. I need the configuration for same..
View 2 RepliesI want to capture packet on gi0/0 of PE1 in order to show customer that all his traffic is encapsulated and transmitted by L2VPN (ldp signaling) in his lab.
CE1-----------(g0/1)PE1(g0/0)------------PE2-----------CE2
PE1 and PE2 are Cisco3945 and L2VPN is working well. I tried cisco RITE(Router IP Traffic Export Packet Capture) feature, but the output was not what I expected. I tried both export mode and capture mode. Only LDP hello message I got, looks like RITE is only interested in IP packet. Monitor session wasn't effective as well because it is not a switch.
Is there any other way/workaround to capture customer's traffic encapsulated in L2VPN?
What I did on PE1 when I was trying RITE export mode:
ip traffic-export profile test
bidirectional
[Code].....
Assuming I have the following setup: Cisco 7604 Cisco Systems Cisco 7600 4-slot Chassis System OSR-7600 Clock FRU 1 & 2WS-F6K-MSFC2A Cat6k MSFC 2A daughterboard Rev. 4.0 WS-F6K-PFC3B Policy Feature Card 3 Rev. 2.4 WS-SUP32-GE-3B 9 ports Supervisor Engine 32 8GE Rev. 4.6 WS-X6148A-GE-TX 48-port 10/100/1000 RJ45 EtherModule Rev. 4.1WS-X6548-GE-TX SFM-capable 48 port 10/100/1000mb RJ45 Rev. 11.3 The SUP32-3c says it supports both L2VPN and L2TPv3, however the line cards are effectively 6500 line cards and I was under the impression the 6500 didn't support these.
If the supervisor supports a feature does that mean it is globally supported on a switch? Or do I need to check the compatibility of these line cards as to if they support these features?
I got 10 Catalysts 3750 (all of them identical) and I got the IOS Update. Anyway I only have service contract for 4 of them.
Am I allowed to update all of them? Or only the four devices which have the service contract?
i'm currently deploying LMS 4.2.3 Demo version and i'm unable to discover my ASA 5510.how to discover my ASA to mange it in my Cisco Works 4.2.3.
View 35 Replies View RelatedMy question is if I do not want to purchase any additional switches can I connect the devices to the 6509 and put them in their own separate vlans?I am a little fuzzy about the physical connections needed to make this design work as it is.
View 9 Replies View RelatedI have several cabinets with top-of-rack N2K's attached to N5K's via FEX's. 9 cabinets with 2 switches each.
Recently I added 3 more cabinets to the mix, for a total of 12 cabinets with 2 switches each.
I can get into the new switches and see the FEX's and configure ports, etc. but no device I attach to the 'new' N2K's is pingable over the network. I can take the same device, same cable, and attach it to a legacy N2K talking to the same N5K's, and it immediately joins and is pingable over the network
Is there any shut down proceedure for cisco devices in data center cisco router,switches,firewalls ASA-5580-20,ace-4710 and IPS-4260 devices.
View 4 Replies View RelatedI'm getting currently installing a full Valcom IP sound and clock system , along with all new Cisco 2960 gig ps-l switches. All devices run off of POE. In the past, I have read that most AP's only draw approx. 12.5 watts (va's). But you must take into account length of wire to add your additional draw which puts you at the 14.5 they auto draw. My question being that the clocks I have auto draw 15.4 watts, which is eating up my 370w of power on my switches. The spec sheet on the clocks show only a power consumption of 4.5 watts. So today I turned a few ports down to 4.5 watts and everything still worked fine.. Any experience by chance with Valcom devices or just turning the power down on devices in general? I can imagine that a clock is drawing enough to care about the length of the wire run.
View 8 Replies View RelatedHas come across issues with multiple GRE tunnels between two devices when using the same source and destination addresses. I've tried using tunnel keys but this makes no difference. The only way I can get this to work is between different source & destination addresses.
View 4 Replies View RelatedI have 10 new AIR-CAP3502I-A-K9 connected to a WS-C3750X-48PF-L switch. 8 of the APs power on and connect perfectly, but two are problematic. Both devices are granted power, but they never go past the stage of getting power from the switch. A look at POE shows: [code]
Where the AP that is not working is connected to Gi1/0/4. The interface shows down/down. I've tried shutting the interface, removing power, cdp etc.
Are there any other tricks you can think of to get it working or would you say that it's 2 faulty APs? I am not based at site unfortunately so I cannot console to the APs and check them out.
I just upgraded to the e4200 v2 and I seem to be having connection issues with my android phone and tablet. Both are 802.11n compatable but they seem to have issues staying connected. Just so everyone is up to speed, there are two connections made by android, a general one to the internet, and a second one to the google servers (for syncing e-mail and contacts and the like) When just connected to the internet, the wireless icons are gray, when connected to the google servers as well, the icons turn blue. It's the drop in connection to the google servers that I'm having an issue with. I currently have the router set in full auto for channel and frequency band, but I've also tried setting specific ones thinking maybe the change in channel or something was causing the disconnect. The disconnect will even happen when I'm sitting right next to the router. The phone is a Samsung Galaxy Nexus (Verizon LTE) running Android 4.0.3 and a Asus Transformer tablet (Wifi only) running android 3.2.1.
View 3 Replies View Relatedim guessing there is zero chance of a firmware upgrade for the SRP527W to support more usb devices is there?
View 1 Replies View RelatedIn my organization we have several 2950T that conected each other. We have 4 floor with each floor have 1 sw except 4th flr have 3 sw.
Main server, apps, db ( 15 units) connected to core sw at 4th flr. Currently the problem is others devices can't connected to the server at core sw. Test ping and the network to core sw is intermittent problem. When ping 100 times only 30 reply. After 10 minutes the connection restored. Ping 100 times successful. It will not having problem again until the next day. This already happen 3 days. Any command for me to use to check if port or the switch having problem? Any log i can collect
I have a Cisco 887M router which I wish to restrict the devices allowed to be connected/allocated an IP address to two, and *only* two.
I can't, for the life of me, find out how to allow these two devices to connect to ANY port - I can configure a MAC restriction on a single port, but I don't know how to make it so that I can allow JUST these two devices to connect to any port in the 4 port switch/VLAN (VLAN 1 is used because the mongrel who set this up was lazy). I know the MAC addresses I want to allow
How I can do this? I *can* restrict any given port to the two MAC addresses - but if I try to add the MAC addresses to another port, they get removed from the initial one. I need to be able to have them connect to ANY port and work, but allow NOTHING else to work.
For those wondering, this is to counter a user who is utilising company resources for purposes not approved - and costing us quite a bit of money in the process.
upgrading our small office network. We currently have about 75 employees with probably 125 devices on the network. I'd like to create about 10 vlans for the different departments and then configure intervlan routing as needed. Currently we have all unmanaged switches and it's just a huge broadcast storm on the network. We are upgrading our Cisco 800 router to an ASA5505 sec. Plus license. I need some recommendations on switches. Of course, this needs to be done as cheap as possible.... Is there a way to use the ASA to configure all the vlans and intervlan routing and access lists and use a cheaper switch to provide the access layer to hosts?
View 4 Replies View RelatedIn our datacenter we have a 3750 stack with IP base image. I have enabled PBR and reloaded the switch. Show sdm prefer says i am using default template. The reason i want to use PBR is that we have 2 firewalls on the same work and want to be able to have granular control over which gateway out of the network they use but still be able to access all internal resouces accross wan and locally.
Created access list to identify traffic:
access-list 10 permit 10.2.3.59 (test workstation on vlan 3)
Created policy:
route-map TestASA permit 10
match ip address 10
set ip next-hop 10.2.0.3
Assigned policy to the user vlan3:
ip policy route-map TestASA
Results:It changed the default gateway to the above gateway but i could not access any resources on any other vlan, could not access resouces accross wan.
The layer 2 switches are connected to layer 3 Switch via trunks, and routing between layer 2 switch ports with configured SVI's on 3550. All working fine. Now I'm trying to configure routing between 2800 and 3550, I tried connecting both Straight Throught and Crossover cables to the 2800 Fa0/0 and Fa0/1 ports as well as the switchports on 3550
No switchport commands are configured however, the lights do not go on for both straight through or crossover cables. I tried connecting 1750 routers but same result. My goal is to have all the VLANS routed to the internet with configuring NAT translation the router.
We just installed a Cisco ME-3400EG switch at one of our sites. A Cisco C3750X switch is connected to the 3400. When we run the command CDP NEIGHBORS, the 3400 shows no devices. We can access the 3750 via the 3400. Also, when we run CDP NEIGHBORS on the 3750 we do not see the 3400 (but other devices are displayed). How can we get CDP to display the devices on the 3400? We have already tryed CDP RUN.
View 5 Replies View RelatedI have a 10nos of cisco 2960 switches and 1no of cisco 3725 gigabit switch. all 2960 switches are parallaly connected to 3725 switch though fiber.
all the switches are having same vlan and public ips for management.
Now I want to upgrade IOS for all 2960 switches at a time, how to up grade IOS same time for all switches.
I have a network that has a pair of 6500 switches on either end, running HSRP. In between each 6500 are two to three ruggedcom switches. They are connected to each other and the 6500's by trunk ports in a straight line. The 6500's see each other as CDP neighbors, and the 6500's can see the rugged- com as LLDP neighbors (ruggedcom only supports LLDP).
The issue is that randomly devices on the ruggedcoms will drop offline and then come back. The problem is that the devices that drop offline are all in the same VLAN, so it appears like a virus - i.e. one device drops off, then multiple. Eventually the HSRP starts flapping between the two 6500s and this causes havoc on the network.I'm almost to the point of taking a laptop and plugging it into one of the ruggedcom's to see traffic, but the issue is that the ruggedcoms are outside in cabinets that laptops shouldnt be exposed to.
how do i configure the new asa 5505 to be as a router as shown in the diagram note: the isps' routers placed in head office. but i cannot change the configurations of the isp's routers.
View 9 Replies View RelatedI wounder if there is any way to ping the local deviceses connected to a network hosted by a Cisco 1921 router? I wan't to be able to ping the device(computer name) but currently cant do that.
View 1 Replies View Relatedi have a campus network with 2 core Cat6500 and multiple 4500 series distribution switches plus 2960 series access switches,we have deployed IPTV system in the network but currently 50 TVs are working through sattelite stream from streaming server Cisco's DCM 9900.we are planning to add more 300 TVs in the network and i am wondering that when all of them will be deployed then what will happen for switches cpu utilizations when all the Tvs will be running on the same time with different different channels.
View 1 Replies View Relatedshow cdp neighbors command shows two devices connected through the same local port?I have a Cisco 3560 that when I issue the "show cdp neighbors" command I get the following results: [code]
the question is why is this showing that Gig0/3 is being used twice to connect to two different devices. I have verified there is no hub connected to this port and in fact Switch3 is not connected to Switch1 at all yet it still shows up in the CDP table.
I have cleared the CDP table on every device at this location and still get the same results.
Where can I find a list of supported external HDDs or NAS devices for a Cisco 857w router?
View 2 Replies View RelatedI have a few devices that the manufacturer told us we have to set with a public IP (No Natting) We have Internet ->ASA5510-> Switch 3550 with 3 vlans. Up to now we have always use Natting to configure internet access to specific devices. I heard setting up a witch with one VLAN connected to the internet and all other internals is a bad idea. that was the only Idea we had.
View 3 Replies View RelatedHow can I configure my LMS 4.0 to capture syslog from network devices?
On the LMS CiscoWorks Portal, Syslog Alert window shows "No data is available".
In my LAN environment, I'm using two cisco SG300-10 switches. Both switches are connected by GE10 on both switches, where both ports are set to trunk.Now on all ports 1-9 on both switches, I'm having client computers attached. So I set ports 1-9 to "access" mode.All interfaces on any switch is left in default vlan.
Is it normal that I see all traffic from all connected devices on any port where I connect a listening device?What I'd like to achieve is, that only traffic that is meant for a specific workstation is actually forwarded to this workstation. By now it seems that I get all the traffic from everybody.
If I setup 4948E's in HSRP configuration. And I connect devices to the Standby Unit that do not require redundancy. Will there be any issues passing traffic? I don't believe that standby unit blocks the traffic but wanted to confirm.
View 5 Replies View Relatedi try to configure DNS on cisco 800 , it's worked , but after 24 hours the command ip domain-lookup change to disable, and it stop work
i'm not understanding why it's happen ,
that's the configuration
ip domain name XXXXXX.CC.CC
ip host XXX-RR-FF.com 2.2.2.2
ip name-server 1.1.1.1
[Code]....
How to configure this setup.I have an ASA5505 with dual wan failover, FiOS (eth0) & Cable (eth1). how to configure the port forwarding for all my devices so it doesn't matter what external interface the traffic is coming from. For example, I need web traffic on port 80 forwarded to 192.168.1.150 regardless of whether it is coming through eth0 or eth1.
View 2 Replies View RelatedIf I have an ASA 5520 with an INSIDE interface, a DMZ interface and a WAN interface what would be the best way to configure NAT? If I configure nat-control and a nat (inside) 1 0.0.0.0 0.0.0.0 this will configure everything to be NAT'd when passing from the INSIDE interface out.My question is what about the devices I want to access in the DMZ from the inside for management etc? I'm guessing the ASA isn't smart enough to realise you're accessing hosts in it's DMZ interface so do you have to configure a nat 0 rule for every subnet within the DMZ you want to access or is there an easier way to do it? It's worth noting that the same devices will be accessing the OUTSIDE network and the DMZ network from the INSIDE network.
View 6 Replies View Related