We have cisco 2911/k9 we fixed 2 HWIC-4ESW crds in 2911. I create 4 vlan i have assigned 1 HWIC-4ESW all vlans are working fine
when i configure 5 th vlan it assigned second HWIC-4ESW 1 port but interface status showing up. i connected one system to that port i try
to ping that port that port notable to pinging is there any activation for that second HWIC-4ESW.
I have a /28 subnet between my internal and external firewalls for L3 connectivity. On our internal firewall, I have a default route for internet traffic pointing to the external firewall (10.10.1.2).
We will be inserting a web filter appliance as indicated on the diagram. The appliance requires an IP address to be assigned to the LAN interface.
What is the best way to accomplish this with minimal impact? Will my default route on my internal firewall have to change to the IP of the web appliance if I address the web appliance on the 10.10.1.x subnet?Should I address the web appliance on the 10.10.1.x subnet to begin with, or create a vlan on the 2960 and a L2 interface on one of the firewalls?
We having a VSS switch (9 slot chasis) with ios "s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI4", slot 7-9 are currently free. We wanted to install WS-X6708-10G-3C module on slot 7. Once we installed the module it didnt come, after waiting for 15-20min again we removed and inserted, but module didnt come up and we could see following logs on the console:
Jan 12 08:57:40.146: %ISSU-SW2_CFC2-3-ERP_AGENT_SEND_MSG: client/entity send failed; error code is timeout
*Jan 12 08:57:40.330: %ISSU-SW2_SPSTBY-3-ERP_AGENT_SEND_MSG: client/entity send failed; error code is timeout
Jan 12 08:57:40.146: %ISSU_ERROR-SW2_CFC2-3-START_NEGO_FAILED: ISSU NTI Client(2040): failed to start negotiation (ISSU_RC_CLIENT_ENTITY_DOES_NOT_EXIST_IN_PEER)
[code]....
Afer some time VSS switch didnt response to console commands and all the users in access switches were not able to reach the gateway (VSS). Then the problem disappeared once we rebooted both the switches in VSS.why the VSS switch become non-responsive?
I have a 2811 ISR, a lab unit with almost nothing yet configured other than some IP networks on serial and FE interfaces to ping to other lab routers. And I have one HWIC-4ESW installed, and I amrunning IOS 15.2.I want to set the card as a single routable interface and just have the ports act like switch ports, which I imagine is the default design of these cardsI work a lot with Cisco 891 ISRs so figured it's the same here, assign an IP to interface Vlan1 and all is well. That was wrong, obviously more config is required.It seems there are a lot of differing answers out there, so far none what worked for me. The best looking one I could find said to assign an IP to the Vlan 1 interface, then go to each of the four FE interfaces on the switch module.
View 3 Replies View RelatedI started to set up a 1721 router with WIC-4ESW. This is on an internal network, so only looking to just do routing from FA/0's interface to the networks attached to ports on the WIC. I first assigned just VLANs to 2 of the ports and this did not work. So I did some reading up and decided to use bridge groups. Except I still can not access the interfaces on the WIC. And by that I mean on the router itself I can not ping the ip assigned to the BVI.
I have another 1721 w/4 port that long ago I seem to remember simply assigning VLANs to the interfaces and I was able to communicate between the networks without issue (or maybe I just don't rememer that well). Thing is I should be able to at least ping the internal interfaces shouldn't I (assuming the status is up). I don't know why BVI2 and 3 are listed as down, nor do I seem to know how to bring these up.
This is what ip int br gives me:
1721#sh ip int br
Interface IP-Address OK? Method Status Protocol
BVI2 192.168.101.1 YES manual down down
[Code]....
Maybe this was listed in the release notes for the product and I missed it, but can this item support Etherchannel in a 2801 router? I installed the module into the router and the router recognizes the module. I can configure the ports as access or trunk ports, but I am unable to configure the channel-protocol or the channel-group for the Etherchannel. The IOS on the router is 15.1 M with the upgraded Bootloader version 12.3.
View 1 Replies View RelatedWe have been facing a problem at my company ! We have a Cisco Router 1921 with one HWIC-4ESW in trunking with a RuggedCom switch RSG2100.When I use the GigabitEthernet port to make a trunk, I create 2 sub-interfaces (one for each Vlan) and configure the Port on Switch as Trunk, the inter-VLan routing works with no problem.But now I need to use this configuration using the HWIC-4ESW on Router, and I can't do this work. I try creat interface Vlan for each vlan, and try creating the VLans at Router Vlans database, but no way. At router I enter in interface and try to do the switchport trunk command to add a Vlan, but doesn't work.
View 4 Replies View RelatedDoes Cisco 1921-SEC/K9 support HWIC-4ESW ? I require 4 x 10/100 Ethernet ports
If yes how many ? are there any drawbacks if i use this module instead of a switch?
We have two cards HWIC-4ESW on router 3845 but we need that the two cards 8 ports conected betwen, if a pc on port 1 can ping a pc conected on port 8 on second card. tis comunication can,t doing a pc on port 1 can,t conected a pc on port 8.
the configuration is the folowing
interface FastEthernet0/0/0
switchport access vlan 100
speed 100
[Code].....
Any configuration guide for EHWIC-4ESW card. Also the difference in configuration between EHWIC-4ESWG and HWIC-4ESW if any?
View 1 Replies View RelatedI am using Cisco 2911 & IOS version is 15.1. My problem is that after some days (e.g. 15-20 days), the routing table suddenly stops updating & then I have to enter the default route again to make it up. I am using Track 1 to track default route here. After primary link goes down, the Track is also going down but after coming the primary link up, the track is not coming up. So, I have to add the default route again to make it up.
View 2 Replies View Relatedi downloaded and transfered the new ios to the 2911, but no install routine started.
View 3 Replies View Relatedafter installation of demo versions of 2900-SEC-TEMP & 2911-2921-SSLVPN-TEMP & rebooting the 2911 router I do not have access SSL commands.Show license indicates that 2900-SEC-TEMP & 2911-2921-SSL-TEMP licenses are active but NOT IN USE.
View 1 Replies View RelatedI am configuring my first 2911 using a SFP card but I dont know the interface name for this module.
show inv shows the card..
What is the interface number for this card or if it needs some config before it will recognize the interface?
I have a 2911 router. One interface is configured external (WAN) and two interfaces are configured on separate internal private subnets. What is the configuration to allow all traffic in both directions between the two internal subnets?
View 21 Replies View RelatedI have installed a cisco 2911 router and the cisco usb console drivers on my pc, win 7 64 bit.however when I use putty and open the com port assigned it just goes blank, I am using the usb port on my laptop to connect and using the cisco usb console cable provided
View 1 Replies View RelatedI've got two routers, Cisco 2911's with 15.1(4)M1 on one and 15.0(1)M5 on another.
I'm trying to set up ip sla for vrrp tracking but the commands seem gimped? I don't even have an option for ip sla <operation number>. All I've got is ip sla responder/server/key-chain.
we are in the planning phase for a network upgrade. We have two C2960 Switches connected via one (L2) Etherchannel (4x1 Gbit/s) which works very well. In the next phase we would like to upgrade our router to an 2911 series which has 3 gb interfaces. and indeed we would like to create an etherchannel as well. our plan is to use 2 of the 2911 to connect to the first 2960 switch and the one left to the other 2960. i think we will achieve some redundancy with this config.
View 6 Replies View Relatedconnected DSL directly to 2900 series router , but as DSL public IP is not static (dynamic) its difficult to access Router when out of home, any other means to access router without static IP
View 2 Replies View RelatedI have 2 2911 routers that will be connected via fiber with an ethernet Gig handoff to each router. Each router will then be connected to local networks on a second ethernet interface on the router. I have always connected routers via serial connections so this is new to me. Outside of the usual ethernet interface addressing configuration, is there anything else that would need to be configured on the 2 routers?
View 1 Replies View Relatedi want to check if cisco2911-sec/k9 can support IP service image? what PAK(license) can be bought to activate the IP service feature set?
View 1 Replies View Relatedwe have bought 2911 router recently has to set up VOIP line seperately for the network we have two two broadband service provider:
1. how can i use 1 line as an active and other line as a failover(when 1 line is down other line should automatically bear the traffic).clear config will be useful. NATTING using MAtch address objects( roughly )
broadband service provider 1: 97.89.X.X 255.255.252.0
broadband service provider 2: 10.0.x.x 255.255.240.0
2. there are only 20 users to set up a voip line now. here we have telecom provider where they should route the traffic to make any international calls( say telecom public ip 200.200.109.110)from lan - wan everything is allowed from wan -lan we have to allow only telcom provider IP(200.200.109.110)
Need to confirm about 2911 isr, what interface numbers are given to a 9esw when placed in the far left hwic slots (hwic slot 2+3).
I need to build some configs but its going to be a few more weeks before the kit arrives.
I would like to ask if how can we determine by mear physical inspection if the power supply of a CISCO2911/K9 router is AC, POE or DC? Do we have images of the actual spare power supply?
View 3 Replies View RelatedWe have purchased a number of 2911 routers.We got Base & security license as we wanted to enable encryption. However we probably wont use the security.We are replacing 2811 routers.Unfortunately the 2811 routers have FXS ports with 2 - 4 POTS handsets - I completely forgot about these ports when I was ordering.Now I have VIC3-FXS cards which are ok in the 2911 but unfortunately I cant get them to work.I am missing PVDMs (well adapters anyway), and even if I got them the router wont take any commands relating to voice due to the license.Is is possible to 'rehost' the security and turn it into a UC ?I am new to these 2911 and Licensing.
View 1 Replies View RelatedI have a Cisco 2911 router and a Cisco 2960 switch at a remote location.I have a user who will work out of this office a few days out of the week and will need to obtain the same IP address everytime the user visits this office. This office has no file server, no dhcp server. I have the user's MAC address and for now, the user is getting an IP address that is leased for 30 days. I'm trying to find the best way to configure either the router or switch or both so that each time this user connects to this office, that user device will always pull the same IP address and of course no other device will use that IP.
I've did some research in creating a small vlan possibly, and assigning it specifically to the port# that the user's desk is at, but not sure if that's the best way or exactly sure how it'll work. I'm currently studying for my CCNA so this is all new to me and I'm trying to do research and test without obviously causing production issues especially given this is a remote site and I access these devices via putty. I can however drive to the site if needed for testing, but I'd like to have a good grasp on what method I'll be using that will work before I actually make the trip.
The layout of the equipments are as such,other equipment <--> 2911 Router <--> Ether-Switch/3925 Router <--> 7206 <--> Internet,During certain times at night, the 2911 exhibits cpu load, high packet loss and an increase in bandwidth of at least twice it's normal amount. this results in packet loss in all the other equipment. I am attempting to locate who was demanding such a high burst but so far the graphs display normal rates for all the other equipment.Because the 2911 demands an increase from the 7206, the 7206 is able to accommodate this as it still has balance BUT my other equipment that are connected to the 7206 takes a drop in bandwidth as well. the graph shows that when the 7206 bursts higher, the rest of my other links take a slight drop in bandwidth.Also, the graph from Ether-switch to 2911 indicates the bandwidth hike BUT the graph from 2911 to ether-switch does not display the same thing as due to the cpu load, the data is somehow not captured properly.
View 2 Replies View RelatedI have a 2801 router that I am replacing with a 2911. I know the ports on the 2911 are Gigabits and the 2801 are Fe. I read where the IOS would not support backup and restore on each other . I am attaching a show ver on both routers. I need to know if backup and restore would work and or what other changes would need to get done.
View 1 Replies View Related’m somewhat new to Cisco routers this is my first attempt at getting one to work. I work in an environment with multiple locations, most are using the Cisco Model: 2911/K9 or the Model: 2921/K9 routers running IOS Version 15.0.We just added a new small office and all I had in the way of a router was a Cisco C1841-IPBASE-M router, running IOS Version 12.4.When setting up the C1841 I kept the configuration pretty much the same as the others allowing for the differences in the OS. I can remote into the 0/0 (outside port) from over the network, I can ping to that port without fail, but I can’t send or receive traffic from the 0/1 (inside port).
View 1 Replies View RelatedTwo c2911 routers are connected to LAN and have HSRP configured. HSRP is negotiating successfully (active/standby), but LAN switch Enterasys Matrix E1 has problems accessing the virtual HSRP address. The switch can ping HSRP IP, and the virtual HSRP MAC is visible in its MAC table. But the static routes configured on the switch towards the HSRP IP seem to refuse working. Workaround to enable users to access network was to direct the static routes to the physical IP of one router. Is there a known incompatibility between Enterasys with Cisco HSRP?
View 1 Replies View RelatedI attached the terminal to the console port to watch the bootup sequense, but nothing appear the same cable used on athor switches and router without any issue.procedure to access the router noting that Giga ports not working also.
View 2 Replies View RelatedI have a Cisco 2911 router that I will like to use it for setting up a site to site VPN but the router does not support VPN commands. When I issue crypto isakmp command, it says command no recognized. When I issue ipsec transform-set command, it says command not recognized. The IOS running on my router is c2900-universalk9-mz.SPA.151-2.T1.bin. Also see the output of my show licences features command: [code]
what can be done on this router to enable use it for setting up a VPN connection.
Today I'm going to be re-organzing my network, kind of and I just wanted to get a second opinon. Right now I have an ASA 5510 and a Cisco 2911 and a Cisco 2960 (and I have two more 2911s and 2960s that handles our phone network).
Router 2911 is on the edge Gi0/0 has the public IP and Gi0/1 is not used and then I have 5 individual VLANs (Gi0/1.100, 1.200, 1.300, 1.400, 1.500) VLAN 100 is our internal network 10.10.18.1/24 (router is 10.10.18.1)And the 2960 is used for swichport access, the ASA is on the side and only used as a VPN.
What I want to do is put the ASA on the edge so I can dump all the access-lists and everything then 2911 will only be used to route the traffic. Now I know I will have to reconfigure the VPN, which isn't a problem. My question is when putting the ASA on the edge do I just put the public IP on the ASA's e0/0 and then plug the 2911 into the e0/1 of the ASA and give the Gi0/0 of the 2911 the ip address of 10.10.18.1 or do I just shut it down? The reason behind this is because I would actually like to use the ASA for more than just the VPN passthrough.