Cisco Switching/Routing :: RV016 Dual Wan Configuration
Oct 15, 2012
I have recently implimented an RV016 device into our network. We have a bonded T1 service with Paetec/Windstream (5 static IPs) and also a cable connection with Comcast (no static IP). The T1 has been our primary connection, and our MX and A records all use this IP address. I have the rules set and using a one-to-one NAT setup with our 5 IPs. Everything is working great with the T1 in place and email is flowing with no problems, however when I connect the cable into the WAN2 port and try to send email, its using that outbound connection, rather then the T1 and our spam filter is blocking it. So the email is rejected and we get this message below.
---------------------------------------------------------------------------
Delivery has failed to these recipients or groups:
xxxx@gmail.com (xxxx@gmail.com)Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept e-mail from certain senders, or another restriction may be preventing delivery.
The following organization rejected your message: (our smtp spam relay)
-------------------------------------------------------------------------
The reason for being rejected is just because it doesn't recongnize the IP address/gateway it is coming from.
My question is, how do I define that all email is sent out through our T1 connections IP address in the router?I see options for Advanced Routing or Bandwidth Management, but not sure what one I need to configure as I am not too familiar with these settings. I have Intelligent Balancer(Auto Mode) enabled as well by default.
The reason for adding the second internet connection is strictly for load balencing and getting some more bandwidth in our location.
I have recently implimented an RV016 device into our network. We have a bonded T1 service with Paetec/Windstream (5 static IPs) and also a cable connection with Comcast (no static IP). The T1 has been our primary connection, and our MX and A records all use this IP address. I have the rules set and using a one-to-one NAT setup with our 5 IPs. Everything is working great with the T1 in place and email is flowing with no problems, however when I connect the cable into the WAN2 port and try to send email, its using that outbound connection, rather then the T1 and our spam filter is blocking it. So the email is rejected and we get this message below.
In IOS verson 12.X there was a Bidirectional Forwarding Detection configuration however in IOS 15.0 this isn't available at least not with the same syntax. Is this feature not available in 15.0?
In 12.X this was the syntax of the command:switch virtual domain <number>.
I have a two fiber connection from our Central Office(6513) to Remote office (6509). I have a requirement that on the remote office if one of the fiber goes down, the second fiber should work as a failover. I am planning to use SUP720-3B SFP to connect to the CO.
Can I connet one fiber to Sup720-3b G5/1 & another fiber connection to G5/2? or Can I connet one fiber to Sup720-3b G5/1 & another fiber connection to G6/2? I am running EIGRP between sites. Any sample config.
I have a multi-wan connections to RV016. WAN1 is T1 and WAN2 is DSL. There are some websites that I am having a problem logging in and staying logged in. It seems like the connection from my computer is going out through two different WANs.
How should I set my RV016 properly so that I won't have the above issues anymore?
I would like to make a design with 4 Nexus 5596UP. 2 of them equipped with Layer 3 Expansion Module so they can serve as core layer and the other 2 Nexus used as Layer 2 for aggregation server layer.The 2 Nexus in the core layer will run HSRP and will peer with ISP via BGP for Internet connection The 2 Nexus in the aggregation layer will be configured as layer 2 device and have FEX and switches connected to them.What I am ensure of is how the vpc and port-channel configuration should look like between the 4 nexus. What I was thinking is to run vpc between the 2 Nexus in the aggregation layer and between the 2 Nexus in the core layer. Than I was thinking of connecting each Nexus in the aggragtion layer to both Nexus in the core layer using port-channel and vice-versa.
I run 2 RV042 V1 for home and office with Gateway to Gateway VPN connection with single WAN connection in use. Everything works like a charm!
I was even able to create VPN connection with 2 WAN connection on one Router and 1 WAN connection on another with Smart link failover and VPN Tunel Backup.
I got problem though when i tried more complex connection diagram. [URL]
So basically I now have 2 ISP connections on each point with Static IPs and I'd like VPN Connection to be alive for ALL 4 options automatically with failovers (smart links) And tunel backups but i'm not sure if that's ever possible with my equipment.
I have to configure multiple vlans served with a unique DCHP server . As first step, I just will The DHCP server to serve 2 vlans. The following is the hardware and configuration that I implemented :
[code]...
But If I connect the DHCP server on a trunked switch port and adapt the DHCP server gateway 172.16.0.1 to 172.16.0.254, hosts receive ip address properly.I have to connect the DHCP server directly to the router. How can I do that, what is wrong in the configuration?
We have :DSLT-1 I want to route all VOIP traffic and traffic to one IP address over the T-1, all other traffic I want to route over the DSL. HOWEVER, in the event that the DSL fails, have the DSL traffic failover to the T-1.I have setup the router to do just that (I think) and when I go to a site like "whatismyipaddress.com", it shows my IP as comming from the T-1. With the setup I described that traffic should always route over the DSL.Straight up protocol binding won't work because the traffic I want to route over the T-1 to one specific IP is going to be prot 80 and 443 (web traffic)
I am position to migrate from CatOS 6509 switch to native IOS 6509 switch. long time ago, there was some site to convert automatically based on copy and paste onto the tool, but i can not find.
Does anybody know how to convert CatOS configuration to Native IOS configuration ? It is not IOS change, but it is configuration convert.
At home I have a Cisco 877 router, I also have Optus Cable internet and Telstra Business Direct DSL. I have configured the ATM interface for the Telstra DSL connection through the onboard DSL interface. I have also configured Fast Ethernet port 0 as a vlan2 port, which is configured for use with the Optus Cable internet (this is connected through an Optus Netgear CG3000 router). The Nethgear has DHCP enabled (192.168.0.xxx range), as does my Cisco 877 (10.0.0.xxx range).Firstly, the Telstra Business DSL is due to be connected tomorrow between 9am and 1pm, so it is not physically connected as yet.From my laptop connected to fa3 and using Console connection, I can ping all of the 192.168.0.xxx addresses that exist, as well as my own laptop and a VoIP phone I have connected to fa2 (laptop is 10.0.0.100, VoIP phone is 10.0.0.101 both DHCP assigned, not MAC Reserved either).I can use internet explorer on my laptop to connect to the Netgear router, but no other internet pages. I also cannot connect to my Fuji-Xerox printer at 192.168.0.20 through the web browser, yet I can ping it from the router.I don't have a huge experience with Cisco as yet, and everything I have learnt has been basically self tought. I am looking into doing my CCNA, once I achieve enough funds Now, what I am trying to achieve ideally is, to combine both the Cable and DSL services to in effect double my speed? if this isnt available, a load-balancing type of scenario would also be good. Both DSL plans have a 500gb download limit, but the reason I needed the Telstra DSL is the VoIP phones I am using won't connect through Optus (Optus have locked nearly everything out), and Optus will not give me a STATIC IP address with the Cable, whereas I have on on the Telstra DSL, I would like to Remote Desktop into my main PC eventually.
The IOS on my router is: C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(6)T7 The Optus Cable Modem IP is 192.168.0.1, the Cisco 877 router IP is 10.0.0.1
The current config (complete, with username & passwords ### out) is below: (Bear in mind there's probably many things thats not needed.Once I get the router working, I will configure my 2960 switch and have all devices connected through this. All devices on my network do not need to stay in the 192 range, they can be 10.0.0.xxx. The DHCP could be disabled on the Netgear (Cable Modem) if that's required as well.
I would like to ask if there are dual WAN router models on ISR G2. The client doesn't want the RV042G. Any model from the 890 series up to the 2900 series ISR G2 routers? The connection from the ISP is via Ethernet. If a serial connection would be used then we can just add an HWIC-2T for this matter.
I have to upgrade a Nexus 7010 with dual Sup engines from 4.2(4) to 5.2 and am hoping it could be an ISSU. We are fine with an outage window.To upgrade from 4.2(4) to 5.2(5) I'll have to do a multi hop upgrade from 4.2(4) - 4.2(6) - 5.2(5) and each hop would take 40-60 minutes.do I spend 40-60 minutes for each hop, or just do a disruptive upgrade straight from 4.2(4) to 5.2(5)? Like I said, we are fine with an outage window.
I have two Nexus 5596UP that will be connected together via VPC-Peerlink. From there I want to connect both 5596UP's to a 6509-VSS via VPC.The Nexus 5596UP's will be essentially layer 2 switches, all routing will be done the 6509-VSS's.
1. We now have SupA & SupB in the chassis, due to some mistake we have same IOS version but different feature set on them, although we configured redundancy mode sso, in the "show redundancy" we see Operating Redundancy Mode = rpr due to Software mismat, we now need to fix them as same feature set image, if I use "copy sup-bootdisk0:/xxxx slavesup-bootdisk0:/xxx", then write memory, does this cause any service/network interuption?
Available system uptime = 1 year, 1 week, 4 days, 9 hours, 21 minutes Switchovers system experienced = 2 Standby failures = 0 Last switchover reason = active unit removed
[code]....
2. We did a failover test with this status, found that if we triggered supervisor failover, all modules will reload thus the services if interupped. How about after we make the Operating Redundancy Mode as sso, will this behaviour shows again? Or a stateful failover will happens, then modules no need reload?
3. We are using OSPF as our L3 routing protocol, after reference to the configuration, nsf should be enabled, we want to ask in the OSPF-domain nsf should be configured in all OSPF-enabled router or only 6500 which have dual-sup?
4. We also found that the interfaces(3 * Gig & 2 * TenG) in Standby supervisor cannot be use even enabled & configured, is it because we are running rpr mode now or will be the same even change to sso? Before customer have some older supervisor in 6500 non-e chassis, and they can use the standby supervisor interfaces as traffic forwarding, they use rpr-plus mode before, how about in sso mode?
One of the two supervisors in an IOS 6509-E did not come back up after a power outage. The failed supervisor in slot 5 was replaced and it booted successfully. However, the supervisor in slot 5 only booted up to a "Cold" state. I did notice the Hw version of the replacement module in slot 5 is 4.9 while the Hw version in the supervisor module in slot 6 is 4.8. What command do I need to issue to bring the supervisor module in slot 5 from "Cold" to "Hot"? [code]
I am looking to implement VSS using our two 6500 series switches. The "Recovery Actions" when there is a Dual-Active situation says that the active chassis that detects a dual-active condition shuts down all of its non-VSL interfaces (except interfaces configured to be excluded from shutdown) to remove itself from the network, and waits in recovery mode until the VSL links have recovered. Does this mean that the Active chassis gets totally isolated thus triggering the modules on the Standby chassis to be active ?
Currently our Cisco 3750 have one interface (port 1) that connected to our provider (Internap) with the IP 66.150.7.68 assigned. Now we want to upgrade to dual handoff L3 protocol. Below is the network configuration from Internap.
>>>> We have assigned the below /30s for each of the interfaces and will statically route the 66.150.7.0/25 down both interfaces. >>>> >>>> >>>> 63.251.162.20/30 >>>> 63.251.162.21 - border1.sef003 - Internap side >>>> 63.251.162.22 - your side >>>> >>>> 63.251.162.184/30 >>>> 63.251.162.185 - border2.sef003 - Internap side >>>> 63.251.162.186 - your side
tell what command lines do I need to input on my Cisco switch for port 1 and 2 in order for the dual handoff to work correctly?
Doing a bug scrub on our dual core, dual Sup 720 6500s tonight. We are going from s72033-advipservicesk9_wan-mz.122-33.SXI4a.bin to SXI9. I want to get a second set of eyes on my script since I have not done this for about 1 1/2 years. Following this doc:[URL]
I have 2 3750 switch stacks which I would like to have redundant trunks between them. This will provide two physical connections traveling through different geographical locations for redundancy in the event that a cable is severed. I couldn't find anything in regards to setup/config. Does it matter if I go stack1/switch1 to stack2/switch1 and stack1/switch2 to stack2/switch2 or should they cross to opposite switches like a stack cable? I don't think that should be necessary, but couldn't find any documentation. Should there be an issue with loops?
Basically I have a simple LAN of 30 users and 2 servers that sit on a private address range (192.168.1.1 - 254). I have a Cisco 1921 router with 2 Gigabit Ethnet interfaces and have installed a 2 port Ethernet module to expand interfaces,I have Two Internet providers that provide me an Optic connection to a converter and then a CAT 5 cable. On both of these connections have private public assigned IP addresses.I have a email server and webserver on the LAN (192.168.2 and 192.168.1.3) and with to port forward various ports to these servers - 25, 80, 443 3389, and 2222.
In my external DNS I have two MX records for the mail server (mail.globalhomegroup.com) that point to 2 A records - one record for the publicly assigned IP address of one ISP and another IP address for the other ISP. Ideally what i would like is for mail to be delivered to the first ISP Ip address - the one with the lower MX weighting and then if that line goes down, through the IP address of the second MX record - the backup ISP we are using.
So I guess I am port forwarding to the inetrnal server IP addresses via one of the two external interfaces.At the same time I need to allow internal users to access HTTP, HTTPS etc.So I have managed somehow to configure the external interfaces of the routers to connect to the ISPs and have managed to assign IP info to intenral LAN interface. I can telnet to the router from the Internet via Dialer0 or Dialer1. Other than that I am totally stuck - I have tried to configure and debug NAT etc but cant see wood for the trees now. Basically the port forwarding is not working and i am not sure if the config I have done is in anyway correct.
I am interesting if 3560x supports ePAgP. I have VSS which is formed by two 4500x switches. Can I use 3560x, which is connected two both VSS members via 10Gb optics for Dual Active detection ?
I am trying to interconnect a pair of Nexus 5548 at adjacent sites, using 2 2960-S switches at each site, the reason being that the Multimode Fiber between the sites will only support 100mb and I need this up while I finish having SMF laid.
I have attached a diagram, just debating whether to use etherchannel or vPC - would like to hear some opinions...
Assume the interconnect between the 5548's needs to be 802.1q trunk
We are running a Cisco 887VA router for our internet access but of course the port connected to the internal network only supports 100Mbit/s. There are a few 100Mbit/s ports on the router; I was wondering whether it was possible to use more than one port to provide aggregation to get higher speed such as two ports providing 200Mbit/s? We are running Gigabit internal.
I have 2 x 6513 each with dual supervisor 720, and need to recover the enable password, is there a better method than removing one supervisor, disabling redundancy and performing password recovery on the single active supervisor module , before re-inserting the second supervisor and re-enabling SSO/RPR on the still active module.
currently nexus 2000 and nexus 7000 does not support dual connection. you can not connect to 1 nexus 2000 to 2 nexus 7000 chasis. But for the nexus 5000, you can. what is the problem to to support this feature on Nexus 7000s? 5000s and 7000s run same software.
We are planning to have attach topology with nexus 5548 using vpc. Let me know if this i possible. I want to configure dual NIC linux server using LACP active mode to connect to two 5548 in VPC for redudancy as well as use of full access layer bandwidth. On nexus this will be access port in single port channel in single VPC link.
