Cisco Switching/Routing :: Unable To Configure VPN On 2911 Router
Jan 29, 2012
I have a Cisco 2911 router that I will like to use it for setting up a site to site VPN but the router does not support VPN commands. When I issue crypto isakmp command, it says command no recognized. When I issue ipsec transform-set command, it says command not recognized. The IOS running on my router is c2900-universalk9-mz.SPA.151-2.T1.bin. Also see the output of my show licences features command: [code]
what can be done on this router to enable use it for setting up a VPN connection.
View 6 Replies
ADVERTISEMENT
Jun 17, 2012
Any example of how to configure an sm-es2-16-p service module to route over an Cisco 2911?
View 2 Replies
View Related
Sep 20, 2012
I cannot ping and end node on my system from my Cisco 2911. I've tried to configure my computer to ping the device and I am able to. It seems the difference between using my computer and the 2911 is that with my computer I am able to set the default gateway as the end node's ip.
View 1 Replies
View Related
Jan 15, 2012
I am trying to configure etherchannel on 2 2960S connected by a flexstack with 2 ports g1/0/52 and g2/0/52 on each 2960.
these switch are connected to a CAT4500, I know that I can only use LACP because of cross-stack but when I force the switch to use LACP witch channel-group 2 Mode active the switch do this :
%With PAgP enabled, all ports in the Channel should belong to the same switchCommand rejected (Port-channel2, Gi1/0/52): Invalid etherchnl mode
% Range command terminated because it failed on GigabitEthernet1/0/52
I don't know how to bundle the 2 ports on the 2960 stack. each time I use : channel-group 2 mode on there is no error
but the switch do this :
*Mar 1 00:45:32.290: %EC-5-CANNOT_BUNDLE2: Gi2/0/52 is not compatible with Po2 and will be suspended (trunk mode of Gi2/0/52 is dynamic, Po2 is trunk)
*Mar 1 00:45:32.531: %EC-5-CANNOT_BUNDLE2: Gi2/0/52 is not compatible with Po2
[Code].....
View 9 Replies
View Related
Mar 26, 2012
I am having trouble trying to configure my cisco 2509 cisco router for access server. I have two guides shown below: URL and URL
However I am running into some problems. I can go through the second guide up until it asks me to do this command
Step 5: Configure the transport input protocol on the async lines to Telnet.
Access_Server(config-line)#transport input telnet
I cannot put in Transport Input, I only have the option of doing Transport Output let me show some lines from my console:
---------------------------
Access_Server(config)#line 0 14Access_Server(config-line)#no execAccess_Server(config-line)#transport input ?% Unrecognized commandAccess_Server(config-line)#transport ? output Define which protocols to use for outgoing connections preferred Specify the preferred protocol to use
Access_Server(config-line)#transport
------------------------
Im not sure whats going on. I have two routers(cisco 2600 series) plus my 2509 cisco router I am going to use for a access server. I have a two switches 2950 series and I have the access server connected to all of them via a octal cable.
Here is the configuration from the access server:
--------------------------------------
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-IS-L), Version 12.3(26), RELEASE SOFTWARE (fc2)
Technical Support: [URL]
Copyright (c) 1986-2008 by cisco Systems, Inc.
Compiled Mon 17-Mar-08 14:39 by dchih
cisco 2509 (68030) processor (revision M) with 14336K/2048K bytes of memory.
Processor board ID 22840809, with hardware revision 00000000
Bridging software.
View 7 Replies
View Related
Dec 19, 2011
We have a Cisco 2911 Router and have configured via BT Infinity Broadband for out going internet access etc. Are there any incoming restrictions ACL settings etc. that will stop us using for ISA VPN, Exchange connections, Intranet, Sharepoint etc. We have reserved 13 Static IP Addresses from the ISP.
View 1 Replies
View Related
May 19, 2013
I have installed a cisco 2911 router and the cisco usb console drivers on my pc, win 7 64 bit.however when I use putty and open the com port assigned it just goes blank, I am using the usb port on my laptop to connect and using the cisco usb console cable provided
View 1 Replies
View Related
Feb 12, 2013
We have purchased a number of 2911 routers.We got Base & security license as we wanted to enable encryption. However we probably wont use the security.We are replacing 2811 routers.Unfortunately the 2811 routers have FXS ports with 2 - 4 POTS handsets - I completely forgot about these ports when I was ordering.Now I have VIC3-FXS cards which are ok in the 2911 but unfortunately I cant get them to work.I am missing PVDMs (well adapters anyway), and even if I got them the router wont take any commands relating to voice due to the license.Is is possible to 'rehost' the security and turn it into a UC ?I am new to these 2911 and Licensing.
View 1 Replies
View Related
May 7, 2013
I have a 2801 router that I am replacing with a 2911. I know the ports on the 2911 are Gigabits and the 2801 are Fe. I read where the IOS would not support backup and restore on each other . I am attaching a show ver on both routers. I need to know if backup and restore would work and or what other changes would need to get done.
View 1 Replies
View Related
Jan 7, 2013
I have a 2911 router with 15.1(4) Ios Version. I need to enable the evaluation sna feature but when I try to enter the command "license feature snasw" but I get an error, the command "License feature" does not exist.
View 3 Replies
View Related
Oct 8, 2012
I am planning on having a contractor in to configure some new routers and would like for him to login using the local account on the routers while company personal continues to use radius is this possible.
View 6 Replies
View Related
Oct 31, 2012
My engineer onsite can't get into enable mode on his 2911 router. I've seen this before but I can't find out how I fixed it.
He gets an error saying : no password set
Here is the config:
Router#sh run
Building configuration...
Current configuration : 1784 bytes
!
[Code]....
View 3 Replies
View Related
Dec 30, 2012
I am trying to connect my Cisco 2911 router to my community in CNA. I can see the routers on the topology map, but when I try to add to community I get an error message stating that the router is unreachable (Unable to connect). I can ping device from ame client. I can view Device Properties for map (Device type: CISCO2911/K9). Telenet attempt to connect but we only use SSH for connectivity (the same as all of my switches that are connected to community). 2911 is listed as a supported router on Cisco site.
View 3 Replies
View Related
Jun 10, 2012
whether a Cisco Router 2911 would work on images other than universal image. This is the question raised by one of our customer. He has 2811 Router where-in he has configured T1/E1 configuration, terminated to Zyxel Modem and working fine. Now he wants to replace this 2811 router with 2911 router. Since the universal image in 2911 router is not working with the present configuration in 2811 router, he wants to know, what options are there for him to configure this in 2911.
View 2 Replies
View Related
Jan 29, 2013
We have a Cisco 2911 router in our company. I didn't set it up myself nor I was involved. I only started working here recently, bit over 3 months ago. I have been given ongoing task which other IT Technicians been struggling for almost a year with a idea that maybe because I'm fresh person in the company I will find a original idea why could this thing not work.
Our router have a problem with blocking a single IP address, but not completely It's hard to explain but I will try my best. Company is hosting their website externally and accessing the host and FTP on the host on daily bases. It is important for the website to work on the internal network in company. It does work sometimes, but from time-to-time the website showing time-out error 118 on any point before Cisco router using both http and https, have tried putting just the IP address( doesn't matter is it on the general network or last ISA server on DMZ ). I am able to connect to the website using any of proxy gates but not directly to the website. I have also tested the connection past the router and I was able to connect to the website without any problems. I am also able to ping the host's address from the router and internal network.
I have eliminated the possibility of not correctly setup proxy or firewall on the network as problem also occur on the DMZ. I have also checked access-lists on the router and firewall rules for Any possibilities and I can't really see a way why would the router do this.
View 2 Replies
View Related
Mar 19, 2013
I am having 2911 router running with C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M5, RELEASE SOFTWARE (fc1)IOS and i have configured the following commands for eigrp
-router eigrp 100
-network 10.20.0.0
-no auto-summary
It takes all 3 commands but when i check through show run command i am not seeing no auto-summary command.
View 5 Replies
View Related
Sep 4, 2012
how this switch module works in 2911 router? I have two 2911 routers in HSRP configuration for redundancy with crossover cable between switch modules. OSPF running on routers.If active router loses its power and then comes back again, it boots first, its internal link to switch module comes up and it starts to forward packets to switch module. The switch module starts to boot only after router is ready. So I have outage of about 3-4 minutes. For our real-time applications it is way too long.
any way to start booting of the switch module before router gets ready?I understand I can boot it manually, but it is only after router is ready. Only way to get around it I found is to disable internal link and use router interface to connect to the switch module.
View 1 Replies
View Related
Jun 21, 2011
Suppose a broadcasted IP packet reaches one of the integrated RJ-45 ports on a 2911 ISR G2, will it be possible to configure the router so that the other integrated RJ-45 ports, ESM/EHWIC modules installed on the router, as well as the MGF also recieve the packet? Technically, the router should act similar to a switch with the SRE behaving similar to a seperate machine connected via the MGF and other external machine connected to the ports of the router to recieve the broadcasted packet.
Also, if SNMP traps were generated from the router,Will it be possible to send the traps from the router via the MGF to the SRE installed on the router?
View 1 Replies
View Related
Jan 7, 2013
We have a cisco 2911 router configured with password for telnet login, but I always failed to login use telnet, does any one know any place need to be modify?
View 6 Replies
View Related
May 16, 2013
i have router 2911
pub ip: 121.97.65.61-74
interface gigabitethernet 0/1
ip address 121.97.65.61/28
[Code].....
and other ip will drop/kick/disconnected automatically
how to implement this on access list
View 6 Replies
View Related
Mar 6, 2012
what will be the work around on this configuration.currently we have a Lease Line connection on serial interfaceISP <=SERIAL=>Router 2911<=ACCESS MODE=>Firewall(DATA DHCP SERVER located here, policy implemented here)<=TRUNK MODE=>CORE Switch(VLAN Assignment is here)<=TRUNK MODE=>ACCESS Switch(DATA and VOICE passess thru each ports)i am thinking to create a DHCP pool on the router to where my firewall should point to and from the DHCP pool it will point the internal network going to public network.
View 2 Replies
View Related
Sep 3, 2012
We have a router 2911 recently purchased which supports vpn but we are not able to do vpn tunneling, So what is required to use VPN connection.
Does ios has to upgrade or some kind of license is required.If license is required then what kind of license.Router version is 15.0(1r) M15 which I found in sh version command.
View 2 Replies
View Related
Sep 4, 2011
I recently purchased a Cisco 2911 to replace my Cisco 1711 router. I copied the configuration from the Cisco 1711 router to the Cisco 2911 router. Everything seemed to work correctly except when I VPN tunnel into the Cisco 2911 router using Cisco's VPN client version 5.0. I can ping the router LAN interface from my PC that is VPNed into the router but I can no longer ping or access the devices on the LAN side of the router as I did on the Cisco 1711 router. I don’t see errors in the log or hits blocking anything in the acls. It’s using the same configuration that I had on the Cisco 1711 router, and this did work on the Cisco 1711. The Cisco 2911 router is running IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1).
Here is the VPN clinet portion of the configuration: The LAN is addressed as 192.168.0.0/24. The router LAN interface is 192.168.0.1, which I can ping and access. I can't ping or access anything on the LAN (192.168.0.0/24) beside the router.
aaa authentication login vpnclientauth local
aaa authorization network vpngroupauth local
!
crypto isakmp client configuration group remote-clients
key 6 xxxx
pool clients
[Code]....
View 11 Replies
View Related
Oct 2, 2012
I am using Cisco 2911 & IOS version is 15.1. My problem is that after some days (e.g. 15-20 days), the routing table suddenly stops updating & then I have to enter the default route again to make it up. I am using Track 1 to track default route here. After primary link goes down, the Track is also going down but after coming the primary link up, the track is not coming up. So, I have to add the default route again to make it up.
View 2 Replies
View Related
Dec 12, 2011
i downloaded and transfered the new ios to the 2911, but no install routine started.
View 3 Replies
View Related
Nov 19, 2012
after installation of demo versions of 2900-SEC-TEMP & 2911-2921-SSLVPN-TEMP & rebooting the 2911 router I do not have access SSL commands.Show license indicates that 2900-SEC-TEMP & 2911-2921-SSL-TEMP licenses are active but NOT IN USE.
View 1 Replies
View Related
Apr 19, 2012
I am configuring my first 2911 using a SFP card but I dont know the interface name for this module.
show inv shows the card..
What is the interface number for this card or if it needs some config before it will recognize the interface?
View 6 Replies
View Related
Nov 15, 2011
I have a 2911 router. One interface is configured external (WAN) and two interfaces are configured on separate internal private subnets. What is the configuration to allow all traffic in both directions between the two internal subnets?
View 21 Replies
View Related
Nov 13, 2011
I've got two routers, Cisco 2911's with 15.1(4)M1 on one and 15.0(1)M5 on another.
I'm trying to set up ip sla for vrrp tracking but the commands seem gimped? I don't even have an option for ip sla <operation number>. All I've got is ip sla responder/server/key-chain.
View 1 Replies
View Related
Aug 2, 2012
we are in the planning phase for a network upgrade. We have two C2960 Switches connected via one (L2) Etherchannel (4x1 Gbit/s) which works very well. In the next phase we would like to upgrade our router to an 2911 series which has 3 gb interfaces. and indeed we would like to create an etherchannel as well. our plan is to use 2 of the 2911 to connect to the first 2960 switch and the one left to the other 2960. i think we will achieve some redundancy with this config.
View 6 Replies
View Related
Feb 19, 2013
connected DSL directly to 2900 series router , but as DSL public IP is not static (dynamic) its difficult to access Router when out of home, any other means to access router without static IP
View 2 Replies
View Related
May 8, 2011
I have 2 2911 routers that will be connected via fiber with an ethernet Gig handoff to each router. Each router will then be connected to local networks on a second ethernet interface on the router. I have always connected routers via serial connections so this is new to me. Outside of the usual ethernet interface addressing configuration, is there anything else that would need to be configured on the 2 routers?
View 1 Replies
View Related
Feb 29, 2012
i want to check if cisco2911-sec/k9 can support IP service image? what PAK(license) can be bought to activate the IP service feature set?
View 1 Replies
View Related