Cisco :: VOIP QoS Config Not Matching?
Aug 15, 2011my config and all the show's ive run sofar tryign to figure this out, but the policy map isnt matching the traffic for some reason
View 9 Replies
ADVERTISEMENT
Cisco Switching/Routing :: ASA 5505 Upload Config File Into Start-up Config
Apr 17, 2012If i connected the latop to brand new out of the box ASA 5505 through consloe cable and i have a config file on this laptop from other ASA5505, is there anyway i can upload that config file into startup-config of this new ASA5505 through console cable, without using TFTP or FTP?
View 5 Replies View RelatedCisco WAN :: 2811 - Startup Config Is Not Copying To Running Config
Nov 15, 2009I have a Cisco 2811 router and when I turn of the router the running config is lost. I have to the following to get the router running of the start-up config settings.
router#copy start-up running-config
Cisco :: CME Matching The Dial Peer?
Dec 7, 2012I believe that the Cisco Unified Communications Manager Express matches the outbound VoIP dial peer digit-by-digit, because:
1. when using the debug command it shows how it works digit-by-digit till it match a pattern
2. It says in the study guide ( If a match is found, the router immediately processes the call - chapter 6) so I understand its not en bloc
Cisco Firewall :: ASA 8.3 - NAT And Matching Global Statements?
Oct 3, 2012I have a Cisco ASA running 8.2 in routed mode.The ASA has three interfaces, inside, outside and DMZ. They connect to the following three networks:
Inside: 10.1.1.0/24
Outside: 10.1.2.0/24
DMZ: 100.1.1.0/24
I have the following dynamic PAT configuration:
nat (inside) 1 10.1.1.0 255.255.255.0
global (outside) 100.1.1.1
nat control is turned off.
By my understanding any traffic from the inside to outside interface will be PATted to 100.1.1.1. However, communications between inside and the DMZ will not be PATted, and should work with no problems.This seems to be corroborated by this document: [URL]Which states:"The adaptive security appliance translates an address when a NAT rule matches the traffic. If no NAT rule matches, processing for the packet continues."EDIT: I may have misunderstood the above statement.I found this guide to configuring NAT/PAT: [URL]It states:"When you specify a group of IP address(es) in a nat command, then you must perform NAT on that group of addresses when they access any lower or same security level interface; you must apply a global command with the same NAT ID on each interface, or use a static command. NAT is not required for that group when it accesses a higher security interface because to perform NAT from outside to inside you must create a separate nat command using the outside keyword. If you do apply outside NAT, then the NAT requirements preceding come into effect for that group of addresses when they access all higher security interfaces. Traffic identified by a static command is not affected."My problem is that packet tracer does not seem to bear me out. It tells me the packet is dropped due to "no matching global" when I source traffic from the inside interface and send it to the DMZ.
Cisco Firewall :: ASA 5505 Unable To See Matching ID Of 0
Sep 20, 2011I have a command line from ASA 5505 like below :
nat (inside) 0 access-list NO_NAT
The problem is I cannot see any matching ID of 0 at the (outside) like :
nat (outside) 0 xxxxxxxxxxxxx
Another problem is there is also no any access list with the name of NO_NAT.
Cisco :: (Received Encrypted Packet With No Matching SA / Dropping)
Jun 24, 2011Got to set up a site to site VPN to one in a clients office and we're struggling to get Phase 2 working, just seems to loop around saying "Received encrypted packet with no matching SA, dropping" which to me means the ACLs arent mirrored correctly?
View 3 Replies View RelatedCisco :: ASA5400 Interface Speed Not Matching From Both Sides
Mar 29, 2012i have firwall ASA5400, and the outside interface connected to internet router but i noticed that the interface speed in the outside interface is 1000M, but on the internet router is 115 M. so the interface in the router is highly utilized and also the firwall cpu highly utilized. [code]
View 0 Replies View RelatedCisco VPN :: ASA 5520 8.4.1 IPSec VPN No Matching Connection For ICMP
Jun 23, 2011I am trying to set up remote access vpn on an asa 5520 running 8.4.1. I have the ipsec group, policies, and ip pool set up. When I try and connect with the cisco vpn client I see the following in the logs. Deny icmp src outside:214.67.39.42 dst outside:24.252.51.73 (type 3, code 3) by access-group "acl_inbound". Do I need to put in some firewall rules to allow this traffice so that the VPN can connect?
View 9 Replies View RelatedCisco WAN :: 2500 - No Matching Route To Delete Error
May 15, 2012I am trying to remove a static route I added: [code]
I was practicing setting up static routing on three routers r2 (2600xm) connected to r1(2600xm) via T1 module cards on the serial ports. connected to r1 is an old 2500 router called PC.
I removed the static routes off r2 and PC but when I get to r2 which I am connecting to via console cable from another 2500 that I use for an access server I get the above error. all the IPs are just generic subnets I created to play around with static routing. I
Cisco VPN :: 2651 No Matching Crypto Map Entry For Remote Proxy
Jul 14, 2011ASA is the server, 2651 is the client. Phase 1 is negotiating, after entering XAUTH on the 2651, the ASA is showing:
Rejecting IPSec tunnel: no matching crypto map entry for remote proxy 10.250.2.0/255.255.255.0/0/0 local proxy 10.10.3.0/255.255.255.0/0/0 on interface Outside
Not sure what this means in this instance, the maps are setup the same as the article below. I guess I more expected that sort of error if this was a static tunnel and there was an ACL issue. I don't have a lot of knowledge on the Easy VPN with the ASA. [code]
Cisco Firewall :: 5505 - Order Of NAT Not Matching Correct Line ASA 8.4
Aug 23, 2012We are configuring a twice-nat to send traffic for scansafe, its on a asa5505 ve 8.4(3) on a remote location for the customes. The nat redirecion is working but we also have a VPN tunnel to the corporate network. Through the tunnel we need to reach a http server. The problem we are having is that when we add the scan-safe nat, all http traffic gets redirected to scansafe, includind the traffic to the http server on the corporate network.
10.2.1.0 ---<ASA5505> ---Internet,scansafe ---- <Corporate> --- 10.1.1.0
the http server is 10.1.1.75
the remote location network is 10.2.1.0/24
[Code].....
Cisco Switching/Routing :: 6500 - Route-map Not Used / ACL Not Matching Traffic
Jan 12, 2012I'm performing tests with following desired scenario: We have several remote offices, connected to our HQ via MPLS. In these remote offices, we have several vlan's. Each vlan has it's own ip-range. The MPLS cloud is routed, so we cannot switch our HQ vlan's to the remote offices. In this case, the client pc is in a guest vlan which allows him internet access. The uplink for this internet access is hosted in our HQ datacenter.
basic scheme:
client pc --> MPLS cloud (managed by ISP) --> 6500 switch LAN --> Checkpoint Firewall --> 6500 switch DMZ --> ASA Firewall
My test scheme:
Client pc is in a subnet A (guest vlan range office).
We receive this traffic on our first LAN 6500.
[Code].....
Cisco Switching/Routing :: 6509 Matching A Device To Bandwidth Consumption
Sep 18, 2012My company is composed of three different campuses, all with a similar network topology. We currently are experiencing high bandwidth on our serial interface at one of the campuses in particular. The network is composed of about 20 VLANS routed internally using a Cisco 6509. Traffic to the outside is PAT’d by an ASA 5510 and then forwarded through our edge router interface. Each VLAN is PAT’d to a specific public address.Due to the PAT, how would you recommend determining what specific private addresses are consuming our resources on the serial interface. When I look at our NMS, it reports the public address, but that only narrows it down to a VLAN. For example, all the devices in VLAN 6 are translated to 146.34.118.245, and 146.34.11.245 is a top talker.
View 1 Replies View RelatedCisco Routers :: RV 220W - Create Matching Inbound And Outbound Rules
May 15, 2012RV220W - I'm trying to create a one-to-one NAT connection to a PC on my network. I have 5 static IP's assigned by my ISP. I've gone through the step of 'registering' each IP in turn on the WAN port, and pinging that IP from an external device until it starts to respond, then I set the WAN IP back to the one I want to use to manage the device.
I think what I want to do is simple. I simply want to NAT ALL traffic hitting my 2nd IP address, let's call it 24.15.120.73 (not the real value) to 192.168.1.10 internally. I want ALL ports both UDP and TCP to be forwarded. This Server is then going to be one end of a VPN tunnel going to another site, but I don't want to complicate things with that for now. So I can't even seem to get one-to-one NAT working! I created the one-to-one NAT on the Advanced tab of the firewall and created rules for all ports for UDP and TCP, but I can still never 'see' the internal server from the Internet. Also, the server will not get out to the Internet (can't hit Google, etc).
Linksys Wireless Router :: EA4500 - Current Password Not Matching
Jul 2, 2012My router password is "55xxxxx"
But when I want to change the router password in CCC, it warns me "Current password is not match"
Cisco Application :: 4710 ACE Source-address Matching In Nested Class-maps Not Working
Sep 6, 2012Im having a (from google-fu) seemingly unique issue with load balancing. So for background, I am running the ACE 4710 device in "on a stick" mode, so I am using NAT and all that good stuff. I am also utilizing class maps and host header matching so I can save on IP space. [code]
Basically, as soon as I add that ACL_CLASS_beta.mainsite.com class map, all I get back from the ACE is RST packets and it comes back with an L7 LB Policy Miss.
It SEEMS like it should work, but it doesnt seem to like matching on those source addresses at all.
Cisco VPN :: VOIP QoS Over L2L VPN On ASA5505
Jan 17, 2012I have 4 remote sites that are using a ASA as thir firewall / router. I'm setting up a full mesh VPN between all the sites. One of the sites have a UC500 and the other sites access that UC over the VPN tunnels. I would like to set up some basic QoS for the VOIP traffic
The site that has the UC will have multiple vpn tunnles coming in from the remote sites. How will I do QoS with voice traffic on that site?
Cisco VPN :: 5540 - VoIP Over VPN
May 21, 2013I have a Cisco ASA 5540 running 8.2(5). When I dial a phone on the other of the the VPN the first time I get a blank after it rings(i.e when the voice mail get activated if someone picks the phone up), however works the second and consequent times i dial.
A little background. Two sites A and B connected via IPsec Tunnel. No problems in communication except for the VoIP issue. A Phone in on site A(172.17.168.x) and other on site B(192.168.103.x). Site A and Site B is connected via an IPsec tunnel on the Cisco ASA. First call fails. Second call works. Result of a packet trace is also the same. The UDP packet get drops when tried for the first time but subsequent ones pass.
First time
ASA5520# packet-tracer input inside udp 172.17.168.95 10000 192.168.3.103 10000
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 outside
[code].......
How To Do A VoIP Installation
Jul 2, 2012How can I do a VoIP Install/Repair?
View 3 Replies View RelatedCisco Packet Tracer VOIP
Sep 9, 2012having some issues. My basic VOIP network I can get to work no problem uner Vlan 1. But when I try tomake multiple basic networks to connect and put them in to diffrent Vlans such as Vlan 2, 3, 4 and conect them the phones now say configuering IP.
View 1 Replies View RelatedCisco :: Configuring 2960 For VoIP?
Mar 26, 2012We just purchased cisco 2960 for our VoIP needs and we are using polycom phones, and Phone and Computer will use same port. Since Polycom phones are capable working with CDP protocol and we are hoping to get another switch to expand VoIP network. I found easiest way of setting up each port is as following (from the cisco tutorial)
Switch#configure terminal
Switch(config)#mls qos
Switch(config)#interface fastethernet 0/1
Switch(config-if)#mls qos trust cos
Switch(config-if)#switchport voice vlan dot1p
Switch(config-if)#switchport voice vlan 10
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 20
Switch(config-if)#exit
My first question,when we are using switchport voice vlan dot1p ,I thought we instruct the switch port to use 802.1P priority tagging for voice traffic and to use the default native VLAN (VLAN 0) to carry all traffic.Do I still need to create a Vlan 20 for data and Vlan 10 for voice ?
Secondly,same tutorial adds these commands as well,Do you think for our set up, using those commands are feasible ?
Switch(config-if)#switchport priority extend trust
Switch(config-if)#priority-queue out
Switch(config-if)#spanning-tree portfast
Switch(config-if)#spanning-tree bpduguard enable
Switch(config-if)#exit
Thirdly,when we get another switch and do the same configuration for the second switch, can I use any port on Switch 1 as uplink without doing any configuration ?
Cisco :: Splitting Up VOIP Traffic?
Jun 26, 2012I have a little weird request at work. One of our offices would like to split the VOIP traffic. At that office we have a 10MB primary and 3MB backup circuit. Currently the phones are routing over the 10MB circuit. The General Manager would like to use the 3MB backup circuit for VOIP traffic. For the 3MB we have two T1 lines bundled together in a multilink. Configuration is bellow if needed
3MB Circuit
Cisco VPN :: 887 / VOIP Over VPN (30 Second Call Drops)
Dec 16, 2011I have a 887 setup as a EasyVPN server, and a 861 as an EasyVPN remote - network extension mode with split tunnelling.This works fine - I can ping and connect to machines across the tunnel.However if I setup a VOIP handset to connect across the tunnel it registers and calls work, but drop after 30secs....I know this is normally a firewall or nat problem, are easyvpns firewalled or natted?
View 9 Replies View RelatedCisco WAN :: SIP And VoIP Priority On 1921
Oct 25, 2012I am fairly new to Cisco, but am trying to configure a 1921 router to give higher priority to SIP/VoIP traffic (Port 5060) than everything else.The connection is only 4Mb and is getting hit hard by video streaming, I don't want to block this, just make a lower priority.Any ideas where I am going wrong?My current config is as below.The IP addresses have been changed for security reasons, but in reality are both in the same range, i.e. are both external IPs, so I am not sure if this is causing the problem. Do I need NAT for QoS to work?
View 6 Replies View RelatedCisco VPN :: 5505 VoIP Over VPN Traffic
Sep 26, 2012I am tasked to connect my VoIP phones from remote site to my corp site. Basically all remote phones will be registering into a VoIP server in corp site. I have a site to site vpn tunnel established already from remote site to corp site. My hardware includes the following:
-Cisco ASA 5505
-Cisco small business POE switch SF300 24p
-Avaya 2015p VoIP phones
Successfully Register remote VoIP phones to corporate VoIP server 10.30.18.55.I have already configured vlan1 10.30.15.0/24(inside lan) and vlan2 public int(outside Internet) which my dmz only allows 2 per my basic asa licensing.When I connect my phones and register it states "subnet conflict" unable to register.
Cisco Switches :: SGE2000p QoS For VoIP?
Dec 27, 2012I am trying to get QoS for my VoIP system setup on several SGE2000p switches and have got a question...How do I define the ACL for RTP? As far as I can tell it will not let me enter a UDP port range for the RTP traffic... And I cant imagine creating rules for each port would be very effective either. So, how can I define an ACL to cover the RTP traffic so I can classify it?
View 4 Replies View RelatedDelay With VOIP Calls?
Jan 24, 2011I am encountering delays when making any calls using VOIP. I understand that there is always a delay using VOIP but not as much. I've done a bandwidth test on my network and everything seems to be Ok, we have 4 T1s with 55 Reps using it. There is nothing choking up the network.
View 3 Replies View RelatedSelecting A Router For VOIP?
Apr 6, 2012Trying to select a router that will work well networking a computer with a nettalk duo, on a limited bandwidth connection: .3/3Mbps up/down. From what little I've been able to find on this, QoS bandwidth control seems critical, yet the list of recommended routers from Nettalk seems to favor routers that don't have this feature. On the other hand, the list apparently hasn't been updated in a year and a half.
View 5 Replies View RelatedVOIP IP Phone Only Working Through ICS?
Feb 10, 2011Recently at my company we have started using Polycom i335 IP Phones from 8x8 inc, the thing is that while trying to use it directly through a switch it does not register with the server and I get a "url call is disabled" msg on the LCD of the Polycom. On that same switch I am using an Aastra 6755i IP phone, it is working absolutely fine, although it is using the same technology and ports.Now if I connect my laptop via wireless or if I connect a PC through wire and use ICS to share the internet and connect the Polycom to the shared Ethernet port, the Polycom works fine! On the same network Vonage works fine as well. but this Polycom only and only works via ICS?
View 1 Replies View RelatedConnect Two Laptops Via VOIP?
Mar 17, 2011How can I connect two laptops via VOIP?
View 1 Replies View RelatedVoIP Box Which Has From 3 To 10 Phone Ports?
Aug 5, 2011Any VoIP box which has from 3 to 10 phone ports?I'm sourcing the box for a business that wants to connect about 8 phones to the box, then have the calls terminated on our partitioned platform hosted by a third party.
View 3 Replies View RelatedD-Link DIR-615 :: Cannot Use A VoIP Application?
Dec 9, 2010I have a Voip application on my Windows Vista Home Premium. It is called Reliance iCall. I was not able to call from this application for a few months and so i thought there was something wrong with it. But just yesterday i thought of connecting my modem directly to the desktop and the call went through without any problem. It is only when i connect modem to computer through router that this application does not does not do anything.
What could be in this router that is blocking the calls from making a connection? There is also no setting to configure in this VoIP application. I dont know what to do. And also dont want to keep on switching modem's ethernet cable from router to computer and back.