Cisco VPN :: 1941 Disappearing IPsec Routes With RRI

Aug 26, 2012

I am trying to set up a pair of 1941 routers in a HA configuration to act as L2L VPN gateways. The active router of the pair should distribute routes to the remote destinations using OSPF to internal routers. The VPN part is working fine and the routers are correctly advertising routes to internal hosts, however my problem is that when an IPsec sessions disconnect, the routes disappear and therefore internal hosts cannot reestablish a connection. If the remote end establishes a connection, the routes appear again and connectivity is restored.
 
My setup is as follows: (ASA) --> (pvpn01 & pvpn02 HA pair) --> (internet) --> (remote peer)
 
The other router in the pair has exactly the same config except with different interface IPs. The remote end is configured to talk to the HA address
91.216.255.248.The VPN routers are both running IOS version 15.0(1r)M9.
 
When I initially boot the routers, the route for 192.168.66.0/24 appears in 'show crypto route', and is advertised to neighboring routers. If I ping an address on that network an SA is established and stays active as long as there is traffic flowing. pvpn02#show crypto  route
 
If I then stop traffic flowing over the tunnel and wait until the IPsec SA lifetime is expired, the route is deleted from the system routing table and therefore not distributed by OSPF. The result is that internal hosts cannot reestablish the tunnel as the other routers have no route to the 192.168.66.0/24 network.
 
Is this a bug, or is there another way to get the RRI routes to persist on the active router?

View 2 Replies


ADVERTISEMENT

Cisco Switching/Routing :: 1941 / Policy Based Routing With Two Default Routes

Jun 24, 2012

I have a 1941 router configured for Policy based routing with two ISPs.Two static default routes configured to point the gateways of respoective ISPs with same metric.But the problem is, packets are going throug the one ISP only while doing traceroute.
 
N/W connectivity:
 
ISP1----->                <----------------------> LAN1   
               |  Router |
ISP------->                <----------------------> LAN 2
 
Below is my configuration :
 
Current configuration : 5958 bytes
!
! Last configuration change at 05:18:56 UTC Mon Jun 25 2012
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption

[code]....

View 26 Replies View Related

Cisco WAN :: Adding IPSec To 1941 Router?

Jan 17, 2013

I need to unlock IPSec to my 1941 router but I'm not sure which license(s) to purchase.

View 1 Replies View Related

Cisco WAN :: 1941 - Multiple VRF BGP / GRE / IPsec Failing

May 17, 2011

I'm trying to configure a Cisco 1941 to connect to multiple Amazon VPC instances. Each VPC instance brings up 2 x IPsec over GRE tunnels with BGP in to the EC2 cloud and enables flat extension of the corporate LAN. Basically. you can spin up EC2 instances in a private subnet and route to them across the VPC link from the corporate LAN.
 
The Amazon configuration is templated and not designed to support multiple instances on one customer access gateway - however, I want to overcome this and find a technical solution around bringing up a second physical router. I've got VRF configured and working for the first instance, but when we add a second VRF to the configuration IPsec fails. The second VRF is essentially identical to the first.
 
We're potentially looking at a licensing issue with IOS 15.x, the version we're running is... 

ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Permanent     securityk9
data          None          None          None

[Code]....
 
However, the IPsec configuration is complete and all keychains etc. are in place as they should be.

View 13 Replies View Related

Cisco Security :: 1941 - Unable To IPsec

Oct 10, 2012

I did purchase a router 1941 universal k9 but i can not do ipsec on it, i took a smart net for that router in order to have or download ipsec on it.

View 1 Replies View Related

Cisco WAN :: 1941 ADSL Fail Over To 3G HWIC With IPSEC VPN

Jul 23, 2012

The setup is a S2S VPN with failover to 3G HWIC in a Cisco 1941 however the IPSEC tunnel needs to remain up through 3G if ADSL fails.The failover works ok, however when plugging ADSL back in, the - "sh crypto session" shows both dialer 0, and dialer 1 with the crypto map session to the other side of the VPN and either side is now not pingable.The NoIP DDNS updater client runs on a server in the network and all IP resolution to host1,host2 works ok (other side of VPN is Cisco 1921 with ADSL HWIC and 3G HWIC). [code]

View 5 Replies View Related

Cisco Switching/Routing :: Router 1941 But Can't Do Ipsec

Oct 10, 2012

I did have a router cisco 1941 but can not do ipsec with it,i did take a smart net.

View 3 Replies View Related

Cisco Switching/Routing :: 1941 / IPSec Tunnel Up No Traffic?

Mar 7, 2013

I have an IPSec tunnel configured on my Cisco 1941. The other device is an ZyXEL router.I can see the tunnel is up but there is no traffic.This comes out the show crypto ipsec sa

interface: Dialer1
Crypto map tag: CMAP_AVW, local addr 10.10.10.89
   protected vrf: (none)
   local  ident (addr/mask/prot/port): (192.168.200.0/255.255.255.0/0/0)
   remote ident (addr/mask/prot/port): (192.168.150.0/255.255.255.0/0/0)
   current_peer 20.20.20.161 port 500

[code]....

View 3 Replies View Related

Cisco WAN :: EIGRP 101 - Prefer External Routes Versus Internal Routes?

Apr 8, 2011

Is there a way in EIGRP to prefer external routes versus internal routes. EIGRP always picks up internal routes as long as they are available, no matter if external routes have better metric. Our Scenario is that we have DMVPN hub and spoke topology running EIGRP 101. The Core routers also on EIGRP 101 prefer EIGRP 101 routes. We have the new MPLS network running BGP and redistributing these BGP routes into EIGRP 101. The core routers prefer EIGRP 101 routes (internal) to redistributed BGP (external) routes.

View 9 Replies View Related

Cisco Switching/Routing :: 1941 / K9 Unable To Ping Over Site To Site IPSEC

Jul 12, 2012

I am trying to set up a site to site ipsec connection. AT site A, I have Vlan's 652-10.55.216.0/24, Vlan653 -10.55.217.0/24, Vlan 654-10.55.217.0/24 and Vlan655-10.55.219.0/24 and at site B, Vlan650-10.55.214.0/24 and Vlan651-10.55.215.0/24.The problem is that I am unable to get any associations when i do a "sh crypto isakmp sa"/"sh crypto ipsec sa" on either router at each site.I am also unable to ping by pluging in a laptop into the site at each site. Laptop at site A is set to access vlan 655 and laptop at site B is set to acess vlan 651. I can ping all the devices from one end to the other.I have turned on debug crypto isakmp, debug crypto ipsec, debug crypto ipsec errors but dont get anything at all as output.I have attached the sh run for each router Cisco (1941/K9) and switch (Catalyst 3750) at each site.

View 4 Replies View Related

Cisco WAN :: 1941 Router - Enable IPSec Virtual Tunnel Interface With Tunnel Mode IPv4

Sep 23, 2012

I'm in process of purchasing a new Cisco routers for our branches that will be used primary to enable IPSec virtual tunnel interfce with "tunnel mode ipsec ipv4". does the default IOS IP Base supports this feature? or i need to purchase DATA license or SECURITY license?

View 4 Replies View Related

Keep A Network From Disappearing In XP?

Mar 23, 2012

When I map a network drive it disappears every time I reboot my computer how I can keep it from disappearing? I am running Windows XP Professional

View 2 Replies View Related

Cisco VPN :: Pix 501 Disappearing Access Rules

Oct 5, 2011

I have a Pix 501 vs. 6.3(3).  I have made changes to some Access Rules that made other rules disappear.  When I try to recreate them I get an error that includes "Possible duplicate entry" statement.
 
The rule appears to be active, so how can I resurrect it in my Access Rule list?

View 16 Replies View Related

Hosts File Disappearing?

Jun 7, 2011

We have a modified hosts file on each of the computers here at work. This way we can have multi servers, in multi locations that can all be used by everyone for email & our finance program.However, there is one user who the hosts file keeps disappearing. Over the last 2 days it has disappeared 3 times (at least).The user has ran the symantec corp antivirus (at least a couple of times). All risks found have been quarentined and deleted, ran again and nothing found. Also ran Malwarebytes, which was clean. And ran ComboFix.At this point the hosts file has been fixed after running ComboFix.

View 14 Replies View Related

Network Disappearing And Disconnecting Constantly

Dec 3, 2012

I have had the virgin media superhub on 30mb broadband for about a month and over the last week I have been disconnecting from my network up to as much as 3 or 4 times a minute or sometimes once in five minutes and other times it just vanishes from the network list for about 30 seconds then re-appears, sometimes when I disconnect it re-connects almost instantly other times I have to wait about a minute or sometimes even longer even though I can permanently see my neighbours network and my laptop does not have this problem.. I payed �50 for a new wireless card to try and fix the problem and it was fine for a few weeks now it is the same. Restarting the router makes no difference and this is happening all constantly over the last week without fail, i have tried updating my wireless drivers and using different wireless cards.

View 6 Replies View Related

Icon Constantly Disappearing Then Reappearing Within A Second?

May 9, 2012

It's been doing this for over 7 or 8 hours now. And no, there's no network connection, that's what the problem is here. This is a Windows XP desktop.Basically what it's doing is within a second, this icon disappears from the taskbar, then reappears, over and over again: When I hover over it, it gives me a message about not being connected. I can't get the exact message screencapped and I can hardly even read it, it disappears too quickly.Sometimes it gives me this instead, and the connection works, but only for as long as this icon is there:But it disappears too quickly for me to load any pages completely, so they always end up being incomplete pages. When I hover over this one, it says acquiring network address.When I click repair, it gets stuck on "renewing IP address" every time, without fail.

Previously the internet connection would drop occasionally, but restarting the computer has always brought it back. I have tried this countless times by now, I have tried clicking repair, I have tried resetting the router, I have tried manually removing the connection then reconnecting to it, I have tried command prompt and running through the ipconfig flushdns, release, and renew commands, I have tried logging on as a different user account, I have tried uninstalling my wireless adapter software then reinstalling it, I have tried using a different adapter [I get a different error with that one], I have ran a scan with Malwarebytes' Anti-Malware then retried all these things, but that didn't fix it either. If my brother wasn't asleep I'd be wiping the hard drive by now as a last resort. And I will be doing this first thing in the morning if it isn't fixed.

There is one other computer on the wireless network, and its connection never drops. Ever. It's a Windows 7 laptop. There are two other computers in the house, but they both connect using the ethernet cable, and those never drop, either. The two Wiis, the Xbox 360, and the 3DS also connect wirelessly, and one of the Wiis drops occasionally as well -- and it's not connecting right now, either.There is one more PC in the house, which also runs Windows XP, but I haven't gotten it to connect in weeks and I've pretty much given up on it. It'd be nice to get that to run, too, since I have to share this computer, but it's 7 years old, it's just too old and is stuck on "acquiring network address" with either adapter, if I'm remembering right.

This is everything I know. This problem is still occurring, and it just occurred randomly today, while the computer wasn't even in use. I can connect to the internet with a wired connection, but stretching the wire across the house isn't something the homeowner wants me to do, so I can't keep it permanently, as much as I desperately want to.I looked around at a few other threads and there was some sort of Wifi program I can install? But it won't install. Or rather, the .net framework is what's not installing. So I guess I can't use that. Hope it makes finding the problem still possible though, this is the only computer I have left since my other one won't connect anymore either.

View 2 Replies View Related

Wireless Physical Adapter Keeps Disappearing?

Aug 6, 2011

I've had a strange problem with my laptop for quite a while now. From time to time, my entire wi-fi capability vanishes. The green wi-fi light goes off and my Intel PROset/Wireless tells me that I do not have a wireless physical adapter installed.From there, I go to Network Connections. Sometimes, I can hit "repair" under Local Area Connection 3 and after some struggles, the green light will come back on. However, sometimes when I go to Network Connections, I cannot repair the Local Area Connection, because the 1394 Connection is no longer even listed and, from all ways of searching, doesn't even exist on my laptop.In that case, I have to restart my laptop. Sometimes, a restart works and the wi-fi capability magically returns. Sometimes a restart does not work, and I have to power off, wait, and power back on my laptop. And sometimes, I have to keep rebooting SEVERAL TIMES in a row before I get wi-fi back.

I'm not sure what to do for it, nothing has changed with the router or the location of the router. My laptop will be fine for a couple of weeks, or I may lose wi-fi ability a couple of times in a week or so. However, at the moment, I lose my wi-fi adapter frequently, often every two minutes to perhaps every ten minutes. It has "acted up" this badly only once before (probably a month ago), and I just keep rebooting for a couple of days until everything seemed to calm down. However, I can't keep just restarting my laptop every five minutes

View 14 Replies View Related

Gateway NV53 Wireless Adapter Disappearing?

Sep 24, 2011

I'm trying to diagnose & repair a problem with the built in wireless adapter on a gateway NV53. The OS is 64 bit Win 7. The computer isn't mine, I was just trying to repair it for a friend. Initially, the wifi worked fine; the disk drive seemed to have a bad laser or something, sometimes there were problems with printers, it was slow to start, etc., so I thought I would just backup everything, "restore to factory defaults" (reformat & reinstall OS from hidden partition), then copy everything back / reinstall programs. I wanted to reformat just to clean it up, etc. After reformatting and updating windows to the latest version, it seemed to work fine (I hadn't tested those other problems, they are unimportant). However, after the computer is on for awhile - anywhere from a few minutes to a few hours - the wireless adapter suddenly can't see any networks. There are several networks in the area, so I know it isn't a problem with my router (also, other comps. can see them all still) After awhile longer, the wireless adapter disappears completely from device manager. I think that when it initially loses track of all the networks, the mouse, typing, etc. slow down and have jerky movement for a minute (may be incidental). When I restart the computer, the adapter works fine again, but of course, only for awhile.

Things I've tried:

-Setting the power settings on the adapter (don't allow power saving to turn this off.. box)
-reformatting
-updating drivers
-updating windows
-running antivirus
-uninstalling the antivirus

View 1 Replies View Related

Networking :: Does MacBook Pro Keep Disappearing From Windows Network OSx 10.5.8

Apr 26, 2011

Running OS X 10.5.8 on an old MacBook Pro on a wireless network. It might be relevant that I recently upgraded the wireless router and the DHCP-assigned IP addresses changed. Before that, everything worked reasonably well.

I can connect to the MBP from Windows 7 computers on the network, logging in with a user name and password, and access the files there as expected.

But the MBP disappears from Windows Explorer after a few minutes. I can usually add it back (always checking the box to remember it) but it just keeps disappearing. Sometimes when it disappears, I can't add it back and when I try, Windows Explorer says, "can't find."

How can I get this share to stick?

View 1 Replies View Related

Wifi Disappearing Refusing Authentication From Multiple Devices

Aug 17, 2012

The original network had a Zylex router, Netgear Switch. There was 2 pc's, one XP and Win 7. There is also 3 tills connected too. There is VPN network connected too. This emits a wireless signal to connect to a scanning gun and is also used to administrate the entire network. I was told by the Administrator of that network that it shouldn't interfere with the wifi network.

The job I was requested to do was to install 3 new wall plates as the Win 7 pc was using a Belkin wireless adapter. There was 2 put inside the office where the XP and Win7 pc's are located. The 3rd was just outside the office.

Now all the ethernet connections work 100%. The wifi is another story though. It will show up in the connect too, when you try connect it will disappear/no response from AP/connect then disappear, these are random too. No order to when each is error is displayed. Even when I put in another router the exact same issues happen.

I have tried to connect to both routers wifi when it wasn't plugged into the switch. Just the router's turned on with no cables plugged in separately of course, no joy same issue with both.

View 2 Replies View Related

D-Link DIR-615 :: Wireless Network Disappearing Off Available Networks List?

Dec 13, 2011

I have new DIR-615 D-link router. Since we installed it the network has disappeared randomly off the available networks list, and when I try and open Google Chrome it says there's DNS error. Troubleshooting through windows networks doesn't work because it can't find any problems since my network doesn't even show up on the list. We've even done a factory reset and the problem persists, and it does this about once a day. Resetting the router temporarily fixes the problem. This problem is happening on all 3 laptops in our home, two of which run windows 7 and one which runs XP.

View 1 Replies View Related

Cisco Linksys E3000 Wireless Router / Network Places Keep Disappearing?

Jun 25, 2011

Desktop
Windows 7 64-bit -> cable directly to router
Laptop
Windows 7 64-bit -> wireless
Laptop
Windows 7 64-bit -> wireless
Playstation 3
-> Wireless
Xbox 360
LAN cable from router to 360

Scientific Atlanta 2203C modem to a Cisco Linksys E3000 wireless router.Ok, so if I turn everything on I can see all computers from all computers, but after a few hours/days (random time) everything disappears, and I have to unplug the router and then everything is back. Is there a way to stop this, and just have everything just be there all the time?

Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:UsersJohn>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : John-PC
Primary Dns Suffix . . . . . . . :

[code]....

View 3 Replies View Related

Zylex Router - Wifi Disappearing / Refusing Authentication From Multiple Devices?

Sep 15, 2012

The original network had a Zylex router, Netgear Switch. There was 2 pc's, one XP and Win 7. There is also 3 tills connected too.There is VPN network connected too. This emits a wireless signal to connect to a scanning gun and is also used to administrate the entire network. I was told by the Administrator of that network that it shouldn't interfere with the wifi network.The job I was requested to do was to install 3 new wall plates as the Win 7 pc was using a Belkin wireless adapter. There was 2 put inside the office where the XP and Win7 pc's are located. The 3rd was just outside the office.Now all the ethernet connections work 100%. The wifi is another story though. It will show up in the connect too, when you try connect it will disappear/no response from AP/connect then disappear, these are random too. No order to when each is error is displayed. Even when I put in another router the exact same issues happen.I have tried to connect to both routers wifi when it wasn't plugged into the switch. Just the router's turned on with no cables plugged in separately of course, no joy same issue with both.

View 2 Replies View Related

Linksys Wireless Router :: Ea4500 Wifi Signal Disappearing For Few Seconds

May 6, 2012

My new EA4500 works fine all day, both wireless and wifi, on both bands, but nearly every evening, the wifi signal disappears, as shown on a wifi app for my smart phone, but not on Issid on my laptop, strangely, and my PC laptop and iPad both disconnect, then reconnect.  Smart phone disconnects too.  It isn't like the signal drops in strength, it just goes away! I have tried various settings on modes, and bandwidths, I am using different SSID's on each band, WPA2 security with a long non-dictionary passphrase and MAC filtering.  The hardwire connection works great at 30+ Mbps even when the wifi is disappearing from the wifi scanner and the wifi connections are dropping.  In other words, the cable connection/modem is working fine, but the wifi radio signal stops or the SSID drops off the signal.  I really can't tell, but I know it is becoming very frustrating.  The old WRT54GS works fine if I put it back on-line in the evening when these things start to happen. 
 
I have turned off everything I can think of in the house that transmits or might transmit, in case it is an interference thing.  I have tried disabling the 5 GHz side, since I can't see what is happening on that band, and the last thing I tried was changing the MTU from 1500 to 1400.  So far, the past evening, it was okay, but I am not confident it will stay that way. 

View 6 Replies View Related

Dell :: Studio 1537 Wireless 370 - Bluetooth Stereo Headphones Disappearing

Dec 26, 2009

I have problem with using my dell studio 1537 with platronics pulsar 260 bluetooth stereo headphones. After some time listening music bluetooth just disappearing from system, bluetooth indicator is on and not reacting for wireless switch. My OS is Win7x64, mini-card driver 6.2.0.9000, bt audio driver 6.2.0.9500. With other bluetooth functions, such as bt mouse or pda sync, i have no problems.

View 21 Replies View Related

Cisco Routers :: Can RV042G IPSec VPN Support Apple IOS IPSec VPN

Apr 29, 2013

I tried any type of combination and just couldn't make it works.  Only PPTP works well. Whether Apple iOS IPSec VPN is supported or not?

View 11 Replies View Related

Cisco :: BGP Routes Not In Routing Table?

Feb 4, 2013

We have a BGP / OSPF configuration as shown in the topology picture. When the connection towards Internet is taken down, we expect the traffic to be forwarded toward WAN 2 (preferred) or WAN 1. The problem is that the BGP learned routes disappears when the Internet connection is taken down. The IP routing table on R2 only shows internal networks and the networks between R2 and WAN 1 and 2. No routes to internet is shown. We run "show ip bgp neighbors <ip-to-wan-1-router> received-routes" it contain internet routes. And when we run "show ip bgp neighbors <ip-to-wan-1-router> routes" it contains no routes at all.

View 2 Replies View Related

Cisco WAN :: How Many Routes Support 7206VXR With NPE-G2

Jul 24, 2011

How many routes support 7206VXR with NPE-G2?

View 2 Replies View Related

Cisco WAN :: How Many IP Routes Does 3825 Support

Jan 23, 2011

I want to know the number of routes supported by CISCO3825-HSEC/K9(512MB DRAM).

View 2 Replies View Related

Cisco VPN :: ASA 5510 Not Advertising Routes

Feb 15, 2011

I have an ASA 5510 that is configured for a remote access VPN
 
When users login, they are given an address from a locally defined pool (172.16.101.1-254 /24). Users can log in fine.
 
I have enabled EIGRP on the ASA and I have configured the following to be advertised:
 
1. 0.0.0.0 (default)
2. 172.16.100.0 /24 (dmz network)
3. 172.16.101.0 /24 (vpn pool)
 
I have also enabled reverse-route injection.
 
The problem I am having is that the VPN pool network is not being advertised via EIGRP, but the other networks are.
 
The other issue I am having is that even though I have created access-lists that allow the inside network (10.0.0.0) to ping the DMZ interface (172.16.101.1) on the ASA, the ASA is not allowing it. I have also created an ACL that allows the DMZ interface to ping inside, but this fails as well.

View 1 Replies View Related

Cisco VPN :: ASA 8.4(3) Dynamic VPN And Static Routes?

May 20, 2012

I am running an ASA with 8.4(3) and am trying to setup a dynamic VPN tunnel.  We are having a business reason to establish a VPN tunnel to customers who do not have nailed down IP addresses.  Now I found a number of documents that outline the steps involved.  It seems the basic steps were to Establish a regular tunnelAdd dynamic crypto mapAssign the dynamic crypto map to the tunnel created under step 1. While this sounds pretty straight forward and simple, while prepping for doing just this I hot a road block while thinking it through. In order for my ASA to put anything into the tunnel it has to have a route to the remote network pointing at my VPN peer at the  end of the tunnel.  How do I do this in a dynamic tunnel?  How do I add a dynamic route so the ASA knows which tunnel to stuff the traffic into?  How do I stop the traffic from just being send to the Internet?

View 1 Replies View Related

Cisco WAN :: Setting Up Routes On ASA 5505?

Dec 12, 2012

I'm trying to set up a Cisco ASA 5505. I'm mainly setting things up through ASDM but I also have console access. Right now while I'm setting it up I have the outside/Vlan2 port attached to my existing network and a laptop connected to the inside/Vlan1 port. More info about that:
 
interface Vlan1
nameif inside
security-level 100

[Code]....

Before I added that last "0.0.0.0" entry, the ASA would not see anything on the internet. Now I can ping any external IP address from the router's console. However, the laptop I have connected to the 'inside' port still cannot reach any IP address outside the 10.10.153.0 network. Every time I try to add a similar route for the 'inside' interface, I get the following error: "You have another route configured for this network any which has same gateway 10.10.152.1 and same metric 1. You cannot add a duplicate route." I know I'm misunderstanding something here. In order to make devices connected to the 'inside' port connect to the internet, I need to set up a new route that will direct these devices to 10.10.152.1, right?

View 9 Replies View Related

Cisco WAN :: ASR 1000 With 4M Routes Support

Jul 5, 2011

For ASR1000 to support 4M routes, RP2 must be used. 
 
1) RP2 need to have 16GB memory in order to support 4M routes?
2) Need to use ESP20/40 together with RP2?
3) If RP2 + ESP10, supporting route table size down to 1M?
4) 4M routes is shared for both IPv4 an IPv6?
5) SIP card will affect route table size?

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved