For some test in my lab , I ordered on e-bay a AIM-VPN board , they guy told me that it work in a C1841.When I compare to the one I have in my C2621 , they look equal.On both pcb I can read : CN6I280AAA
View 3 RepliesI'm having problem on my 1841 it won't boot. No response on console but the led lights seems to be normal.I tried removing the CF then turn it on again to see if the router will go to rommon but didn't happen. I did try using another pc thinking the com1 is faulty but still no response on console nor rommon not showing up.
View 15 Replies View RelatedI have C1841 as EZVPN server and remote C1841 as EZVPN client. Connection between them is providers L3 VPN, so it is not over the internet. IPSec tunnels go up with no problem. Client is NEM. Problem is that traffic won't go via IPSec. No packets are encapsulated. I want all trafiic to go via tunnel, no split tunneling here. On client side Dialer0 is outside interface, since L3 VPN is over ADSL. On server's side I have only one interface connected to corporate network. Peer address is server's loopback address.
After IPSec is up, server gets remote subnets as static routes and redistribute them to OSPF. That part works fine, but remote site's traffic doesn't flow over IPSec to the coorporate LAN.
Could be TCP MSS or something like that?
Configuration:
EZVPN SERVER:
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 2
I have a cisco 1841 router and a cisco 2900xl switch. I am trying to get my ACL's to work, but when ever I do an extened acl and let certain one in (80,443,21,etc) my computer gets an internet error saying it cannot conntact the dns server. I've tried severl ways to fix it, but cannot seem to get it to work.
Right now i just have access-list 1 on. Eventually I would like to have only "Apple" and 101 on.
Current configuration : 2050 bytes
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption(code)
I've tried to upgrade IOS on C1841 router (Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3); System image file is "flash:c1841-ipbase-mz.124-15.T7.bin". using CCP2.5 and couldn't do it as CCP was coming with errors for any IOS. I can't install the latest 15.1 or 15.2 as there is not enough space on flash, it has 192M/64M. So I tried 12.4(24)T8 such as c1841-advipservicesk9-mz.124-24.T8.bin; c1841-advsecurityk9-mz.124-24.T8.bin; c1841-adventerprisek9-mz.124-24.T8.bin but CCP was showing loading errors.So I copied c1841-advipservicesk9-mz.124-24.T8.bin software to flash manually and reloaded the router, now it shows this IOS, but when I start CCP it shows these errors:
-License feature cannot be discovered. This and associated features may not function correctly.
-Static Route feature cannot be discovered. This and associated features may not function correctly.
-Switch Port feature cannot be discovered. This and associated features may not function correctly.
I'm not sure now if that new IOS installed correctly or there is a bug in CCP.I suppose that CCP shouln't show any errors regarding IOS upgrade and after that.Is there a matrix or some kind of pattern for that router IOS upgrade?Should I use a series of upgrades and I can't jump to any IOS?
i am setting a C1841 to sync its time with another C1841 over net. here is my setting with dont work !
SERVER:
clock set 23:01:00 26 MAY 2012
ntp master 5
ntp source f0/1
[Code].....
I'm having trouble connecting to my IPS module via ASDM and web browser after configuring an IP address for the IPS module via CLI.The 5510's management port is plugged into our switch, and a VLAN is assigned at the switchport. I gave the IPS module an IP address in the same subnet (DG as well) as the 5510's management port, assuming the IPS module would communicate over the 5510's management port. Is this not right? I'm limited to the CLI for now, and would really like to access the IPS module through the ASDM.
View 6 Replies View Relatedi bought new RF Cisco 7204VXR NPE-G1. As soon i enable OC3 module ( PA-POS-OC3SMI) CPU of the router shoot to 100%, and if i reboot the router, it wont comeback not even on Console. I had to remove the POS card and then boot router and then hot insert the module.
so i put the command
int pos 4/0
loopback internal
as soon igave this command, CPU dropped down to normal. Whats the deal here? now i need to activate the circuit on this POS interface, but as soon i remove loopback internal command , CPU shoots to 100% Although CPU sorted dont show any process causing it.
[Code]....
I want to add module of WS-X6716-10GE(-3C). The type of 6500 isCisco WS-c6509-e (r7000) processor (revision 1.2).Can I add this module to this type of 6500?Do I need to reset the 6500 in order to the 6500 receive the module?
View 2 Replies View RelatedI have the situation with my new Cisco 2951 router. It has only one module on board - SM-D-ES3-48-P. I don't know what is wrong but I can't see any information about this module. When I connect my laptop to any port it's become green, but it's still green even after I disconnect PC from this port. Sh ip int brief command shows only built-in gigabit interfaces. I also connect my second PC to the router by console to monitor any changes when I connect or disconnect laptop to the module's ports. [code]
View 3 Replies View RelatedWill Cisco LMS Prime 4.1 be getting a map module, so you are able to see a graphical map of up and down status of devices? I know the topology map is a module within LMS, but what would be nice to see is a graphical map, where you are able to manipulate the icons to place them on that status map.
View 2 Replies View RelatedWat will be the default memory and hard disk for SM-SRE-710-K9 and wat will be the maximum support for this module.
View 1 Replies View RelatedI have cluster of firewalls which inclueds AIP module and are in production. Due to some issue modules could not be activated. Now I need to activate and udate signature of them. So whether I can do all this activity without effecting my production (Zero downtime).
View 5 Replies View RelatedI know to add a user in the service engine is (config)#user Aileen create but how would you remove it. I tried no before user to negate the command but i do #sh users and the username is still listed.
View 1 Replies View RelatedI have a Hwic 3G-GSM module in an 1841 router. The sim card in the module is configured on an APN no username and password. I have checked all the config from a working router 1841 plus the same module and same vendor Sim card on the APN and all is working. I have configured the second router but it doesn't want to connect at all. If i put the Sim card in a standard 3G modem life is good, and I can connect to the APN and get the static IP address. When I'm trying to initiate the connection from the 1841 the Sim card wont connect.
My config to debug:
sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 10.20.20.1 YES NVRAM up up
FastEthernet0/1 unassigned YES NVRAM up up
Cellular0/1/0 unassigned YES NVRAM up up
NVI0 10.20.20.1 YES unset up up
[ code] ...........
I'm not sure if the cellular card is calling the wrong script (d0efault-d0ials0crip) instead of the gsm one configured.
We have a cisco 7204 VXR and would like to know the module which has two fastethernet port. We tried a PA-2FEISL-TX but it did not work.
View 1 Replies View RelatedI have Cisco ASA 5510 with CSC-SSM-10. ASA anti-virus service can not update the Base and Plus lisense. No Activation Code required for renewal. I go to "Administration> Product License" in the CSC SSM console and click "Check Status Online" to get the latest expiration date.In the module on the Check Status Online has reported the following error when: Base License status could not be checked because of a license server failure. "Please try again later", "Plus License status could not be checked because of a license server failure. Please try again later". UPDATE manual virus database can be seen in the latest available version, can not be upgraded because the service expired.
View 2 Replies View Relatedif the 7600-SIP-200 supported in VSS mode or not ?
I have configured to Cisco Catalyst 6513 as VSS, both of them have the 7600-SIP-200 module, before converting them to VSS I was able to work with the 7600-SIP-200 module, but after I did convert them to VSS, both modules didn't work.
here is the show module output, after VSS conversion:
VSS1#show module Mod Ports Card Type Model Serial No.--- ----- -------------------------------------- ------------------ ----------- 1 0 4-subslot SPA Interface Processor-200 7600-SIP-200 JAE14500GMT 7 5 Supervisor Engine 720 10GE
[Code].....
how to show all the module on the ASR 1004?
View 4 Replies View RelatedDoes the ASR-1000 accept an HWIC module, or must one go to a SIP/SPA for all modules?
View 1 Replies View RelatedWe have installed 5585-x in active/active mode with transparent firewall. We have created two virtual sersors for vs1 and vs2 in IPS module and linked with ASA context C1(vs1), C2(vs2) and admin(vs0).
As firewall is working in transparent mode, we have bridge IP address for context C1 10.1.1.1 and for context C2 10.2.2.1.
I have added default routed for context C1 10.1.1.2 .It is in the outside of asa and SVI on switch.For the other context C2 10.2.2.2.
IP address range for the IPS module and what should be the gateway for IPS module.AS the traffic is coming from outside and going to inside interface of ASA.
What module is used to push configurations in LMS 3.2.1?
View 1 Replies View RelatedI have checked on Cisco.com and as per a module support document for ISR's G2, the NM-1CE1TI-PRI module is not supported on new ISR's.
Grateful if more clarification could be obtained about the above.
Will be router not detect the module when inserted in the chassis?
We want to implement HSRP between two 3945 ISRs:
RouterModelIOSModuleR1Cisco 3945 Integrated Service
Routerc3900-universalk9-mz.SPA.151-1.T.binNME-AIR-WLC12-K9
R2Cisco 3945 Integrated Service
Routerc3900-universalk9-mz.SPA.151-4.M1.binNME-AIR-WLC25-K9
The issue that we are experimenting is that, although the module's interfaces are up and HSRP in correctly configured, the show standby summary displays that the Active router is local in both routers. We also have some GigabitEthernet in the routers and they are correctly running HSRP. Does the WLC Modules physically support HSRP?
how to enable the SFP module on cisco 2921?
View 3 Replies View RelatedI am using an ASA5510 and I would like integrate the CSC SSM module in it. What is the Process to upgrade, is it possible and Where I can find it ?
View 1 Replies View RelatedI have 2611xm router with 2 fastethernet ports. Now I want to install NM-1FX-TX module. I just want to conform that does 2611 supports NM-1FX-TX module. I am using this device for lab purpose. I am using latest IOS"
View 2 Replies View RelatedI recently installed the license ACE-SSL-05K-K9 on ACE10 with multicontext solution.The license provides 5000 Maximum number of SSL transactions per second (TPS).The customer would like to track this to find out the correct size and in the case of services https upgrade licenses.Can I do it so through particular output or it's necessary monitoring with snmp service? In the second case, can you tell me the oid string to use?
In case the module should receive a higher number of connections to that provided by the license, what's the issue for new https connections?
i just configured GRE over IPSEC on my Cisco 3745 router with VPN module installed. As soon i hit 25Mbps traffic, my CPU is touching 80%.
What maximum Traffic 3745 with GRE over IPSEC it can support?
Also show process CPU sorted dont show any evidence of which process eating it up.
sh processes cpu sorted
CPU utilization for five seconds: 75%/75%; one minute: 77%; five minutes: 78%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
[Code].....
I have a couple of ASA 5510 firewalls configured and working. I'm now charged with configuring the IPS modules. I'm having to do this remotely. Since the IPS module hasn't been configured I'm guessing it's on 192.168.1.2 with the default username/password.
I'm told that the workstation I access from connects through a switch to the ASA and to the IPS.
I've set the ASA management port to 192.168.1.1. I can't ping 192.168.1.2 - not sure I'm supposed to be able to. In the ASDM, Configure IPS prompts for an IP address. Entering 192.168.1.2 returns "IP address of the management port is unreachable".
I have a question about upgrade NAC Module, I follow standalone procedure to do the upgrade but I wonder about the upgrade file should I use because on the Cisco site I didn't find the upgrade file from 4.8.0 to 4.8.2.
what I found is nme-nac-upgrade-4.8_2-from-4.6.x.tar.gz ??!!!
So my question If I use the NAC upgrade file I was used for upgrade the CAM & CAS applaiances
How can I update the expired certificate in AIP-SSM-10 Module using CLI or ASDM.....Here;s the output from the device....and also is there a way I can generate some daily or weekly reports in a graphs.
edge-s2# show versionApplication Partition:
Cisco Intrusion Prevention System, Version 7.0(2)E4
Host: Realm Keys key1.0Signature Definition:Signature Update
[Code].....
We are using a Ace module running version 3.0?We do have a service which can now be reached by a url like https://www.xxx.com/yyy/ < notice the last /This is running via the Ace which terminates SSL and so on..
So now our client wants an url like https://www.yyy.com . The backend realservers and place of virtual dirs on IIS stays the same.
So now /yyy/ needs to be added to the backend realserver request, so the correct virtual dir is used. Therfore I need to add this Uri towards the realserver.