Cisco VPN :: Adding New Peer Without Removing Cmap From Interface 2900

Dec 10, 2012

I have a frustrating issue with a dynamic VPN head end running IOS 15.2 on 2900's. I have existing keyrings, and isakmp profiles (both main and agressive) running. When I add in a new peer, by adding in a keyring prechared statement and a match identity in the isakmp profile, phase 1 biulds but phase 2 only gets right to the end and the Cisco side resets the connection because it did not get back a response to it's Phase 2 proposal.I have tried a number of soft clear commands to remedy this (I do have 16 other production tunnels I do not want to take down) and no avail. This is very consistent. We had this happen last week in the same manner, and the TAC finally said I must reboot the system. So I removed the cmap from the interface, and reapplied it (using notepad to do it all at once). All the tunnels dropped, and after a few manual restarts on the far end for thos etunnels that are tempermental, all tunnels came back up, including my new add.I have a pair of 3900's running 15.1 code in the US that terminate the same tunnels, and I can add and remove PEERS all day long without resetting anything. Could there be a more polite way of resetting what ever it is that removing the CMAP does to allow my new peer to get the full treatment here?

crypto pki token default removal timeout 0
crypto keyring Site-to-Site 
pre-shared-key address a.a.a.a key lkdshjfhjkdsfkjfsjkddedswdes
pre-shared-key address b.b.b.b key lkdshjfhjkdsfkjfsjkddedswdes
[Code] .....

I just negate this and re-add and new peers start working.

View 1 Replies


ADVERTISEMENT

Adding / Removing Workstations On Domain?

Jul 11, 2011

adding/removing/re-adding a workstation to a domain and Active Directory. We use DHCP at work for our addressing scheme. The problem I had when naming a new workstation the same as the one I am replacing on the domain was that I noticed the new pc with that same computer name as the previous pc was still trying to use the IP address that was assigned to the workstation before by dhcp, so the new workstation was not showing it assigned an IP address. I would try pinging the computer name but there was no reply because it was still showing the ip address of the computer disconnected that had the same name.

- remove the faulty workstation from the domain to workgroup, then restart

- then from Active Directory do I need to reset the Computer name

- then do a ipconfig /release on faulty workstation that has been removed from the domain to release the leased ip address in dhcp

- then disconnect the faulty PC and connect the PC I am using to replace the previous PC

- Name this workstation the same as the one I just disconnected and removed from the domain

-Add this PC to the domain and restart

View 1 Replies View Related

Cisco WAN :: 7010 Adding Or Removing Vlan On Existing VPC

Feb 16, 2010

we have 2xNexus model 7010 (let's call them Nexus1 and Nexus2) connected via VPC to a couple of catalyst 6509 switch.Trunking has been enabled on the port-channel defined on both Nexus allowing some vlans.Below the config applied on both port-channel interfaces on both Nexus which are members of the same VPC number: [code]
 
supposing I'd need to remove some vlans from that trunk (e.g. vlan 100,200 and 300) using command "switchport trunk allowed vlan remove 100,200,300" and that I'll run that command on Nexus at a time (that means there'll be a condition for a short period of time where Nexus1 has removed vlan 100,200  and 300 from the trunk, while Nexus2 is still carrying those 3 vlans on its port-channel which is a VPC member) , could it cause any VPC inconsistency condition suspending VPC interfaces and therefore affecting the service for all remaining Vlans or only Vlan 100, 200 and 300 will be suspended when that condition will be detected?

View 3 Replies View Related

Cisco Switching/Routing :: Nexus 5k Adding And Removing Vlans In Port-channel (vpc)

Dec 4, 2012

I am a bit confused by the output of 'show run' and 'show run switch-profile' that pertains to a port-channel interface configured in a switch-profile. My main gaol is to find out how can I add/remove the allowed vlans the port-channel (configured as trunk) carries. The setup is like this. I have 2 N5k in vPC domain and Etherner1/11 on both switches is configured as trunk vPC that connects to a core switch. When I issue ‘show run’ for the port-channel and physical interface I get the following output. [code] From above it seems the switch-profile configuration is missing the 'switchport trunk allowed vlan' in the port-channel interface. If want I to remove vlan 30 from the allowed vlan, should I go under the switch-profile mode and remove vlan 30 from the allowed list even though the switch-profile configuration seems to be missing this.

View 2 Replies View Related

Cisco Switches :: Trunk On SG300 Constantly Removing Ports And Adding Back

Mar 19, 2012

I have a Cisco SG300 switch on which trunks are configured. I have a server which sits on the switch via a trunk link of four network cables (4 Gbps total)on which LACP is enabled. I'm having trouble connecting to the server using VNC from a computer on the network. It doesn't happen all the time though, it's just random.

On looking at the logs of the switch, I saw something unusual. The trunk that connects the switch to the server is constantly removing all the member ports and adding them back again after a few minutes interval. That causes the trunk link to flip on and off all the time. What could be the reason that's causing it to happen? I know it could be the network cable but I'm using brand new cables and the server also is brand new.

View 6 Replies View Related

Cisco VPN :: 3845 - Adding Second VPN Peer To Existing Tunnel?

Aug 26, 2012

We have a Cisco 3845 router for Site 2 Site VPN tunnels to external business partners.  The IOS is (C3845-ADVIPSERVICESK9-M), Version 12.4(15)T8.One of our partners is doing a DR test and needs to have us swing the VPN traffic to another peer in a test location temporarily.  I plan on adding the test hosts to our existing encryption ACL, but instead of building another crypto map, I was wondering if I can add a secondary peer to the existing one?

View 3 Replies View Related

Cisco Switching/Routing :: 2960-24tt Switch Adding Or Removing Causes Loss Of Connection

Jan 10, 2012

ws-c2960-24tt-L Ethernet switch adding or removing any device from switch cause a loss of connection to all other devices on switch for about 60sec.

View 1 Replies View Related

Cisco WAN :: 2900 - Bridge From WIC Interface To Ethernet Interface

Apr 22, 2012

Needing to bridge from my wic interface to an ethernet interface on a 2900 series router so that I can pass through the ip address given to the WIC, to my ASA so that I don't have to give my ASA a private range address. (Just like a service provider might do when bringing a T1 with managed router in to my prem)

View 1 Replies View Related

Cisco Infrastructure :: Removing Unused Virtual-access Interface On 3725 Router

Sep 8, 2004

I had the 2 circuits go down at the same time from our ISP and I had to power cycle the router and when it came back up I went from VA # 2 to now VA 3#....I know what is what but it is confusing for my counterpart and I can not remove the old entry for VA#1 and VA#2. [code]

View 3 Replies View Related

Cisco WAN :: QOS Not Supported On SVI Interface 2900

May 15, 2011

Service policy output command is not supporting on Vlan interface of Cisco 2900 Router.I am having one  HWic 4ESW Card and configured VLAN interface. But Service policy output command is not supporting.Same config is supporting in the Cisco 2800 Router.

View 13 Replies View Related

Cisco WAN :: 2900 - Traffic Not Passing From One Interface To Another

Jan 15, 2013

I am facing a very big problem with site to site vpn on cisco 2900 ios.
 
I configured the vpn and when i ping  from router itself to destination ip with source as lan interface , VPN works, no problem.
 
but when i connect any computer directly to router's lan interface to initiate traffic , it doesnot work at all. and on computer's lan i see yeloow sign.
 
mtu is 1500, speed is auto (I tried changing also) , duplex is auto ( i tried changing also) , through firewall on pc should not affect but still i disabled it.
 
since their is no problem with vpn config as vpn comes up when i initiate ping from router itself but i dont know why it is not working from lan.
 
do we need any inspect icmp on this router also ? or any policy modification to pass traffic across the interfac on router is required ?
 
I was useinf c2900k9-15.0(M4).bin and i upgraded it to 15.3 which is lated to get reed of any bug .
 
I connected two laptops directly to router's gi0/0, g0/1 interface to ping from one laptop to another but this also did not work.

View 3 Replies View Related

Cisco WAN :: 2900 Bandwidth Segregation On Router Interface

Aug 27, 2012

I have a requirement where 3 Branch locations of an organization is connected to their hub location via MPLS.They have an internet connection only at HUB as shown in the diagram (Attached)Now all spoke locations should access internet via hub.At spoke locations is there a way that I can have Cisco 2900 router and dedicate only 30% of the WAN bandwidth for internet browsing traffic.Remaining 70% should be used for accessing applications at hub.
 
For example if i have 5 Mbps Mpls port at spoke I want to dedicate only 1 Mbps for internet browsing traffic remaining should be dedicated for accessing the application at hub.How can we acheive this? Can it be done by using PBR and rate limiting?

View 2 Replies View Related

Cisco WAN :: Track Interface On Ethernet Circuit 2900

Apr 22, 2012

The only option that I have under the IOS that's installed on a 2900 series router is track. I don't have a version that supports SLA. The interface is connected to a switch that the ISP gave, and all of the tests that I've done refuse to make the circuit go down. If I were to lose the circuit, the interface won't show to be down unless the switch were to go down.
 
Is there any way with track to see that the provider's circuit went down on a switch? I was going to set up sla to ping the ISP's address, but I can't do that unless I upgrade the OS. These are a pair of routers running hsrp at a remote datacenter. Is sla the only way that I'm going to be able to accomplish this? I have tried track with different options in gns and all of them keep the CE's interface up and doesn't show it down. Watching a route in the table isn't feasible because I wouldn't want it to fail over because another site is having problems. Tracking the route doesn't work for connected routes either because the route itself doesn't leave the table as long as the interface is up.

View 5 Replies View Related

Cisco WAN :: 2900 - Interface Speed And Duplex Settings

Jan 27, 2013

we have connected gig interface Ethernet on Cisco 2900 series router to mpls link connected to our corporate network ,the issue here is our router interface speed and duplex settings are set to auto negotiation.The interface is negotiating speed and duplex at 10 and half where the provider side interface is hard coded to 100 and full duplex.when we tried to hard code the settings on our router to match the provider the interface never come up.     

View 4 Replies View Related

Cisco WAN :: 2900 Router - Does Self Ping Works On Dialer Interface

Sep 11, 2011

I have the below configurations done on a 2900 router. [code]I would like to know, if the IP address assigned to dialer1 interface "20.1.2.133" would be listed in "show arp" ?, as it failed to list on our router and I want to know if this is an expected behavior ?
 
Secondly, does self ping 20.1.2.133 (dialer interface IP) work ? [code]

View 2 Replies View Related

Cisco Switching/Routing :: 2800 / Peer To Peer Blocking On Network?

Feb 25, 2013

I am working on wi-fi networks (ISP), So I need to block the peer to peer on my network.My network involves cisco switch 2950/2960, cisco 2800 routers and Access Points, config for peer to peer blocking, for this where I need to config either switches or router.My network basic setup is, The internet will pass from router to switch and then Access Points.

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - Peer-2-Peer Traffic From Inside To Outside Blocked?

Apr 19, 2012

I got ASA 5510 with base license, can I block all Peer-2-Peer traffic from inside to outside.

ASA Giga 0/0 connected to ISP Router 2811

ASA Giga 0/1 connected to LAN switch 3560

View 3 Replies View Related

Cisco Firewall :: Configure 2911 ISR To Block Peer-to-peer Traffic?

Jul 25, 2011

I see that Application protection - blocking peer-to-peer file sharing traffic is a capability of Cisco IOS Firewall. How do i configure my Cisco 2911 ISR to block peer-to-peer file sharing traffic?

View 1 Replies View Related

Cisco Switching/Routing :: 881 Blocking Peer To Peer Applications On LAN

Feb 13, 2013

I am facing issues in blocking Peer to Peer applications in LAN. I am using 881 Cisco router and below is the config done. [code]

View 1 Replies View Related

Linksys Cable / DSL :: WAG320N Can Block Peer To Peer File Sharing On Network

Jul 31, 2011

I recently bought the WAG320N can I block Peer to Peer file sharing on my Network?

View 3 Replies View Related

Cisco WAN :: 1900 / 2900 / 3900 - Which Type Of Card Support Interface Slot

Nov 14, 2011

Cisco 1900 , 2900 and 3900 have Interface Slots and Service Module Slots , My question is which type of card is support this slot.

View 6 Replies View Related

Linksys Cable / DSL :: Block Peer To Peer File Sharing With WAG320N

Jul 31, 2011

I bought my WAG320N, I too have the internet drop out and from reading in here is a very common problem. Cisco really should bring out a new firmware version and address this issue. Any way you can block peer to peer file sharing with the WAG320N? If so how do you go about it?

View 1 Replies View Related

Setting Proxy Server On Peer To Peer Network

Jan 28, 2011

One of the schools whose networks I administer has a peer to peer network running about 30 xp machines. DHCP is achieved and DNS settings distributed via a basic Linksys router; is there any way of distributing proxy server address and port short of entering manually in LAN settings of IE on every terminal - there is no budget to install a server.

View 4 Replies View Related

Windows 7 - Share Internet In Peer To Peer Network?

Jan 18, 2011

i just set up my 2Xp pc's and one windows7 laptop peer to peer for file and printer sharing but i can not configure internet connection for those pc's

View 2 Replies View Related

Cisco Switching/Routing :: 2900 - Nexus 7010 Layer 2 VLan 11 Active But Interface Shutdown

Sep 13, 2012

I understand the vlans on the catalyst side of the house on 2900 to 6500 Catalyst switches.
 
This 7010  running nx-os 5.1(3) I did not setup, but have to manage it.  Hasn't really been a proble till now.
 
My nexus 7010 has a Layer 2 only vlan 11. It is "Active" but the interface is "shutdown".  Yet, it is passing traffic across the directly connected  ports on the nexus 7010 and to other switches in my network.  Vlan 11 is being set out via VTP to all my switches and things are running fine.
 
I need to create another L2 only Vlan.  I can't seem to find any docs  that indicate that a Layer2 vlan Interface on nx-os should be in  "shutdown" mode as part of the setup. I do see in the docs where it has  to be set "Active" as part of the process.
 
Is this the correct way to seutp a L2 only vlan on nex-os? Leave the interface in "shutdown" but make it "Active"?
 
Mystery Vlan 4 and 6
The mystery deepens.  I have other L2 vlans ,Vlan4&6 that are NOT defined as "Interface Vlan4" in the nexus config, yet it is applied to GigE ports on the nexus and these Vlans 4/6is also being sent out VTP to all switches.  Even weirder is that these vlans have names associated with the numbers.  These are valid Vlans that were configured on the old 6509 before the Nexus was installed.
 
I have checked all switches, NONE are running in Server mode for VTP, all are in CLIENT. The nexus 7010 is the only device running in VTP Server mode. 

View 2 Replies View Related

Cisco VPN :: ISRG2 2900 - How To Count Number Of Cumulative VPNs On 2900

Aug 25, 2011

If there is a router ISRG2 2900 with SEC license and without HSEC license, there is a limit in count of cumulative encrypted VPN tunnels of 225. Which commands can show us a number of current tunnels on the router, so we can see if we are near this limit of 225?

View 4 Replies View Related

Cisco :: Adding 2 More E1 Interface On Router

Dec 21, 2012

I have E1 interface that supports 2Mbps and i need to connect Point to Point , my question is can i add 2 more E1 interface on my cisco router and configure it using channels on that link so i can increase my bandwidth up to 6Mbps.

View 5 Replies View Related

How To Setup Peer To Peer Network

Mar 12, 2011

i want to set up my two computers /win xp/ installed using peer to peer network , just tell me the needed steps

View 2 Replies View Related

Cisco :: Prevent Guest From Doing Peer-peer Communication On Guest 5508 Controllers

Jan 24, 2013

I want to prevent guest from doing peer - peer communication on my Guest (5508) controllers.  Is this a feature on the WLC or only by applying an ACL on the router interface?

View 2 Replies View Related

Cisco WAN :: Can Not Ping Multi-link Interface Ip After Adding To Ospf On 7206

Jan 15, 2011

I want to configure multilink between two Cisco 7206 routers POS interfacesafter configuring both sides.Router 1interface Multilink5 ip address. [code]. I can see both sides through show cdp, also ospf process goes to FULL stateBut traffic is not flow between interfaces, and i can not even ping router's own ip address.When i delete network statement from ospf process, i can ping router's own interface and both routers can ping each other.

View 1 Replies View Related

Difference Between Peer To Peer Network And Point To Point Network?

May 17, 2012

What is difference between Peer to Peer network and point to point network???

View 5 Replies View Related

Removing WPA Security Key?

May 12, 2012

I am in the process of selling my notebook computer. I did a fresh install of Windows XP and connected to my home router using my WPA security key in order to get the latest updates before selling it. For security sake, I feel I should remove my security key before packaging up the notebook for shipment. I guess my question is, how do I go about removing my security key from the notebook? Or is this not even necessary

View 5 Replies View Related

Cisco Firewall :: Removing Route-map From Pix 525

Nov 1, 2012

I have pix firewall 525, configured with ospf process. We are also performing route filetering in ospf process using route-map. Now we want to remove this route-map from ospf process. Any step-by-step process for removing route map as per below list. How to remove route-map without having any impact as per above configuration.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved