We have 7606 router without any ipsec module on it,so i check the ios and it has all commands in interface tunnel for configuring the dmvpn multipoint tunnel and also protection profile for ipsec! so i have this question: do we can run dmvpn between this router and our wan routers wich are 3845.
View 2 Repliesits a hardware problem or just not get power to module 1 for module WS-X6748-GE-TX? this is the capture from show module and sh log :
------------------ show module ------------------
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
1 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX xxx
5 2 Route Switch Processor 720 (Active) RSP720-3CXL-GE xxx
Mod MAC addresses Hw Fw Sw Status
[code].....
I was trying to install a SPA-IPSEC-2G on 7606-S chassis. I installed the SPI/SPA cards in slot 3, after that I checked with "sh module" and we could see the module "OK". After this we tried to configure a VPN tunnel but we received messages in the other router about "no ipsec package".
I was checking and I tried "sh crypto engine accelerator statistic" and we got the message: " There is no crypto device".
I don't know about installation commands in references and I don't know about restrictions or configuration modes.
I am exploring the possibility of having Cisco 1841's (or higher) at multiple sites. Each router will support 2 x ADSL connections (HWIC-1ADSL cards). My plan is to set up a DMVPN Full Mesh Tunnel on the first ADSL interface on each router and have RIP route these subnets, this will be for my Voice traffic only.
Further more I would like to set up a second IPSEC VPN tunnel between the head site and all other sites (the sites do not require direct communication for data purposes). This will route via static/weighted routes.
Any similar set up or sample configurations?
whether or not you can also run parallel DMVPN full mesh tunnels on a Cisco 1841 as this would be the other option.
the only restrictions are that the ADSL links cannot be upgraded to SHDSL etc.
setting up IPsec for a DMVPN between a 2811 and 2951s in a test lab. I have enabled IPsec on the hub (2811) but I am unable to do so on either of the 2951s. After researching, it seems that I may have the incorrect IOS for this, but I am at a loss which IOS I should be using. Currently the 2951s are on "c2951-universalk9-mz.SPA.151-2.T2.bin" and the only crypto options are(config)#crypto ?
ca Certification authority
key Long term key operations
pki Public Key components
while on the 2811 I get:
WIN-T(config)#crypto ?
ca Certification authority
call Configure Crypto Call Admission Control
ctcp Configure cTCP encapsulation
dynamic-map Specify a dynamic crypto map template
engine Enter a crypto engine configurable menu
gdoi Configure GDOI policy
[code]...
These are all hand me downs?
I have Cisco router 7606-S. On Sami module led is indicate red. i also test it to other slot,reload the chassis but the problem is same. The module status is unnkown.
(Indicates red one of the following conditions:
• The SAMI is released from reset by the supervisor engine and is booting.
• The boot code failed to run.)
pdsn1#sh mod
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
1 7 SAMI Module WS-SVC-SAMI-BB-K9 SAL15056HSV
2 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX SAL14480S9Q
5 2 Route Switch Processor 720 (Active) RSP720-3C-GE SAL1538QE8N
6 2 Route Switch Processor 720 (Hot) RSP720-3C-GE SAL1538QHZB
[code]....
1.is this a hardware problem of sami module?
2. is this a boot problem of sami module? is this image problem of modules(supervisor or sami module)?
how i do diagnostics this module?
i just configured GRE over IPSEC on my Cisco 3745 router with VPN module installed. As soon i hit 25Mbps traffic, my CPU is touching 80%.
What maximum Traffic 3745 with GRE over IPSEC it can support?
Also show process CPU sorted dont show any evidence of which process eating it up.
sh processes cpu sorted
CPU utilization for five seconds: 75%/75%; one minute: 77%; five minutes: 78%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
[Code].....
To configure the GRE tunnel over IPSEC with OSFT via Encryption module from Cisco Router 3845, I have few queries:
1. Does the router 3845 support hot swap for encryption module?
2. Does the router require to be rebooted after plug in encryption module?
3. Any samples configuration for GRE tunnel over IPSEC?
Need to remove the IPSec VPN SPA module from the 6509 chassis. Does the module is hot swappable or does the 6509 need to be turned off prior to removal.
View 2 Replies View RelatedCan i know cisco 2800 router can support how many site-to-site ipsec tunnel without vpn module?
View 2 Replies View RelatedI need to create a policy to provide only 4 Mbps bandwidth for mail out of 16 mbps pipe terminated on 7606 router (at Datacenter) having WS-SUP32-GE-3B.But I can't create policy with bandwidth percent,even exact value with priority command does not work. When I am going to enter service policy output command at interface it is showing as"priority command is not supported in output direction for this interface Configuration failed!" All I want to restrict bandwidth at backbone link for mail traffic. From all remote locations use to access mail server over the same link.
View 1 Replies View Relatedhigh CPU on newly installed 7606.
CPU utilization for five seconds: 61%/59%; one minute: 62%; five minutes: 63% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 578 5856 9392486 0 0.55% 0.50% 0.50% 0 IP SLAs XOS Even 231 90364 576908
[Code]......
I tried to reboot manually and I changed the slot but the same behavior:
%SYS-SP-3-LOGGER_FLUSHING: Systema pausing to ensure console debugging output
%OIR-SP-6-CONSOLE: Changin console ownership to route processor
*** System received a Software forced crash ***
signal= 0x17, code= 0x24, context= 0x430213e4
PC = 0x4038c124, Cause = 0x1020, Status Reg = 0x34008102
who to configure the interface of cisco 7606 router. As it is not getting up by doing normal configuration like "no shut"? iterface and line protocol both are down.
View 1 Replies View RelatedOur Router 7606 is in a problem with high CPU Utilization. We are using one EBGP and one IBGP session. We are also running OSPF with area 0 between two IBGP router to exchange few local networks. When bandwidth cross 100 MB than only CPU use become 100%. when bandwidth consumption is 80MB CPU use become 80% end so on.
Out put is when bandwidth consumption is 34MB
CPU utilization for five seconds: 44%/43%; one minute: 42%; five minutes: 30%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
78 44 9625 4 0.39% 0.03% 0.00% 2 Virtual Exec
13 40 375 106 0.07% 0.00% 0.00% 0 ARP Input
30 116 1098 105 0.07% 0.01% 0.00% 0 IPC Seat Manager
[code]....
I have a fresh piece of 7606-S router, i am planning to install a new IOS ( 15.2.4S or 12.2.33-SRD8 ) SIP-200 / RSP720 moduls ... would ypu plese provides me a configuration guide for installing IOS for 7600 serise router.I have the image on TFTP server.
View 3 Replies View RelatedI have an Internet Gateway with dual homed to 2 ISP's terminated in 2 different routers in my end. My end routers are 7606 routers.
I have a WAN link from Router 1 to ISP1 and from Router 2 to ISP2.
Router 1:
-------------
int Gi1/1
description " Link to ISP1"
ip address x.x.x.142 255.255.255.252
x.x.x.141 is configured in ISP end router.
The problem I m facing is that I m not able to ping x.x.x.142 from this router. But x.x.x.141 is pingable.
Also when I check from any internet route server, I m able to ping both x.x.x.142 and x.x.x.141.
I have a 7606 router with sup 720-3bxl. IOS has been crashed recently and i can use only Roman mode now. Ive tried to upload ios image using tftp server but the command tftpdnld id not available in this router. I don't know why. Then i tried to boot from flash disk but finally it also shows an error like
System received a Software forced crash signal= 0x17, code= 0x24, context= 0x42359674 PC = 0x402d248c, Cause = 0x1020, Status Reg = 0x34008002
How to make the router in running condition.
I've setup and configured the following local monitor session on a 7606 but it doesnt seem to be outputing anything. Any guess as to why, or what I might be doing wrong? Gi1/1 is doing ~40Mb/s egress & 15Mb/s ingress. Both source and destination ports are routed ports.
monitor session 10 source interface Gi1/1
monitor session 10 destination interface Gi1/10 ingress
interface GigabitEthernet1/1
description WAN Link to ********************* ** CORE BACKBONE **
mtu 9000
ip address ************** 255.255.255.252
[code].....
I need to put a FWSM and a line card WS-X6148A-GE-TX to a router 7606. The FWSM version is 3.2(13). The router is running IOS 12.1(18)SXD3. The Cisco document here says the required IOS for router 7606 is 12.2(18)SXF or higher. I have downloaded the IOS 12.2(33)SRD4 and loaded it to the flash card. When I turn the router on, it doesn't load the new IOS and goes to rommon. Which IOS I should use to make the router 7606 work and accept the FWSM.
View 2 Replies View RelatedWe are planning to configure the ipv6 PBR on our 7606 routers. We have configured the route-maps successfully .but when we tried to apply those on interfaces we are facing an problem .
when we trying to give command # ipv6 policy route-map <route map name> . we are unable to find policy command option in the command list.
IOS Version : c7600rsp72043-advipservicesk9-mz.122-33.SRE3.bin.
We have an environment where we terminate our DSL customers over PPPoE on a 7606-S MPLS PE router with RSP720. The PPPoE sessions are terminated on a GIG V2 interface of a SIP-400. Currently the IOS running on the device is c7600rsp72043_rp-ADVIPSERVICESK9-M, Version 12.2(33)SRD. The following is the current configuration used.
bba-group pppoe 7virtual-template 7
interface GigabitEthernet2/1/3.142647 accessencapsulation dot1Q 14 second-dot1q 2647pppoe enable group 7
interface Virtual-Template7 ip vrf forwarding TESTip address 10.10.10.1 255.255.255.252
In the above scenario everything works well.
However we had to upgrade the router IOS to 15.2(4)S Advance IPServicesk9 to support 4-byte ASN. After the upgrading we observed certain commands used to terminate PPPoE on the sub-interfaces not available on 15.2(4)S , although PPPoE on Gig and Ethernet with QinQ support is listed under 15.2S feature set.
I have two Cisco 7606 routers using BGP to connect our customers to the internet. Recently we added a new 1G circuit in addition to an existing 1G circuit and all traffic inbound is now on this new 1G circuit. We would like to shift some of the inbound traffic over to the other 7606. Our Tier provider has the same AS number for both paths. One path goes directly to New York and the other goes to Boston then New York.
View 1 Replies View RelatedI used the below syntax to check the snmpwalk to an interface of a cisco 7606-s router from an LMS 4.0 version cli.
NMSROOT/Objects/jt/bin>snmpwalk -v 2c -c <snmp-string> <ip-addr> 1.3.6.1.2.1.31.1.1.1.6
Timeout no response from <ip_address>
This is the error im getting in cli prompt. But i could see that reports are generating.If i try with the loopback ip address, i get proper snmpwalk outputs.. I have increased the timeout and retry options..
I have a 7606 Router with single Route Switch Processor 720 at the chassis works as active RP ( Route Processor ). Can I add another RP to the chassis as standby in case of failure of the first RP ?
View 28 Replies View RelatedI have a 7606-S router ( non redundant ) with SUP32 and i wand to replace it with RSP720-3C-GE , i am asking about the procedure?
-shall i switch off the router ? or just removeSUP32 and insert RSP720 ?
-are there any steps should i do before the upgrade ?
-i am planning to take the router out of service during the operation, how much down time it will be ?
I have made an etherchannel between 6509 and 7606 with two giga interfaces on eatch one to have more bandwidth (2Go), but the Etherchannel does not exceed 1 GB (Below is a capture for Etherchannel taken from Solarwinds).the both 6506 and 7606 use ws sup 720 3bxl
View 8 Replies View RelatedI have a Cisco 7606 running 12.2. I want to limit the interface that is used by one of our customers to 30M.
View 3 Replies View RelatedAny know how to close these open ports on my Cisco 7606 router? Any know what these TCP ports are used for?
:
49 - Not sure what this one is other than what IANA reports about TCP port 49
4510
4509
2222
:
I'm sure I could add an ACL to block communications to my router based on this ports but would rather figure out how to close 'em so this already overloaded router doesn't have additional processing.
I have the following configurations in cisco CISCO7606 (R7000). Its meaningful to have the below configuration, wherein , we are allowing multiple vlans on the access port?
interface FastEthernet4/45
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 124-127,423,478,493,578,699,751,787,895,987,1981
switchport mode access
end
interface FastEthernet4/46switchportswitchport trunk allowed vlan 124-127,423,478,493,578,699,751,787,895,987,1981switchport mode accessend
Our router suddenly reloaded. Below are the crashinfo obtained:
1st crashinfo:
7606_Router#more sup-bootflash:crashinfo_20120604-02260500:00:05: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor
00:00:05: %SYS-3-LOGGER_FLUSHING: System pausing to ensure console debugging output.
00:00:05: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor
00:00:05: %SYS-3-LOGGER_FLUSHED: System was paused for 00:00:00 to ensure console debugging output.
[code]....
We are running s72033-advipservicesk9_wan-mz.122-18.SXF9
Im having problem configuring policies for limiting traffic on subinterfaces on cisco Router 7606-S. I have configured:
[code]...
So for egressQOS , i want to configure with police, not shape (for the memory reason).
There use to be Cisco 851 routers, but lately these routers are replaced with Cisco 861-K9 routers, and these 861 routers doesn't support DMVPN, instead 851 use to be.
Is there any license file we can upload in 861 router for DMVPN capability, if yes may i know the SKU # for that. We have some customers having 6-7 locations and they are planning to have 2 more locations, we implement already DMVPN in there network, if we go with the 87X or 88X router there price is almost double the price of 861.