Cisco VPN :: Between 2 Router 1841 Using HDSL Connection?
Feb 15, 2011
I've to realize a VPN (ipsec) between 2 side that use a Router Cisco 1841, each one with its own public IP.The 2 side can ping each one with Public IP but the VPN are in DOWN's state.The schema is the following:
192.168.1.0/24 (LAN1) <-> Ro1 (X.X.X.X) <- VPN -> (Y.Y.Y.Y) Ro2 <-> 192.168.2.0/24 (LAN2)
the configuration of Ro1 is showed of following, the same configuration is present also in Ro2 but with different IP address
sh runBuilding configuration...Current configuration : 9808 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname TEST!boot-start-markerboot system flash c1841-adventerprisek9-mz.124-24.T.binboot-end-marker!logging message-counter sysloglogging buffered 51200 warnings!no aaa new-modeldot11 syslogno ip source-route!!! !ip cefno ip bootp serverip domain name test.itip name-server x.x.x.xip name-server x.x.x.xip inspect log drop-pktip inspect max-incomplete low 300ip inspect max-incomplete high 400ip inspect one-minute low 300ip inspect hashtable-size 2048ip inspect tcp synwait-time 20ip inspect tcp max-incomplete host 300 block-time 60ip inspect name IDS tcpip inspect name IDS udpip inspect name IDS ftpno ipv6 cef!multilink bundle-name
[code]....
so, of following the screen of the answer of these commands.
Ro1(config)# sh crypto session Crypto session current statusInterface: Serial0/0/0.1Session status: DOWNPeer: 81.21.17.146 port 500 IPSEC FLOW: permit ip 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 Active SAs: 0, origin: crypto mapRo1(config)# sh crypto map interface serial 0/0/0.1Crypto Map "VPN" 1 ipsec-isakmp Peer = Y.Y.Y.Y Extended IP access list 150 access-list 150 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 Current peer: Y.Y.Y.Y Security association lifetime: 4608000 kilobytes/86400 seconds Responder-Only (Y/N): N PFS (Y/N): N Transform sets={ VPN-SET: { esp-3des esp-sha-hmac } , } Interfaces using crypto map VPN: Serial0/0/0.1
View 14 Replies
ADVERTISEMENT
Feb 7, 2011
I am facing problem when trying to establish VPN connection between ASA and 1841 router. Peer comes up but traffic is encrypt and decrypt. when assign route (ip route 192.168.x.0 255.255.255.0 fa0/0) to remote local subnet there is a traffic but one reply and one drop
ping from
192.168.y.62
-------------------------------------------------
Reply from 192.168.x.55: bytes=32 time=493ms TTL=127Request timed out.Reply from 192.168.x.55: bytes=32 time=633ms TTL=127Request timed out.Reply from 192.168.x.55: bytes=32 time=375ms TTL=127Request timed out.Reply from 192.168.x.55: bytes=32 time=528ms TTL=127Request timed out.
[code].....
View 1 Replies
View Related
Dec 26, 2012
I need some clarification if it is possible to do an IPL connection between Cisco 2801 (T1) to Cisco 1841 (E1) via Ethernet (2801) to Serial (1841).
I am unable to find any documentation about this and I need to connect our network to our overseas office.
Our side uses the 1841 router and our provider has set-up our E1 connection to be via Serial interface while on our overseas office uses the 2801 and will connect via the T1 card, which by the way does not have any serial interface ports just ethernets.
So far checking on how to configure this, I am unsure on how the connection will happen since the info that I got is that T1 does not have the option to hold an IP address (also unsure on this though). With this in mind and that the 2801 does not have serial interfaces, does that mean that IPL connection would be via the available Ethernet ports?
View 11 Replies
View Related
Jul 29, 2012
How to configure leased line from the ONT connection on Cisco 1841 router . there have public IPs on the interfaces fa0/0 & fa0/1.
View 4 Replies
View Related
Feb 12, 2011
i am trying to make site to site VPN on cisco 1841 router using SDM , but I faced a strange problem . I successfully install sdm , internet browser , disabled block pop up , and java . i successfully can run SDM and configure the router using it .
BUT\ when I select VPN>>Site to site VPN >>Create Site to Site VPN tap >> and Press on Lanuch the selected task to start the creation process using the wizard Unfortunately it is not working ,, I don't know why ?
I tried with another PC , another SDM version , another browser .
View 2 Replies
View Related
Apr 2, 2012
I have a Cisco 1841 serving as a connection between my ISP and my Firewall (non Cisco).
I seem to be having performance issues with my traffic going through the Router.HTTP (web browsing) is fine andI get my download rate as I would expect for a 10mbps connection.But anything to do with my VPNs I find a delay when sending via the 1841.(all my VPNs are managed by my Firewall and I have never had problems with those).
I also have a legacy ADSL connection to my firewall, which bypasses the 1841 and I am having no issues on that at all.If anything it is quicker! Which is madness as my Fibre should out-perform it easily.This leads me to believe the issue is not with the Firewall.
My 1841 is very simply setup, 2 fa interfaces with simply a default gateway setup within it.Which leads me to ask if I need more static routes in or a dynamic route protocol setup?
View 4 Replies
View Related
Jul 3, 2011
I'm trying to backup my primary WAN with secondary backup connection - 3G WAN through Cellular 0/0/0.Point is that I need to track some external IP address on my primary interface, for examle 8.8.8.8. If it is not reacheable, then router brings up backup connection - 3G. This can be done by using dialer-watcher.Simple.But unfortunately my primary WAN interface is an FastEthernet, which is the coonected to a switch, switch to WAN . There is no dialer-watch commands on it. Thats sad .
One more time :
WAN -> SWITCH -> ROUTER(WITH 3G HWIC and Fa 0/0 connected to switch).
View 4 Replies
View Related
Apr 9, 2013
I tried to connect a 1841 to a Linksys with a static route. I am able to ping from a computer in the 1841 to a computer in the linksys network, but I can't ping from a computer in the Linksys network to a computer in the 1841 network?
View 7 Replies
View Related
Apr 28, 2009
This is only a small portion of our network but my question is, can these 1841 routers handle a 45Meg connection? I thought these routers were designed for T1/E1 type speeds. I know I saw a router performance document somewhere that showed 1841's could handle 38.4MB of traffic and that is only with routing turned on. If anything else is enabled, like access lists, NetFlow or whatever, that number will decrease because of the capacity of the router. Am I correct in these statements? Any document or anything else that shows performance of these routers?
View 14 Replies
View Related
Jul 2, 2012
We have an ADSL2+ line from a WIC in a 1841, everything has been fine for the last few years and then the last few months the connection going down. When checking the interfaces the ATM0/0/0 is up up and the same for the dialer interface we are using, they are both up/up, but this still needs a reload of the router to be functional again, shutting the interfaces does not bring the connection back up.
I am not an expert on ADSL lines, I have never really had a problem with anything previously. The router was running Netflow to a network monitor wondering if this or logging was causing an issue with entries in the buffer??
Here is an output of show dsl int, would change the firmware, it has been fine all this time before though we are running IOS 12.4(24)T1 advseck9-m, as far as I can seen from our ISP the config for ADSL is all correct. [Code]
View 4 Replies
View Related
May 21, 2012
I have two 1841's connect to the Internet via DSL;
fa0/0 --- 1841-R1 --- DSL1 ---------------------[INTERNET]--------------------- DSL1 --- 1841-R2 --- fa0/0
I am on the LAN attached to fa0/0 on R1 and I need layer 2 connectivity to a device on fa0/0 on R2. I'm not sure if this is possible with 1841's or not? I made a GRE tunnel between the two and was going to add a BVI and bridge the tunnel at each end with fa0/0 at eah end, but the 1841's don't support BVIs so I'm a bit stumped here! Would L2TP work here?
R2 is a remote router running C1841-SPSERVICESK9-M. R1 is local running C1841-ADVENTERPRISEK9-M. I can't change the remote router so if the answer is not support in C1841-SPSERVICESK9-M I won't be able to do this.
View 3 Replies
View Related
Aug 26, 2012
Our company has a Cisco 1841 router which provides our connection to the outside world. We also have a windows server which provides our DHCP and DNS services. Our workstations which also get their lease from the server (using DHCP) do have a connection to the outside world.
when we connect a new computer or other device to the network we can only ping as far as the inside interface of the router. But when we assign the ip settings staticly we do get a connection, even if we configure it with the exact same ip as a lease it got a few seconds ago.
[code]...
View 21 Replies
View Related
Jul 11, 2012
I have a big problem with my Cisco 1841 and the WIC-1AM-V2 in Slot 0.I got the task, to test if it is possible, to build up a connection (Dial on Demand Routing) to a remote modem, which is connected to a console port of another Cisco 1841, with the integrated modem card over POTS from the CLI of the router. My router will only dial out to the remote modems and only if its needed.I am connected to the router with the integrated modem card over a console cable on the console port. The remote modem is also connected to the console port of the remote Cisco 1841.
I found out, with my Dialer Profile configuration, it is possible to build up a connection. I configured a dialer list, that specifies that all ip traffic is permitted an interesting for my dialer interface. So a telnet or ping brings up my dialer, which brings up my Async interface. With the "show line" command, I can see that the TTY line, connected with the Async0/0/0 Interface is in use for 5 minutes, because of the "exec-timeout 5 0", which is configured on the remote router. Now the problem is, in this 5 minutes, I can not use a remote telnet on this line with my loopback interface, because the line is already in use and I get a "connection refused". The first telnet I use runs in a timeout, because the remote host is not responding. When I dial out directly from the modem card and not from the CLI with the AT-commands, I get also the connection and with a return i get the login prompt. I will post my actual config, so that you can see maybe a mistake I did or which command I must use, to get a working connection. [code]
View 6 Replies
View Related
Jun 17, 2012
I would like to set up a POTS Dial connection between 2 Cisco routers, using the modem card WIC-1AM-V2. I'd like to use this as an out-of-band connection to a remote site, if the primary internet connection fails. So, this setup will only be used in one direction, 1 router placing calls, the other one receiving calls.Here's my config of the receiving router:
chat-script dial "" ATZ AT OK "ATX3D T" ATS0=8 TIMEOUT 120 CONNECT C
interface Async0/2/0 description out of band for network no ip address encapsulation slip async mode interactive
line 0/2/0 session-timeout 5 absolute-timeout 10 script connection dial login local modem InOut transport input all escape-character BREAK autoselect ppp stopbits 1 speed 115200 flowcontrol hardware
[code]....
This config is working fine, when dialing in via a Windows Hyperterminal Dial connection. After a while of dialing I get the login prompt of the router.Now I want to have a router placing calls instead of a Windows Server. I can't figure out how to tell a router to place calls to a POTS phone number.
Receiving router: 2811, WIC-1AM-V2, IOS c2800nm-ipbasek9-mz.124-25a
Calling router: 1841, WIC-1AM-V2, IOS c1841-advsecurityk9-mz.124-25a
View 5 Replies
View Related
Apr 8, 2011
I have 2 cisco 1841 routers the one is connected to my local network and the other is the stub router and it only has 2 fastethernet interfaces. fao/1 connected to the local network and fa0/0 connected to the internet and to the other router. How can i configure NAT on the fa0/0 which is sharing the internet and local network
View 1 Replies
View Related
Apr 26, 2011
1841 & 3845 router. We send 30 GB data on 100 Mbps link. First time we use 3845 router for sending the data and 47 Min are required to complete the data, during this link utilization was 100%. After that we send same data through 1841 router & 46 Min are required for the same. Only difference in data transfer is CPU Utilization of 1841 router goes 30% & 5 % of 3845 router Can we use 1841 router instead of 3845 router ? .
View 2 Replies
View Related
Nov 11, 2012
I have got a cisco 1841 router. I need to do many nat. I have got a lots of virtual interface on this router. How many nat inside and outside does it supports ? Can I do more than one nat insdie and outside in different virual interfaces on the same single router.
View 2 Replies
View Related
Aug 28, 2011
A client was having some email issue and was requested to change the 1841's LAN and WAN interface MTU to 1400 bytes. i've used 'mtu' command but was rejected and got an error like to one attached. so i used 'ip mtu' instead to make the change.
What's the difference between the 2 commands and if this would achieve the said change. I've checked using the show interface it's still showing MTU of 1500 bytes.
View 6 Replies
View Related
May 16, 2011
I m trying to make the vpn session using m GRE tunnel between cisco 891/k9 and 1841 router.. there is the fixed ip add with the 1841 router, and another one doesnt have the static ip from the ISP, In this case, im going to use DMVPN, The problem is , after completing the configuration, the tunnel inteface of the 1841 router will be seen like this.
-status: reset
-protocol: down
View 1 Replies
View Related
Mar 31, 2012
I want to connect my office network through anyconnect software and want to have the access of the whole network at my office, so that I can feel that I am at office. I have got 1841 router at my office. Is it possible to do VPN with anyconnect on 1841 router. Which IOS is required for SSL vpn ?
View 1 Replies
View Related
Dec 2, 2012
We have 1841 router (Cisco IOS Software, 1841 Software (C1841-ADVSECURITYK9-M), Version 12.4(9)T1, RELEASE SOFTWARE (fc2)), currently the router up and running on "c1841-advsecurityk9-mz.124-9.T1.bin" and when we try to upgrade the IOS with "c1841-advsecurityk9-mz.124-24.T7.bin" its not taking the new IOS. [code]
View 9 Replies
View Related
Feb 13, 2011
when I start the router , I can't enter the IOS , and it enther the ROMMON mode , the error display probably is : the flash is invalid.I want to import an new IOS into the flash, but it says the space is not enough.how I confirm the flash is broken?It's any other ways to solve this problem except to change the flash?
View 2 Replies
View Related
Dec 24, 2012
setup a vpn server cisco.
device cisco router 1841 [URL]
View 2 Replies
View Related
Oct 20, 2012
In my company, we have two Internet connections, one for VPN and the other for emails and browsing. I have Cisco 1841 router with dual ADSL links, and also it's conntected to ASA and the other PIX. through one physical interface (vlan 1and vlan 2). The PIX firewall is connected to users, and the ASA is for VPN only.How can I seperate the traffic is going for emails and browsing and the vpn traffic. I have got to the point, that the router is configured for both ADSL connections, and I also configured the access-list and route-map in the router, the thing is when both ADSL configured together none of them works.
View 1 Replies
View Related
Jun 30, 2011
i am very new for WAN failover configuration so how to configure cisco router 1841 with two WAN link.
View 2 Replies
View Related
Aug 24, 2011
I have a 1841 Router running C1841-ADVIPSERVICESK9-M ver 12.4(12), is this IOS VPN capable, if not what IOS would I need to run a VPN?
View 2 Replies
View Related
Feb 24, 2012
I have a problem with 1841 router - It wont't boot up and there is a message
Correcting primary nv_flash
View 2 Replies
View Related
Mar 18, 2011
I have a Cisco 1841 router equipped with a serial interface and an ISDN BRI interface installed.The router has stopped suddenly responding and no display is beig obtained when trying to access the router through the console port.I have check the router LEDs and they display the following:
SYS PWR - It is showing solid green which means the router is receiving power, and the internal power supply is functional. It is not blinking green as is normally the case when the router is rebooted.
SYS ACT - It is showing solid green. It should normally be blinking green showing that the system is actively transferring packets and monitoring internal activity. CF - It is showing solid green. It should normally be off indicating that the CompactFlash memory card is not being accessed or be blinking green showing that the CompactFlash memory card is being accessed.
I have even replaced the CompactFlash memory with another one and removed the two WICs installed but the router still fails to initialise properly and respond through the console terminal program. how the router can be further troubleshooted or if it can be repaired?
View 1 Replies
View Related
Jan 30, 2013
I wanted to know how many sodium memory slots the 1841 Routers have so i can upgrade to more then 128mb of DRAMI want ideally 256+on the Cisco website in the diagrams they dont say if it has 1 or 2 slots
View 8 Replies
View Related
Feb 1, 2011
Can I configure a cisco router 1841 to block specific sites?
View 4 Replies
View Related
Feb 11, 2013
Configuring Cisco 1841 router and firewall.My provider has put their equipment and given me 2 subnets with public ip address. I am used to getting just one Subnet and connecting my firewall straight to the hand off. But in this case I am a bit confused. I assume I will need to put a router and configure it with before I connect my firewall. [code] I also have a firewall that I would like to be on the subnet 2 at 200.xxx.97.130 and have my private network 192.168.xxx.xxx behind it.
View 2 Replies
View Related
Mar 13, 2011
I have an issue with NAT on a Cisco 1841. See following configuration,
interface FastEthernet0/0 description Connection to LAN bandwidth 100000 ip address 10.90.0.100 255.255.0.0 ip helper-address 10.100.2.2 ip helper-address 10.100.2.3 ip load-sharing per-packet ip nbar protocol-discovery ip nat inside ip virtual-reassembly duplex auto speed auto
interface Dialer1 description ADSL connection bandwidth 448 ip address X.X.X.X 255.255.255.248 ip access-group 150 in ip nat outside ip inspect firewall out ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap pap callin ppp chap hostname hostname ppp chap password password ppp pap sent-username hostname password password crypto map vpn
ip nat inside source list 102 interface Dialer1 overload(code )
I've tried this with both a source list NAT statement, and a route-map. The router can contact hosts on the Internet:
Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 128.31.0.51, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 144/147/148 ms
View 21 Replies
View Related
Dec 19, 2012
how to configure log in Cisco 1841 router, terminal log
View 1 Replies
View Related
