I am currently replacing my Sonicwalls with Cisco ASA5520's. One of my VPN tunnels currently functioning on the Sonicwall Requires a IKE Peer ID be programmed, I tried programing the ASA without one but the tunnel will not stay established.
View 2 RepliesWe have about 70 AIR-1131AG-A-K9 APs that were installed about 5 years ago. The controller we use is a 4404 WLC, with software 4.1.171.0. This provides us our wireless network. We use Cisco switches as access, distribution, and core switches.
We have two guest networks, one for visiting physicians and another for patients and their guests. Each of these guest networks use a 4402 WLC as an anchor controller, with software 4.1.171.0. They use the same APs as our business network.
According to my understanding of the guest networks is that a tunnel (I don't know if it is encrypted or or encapsulated) is created between the APs/Guest WLAN to the anchor controllers, so this guest traffic is isolated from our business traffic. Futhermore, these guest controllers connect directly to our firewall, which only allows them access to the Internet, and not our Internal LAN.
Our Problem
=========================
Well, we've been having problems with our wireless system, specifcally with patient guest access. It has gotten bad enough that they are looking to replace the Cisco APs on the south side of the hospital. We've been told that "you can get better guest access at McDonalds" : ( . I think part of our problem is that our controller code is so very old and we are have a our patient guest network open and "restrict" the number of clients attached to it by limiting our DHCP scope. The biggest complaint we get regarding the patient/guest wireless is people saying "I can't connect to the wireless", which we almost always identify as an issue caused by us running our of DHCP leases (we have about 200). These DHCP lease are used quickly, by an devices that comes into range that is set to automatically connect to any network that is in range. A lot of our staff is connected to our patient guest network and don't even realize it.
We are interested in Meraki APs because they are magaged using a cloud controller (we won't have the added expense of another controller) and they seem really easy to manage. Our biggest concern regarding Mearki is security. They make use of NAT, a Layer 3 firewall, and LAN isolation (a firewall rule that only allows clients Internet access) in each AP as a means of isolating the guest traffic from the business traffic. Does this seem like a secure way to accomplish this or are the Layer 2 tunnels that Cisco and from what I've been told recently Aruba and Juniper make use of a more secure approach?
We've been working with a Meraki vendor, who also happens to sell Aruba and Juniper wireless networks. It seems like don't suggest Meraki if we are concerned with security. They said they are good for situations where you have many geographically seperated sites. They suggested we use Juniper and Aruba, specifically because they use Layer 2 tunnels and that they used technologies like clear air (APs self adjust channels and power, which Meraki claims to do too). I thought that, hey does Cisco that too, why wouldn't we just go with Cisco if those are your selling points for Juniper and Aruba?
I have a ASA 5505 which is replacing an old firewall. Everything is working apart from the dail in pptp sessions. These are forwarded to the windows 2003 server. [code]
View 3 Replies View RelatedI have a 7606-S router ( non redundant ) with SUP32 and i wand to replace it with RSP720-3C-GE , i am asking abouth the procedure?shall i switch off the router ? or just removeSUP32 and insert RSP720 ?are there any steps should i do before the upgrade ?i am planning to take the router out of service during the operation, how much down time it will be ?
View 9 Replies View RelatedI just installed a new NIC after troubleshooting old NIC and I am still receiving limited or no connectivity error. I checked router, cable modem & cable; all work fine.
View 13 Replies View RelatedI'm currently in the process of replacing SBS 2003 x 64 on my Poweredge 2900 server. I would prefer to upgrade to Windows 7 x 64, but would do XP in a pinch.
View 4 Replies View RelatedCan I replace my Replacing D-link 604 w/ D-link ebr-2310 ?
View 4 Replies View RelatedAny documentation or information pertaining to replacing an existing wireless network. I will be looking to replace a 4400 w/12APs with a 5500 w/12APs. The users typically utilize the WiFi network on a regular, so I am trying to figure out how to replace the existing hardware without interrupting the service.
What would be the best way of handling a situation as such? I am currently looking on the Cisco Doc. website, hoping to find something related to this.
I'm replacing an 877W router with an C887VA-W-A-K9.The new router uses the service module for managing the AP independently - So I know I can't simply paste the config accross from the old one.
The current router is connected to an ISP with a VPN back to the head office router. DHCP is supplied from the router and clients connect to that via wireless.
I know I can type most of the commands in - but what is best practice going from an all-in-one to having a separate AP? What order should thing be entered?
I need to replace an ageing PIX 506e with an ASA 5505.The current setup looks like this: The PIX is used for site-to-site VPN connection via the WAN 2 link. The WAN 1 link is used for general Internet connectivity.I don't have access to the Draytek Router as it is supported by a 3rd party, but I believe it uses static routing to direct the relevant traffic to/from the PIX.
When I replace the PIX with the ASA, the inside i/f connection experiences dropouts - but no errors show in the logs.The only significant difference I can see in the config is that the ASA utilises VLans for the inside & outside interface configs - I used the PIX-to-ASA Migration tool to make the initial configuration on the ASA.In tests, if I only connect the inside i/f of the ASA, pings from the LAN are stable. Once I connect the outside i/f, pings timeout approx 80% of the time.
I got a task to replace our current cisco 2800 series router which is used for easy vpn remote access with cisco asa 5510.I have a got a lot of users, i wish that user shall see no difference except of ip address they are going to use for remote login.
View 1 Replies View RelatedWe have two 6509 will active/passive sup 720-3BXL cards in each and 1GB DRAM. Each handles full bgp routing table with 4-5 ISP(eBGP) connections. The problem we are facing is.. 6509 were meant for core/aggregation and seam to be wasted are edge devices. With each ISP added the DRAM creeps up to a point were is it 80% utilized.
I am looking to replace both 6509's with routers which were meant to work on the edge. As mentioned earlier, it will have 4-6 external bgp peers per router. Handle full bgp tables. Should be capable of policy based routing.
I am new to Cisco wireless and would like replacing WLC 4404 with 5508. I mean any link or doc (best practices).
View 13 Replies View RelatedMy brother's Speedstream has died. Lights don't work, etc. etc. He has ATT DSL in Detroit; Detroit does not have an internet wireless service, so he has to deal with ATT. He's po'd that he's paying $92 a month for service that doesn't work. I told him he needed a new DSL modem.
View 2 Replies View RelatedHow to replace a defective redundant sup. I read on several articles that inserting new redundant sup should not be an issue as the active sup will always send its configuation to the standby. We are running SSO on the Sup720. Should I switch it to RPR before I install the redundant sup? I read a case wherein they switched it to RPR from SSO before inserting the new redundant sup. My concern is the IOS mismatch since Cisco doesn't always send the same IOS on RMAs.What I am planning is this.
1. Save/Backup configuration
2. Remove the redundant sup on slot 8 (since it is a 6513)
3. Insert the new redundant sup on slot 8.
4. Check if all the configurations were synced from slot 7 to slot 8.
5. Copy the IOS from sup-bootflash to slavesup-bootflash. (if the IOS are not the same)
6. Check show bootvar to see if the boot variables are correct.
7. If bootvar is the same, reload slot 8 to boot the new IOS.
Is this a good plan or am I missing something? I am worried with this document if the redundant sup has a different software. If i insert the card in slot8, according to Cisco, it will revert to RPR. If slot 8 boots and it has a different OS, then slot 7 will switch to RPR even if it's active. Would I still be able to access the slavesup-bootflash of slot 8? Is it going to boot 100%? I read that doing a force switchover will cause a flip and RPR would cause the line cards to reinitialize and I don't want that. Well I am not going to do a force switchover since i want slot7 to be active and retain slot 8 as hot.
I am replacing a faulty sup720 on a 6513. It s the backup/hot not the active sup. It has the same IOS on it. Is it correct that all I need to do is remove the faulty and replace it with the new sup and do a wr mem? Fromwat I have read their should be no down time all connectivity should remain stable?
View 6 Replies View RelatedWe have sup engine 6L(WS-X45-SUP6L-E) on two 4506 switch. both switches connected in LAN (HSRP primary and Secondary).
We are going to replace it with Sup7LE. What is the best procedure to get this done with minimal outage?Any other important thing to be noted ? Note : We have Lincence for SUP 7LE
we currently have a remote access asa setup using Anyconnect with self signed certificate, and several users in the certificate database as we are using radius and certificate for authentication.
I want to purchase and obtain a trusted CA signed certificate (such as Verisign) and replace the current self signed cert.
My question is will I have to reset the current CA server of the ASA and replace the certificate user database? ie start from scratch.
I have a 510a Cache engine and the IDE hard drive failed. I installed a new blank hard drive, but I can't get it to boot off of the new hard drive. Currently, I moved the original to Disk 1. I switched the boot up disk to disk 1. I was then able to setup the new hard drive (in disk 0). Everything is functioning, but I don't want to keep the dead hard drive in there. How do I setup a boot sector on the new hard drive?
View 3 Replies View RelatedMy wireless card on my gateway laptop isn't working anymore.I have already tried uninstalling and all of that. I am just going to replace it. I currently have a Intel 3945ABG network card. Is there another network card I can replace it with that is more efficient and quicker? Not sure what other information is needed to figure out what network cards are compatible.
View 2 Replies View RelatedI need to replace a failing AG241v2 and I am going to use a WAG160N.I problem is I notice there are two versions of WAG160N, v1 has a RJ45 port for the DSL and v2 a RJ11 port.AG241v2 has a RJ45 so the cable I was using was a Ethernet cable.Now this cable doesn't fit, of course it is bigger, I tried with a RJ11 cable but DSL light doesn't show up, it looks like it is not receiving any signal.Is there any adaptor or any cable to use WAG160Nv2 or should I replace it with a WAG160v1?
I found in several web stores when they talk about WAG160Nv1 they use the code WAG160N-E1 and for the WAG160N-v2 they use the code WAG160N-EW. Can they make it more difficult??
Comcast upgraded me to a 30 Mbps speed, and my trusty old BEFSR41 v2 doesn't cut it. Cisco promotes wireless routers with a 1 Gbps ethernet, I would rather have a wired router, and use a WAP that I can unplug when I am not using it, since, for now, I only connect my work notebook wirelessly. Most wireless routers also generate a lot more heat than a wired one does, and I don't need any more heat in my Houston home.A new BEFSR41 v4.3 is only 10/100 Mbps. There doesn't seem to be any 1 Gbps wired routers for home use. Will a new BEFSR41 give me 100% of the cable Dociss 3.0 speed, or would I need to get a 1 Gbps router to get the fastest throughput? Or do I only need to upgrade when the cable speed increases closer to 100 Gbps?If a 1 Gbps router is better, are there any simple business wired routers you could recommend?
View 1 Replies View RelatedI'm due to replace a stack of 2 x 3750 switches very soon with 2 x 3750Gs. These 2 current switches are the VTP server for a small domain. I have put the config on the new switches switches and I made it a server and used the same VTP domain and password etc and got the VLAN info ported over.Now I did this a while back and noticed the switches are in transparent mode with a revision number of 0, I need to set this back to server and swap the switches out but the revision will be lower than the client switches (around rev 200), what do I need to do?
View 7 Replies View RelatedI decided recently to switch out our border router (1841 12.4 advsecurity) with a shiny new 1941 (15.2 SEC/K9) as the CPU upgrade was needed.The core below acts as a VPN end point to various other remote offices we have, all of which have a similar network design at each end (and all entirely managed by me). All of these are still running 1841's with 12.4 advsecurity on them as well. These are all GRE tunnels with ipsec procection on them (not crypto maps). [code]
Everything else works fine (NAT, route-maps etc), it's just these IPSEC/isakmp tunnels that are not playing ballIt's definitely not an ARP issue (all arps were cleared) and ICMP appears to work fine (ie, I can ping the remote tunnel's public IP endpoint from the core using the loopback for that tunnel as the source). I am suspecting it's something strange with the stateful firewall config, but I did try and apply ipsec and isakmp-msft to the ip inspect list, with no success.
In my MDF I have a 4stack of the WS-3750-48P switches. Is it possible to replace one with a C3750X48PF-S with out causing any issues? Or would it be better to just have 3 stacked and trunk this one to the core 4506. Keeping in mind I bought this one to expand the port number for one of our remote offices.. I would hate to send them the gig switch when there isn't as much usage..Besides if I can get my CFO on this switch he might authorize me to replace the rest... He is reticent to believe it makes really all that much of a difference.
View 2 Replies View Relatediam currently trying to replace AP1231G-E-K9 with new equipment / Cisco AP next generation maybe?The problem is that the system, that is going to use the AP is using aironet 350 PCMCIA adapter with LEAP. If in fact we are going to use a new Cisco AP, will the new generation work with Aironet 350 Adapter and support LEAP?
View 2 Replies View RelatedI have a 2801 router that I am replacing with a 2911. I know the ports on the 2911 are Gigabits and the 2801 are Fe. I read where the IOS would not support backup and restore on each other . I am attaching a show ver on both routers. I need to know if backup and restore would work and or what other changes would need to get done.
View 1 Replies View RelatedWe currently have an environment with a 4507 as the core switch connected to four stacks of 3750e's in the wiring closets. A pair of Nexus 5548UP's also hangs off the 4507, but at the moment more or less dedicated to a certain purpose..The 5548UP's have the L3 daughter card installed.
My question is: Can a pair of Nexus 5548UP's do a C4507's job? Would we be able to decomission the 4507 and replace with the existing 5548UP's + FEXes?
We are planning to implement the 6509-E with two Sup 2Ts and a few 48 ports switches. We also want to make this the router for our network and replace the 7206VRX.
View 5 Replies View RelatedI was using NETGEAR FVS338 as a main router but it is discontinued now and I found the CISCO RV082 as a good replacement option. I am trying to set up a VPN the same way I used to do it with the netgear one but seems like something is being missed upI am trying to connect the VPN to a SonicWall 100 device using gateway to gateway, 3DES/MD5, agresive mode and IKE with preshared key. I already have the local id, remote ID and subnet configured in the SonicWall device as well as the remote IP address. I used to enter these information in the IKE and VPN configuration screens in the Netgear FVS338 we used to work with. I also have the PreShared Key code I entered in the configuration.
View 4 Replies View Relatedwhen replacing a line card on a 6500, i gather there is no config stored on the card, its all held on the sup, so when i put in another card the config will be the same?
View 2 Replies View RelatedI was wondering what general steps might be taken in order to "replace two(2) 3750 (stacked) with one (1) 3750X - Server Access". General steps and what I might have to do configuration wise. I know i'm copy pasting the existing configs into the new switch, but are there any caveats?
View 5 Replies View RelatedI have two 3750X in a stack. Each 3750X has one 10Gb uplink to primary core1 and one 1Gb uplink to backup core2 configured in 2 etherchannel groups. The member switch has bad ports, so I need to replace it. I have spare 3750X unit. Is it possible to connect the spare unit to the stack and then move the RJ-45 cables from the member with bad ports to the new member? That way I can minimize servers downtime to just a few seconds..If that would work, then the last step would be to move the 10Gb networking module from old member to the new one, as well as the secondary PSU. Is it doable? Also according to the documentation, all I need to add new member is matching IOS version, correct?
View 1 Replies View Related