Cisco WAN :: 1841 QoS Set-up For Voice Between IPSEC VPN Connected Sites

Feb 23, 2011

I have 3 sites.  Each site has a Cisco 1841 as its WAN router with a 10Mb direct internet access circuit connected to Fa0/0.  The sites are then connected to each other via site-to-site IPSEC VPN.  (The LAN switches in use at each site are Cisco 3750 series) [code]

Now, Site A has already been set-up with VoIP telephony.   The plan is to extend this to the other 2 offices.Auto QoS has been set-up on the switches and data and voice VLANs created in the same way for each office.
 
how should/do we extend the QoS for the voice over the WAN to ensure voice quality remains for site to site calls.  And what special considerations do we have to make for it being IPSEC VPN connectivity between the sites?  The actual IP telephony system itself is being set-up by a 3rd party and not a lot of information on their requirements has been forthcoming so far – essentially all we have really been told is that they would like us to “reserve” a certain amount of bandwidth for the voice traffic between each site.

View 3 Replies


ADVERTISEMENT

Cisco WAN :: 1841 Router - Limit Bandwidth With Priority For Voice?

Apr 22, 2011

We have some point-to-point sites linked with  our HO with 10-30mbps speed. We have provided DID telephone lines to  these sites as well.
 
We want to limit the bandwidth  with 1mb bandwidth only and also make sure that the voice traffic (DID  telephone lines) gets the priority over all other traffic even if they  are utilitizing the 1mb link completely. We have some Cisco 1841 routers  that we are planning to configure on the main uplink on each of these  sites. how to give the priority to the voice traffic yet limiting the  bandwidth to 1mb.

View 8 Replies View Related

Cisco Switching/Routing :: 1841 Access To Individual Sites

Sep 9, 2012

I have restricted access to users using TCP/IP using cisco 1841 router in my organization.
 
I need to permit some sites for users which are part of work..
 
The issue here is I cannot ping to the site but able to browse to that site when having internet access, i have permitted range the entire range of that IP's but still no luck..
 
url...is the site which is not pinging from internet.I have also checked the source code for the root IP but still no luck.

View 4 Replies View Related

Cisco VPN :: VPN 3000 Setting Two Concentrators At Different Sites To Create Ipsec Tunnel

May 20, 2011

I'm currently setting up two VPN 3000 Concentrators at two different sites to create a IPsec LAN-to-LAN Tunnel. I have gone through all the basic configuration guides on the CISCO site, but a LAN-to-LAN session is never created. I have enabled the logs on the Concentrator and it displays no errors at all - it appears the Concentrator is not even trying to establish a IPsec LAN-to-LAN Tunnel.After running through the standard setup provided by CISCO, is there anything I need to do to make the Concentrator try to create a Tunnel, or should this be automatic once all settings are in place?

View 2 Replies View Related

Cisco WAN :: 1841 / QOS Over IPSEC VPN?

Mar 25, 2011

i have 6 sites using tandberg visioconference system, each site have a cisco router 1841 configured with ipsec vpn, i have a 4 conference a week and my bandwidth is 2 meg, and when people are working we have a lot of problems and cut in our visio conference.
 
I have a big problem, i want to make a high level QOS priority to my TANDBERG visio conference system between my sites, the issues is that there is an IPSEC VPN in my cisco routers between those sites and as i know if the traffic is crypted we can not separate the packets or give higher priority to packets over anothers.
 
can i mark traffic in the lan interface and and make a high priority befors the packets go through the ipsec tunnel?

View 1 Replies View Related

Cisco VPN :: 1841 / Establish VPN With GRE Over IPsec

Nov 20, 2011

I want to establish VPN with GRE over IPsec. As ASA can't end GRE  tunnels, I should pass it through inside to another 1841 router in  datacentar network. Since datacentar is connected to internet via two  wan links (separate ISPs) is it possible to establish two gre  simultanous sessions between 1841 at branch office and 1841 at  datacentar, one session per wan link at datacentar? That way, I need 8  gre separate sessions (tunnels) at datacentar 1841 router. Is it  supported?Is GRE passthrough works like regular port forwarding or it is something that ASA handles with some special commands?

View 1 Replies View Related

Cisco WAN :: 2851 Test Multicast Between Two Sites Connected Over WAN

Jan 31, 2011

I am trting to test multicast between two sites connected over WAN...SIte A is connected to Site B with DS3 link with  ethernet output.The DS3 link is connncteted between cisco 2851 router at each end.At Lan SIde Cisco 2851 router is conncted to Nortel-8600 Switch over ethernet connectivty at both end.PIM is enabled on Nortel-8600 core switch  with Sparse mode and multicast is working fine within LAN.Same is the result for both sites.
 
Now we are trying to make multicast work over wan in which PIM is enabled on both lan & want interafce of cisco router with sparse mode and multicast is enabled globally...now both the routers are making neighbourship with respective lan switches and with each other but multicast traffic is not flowing.In cisco router Mroute is not coming for the multicast group defined in core switch.

View 7 Replies View Related

Cisco WAN :: 6500 Client Has MPLS Connected All Sites

Apr 18, 2012

Our client has MPLS connected all sites. Each site has a router connected to MPLS via serial interface, and connected to the switch (6500) via ethernet interface. There is QoS applied on the serial interface for outbound.
 
It appears there are lots of inbound traffic coming to the site, and the client applied QoS on outbound.What I learned that after the packet are marked by the CPE, the ingree Provider Edge Router (PER)uses these marking to map flows to various Label Switched Paths (LSPs) providing differentiated treatment accross the network. Then at egree, the PER applies queuing policying based on the CPEs orginal DSCP markings to properly allocate bandwidth on the egrees link during congestion. My guess we really don't need to have inbound policy applied in the serial interface on the router, am I correct?
 
The serial interface has 1.5 MB, and the goal is we want to have 1 MB for cirtical apps, and 0.5 MB for download/upload internet access. If we apply this policy on the switch, A) should I apply it on the VLAN interface or the port connected to the router?

View 6 Replies View Related

Wireless :: Internet Is Connected But Can Only Load Sites

Jan 7, 2011

I am having trouble with my wireless connection. I am only able to visit websites but if I try to use the internet for anything else (AIM, Yahoo instant messenger, etc), it will not work. This is not a modem issue because my other computers' connections still work fine.

Configuration Host Name . . . . . . . . . . . . : JingJunBusiness
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No

[code]....

View 1 Replies View Related

Connected To Network But Cannot Load Sites In Browser

May 9, 2011

About a week ago my mom (unknowingly to me) installed a registry "booster" (Uniblue Registry Booster) and as expected, it messed some stuff up. As soon as she finished scanning and it "fixed" all her registry issues, she could no longer load webpages in her browser.PC was running XP at the time of the corruption, none of her system restore points work, and unfortunately her automatic backups had stopped running about 2 months ago without me knowing. She's been planning to switch to Windows 7 soon anyway so after a few days of trying to find a solution and not having any luck I thought "well maybe if we upgrade it will unintentionally fix some files / settings during the install." Going from XP to Windows 7 was no fun task itself, but after many hours of installs I had it upgraded to Vista and then to 7.

View 15 Replies View Related

Cisco VPN :: Build 1841 Ipsec On A DSL Link?

May 28, 2012

I am now having trouble to buil a vpn ipsec on an adsl link, my architecture is as follow:
 
[code]...
 
whith this output, debbuging seems very difficult. see attached my configuration on router 1841

View 3 Replies View Related

Cisco VPN :: 1841 Router - How To Create IPSEC

Feb 10, 2011

I need support regarding IPSEC - VPN in 1841 Router? I had purchsed 1841 Router and i dont know how to check, whether supported for VPN or not?

View 4 Replies View Related

Cisco VPN :: IPSEC Between Pix 515E And 1841 Router

Aug 4, 2012

We have set up a site to site IPSEC VPN between a Pix 515E running 8.0 (4) and an 1841 using static IP addresses at both ends. We used CCP on the router and ASDM on the pix to build the initial tunnels. Now the site with the router is changing to a Dynamic IP address from the ISP so we have set up Dynamic DNS to update the dynamic IP address.
 
The problem we have is that ASDM will not allow us to set a domain as the peer address, it will only accept an IP address. We think the solution will be to remove the static Crypto Map and replace with a Dynamic Crypto map on the Pix side. Our questions are simply; is this the best solution? can we edit the original static list or is it better to delete and make a new dynamic crypto map? Is there a short cut to change the config in command line? This is a live network so just want to check before we make changes on live kit.

View 4 Replies View Related

Cisco WAN :: 1841 DHCP Relay Through GRE Over IPsec

Mar 17, 2011

I have a data center with virtual desktops and other shared infrastructure serving remote sites, some of which are connected to the data center with GRE over IPsec.
 
IP address management including DHCP is centralized in my architecture, but I simply cannot figure out how to relay DHCP requests through GRE over IPsec to my DHCP server cluster. I am working with Cisco 800 series VPN peers, and the VPNs are terminated either on a 1841 or a Juniper SRX. Everything else is just fine and dandy, but DHCP is not forwarded across the GRE tunnel.
 
As a workaround I am forced to use local DHCP pools on the VPN peers, which is extra work from a management point of view, and also precludes static IP address assignment where a local DHCP pool is in a VRF. My LAN devices are mostly thin clients, so I don't care if DHCP stops working when the WAN link fails. As such local pools have no upsides, they are only a tremendous hassle.
 
My config is very basic, public WAN in global routing table and WAN + GRE tunnel in a VRF. NAT is not used. Here are the DHCP-related configs I have tried:ip helper-address on the LAN gateway, both with and without ip forward-protocol udp bootpcip dhcp pool with relay options configured 

In every case, I can see the UDP broadcasts hit the LAN gateway, but relayed packets never arrive at the other GRE tunnel endpoint let alone the DHCP server.

View 4 Replies View Related

Cisco VPN :: 1841 - IPsec Tunnel Two Way Traffic

Oct 23, 2012

We are currently experiencing a problem on an IP SEC VPN tunnel that has all of us here completely stumped. We are hoping that one of you experts out there will be able to assist. Here are some basic details:
 
NETWORKS
An IPSEC site to site tunnel has been built between the two sites on different networks.
PIX 515E - MAIN SITE
Network 172.16.0.0/24
CISCO 1841 - REMOTE SITE
Network 172.16.99.0/24
 
ISSUE
All traffic flows over the VPN from the 172.16.99.0 network in the direction of the Pix, such as RDP, SIP etc. Pings will go in both directions across the tunnel. Other than the pings most traffic will NOT flow over the tunnel from the 172.16.0.0 network on the pix to the 172.16.99.0 network on the 1841. It would appear that something on the 1841 is blocking traffic coming in over the tunnel from the 172.16.0.0 network as we can not get a wire shark capture on a PC on the 172.16.99.0 network, other than the ICMP traces. Usually this is an access list problem but we have checked and double checked the configuration and can't see anything.
 
TROUBLESHOOTING SO FAR
 
1. Have tried inserting various access list changes to the tunnel on the 1841 to make specific reference to the 172.16.0.0 network. 
2. Have tried various NAT entries. 
3. Have removed and then recreated the VPN tunnel from a fresh start. 
4. Have made the MTU 1400 on the inside interfaces on the Pix and the 1841.
 
The tunnel is fully up at all times and as we say can ping in both directions.

View 7 Replies View Related

Cisco VPN :: 1841 - Not Encrypting IPSec Over GRE Tunnel

Jul 15, 2012

im trying to configure IpSEC over Gre tunnel, but the traffic pass unencrypted, i cant find why this is happening. Here are the confg of the two routers (1841)
 
OFICINA#sh run br
Building configuration...
Current configuration : 1281 bytes
!
version 12.4
service timestamps debug datetime msec

[Code].....

View 4 Replies View Related

Wireless :: Netbook Shows It Is Connected But Won't Open Any Sites

Dec 25, 2011

my netbook shows it is connected, but won't open to any sites

View 1 Replies View Related

Cisco WAN :: 1841 / Packet Drop In Ipsec Tunnel?

Oct 23, 2012

I have a 1841 router connected to an ISP (currently SDSL EFM 10Mbps through an ISP modem, the router and the model are connected with a FastEthernet interface). On another location I have a linux server.There is an ipsec tunnel (3des-sha esp) between the router and the linux server (actually done with a crypto mac).The router has a hierarchical QOS policy on the egress interface.When sending traffic from the network inside the router to the linux host without the ipsec tunnel, everything is working fine and throughput is correct.When sending traffic from the inside network to the linux host internal ip through the ipsec tunnel, some packets are lost and the traffic throughput decrease.When sending traffic through the tunnel in the reverse direction (from the linux host to the internal network), everything is fine.I looked at the QOS statistics and the dropped packets counters don't increase. I looked at the egress/ingress interface statistics and no packets dropped there.I lowered the MTU on the egress interface, but it didn't solve the problem. I played by sending various ping icmp packets size, but even small packets are sometimes lost.I tried to check the router CPU, but it seems relatively fine (<= 10%)I captured the traffic on both side, and I see the packets emitted, and then I can see that some of the esp packets of the corresponding side are not received, so it looks like the cisco router is the culprit. This 1841 router is running: 1841 Software (C1841-ADVIPSERVICESK9-M), Version 12.4(24)T4,How can I troubleshoot where and why those packets are lost?

View 0 Replies View Related

Cisco VPN :: 1841 / 1801 - Random L2L IPSEC VPN Disconnect

Aug 9, 2011

Network Setup
===========

2 Site to Site VPN tunnels has been established, it is a hub and spoke topology. The hub is ASA5520 and the 2 spoke are a 1841 and 1801 router. The tunnel is able to pass traffic, it's a full tunnel VPN.The tunnel randomly disconnect for no reason. When I check the logs I can see some errors :

%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=x.x.x.x, prot=50, spi=0x5F822579(1602364793), srcaddr=y.y.y.y
%CRYPTO-4-IKMP_NO_SA: IKE message from y.y.y.y has no SA and is not an initialization offer
 
The actual address have been replace by x.x.x.x and y.y.y.y. I frequently have to peform clear crypto isakmp on the spoke routers to revive the VPN tunnels. Is there a way the tunnel can be re-establish again without manual intervention?This keep happening on a random basis and I have living with it for years. I have looked at cisco website troubleshooting tips and but no luck in finding out how to resolve it.
 
Below is my config on one of the spoke router:
==================================
Cisco IOS Software, C180X Software (C180X-ADVIPSERVICESK9-M), Version 12.4(24)T3, RELEASE SOFTWARE (fc2)
crypto isakmp policy 10encr 3deshash md5authentication pre-sharegroup 2crypto isakmp key @@@@@@ address y.y.y.ycrypto isakmp invalid-spi-recoverycrypto isakmp keepalive 30 periodiccrypto isakmp nat keepalive 20!!crypto ipsec transform-set tset1 esp-3des esp-md5-hmaccrypto ipsec df-bit clear!crypto map ipsecvpn 10 ipsec-isakmp
set peer y.y.y.yset transform-set tset1match address vpn@spoke!archivelog config  hidekeys!!!!!interface FastEthernet0ip address x.x.x.x 255.255.255.248ip nat outsideip virtual-reassemblyduplex autospeed autocrypto map ipsecvpn!interface FastEthernet1!interface FastEthernet2!interface FastEthernet3!interface FastEthernet4!interface FastEthernet5!interface

[code]....

View 4 Replies View Related

Cisco VPN :: 1841 IPsec Tunnel Protocol Down After A Minute?

Apr 23, 2013

I have a strange issue where im able to get an ipsec tunnel from tha cisco 1841 to a linksys/cisco RV016 for about a minute and ping/encrypt packets across the lin for about a minute before it goes down. I tried various configuration and it all results in the tunnel coming up for a minute then going down. I'm not sure if im hitting a bug and on which decide of if im doing something wrong. 
 
RV016 firmware 2.0.18
cisco 1841: C1841-ADVENTERPRISEK9-M), Version 12.4(24)T
 
my config
 
no crypto isakmp default policy
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2

[code]....

View 3 Replies View Related

Cisco VPN :: 1841 - Android Smartphone L2TP IPSEC On IOS

Dec 29, 2012

Any good vpn config for a router to allow vpn connections from Android phones using L2TP-IPSEC? Router is an 1841 running most current IOS ver 15.1.

View 1 Replies View Related

Cisco WAN :: 7609S - Configure Per-tunnel QoS With DMVPN For MPLS Connected Sites?

May 3, 2013

One of the customers has deployed Cisco 7609S in their infrastructure for Branch/RO connectivity. When we tried to configure per-tunnel QoS with DMVPN for MPLS connected sites, we came to know that Cat 6500 and Cisco 7600 series routers don't support this feature.
 
Now, we are looking for suitable replacement of Cisco 7609S. I found a document for configuring above feature on Cisco ASR 1000 series routers, but it has many restrictions always.
 
We are now looking for
 
(a) suitable platform in the league of Cisco 7609S which support above feature.

(b) suitable technology replacement of DMVPN with minimum restrictions.

View 1 Replies View Related

Cisco WAN :: DMVPN Full-Mesh And Separate IPSEC VPN On 1841?

Feb 2, 2011

I am exploring the possibility of having Cisco 1841's (or higher) at multiple sites. Each router will support 2 x ADSL connections (HWIC-1ADSL cards). My plan is to set up a DMVPN Full Mesh Tunnel on the first ADSL interface on each router and have RIP route these subnets, this will be for my Voice traffic only.
 
Further more I would like to set up a second IPSEC VPN tunnel between the head site and all other sites (the sites do not require direct communication for data purposes). This will route via static/weighted routes.
 
Any similar set up or sample configurations?
 
whether or not you can also run parallel DMVPN full mesh tunnels on a Cisco 1841 as this would be the other option.
 
the only restrictions are that the ADSL links cannot be upgraded to SHDSL etc.

View 3 Replies View Related

Some Sites Won't Load When Adsl Modem Tp-link Td 8840 Is Connected To Router Dlink Dir 61

Apr 30, 2011

i have a adsl modem tp link td 8840, and i had this up and running well for about 3 days. then we decided to get a router cause my little sis got a ipad2.the router is dlink dir 61.so basically i followed all the instructions and the internet was working fine.then for some reason ign site stopped working, i thought that it was down for some reason and didn't think much of it and today when i tryed to go into hotmail or facebook it doesn't work either. so i can get into the log in pages of both, but when i put in the id and password, the screen goes blank and just says waiting for .... on the bottom (using google chrome).and it never loads.i tryed with other internet browsers and it din't work so i took out the router and re wired the adsl modem only and voila. all the sites started working again.i want to use my router but i don't know why i can't acess some sites when i have it connected.

View 1 Replies View Related

Cisco Switching/Routing :: 6509 / Layer 3 Port Channel Between Sites Connected Over Dark Fiber?

May 21, 2013

Has anyone configured Layer 3 port channel on Cisco 6509 switches which are connected over dark fiber between two buildings?

View 3 Replies View Related

Cisco VPN :: 1841 Connected But No Access To External LAN

Mar 12, 2012

my configuration of Cisco 1841.
 
I was able to configure the cisco to accept VPN connections from clients. But when i am connected i can not access the VPN LAN. My cisco VPN client shows all the time Packet Decrypted: 0 when connected. I tried the split tunneling configuration based on the example on cisco.com for split tunneling.
  
I include config for better understanding. The outside interface is fa0/1 with ip 10.0.0.2 w LAN 10.0.0.0 Inside interface fa0/0 with ip 192.168.10.9 w LAN is 192.168.10.0
 
IP for VPN clients 192.168.20.100 - 105

View 5 Replies View Related

Cisco WAN :: Using Connected WIC2-2MFT As Serial Interface On 1841?

Apr 29, 2012

I am trying to use the connected WIC2-2MFT, as the servial interface on my cisco 1841.But it does not show me the option, under configuration interface
 
[code] What should I do to make this enable on this list?I am attaching the show tech-support, and show version of this device.

View 5 Replies View Related

Cisco Switching/Routing :: 1841 No Error On Connected Switch Interface

Feb 18, 2013

We are using Cisco Router 1841 and users reporting issue related to VoIP. After investigation, seeing input errors on Router LAN interface, but there is no error on connected switch interface. [code]

View 2 Replies View Related

Cisco VPN :: Users Connected Via IPSec Using ASA 5510 To Enterprise Network

Mar 13, 2011

I have Users Connected via IPSec vpn using asa 5510  to my enterprise network,but i have seen that the user stay connected while he sleeping , now i need to tear down the tunnel if the inactivity is 15 mts,i mean if the user idle for 15 mts with any thing automatically disconnect him after 10 15 mts

View 5 Replies View Related

Protocols / Routing :: Unable To Access Any Sites Except Google Sites

Jul 8, 2012

MY ISP installed one router in my lab.for internet connectivity they mail me steps :connect your Laptop directly to gi0/3 port to check internet connectivity with public ip 1.1.1.x and Gateway 1.1.1.1 with subnet mask 255.255.255.240 after connection I surprised because I am able to access only google sites like gmail,google search etc. but I am able to ping/traceroute all sites.from browser I am able to access only google sites only.In Router no firewall no such access list.

View 2 Replies View Related

Cisco Routers :: Can RV042G IPSec VPN Support Apple IOS IPSec VPN

Apr 29, 2013

I tried any type of combination and just couldn't make it works.  Only PPTP works well. Whether Apple iOS IPSec VPN is supported or not?

View 11 Replies View Related

Cisco :: Voice Client Over A WebVPN?

Mar 22, 2011

I just recently bought a ASA5505 with a licence that can have 2 WebVPN Peers, I would like to have a phone to my CCME server as one of the options within that web-vpn thingy.

View 3 Replies View Related

Cisco WAN :: 2921 - Voice Gateway IOS

Jun 8, 2012

i need any one exact IOS from below list .can some provide me the link.
 
 15.1(0.20)T
15.0(1)M1.4
15.1(24.6.26)PIL13
15.1(0.2.12)PIB13
15.1(1)XB1
15.1(0.0.10)PIL14
15.1(1.7.1)PIA13
15.1(1.7.1)PIA14
15.1(0.0.3)PIL15

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved