Cisco WAN :: 2431 - Configure IAD So That Phones Are Routed Based On Destination Network
Jul 12, 2012
Our ISP has set up a Cisco 2431-16fxs IAD (dual WAN) in one of our locations. It is used to connect the devices (PCs and SIP phones) on our LAN to internet (via 1st WAN port) and ISP's MPLS-based voip network (via 2nd WAN port).
We have 2 LAN subnets - the first subnet (PCs) requires internet access only, so it goes out via the 1st WAN port. The 2nd subnet (SIP phones) is connected the MPLS network (via 2nd WAN port).
We would like to have the SIP phones (that connects to MPLS-based network 192.168.1.x) to be able to access the internet. Is it possible to configure the IAD so that the phones are routed based on destination network; i.e. anything to 192.168.1.x via 2nd WAN port, anything else to the internet via the 1st WAN port?
we're looking to use an ASA5505 or 5510 as our firewall but want to see if one of them can prioritize traffic. I know it does QoS but we're wanting to dedicate x amount of our bandwidth to traffic based on destination IP address. Is that possible and does it take a license upgrade?
I am trying to configure my ACS to allow 802.11 phones to authenticate. I have searched high and low for documentation on doing this with no luck. We are using unified wireless with a mix of 5508 and wism controllers. I am able to authenticate windows devices against active directory via the acs but can't seem to get anything working with the phones.
I have a question regard to switch SFE2010P, i have 2 vlan ( data and voice) and we want to configure Ip phones SPA502G, the question here is how can i make to suport 2 vlans on the same switch port, like the catalyst IOS switch port acces vlan x and switch port voice vlan x, if i set up the switch with the voice vlan like tagged doesn't work, but if i set up the voice vlan like untagged vlan its works but the PC attached to the data port on the SPA502G doesn't work?
When trying to configure ERSPAN on a ASR1006, I'm not getting any traffic on the destination port. ERSPAN flavour is LOCAL SPAN, as described in:
[URL]
Configuration used, is the following:
monitor session 1 type erspan-source no shut source interface GigabitEthernet0/0/2 destination erspan-id 10 ip address 10.10.10.1
[code].....
Apparently everything is configured in the proper way, however I’m not getting any traffic in the destination port. Also I’ve noticed the following in the details from ‘Session 1’:
I have some questions about how to configure my Cisco 1941 with a routed subnet from my ISP to forward them to 1 or more servers in my LAN.1 Routed subnet /29 from my ISP (over a fiber connection).In my LAN I have (at the moment) 3 servers, and about 15 clients.I would like to use the first ip address from the routed subnet for internet traffic from all the clients in the LAN.I would like to use the second ip address from the routed subnet for server1 so that server1 accept some allowed connections and that server1 connects to the internet with the second ip address from the routed subnet
I would like to use the thirth ip address from the routed subnet for server2 so that server2 accept some allowed connections and that server2 connects to the internet with the thirth ip address from the routed subnet.I would like to use the fourth ip address from the routed subnet for server3 so that server3 accept some allowed connections and that server3 connects to the internet with the fourth ip address from the routed subnet.[code]
I am having problem setting up SGE2000P switches to work with my default data VLAN and additional voice VLAN. I am configuring it to pick IP address for phones from voice VLAN which is working fine but when I connect a PC on phone port it is also picking up an IP from Voice VLAN while default VLAN is data with different scope of IP.
I pack these switches and purchase ESW 500 series. I have ESW 500 at another client and they are working fine out of the box but this guy is giving me hard time.
How to configure traffic flow between computers inside VLANs and a routed port? Here is the setup details:
1. Switch 3750-X 2. VLAN 100 - ( SVI IP address 192.168.100.1 /24) 3. VLAN 200 - ( SVI IP address 192.168.200.1 /24) 4. routed port gi1/0/48 (IP address 192.168.150.1 /24). Note: this port is directly connected to a firewall ASA 5520 port IP 192.168.150.100 /24
Ip routing is enabled on the switch and inter vlan traffic is flowing ok. I can ping the routed port gi1/0/48 from any computer connected in the VLAN 100 or 200. For example computer with IP 192.168.100.25 can ping the routed port 192.168.150.1. Switch can ping firewall port 192.168.150.100 and the 'sh ip route' command shows the network 192.168.150.0 /24 as directly connected network.
any computer in the two VLANs CANNOT ping firewall ASA port 192.168.150.100 Is it because inter VLAN routing does not work with a routed port on L3 switch? I looked up fallback bridging, but it is meant for non IP traffic.The goal is I am trying to set the ASA port as an internet gateway for VLANs.
I have a CUCM BE environment with a number of remote users with 8961 phones connecting to an ASA 5501 via AnyConnect. The phones register fine and can make inbound/outbound calls as well as four digit dialing to other users at the corporate site.
The problem is when a remote user tries to four digit dial another remote phone. The called phone will ring but there is dead air once answered and then the line goes dead.
This sounds like a routing issue to me. How to get AnyConnect clients to be able to reach each other?
I want to use an EEM applet on a Cisco IOS 2431 voice gateway running 15.1(2)T to take action upon expiration of a SIP registration (with its sip registrar). I thought that it might be possible to use existing error messages generated by the ios sip application to trigger an EEM applet.Is there a reference that lists all SYSLOG messages that SIP can generates, and their error levels? Can you show me how to turn on syslog messages, so that I can cause a SIP registration expiration on my GW and then see what SYSLOG messages are produced?
I think I understand how to write an applet and its event trigger from a SYSLOG message pattern, but I am having trouble seeing any SIP error messages at all, except if I turn on Debug, which usually produces way too many messages and may impact performance.
I want to buy an AIR-SAP1602I-E-K9 and I don't know if I can configure a MAC-BASED ACL with this AP, because I must permit the access of the wireless netwok only to determined wireless devices.
I have cisco 2504 WLAN controller with 7.4 IOS. My query is can I configure the MAC authentication with certificate based. And without using any external servers like Radius, ACS and LDAP.
configuring policy based route for my cisco router?Basically, I have a 2811 cisco router with 2 ADSL ports. 1 port is for iiNet line and another port is for Telstra line.I want to configure a policy based route on the router so that:Any traffic coming from 1 internal IP (i.e. 172.16.x.1) will go through iinet line (i.e. Dialer 0) interface.Any traffic from rest of the office will go through the Telstra line (i.e. Dialer 1) interface. Is there any easy way to configure this policy based route?
I have a network setup where two servers from inside need to communicate with a remote network via 2 VPN gateways. The destinations are same. However, the chalange is each server need to follow it's own VPN gateway. Since i can't configure PBR (policy based routing) in ASA, can i configure something like MAC Address based routing. I can't use destination based routing since the remote network are reachable from the both VPN Gateways.
How to configure dynamic VLANs (IP subnet-based) using Nortel JDM? My company is now using port based VLAN and it wastes a lot of time reconfiguring the port to its VLAN everytime their devices moved from one place to another place. So I think using IP subnet-based VLAN might solve the problem?
1.create a drawing showing a private routed network.
2. On this drawing you will show your placement of the following,why they were placed there (you can use one or more of the servers/router listed in your drawing):
I want to configure IEEE 802.1x port-based authentication on cisco switches, preferable 2960 series. Which models support this feature?. I have try with some older switches but it doesn't works properly on everyone. I have upgraded them whitout better results, there is namely an issue with TLS handshaking on some switches which produces authentication to fail.
I have signed up with Axvoice for cheap voip calls. My problem is I am trying to use three phone sets with the same adapter (grandsteam HT 286). In accordance with Axvoice's live support instructions, I have plugged the main phone jack of my house into that adapter. I am getting crystal clear voice quality in one phone set. That obviously indicates, there is no problem with the service. However, on two phone sets, voice is not clear and I am having noise and sudden call breaks. I have checked all the ports but could not find anything. I am jobless right now.
I am trying to hook up a SF300 switch to a cable modem and then plug some phones into the switch that are configured with static IPs. I am able to access the switch without an issue, but need it to pass traffic from the phones to the network and it is not doing so. We cannot do trunking because we are not using BSoD modems yet (next phase). For now, we just need the switches to pass everything from the phones to the network as is. Any ideas?
I would replace an old Levelone Router with a Linksys E2500.I have 3 different routed private networks (e.g. 192.168.1.0/24 , 192.168.101.0/24 and 10.0. 0.0/24)How can I forward different ports to this 3 different private networks with an E2500.In the "Games&Applications" Menu are the first 3 octets of the "to IP-address" are fix and corresponds with the LAN ip address.
Every device I've tried to connect to my WiFi network have no issues connecting at all, except for, as far as I can tell, Samsung Android phones. My sample set is very small, but both a Samsung Galaxy S3 (both before and after custom ROM install) and a stock Samsung Galaxy Nexus.
I've tried setting a vlan up with no encryption and open authentication, and the phones just halt on "connecting". This issue is both on the 2.4Ghz and 5Ghz Radios.
What is working is various computers with both intel and broadcom adapters, a Brother printer, and a Motorola Droid 3 and Motorola Photon Q. I'm starting to think that it's an issue with the radio in the Samsung phones, but the S3 is 5ghz compatible and the Nexus is only 2.4, so they must have different radios. I'm also pretty sure that it's not software on the phones since the S3 had the same problem with stock ROM and CM 10, and the Nexus is Vanilla Google ROM.
I'm waiting to get a chance to upgrade to the new FW for my aironet 1040, and I'm going to fire up an old 1130AG as well as test with an iphone or ipod when I get the chance; I'd just really like to find out what the heck is going on with these samsung phones.
Current configuration : 13969 bytes ! ! Last configuration change at 10:18:26 MST Sun Dec 23 2012 ! NVRAM config last updated at 10:18:26 MST Sun Dec 23 2012
I would replace an old Levelone Router with a Linksys E2500.I have 3 different routed private networks (e.g. 192.168.1.0/24 , 192.168.101.0/24 and 10.0.0.0/24) How can I forward different ports to this 3 different private networks with an E2500.Under "Games&Applications" in the" Portforwarding" menu the first 3 octets of the "to IP-address" are fix and corresponds ever with the LAN ip address of th E2500.
In our datacenter we have a 3750 stack with IP base image. I have enabled PBR and reloaded the switch. Show sdm prefer says i am using default template. The reason i want to use PBR is that we have 2 firewalls on the same work and want to be able to have granular control over which gateway out of the network they use but still be able to access all internal resouces accross wan and locally.
Created access list to identify traffic:
access-list 10 permit 10.2.3.59 (test workstation on vlan 3)
Created policy:
route-map TestASA permit 10 match ip address 10 set ip next-hop 10.2.0.3
Assigned policy to the user vlan3:
ip policy route-map TestASA
Results:It changed the default gateway to the above gateway but i could not access any resources on any other vlan, could not access resouces accross wan.
I am wondering if all routers that have a USB port to which network storage can be attached, support the functionality to enable that storage to be accessed from outside the network. If this is true how (in a conceptual sense) can the router be configured to do this and what are the security implications?
I live in an apartment where my internet is included in the rent. In all the rooms there is an ethernet socket buillt into the wall. I'd like to know how to connect a router to this for wireless internet. I have tried one router, but it buggers up the ip address and brings down the network for the entire apartment complex. I've done this twice now and don't fancy waiting another week for the technician to call out to reset things. I had a friend who lived in a simalar complex, rj45 sockets on the wall etc. He has a thomson router, which has a little black box plugged into the ethernet socket on the back of the router. Into this little black box goes the ethernet cable from the wall socket and bam, he has wireless internet, even though he has no access to the main router or switch of the apartment block. It's not failed once either. Both the router and the little black box need mains power.I think it was originally for a WIMAX connection. It's small, maybe 2"X3" inch?
is it possible for a windows7 laptop to back up to an external hdd that is usb attached to a mac ? ie. we are a mac based office for a small building contractor firm and one of the lads has a sony laptop that comes to the office each day... we need all our files backed up in the office somewhere as simply as possible...
