To check if this is enough to built point-point MPLS between 2811 abd 3745Maybe some other technology should to be used for point-to-point connection?Basically, there should be transparent connection between routers.Also, it's possible to use ISP routers as MPLS endpoints for MPLS, so seems just etherenet connection required
View 7 Repliesi have 2 routers 2811 interconnected together ,1 of these router running in circuit with 2 Mbps over Internet the 2nd one use MPLS Circuit with a bandwidth of 4Mbps,how configure the routing to route over the MPLS while IPSec act as standby
View 1 Replies View RelatedWe have about 200 spokes (2811 routers), each one connected to two hubs(7206VXR with NPE-G2) via a separate DMVPN. DMVPN is over MPLS cloud provided by the local operator. On the hubs we get very frequently these type of messages
.Feb 9 16:00:10.402: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 200: Neighbor 10.X.X.X (Tunnel3) is down: Interface Goodbye received.Feb 9 16:00:11.658: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 200: Neighbor 10.X.X.X (Tunnel3) is up: new adjacency
On the spoke
Feb 9 13:36:48: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 200: Neighbor 10.X.X.X (Tunnel0) is down: holding time expiredFeb 9 13:36:51: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 200: Neighbor 10.X.X.X (Tunnel0) is up: new adjacency
I think the default eigrp hello and holding timers (5,15) are not suitable since these are wan links.
I've studied and labeled out MPLS and MPLS VPNs several times. The situation I'm presented with is a little different from most of the case studies I've seen in my MPLS books. I've attached a diagram.
We have a IPsec site to site tunnel from our main HQ router to a Cisco ASA 5510 in the core network in the colo. This allows our HQ office to reach the private sub nets in our core without using a Cisco VPN client. The problem we are running into is that this seems to be putting undue strain on the Cisco 2811. I feel like the 2811 should be able to handle it but doing any kind of upload or download through the tunnel spikes the CPU/Interrupts and makes the router CLI basically stop responding until the traffic transfer is stopped or completed. During this time, certain Cisco SCCP phones on our Broad works platform cycle while the SIP phones on the same platform are OK. We are trying to alleviate the load on the 2811 by setting up a VRF from the HQ network to the private VRF used in the Core for private sub net communication. The problem I'm having is the the HQ also has some public traffic that I do not want to include in the VRFs and would like to have it travel through the P2P circuit we have and access the internet or other public devices through the core public IP Internet routing table.
The flow would be this:
-going to a public address use the public internet routing table
-going to private address in the 10.x.x.x or 172.x.x.x - use VRF to core Private network.
This is a little different of a set up from most of the VRF VPN examples I've seen. Most of those the CE devices is completely private. This is not the case at our HQ.
What are my best options to secure branch office connection to HQ over Provider MPLS cloud. Our existing Setup
<<HeadQuarter>> :: DataCenter hosting Email, ERP, Intranet, Voice Services 10mb link to Service Provider over MPLS CloudMPLS is terminated on a 3825 Router running advance Services
<<BrancOffice>>::Total 10 In Country Branch Offices2mb Link to Service Provider over MPLS CloudTotal users in each branch : 20 MPLS is terminated on a 2811 Router running advance Services
I have P router (7206VXR) and I need to export netflow from its MPLS interfaces to the netflow software.
View 2 Replies View Relatedin LMS (4.1) installing guide, table 'Software and Hardware Requirements for Soft Appliance', it is stated Memory and CPURequirement:
• 4 GB, 2 virtual CPU (< = 500 devices)Host CPU Core clock speed:
• Minimum 2.26 GHz Minimum Virtual CPU Reservations: Number of recommended virtual CPUs x 2.26 GHz:
• 4520 MHz (< = 500 devices)
I have HP server with 6 core CPU 2.0GHz - does it mean it does not meet the minimum system requirements (2.26Ghz)? Will I be able to go pass the installation?
According to the Installation notes for ACS 5.3 we need 500GB of storage for a working installation - if not it defaults to taking 60 GB of disk space for an eval version.
View 1 Replies View Relatedhow to setup 802.1x on the Cisco 500 Series Switches.I have done the whole implamentation in the past with Catalysts and ACS.But would like to see a guide for the 500 series.Do we need the Cisco ACS or can we use RADIUS on Windows?
View 1 Replies View RelatedI am planning to implement SSL-VPN (Any Connect) on an ASR 1002 router running IOS-XE Software Version 15.1(3)S2. I need to use LDAP for user authentication, and need to understand what are RADIUS/ TACACS requirements to use LDAP. Do I need to use Cisco ACS or can I use something like Microsoft IAS or Free Radius?
View 6 Replies View Relatedregarding the power requirements. I have this Cisco 6503-E switch and I need to know what I need in terms of power.
The manual says if using 120VAC, I will need 16A. If using 230VAC, the unit will require 8A.
I have 2 dedicated 20amps circuits both at 120V. Am I correct on plugging each of the power supplies of the cisco unit to each of these circuits?
Another question will be, do I really need to dedicated 2 dedicated 20amps circuits for the unit? Can't I just use one dedicated 20amps circtuis and connect both power supplies to it?
I am reading up on the ACS VMware appliance installation instructions and am a bit confused on the disk space requirements. It says 60Gb is required and then goes on to talk about 500GB for the secondary instance. Do I need more than 60gb? Is the secondary instance a separate machine or part of the same one?URL
View 5 Replies View RelatedAm currently running BT Voyager 2091 wireless ADSL router with BT Voyager 1055 wireless USB adapter. What system requirements does one need to upgrade to 802.11n. The OS is XP Pro x32 bit x86 based PC
View 1 Replies View RelatedWe have a 7604 chassis with the following equipments:
1. RSP720-3C-10GE
2. 7600-SIP-400
3. SPA-1X10GE-L-V2
We would like our SPA to support XFP transceiver having part number XFP-10GZR-OC192LR.
Got a question regarding 2921 modules. Can I use VWIC2-2MFT-T1/E1 along with NM-HDV2-2T1/E1 on 2921 and what is the minimum requirements for IOS image?
As I understand, NM-HDV2-2T1/E1 is supported on 2921, however VWIC2-2MFT-T1/E1 is not, VWIC-2MFT-T1/E1 only. But VWIC-2MFT-T1/E1 is not supported on 2921.
What are the VMware requirements to run ACS4.1.4? Im trying to use a VM this as the migration server. According to the cisco docs, it states that: "ACS 4.1 has been tested on the VMWare ESX server with the following configuration:
•VMWare ESX Server 3.0.0
•16 GB of RAM
•AMD Opteron Dual Core processor
•300 GB hard drive
•Four virtual machines
•Windows 2003 Standard Edition
•3 GB of RAM for the guest operating system"
I understand it will work as it "has been tested" with those specs, but the doc does not state the minimum requirements for the virtual machine. I dont want to use/find 300GB of space if I only need 20GB(as an example) to make it work.
I need to choose router for my network. I don't have any special need, besides Internet connection and DHCP for some guest clients.There are around 30 IP phones (static IP), 30 PCs (static IP), and 10 wireless APs (users get dynamic IP). Maximum load is 5 phones, 5 PCs and 20 phones/laptops connected via wi-fi.
I guess I should go for Cisco 800 series. Would model 861 be good or I will need 881 or even 891?
I have a Cisco SG500-52P along with an older SGE-2010P, am I correct that in order to stack they must be the same series?
View 1 Replies View RelatedWe have a scheduled office move where we are consolidating 2 remote offices into one. I’ve been asked to spec out the correct size UPS to support all of the network equipment for this new office.I went to the Cisco website and I see on the datasheet for the switches and router where they talk about the wattages and BTU’s but how can I go about deciphering from that information what my total wattage and BTU will be for each switch and router?What numbers should I be looking at? For instance, we have 3 3750 48 port PoE switches. So if I look at the datasheet for that switch they have 4 different columns, one for 100% throughput power consumption, one for 5% throughput, another one for 100% throughput for max PoE load and one for 5% throughput with 50% PoE loads?Is there a common method for deremining UPS requipments? For the switches I pretty sure I need to assume max PoE load in the event every port has a phone plugged into each port.
View 3 Replies View RelatedI was planning to buy 7204 VXR for my site's router for the following requirements:
- support for ATM, Serial, ISDN
- support for 3 10/100/1000 ethernet interface
- support for 2 WAN interface
However, I realized that the 7200 series will not be available for sale after September of this year!! Any "reasonable" replacement for 7204 VXR that meets the above requirements?
We implemented WLC 5508 software version 7.3, with 8 Aironet devices, most of them are AIR-LAP1131AG-E-K9, and two AIR-LAP1242AG-E-K9.I could really have benefits of VLAN select feature, but I noticed that it's not working like it should. Two interfaces are in Interface group, but from 45 clients only few of them has IP address from one subnet, others have from second sub.I see requirements for this to work is 32 MB of flash on LWAP devices..I only have 16 MB.. upgrade of flash on devices or something ?
View 12 Replies View RelatedI have a pair of 6509-E Switches running VS-720 Supervisors. We are planning to add Ace Module onto the 6509-E. Will IP Base Image suffice the requirement? Will Ace Module work with only IP Base Image?
View 1 Replies View RelatedAccording to Cisco, one of the ASAs must have an Unrestricted License [URL]:
"On the PIX/ASA Security appliance platform, at least one of the units must have an unrestricted (UR) license. The other unit can have a Failover Only Active-Active (FO_AA) license, or another UR license. Units with a Restricted license cannot be used for failover, and two units with FO_AA licenses cannot be used together as a failover pair."I am unfamiliar with the different ASA licenses, so with my current license, I am unable to enable failover on my two ASAs. Here is a snippet of the "show version" output on one of my ASAs (they are the same as far as licenses go):
Licensed features for this platform:Maximum Physical Interfaces : UnlimitedMaximum VLANs : 250Inside Hosts : UnlimitedFailover : Active/ActiveVPN-DES : EnabledVPN-3DES-AES : EnabledSecurity Contexts : 5GTP/GPRS : DisabledSSL VPN Peers : 10Total VPN Peers : 5000Shared License : DisabledAnyConnect for Mobile : DisabledAnyConnect for Cisco VPN Phone : DisabledAnyConnect Essentials : DisabledAdvanced Endpoint Assessment : DisabledUC Phone Proxy Sessions : 2Total UC Proxy Sessions : 2Botnet Traffic Filter : Disabled
This platform has an ASA 5550 VPN Premium license.
I have the following on my 6509:
Mod Port Model Serial # Versions
---- ---- ------------------ ----------- -------------------------------------
1 10 WS-SVC-WISM-1-K9 XXXXXXXXXXX Hw : 2.2
Fw : 12.2(14r)S5
Sw : 12.2(18)SXF16
Sw1: 8.6(0.306)R3V39
WS-SVC-WISM-1-K9-D XXXXXXXXXXXX Hw : 2.1
There are few documents that tell me different requirements for the WISM cards to configure VSS.
I am trying to copy a new IOS image to a 3825 router. I have verified that there is significantly more free space in flash than is needed to accommodate the image (83 MB free, new IOS is 34 MB). I have also verified that the router has the necessary hardware requirements for the new version of IOS, though it is a moot point with this issue. When I try to copy the image from either TFTPd32 or the Solarwinds TFTP server,the copy gets to about 97% and then shows a mixture of timeouts and out-of-sequence packets (.'s and o's) before telling me the copy job timed out. I have tried bumping both the "timeout" and "max retransmit" on TFTPd32 to 2-3 times their defaults, but it made no difference. The router and my laptop are connected to the same 3550. I have also tried two FTP servers but all I get is "Protocol error" on the router when I try to use either. I see the following in the TFTP debugs: [code]
View 2 Replies View RelatedI have this that comes up when i go on the networking
View 2 Replies View RelatedAccording to the note at the bottom of a VMware KB Article "Cisco Nexus 1000V and VMware vCloud Director 1.5,"
"Note: You are must use the Cisco Virtual Network Management Center (VNMC) virtual appliance from Cisco. This is a separate products and needs to be licensed from Cisco."
Is this actually the case? I know you could use portgroup based network pools with vCD 1.0 and 1kv. Can I use the 1kv with VLAN-backed network pools in vCD 1.5 without the Virtual Network Management Center or is it required?
this note is from the 5508 controller config manual, does this apply to 1040 access points in a mesh network?
Note:The recommended power source for MAPs is either a power supply or power injector. PoE is not a recommended power source for MAPs.
is there any issue in buying air-ap1142n-ek9 802.11A/G/N FIXED AUTO AP INT ANT and later on converting it into lightweight under the control of air-ct2504-15k9 2504 WIRELESS CONTROLLER WITH 15 AP LICENSES ?Are there any requirements on the SW of the WLC and the IOS of the AP? The reason of the choice is budget.
View 1 Replies View RelatedI'm running WCS 7.0 on a WLSE appliance. Lately WCS has produced the following alarm:WCS 150.3.101.7 does not meet the minimum hardware requirements for disk space. Available: '29'GB. Minimum requirement: '30'GB. I have old WCS versions (3, 4, 5 and 6) so could delete those but I'm wary in case I take out the data too.
View 2 Replies View RelatedI need to order LMS for one of our customer with 500 devices and reporting capabilities ..... So i chose base license "R-PI-1.1-K9" and 500 device license "R-PI-1.1-500-K9" and Compliance Management - 500 Device License "L-PI-1.1-CM-500"? i tried to search server capability for my requirements & Operating system and couldn't find it .....
1) What is the server requirements ?
2) What is operating system (windows 2008 or VMWare VMware ESX/ESXi Version 4.1 or 5.0)
3) Is their any dedicated appliance from Cisco ?
A couple of questions about the AP541N:
1. How to get these installed and working properly, especially in a clustered environment? I have read so many comments about slow performance, no performace, bad coverage, etc... They sound like the perfect product for my intended use if they actually work as advertised.
2. what is the installation requirements for multiple units? (What is the minimum/maximum distance between units? How many units are needed for a certain area?
I have a cisco 1941 router. Stock standard vanilla hardware, no extras. Standard universal image. Data and Security not enabled.I would like to add a 4 gigabit port POE switch (EHWIC) module to the router..The 4 port POE switch module will be used to power and connect 2 x Areonet AP's for my home. I'm replacing a Apple Airport Extreeme and Express setup. I'll possibly later use the two remaining POE ports for security cameras.My question is, what extra hardware and or IOS version do I need for the POE swtich module to function on the 1941? [URL] I think this is the model I want EHWIC-4ESG-P #4 port 10/100/1000 Enhanced High-Speed WAN Interface Gigabit Ethernet switch with Power over Ethernet?
View 1 Replies View Related