I have a Cisco 2811 with an additional HWIC-4ESW card. [code] I need to NAT anything heading out of the WAN port. [code] I can ping anything connected to my other private networks from my 10.0.24.0 network but nothing on the Internet. [code]
View 3 RepliesI changed my router from Belkin F5D 7633-4 (G) to Belkin F5D 8636-4 v2 (N) on the 7633 I was able to set up virtual server page and access my CCTV cameras remotely with no problem but on the 8636 with the same info into virtual servers page I get "No 1 WAN address is invalid".The format of the page is slightly different the 7633 required "inbound Port" number to be put in twice in different boxes side by side and the same with "Private Port".The 8636 has only one box to enter the port number under each heading.
View 3 Replies View RelatedHow do you configure port-security on a 2811 router? If not, is there a way to configure some type of security on each port ?
View 3 Replies View RelatedBasically the problem that I have is that I have a new Exchange server sitting on 192.168.12.2 IP address and on the router I have this NAT enabled
ip nat inside source static tcp 192.168.12.2 110 212.115.5.5 110 extendable ip nat inside source static tcp 192.168.12.2 25 212.115.5.5 25 extendable
The Exchange can receieve emails but it will not send them. It cannot make connection to any of the smart hosts on port 25 or can't even send mail using DNS. When I run telnet my.smarthost.com 25 it will not connect but if I run that from the router then it connects fine.
I need Know what connection is using on Cisco 2811 router.I have this interface in Cisco 2811, I need Know if this port is connected to Fiber or Copper. I think is copper with RJ45 but I see 100 base TX/FX so this make me doubt about it because TX its for copper link and FX for fiber. [code]
View 5 Replies View RelatedI have a laptop with a single physical NIC which I have used the advanced management tools to create two virtual NICs (say vlan 10 and vlan 20) and both are on the same subnet (say 192.168.4.x). One NIC is for normal TCP/IP traffic and one is for broadcast/multicast traffic (I have some custom software that requires this to be the case and works fine on an older laptops with built-in physical NIC and PCMCIA XIRCOM NIC). The dual NIC laptop communicates with a dual NIC server via a Cisco 2811 router (which has a 16 port switch module at the back) and has vlans set up so.
What I want is for the single NIC laptop (with two virtual NICs) to be able to also communicate with the server. Basically, one NIC is for normal traffic and one is for multicast/broadcast traffic. All three machines need to be able to talk to each other using the NIC for normal traffic and both laptops must be able to receive broadcasts from the server. What is the best way to configure the router to handle the trunking/tagging? Most configuration documentation I read has two complete subnets for the two virtual NICs. Note that all three machines use static IPs and are part of a workgroup so no DNS and domain servers etc.
My setup is ISP-2811-PIX 515E-LAN. Right now, I am doing a PAT for IPSEC tunnels to terminate on the PIX. Do you recommend I use the 2811 instead of PIX for VPN or keep things the way it is? Trying to determine the best box to use.
View 4 Replies View RelatedI need to know which IOS should I download for my 2811 router to get all ip sla features
Router(config)# ip sla ?
<1-2147483> Entry Number
auto
enable
Note this is from my 2951 router.
I need full features like this in my 2811 router.so which IOS should I download.
I want to upgrade LMS 3.2 to 4.1. But when I look to "Special Notes and Exceptions for Devices Supported" document ,It seems that 2811 have 2 SysID.
Why there are two IDs for the same hardware and under which ID will my 2811 routers be classified into inventory database. This information is important since customer want to have support of 2811 in CiscoView of LMS 4.1 (around 200 devices).
Looking to implement CoPP in our 2811 ISR. We currently have the base 256mb of DRAM in there. Will this bring our router to its knees? I've priced a RAM upgrade.
View 0 Replies View Relatedi have a branch router that connects to mpls WAN. Also has a second interface that is used for dmvpn failover in case WAN goes down.We want to use this second interface also as the primary internet circuit for the branch. I changed the default route to the next hop address on the other side of the second interface and expected this to work.But i was told i need to set up NAT for this to work, and set up an ACL for NAT to use. how to set up NAT?
View 1 Replies View RelatedI have BGP router 2811. Want to configure BGP on it with two ISPs. How can i configure it?
View 1 Replies View RelatedI want to configure BGP but i am finding it very difficult to know BGP as I am new to this concept.
What is theoretical and practical approach to configure bgp??
I have to configure my office router 2811 for two ISPs which will be acting as fail-over.
I have to start it from scratch.
I have a 2811 that I can remotely VPN to using Cisco VPN client however I cannot see the internal admin network (10.35.5.0).
Current configuration : 4845 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
[code].....
I have a particular site that is causing me trouble, this site is connected in a back to back configuration using 2811 at CO and 2621XM at CPE. The CO end is also the CO for 3 other sites so has a total of 4 wics installed (WIC-1SHDSL-v2), these other sites also have 2621XMs for the CPE.
The problem i am getting is when one site in particular transfers large files to/from client machines, the CPU on the 2811 jumps to 99%:
CPU utilization for five seconds: 99%/98%; one minute: 26%;
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
11 12881868 37249378 345 0.49% 0.50% 0.51% 0 ARP Input
54 8548592 30375358 281 0.40% 0.45% 0.41% 0 XDSL BACKGROUND
[Code]......
We have a cisco 2811 router with 2 ADSL interfaces. One dialer interface is used for internet and another dialer interface is used for VPN.
The dialer interface that is used for internet purpose is "Dialer 1" and the VPN is "Dialer 2".
The route looks like this: ip route 0.0.0.0 0.0.0.0 dialer 1
Basically, I am able to the ping the external IP address associated with the Dialer 1 interface, however, I cannot ping the external IP address associated with Dialer 2.
I just bought an additional router for my network and I'm in the process of setting it up.I have however hit a snag with enabling ssh on the device. It is a cisco router 2811 running IOS 15.0 (refer below to my attempts)
View 3 Replies View RelatedI want the below mentioned IOS image for backup purpose. But I am not finding it in cisco.com or anywhere in the in internet. where can I get this version of image other than my router.
c2800nm-advsecurityk9-mz.124-3d.bin
I have a 2811 ISR configured to provide the following services to my network: Internet access to LAN usersCisco Call Manager ExpressSite-to-stie VPN to 3rd party networksVPN server to provide VPN access to remote usersSecurity Zone configurationsStatic NAT configurations.Now I recently just got the ASA5510 device and I am not sure how to go about with the setup, whether to put the ASA in between the internet and the ISR (Internet - ASA - ISR - LAN), or put the ISR in between the internet and the ASA (Internet - ISR - ASA - LAN)? While i know I can move most of the config unto the ASA, i know that the CME cannot be moved, hence I would like to do the setup such that users on the network still have access to CME.
View 2 Replies View RelatedI've setup a NTP service by using Cisco 2811 routers. This works fine at the moment, but in the end there are some questions left.
1. I'm using two 2811 Routers, one for primary, which is resceiving the time from PUBLIC NTP 1, and one for backup, which is resceiving the time from PUBLIC NTP 2. Is it possible to compare these to times an check if the match? And if not, generate an alarm via e.g. SNMP
2. Is it possible to check via SNMP, if the routers are reaching PUBLIC NTP 1 and PUBLIC NTP 2 for sync?
I have a site that is connected to the internet via T1 into 2811 runing C2800NM-ADVENTERPRISEK9-M), Version 12.4(11)X. I have noticed that when i do a port scan on the outside nat pool i see well know ports in the closed state .ie...7,21,22,23,25,99,100,80,443. These pools for end users to access internet. Does this pose a security risk? What can i change to provide end user access to web but not let these well know ports open?
View 6 Replies View RelatedI have a Cisco 2811 router with two HWIC-ADSL cards configured for dsl connection. I have two lines from the same ISP and i am load balancing between them. I have created a couple of SLA's to check the state of the connections and add to the routing table the two default routes if both are up or any one of them is up.My problem is that when i try to download big files (especially antivirus updates) the download at some point stops (especially the antivirus exits with an error of unreachability). If i shut down one line everything works fine.Could i use something (configuration-wise) to prevent this problem from happening?????Is there any way i can combine the two lines? They are simple ADSL connctions with static ip's.
View 8 Replies View RelatedI want to create a VPN between two PC's, (the server "Data" and "Remote Desktop" check the topology below), the Router Clabeck (cisco 2811 ) is connected to the internet through int f0/0 using a PPPoE connection and connects all the LAN PC's by PAT to the internet (you can see all the configurations in the Show Run below), the "Remote Desktop" is any PC with internet connection.
F0/1 F0/0
DATA--------------------SW-------------------ROUTER(Cisco 2811)---------------------INTERNET---------------REMOTE DESKTOP
192.168.1.51 192.168.1.254 201.122.53.177 192.168.1.1
Current configuration : 2116 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
[code]....
I try to implement the url filtering feature on a cisco 2811 router and whenever i enable the parameter map patterns the router retuns (after some time)
%Unable to compile obj regex.[code] The result is that the router blocks ALL webpages without giving a block page message.
I am currently configuring a number of cisco 2811 routers that require the BGP exterior routing protocol, however the IOS version (12.4) currently installed does not support the bgp protocol.After entering the commands into the cisco CLI 'protocol not in this image' is returned.
View 2 Replies View Relatedhow many extra interface port can be plugged in to the 2811 router ,there are 2 fixed FE port on this router and i have 3 connection i.e one mpls link , one internet link and one sip trunk .. some body confirm me that i can insert module in 2811 ?
View 5 Replies View RelatedI have a 2811 that is really hitting the CPU hard. Nothing shows on CPU processes. It has an IPsec VPN tunnel back to HQ which also has a 2811 that terminates the VPN. The HQ has 2-3 IPsec tunnels to other remote sites. The CPU at the HQ avg 50% utilization during business hrs, peaks at about 80%. The remote one is very high 95% peaks, avg 80%-95% during business hours with bandwidth utilization of only 10-20Mbps. I read somewhere that its possible that fragmentation could be causing this. My question is, if I set the MTU to 1450 on the remote, I am guessing I will need to do all the other routers as well, the HQ and other remote sites? Siince they use the same outside interface to my HQ, is that correct?
View 3 Replies View Relatedlatest supported version of IOS for the Cisco 2811?
View 3 Replies View RelatedWe have Cisco 2811 router and facing high CPU utilisation as 70%/67%;,IOS Runing :c2800nm-advsecurityk9-mz.124-3f.bin.
View 4 Replies View RelatedIs there a way to allocate CPU or memory resources to specific processes - similar to a QoS-style configuration where you can prioritize the processes being handled by the CPU? We have a 2811 router whose CPU periodically spikes to 100% utilization. At these times, all of our EIGRP neighbor adjacencies bounce - either a peer goodbye is received or the hold time expires.
Our thinking is that we could possibly tell the router to prioritize the EIGRP process with the CPU so that routing is maintained, even though we realize other processes (like qos or ISAKMP for our tunnels) may suffer.
How to replace fan incisco 2811 router in live or down condition?
View 2 Replies View RelatedWe're having a duscussion here and the bet is the same cable - straight-thru ethernet - is used for a serial card be it single, dual or quad port - is that true?
View 8 Replies View Relatedwhen I got past my current hang up, I marked the thread as answered, so I wasn't sure if I should start another or continue on...
I've tried going through that troubleshooting doc, but I still can't figure this out.
When turning on debug for the 2811, I'm not seeing any thing.
show debug
Cryptographic Subsystem: Crypto ISAKMP debugging is on Crypto ISAKMP Error debugging is on Crypto IPSEC debugging is on Crypto IPSEC Error debugging is on
#show crypto sessionCrypto session current status
[Code].....