Cisco WAN :: 2811 QoS With MS Lync 2010 Client
May 28, 2012
I am working with a client to implement QoS for their Lync environment. Lync 2010 has this feature to mark dscp values based on packets tagged with logical ports. As an example, packets on port 49000 til 49999 will be marked to dscp 46(ef). On Cisco 2811 router, I am basically honouring the markings by the application and placing bandwidth priority on them and sending it out to the WAN.
The behaviour that I notice is that when port based packets are marked with a certain dscp value on the application, the router policy map doesn't pick up any packet increment for that dscp. But when all packets without port assigning to it are marked with certain dscp value, I can see increment on the router policy map for that dscp match. Why is this so???
The client wants the Lync to mark the packets with dscp value and the router is suppose to honour the marking, schedule the priority and send it out. [code]
View 5 Replies
ADVERTISEMENT
Apr 19, 2011
I have a cisco 2811 with security bundle with IOS 12.4(13r)T I am planing to use this router as a VPN gateway for company ( i.e)
1. LAN 2 LAN VPN ( Supporting if remote site is having dynamic IP)
2. Remote access VPN for VPN client
I have configured the router ( attached is the configuration) I have not tried to use the LAN to LAN VPN ( first i complete remote access VPN and then check L2L) I tried to use the remote access VPN I am able to connect from vpn client software and got the IP address but unable to ping the servers in LAN.
View 13 Replies
View Related
Sep 15, 2012
We have CUCM & lync server setup and its working fine if any one calling each other with DNS load balancing. But customer want ot use Cisco ACE 4710 instead of DNS LB.We have configured Cisco LB and deploy but when CUCM user calling to lync user call going to disconnect after 4 sec and also Lync users unable to make call to CUCM.And also LB deploye between share point but when users are trying to open web session that time web page going to show page cannot display.
[code]....
View 1 Replies
View Related
Apr 2, 2013
I have a 2811 Router (config below) with VPN configured. I can connect through the VPN and access devices on the native VLAN but I can't access the 10.77.5.0 (VLAN 5) network (I don't care to access the 10.77.10.0 - VLAN 10 network). This issue has been plagueing me for quite a while. I believe it's a NAT or ACL issue. VPN client IP pool is 192.168.77.1 - 192.168.77.10. [code]
View 4 Replies
View Related
Nov 2, 2011
I'm generally pretty good with VPN issues and with SSL certs, but this is my first rodeo with VPN and certificates together. I've got a Cisco 2811 router running IOS Firewall (12.4(25)) and for a while now, I've had VPN clients connecting using PSK's and XAUTH. In order to tighten security, we'd like to move away from PSK's with Aggressive Mode and use certificates with Main Mode.I've been trying to use the Cisco 2811 as the CA, rather than use a Microsoft server or third-party provider. I think I'm pretty close to getting this to work, but something isn't quite right. My VPN client software does connect to the 2811, and I get prompted for the XAUTH creds. If I supply the right creds, I do see in my VPN log window that I've gotten assigned an IP address from the inside VPN pool, my split tunneling rules come through, but the VPN disconnects almost immediately and I never get a chance to try any pings or to send any other types of traffic. [code]
I have attached a sterilized copy of the 2811's current config (2811_sterile.txt), a copy of the 2811's debug output when the VPN client tries to connect (vpn_client_connect_sterile.txt), and a copy of the VPN client's log with IKE on High and Certificates on High (vpn_log_sterile.txt).FWIW, the 2811 is NOT behind NAT, but my VPN client IS behind NAT. However, I have tried using a direct connection with the VPN client and it didn't seem to change much so I'm not convinced this is a NAT issue.Again, I've never used a Cisco router as a CA and I've been battling this problem for several hours now so the 2811's config may have a lot of unneccessary lines in it at this point.
View 1 Replies
View Related
Oct 15, 2012
I'm trying to configure LLDP-MED between a Cat45010+E Sup7 (IOS 15.1) and Polycom CX600 Lync phones. I have created and applied the correct network policy for the interfaces.
From these sites, I need to send all the correct TLVs or the phones won't respond: {URL}.
When a scour the config of the switch, I can't find any related configuration commands relating to the specific LLDP-MED TLV components which are enabled/disabled. Where are they hiding? I would like to confirm which TLVs are being sent by my switch and if they are matched to the phone. I can always use the DHCP method, put this is not preferred.
View 3 Replies
View Related
May 20, 2012
How do I set my network key in Microsoft Word 2010
View 1 Replies
View Related
Aug 7, 2012
We have acquired a cisco sge 2010 to replace our distribution switch. I set up the 802.1X network. Everything works great except I can not find how to enable 802.1x with 'Wake on LAN' on this kind of switch.
On catalyst I saw that it was sufficient to activate this control "authentication control-direction {both | in}" Except that it seems not to exist on this switch. Is there another way to enable 802.1x on WoL without using this command?
Or how to allow the magic packet (WoL) on a tagged port by unauthorized 802.1x?
View 4 Replies
View Related
Apr 4, 2011
i am working on a project with 2 security ASA's 5520 with Microsoft ISA/TMG-2010 Server having 2 DSL's my question is regarding the designing issue where should i connect the 2 DSL's using ISA/TMG-2010..
View 1 Replies
View Related
Sep 8, 2011
We have a pair of ACE 4710 devices in front of a TMG 2010 array (3 members) and are having some issues. We have a nat pool on the ACE and need to be able to use integrated authentication in TMG since we are filtering URLs based on user ID. For example some users might have access to certain websites that other users do not have access to. TMG does all this fine when we send traffic directly to one of the TMG servers and it can successfully authenticate the user using the active directory username that was passed through. The problem occurs when we send traffic through the ACE first, upon which time the user credentials are no longer appearing to TMG and the user is getting prompted for a username/password whenever they try to access a website. Even when they do enter their username and password (which they shouldn't have to do) the request is still denied by TMG since it is coming from "anonymous" instead of their actual username.
Another problem we seem to be having which isn't as important right now is the fact that since we are using a nat pool on the ACE, every web request to the TMG servers comes from one of the NAT addresses, rather than the original client IP. Is there any way to get around this and have the actual client IP show up instead?
View 7 Replies
View Related
Mar 24, 2012
Currently i am having a scenario where i have setup RV042 and which is connected to Microsoft Forefront 2010. PPTP works fine only on rv042 subnet but i am not able to access the "internal" network of TMG.
RV042 (172.16.1.1) ---> TMG [external] (172.16.1.2) ---> TMG [internal] (192.168.1.1)
Is there any way through static route to access the TMG internal network through RV042 pptp server ?
View 3 Replies
View Related
Jun 20, 2012
Lost pin number for Microsoft 2010?
View 1 Replies
View Related
Dec 16, 2010
I downloaded the ISO for SSE 2010, and the damned thing is too big to burn to a DVD5. I doubt seriously MS expects people to have Dual-Layer discs handy.Is this intended not to be burned, but installed from the desktop instead? I can open the ISO just fine with WinZip.
View 5 Replies
View Related
Dec 10, 2012
I'm looking to do a basic QOS configuration which states that VOIP traffic has priority over anything else.
View 3 Replies
View Related
Feb 26, 2013
We have the following setup on our Cisco ASA version 8.6.1 One to one NAT rule from outside to our Exchange 2010 cluster IP address (DAG group). This is working fine for clients on the internet accessing their emails via Exchange using their phones. The ASA has the MAC address of the active node from the cluster but when the cluster failover it cache the IP address and are not updating the new MAC when the cluster failover. So users from the outside are unable to connect to the new node from outside the ASA as the MAC address from the passive node is in the MAC table. The MAC address on all the switches update within 2 seconds on the internal network and users don't notice any outage.
View 4 Replies
View Related
Nov 16, 2012
Im testing ASA 9.0, that according to the release notes should support SharePoint 2010.But I still get the same problems I had with previous versions: the ribbon does not show up (just a loading spinner) and javascript popups do not show as well.
View 3 Replies
View Related
Nov 9, 2011
I have got a TMG 2010 and i want to use Skype through it. if HTTPS inspection is enabled skype doesn't work, if it is disabled skype is working.What can i do for using Skype behind a TMG with httsp inspection so i want to use 8080 port only.I have excluded the 1 PC from HTTPS inspection or the destination URLs from HTTPS inspection.
View 1 Replies
View Related
Jan 22, 2013
I think that our users are at the largest capacity for attachments, twice in the past week one of our users did not received important emails because of the attachment size limit. The problem is that the sender thinks we got it b/c there is no bounce back and we have no record of the email being sent. my question is how do i increase the attatchment size for incoming emails?
View 4 Replies
View Related
May 10, 2012
No Network connection after Office 2010 install, I have limmited or no connectivity. I've removed and reloaded drivers, reset router, performed a netsh flush, tried to manually connect, kicked it, threw something at the wall and still no luck.
View 6 Replies
View Related
Jun 3, 2013
I reinstalled my windows7 again, because my laptop was jamming so much. But i cant connect to internet via wireless. I dont have any other options to connect my computer to internet other than using wi fi. I think it says i didnt install the wifi driver. i tried something, but it didnt work. btw i have inspiron 15r bought in the end of 2010
View 16 Replies
View Related
Dec 27, 2011
if the sge2010 switch support Routing Information Protocol (RIP) and if so how do I enable it. I have a small wireless router that support it and would like client connected on it te bo visible from the wan side and that worked when I had another device doing the routing with RIP support the wireless router was picking up that information and the routing for the wireless client was working.
View 2 Replies
View Related
Jun 26, 2012
I am trying to port forwarding Exchange 2010 OWA using ASA5505, wherever I used object NAT or Twice NAT it just doesn't work.... here is my config:
access-list outside-access remark "Exchange Server Access Rules"
access-list outside-access extended permit tcp any host <public x.x.x.11> eq smtp
access-list outside-access extended permit tcp any host <public x.x.x.11> eq https
[code]...
note that i use public ip <public x.x.x.9> on the outside interface for PAT, so all hosts in the same private can access internet
View 1 Replies
View Related
Aug 3, 2011
We have a 5520 ASA running 8.4(2). We are trying to setup Clientless VPN access to our SharePoint 2010 environment. We have most of it working, however there are a few things that do not function right in SharePoint via the VPN but function fine internally. Are there any special things to configure specific to SharePoint? Some of the things that do not work include the SharePoint ribbon, up level function, opening of documents within SharePoint, etc.
View 3 Replies
View Related
Jan 6, 2013
Lately I've noticed some strange behavior on some of the switch ports. When I go through the logs my SGE2000/2010 stack, I see that some of the ports randomly lose their connection:
2147482703 05-Jan-2013 04:11:43 Warning %LINK-W-Down: 2/g14 2147482704 05-Jan-2013 03:35:20 Warning %STP-W-PORTSTATUS: 2/g33: STP status Forwarding 2147482705 05-Jan-2013 03:34:50 Informational %LINK-I-Up: 2/g33 2147482706 05-Jan-2013 03:34:47 Warning %LINK-W-Down: 2/g33 2147482707 05-Jan-2013 03:34:19 Informational %LINK-I-Up: 2/g33 2147482708 05-Jan-2013 03:34:17 Warning %LINK-W-Down: 2/g33 2147482709 05-Jan-2013 03:34:15 Informational %LINK-I-Up: 2/g33 2147482710 05-Jan-2013 03:34:14 Warning
[code]....
I'm having trouble locating the source of the problem. The devices connected to the port are servers and desktops. This happens frequently throughout the day, but not always on the same ports. What could cause the random drops?
View 8 Replies
View Related
Oct 13, 2011
I have need to test async communications through a pair of CGR 2010's..This emulates some particular serial-talking-only devices at either end that want to communicate with eachother. I've done stuff like this before but with modems attached to the PC's.
View 1 Replies
View Related
Nov 7, 2012
I'm setting up a Network Monitoring System in Nagios and Nagvis. Now, I want to monitor the cpu and memory of the switches SGE2000 and SGE2010 with SNMP. Does the OID for the switches SGE2000 and SGE2010 (CPU and Memory).I can't not seem to find them on the Internet(searched for hours).
View 1 Replies
View Related
May 17, 2011
I need to move the client machines off of the 3750 (and their DHCP dependency on it) to the SGE2010 and absolutely route their internet traffic out through the outside interface on the 5505. They must also be able to communicate back into the internal environment in order to communicate with the production servers.
The clients currently use .254 addressing through a dumb dell switch to the 3750 but I am trying to migrate them over slowly to the .253. I know that the 2010 will not do DHCP, so I am putting a DHCP server on that switch right now. The 5505 won't let me add an additional nameif statement onto one of the other eth0/x interfaces and I'm not sure if that has anything to do with it's capabilities to act as a DHCP server (it's not an option in the ASDM) or it's ability to serve as the internet gateway for the 2010 clients. (Side notes: The 5505 has a base license and is currently also connecting 1 site to site VPN. As is the 5520, so all of it's interfaces are used as well).
I statically assigned a moved client with a .253 address and plugged it into the 2010. I have tried giving the 2010 both a .4 address and a .253 address but neither will allow me to ping any of the addresses on the 5505. The 2010 shows automatic routes to the two subnets and I set it's default route to 253.1. The link between the 2010 and the 3750 works - clients receive a .254 address from the 3750 and can get out to the internet via the 5505 and reach the production servers as well.
Why won't the 2010 see the 5505 as a gateway and allow clients to get to the internet and also traverse the 3750 when they need access to the production network?
The reason why I dont' just connect the two swtiches and call it a day is because I also need the production servers to ALWAYS go out/receive web requests via the 5520 outbound/outside interface. I'm having such a hard time wrapping my head around why i can't get my clients moved over to the new switch, I haven't even grasped how I'm going to do that yet.
View 1 Replies
View Related
Jan 24, 2011
I lost my network connection after installing Microsoft office 2010.. what can I do to get it back ? I know it is this as i have been fussing with my computer all day.. I created a system restore point just before I installed it.. had network connection.. installed office 2010 and now once I rebooted I dont.. I am running Win 7 enterprise.
View 8 Replies
View Related
Sep 27, 2012
I have a toshiba 2010 windows 7 laptop, and like two days ago it wouldnt connect to my wifi. i keep going to network and sharing but my network wont come up everyone elses does though. ive tried to fix problem but it just keeps saying connect to a network..or plug in ethernet.
View 1 Replies
View Related
Jan 1, 2012
I want to work on quickbooks 2010 pro between my desktop which is windows vista and my lap top windows 7. I will be the only user, how do i set this up?
View 3 Replies
View Related
Dec 13, 2011
We had a SGE-2010, just purchased 2 (two) SGE-2010P. I want to stack the switches (all 3) (unless there is a better way). Not sure what is needed hardware wise, and how to physically wire the switches. Had switches years ago (diff brand) that used a special cable that connected the switches. It seems that is not the case here. I have not used fiber in networking before so I am new to that part, I’m willing to learn, just need pointed in the right direction.Can all three switches be stacked, (1) SGE-2010 & (2) SGE-2010P? I THINK I need to use the GBIC port 4 to stack, I understand 1 port is enough if two switches are used, but what about three or more switches.What are the other GBIC ports used for? Will I be better off (can I ) use the GBIC ports LAG (2 ports) to the other switches? Or would regular ports work just as well?
View 6 Replies
View Related
Mar 20, 2012
i have a question about tunneling a software EasyVPN client to a client ASA Network. It looks like this:
EasyVPN Server 192.168.202.0/24 Network extension mode to Client EasyVPN ASA 192.168.1.0/24 This works fine in both directions. But now i want to connect the client ASA network via EasyVPN software client from outside. The user are already able to connect to the ASA Server on its static outside IP obtaining an IP from a 192.168.21.0/24 pool. This works fine. But how am i able to connect to the 192.168.1.0/24 network from this client?
View 5 Replies
View Related
Apr 18, 2013
how to make the java SSH thin client applet bigger in SSL VPN Clientless portal?It works and all that but the window is literally half the size of the monitor and unworkable. You can't even hit tab! (tab moves focus around the browser...)I am using the latest java applet (Oct 2012) and ASA OS 8.4(5)
View 3 Replies
View Related
