Cisco WAN :: 2851 - How To Route / NAT Based On IP With 2 WAN Connections

Mar 29, 2012

I have a Cisco 2851 (with a 4 port switch module) that I am trying to set up with two different internet connections, and have it route traffic out to them based on the source IP. One connection is a 50mb Comcast connection, another is our T1 that our servers are hosted on. The goal is to guide server/phone system traffic to the T1 and have the rest default to the Comcast. I currently have the 2851 connected to our Layer 3 switch (Dell Powerconnect 6224) with a subnet created between them. Static routes have been created on the 2851 back to all of our existing subnets. Traffic flows internally without a problem between the subnets and 2851 (and vice versa). I set up the 2851 with route-map's in the NAT to control the flow of traffic, with the default route set to the Comcast connection. Default route works great, speedtest shows full speeds and everything looks great. The problem happens when I apply my route-map policy to the internal LAN interface with the ACL list of IP's that I want to guide to the T1 (with a next-hop of the T1's IP address). I tested some tracert's and pings from one of the IP's in this list and they would stop at the T1 modem and not go any further. I did a "show ip nat translations" and noticed that the "outside" portion (right half) was blank for every IP that was in the ACL or related to the T1. So my guess is it looks like this is not doing NAT for the T1? I double-checked that I had my "ip nat inside" on the LAN interface and "ip nat ouside" on the T1 VLAN interface and Comcast interface and they were there.

View 6 Replies


ADVERTISEMENT

Cisco WAN :: 2851 IP Based Bandwidth Allocation

May 16, 2011

I have Cisco 2851 router & need to allocate bandwith based on IP's. eg. 192.168.1.1 should use 7 Mbps & 192.168.1.2 should use 2 Mbps & 192.168.1.3 should use 1 Mbps. Let me know the configuration on how to execute it on a router.

View 4 Replies View Related

Cisco WAN :: 3725 - Route-Map For Policy Based Routing

Feb 2, 2011

I have been using a route map to pick WAN exit points (PBR) on a 3725 router.  This have been working fine with /24 networks.  I am trying to pick the first /28 piece out of the 10.1.1.0 network and send it out a different exit from the rest of that network.  I have tried the /28 entry at the start and end of the route map, although I thought the first match would stop any further route map processing.  The entry does not seem to have any effect, as traffic from all addresses in the 10.1.1.0 /24 network exit per the "route-map 10-LAN permit 11" section.
 
access-list 5 remark Ten Dot 1 low 63 IPs
access-list 5 remark SDM_ACL Category=2access-list 5 remark Ten Dot One Low 63 IPs access-list 5 permit 10.1.1.0 0.0.0.63 log
[ code]....

View 11 Replies View Related

Cisco WAN :: Configure Policy Based Route On 2811 Router?

Jan 19, 2013

configuring policy based route for my cisco router?Basically, I have a 2811 cisco router with 2 ADSL ports. 1 port is for iiNet line and another port is for Telstra line.I want to configure a policy based route on the router so that:Any traffic coming from 1 internal IP (i.e. 172.16.x.1) will go through iinet line (i.e. Dialer 0) interface.Any traffic from rest of the office will go through the Telstra line (i.e. Dialer 1) interface. Is there any easy way to configure this policy based route?

View 8 Replies View Related

Cisco WAN :: 1700 - Route RDP Port Based Traffic To WAN Interface

Jun 11, 2013

this is my first time configuring a cisco router. For instance, a cisco router 1700 with 2 ethernet WICs and 1 LAN port. We have 2 ISPs one more stable than the other. We use an RDP session to an external host identified by lets say IP address 200.1.1.2 using ISP2 to get to this computer.   We use ISP1 for all the internet usage, web pages, youtube etc.  We are thinking of using this cisco router 1700 to make the packet filtering and routing of this RDP session to the correct ISP2 since we only have 1 NIC per computer on the LAN side.
 
The main idea would be:
 
                                                       | YES -----> ----------- then use  ISP2
LAN--------->  Are the packets RDP ?
                                                       | No-------->  ----------- then use ISP1
 
Does this can be achieved using packet filtering using extended ACLs and to be router from the lan interface to route rdp (port 3389) packets to ISP2 WAN interface?

View 2 Replies View Related

Cisco WAN :: 4507 - Preferred Default Route Over Another Based On Source IP

Jan 21, 2013

2 ISP's connected to a 4507, both with seperate public IP blocks. Based on some source IP addresses on the LAN they would either use ISP-A or ISB-B's connection based on what I define.

View 3 Replies View Related

Cisco WAN :: Nexus 7010 - Advertise Default Route Based On HSRP State

Sep 24, 2012

I've got two Nexus 7010's running HSRP north bound to a pair of ASA's, and BGP south bound to four 6509's. Is it possible to advertise default route to BGP neighbor (or prefer it via MED), only if the node is HSRP-active?

Essentially the goal is to create symmetry for inbound/outbound traffic. Only way I can think of so far is via an EEM script, so that when it sees  HSRP go active via syslog, it would kick off an action to remove ASN prepend,  or reduce MED, and the opposite if HSRP goes standby.

View 2 Replies View Related

Route Connections For Multiple NICs Setup?

Feb 27, 2013

I have the setup as following on my PC:

[code]...

I use the fibre internet for almost all internet activities since the speed is fast.However, when I do school's stuff, I need to VNC to my lab's server. Hence I need to connect to school internet point. External IP cannot directly connects to my school's server.Therefore, I would need to force Windows (or VNC) to use the connection of the Wireless Ethernet card when I VNC to my lab's server. But I want to use my fibre for all other internet activities.

View 4 Replies View Related

Routers / Switches :: How To Connect 3 Outside Connections And Route Them Properly

Jul 19, 2012

We are planning 3 Internet Connections into our building. 1 will be for actual Internet traffic, 2nd for Voip phone system, and 3rd for internal network for Active Directory...etc. Oh the AD servers are controlled by another business so technically this line is still considered and outside line and is a T1. What I need to know is how best to make this all work so that our internet phones use the VOIP system, computers can log into the domain and access that network but use the Internet network for actual internet traffic? We were considering a series of managed switches and creating 3 VLAN's but I'm thinking we instead need a new router that all 3 networks connect to and dishes out DHCP to computers and phonesn example network is below.192.168.1.x ----> Internet (all computers use for internet traffic)72.10.10.x ----> VOIP (All physical and software phones use this network)10.10.10.x -----> Connection to external company that controls our network and has domain controllers, mainframe...etc.

View 2 Replies View Related

D-Link DIR-615 :: How To Route All Incoming Connections To Default To Web Server

Jan 3, 2013

How to configure my DIR-615 (Hardware Version E1 - Firmware Version 5.00NA) to:

1. Assign/Reserve IP address for 2 machines.

2. Route a web browser to a server on the first machine (port 80) as a default when another computer or smart-phone or device joins my open wireless network.

I am hoping to eliminate any changes to the IP address of the first two computers so that the server's IP address and port are static. I would also like anyone who joins the network to merely open their browser and be presented with the http interface from my server.

View 2 Replies View Related

Add A Dos Based Computer To A Windows Based Network?

Jan 18, 2012

How do I...add a dos based computer to a network running windows 2003

View 1 Replies View Related

Cisco Firewall :: 5510 Trace-route / Antispoofing On Not Default Route

Jun 24, 2011

I've enabled antispoof on all interfaces on asa 5510.If you start a traceroute to a network on the default route, everything works, since replies comes to an interface with route 0.0.0.0/0 defined.If you start a tracer route to a network that is NOT on the default route (let's assume coporate MPLS), you only get response from first carrier router, the other are discarded because of anti spoof violation.
 
I have ICMP inspection and icmp-error inspection enabled.

View 1 Replies View Related

Cisco WAN :: 2851 Crashes Every Night?

Feb 15, 2012

We have a Cisco 2851 router that crashes every night. Below is the 'show log' output. The provider is telling us that it is our equipment. We have replaced the router and still have the same problem. Is it our equipment or the provider?
 
Feb 15 19:29:43: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down Interface flap
Feb 15 19:29:43: %BGP_SESSION-5-ADJCHANGE: neighbor x.x.x.x IPv4 Unicast topology base removed from session  Interface flap
Feb 15 19:29:44: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0:0, changed state to down
Feb 15 22:34:13: %CONTROLLER-5-UPDOWN: Controller T1 0/0/0, changed state to down (LOS detected)
Feb 15 22:34:15: %LINK-3-UPDOWN: Interface Serial0/0/0:0, changed state to down

View 6 Replies View Related

Cisco Infrastructure :: MIB Downloading From 2851?

Dec 20, 2011

We want to get MIB files for snmp v2 from Cisco 2851 Router running with IOS below,

c2800nm-advsecurityk9-mz.124-15.T7.bin

View 1 Replies View Related

Cisco VPN :: 2851 Router Behind Firewall

Jan 31, 2012

We have Cisco router 2851 and asa firewall.  We configured on he router for IP phones and ISP connected. The ISP directly connected on the router and asa firewall connected to the router. We have plan to configure VPN on the router. We have available public ip address. if i configure the VPN on the firewall we need to configure firewall local ip address to public ip address. SO how to configure firewall local ip to public ip ? Where we can configure , mean on the router or firewall. Firewall and router configuration.

View 11 Replies View Related

Cisco VPN :: VPN Failover Configuration In 2851

Aug 29, 2010

I have a Cisco 2851 (c2800nm-advipservicesk9-mz.124-25d.bin) Router configured with one site-to-site vpn. Is it possible to configure a failover vpn tunnel on this router?

View 8 Replies View Related

Cisco WAN :: Compare 2851 To 2921?

Oct 14, 2012

I have an office with 50 users.  I have both a 2851 and a 2921 available.  Which one would be a better fit?
 
Comparativley, which is the more powerful unit?          

View 3 Replies View Related

Cisco WAN :: Licensing For IOS 15.x On 2851 Routers?

Feb 16, 2012

Do I need to obtain license keys/files when upgrading a 2851 to IOS 15.x?  I'm getting a bit confused seeing the documentation that says 1) IOS has gone to a universal image and 2) that feature sets are unlocked based on the installed license.
 
I was able to download a feature specific IOS image for the 2851 and it did not bother me about licensing upon boot up.
 
I read one post on here that stated 2800/3800 series (G1) do not have to worry about the licensing piece and that it's just 2900/3900 series (G2) hardware that require it.

View 4 Replies View Related

Cisco WAN :: 2851 - Mid-range Router

Jan 23, 2013

Is the 2851 router meet these requirements ? if no. What is the must specific series of the routers suitable for this requirement:
 
1. Comprehensive interface range supporting T1/E1, NxT1/E1, FE, and  High-Speed WAN . 
2. Wide array of Layer 2 access protocols including Frame Relay, Ethernet,  and PPP/HDLC . 
3. Rich and granular QOS and instrumentation for prioritizing mission-critical traffic such as voice .  
4. A modular platform with a broad range of interface options.  
5. Network Address Translation (NAT), and IP Sec . 
6. Four (4) auto sensing LAN Ports (10/100/1000) Mbps built-in routed ports.  
7. WAN Interface Slots (4-6 option Slots) . 
8. WAN Interface Modules (2xT1/2xE1/2xSerial/2xFE/DS3). 
9. Memory (512/1024 MB DRAM) . 
10. Built in redundancy (Power Supply) .  
11. Two (2) Integrated GE ports with copper and fiber support .  
12. Support for a Small form-Factor Plugged ( SFP) port for GE.  
13. Support Network Timing Protocol (NTP). 
14. Security: On-board encryption Support of up to 2500 VPN tunnels with the AIM-HPII-PLUS Module Antivirus defense support through Network Admission Control (NAC) many more essential security features . 
15. Voice : Optional support for Survivable Remote Site Telephony support for local call processing in small enterprise branch offices for up to 240 IP phones.  
16. Performance : Up to 1GB DRAM Up to 1GB Flash The maximum transmission unit (MTU) Up to 9576 bytes Throughput up to 1.2 Gbit/s . 
17. 110/220 volts.  
18. Warranty certified by Sis 98 or by OEM (original equipment manufacturer) . 
19. Up to 115.2 Kbps for Console/Aux port with DDR capability.  
20. Supports IPv6

View 2 Replies View Related

Cisco WAN :: MLPPP Configuration Of 2851

Oct 31, 2012

I seem to be having an issue getting a 3xT1 bonded solution to work. I can get 2 out of the 3 T1s to come up and pass traffic, but I can not get the third one to be added to the solution.
 
Hardware: 2851
IOS: c2800nm-advipservicesk9-mz.124-15.T8.bin
Modules:
NAME: "VWIC2-2MFT-T1/E1 - 2-Port RJ-48 Multiflex Trunk - T1/E1 on Slot 0 SubSlot 0", DESCR: "VWIC2-2MFT-T1/E1 - 2-Port RJ-48 Multiflex Trunk - T1/E1"
PID: VWIC2-2MFT-T1/E1  , VID: V01 ,
[Code]....

View 4 Replies View Related

Cisco WAN :: 2851 - Nat Ls Giving Error

Apr 24, 2013

Up to today I used Verizoon 4G to a Windows Visata box running Internet connection Sharing to get my home lab connected to the Internet .  All was working well.
 
Today I had Hughesnet come and installl their service and I can no longer get access to the Internet from my PC netowrk.  my VPN to my office for my IP phone coomes up an works just fine.  At the router I do have Internet access which then leads me to believe that my problem is NAT related.
 
My router is a 2851. 
 
When I enter PING 4.2.2.2 I get !!!!! but when i enter PING 4.2.2.2 SOURCE 192.168.69.3 I get .....
 
Here is my config info:
 
crypto isakmp policy 1
encr 3des
hash md5(code)

View 1 Replies View Related

Cisco :: No Logs Found In 2851 Router

Nov 15, 2012

I am using a 2851 router in mpls network. We had a power shut down activity recently and post to that i could not find any logs in the router.

View 4 Replies View Related

Cisco WAN :: Max Clock Rate - WIC 2T For 2851 And 3845

Jun 11, 2013

I am trying to find information on what the max clock rate supported on WIC-2T on a Cisco 2851 and Cisco 3845 Routers.

View 1 Replies View Related

Cisco Infrastructure :: 2851 Router Not Boot From CF

Nov 12, 2012

I recently obtained a 2851 and have been battling this issue for a week now. An odd set of circumstances happen with the bootstrap startup process. If the router has loss of power or when reloaded; it fails to read the CF card and boots to rommon. I can tftp an image to it (tftpdnld -r) and IOS CAN read the flash card along with any saved configuration.In fact once in IOS, I can wr mem and print the hardware details of the CF card. Once I reload the router it goes to rommon, fails to open the flash, then sits until i tftp the image back. When the router load IOS, it also loads the startup config.I don't think it's a problem with the CF card as IOS can read it. I've tried formatting the card from IOS and from my pc as FAT, FAT16, FAT32, and NTFS - it didn't make a different. I updated the ROMMON to allow for USB booting but haven't purchased a USB Drive yet for testing. The upgrade didn't resolve this issue either. It almost seems like a firmware problem with the EPROM.

View 7 Replies View Related

Cisco WAN :: 2851 / Dual Router With T1 Redundancy?

Jan 15, 2013

[URL]I ran across this on the cisco site and I wondering if it was possiable with two 2851's? The part that is most interesting to me is this part of the config (this looks like what allows the use of the y-cable)
  
redundancy
#
mode y-cable 

how to have a redundant border router with a T1

View 2 Replies View Related

Cisco WAN :: How To Enable Logging On 2851 Router

Sep 4, 2012

Network newbie here asking an embarrassing question on logging  We have a Cisco router with the following IOS version.  I want to enable logging; so do I need to configure event-log enable before adding the following logging configuration?

View 3 Replies View Related

Cisco VPN :: 2851 - How To Setup MPLS As Backup

Sep 4, 2011

I need a configuration example of MPLS with VPN as a backup Router cisco 2851

View 3 Replies View Related

Cisco VPN :: 2851 Death By Retransmission P1 Error?

Feb 2, 2011

I am having issues bringing up a tunnel between a cisco 861 router and Cisco 2851 router.  Tunnel has been dropping every week atleast once or twice.  Usually router reboot fixes it but today it is just not coming back up. have updatee remote, reloaded the config still no use.  It seems like it is partially coming up but I see the following two messages on the main router:
 
1- Death by retransmission P1

2- 11:03:03.789: %CRYPTO-6-IKMP_NOT_ENCRYPTED: IKE packet from 12.234.109.169  was not encrypted and it should've been
 
I have checked the config on both routers it is the same as the VPN was up and we didn't make any changes on either of the two routers.

View 4 Replies View Related

Cisco WAN :: 2851 - Update Bandwidth To A Network?

Feb 6, 2013

I am looking to add a new connection between a Cisco 2851 and a Cisco 3745.  Currently there are two T1 connections between them for a internal 192.168.5.0 network but I would like to add a ethernet connection to give a larger pipe for when transfering large files via that network.  Can I just add the ethernet to the multigroup and shut the ethernet connection down when not needed(to limit it to t1 speeds) or is there some other way of doing this?
 
[code]....

View 3 Replies View Related

Cisco WAN :: Bandwidth Consumption Tool For 2851

Nov 27, 2011

I currently have a 2851 router with 2Mbps point-to-point leased circuit on its serial interface and most of the time its congested. Any tool for measuring the current consumption that is happening on the link other than netflow.Was looking for something for a graph or chart displaying the current consumption rate.

View 2 Replies View Related

Cisco VPN :: 7600 / 2851 - GRE Tunnel Won't Work

May 10, 2012

I was making some changes in  routers and after I rolled back configuration  a gre tunnel won't work. It's GRE Tunnel between a Cisco 7600 and Cisco 2851.
 
It seems like 7600 sent packets unencrypted. On C2851 is received this message:
 
%CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet.
 (ip) vrf/dest_addr= /10.0.0.10, src_addr= 10.0.0.18, prot= 47

View 6 Replies View Related

Cisco Firewall :: IOS Router 2851 Logging

Apr 26, 2011

One of our client has a  Cisco IOS router 2851 with Zone Based Firewalls, enabled.
 
We tried to configure the router to receive the logs and we receive it in the following format:
<189>45: *Apr 11 11:22:14.757: %SYS-5-CONFIG_I: Configured from console by vty0 (10.151.xxx.xxx)<190>46: *Apr 11 11:23:13.109: %FW-6-DROP_PKT: Dropping tcp session 10.151.xxx.xxx:1908 212.58.xxx.xxx:80  due to  RST inside current window with ip ident 0<189>47: *Apr 11 11:38:02: %SYS-5-CONFIG_I: Configured from console by vty0 (10.151.xxx.xxx)<190>48: *Apr 11 11:40:57: %FW-6-DROP_PKT: Dropping tcp session 10.151.xxx.xxx:2062 74.115.xxx.xxx:80 on zone-pair Outbound class CMAP_Inspect_Out due to  Stray Segment with ip ident 0
 
However, we support the following format:
 
<190>3711348: 3711346: Jul 23 15:29:xxx.xxx IST: %FW-6-SESS_AUDIT_TRAIL_START: Start https session: initiator (172.16.14.71:2721) -- responder (132.183.xxx.xxx:443)<190>3711349: 3711347: Jul 23 15:29:59.465 IST: %FW-6-DROP_PKT: Dropping Other session 65.209.xxx.xxx:2721 132.183.106.17:443  due to  RST inside current window with ip ident 49293 tcpflags 0x5014 seq.no 1653005683 ack 1796295020<190>3711350: 3711348: Jul 23 15:30:04.377 IST: %FW-6-SESS_AUDIT_TRAIL: Stop https session: initiator (172.16.xxx.xxx:2721) sent 807 bytes -- responder (132.183.xxx.xxx:443) sent 2062 bytes
 
What are the exact steps required to recieve the above format? If the logging needs to be enabled on Access Lists, need exact commands, from the console config mode?

View 1 Replies View Related

Cisco WAN :: 2851 - Using BGP With VRF's To Emulate MPLS And Internet

Nov 6, 2012

I am setting up a lab network to emulate our production network and am using a single 2851 to emulate both my MPLS provider (only running BGP, not actually running MPLS) and our ISP that we use for our DMVPN secondary network.
 
Because I am using one router to function as both service providers I am running VRF's to keep the routing tables separated. So far basic connectivity works fine, I can ping from the PE 'MPLS' VRF to the data center CE interface and the ISP side is working as well.
 
Pinging across the ISP VRF 
lab-isp#ping vrf TW 66.193.134.46Type escape sequence to abort.Sending 5, 100-byte ICMP [code]...
 
BGP is up from both the data center MPLS CE and the data center internet router. BGP on the data center internet router:
lab-dc1-inet#sh ip bgp summ
BGP router identifier 66.193.134.46, local AS number 33415
BGP table version is 4, main routing table version 4
[code]...
 
BGP on the data center MPLS CE
lab-dc1-1#sh ip bgp summ
BGP router identifier 10.152.1.250, local AS number 65000
BGP table version is 2, main routing table version 2
[code]....
 
This is my first attempt at using VRF's in this fashion and could have easily missed something or used a config that is not necessary.
 
Here is the configuration on the MPLS PE/Internet router.
ip vrf CL
rd 1:1
route-target export 1:1
route-target import 1:1
[code]....

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved