I have Cisco 2851 router & need to allocate bandwith based on IP's. eg. 192.168.1.1 should use 7 Mbps & 192.168.1.2 should use 2 Mbps & 192.168.1.3 should use 1 Mbps. Let me know the configuration on how to execute it on a router.
View 4 Repliesusing ACS 4.2 and I can't find a way to bind an incoming NAS port to a specifc IP Pool:
When a user connects the request to auth comes from 2 possible NAS ports randomly (this cannot change). Depending on which NAS makes the requests determines the IP range required, so I need 2 IP Pools. There is no way to say 'if request comes from NAS1 give IP from Pool1 and if request comes from NAS2 give IP from Pool2'
I have gone around and around with NAFs and NARs, but cannot do this.I can create 2 ACS groups with the specific NAS and specific IP pool within, but then I cannot have a single username bound to both groups.
I moved the auth to an AD group in the hope that I could bind that single AD group to the 2 ACS groups; and so have a single username, but no joy.
I am trying to find out wether it is possible to allocate bandwidth on a per-vlan basis.
We have multiple satellite connections coming into our infrastructure over a single gig ethernet cable from another service provider. The provider provides the connectivity on layer 2 and we are responsible for layer 3 connectivity for the clients on the other side of the satellite connections. The single gig ethernet cable is currently plugging into a Mikrotik 1100 router on our side, setup with VLAN ID and IP Addresses and everything works perfectly. The challenge now is that whilst we only have the one satellite client connecting, we can limit the bandwidth on the ethernet port to 512k for example which limits the client to only have 512k internet breakout. In the future, we need to be able to limit bandwidth as multiple VLAN IDs will be coming over that single ethernet cable and I'm not sure if one can do this at all.
we want to dedicate 2mb to one of our fa ports on our 2960, is this easily done, or can be done on a 2960?
View 4 Replies View RelatedWe have a DSL line at work which a few people share for Internet access.Sometimes if someone is doing a Windows Update or big download etc, the connection is maxed out and slow for everyone else.Is there a way to give everyone a set amount of bandwidth via a Cisco router (2811) or will I need to use something like a packeteer?
View 4 Replies View RelatedI have a cisco ASA firewall 5510.Just i have configurd for 1st port as nameif ouside witch public ip, 2nd port as a nameif inside with local ip, and done the nating, dhcp and dns. now i am able to get internet from inside port, which is getting dhcp.up to that it is ok.
And I want to restrict bandwidh 1Mbps for local port (2nd port) how to config 1Mbps banwidth allocation for port no 2, I mean nameif inside should have 1Mbps limet.
I just bought a Catalyst 2960S to test out the feature "Port-Based Address Allocation" which is required for our factory. I followed the instruction from Cisco IOS and did all the steps but I could not get it to work, my network client did not received the expected IP address that I configured.
View 8 Replies View RelatedI have my wan connection on the eth0. The bandwidth is 2mbps. I am running qos on that interface saying 192.168.200.0/24 can use 80% of the bandwidth and 192.168.201.0/24 can use 20% of the bandwidth. I Also have vtun VPN inteface to our branch office. I also wan to run some qos on that interface. How do i go about allocating the bandwidth on this interface? it is actually going via the eth0 interface, but the system actually see's it a an independent interface on its own right, so it requires it's own qos policy.
View 3 Replies View RelatedI have an internet connection (landline and wifi modem) at my parent's summerhouse as I need it for work. Nobody else does around here so I get constant nagging from neighbours to give them the password. I can't say no however I'm afraid they may use up too much of my bandwith connection which could lead to alot of money being lost from my part. Constant and stable internet is a must for my work. how can I limit the bandwith I give to them? Can I create a second public network with limited bandwith or something like that?
View 5 Replies View RelatedDoes the 2960 switches with LAN-Lite support DHCP Server Port-Based Address Allocation?
View 1 Replies View RelatedI am using Linksys WRT54G router on my broadband internet connection. I want to know, is there any way to allocate more or less bandwidth to any PC connected to my network?
View 2 Replies View Relatedlimit the bandwidth used by certain wireless devices on my network. The problem I'm having is of priority. For some reason when someone is watching Netflix on my laptop (wireless) no other device has any bandwith available to it, so while someone is watching Netflix my hard wired desktop can barely load Google.com much less do anything useful.I'm using a Cisco ValetPlus M20 wireless N router.allocating at least a minimum amount of bandwidth to wired devices?
View 1 Replies View RelatedI have a Cisco 2851 (with a 4 port switch module) that I am trying to set up with two different internet connections, and have it route traffic out to them based on the source IP. One connection is a 50mb Comcast connection, another is our T1 that our servers are hosted on. The goal is to guide server/phone system traffic to the T1 and have the rest default to the Comcast. I currently have the 2851 connected to our Layer 3 switch (Dell Powerconnect 6224) with a subnet created between them. Static routes have been created on the 2851 back to all of our existing subnets. Traffic flows internally without a problem between the subnets and 2851 (and vice versa). I set up the 2851 with route-map's in the NAT to control the flow of traffic, with the default route set to the Comcast connection. Default route works great, speedtest shows full speeds and everything looks great. The problem happens when I apply my route-map policy to the internal LAN interface with the ACL list of IP's that I want to guide to the T1 (with a next-hop of the T1's IP address). I tested some tracert's and pings from one of the IP's in this list and they would stop at the T1 modem and not go any further. I did a "show ip nat translations" and noticed that the "outside" portion (right half) was blank for every IP that was in the ACL or related to the T1. So my guess is it looks like this is not doing NAT for the T1? I double-checked that I had my "ip nat inside" on the LAN interface and "ip nat ouside" on the T1 VLAN interface and Comcast interface and they were there.
View 6 Replies View RelatedI am looking to add a new connection between a Cisco 2851 and a Cisco 3745. Currently there are two T1 connections between them for a internal 192.168.5.0 network but I would like to add a ethernet connection to give a larger pipe for when transfering large files via that network. Can I just add the ethernet to the multigroup and shut the ethernet connection down when not needed(to limit it to t1 speeds) or is there some other way of doing this?
[code]....
I currently have a 2851 router with 2Mbps point-to-point leased circuit on its serial interface and most of the time its congested. Any tool for measuring the current consumption that is happening on the link other than netflow.Was looking for something for a graph or chart displaying the current consumption rate.
View 2 Replies View RelatedI would like to know about asa 5500-x. Does it supports application visibility and granular control for different applications. Moreover bandwidth control based on different users and different applications
View 1 Replies View RelatedI have a cisco 2950 switch, connected with 4Mbps of internet and number of users will access the internet. There is no restraction on bandwidth limit for users, if any body use high download the remaining users are facing the slow browsing problems.
So, if i can put a bandwidth limitation for every users the problem will be solved. how to restract the bandwidth on user bases.
I have two routers at our core data center, a 3845 and a 3640. These are configured with GLBP. There are 4 remote sites:
Site #1: One T1 link to the 3825
Site #2: One T1 link to the 3825, and One T1 link to the 3640
Site #3: One T1 link to the 3825, and One T1 link to the 3640
Site #4: One fractional T1 link to the 3825, and One T1 link to the 3640.
My question regards site #4. If i understand correctly, GLBP works on the premise of "host" balancing, and not true "load" balancing. The reason I ask is that the large majority of our WAN traffic is from our Exchange server to our remote sites. In the case of site #4, our exchange server is sending traffic on the fractional T1. Is there any way with GLBP to either split this traffic from a particular host across two links in a round-robin fashion, but leave other hosts to travel wherever the router sends them, or, to force at least our exchange server to use the full T1, rather than the fractional?
I've read up on the weighting mechanism, and it appears that tracking an interface has nothing to do with bandwidth use. If I understand correctly, if I were to track the Site #4 PPP to the 3640, and give a weight of 10 to glbp on there, it would really only take affect if the interface is down. It will have nothing to do with host AVF election.For the record, exchange traffic is constant to this site, so there is no chance for the host connection to reset and potentially elect to use the larger pipe. I would like to "tweak" this to make better use of available bandwidth.
How do I...add a dos based computer to a network running windows 2003
View 1 Replies View RelatedWe have a WLC 5500 connected to a 2960 acting as core switch. there is a server attached to the switch , bearing all dhcp pools for lan and wireless users. Can the wlc or the switch be configured in such a way that the wireless users associating to the wlc get their ip addresses from the dhcp pool configured on the server. Can the configuration can be shared for such a setup.
View 5 Replies View RelatedStarting a project where they customer has ASA 5585X with SSP40 with 10K SSL Premium Lic and ACS5.1.The cust wants IPSec, and Anyconnect Client terminations. The number of users will be close to 6000 and will scale.Due to the huge scale of users, i am not able to finalize a design. Have the following doubts.
1. Will ACS have any issues in supporting a database this huge. OR is it better to go with the AD/LDAP integration.
2. What is the best way to allocation IP address. Does ACS 5.1 support dynamic allocation form an IP pool.
I have been browsing through the forum, couldnt find anything concrete.
I am running IOS version 8.0(5) in cisco ASA 5520. This issue i am facing is that when the memory utilzation reaches 49 percent, the web-vpn users are not able to login as they are getting a blank page. The only error which is getting in the output " sh mem webvpn allobjects" is ERROR: Memory allocation failed?
View 2 Replies View RelatedI am using a Pix515E with 8.0(3) and 128MB RAM. It ran OK for months but has recently had several episodes during which it produced streams of memory allocation failures (syslog 211001). When in this condition I could not log into the VPN. It was still operating but some users were having problems and I eventually had to restart it.
The traffic load is typically 10Mbps, and the max number of connections is around 10,000 but typically 5,000. The CPU usage is 10%-20%. There is 1 VPN with normally 1 client. The memory usage is always high, between 115MB and 120MB but during these problems it creeps higher.
Why might the memory usage be so high when my network load is quite light for the 515E? What circumstances cause the memory usage to increase during operation? Is there anything I can do to prevent the memory usage increasing to the point where the PIX crashes?
I have a second 515E with 8.0(4)32 and 64MB RAM, loaded with the same config. I have not had this one in service, but off-line it is using 53MB of memory. If the spare pix needs 53MB to load the firmware and my config, why does the other one use 115MB?
I'm using a Catlyst 3550 to supply power to a IP network surveliance camera. By default, the predecesor to POE, Cisco Inline Power allocates 15.4 W of power to a port ... What is the process for reducing this power output?
"For an IEEE device, the switch always allocates 15.4 W to the port. The switch does not display the IEEE class type in the show power inline privileged EXEC command output. Instead, it displays n/a."
I have one cisco Nexus 7000 with version 6.1(2).I created 3 VDC
ADMINCOREsecurity
I have configured 1 - 45 ports for Core and 46 - 48 ports for Security.Now I am not using the VDC Security and I tried to move the assigned ports 46 - 48 from Security to ADMIN.Switch accepted the command .But the ports are not visible on ADMIN VDC.Now it is not showing on Security VDC also. I need this ports in ADMIN VDC
We have a Cisco 881 router, which is crashing. We have seen that the ARP cache fills up so much it causes things to crash, our phones go down.. We dont know why this however IP CEF seems to be doing it, when we disable it goes away however disabling IP CEF causes our L2TP tunnel to become inoperable also. So why does IP CEF cause thousands of AR entries and how can we limit that!? Below is the error, sample of the ARP cache and our config. You will notice we also have a /31 given to us on WAN interface, this was given to us by our service provider. This is really strange I cant find other examples on internet.
The error:
Nov 1 04:21:57.474: %SYS-2-MALLOCFAIL: Memory allocation of 65536 bytes failed from 0x81F083F4, alignment 16
Pool: Processor Free: 55176 Cause: Not enough free memory
Alternate Pool: I/O Free: 2352 Cause: Not enough free memory
[code]....
I have a tale of woe for you who may be considering Hybrid REAP with local switching.
My client has a varied configuration, but the requirements basically screamed HREAP with local switching. They have 15 sites, had already purchased a single WLC 4404 and they needed between 4 and 24 APs at each of the sites. Each of these locations are connected by a WAN link of good quality, but only a single link so there is no assurance of availability; the client has local resources so it would be useful if wireless stayed working during an outage.
So I setup the WLC for HREAP local switching. I setup AP Groups VLANs, but I noticed it had no effect on the VLAN allocation for HREAP. This was unfortunate, because not every site has the same VLAN configuration - some sites had a L3 switch and others only a L2 switch. But I suffered through this and configured each AP manually with the appropriate VLAN mappings.
The infuriating thing, is now that they have bought a second WLC 4404 (they expect to increase the number of APs beyond 100) all these VLAN mappings are messed up when APs connect to the second WLC. I've been going through them one by one again - it is really unfortunate that the AP Groups VLAN mappings don't apply to HREAP local switching.
I'm going to get back to the next 80 APs - but if some of you have a system for handling the VLAN mappings of a large number of APs.
I need to configure these qos settings in a C2960S. [code]How I calculate the buffer allocation needed? [code]
View 4 Replies View RelatedWe have 1 mpbs bandwidth line, but most of the time we are getting only 300-500 kpbs download speed, i want to send statistics report to our ISP, what will be best procedure to test the bandwidth report, i have checked in some websites like bandwidthplace and speedtest but these sites are not accurate, how to check the actual bandwidth we getting from ISP against 1 Mbps. We have solarwinds monitoring tool in this i have configured the WAN interface for 1 mbps
View 5 Replies View RelatedWe have a Cisco 2851 router that crashes every night. Below is the 'show log' output. The provider is telling us that it is our equipment. We have replaced the router and still have the same problem. Is it our equipment or the provider?
Feb 15 19:29:43: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down Interface flap
Feb 15 19:29:43: %BGP_SESSION-5-ADJCHANGE: neighbor x.x.x.x IPv4 Unicast topology base removed from session Interface flap
Feb 15 19:29:44: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0:0, changed state to down
Feb 15 22:34:13: %CONTROLLER-5-UPDOWN: Controller T1 0/0/0, changed state to down (LOS detected)
Feb 15 22:34:15: %LINK-3-UPDOWN: Interface Serial0/0/0:0, changed state to down
We want to get MIB files for snmp v2 from Cisco 2851 Router running with IOS below,
c2800nm-advsecurityk9-mz.124-15.T7.bin
We have Cisco router 2851 and asa firewall. We configured on he router for IP phones and ISP connected. The ISP directly connected on the router and asa firewall connected to the router. We have plan to configure VPN on the router. We have available public ip address. if i configure the VPN on the firewall we need to configure firewall local ip address to public ip address. SO how to configure firewall local ip to public ip ? Where we can configure , mean on the router or firewall. Firewall and router configuration.
View 11 Replies View RelatedI have a Cisco 2851 (c2800nm-advipservicesk9-mz.124-25d.bin) Router configured with one site-to-site vpn. Is it possible to configure a failover vpn tunnel on this router?
View 8 Replies View Related