Cisco WAN :: 3550 - Deploy BGP With Two ISPs Exchanging Routes With Internet?
Mar 11, 2013
I need deploy a BGP with two ISPs exchanging routes with the Internet.My company has a Switch 3550 as follow specification below
Cisco WS-C3550-48 (PowerPC) processor (revision E0) with 65526K/8192K bytes of memory.
Processor board ID CHK0629V0F1
Last reset from warm-reset
Running Layer2/3 Switching Image
Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)
I Should like a tip about that switch going be support that implementation. for exemplo it has 64MB as showed above.
View 2 Replies
ADVERTISEMENT
Oct 29, 2011
I'd like to be able to have access to all the hard drives that are on both networks, with the aim of easy media sharing.Heres what i'm working with so far,I've got two networks each in a different apartment, each with internet access with a different provider.Network A has a wifi n duel band router, with two PS3s, two Xbox360s, two computers (one Macbookpro OSX and one PC win7 ) and one Wii all connected to the router wierlesly.Network B has a wifi, with PS2, Xbox360, a laptop win7 and a pc win7 I also have a portable hard drive, that i want to have access to wirelessly.'m not sure where to start, how to gain access to the other network without using the internet.I've been told that i'd have to get a server, but i'm not very computer lit, i just want the freedom of info over the two networks.
View 2 Replies
View Related
Apr 8, 2011
Is there a way in EIGRP to prefer external routes versus internal routes. EIGRP always picks up internal routes as long as they are available, no matter if external routes have better metric. Our Scenario is that we have DMVPN hub and spoke topology running EIGRP 101. The Core routers also on EIGRP 101 prefer EIGRP 101 routes. We have the new MPLS network running BGP and redistributing these BGP routes into EIGRP 101. The core routers prefer EIGRP 101 routes (internal) to redistributed BGP (external) routes.
View 9 Replies
View Related
Aug 25, 2011
What we are trying to accomplish here use two ISP's (one cable and one T1), use the Cable line for site-to-site VPN and use T1 line for all internet traffic. We currently use the following configuration: Cisco 2820 routers terminating the T1 -> HP switch -> Cisco AS 5510 port 0 -> port 1 to LAN switch (Nortel 5510)We want to force all VPN traffic (using 10.0.0.0/24 subnets - 10.0.1.0, 10.0.2.0, etc) through a cable connection, perhaps on port 2 of the ASA, then all non VPN traffic goes to the T1.
View 1 Replies
View Related
Jan 9, 2010
what you're doing to load balanace internet traffic? I'm interested in load balancing internet traffic (outbound -AND- INBOUND) using multiple (at least 2) ISPs. Some of the methods I have used in the past have certain weaknesses.. basic DNS load balancer (relies on multiple IP addresses per host), OER/PFR (ability to control INbound is limited unless complex configuration and coopearation with ISPs)... This is kind of a broad open ended question.. It seems like something that would be a common issue and am wondering what other are doing with the capabilities 2800, 2900, 3800, 3900 series routers..
View 6 Replies
View Related
Jul 1, 2011
I need to know how to setup my ASA with dual wan links. 1 is 10/10 fiber, other will be a 50/5 Cable Wideband link. The 10/10 fiber is currnetly being used for VPN's and Internet, (about 20 point to point IPSEC vpn's currently).
I want to add the Wideband link and use the "Tunneled (Default gateway for VPN traffic)", feature for the current fiber link and the new Wideband link for any other internet traffice. I tried this however as soon as I set my fiber link to "Tunneled (Default gateway for VPN traffic), I lost all connectivity.
I also setup my "VPN" link with the "tunneled" option and my "INTERNET" link with a default route to the internet. This would only let me ping internet sites from the ASA device but not from client computers, also the VPN's would not come backup.
I have tried the sla setting with a DSL line for failover and that works good, i've since got rid of the DSL and want to utilize 2 wan links for different purposes/traffic.
ASA 5510, SSM-10 1GB RAM
ASA version 8.4(1)
ASDM Version 6.4(3)
Context Mode Single
FW Mode Routed
License Security Plus
View 5 Replies
View Related
Jan 10, 2011
How can I connect Two ISPs on My LAN simultaneously in order to boost my internet connections?
View 1 Replies
View Related
May 31, 2012
I have 2 ISPs terminating on 2 FE ports on my 2811 router.ISP1 had always been here, used for the following:Internet access to LAN usersInternet access with public IP mapping to servers in different security zones (VLANS)Site to Site VPN tunnels to 3rd party partnersRemote VPN access to 3rd party partners We recently got a second ISP, mainly for the following:Internet access and public IP mapping to servers on seperate security zones (VLANS)Site to Site VPN tunnels to 3rd party partners as above, but different hosts So far, ISP1 and all the above service have worked based on the config below. However, having added ISP2, I have not been able to successfully create the site-to-site VPN tunnels.
version 12.4
!
ip source-route
!
ip cef
!
ip name-server 4.2.2.2
ip name-server 137.65.1.1
ip inspect WAAS enable
[code]....
Whenver I try to establish a tunnel on SDM_CMAP_2 and run a test using CCP, I get 2 failure reasons:
1. The peer must be routed through the crypto map interface. The following peer(s) are routed through non-crypto map interface - 4.58.130.130
2. The tunnel traffic destination must be routed through the crypto map interface. The following destinations are routed through non-crypto map interface - 4.58.130.134
The tunnels on SDM_CMAP_1 are all active Do I need to include a default route for the second ISP on the router? If so, how do I get this done? When I tried it, I had loops on the user LAN segment of the network.
View 5 Replies
View Related
Feb 19, 2012
We had re-arranged and purchased new public ips and changed with new modem. Following is the new network setup diag
I have started the configuration, but stucks at a point. Current configurations setup and ip assigment is as follows
ISP modem/router(192.168.3.254)-->(192.168.3.1)1811W Router(192.168.2.254)-->(192.168.2.1)3550(interface vlan 10 - 10.0.1.254, interface vlan 192 - 192.168.1.254)--trunk-->2950
1)Configured 3550 as layer 3 switch and create a default route to 192.168.2.254
2) Configured 2 static routes(for 2 vlan range traffic) and one default route to 192.168.3.254
3) ip pass through is not configured yet, still the public ip is configured at the isp router
1811 static route configs
------------------------------------
Ip route 0.0.0.0 0.0.0.0 192.168.3.254
Ip route 192.168.1.0 255.255.255.0 192.168.2.1
Ip route 10.0.1.0 255.255.255.0 192.168.2.1
3550 static route config
--------------------------------------
Ip route 0.0.0.0 0.0.0.0 192.168.2.254
Testing results 1)All lan communications are working fine(inter vlan also), ping to all servers from router is getting and ping to outside public ips are getting from router,but not getting ping from switch 3550 to 192.168.3.254 and any of the public ips(internet).
View 4 Replies
View Related
Jun 12, 2012
We have cisco 3550 switch i have configured 3 vlans in this switch vlans are not able to accessing internet
View 7 Replies
View Related
Apr 25, 2012
The client is interested to deploy 2x new ACS 5.x and interested to setup split deployment between two ACS in two separate locations for load sharing, and configuration replication. At the same the client want an ability to make configuration changes on both ACS servers. According to Cisco ACS 5.x deployment notes all
Configurations must me make to a primary ACS servers and secondary servers will obtain configuration from the primary server which defeat the client requirements of the ability and capability to make changes to both server.
Question:
If I deploy two ACS servers in two different location as an independent servers, can I still replicate information between two servers? I know ACS 4.2 I can do replication between two servers.
View 3 Replies
View Related
Apr 27, 2013
They have a locked Cisco Router which is from the ISP and its confed on a fa 0/0 interface to share Internet access on the network. The ip on that interface is 195.198.11.217 255.255.255.252 and i tried it with a PC (set my personal ip to .218 and entered their dns info (195.67.199.27) and it is working. The question is now. My friend found a 3550 laying around and since the ISP wont let them conf their router he wants to use the 3550 to create 2 vlans with internet access and without access to eachother. Vlan 10 for the desktops and Vlan 20 for the wireless (Moving on to some netgear wireless switches) How would you configure the 3550 for this to work?
View 23 Replies
View Related
Feb 22, 2012
I have a small cisco switch cluster (seven different 2924, 3524cisco switches) with 3550 as a cluster control which does all the inter vlan routing that works fine.
This cluster is in semi production PBX interop testing lab. This is a closed network without internet access and not connected to our corporate network.However now I have to add this capability so some equipment in the lab can get Microsoft updates over the internet.
I've created a port on a 3550 (fa0/19) and connected it to another network that has internet access. It picked an ip address and when I'm logged in to the 3550 I can ping hosts on the outside network. However I can't ping any hosts on that network from any hosts that are connected to my vlans.I've tried a few different things, but still can't make it to work.
Here is a short version of my 3550 configuration:
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
no service password-encryption
[code]....
View 13 Replies
View Related
Aug 10, 2011
I'm looking to deploy the Cisco 881 3G routers for a few mobile assets. The assets will use WIFI / WIMAX as their primary communications via the Ethernet interface and roll over to a 3G cellular connection when traveling outside of the WIFI / WI MAX coverage area. The WIFI / WI MAX network will solely be for the corporate network and will not required any VPN tunnels. When outside of the WIFI / WI MAX network, the asset will use the 3G cellular network via an IPSEC VPN tunnel.
My question - is it possible fire up the VPN tunnel only when connectivity failing over to the 3G connection and not when utilizing the Ethernet interface?
View 1 Replies
View Related
Jan 17, 2011
is there a way for pre deploying the new ap images? We have around 500 APs and my inspection windows isnt long enough to upgrade via controller......
View 6 Replies
View Related
Apr 11, 2013
deploying a large wireless network (about 14 access points) spread across 9 buildings that are in relative close proximity to each other. I have included a picture with a rough scale (it's editable, so feel free to play around with it). Anyways, here is the basic idea. I do basic IT consulting for small businesses and some friends of mine work for an apartment complex in my local area. They came to me with this idea of deploying a wireless network on the campus to provide their tenants with "free" basic wireless internet. Basic meaning, not intended to be a replacement for a private connection. But suitable for basic web browsing, school work (I live in a university town), and email. So I got to scratching my head and quickly realized that I need to dome some learning and refresh on my skills.
View 4 Replies
View Related
Jan 24, 2013
We want to deploy NAC for 500-600 users across WAN. We are planning for L3-OOB-Real Gateway central deployment Solution.We are having two NAC Server (3355) two NAC manger (3355) at HQ and 6 NAC Server(3315) at branch. We deployed NAC under VRF.How we can deploy NAC over WAN without NAC Server, need step by step configuration under VRF.
View 1 Replies
View Related
Sep 26, 2012
Is a CA/CS required to deploy 802.1x? Google searches is confusing me with multiple answers. Im currently trying to test without a CA/CS and im having no luck.
Lab
2008 R2 DC
2008 R2 NPS
Juniper EX4200
User Win 7 PC
This is for a wired connection
View 3 Replies
View Related
Nov 16, 2011
I have router connected to 2 3550 switches directly. 3550A and B switches are running HSRP. OSPF is running between Router and 2 switches.
From Switch B i can ping the Router Wan interface but not the internet sites. from Switch A i can ping any sites?
Switch B
3550SMIB# sh ip routeCodes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1
[Code]......
View 7 Replies
View Related
Jan 13, 2013
Attempting to upgrade from ASA 8.3.2, ASDM 6.3.4, Any Connect 2.5.1 to ASA 8.4(4)1, ASDM 6.4(9) and Any Connect 3.1.00495 using ASA 5505.
Client is Windows XP SP3 w/ IE7. Can log into the ASA web portal and starts to install via ActiveX. I get past the IE7 message bar to authorize installing the ActiveX control. I briefly see a message that says "ActiveX could not be launched" (I think. It is very fast) and then the install hangs w/ the message in the web connect dialog about the IE7 message bar. If I let the timer expire, the java install also fails. If I download the installer via the web portal, and install Any Connect via the downloaded installer, everything works fine.
Same problem w/ ASA 9.1.1, ASDM 7.1(1) and Any Connect 3.1.02026. I have added the web page address to the trusted zone, and checked all the zones for permissions to install ActiveX controls, etc. Worked w/ the older/original software when I remove the kill bit for Microsoft KB2736233. Have not installed any custom Any Connect profile to use transforms. I did see in the release notes some information on NO INSTALL ACTIVEX=0, but I think this applies to the per-install package only.
View 2 Replies
View Related
Jul 21, 2011
Need to deploy ms office compatibility pack via a gpo to a network I work on. I've extracted the exe and have the msi and cab files which I've placed in a network share and given full control permissions to everyone (I did this after it not working a few times with modify), everyone has full control on the 2 files as well.
I've created a new gpo "software deploy" under computer configuration, software, I've assigned a new package and typed the path in the following format \servershareo12.msi. I've moved a test pc into a test ou in ad and back in group policy management I've linked the software deploy gpo to this test ou. I've ran gpupdate /force on both ends.I've restarted the test box, nothing, repeatedly, I even edited the gpo to deploy the software under user and moved a test user into this test ou, same thing, nothing. I then went back to the config above using the computer config instead of user.
View 2 Replies
View Related
Apr 7, 2013
im currenly configuring a 4500X with 16 port. All sfp are 1Gig, but when I input show ip int brief, it shows that the interfaces are on 10 Gig. Does Catalyst 4500X already support the 1Gig SFP without inputting a command or do I have to configure it to activate the 1Gig interface?
View 6 Replies
View Related
Apr 9, 2013
deploy OTV using ASR 1001 between 2 data-centers? We want to acquire HSRP localization there, but at this moment I can only see lots docs are saying how to do this on N7K, not ASR. I saw it has a FHRP filtering enabled by default when the OTV configuration is done, and also see there is a access-list created by default call otv_filter_fhrp, Im just wondering besides this IP ACL there should be MAC ACL applied?
View 3 Replies
View Related
Jun 11, 2011
On receiving my new dell vostro 3550, I reinstalled the windows 7 cd that came with the computer.
Before I did, I had internet connection, now I don't.
It says it finds no device. All i did was install windows. What else do I need to do for it to recognise the devices are on the system?
View 3 Replies
View Related
Oct 2, 2011
I`d like to know if that antenna AIR-ANT24120 works with the LAP 1252 in a Mesh deploy.
View 8 Replies
View Related
Apr 9, 2012
Currently we have a CISCO 3020 VPN Concentrator to terminate Lan-to-Lan tunnels and have our mobile workers connect via CISCO VPN client (300 users-employees and contractors-). Since this device is coming to an EOL this year we purchased a CISCO 5520 (below are the current licenses on it)
The licensing seems rather complicated, therefore this is my question:
- What VPN solution do you recommend for our users and contractors? it is my understanding the CISCO VPN client does not work with ASA 5500 series devices
- Is there a license needed to deploy VPN solutions for our remote users(employees/contractors)?
View 3 Replies
View Related
Aug 10, 2011
We are looking to deploy an indoor mesh deployment in an area where radar might be an issue.know that when using 1500 series APs you cannot choose UNII-1 channels even if they are deployed indoors.My question is if you can use a UNII-1 backhaul with indoor APs (3600 series for example) in an indoor mesh deployment.
View 8 Replies
View Related
Dec 31, 2011
I have broadband connection on a wired DSL Modem. Now I want to create a wireless networking environment at my home so to work with my laptop and WLAN enabled phone. I do not like to buy a new Wireless router.
Is is possible to deploy my existing modem/router with some extra equipments to build a wifi hotspot?
View 5 Replies
View Related
Aug 8, 2012
We've got a doubt about the uplink ports of this supervisor. I've read that you have to use the four ports in 10G mode or in 1G mode, but not use for example 1 port in 10G mode and 1 port in 1G mode:
But, you can read in another sentence: " Beginning with Cisco IOS Release 12.2(25)SG, you could simultaneously deploy the dual 10-Gigabit.Ethernet ports and the four Gigabit Ethernet SFP ports on the Catalyst 4503, Catalyst 4506, and Catalyst 4507R chassis." Is it posible deploy simultaneously both type of ports?
View 2 Replies
View Related
Nov 26, 2011
I have a second link being installed this week to a second ISP. Each ISP has tunnels that terminate on there routers for various services. Right now on the 6509 I have a static default route which sends all traffic to ISP one. Once I get the second link installed I would only like to send specific traffic to ISP1 and everything else to ISP2 unless the link is down. Would policy routing on the 6509 fit my needs?I would like to send 172.20.0.0 / 24 and 10.25.0.0 to isp one and everything else to ISP2.
View 4 Replies
View Related
Oct 30, 2011
Currently we have a T1 for data connected to a 1721 Router that is connected to an ASA 5510. We would like to add a FIOS line for dedicated online backup. Is it possible to connect the FIOS router to the ASA and route the IP from our backup server to use the FIOS line and everyone else continue to use the T1?
View 3 Replies
View Related
Jul 10, 2011
We got 2 ISPs -------> two ASA 5520 Primary / secondary --------> LAN . ASA is configured with ACL and Static NAT for our mail , web & ftp servers .
My question is how to configure the 2nd ISP on the ASA to auto switch to the 2nd ISP when the 1st is down with a backup static NAT and backup ACL for the new ISP , in other words how to configure a active static NAT and Backup Static NAT and ACL only for Exchange/Mail Server.Here is the example of our configuration where PIE is Primary ISP & EMC is Backup ISP.
ASA Version 8.2(1)
hostname Corp-ASA
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
[code]....
View 1 Replies
View Related
Apr 21, 2012
I have a 192.168.1.xxx network connected to Verizon FIOS via Actiontec MOCA / router.I also have a 192.168.15.xxx network connected to Comcast via Motorola VT2442 router (used for Vonage) and a Motorola SB6121 cable modem. Each network has it's own gigabit switch connected to each router. The two networks are physically separated but switches and routers are physically side by side.What is the best configuration to allow devices on 192.168.1.xxx network to communicate with devices on the 192.168.15.xxx network (share printers, NAS, etc), but still have each network served by it's respective ISP, and each device still get it's dhcp, dns, gateway, etc from each respective router?
View 10 Replies
View Related
