Cisco WAN :: 3745 - L2TPv3 And Routed Interface On Same Router
Oct 30, 2010
I have a subnet (vlan 104) working great across a WAN. At site 1, Router A (3745) has the L2TPv3 tunnel configured while Router B (7204) has a routed interface on vlan 104.
The only thing router A is doing is the tunnel, so I'd like put the tunnel on Router B and eliminate Router A.
The trouble is, when I move the configs to Router B, the tunnel comes up, but the far side does not receive traffic over the tunnel.
Router B shows sending and receiving packets (per the 'sh l2tun session all' command). The far end router shows sending packets but receiving 0.
Is it a problem to have both the vlan 104's L2TPv3 xconnect interface and the vlan 104's routed inteface on the SAME router?
View 10 Replies
ADVERTISEMENT
Jun 21, 2010
I'm looking to build (cheaply) some l2tpv3 tunnels across a campus network. I have a pair of 881's and I was hoping to xconnect the VLAN 1 intfcs between the two of them. "xconnect" is not a CLI option on the interface configuration, although it is for the individual Fa0-3 interfaces. Just for grins, I xconnected the l2tpv3 tunnel between each Fa3 on each router, and the tunnel comes up successfully and I can see a session established. I am routing between the WAN interfaces (Fa4) on each. However, L2 traffic is not passing between the two Fa3 interfaces. I can do it backwards, i.e. route between the Vlan1 interfaces and xconnect the Fa4 interfaces (i.e. WAN), and I can see broadcast traffic from the destination network appearing on the local interface. However, I'd really rather have the four interfaces in VLAN1 tunnelled rather than the WAN interface. I am guessing this has to do with ISL vs. 802.1q, since I'm trying to encapsulate VLAN1 as Ethernet and not as dot1q.
View 8 Replies
View Related
Feb 11, 2012
We have a 3745 LNS router, currently there are less number of users connected.when a user dials request authenticated and one virtual-access interface is formed in LNS router.Now the user is disconnected the vpn and connected to VPN again in this case, whether the user is connected to the same virtual-access interface which was assigned before disconnecting or different virtual-access interface is created.
View 0 Replies
View Related
Feb 21, 2011
we are using the catalyst 3550 L3 for BGP routing. For e.g. Gi 0/4 is our internal interface tha we want "switch".
We need on Gi 0/5 the same network that is on gi 0/4.
How is it possible? Make it like a 2 port mini switch. Or make a bridge of these 2 interfaces without any complicated reconfiguration needed?
View 2 Replies
View Related
May 31, 2011
I have my main branch router (3825) and two remote routers (2821's). They are connected through leased lines that do not touch the internet. For various security reasons I have to ensure that the traffic from the remote's are encrypted in a VPN tunnel even though it is still part of a private network.I have went ahead and created the tunnels and I can verify that they are up. I have applied the cryptomap to the correct interfaces, etc.So the question is - How do I ensure that traffic is not just being router out of the interface from the remote sites back to the branch router with or without using the VPN tunnel? I've taken down the tunnels and of course, the traffic is still being passed back and fourth.
View 1 Replies
View Related
Mar 14, 2012
We are looking for a solution that to use Sub-interface on a routed port on 6509, instead of using a SVI on it.Are there any different when using Sub-interface?
View 3 Replies
View Related
Jun 10, 2012
how to configure vlan tag on routed layer 3 interface in cisco 3945 device?
View 2 Replies
View Related
Feb 28, 2012
What are the pros and cons of configuring a Switch Virtual Interface (SVI) versus a routed physical port between layer 3 switches?For example, if I have two 4506s and have a need to run HSRP and route between them which feature is better and why?
switch_a
!
interface vlan 25
ip address 10.10.10.1 255.255.255.0
!
interface fa0/1
switchport mode trunk
[code].....
View 1 Replies
View Related
Feb 21, 2012
On a router I can use IP Accounting or Netflow to see what kind of traffic is moving over an interface. Are there any tools on a 3750 switch with a routed interface which would tell you who is hogging the bandwidth on that interface?
View 2 Replies
View Related
Mar 12, 2013
Quick question here. Using 3750E series switches with multiple VLANS configured. These switches serve as our 'core'. I have SVIs configured for the different VLANs and add inbound ACLs in each of the SVIs to control traffic between VLANS. This switch also terminates a P2P Ethernet link which connects to our Colo facility. The port used for this is configured as an L3 port. I noticed today that I was able to send traffic across this L3 link that I thought should have been blocked by an ACL I had in place but it wasn't. So the traffic flowed from a port in say VLAN 20 across this L3 link (assigned with an IP address). Would this traffic flow not cause traffic to be checked against an ACL applied in the inbound direction on the SVI of VLAN 20 (int vlan 20)? Traffic does get checked when routing between SVIs. Why would it not get checked when routing between SVI and L3 interface?
View 2 Replies
View Related
May 5, 2013
I have an asa 5520. How would I configure my dedicated management interface to be able to route off subnet while the firewall is in transparent mode?
View 1 Replies
View Related
Jan 15, 2012
There is no special requirements, just need new hardware with some reserve availability. As for now it's 3745 EOL and I assume to use 3945.
View 4 Replies
View Related
Sep 28, 2011
One of my clients has an older 3745 running IOS 12.3 and we are looking at replacing it with a new 3945 that runs IOS 15.0. This router is also configured with CME. Is it possible to migrate the current 12.3 config to load on the new 15.0 IOS? This will be my first encounter with 15.0 so I don't know what I am up against at this time. I am just hoping I don't have to retype all the ephone config, dial-peers, etc
View 2 Replies
View Related
Jun 5, 2011
trying to establish a connection on an ibm 3745 controller via two IBM 5822 modems to a cisco 2600 router using sdlc encapsulation secondary bridging data from the serial port to the E/Net port to run the 3270 client ???
View 19 Replies
View Related
Sep 14, 2011
Have an ADSL router (887) at a site which has a GRE tunnel to to a 3745.The GRE tunnel is setup with default ip mtu of 1476.If I ping from the 3745 to the ADSL router (or in the reverse direction)with a packet size of 1500 bytes this works fine.However if I ping from a router (R1) that is directly connected to 3745 to the ADSL router with a pkt size of1500 bytes then the first ping succeeds while the subsequent pings fail.Pkt sizes less than or equal to 1476 work okay.Pinging between R1 and the 3745 with a packet size of 1500 bytes works fine.If I set the tunnel ip mtu size to 1500 bytes then it works.This is obviously something to do with fragmentation, but I don't undertsand why itdoesn't work with the default mtu set to 1476.
View 11 Replies
View Related
Mar 10, 2012
I am really new to this and studiying so I know that I am doing something dumb. Anyway, I purchased an ASA 5505 and placed it between my Cable Modem and Cisco 3745 router. The outside interface on the ASA is dhcp, the inside interface is 192.168.100.1. The outside interface of the 3745 is 192.168.100.2 and the inside is 192.168.1.1. The VPN pool is 192.168.200.10 - 192.168.200.10.
Here's are the problems...
1. When I establish a VPN session to the ASA, I can ping and access any resources dierectly connected to the ASA's interfaces and on the ASA's internal 192.168.100.0 network. However, I cannot access any resources behind the 3745. I cannot even ping 192.168.1.1.
2. Although I believe that I sent up split-tunnel, I cannot U-Turn back to the internet once connected to the VPN.
View 11 Replies
View Related
Jun 6, 2011
I need to make sure I have a router available to work with DS3 circuit on remote site. A remote field technician tells me there is a 3745 router with "HSSI" and external Adtran CSU/DSU available. Is that an indication this can work with DS-3 circuit?Which specific Adtran CSU/DSU do I need in order to make it work with DS3?
View 1 Replies
View Related
Dec 31, 2012
I've came across a very odd topology to deal with where everything is connected to everything, without proper utilization of VLANs.
- I've an L3 SW and a 3745 RTR at core
- Both are carrying same subnet to an L2 distribution switch that connects server farm within the same subnet (i.e. 1.1.3.x subnet)
- The L2 switch works as a passive switch, hence another network say, 1.1.2.x has been plugged into it as well.
- This L2 switch extends to other switches without configuration of any VLANs or STP and distributes 1.1.3.x network.
Periodically and unexpectedly, the router starts hanging and utilization goes beyond 80%, and there's nothing at all that is observed in "sh proc cpu" to be eating router resources. Its quite difficult to observe the pattern, as its random.
View 5 Replies
View Related
Oct 18, 2012
Does L2TPV3 will support multicast?
View 3 Replies
View Related
Sep 6, 2011
I have 2921 with SEC feature set ( version 15.0(1)M4 ) and want to configure l2tp tunnel, LAC to LAC scenario. It does't have pseudowire-class command. Does it require another license or commands ?
View 3 Replies
View Related
Jan 18, 2011
I was found the different IOS support L2TPV3 tunnel ID, like 12.2(33)SRE is support 32bit, 12.4(15)T is support 16bit.so the 12.2(33)SRE can't xconnect/l2tpv3 to 12.4(15)T.
I found the 12.2(33)SRE Local Tunnel ID is over 65535, how about reduce it less 65535? or some other suggest to xconnect/l2tpv3 on different IOS?bcoz using same IOS series is normal. like 12.4T and 12.4T / 12.2SRE and 12.2SRE
some result is following.
12.4(15)T:
xxxx#sh xconnect interface gigabitEthernet 0/2.209 detailLegend: XC ST=Xconnect State, S1=Segment1 State, S2=Segment2 StateUP=Up, DN=Down, AD=Admin Down, IA=Inactive, NH=No HardwareXC ST Segment 1 S1 Segment 2 S2------+---------------------------------+--+---------------------------------+--DN ac Gi0/2.209 209(Eth VLAN) UP l2tp 152.xxx.xxx.120:500 DN Interworking: none Session ID: 15758 Tunnel ID: 60524 Protocol State: DOWN Remote Circuit State: DOWN pw-class: vlan-xconnect
xxxx#sh l2tun tun
[code]....
View 1 Replies
View Related
May 18, 2012
I am having a problem getting serial interfaces to show up with a NM4A/S card in a 3745 router. It worked at first but now the serial interfaces don't show up in running-config but show diag shows the card is present but says "Port adapter is disabled deactivated". I have tried the card in 3 different slots and of course turned off power when moving card around (left power cord in for grounding). Again, it was once working (serial interfaces were showing up in running-config) so if I damaged the slot somehow, however I was very careful when seating card. Have been searching the learning network and google for days now to no avail. Have tried to find something similar to the card type command thinking the port adapter needs to be activated but have not found any documentation about that. Hope card isn't bad all of a sudden but really don't think it is since it worked before and it seems to be recognized just not showing serial interfaces in running-config/sh ip int b (on ios/cli). Really think it's something along the lines of activating card, but not sure.
View 1 Replies
View Related
Mar 17, 2013
I am almost new to the networking field, hence I might have lacking some basic knowledge. I like to know the impact if the ground of any router get disconnect. WIll the router stops work? We have two peripheral router in my organization, both are connect with the MPLS cloud through the MUX. One router (3745) have ground connection, where as the other (3845) don't. Recently the 3745 router start generating CRC error on the WAN interface. Once we remove the patch cord connecting with the MUX for loop test and reconnect later, the interface did not come back again. FInaly someone advice me to check the ground connection. I found it was loose. Once I fix it properly and reboot the router the interface become up. The person told me that some cisco router send the reference signal through the ground to the MUX connecting with it, if the MUX and router failed to exchange the reference signal the router will not work, is this true ?
View 2 Replies
View Related
Jul 11, 2011
I'm currently using DLSW to bridge a VLAN to a remote site and it works fine. I've been reading up on L2TPv3 and now I'm wondering if one is better than the other for my purposes (my hardware will support both), especially if multiple VLANS are being bridge to the remote site. We do not have an MPLS infrastructure, so that's not an option.
View 2 Replies
View Related
Jan 24, 2012
I am using a company called Zen for adsl, I have 8 IP from XXX.XXX.XXX.248 to - XXX.XXX.XXX.255, Gateway is 254, Address 249-250-251-252-253 I would like to appear at the 4 sockets at back of router, and 252,253 will be used for a server...I understand I should be using Routed IP , but I cannot get it to work, I can ping out to google from the server, but the server is not live to the world. [code]
View 8 Replies
View Related
Aug 8, 2011
come to a bit of a block in the road on a network im building ,all is going well except i need to build a pseudowire to backup our primary L2 circuit, I labbed this with some 3745's but the kit we are using is the 1921, with the universal image how do i go about upgrading functionality to allow this [code]
View 4 Replies
View Related
Nov 14, 2011
Assuming I have the following setup: Cisco 7604 Cisco Systems Cisco 7600 4-slot Chassis System OSR-7600 Clock FRU 1 & 2WS-F6K-MSFC2A Cat6k MSFC 2A daughterboard Rev. 4.0 WS-F6K-PFC3B Policy Feature Card 3 Rev. 2.4 WS-SUP32-GE-3B 9 ports Supervisor Engine 32 8GE Rev. 4.6 WS-X6148A-GE-TX 48-port 10/100/1000 RJ45 EtherModule Rev. 4.1WS-X6548-GE-TX SFM-capable 48 port 10/100/1000mb RJ45 Rev. 11.3 The SUP32-3c says it supports both L2VPN and L2TPv3, however the line cards are effectively 6500 line cards and I was under the impression the 6500 didn't support these.
If the supervisor supports a feature does that mean it is globally supported on a switch? Or do I need to check the compatibility of these line cards as to if they support these features?
View 1 Replies
View Related
Aug 30, 2012
During an installation, we plugged a Ruckus wireless bridge (powered by a PoE injector) into G0/0 on the 1941. The port status remained down/down. We then tried connecting it to G0/1. Again, the port status remained down/down. We took another wireless bridge, plugged it into G0/0 and the port changed to up/up status within a few seconds. The same happened when connected to G0/1. Both ports are have speed/duplex set to auto/auto.We took the cable from the first wireless bridge and connected it a 3550 switch, the FastEthernet port went up/up. We then took the cable and connected it to a switchport card (HWIC-4ESW) that was installed in the 1941 router. The port came up/up.We connected to wireless bridge back to G0/0 in the 1941 and manually set the speed/duplex to 1000/full. The link light on the router became illuminated after a few seconds but no console message was displayed (nor did any events appear in the log) and a "show int g0/0" showed the port status as down/down. This was could not be duplicated as this only happened one time The wireless bridges sit atop of a water tower and are connected each via a shielded ethernet cable. The cable that we're having trouble with is cat5e STP and about 310feet in length. I should note that we have not yet swapped the PoE injector but it seams to be functioning properly as power is getting to the wireless bridge and its accessible. Also because if the wireless bridge for some reason didn't come back up after a power cycle it would potentially mean climbing the tower to perform a hard reset. We tried another 1941 with same results however we have not tried another router model to rule out a potential platform issue. Can you recommend any troubleshooting steps to determine why the port status of the gig interfaces on the 1941 don't come up?
View 4 Replies
View Related
Sep 27, 2012
I understand router on a stick for inter-vlan routing but where I'm having trouble is having one of the vlans be public addresses. One of my clients has a rack in a colo where there is no router, i.e. their /24 public network has .1 of the network assigned to a colo router, then they have a 2960G switch in the rack that all the gear is connected to. Public IP's are assigned to certain devices / servers with .1 as their GW. Problem is, they also have a private range on the same switch with no vlans and things are a little 'cluttered' and there is no control of traffic.
The assets I have are a 2821 router with (2) GigE interfaces and the 2960G switch. A /30 network is going to assigned on the colo gear to use to push the entire /24 down to the cabinet. I'm going to NAT the local 10.100.x addresses on vlan 10 and I want the public traffic on vlan 20. During a recent test, the private traffic worked as expected but the public traffic didn't work. I don't need a complete config, more of a 10,000 ft. view of how this needs to be done so (a) traffic is vlan'd to keep things segmented, (b) I can static inside / outside public addresses from the /24 to reduce the number of public addresses being assigned directly to servers (some of this is unavoidable, but the less the better), and (c) I can NAT the local subnet to either to the /24 or the /30 (not much very much traffic in this way).
EDIT: The switch is a C2960S, not G. I cannot enable lanbase-routing, it is apparently unavailable.
* 1 26 WS-C2960S-24TS-S 12.2(55)SE3 C2960S-UNIVERSALK9-M
View 5 Replies
View Related
Jan 7, 2012
I would replace an old Levelone Router with a Linksys E2500.I have 3 different routed private networks (e.g. 192.168.1.0/24 , 192.168.101.0/24 and 10.0.0.0/24) How can I forward different ports to this 3 different private networks with an E2500.Under "Games&Applications" in the" Portforwarding" menu the first 3 octets of the "to IP-address" are fix and corresponds ever with the LAN ip address of th E2500.
View 4 Replies
View Related
Aug 13, 2011
I just received a new Cisco SG300-10 and am configuring it in Layer 3 mode. I am trying to setup multiple routed VLANs going back to a FiOS Actiontec router. My configuration is as follows.
Fios Router: 192.168.1.1
Assigning DHCP 192.168.1.2 through 100.
SG300-10 has VLan 1 ip 192.168.1.5 used for Mgmt.
VLAN2 is 10.0.2.1
VLAN3 is 10.0.3.1.
I have a static route set on the fios router for both subnets setup as follows.
Destination 10.0.3.0 Gateway 192.168.1.5 Netmask 255.255.255.0 Metric 1
Destination 10.0.2.0 Gateway 192.168.1.5 Netmask 255.255.255.0 Metric 1
I have a laptop connected to Gi8 on the Cisco (Vlan 3) and statically assigned 10.0.3.3, with a gateway of 10.0.3.1. DNS set to the fios router (192.168.1.1).
Everything pretty much works EXCEPT, I cannot get out to the internet from either vlan. Traffic routes between vlans/and the default subnet on the fios without issue.
When I ping out, DNS resolves, but will not go past the fios router. Am I missing a setting somewhere?
View 3 Replies
View Related
Jan 9, 2011
i have a 7201 router with NPE-G2. i have a design which i have the option to send all the traffic through a GRE tunnel or a L2TPV3 tunnel.which method is more CPU consumption ?
View 1 Replies
View Related
Sep 4, 2012
I would to realize an point to point connection in L2TPv3 with a bandwidth pass through of 1 Gb. Which routers/switches I can use?
View 3 Replies
View Related
