Cisco WAN :: 3825 - IP SLA Tracking For Connectivity With Multiple WAN Links
Mar 13, 2011
I want to configure Reliable static routing with object tracking. I have a cisco 3825 and 3925 router in which the hsrp will be configured . Now these two routers are connected a remote site via three different WAN connectivity as under
1. MPLS
2. LL-1
3. LL-2
The priority of routing is also the same sequence.
Now if the MPLS goes down the remote site should be connected via LL-1. If both the MPLS and LL-1 goes down the remote site should be connected via LL-2.
The LL-1 is terminated on cisco 3825 and LL-2 is terminated on cisco 3925. MPLS is terminated on both cisco 3825 as well as 3925 router.
Whether multiple tracking options are available so that i can achieve the same. Topology diagram is attached.
View 3 Replies
ADVERTISEMENT
Oct 12, 2011
We have a site to site VPN from one client location to our production center in offshore. At the client side we have a PIX 515 used for the tunnel. Since the client requires a backup VPN over a different ISP we will have to add the ISP to the same PIX and then create the secondary VPN.
how we can acheive two ISP's on one PIX since only two Ethernet ports are availble.
PIX Details:
Cisco PIX IOS 7.2(2)
PIX-515E, 128 MB RAM
View 1 Replies
View Related
May 15, 2013
I am trying to set up my ASA5510 the fail over of ISP when it can't ping three different IP. I create three different tracking to three different IP using sla monitor & track rtr. But when I do
route isp2 0 0 yy.yy.yy.yy 50
route isp1 0 0 xx.xx.xx.xx 31 track 1
route isp1 0 0 xx.xx.xx.xx 32 track 2
route isp1 0 0 xx.xx.xx.xx 33 track 3
the last route will replace the previous two and only the last route command takes effect.Is there anyway I can set up the fail over to ISP2 only when it can't ping three different IP from ISP1?
View 1 Replies
View Related
Dec 13, 2006
We have Cisco 7609 routers in our network. We are using ppp multilinks between the sites. Because of the high traffic volume, we have to use multiple multilinks. 7609 router doesn't allow ppp multlink to span SIPs, so we use multiple mulitilinks between sites on different SIPs. OSPF for load balancing will be used. THE PROBLEM IS: when we define the second ppp multilink between two 7609 routers, the new multilink stays "inactive". Can we use multiple multilinks to the same router? We have enabled the command IP CEF DISTRIBUTED, but we still face the same problem". IOS used is: 122-18.SXF6
View 21 Replies
View Related
Feb 6, 2011
I have a 3825 with a 1Gb fiber card at one of my sites. Our ISP and MPLS provider hand off a single gigabit fiber to us that contains 2 50MB EVC's.I need to apply QoS to one of the EVC's and shape them both to 50Mb to avoid upstream rate mismatch bottlenecks. Both of the EVC's generally only push 10Mb during business hours.When I run UDP stream tests (various rates from 500k-6m that are marked as AF41) to one of my other sites I am consistently getting about 2% packet loss, despite the fact the circuit isn't even close to 50% saturation. When I remove Shaping and QoS all together, the issue nearly clears itself up, except during peak hours and I get small bursts of packet loss, which is still unacceptable.When the pipe is at near zero utilization (after hours) there also is no packet loss with or with out the shaping/qos applied.
View 1 Replies
View Related
Jul 29, 2012
We have got a pair of N5K and 4 N2k. So far, we have configured VPC Keepalive (2x10G) & VPN Peer (1x1G) between N5K. Also we have configured one N2K with Dual Hommed VPC with both N5K.Now I am having some difficulties with desining/configuring EIGRP with Upstream routers/L3 65xxVSS switch.
Here are the queries.
1) Do I have to create another 1GE link between these 2 N5K to enable routing in between.
2) For these 2xN5K should I enable Eigrp on physical Interface or should I create VLAN & VRF to enable routing in between.
3) For N5K to Upstream L3 device should I have to configure EIGRP on physical Interface or should I create VLAN & VRF to proceed. We have 2 uplink each to connect to 2 DC and we are not planning to aggregate 2 links (VPC or L3 Ether Channel) for each site.
View 1 Replies
View Related
Jan 24, 2013
I have been working on redesign of our network which was very challenging but almost there.We have a limited budget of around £20k(32k Dollor) Max. The cabling has been done before my time and it is very messy and cheap so you can not do a proper cisco hierarchical model at all.I can not have multiple links from each access layer switch to the core/distribution and as a result i had to connect some access switches together to introduces redundancy in a nutshell,we have two buildings, main building which has the server room in it and the other building which is just bunch of office. i have introduced a partial mesh on the normal building and have tried to introduce full mesh on the main building .
View 9 Replies
View Related
Jan 26, 2012
I manage the I.T. department for an ambulance service. We have 12 ambulances all equipped with Verizon 4G LTE Samsung hotspot cards. [code] There are laptops in each of the ambulances that connect to the wireless cards in the ambulance via DHCP. I get frequent problems when the vehicle get close to each other of them jumping from one card to another... which is not a huge problem, except when it happens the computer will have a "limited connectivity" to the internet. This sometimes will resolve after 3-5 minutes on its own, or if i disconnect from the wireless card and reconnect it will resolve, or sometimes by rebooting the wireless card it will resolve.We also need the ability to move the laptops from one ambulance to another as well so we need to have this flexibility.would I be better off establishing the same IP address to each of the wireless cards, still keeping different SSID's and different channel #'s and then hard code the IP address into the laptop instead of using DHCP to connect? My goal is to eliminate the limited connectivity issue.
View 3 Replies
View Related
Sep 7, 2010
Issue with Linksys E3000 router (firmware 1.0.02). I'm experiencing issues with the following wireless connections:
-iPhone 4G (wife's)
-iPod Touch 2G
-PC with wireless connection (non Linksys brand adapter)
-Acer NetBook (non Linksys brand adapter)
The issue is the connection gets interrupted and dropped, but the devices and the router DHCP clients table show the connections are still present. By interruption, I mean no data traffic is being transmitted.My wife's iPhone 4G and my son's iPod Touch wifi both show they are connected to the home network, complete with wifi bars being displayed, and the checkmark is present next to the home network connection in the the device settings for both. When I check the E3000 DHCP clients table, both Apple devices are listed as holding a connection. Yet both devices display network errors when trying to use any app that connects to the internet. By restarting the wifi connection on each, the connection is restored to the point where traffic now transmits. My wife and son estimate it is after about 10 minutes that they encounter the interruptions.
On the PC and NetBook, the connections have to be terminated and reconnected. I have not timed these to see how long before the connection becomes problematic.Interestingly, my ASUS laptop and my iPhone 4G do not have the issue, nor does my work laptop (Dell).There are no timeout parameters in the router config. Closest thing to it is the Beacon Interval, but I don't know which way to adjust it (up or down) to manage the devices that are experiencing interruptions. I have not made any interval adjustments...at this time, everything is set to default settings.This E3000 replaced an aging WRT54 (hardware v2) router so that I could have an N router in the house.
View 9 Replies
View Related
Dec 1, 2011
I was wondering if it is possible to track and or log the changes that users make in in LMS 4.1. For an example if someone changed a configuration I want that being logged. I want to see what the person changed, when it's changed and who changed it.
View 2 Replies
View Related
Dec 27, 2011
what is the best way to do a acquistion on ip address on devices that appear to be dead until ping before LMS4.1 reports onn them. For example we run acquistion on a branch we do not see 172.20.12.51, howver we ping it from my desktop Claims unplugged when plugged in, and says "safe to remove" when I unplug the cableand then run user tracking and then it shows up.
View 1 Replies
View Related
Sep 26, 2012
I am trying to collect and track packets from other computers on my network and have them sent to my computer so i can sniff through them. I have been tacked with trying to reduce the amount packet broadcasts going through the network. I have been playing with Wireshark for a little bit only analyzing my packets but now I want to try collecting a couple of computers on my network. I know there is a little service that I can run with WinPcap but I am pretty sure there is a way to do it through the settings on my switches but i'm not sure what setting I need to use. I have 4 switches 2x Netgear GS724TS 2x Netgear GS724TR. I'm not sure what feature needs to be used to do what I want. All the switches can do SNMP and LLDP and I think it is one of these I need to use but not sure switch one to use.
View 1 Replies
View Related
Jul 15, 2012
I have a dual connection from two service providers ( provider A & Provider B).In my internal network, I have two Vlans (vlan10 & vlan 20).My requirement is users belonging to vlan10 should go via ISP A and for vlan 20, it should go via ISP B.So, for that purpose, I configured HSRP along with intervlan routing and that worked quite fine. I have two Cisco AS5300 routing connecting to both ISPs and they are terminated to a common switch Cisco2950.All are in ethernet technology, serial technology has not been used. "IP SLA" command is not supported in CiscoAS5300.I configured the interface tracking command for HSRP as well.
When one link goes down then it doesn't fail over and go through another link. To fail over, I should manually remove the external link connecting to the router. And another thing is, if i pulled the cable connecting to the internal network then it fails over. "IP SLA" command is not supported in CiscoAS5300.I am trying to implement a failover using HSRP in Cisco AS5300 but the interface tracking is not decreasing the priority value when the connection is lost with the ISP and IP SLA is also not supported. So, in this case what can i do to make a perfect failover for the network ?
View 4 Replies
View Related
Sep 1, 2011
I am trying to determine why hosts off our Nexus 7010s are being picked up in UT. Since LMS 4.0.1, UT should be supported on these devices.When adding the Nexus devices to DCR, provide the netadmin SNMP RO credential.When other SNMP RO credential is provided, user tracking will not collect end host data.I think I have this setup correctly as the device center test passes when cehcking snmp ro credentials.Our 7010s are running NX-OS 5.0(3) - earlier than the recommended version - might that cause issues? We are not using VRFs other than the default and management.
Here is my snmp section:
sh run | sec snmp
ip access-list copp-system-acl-snmp
10 permit udp any any eq snmp
10 permit udp any any eq snmp
20 permit udp any any eq snmptrap
[code]....
View 12 Replies
View Related
Nov 14, 2011
Some times the ISP side interface remains up with a failure of internet. At those situation how we can efficiently track the ISP failure from asa 5510
View 2 Replies
View Related
Nov 27, 2011
in LMS 4.1, under Monitor->Identity Dashboard, i have "user tracking summary" as a portlet, which tells me i have ~ 17,000 users. when i click the report, it pops up a screen that shows mac address, ip address, hostname, subnet, etc.
If i try to do ANY filtering, it returns 0 records. this could be from a specific IP, mac address, device name, or subnet. i have tried every type of record. every filter i attempt always ends with 0 records returned, even though in the unfiltered list they show up. It would be problematic to manually sort through 17,000 users looking for the particular records i need without the ability to use the filter.
how to filter the User Tracking report? is there some feature in LMS i don't own or have enabled to allow this filtering?
View 3 Replies
View Related
Mar 15, 2012
I have just got LMS 4.2 soft appliance up and running. When going to Inventory >> Acquisition summary, I get a HTTP 500 error with java. lang.Null Pointer Exception. That is obviously a bug somewhere (although the TAC engineer disagrees with me). I am just wondering if this is could have been caused by the fact that I have not done any user tracking on this LMS server yet? [code]
View 1 Replies
View Related
Feb 18, 2013
We are running LMS 4.3.2, it was running OK... but now we receive the following message:
"User Tracking Major Acquisition cannot be started as Network Topology, Layer 2 Services and User Tracking are disabled."
All processes are running. System restart and re-install the 4.3.2 update does not fix it. I think this happens after a device update, maybe FaultManagementDeviceUpdate...
View 2 Replies
View Related
Dec 6, 2011
I have an interesting problem at one of my customers. They are using LMS 4.0.1, but they have a problem with user tracking with SNMPv3. They using a very simple SNMP configuration, wich is the following: [code]
Now they have UT working well for their Ctalyst 4500 switches, and the half of the 6500s (They have 2950 switches as well, but for those UT with SNMPv3 is unsupported). So the problem is the following: they have 12 6500 switches, with the same IOS version (10 pieces of WS-C6506-E + SUP720-3B IOS: 12. 2 (18) SXF17 (IP Services), 2 pieces of WS-C6506 + SUP720-BASE IOS: 12.2(18)SXF17 (IP Services)). They have identical SNMP configuration on both devices. Based on the logs from LMS it seems that on the problematic switches for some reason LMS identifies the switchports as routed: [code]
View 5 Replies
View Related
Jan 9, 2013
I try to aquier IP Phone in User Tracking. Phones are present but like pc (without other information...DN, user....)
the LMS version is 4.2.3
the CUCM version is 8.6
the CUCM is green on Topology..
View 4 Replies
View Related
Nov 4, 2011
I've another problem with our new LMS 4.0.1.We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem. The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
View 10 Replies
View Related
Mar 7, 2011
if my employer uses split tunneling on our VPN network, and I access the internet thru our VPN then my home internet is routed through my ISP and can not be tracked by my employer or is unlikely to pop-up on employer tracking software. Is this correct?,how can I tell if my employer uses split tunneling? Currently they use Juniper Network Connect. If I am logged onto the VPN and look up my ip address, I see it finds my DSL ip address, not my employers IP address. Does this mean the VPN is using split tunneling?
View 7 Replies
View Related
Oct 19, 2011
I have a problem about user tracking for LMS 4.0.
For example:Switch 4506 send the endhosts for every VLAN that it has configured, except for one, but I can see that VLAN is configured over the switch.
are there problems directly with the connected endhosts over this VLAN or is it a problem about configuration for user tracking settings ?
View 2 Replies
View Related
Mar 24, 2013
I use tracking objects aroung the organization where I work to monitor WAN and VPN connections and add/remove routes based on the state of the object. I'm having 2 locations that are constanty going up and down and I've been troubleshooting and monitoring for the last few weeks without finding anything. I've been incrementing the timeout for the SLA and it seems like this is working a little (less overall drops) but the drops still occur. Our ISP reports no issues and we see no issues internally on the circuits. Just out of curiosity could this be some kind of IOS bug or hardware malfunction? The router logs are full of these:
Mar 21 16:18:33: %TRACKING-5-STATE: 2 ip sla 2 reachability Up->Down
Mar 21 16:18:38: %TRACKING-5-STATE: 2 ip sla 2 reachability Down->Up
Mar 21 17:24:14: %TRACKING-5-STATE: 2 ip sla 2 reachability Up->Down
Mar 21 17:24:19: %TRACKING-5-STATE: 2 ip sla 2 reachability Down->Up
[code]....
The IOS version of the router I took these from is 151-4.M6 advanced IP services and it's a 2821 router.
View 5 Replies
View Related
Aug 23, 2011
I've the following problem, configured dynamic user tracking on a WS-C4506-E with a WS-X45-SUP6L-E, System image file is a Version 12.2(53)SG2
Interface configuration:
snmp trap mac-notification change added
snmp trap mac-notification change removed
[Code].....
View 12 Replies
View Related
Feb 27, 2012
Is it possible to track failed login attempts to ACS instances (both on CLI and web GUI) by snmp? unfortunately i haven't found such option in Monitoring and Reports > Alarms > Thresholds >
View 2 Replies
View Related
Dec 25, 2012
If I have understand correctly, the IP address - mac address matching was made with the arp table of a cisco acces switch if it will made the L3.
My access switch wasn't used for L3 routing, only L2
It's possible to set user track to use the arp table of a firewall or a router for made this matching ?
View 2 Replies
View Related
Nov 14, 2011
I have PIX 535 and using ACLs for allowing traffic. I need to clean up the rule base. I would like to know how to fetch a report of Unused rules for long time?Also when a traffic is being allowed, I want to know through which rule number its being allowed?
View 2 Replies
View Related
Oct 5, 2012
I have already ordered a Cisco ISR 1921/K9. but as i read on Cisco website, it is written that Cisco 1921/K9 only support (IP SLA Responder) feature.
I don't know actually what is sla- responder. but our requirement is we will connect that Router 1921/K9 into 2-ISP links and i want to enable IP- SLA probes on that router so that it can track both the routes into those isp links. so my question is does CISCO 1921/K9 have the support for what i need ?How about Cisco 1921-SEC/K9 ?
View 1 Replies
View Related
Jan 26, 2011
my laptop has been stolen but I still have the box with all the details( Serial Number, MAC address for LAN and Wireless Product code etc) and I was wondering if there is any possibility in tracking it using for instance the physical MAC address.... I am sure that the thief reinstalled windows on drive C, as I was able to use and register my genuine copy of Win7 on a different laptop.
View 2 Replies
View Related
Apr 15, 2013
I am using LMS 4.2 I have enabled user tracking and I am getting ip address, MAC address ,hostname in user tracking table . But username entry in user tracking is not getting populated . Even I have enabled get user name from the hosts in NTS and ND host domains in user tracking acquisition settings .Is there anything else that I need to configure in LMS in order to get the usernames in user tracking table?
View 3 Replies
View Related
Apr 5, 2013
I have a problem with MSE tracking client in my network.What we have:PI 1.3 with evaluation license (temporary)MSE 7.4.100 with 3k device licenses (hardware appliance 3355)WLC 5508 7.4.100.For now MSE is reacheble from PI and WLC, all setings are synchronized, NMSP status is active, mse assigned for maps and synchronized, on map we have 3 APs, but in Contex Aware tab we didnt see any tracking devices, all counts 0.
View 11 Replies
View Related
Dec 14, 2011
Why Cisco 4500 R switch PBR tracking Command not working , I found just route-map next-hop ?
View 3 Replies
View Related
