I'm trying to bring up two t1 and bundle them into a multilink on a 3845 on one end and a 3725 on the other end. On the 3845 I have installed two VWIC-2MFT-T1-DI and on the 3725 I have installed two VWIC-2MFT-T1 and a 1DSU/CSU-T1-V2.
For some reason I'm able to bring up the T1's on the DSU/CSU WIC. When I try to connect the T1 on the other WICs, on the 3845 I see SLIPs and Interface Resets however on the 3725 there is no errors however I still see UP DOWN.
We are having dialup 15 connections in router 3845 model IOS version 12.4 1A.We are unable to have a connection between dialup branches to headquarter. these are the command
aaa new-model ! ! aaa authentication login telnet local aaa authentication login ppp local aaa authentication ppp ppp local
I`ve seen quite a lot of posts regarding SSH issues and the above SSH error. However the fix mainly involves upgrading clients but in this instance the client is are Cisco routers 3845 / 2811 - which we use for out and inband management.Connectivity / routing etc is proven. Using SSH v2 the actual 6500 chassis where the ACE is physically located works fine. Configuring SSH v1 on the ACE module allows connections via the 3845/2811`s but we cannot use this.Both have the following IOS Version 12.4(24)T4. I have tried various key sizes on the ACE module. [code]
I have a problem where I have 3845 router and c3845-advsecurityk9-mz.124-24.T5.bin dis is the IOS running on it and there's a back up BRI interface for the serial. Now if my serial link goes it normally goes to my BRI, once we had a time where the BRI was also down and when we restored back the Serial link we were still not able to reach the other side. We are using OSPF routing to reach the destination. When this happens and when we reboot this router we are able to reach the destination. sometimes we are able to reach it when we remove ospf and use static and now if we put back the ospf routing the link comes back, this happens again and again.
Is there any physical or technical diferrences between PWR-3845 AC/2 and PWR-3845 AC? We are trying to order replacement parts and wondering if PWR-3845 AC is for one power supply and AC/2 means you get two with one order?
Is there any physical or technical diferrences between PWR-3845 AC/2 and PWR-3845 AC? We are trying to order replacement parts and if PWR-3845 AC is for one power supply and AC/2 means you get two with one order.
Im trying to setup a site to site VPN using a Cisco 877, problem is we have no ADSL presentation, we've just been given an Ethernet line to use from another client in the building, If i plug my laptop into the port and use the External IP information given i can use the internet and ping the other VPN just fine, if i place my blank config 877 into the port and set up VLAN 10 to use the same IP information, it cant even ping the local gateway? The port on the router is in VLAN 10 like it should be and the interfaces are all up, the router can ping its local VLAN 10 ip address.
I've attached my ASA's config. I can't bring the VPN up by pinging from the ASA but the VPN will come up when someone pings from behind the ISA server. So the problem seems to be routing/NAT on my ASA because my pings aren't being directed out the tunnel. The VPN in question has 64.106.x.x as the peer and AES 256/SHA for phase 1 and 2.
I have 2 ASR 1006 with ASR-1000-ESP40, ASR-1000-SIP40, ASR-1000-RP2 , and with SPA-1X10GE-L-V2 that should hold an XFP-10G-MM-SR.
i am in the proceed of an implementation and configuration, but i am facing a problem on the interfaces, where i am not able to bring the interfaces up/up and always down/down.
i check the fiber patch cords and the other SFP on the switch WS-C3560E-12D and it is working fine. i also reverse the fibers pins and nothing works
i need only to get the interface to be up/up. i also checked all the hardware compatibility matrix, IOS XE, the SPA are all online (show platforms).... where all seems to be ok and compatible.
all what is needed is to give the interface ,for example, tengig0/0/0 and ip address and no shut and it should go up/up.
One more thing, the XFP is not giving a red light laser, and in the show interface tengig0/0/0 give media type is unknown.
I am a traffic shaping newcomer and need some guidance as how to BEGIN to approach a problem with traffic. We have been rolling out Windows 7 at sites and the additional traffic it causes on installation is considerable as it has to request information from our central site to populate My Documents and Outlook mailboxes.This has caused some problems on sites as there traffic rates increase to the point that QoS is not sufficient to protect voice traffic and delays and one-way audio are being experienced.One question is this - is GTS a solution or is CBWFQ within GTS the solution or is something else preferable? The sites involved are data/voice with a variety of routers.Second question is this - if we have a remote site with a 3725 router as the WAN aggregator with one 4506/Sup IV and one Cat 3550-24-PWR the shaping should be best placed on the 3725, correct? Also, are there issues with shaping incoming/outgoing traffic as I seem to have read?FYI, the 3725 router has 12.4(8d) with IP VOICE/NO CRYPTO IOS version. The 4506 has 12.1(23)E4 with basic L3 feature set.
I have a 3725 router and would like to upgrade the slot:0 compact flash to a higher capacity. My question is, I can just pick up a 4GB compact flash card from walmart, or do I have to have a card from Cisco?
I know I can bring up a tunnel up-and-up without any layer 3 address, without any ipv4 or ipv6 address (apart from tunnel source/destination of course). And I don't have to use "ip unnumbered <interface>" either. But what good is a tunnel interface with no address? Can you bridge them or something?
any 3725 IOS image that supports the ip sla command? I tried searching for it using the feature navigator but i received something like "15T" and I'm not too sure what that is.
I am trying to configure an IPSEC tunnel on a 1921 router. What I hope to accomplish is that using a IP SLA that the IPSEC tunnel will only be brought up IF the normal WAN connection is not responding. My thoughts were to route the traffic that needed to come back to corporate through a loopback interface but I havent found a way to do that.
I am implementing traffic export on the WAN interface of my 3725 router. I use a dialer interface for PPPoE which is applied to the Fa0/0 interface. This dialer WAN interface has Zone Based Firewall, NAT Outside, ACLs applied to it, as well as IP Traffic Export for an IPS. In what order would each of these items process a packet? In other words, is the order something like ZBF, ACL, IP Traffic Export, then NAT? How would QoS fit into something like this as well? I am asking because I am wondering how much processing the packets receive before they are mirrored over to my IPS.
I have a Cisco 3725 router with IOS version "Cisco IOS Software, 3700 Software (C3725-ADVIPSERVICESK9-M), Version 12.4(12)". And this router is serving as a CE route for our MPLS connection to the service Provider. We do also have multiple VRFs ( around 10) and the WAN interface is DS3. So we created point-to-point subinterfaces and we put them in different vrfs. We have now transitioned to a new ISP and the ISP requested us to mark all of our outgoing traffics with DSCP AF31. So I have created the following policy-map
policy-map TRAFFIC-OUT-WAN-AF31 class TRAFFIC-OUT-WAN set ip dscp af31 class-map match-any TRAFFIC-OUT-WAN match any
Now we do have multiple GRE tunnel interfaces sourced from one of the WAN subinterface ( which is a member of VRF A). So the moment I applied the the policy-map on this WAN sub-interface (using the syntax "service-policy out TRAFFIC-OUT-WAN-AF31"), most of the GRE tunnels went down. And there is eBGP running on top of these GRE tunnels.
I work for an ISP and we are currently bonding 5x 6Mb ADSL connections for use as a wireless backhaul. We are currently using a Cisco 3725 and bonding the links via MLPPP. This set up is working fine except that we are not getting the full 30Mb on the download side. We are seeing more like 18 to 20. I am wondering if we can acheive the full speed with our current set up or will we need something different to get the job done.
Have already checked in the Device Manager if the �Allow this device to wake the computer� is unchecked.What do I do to bring the sleep mode back without turning off the file sharing (if file sharing caused the problem)?
How do I get one of these to automatically bring up the VPN tunnel without the end user having to login and click connect? I got the VPN working Dynamic to ASA static, but it doesnt come up on its own when I try to access something over VPN.
I've to bring vlan 2 access to a remote site through 2 AP1261N configured as bridges. Here it is the network diagram
One AP1261N is configured as root bridge. Its ethernet interface is connected to a switch with vlan 1 native and vlan 2 tagged. Vlan 1 is for APs and switches management. Vlan 2 is for users access. The other AP1261N is configured as non-root bridge and one PC is directly connected to the AP's ethernet interface. I've successfully managed to create i wireless link between the 2 APs and so I can reach the vlan 1 IP address of the non-root AP. My problem is that I can't reach the PC connected to the non-root AP.
I'm trying to migrate the running-config from our old 3725 router to our new 3945e router. Almost all of the config is copied over except for a few lines that come up as unrecongnized commands. So it looks like these commands were either removed or changed to something new.
I have 2 4402 WLC running 7.x.x.x code. I also have some 1510 Mesh- L WAPs that require an old version of code. I need 4.1.192.22M for those. Is it possible to bring up a 3rd controller running this old code with the other 2 4402's running modern code? What will break? I know that anchoring and mobility might get messed up. What are the other caveats?
I have been using a route map to pick WAN exit points (PBR) on a 3725 router. This have been working fine with /24 networks. I am trying to pick the first /28 piece out of the 10.1.1.0 network and send it out a different exit from the rest of that network. I have tried the /28 entry at the start and end of the route map, although I thought the first match would stop any further route map processing. The entry does not seem to have any effect, as traffic from all addresses in the 10.1.1.0 /24 network exit per the "route-map 10-LAN permit 11" section.
access-list 5 remark Ten Dot 1 low 63 IPs access-list 5 remark SDM_ACL Category=2access-list 5 remark Ten Dot One Low 63 IPs access-list 5 permit 10.1.1.0 0.0.0.63 log [ code]....
We have two Comcast 100MB routers. Can I plug these both into the SG200-50? How do I configure the ports?
I have an Apple Extreme Wireless Router that 30 Laptops use. I also have 25 VOIP phones and 10 Desktops that are on an unmanaged switch which I want to convert to the new SG200-50.
I'm using a Dell computer CPU i7 8 gig of ram. It is wired in to the router. Why does it take so long to log into the router and bring up the different pages in the settings. I have never seen a router take so long. I have not updated the firmware version 2.02NA. I have not upgraded it yet. oh I have a cable connection. When I surf the web the pages come-up fast.
Today i has tryed to update the firmware of my DIR-655 router, but in the screen under the administrative tools menu there is nothing to use.
how do I update the firmware and bring up all the necessary tools?Dir-655 works because they are connected to the internet and manages the wireless network.
I have a 3725 routeur configured to receive the PPP/ATM/DSL connexion of our customer. I have found that the routeur has created 1035 virtual-access (1035 is his max) but I only have 85 customer on this router
I am trying to connect a 6509 switch to a 4503-E switch using single mode dark fiber over a distance of less than half a mile. Although a routine task, it does not work..We have a care 6509 switch where we concentrate all of our dark fiber connections for our remote sites. The 6509 switch already has 30 remote sites, most of them with 4503-E switches, connected in this way therefore it is a tested scenario. For the connections we use the GLC-LH-SM SFPs on both switches. Out of these 30 sites we had a similar problem with two of them, which we solved with the use of CWDM SFPs. With the CWDMs the fiber came up right away. However, I cannot keep using this solution because it is way too expensive! I had the losses of the fiber measured end-to-end and they are negligible (>0.5 dB).
In this latest case, like I said, we could not bring the connection up between the core 6509 switch and the 4503-E switch using the GLC-LH-SM SFPs. I then replaced the 4503-E switch with a 3560 and the link came up! Then I tried using a CWDM-SFP in the 4503-E, while keeping the GLC-LH-SM SFP in the 6509 and the link came alive again! Of course we already tried replacing the fiber patch cords with no luck. [code] I find it very weird for the link to work with the 3560 or with a CWDM in the 4503 but NOT with the SFP in the 4503!
I have 3725 router with internal CF and external slot for CF. I tried upgrading and ended up deleting the iOS version on the internal flash, and can not now put the iOS back!! I turned it off.... so there was no active iOS..
I have tried formatting the CF card on an 1841 but the 3725 won't read it. It is obviously stuck at ROMMON
What is the correct way to format a CF card so my 3725 will read it and I can get an iOS back on it!!
I have two 3825's. Each has it's own ISP connection. Nat is configued for both. They have an ethernet connection between them and I'm running OSPF between the two so the routes propogate. I have qty 11 Dialer interfaces configured on each router (each router has an exact copy of the other routers dialer interface). However, I only want the Dialers up if the ISP connection on the mated router goes down. Much like HSRP I need one to preempt and be active if both ISP connections are up. When one goes down the other Dialers must come up. Each dialer sends a Dynamic DNS host name and IP address pair to DynDNS.org. So I cannot have both up otherwise the DNS names will bounce between ISP#1's IP address and ISP#2's IP address (back and forth). Let me know if any option exists to make this happen. As an aside the ISP's are providing me DHCP addresses so I cannot work off of an IP, it has to be the physical interface (i.e. Gi0/0).
I am setting up multiple vlan interfaces on a pair of HSRP Routers that will provide layer 3 routing for a network. I am seeing this command sporadically show up in the router config mac-address-table static 0000.0c07.acd2 vlan 210
I am not entering this command. So far, it has not shown up on the companion 3725 router. I have a 2nd vlan I have just created and the problem hasn't shown up for that vlan as yet.Using C3725-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3) on the routers.
