what this syslog message means? Being getting this on my 3945e series routers. My gut tells me they are caused by our Security guys scanning my routers with invalid login attempts.
%SSH-3-DH_RANGE_FAIL: Client DH key range mismatch with maximum configured DH key on server
Am looking at purchasing a router that is capable of serving a WAN bearer at up to 1Gbps. The 3945E has had good reviews as a high throughput router but the datasheets suggests performance of 350Mbps. It also states that additional performance can be ensured by adding SPE modules. Whether the 3945E could achieve up to 1Gbps with SPE modules?
If the 3945E can't achieve such performance, The key features I am after are:
IPV4 and IPV6 support
L2tpV3 support
BGP
IP SLA
1Gb Copper Connections on-board with capability of at least 4 Ports
I have a asa 5510 vpn client groups configured and connected to the internal network DHCP server stops giving network service dhcp and the network goes down.
View 6 Replies View Relatedwhat is the maxium range of a router?
View 3 Replies View RelatedI am using 3945E Router as Easy VPN Server, with 15.1 IOS. On router I have bunch on usernames for VPN authentication, I want to restrict Router management access for them(ssh,telnet, http and so on).
View 2 Replies View RelatedI want to know what is the maximum range of WAP200E. I found in an overview of the family of access points "CISCO SMB" that could reach up 4kms. Is that true?
View 3 Replies View RelatedI have 2 questions about the Cisco Air-CAP3502I-A-K9.What is the recommended and maximum number of conncurrent users this device supports?What is the recommended and maximum range of this device? I've looked else where but can't seem to get any hard numbers.
View 5 Replies View RelatedI am having an ASA 5510 and have configured Clientless SSL VPN in it. Now I need to allow my SSL VPN user to access on a particular application(like mspaint.exe for example).When the user login to the SSL VPN, he should see only the particular aplication or must be able to access on the particular application.
View 2 Replies View RelatedI have configured Clientless SSL VPN for access to ASA 5540 internal network. Still I am unable to take ssh to my core switc [code]
View 5 Replies View RelatedOn the BEFSR41 v1 series and WRT54G series, what is the maximum value for the DHCP "Client Lease Time (in minutes)?" It seems that 2^16 -1 (65535) minutes is the max. This is about 45 days. has the max value changed with newer versions of these devices?
View 1 Replies View RelatedIn the following scenario, how will the 2950/2960/2960S series behave:
- VTP server/domain configured on a 6509
- A access switch (2960) currently configured in transparent mode with all VLAN it requires
Will the switch drop any traffick if we change it from transparent to client mode if the VTP server has the exact same vlans defined as the access switch had when it was in transparent mode?
I am testing rogue on wire using 5508 WLC and , I have a dedicated AP configured as rogue detector and configured the switch port where the Rogue detector is connected as trunk. I have plugged in an autonomous AP with open authentication to the same switch so that it can act as a rogue. On the WLC, I can see that Autonomous AP as rogue on Wire. But along with that I am seeing another AP as rogue on wire, even though i have plugged in only one Autonomous AP to the switch.
View 3 Replies View RelatedI keep getting some additional IP addresses logging onto my home network that have an address outside what should be allowed by the router. The server is running at 192.168.2.1 and is set to only allow clients from 192.168.2.2 - 192.168.2.10 so a total of 9 clients should be allowed on.The problem is that something keeps logging in with an address of 192.168.169.2 or 3 etc. Sometimes more than one device at a time.I have assumed that it is some automated or virtual client as I'm pretty certain my network has not been breached. I have a 9 character password with a relatively random alphanumeric combination, although I haven't tried changing the password (I live in a share house with with a bunch of devices using wireless, so I haven't yet bothered). What I don't understand is how it has connected with the xx.xx.169.xx range at all. I have a Belkin 'Share' Wireless N Modem Router and at some stage there was a 'guest' network but that has since been disabled and I still am seeing the extra address. I have attached a screen shot of the DHCP client list on the router.The following is a list of devices that may be on the network at times, I'm thinking one of these may be responsible for the problem:
Windows Vista Desktop - Only LAN device
PS3
Macbook
Epson wireless printer
Android HTC Desire Mobile Phone
Laptops running various Windows versions (XP, Vista and 7)
A few thoughts I had:
- the android phone is capable of running a wireless hotspot, may have to look into it to see if if has been operating as an access point into the Belkin router, but assumed this wouldn't bring up clients connected to the phone on the home router.
- The desktop has PS3 Media server installed to stream video to the PS3 over the network (not that I have ever managed to get it to work), however this is not ever open on the desktop.
What are the maximum number of real servers, server farms and virtual servers i can configure on ACE30 module,Is there any documentation available on cisco site where i can check this? Does it depend on the hardware or does it depend on the software version?
View 3 Replies View Relatedi am facing the same problem now but am using windows 2003 server
View 1 Replies View Related: Saved
: Written by enable_15 at 03:51:29.049 UTC Mon Feb 4 2013
ASA Version 8.4(4)1
host name cisco asa
enable password xxxxx encrypted
password xxxxx encrypted
names
interface Ethernet0/0
switch port access v lan 100
interface Ethernet0/1
interface Ethernet0/2
[code]...
how do i change existing server ip address to a different range,,what changes do i have to make?
View 3 Replies View RelatedI have Internet connection in Ethernet Medium connected to a L2 Switch (Cisco 2960). I have 2 Routers (Cisco 2900). I have a webserver to be accessed from Internet. The physical IP address of the server is Private range.
I have configured Stateful NAT as below
157.220.100.61 is Static NAT to 10.1.1.3 using redundancy
Though HSRP is working good, when RTR-1 is down, I am not able to reach Webserver (10.1.1.3) using RTR-2
We found in the that ISP Switch, that even when RTR-1 is down, the MAC address for 157.220.100.61 is still present one pointing to RTR-1 and other pointing to RTR-2. There are 2 MAC address entries for 157.220.100.61
Does following configuration is responding to the request of my client asking for 20 T1/E1 connections on a Secure ISR 3945E, by combining on the same router One (01) NM-8CE1T1-PRI card and Three (03) HWIC-4T1/E1 cards.
Here are the router configuration:
CISCO3945E-SEC/K9 Cisco 3945E Security Bundle w/SEC license PAK
MEM-3900-1GU2GB 1GB to 2GB DRAM Upgrade (1GB+1GB) for Cisco 3925/3945 ISR
MEM-CF-256U1GB 256MB to 1GB Compact Flash Upgrade for Cisco 1900,2900,3900
NM-8CE1T1-PRI 8 port channelized T1/E1 and PRI network module
HWIC-4T1/E1 4 port clear channel T1/E1 HWIC
SM-NM-ADPTR Network Module Adapter for SM Slot on Cisco 2900, 3900 ISR
PWR-3900-AC/2 Cisco 3925/3945 AC Power Supply (Secondary PS)
CAB-ACE AC Power Cord (Europe), C13, CEE 7, 1.5M
S39EUK9-15104M Cisco 3925-3945 SPE IOS UNIVERSAL
PWR-3900-AC Cisco 3925/3945 AC Power Supply
3900-FANASSY Cisco 3925/3945 Fan Assembly (Bezel included)
C3900-SPE250/K9 Cisco Services Performance Engine 250 for Cisco 3945 ISR
ISR-CCP-EXP Cisco Config Pro Express on Router Flash
SL-39-IPB-K9 IP Base License for Cisco 3925/3945
SL-39-SEC-K9 Security License for Cisco 3900 Series
I have a NAT setup. Some of my udp packets are dropping. How to find more about the NAT to find whether it missed anything or not. the router is 3945e. [code]
View 3 Replies View RelatedCan Cisco 3945E support VRF-Lite ?
View 4 Replies View Relatedthe feature difference between Cisco 7204vxr vs 3945E.
Wanted to know the limitation in 3945E compared to 7204VXR
Features39457204VXR with G2MemoryPacket processingBandwidth support
I have inherited a 3945E router with an NM-8CE1T1-PRI card installed in slot 2 using the SM-NM adapter card. The command 'card type E1 2' has been issued but I only see interfaces Serial2/0:0 to Serial2/0:30.
Since it as 8 port card I was also expecting there to be
Serial2/1:0 to Serial2/1:30
Serial2/2:0 to Serial2/2:30
etc etc.......
Serial2/7:0 to Serial2/7:30
The router will not allow me to issue a sub slot number with the card type command.
Am I missing something in the configuration or is there an issue with this card and router combination? The show inventory has the following:
NAME: "Network Module Adapter for SM Slot on Slot 2", DESCR: "Network Module Adapter for SM Slot"
PID: SM-NM-ADPTR , VID: V01, SN: FOCxxxxxxxx
NAME: "8 port channelized and PRI T1/E1 NM on Slot 2", DESCR: "8 port channelized and PRI T1/E1 NM"
PID: NM-8CE1T1-PRI , VID: V01 , SN: FOCxxxxxxxx
It doesn't give any errors when booting up and the router is running c3900e-universalk9-mz.SPA.152-1.T.bin IOS.
I was looking for Rack Unit required for 7206 VXR & 3945E but couldn't find it.
View 1 Replies View RelatedI have an issue understanding the difference between 3945 and 3945E from VPN support perspective.
If you check this link here:
[URL]
You will see that the 3945E doesn't even have an ISM slot for a VPN ISM module and of course I could not find any ISM module for 3945E (I think this is obvious). Nevertheless, the above mentioned page and
[URL]
say "Embedded hardware-accelerated VPN encryption for secure connectivity" for 3945E
That the Cisco 3945E supports the same VPN features (including packet encryption / decryption in hardware) like a Cisco 3945 with VPN ISM card?
I'm looking to use a Cisco 3945E to terminate a 1Gbps Ethernet internet connection and I want to know the realistic throughput that I can expect. The router will only be configured with BGP with partial routes. No firewall or QoS will be configured.
View 8 Replies View RelatedI'm trying to migrate the running-config from our old 3725 router to our new 3945e router. Almost all of the config is copied over except for a few lines that come up as unrecongnized commands. So it looks like these commands were either removed or changed to something new.
View 12 Replies View RelatedI have a question concerning about how many ospf and bgp route entries does 3945E isr g2 router support?
View 6 Replies View RelatedI am wondering if IOS bundled by default with CISCO3945E-SEC/K9 and CISCO2911-SEC/K9 contains adv. ip services features (like Eigrp, OSPF etc.).
View 1 Replies View RelatedAs part of site to site VPN configuration, I need to configure VPN server & Client using Cisco 877 only.
View 1 Replies View RelatedI insert data from two clients.(1 window server 2003,2 XP clients ) the two client print paper and the printer is shared printer. At the same time two clients print paper and the printer stop working. So I restart my two clients and server. After restart the clients cannot ping to server.
View 1 Replies View RelatedI'm trying wrap my head around bandwidth guarantee for nested maps. I tried adding a new class to two of my policy-maps today, and got this error: 3945E-1(config-pmap-c)#bandwidth 3000 Insufficient bandwidth 3000 kbps for the bandwidth guarantee
I'm not sure how it knows that with the nested maps and how it's computed. I have a 100mb WAN connectin going to 19 branches. I have a class-map that identifies traffic to the individual branch and within that class, a policy-map is applied to prioritize voice over video etc.
Here's the QoS setup:
class-map Branch1-Policy
match access-group branch-1-acl
*
*
[code]....
I was adding the Video-Conf class to both Traffic-6calls and Traffic-10calls when I got the above error. How would that percentage be calculated? I know by default i can only reserve up to 75% of interface bandwidth. The platform is 3945E running 15.1(3)
Can I have two asa firewall between dhcp client and dhcp server. if yes what solution i have to have to get dhcp leases. should i have to configure dhcp relay on both the asa.
View 5 Replies View Related