Cisco WAN :: 6509 ISP Multi Homing Device Recommendation
Jan 31, 2011
I am designing a dual local router ISP multihomed network and I need some recommendations on the edge routers and the distribution layer switches I should use in my design. Right now we have two 6509s as internet edge devices multihoming to two ISPs, with load sharing and failover (layer 2 and layer 3). I was thinking of using Cisco 7200 routers at the internet edge and Cisco 4500 series switches behind the router for layer 2 switching(ISP---7200 series ---4200 series). Current traffic pattern on my two 6509s is around 100Mbps on an average on each switch when they are load balancing.. and when one failovers to another it just doubles. So I need to make sure the devices I chose has enough throughput for my current requirements and future growth.
I am trying to work up a config based on equipment that was ordered before I joined my current employer.
I will be deploying N2Ks at the top of each rack. Each N2K will be dual homed to two different N5K's. Being new to the Nexus, I understand that the N2K's have no brains and are dependent on the N5K's they connected to. Wasnt sure how to tell each 5K that the 2K that was dual connected to it needed to be able to move between N5K's based on failure/availability. I havent been able to find a sample config of what this will look like anywhere on the Nexus section of the Cisco site.
The next step after this will be to connect N5K_1 to blade on a 6509 and N5K_2 to a different blade on the same 6509. I will be installing two of the 10Gig blades in the 6509. Havent been able to find any sample configs on what this would look like either. We are upgrading the sup engines on the 6509 to the new 2T version.
we use LMS 3.2 in our network. We have a couple of 6509-V-E Switches with mutiple interfaces (VLAN interfaces and Layer 3 interfaces) The problem is, campus manager discovers the switch by a interface randomly...one time its a lay3 Interface and another one its a vlan interface which none of them are in DNS hence no name resolution can be made.
Is there a way to "tell" CM to us for instance the VLAN Management IP of the switch?
My company is composed of three different campuses, all with a similar network topology. We currently are experiencing high bandwidth on our serial interface at one of the campuses in particular. The network is composed of about 20 VLANS routed internally using a Cisco 6509. Traffic to the outside is PAT’d by an ASA 5510 and then forwarded through our edge router interface. Each VLAN is PAT’d to a specific public address.Due to the PAT, how would you recommend determining what specific private addresses are consuming our resources on the serial interface. When I look at our NMS, it reports the public address, but that only narrows it down to a VLAN. For example, all the devices in VLAN 6 are translated to 146.34.118.245, and 146.34.11.245 is a top talker.
I think the crappy usb to serial cable from china broke because when i boot up my cisco router, after it decompose the IOS image and shows all the interface links, it won't do anything. I can't get to user exec mode.anyways, i think my usb to serial cable is faultily. I got one that is from ebay for like 2 bucks and i think it is the reason why i can't even connect to my router now
There are many software available for this but the issues is how they all function. Example: One software Synchronized FTP allows you to set a local/remote folder and sync files between them. What was never disclosed is that you need Windows Task Scheduler to run the synchronization, and you do not see a progress indicator. I also tried TurboFTP but it felt like landing a space shuttle.
I'm currently assigned the task of purchasing new wireless access points, for our offices, at my workplace. We've previously been using "HP V-M200" access points, but we encoutered heavy throughput problems with these. During my tests of the network, I've seen these APs decrease their tranfer-rate to 30Mb, during file-transfer and ping-test. The issue here is concerning the transfer-rate from the Network Interface Card of my laptop to the wireless AP (did an iptraf while testing, and then noticed the 30Mb).
recommendation for a PoE-compliant (802.3af) 10/100 ethernet switch suited for the following use. A client wants a separate [from their data] network dedicated to their new IP CCTV/IP Intercomm system (Stentofon ISO5 Cleanroom Certified). Total of 15 devices, all of which support PoE, 11 of which require it. The intercomm system will be the primary method of communication with personnel inside the clean space, so it must have minimum downtime.
1) 16x RJ45 (Only 15 devices -- anything over 16 ports is waste, SFP/expansion/combo ports not required)
I've got a network setup (n only) with a bunch of devices wireless and wired. I've got in my PC an Asus PCE-N53 wifi card (comp isn't close enough to modem), and using it and speedtest.net I get speeds up to 40mbps (rarely, at average around 28-33mbps). When I test on a wired PC or on my brother's surface pro, I get from 60-80mbps. I can't for the life of me figure out what is wrong with the asus card. I've tried reinstalling the drivers, switching PCI slots, different system and it's still the same.
I'm looking at upgrading our FWSM modules in our 6500's. They're the WS-SVC-FWM-1 modules.
We're running on version 3.2(12) at the moment and I'm looking to jump up to 4. Any recommendations around whether I should to go to 4.1(6) or 4.0(16)? There aren't any features in particular that I would need in 4.1 but want a good stable base to sit on for 12 months until I look at this exercise all over again.
I recently bought an ASUS RT-AC66U Dual-Band Wireless-AC1750 Gigabit Router. It is working great.Now I would like to replace the wireless card in my Asus N61J laptop.
I'm trying to identify a Cisco router that will give 300+Mbps through a 1Gb WAN port. I think the 1921 can get up to around 300Mbps with the on board RJ45 ports, but are there any other/better suitable models?
There's no need for any other particular functionality or feature set, the routers aren't doing anything fancy or unusual - it's the achieved throughput that's important.
We are planning to upgrade our current wireless access points (1200 series) to 3600 series. We would also like to add a wireless access controller to the design to centrally managed those Access Points.
Which Cisco Controller model support those 3600 APs efficiently?
I currently have a couple of 6509 chassis (router/switches) with the following hardware blades:
x3 48 ports x1 NAM x2 Sup720 Running 12.2(18)SXF3
I am keeping the four Sup720 modules and have purchased new versions of the others blades including two new 6509-E chassis?Can I take my stand-by Sup720 out of the production machine and insert it into the new chassis?
I currently have a couple of 6509 chassis (router/switches) with the following hardware blades:
x3 48 ports x1 NAM x2 Sup720
Running 12.2(18)SXF3.I am keeping the four Sup720 modules and have purchased new versions of the others blades including two new 6509-E chassis. Can I take my stand-by Sup720 out of the production machine and insert it into the new chassis?
We are using LMS 3.2.1 with SP1 and Campus Manager 5.2.2.Server runs Windows 2003 R2.Everything runs fine except for User Tracking on two Catalyst 6500 switches running CatOS. These devices are discovered, reachable, SNMP works fine, neighbors seen. But when we try to launch acquisition, the UT utility complains with this error message:"Failed to start acquisition: Device unreachable. Please enter a valid device."When we wanted to add ports via Device Trap Configuration, LMS has fired a different error message: "There are no ports to configure for the selected device(s).Check whether you have selected any router(s)." I have checked the portsData.xml file, which doesn't have any ports included for the two devices: [code] We have tried to exclude / include the switches in the data collection, but that didn't work.
We have network consisting of approx. 8 7200's running LNS/MPLS/BGP and we provide predominantly private networks to clients(Majority of client networks are a mix of Ethernet tails and DSL).We have received a request from one client to support multicast - Having never implemented multicast, have a few questions:
1. Is is supported/possible to provide multicast within a vrf on 7200's?(From initial investigations, it appears to be)
2. Is it possible to only enable mutilcast in a vrf(i.e. not globally)?
3. Any recommended guides/best pratices?(Googling has revealed nothing really that is similiar to what we want to do)4. What are the potential ramifications?(Resource overhead, Security implications, anything else?)
My BEFSR81 is my primary router and has DHCP turned on. The router's DHCP range is set to accommodate 12 devices. I have three computers wired to it and their Host names (as specified in the set-up of each computer) show up in the router's DHCP device table. I also have two printers (one old Brother HL5250DN laser printer and one new HP Photosmart Premier C410a inkjet printer) connected and there are blanks where the Host name should go. I would like to be able to tell which printer is which when I am looking at the DHCP device table. How can I get a names associated with each printer's IP address in the router's DHCP device table? (The real problem is that the router seems to have both printers at the same IP address (192.168.1.100) and if I can get one of them to change I'd like to know which one it was!)
I wish to build a test rig in my office that will act as 2 separate geographic locations with a router at each location connecting to a make believe MPLS kind of network. I then wish for these sites to communicate with each other but obviously be on separate IP ranges .I know each site would have a router and I assume that there ideally should be 2 corresponding (provider) routers on the MPLS network. What I do not know is how the the routers at each site should connect physically to its partner router at the MPLS and also how the two MPLS routers would connect together. For example, if I wanted to later scale up to have 4 geographical sites how would the 4 MPLS routers connect together (using a switch?)?
OK. I think Im going crazy here. Im studying OSPF and I'm working on the DR/BDR election process. I have a topology where three devices (RIDs 1.1.1.1, 2.2.2.2, and 9.9.9.9) are on the same ethernet segment so they need to elect a DR. 9.9.9.9 is a switch and Im using a SVI for the OSPF interface. Van't get the darn thing to show up in the post but here is the topology.URl After OSPF came up, I noticed that router2 was selected as the DR and that switch1 was selected as the BDR. I thought initially that it was a matter of timing and that perhaps router2 just came up first and the slower SVI interface came up second. Shutdown the interfaces, cleared the OSPF process, and set the OSPF router priority on the VLAN interface to 10.
I have configured my two vdsl link with ppp multilink but i am not getting the desired bandwidth. Here is my configuration is this okay or i need something more in the configuration. My router is 2921 what is the maximum WAN throughput of 2921? [code]
Is it possible to install LMS 4.2 in multiserver mode but with possibility to select installed components/applications? I'm talking about Solaris version. I can't see such an option. It will install all the components on every server which I don't want to. We have LMS 3.2 working in such setup: one server with most major components, other running just DFM and third one with only HUM installed.
I'm trying to find out what platforms support Multilink PPP with Link Fragmentation and Interleaving over a single link, when that single link is PPPoE. In searching the documentation, the best information I can find is that it seems to be supported in one direction on the ASR1000 url...Many platforms appear to support PPPoE and also MLPPP w/LFI, but it's not clear that both features are supported on the same link.
The application is a radio that has an Ethernet interface on its terrestrial link, and acts as an Ethernet bridge. Would like to use Multilink PPPoE with LFI in order to provide LFI in order to run VoIP over lower speed links (e.g 256kb). For what it's worth, the radio also supports RFC 5578 PPPoE Extensions for Credit Flow and Link Metrics. It was fairly easy to find what platforms support RFC 5578. But RFC 5578 would be used to support variation in the capacity of the link. If the link speed is fixed, RFC 5578 is not needed. I was trying to find if the set of platforms supported increase if the need for RFC 5578 is taken off the table.
In particular, I'd be interested in the whether the ASR 9000 series supports MLPPP bundles with LFI when the links are PPPoE.
I have a question that so far I haven't been able to find a suitable answer for. This is focused from an ISP perspective. So suppose I have the following scenario:
I have a BGP transit area. On each edge of the my network I have a e BGP connection to the same client for redundancy. This client has his own ASN, iBGP and prefixes. I'm receiving the same NLRI from the client through both sides. Let's assume he's advertzing the prefix 10.10.0.0/16 through both ends. I'm receiving it with no problems and I'm passing it along to the next providers with whom I also have multiple ingress and egress points.
Something like this: PROVIDER A PROVIDER A | | eBGP eBGP | | CLIENT A (ASN65100) --- eBGP --- MYROUTERA(ASN65200) ----- iBGP --- MYROUTERB(ASN65200) --- eBGP --- CLIENT A(ASN65100) | | eBGP eBGP | | PROVIDER B PROVIDER B
Let's say my client pays for a 10Mb. Both links are configured to 10Mb so that each can handle the load in case the other one fails and both are always active. So my question is:
How can I shaped or police the client's traffic across multiple points of entry on different routers so that it won't go beyond the 10Mb. The same scenario applies on how can I limit traffic coming from the providers A, and B destined to the client's prefix: 10.10.0.0/16.
I don't mean using MED, local-pref, weight. Sure I can funnel all the traffic through one single point, but consider that I'm also trying to move away from basic routing and more into PfR, which mean that I have more granular control of the flows. Perhaps there is a PfR service-policy or something that can work.
For this scenario I'm using 7200 as my routers. If there is a solution that assumes any other model don't hesitate to post it. TLDR; How can I police or shape across multi interfaces on different routers?
enable multicasting over the WAN. I have a 6500 SW connected to router and from router I have 3 MPLS links connected given by different service provider running with EBGP. I have around 30 branches running EBGP with Service Provider, and want to multicast VC to branch location from DC.
How to do that, what are all the things I need to enable in my 6500 Switch as server is connected to this switch.
Before I get into asking questions about the routers, firewall, and static IP though I want to knock out the most base problem. I plugged a computer directly into my cable modem, disabled the windows firewall, tried canyouseeme.org, and couldn't connect to any ports anywhere in the spectrum. I would assume that being plugged directly into the modem that all ports should be wide open. The port I was originally trying to open was 8093. I called my cable provider and the tech told me that I'm not allowed to have port forwarding in a range as high as 8093 without a business account. I asked the tech what range I could use and he said he didn't know. I did some searching on the net and found that on a typical home cable connection I'm allowed ports 1 through 1024, so I tried numbers all over that spectrum on canyouseeme.org and got no response from any of them. Again, this was while plugged directly into my cable modem with an ethernet cable and my windows firewall disabled. From what I know this has to be wrong in some way, as to use the internet at all I have to have ports available. The only possibility I can think of is that maybe canyouseeme.org is flawed in some way. So the first in a long series of questions to come is why am I unable to find any open ports while plugged directly into my cable modem with my windows firewall disabled?
With the risk of sounding like I'm looking for a "personal shopper", I'm looking for your opinions on a new wireless router for a small business. We already have a WatchGuard firewall. We are just looking to provide visitors and staff wireless access. We want visitors to only be able to access the internet, but we want staff to be able to access the corporate network as if they were plugged in via Ethernet. (RADIUS - AD authentication).
Recently upgraded to 1.33NA. I keep getting this message when changing certain settings (such as enabling a guest zone). It's essentially locking me out of changing the system!As far as I know - the DIR-655 DOESN'T have WDS - this was removed a number of firmware revisions ago. I cannot find a setting for this anywhere. There are a few mentions of this on this forum and the web, but nothing concrete as to why it's happening or a valid solution.[url]...
