I need to route a subnet from a 7204 to 2 different gateway's which are not Cisco based. I cannot use HSRP, GLBP or VRRP as the other 2 gateways don't support theses protocols. Yet they do support OSPF, RIP, and BGP.... Take note that this setup is in a ISP scenario. How can I acheive gateway redundancy?
View 4 RepliesWe have two Cisco 5505 firewalls connecting to two ISP's . The two internal LAN's on the firewalls are 192.168.184.0/24 & 192.168.186.0/24. We also have a Cisco C3560x layer3 switch with vlan interfaces 184.3 & 186.3. We have two DGS-3100 Dlink layer 2 switches connecting our users to the Layer 3. Ip routing is enabled for intervlan communication & I can reach the Switch interfaces & firewall gateways from machines on both on the vlans.We have pbr enabled on the 3560 & users only on the .186 network can get to the internet. The switch is running the ipservices license & the sdm template is "desktop routing" .
Users on the .184 cannot access the internet but we can ping the layer3 interface & the firewall gateway. [code]
I have mobile users using air cards that connect to the network with a VPN product called Net Motion. Our firewall is a ASA 5510. Once connected to the Net Motion VPN server the user will get a DHCP address from our network. In the past we could not get the VPN tunnel to complete since our layer 3 switch (3750G IP services) has 3 egress points and the egress point that we needed the VPN traffic to go out of is not the default gateway. To solve this we had the air card carrier set switch our air cards to static IP addresses and using route statements for the public IP addresses and access lists we got it to work.
The problem with this is that every new air card we provision needs a static IP address. My question is would policy based routing work in this scenario? The problem has been that the VPN tunnel was not able to complete the negotitaion phase as the traffic came into the switch and was trying to go out the default gateway. The VPN client wont get an internal IP address until the VPN tunnel is created.
I would like to get away from using static IP addresses.
I have two different networks on same LAN.One net has public 2xx.x.x.x IPs (some on DMZ, they are servers with their own internal firewalling) and goes through a GBeth switch to a Cisco 25xx router for accessing HDSL modem with several HDSL trunks and then Internet. That router is configured to let external IPs access only DMZ IPs, of course.The other net has 192.168.x.x IPs and goes through another GBeth switch to a DLink router to access ADSL. Mainly for download traffic at a low flat cost.I would like to have a way to let the 192.x.x.x machines access the servers on the DMZ of the 2xx.x.x.x net without going outside the physical LAN. The servers host mail services and so sending heavy attached documents needs a hi-speed LAN connection and certainly not the ADSL upload capability. Not to say about servers web contents maintenance.
View 1 Replies View RelatedI can't seem to find out what this means. Every 6 months or so, my 7204 locks up. I can't even get to it via the console port and I must reboot to access it. I noticed this alarm in my logs.( ASSERT CRITICAL PO1/0 Threshold Cross Alarm - B3) I've looked on-line but can't pinpoint it's meaning. Looks like a flapping interface but might be something else.
View 6 Replies View RelatedI have a small network that i want to setup, i have 1 2900 router and i'd like to create subinterfaces for the internal. but more importantly i'd like to have the dsl modems connected to the router with traffic from one subinterface going through one modem and traffic from the other going through the other.
View 1 Replies View Relatedremote location on MPLS circuit terminated on a Cisco router that has Internet connectivity through Central Site router. We are installing a cable modem at the remote location that is to be used as the Primary Internet Connection but still be able to use Internet through MPLS if the cable Internet goes down. We want the failover/fallback to be handled automatically.
We have an ASA5505 for the cable Internet which then feeds into the ISPs modem.
At first I was thinking about getting a module for the remote router so the cable Internet could be terminated on the remote router as well but that introduces a single point of failure. I would also like to firewall both the MPLS and the cable Internet but if I do so on the ASA there is another single point of failure.
One of my newly installed router got reloaded ,showing me below error . The same IOS im using in another router and it works fine without any issue ,but this newly installed router gave me this problem. [code]
cisco 7204VXR (NPE-G1) processor (revision B) with 983040K/65536K bytes of memory.
I have 2x v10000 Websense Security Gateways that are connected to 2x 6500 SUP720. When I turn on cluster management function between Websense appliance, they speak to each other only if they are connected in the same 6500. When they are connected one in every 6500 cluster management does not work. They are connected on the same physical vlan. Do I need multicast to be configured in the 6500 switches?
View 5 Replies View RelatedI have a milestone VMS (video management system) server running on a customers site. The server has two network cards. eth0 has a static IP 10.0.15.250, mask 255.255.255.0, gateway 10.0.15.254 (the gateway is a firewall connected to the internet via an eircom modem in bridged mode) eth1 has a static IP 10.94.238.2, mask 255.255.0.0 gateway all the cameras and related equipment are in the range 10.94.238.1 ~ 20 Customers network users what to view the VMS via an application which needs to run on their PC and connect to the VMS server on 10.94.238.2, The customer has given me a gateway address of 10.94.200.1. However when I use this gateway address in the default gateway of eth1 I loose internet access on the server because the server can not resolve the DNS address. The cusotmers users can see the VMS and the monitoring station can see the VMS via a VPN. However I need internet access otherwise Teamviewer will not work and I can not access the server for configuration and maintenance remotely. Is there some other way I can implant the customers gateway so they have access but I still have internet on the server.
View 2 Replies View RelatedI have two network cards in my computer, one is connected to the ADSL router for a BSNL broadband connection and the other is connected to our compay's MPLS network on which our core software is run , now both networks have different gateways through which they connect , the bsnl ADSL router gets its ip from DHCP ,our MPLS network has its own network ip schema.The problem is I am not able to use both connections simultaneously, if I have to work on our software I have to switch off the ADSL router and if I want to surf the internet then I cannot work on our softwware.
View 3 Replies View RelatedI've got a network with the following address and subnet mask:
xxx.17.0.0
255.255.0.0
The original gateway that we had on the network is at:
xxx.17.0.254
This gateway is a Netgear VPN firewall and it also has a bit of port forwarding going on to a couple of servers on the network.We've now had a new line put in and we have to use different hardware on that line so in order to phase that in, I've set this up as a new gateway at:
xxx.17.1.254
Internally, the clients and servers are quite happy with this and will happily use the new line.Problem arises when users connect via VPN to the OLD gateway (I haven't got VPN set up on the new one yet). Users can still connect to the VPN but can't see any machine that is using the new gateway.How can I get around that? Does the old gateway need a static route?
I have a cisco 7204 vxr that terminates a 300 meg ethernet circuit asn well as an mpls DS-3. CPU increases along with utilization of the ethernet circuit. When the utilization gets to around 150 Mbps on the receive, the cpu is maxed out at 100%. I am wondering if the router can support the amount of traffic coming through it. The majority of the traffic is voip using g729 codec, so packet size is small. We are no where close to peak utilization and cpu is at 39%. Here is what I see currently:
#sh verCisco IOS Software, 7200 Software (C7200-ADVIPSERVICESK9-M), Version 12.4(15)T4, RELEASE SOFTWARE (fc2)Technical Support: [URL] 1986-2008 by Cisco Systems, Inc.Compiled Thu 13-Mar-08 10:40 by prod_rel_team
ROM: System Bootstrap, Version 12.3(4r)T3, RELEASE SOFTWARE (fc1)BOOTLDR: 7200 Software (C7200-KBOOT-M), Version 12.3(15), RELEASE SOFTWARE (fc3)
uptime is 3 years, 1 week, 3 days, 6 hours, 40 minutesSystem returned to ROM by Reload CommandSystem restarted at 08:26:49 UTC Wed May 14 2008System image file is "disk2:c7200-advipservicesk9-mz.124-15.T4.bin"
This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.
[code].....
I have a scenario which i would like to discuss with you people. I have a branch office connected with the Head office using wireless radio bridge(point to point connectivity). Here is the configuration at branch office.Things are working fine until now. The branch office has a DSL internet connection and required to be shared among the users. option 1 (problem)DSL terminate on swtich and all clients have a DSL modem as their default gateway and ISP's DNS. Internet works fine but here comes the problem, now they lost the connectivity with head office.Now my question is i cant have two default gateways then what should i do?
I bought dlink dir615 router and want to configure in such a way that internet terminate on dir 615 and branch office pc's should be able to use the internet as well as get connected with the head office with default gateway configuration.
We have a cisco 7204 VXR and would like to know the module which has two fastethernet port. We tried a PA-2FEISL-TX but it did not work.
View 1 Replies View RelatedToday we got a new cisco 7204 with NPE-G2 , so we wanna to configure to root for the internet so here is my scenerio
1- Public Ip address =155.155.155.20
2 Private Ip Address =192.168.2.0 /24
3- Gateway = 155.155.155.1
4-DNS Server = 194.155.12.133
Interfaces:
1- Gigabite 0/1 - We put this for Public ip address
2- Gigabite 0/2 - and this for Private Ip address
how to route this for the internet . after routed we want our client computers to get internet from Gigabite 0/2 Interface
is 633+ seconds (approximately 10 minutes) load time normal for a Cisco 7204 router? I find that it takes forever for the router to do :Self decompressing the image". I tried the latest IOS and tried different bootloaders but it doesnt seem improve it?
View 2 Replies View RelatedWe have point to point metro ether net link terminating on 7204VXR router.On this point to point link we are configuring GRE over ip sec. Problem is when the traffic exceeding 8mbps we started getting packet drops. from the Cisco documentation it seems the tunnel bandwidth is by default 8mbps and there is parameter like Inherit/receive but those actually not change the tunnel interface bandwidth.If we just give tunnel bandwidth with bandwidth mentioned it allows me to give option of 100mbps but again the tunnel interface bandwidth remains 8mbpos only and probably that 100mbps is useful only for routing decisions.
i am using advance security 12.4.15T12 image. Whether this is a limitation or any other way to go beyond 8mbps for the tunnel interface (7204VXR-NPEG1 processor)
We our currently using site-to-site VPN tunnels to connect our multiple offices using static public IP's via ADSL connections.We wanted to get an additional ADSL connection from a different ISP so that if one connection drops, the other could be used.Are there any hardware devices or tricks we can use to automatically get our networks to failover to use the backup ADSL connection and have our VPN traffic remain up?
View 1 Replies View RelatedI installed m0n0wall in a virtualized environment, i have 10 PCs connected to a router ( 192.168.1.0/24) which connect them to the internet through PPPoE, the problem is that this router does not have a QoS so what i want to do is the following :-
let all the PCs get their IP from the Router and the default gateway will be m0n0wall
the moon wall will have 2 interface (Lan 192.168.1.20) and (Wan 192.168.1.21 and default gateway 192.168.1.1)
now when any PC want to access the internet it should go through m0n0wall and then m0n0wall will forward the connection to the default gateway through the wan interface which is the PPPoE running on the router (192.168.1.1)
I need to setup my LAN card to access 2 gateways.
OS: winXP sp3
IP: 192.168.1.101
One gateway is 192.168.1.254 to the internet.Another gateway is 192.168.1.253 to access (via VPN) the other subnets 192.168.x.x? I can even install a second lan card.
I have a cisco 877w and ive setup two ssids on it each with different vlans (I intend to use the zone based firewall to lock down the guest zone later)
Ive made a quick diagram of my network its a single server with 2 NIC's one for the internal lan and another for the external network (direct connection to the router) The server hosts 3 virtualized servers with the ecternal nic only shared with the tmg 2010 server.
So my problem is that when I connect to the 10.0.1.1 network as 10.0.1.2 I can only ping the internal network however the internal network is incapable of responding (pinging back) giving destination host unreachable. I know I need some kind of routing but im not sure where to apply it on the TMG server with the next hop as 10.0.0.10 or on the router.
The guest wifi is intended to bypass the network firewall and not allow access to the internal network. I've enabled ip routing on the cisco router and attached the config below.
One of our Routers 7204 rebooted unexpectedly. I try to access Output interpreter but is not working. The output from our router is the following:
WAN-ROUTER#sh version
Cisco IOS Software, 7200 Software (C7200-ADVIPSERVICESK9-M), Version 12.4(15)T2, RELEASE SOFTWARE (fc7)
[Code].....
I would like to find out what the status is of the Cisco 7204 VXR and 7206 VXR routers?I understand they are EOLife and EOSale.Are they also EOSupport? we planning to upgrade 3 of them in our environment and management requires feedback around this.We thinking of going the ASR1000 route..
View 15 Replies View RelatedI need to configure BGP on our 7204 and 2811 router. The 7204 is our main router and currently running EIGRP internally. Our remote locations just moved to an MPLS connectivity and they have a 2811 router. I will need to configure BGP for the routing protocol. I have the AS number and the remote AS number. Attached is the the current configuration of the two routers.
View 4 Replies View RelatedWe have a leased line from one office to a DR site which we use to back up our data. We are using Cisco 7204 and and OC3 circuit. The data is sent in blocks (SRDF) and we are sending changes only. However, we are getting requests from compliance to further secure this connection since it is a leased line. I guess I need to know how secure SRDF traffic is and then if required, how to secure it.
Can we create a simple VPN between the two routers without having to use a VPN concentrator or Firewall? If so, what IOS would be required? How much impact will the VPN have on current bandwidth?
We are replacing a DS3 Internet connection with a 100 Mbps fastE connection from a Tier 1 Provider. I currently have a Cisco 7204VXR with 512 Mb DRAM and 128 Mb of Flash and two 10/100 ports that is connected to the DS3. I also have a 3845 with 1 Gb of DRAM and 256 Mb of Flash with two 10/100/1000 ports available.
We are currently running BGP, below is the summary
BGP table version is 88880414, main routing table version 88880414
379041 network entries using 44347797 bytes of memory
379043 path entries using 19710236 bytes of memory(code)
What I am trying to do is I have one switch with say a 10.1.9.1 sub-net I need to have one of the ports to be trucked with two vlans one for DSL and the other for a local connection with the sub-net of 10.1.5.1 both of the sub-nets are configured in the core as 9 and 5 so I have port 0 set up as a trunk and it is set up as ge-0/0/0.0 vlan_5, vlan_192 on the 10.1.9.1 subnet switch. The DSL is working but the local is not pulling a 10.1.5.1 IP and has no connectivity. Everything looks as if it is configured correctly but still the DSl is working but not the Local connection.
View 2 Replies View RelatedI have LinkSys WAG160N V2 with the last firmware 2.00.20 I have very annoying issue, the Gateway always disconnected from time to time .. Some days it work so fine and some days it disconnect 20 times per day and I have every time to go Status >> Gateway and press connect , another weird thing is that sometimes it gaves me speed 3784 Kbps and sometimes 3500 Kbps , sometimes it gaves me the right speed 4700 Kbps i did think maybe it's my ISP problem , but after the upgrade the problem gone for 3 weeks then it back again, and when it back I did make factory reset and reconfigure it again regarding my ISP settings and it did work fine with 3784 Kbps speed and it should be 4700 Kbps.
View 9 Replies View RelatedI'm wanting to use the SRP527W (from Telstra) to route a block of assigned internet addresses (/29) over the WAN internet IP address. Is this possible on the 527W, or does it only do NAT routing?
View 6 Replies View RelatedMy router, a Cisco 7204 with NPE 300, is experiencing output drops and input errors on a fastethernet interface. I have a 100Mbps connection with less than 15Mbps utilization at peak times.
FastEthernet1/0 is up, line protocol is up Hardware is DEC21140, address is 0014.a985.1a1c (bia 0014.a985.1a1c) Internet address is 38.102.66.134/30 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 3/255, rxload 1/255
[Code]....
I was planning to buy 7204 VXR for my site's router for the following requirements:
- support for ATM, Serial, ISDN
- support for 3 10/100/1000 ethernet interface
- support for 2 WAN interface
However, I realized that the 7200 series will not be available for sale after September of this year!! Any "reasonable" replacement for 7204 VXR that meets the above requirements?
I have a 7204VXR Router, with Neflow. The collection for all interfaces is ok, but one interface (Gigabitethernet 1/0), is not showing the egress traffic in the pictures. The configuration has "ip route-cache flow", ip flow egress, and ip flow ingress set. But, is not showing the egress traffic.
View 4 Replies View Related