I have a cisco 7613 router and need to connect a site using Optical fibre (BSNL) on gigabit port,we will use convertor to convert optical signal to electrical .What configuration must be done on router to ensure this point to point fibre connectivity between my router and another router at differnt POp.
View 7 RepliesI setup RA-VPN under local asa 5510 IP pool (192.168.127.0/24) and all was working fine. I got internet and local network access.
Then i have 5 site to site VPN working fine but when im traying to access to those L2L VPNs from the remote acces client im not able to do that. So after that i decided to obtain IP addresses from my DHCP server so i can obtain IPs from my local network (172.17.16.0/16) and then access normally to the VPN site to site. But the surprise was that the VPN cisco client is getting local IP address (172.17.16.222) perfectly but im not able to access even to my local network.
I have the same-security-traffic permit inter-interface same-security-traffic permit intra-interface enable.
I am try to setup my office network to able to connect to one of my customer HQ via site to site VPN. I am using Cisco 1841 router to do the job.
The problem that I am facing now is no able to connect my other PC in office to the remote site.
show crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
202.x.x.x 175.x.x.x QM_IDLE 1001 ACTIVE(code)
I've spent 2 days already trying to get 2 ASA 5505's to connect using an IPSec vpn tunnel. I cannot seem to figure out what im doing wrong, im using 192.168.97.0 and 192.168.100.0 as my internal networks that i'm trying to connect over a directly connected link on the outside interfaces with 50.1.1.1 and 50.1.1.2 as the addresses (all /24). I also tried with and currently without NAT enabled. Here are the configs for both ASA's, the vpn config was done by the ASDM, however i have also tried the command line apporach with no success. I have followed various guides to the letter online, starting from an empty config and from factory default. I have also tried the 8.4 IOS. [code]
View 2 Replies View RelatedI have a problem trying to connect a VPN site to site between a FWASA 5515X - ASA5510. [code] The configuration in the 5510 its the old one that i been using with a firewall 5505.
View 1 Replies View RelatedAfter upgrading a couple of AS5505 to asa8.41 and using ASDM-641 I have been unable to set up a Site to Site using the Wizard.Had enough of a headache doing the upgrades on the CLI. I wait for my PO for Sec+ to clear so I can Add Failover. Ping was enabled and both '05 can ping each other. [Code] .....
View 1 Replies View Relatedwe have a Nam module on a 7613. I have access to the router. but how can i know the how to access the Nam?
View 1 Replies View RelatedWe have built some policers to apply to vlan SVIs on our 7613 so that we can rate limit input and output traffic. We followed the Cisco formula and got this.
policy-map vlan-shape-3meg
class class-default
police cir 3000000 bc 562500 be 1125000 conform-action transmit exceed-action drop violate-action drop
There have been some complaints about this not actually meeting the limit. When I do a show policy-map interface xxx I get this. Based on that it looks like the Be value is being change to match the Bc value.
On a separate note, I noticed that every policer we built with the cisco formula actually ends up with a Tc greater than the max Tc of .125 seconds. It seems odd that a recommended formula would end up creating values outside the maximum allowed limits by the software.
I'm not a QoS expert so if any of this seems like basic stuff it's just because I'm a little slow on QoS.
Vlan2
Service-policy input: temp-remove
class-map: class-default (match-any)
Match: any
police :
[code]....
One other thing...in order to apply policers input and output on an SVI does mls qos vlan-based have to be configured on the trunks tagged with the corresponding Vlan?
I have Cisco 7613 on my edge(MPLS Backbone). CPU utilization is shooting to 100% at frequent intervals. When I tell vendors managing device they tell that it is happening due to one of my server(connected on Fast ethernet port of 100Mbps) generating heavy traffic. My questions are:
1. Can a router of 720Gbps capability be choked due to traffic generated by 100Mbps link?
2. Interrupt CPU process utilization is well below 10% at the said time. BGP router process consumes most of the CPU. Does this means that server in question is generating too many routing updates?
3. Is there any way that I can limit routing updates on a particular link?
4. how to check which link is causing more CPU utilization.
We have a 7613 w/ WS-SUP720-3BXL running 12.2(18)SXF11. We have a 48 port WS-X6748-GE-TX that has one interface that keeps getting output drops for anything over 200Mb/sec.
See the attached file which has more details and show results.
I have been using the Cisco7613 and FlexWAN with PA-8E1-IMA PortAdapter.It has been used for ITP (SIGTRAN) Today, I attemted to enter the Port Adapter 13 1 module with using command that "attach" command.But I couldn't that. and I could see the Error Message below." RTTYC_ ATTACH_ REQ Failed with return code 2 , aborting". This Module (13 1) is working normal. but why cannot enter to the PA ?
View 3 Replies View RelatedWhat would cause an interface to show up/up (looped), but you still can't ping that loop?...It is on a Cisco 7613 with an Enhanced FlexWan (WS-X6582- 2PA), with a Mx Serial PA, 8 ports (73-1580-10) and running IOS ver 12.2(33)SRE2 [code]
View 5 Replies View RelatedI got a problem when I try to create a VLAN in a 7613 router. The screen capature like the following:
router(conf)#vlan 1045
router(conf-vlan)#exit
VLAN(s) are not available in Port Manager
The VLAN is failed to create. The VLAN range which is failed to create is from 1001 - 1060.
We have Router CISCO7613,SSO redundancy configured with two Sup 720-3BXL running 12.2(33)SRC1 image. Even thought I've configured SSO, my standby sup remains in COLD state with the following logs generated.
Mar 20 22:07:32.514 IST: %ISSU-SP-3-PEER_IMAGE_INCOMPATIBLE: Peer image (c7600s72033_sp-ADVENTERPRISEK9-M), version (12.2(33)SRC1) on peer uid (8) is incompatible
Mar 20 22:07:32.514 IST: %ISSU-SP-3-PEER_IMAGE_INCOMPATIBLE: Peer image (c7600s72033_sp-ADVENTERPRISEK9-M), version (12.2(33)SRC1) on peer uid (8) is incompatible
Mar 20 22:08:48.263 IST: %PFREDUN-SP-4-INCOMPATIBLE: Defaulting to RPR mode (Runtime incompatible)
[code]...
These logs says that due to some reasons, the configuration is not being synchronized with active and standby sups and hence the redundancy mode remains in RPR mode and SSO not achieved, and hence COLD state. However, I couldn't find a reason why the configuration is not being synchronized, I've issued the command, redundancy config-sync ignore mismatched-commands, and everything worked fine, SSO achieved and standby sup came to HOT state.Now my query is,
1. Why the configuration was not synchronized and standby SUP got in COLD state??
2. Since I issued the suggested command, at least, some of the mismatched lines in configuration will be ignored, Will that create a problem when my Active sup fails and standby become active?
I am planning to deploye the fwsm with all this complexity, will this type of senario work or not means traffic will move from msfc to the core.. Is this right to create another svi int2 on msfc to move traffic from msfc to core-switch.
G0/1(cisco7613) Vlan10----Vlan10(inside)FWSM-(outside)vlan20---Vlan20(inside)(svi-int1)MSFC(outside)(svi-int2)Vlan30---Vlan 30G0/2(Core-Switch)-----internet--->
I need your opinion regarding moving of IDSM -2 and FWSM Module from 7613 to 6513 chassis.Currently these two modules are in 7613 and we are not using either of them now we have to configure them in 6513 chassis. As you can see from the figure that traffic of all 3 core router i.e 7613 go to 6513 - to proxy ISA 2004 - 6513 - to Internet.
There are also some network attached with 6513 and we want to move both of modules to 6513 so that NetworkA/B/C/D/E which are attached to 6513 can also be configured for FWSM and IDSM -2.
I have a query regarding this migration:Do we need license for these two modules again for 6513 chassis?
is there any specific way to create the SVI Interface on MSFC , actually I need to create the two SVI Int on MSFC to enable routing in between two VLANs on 7613 chassis.
View 2 Replies View RelatedI was wondering about command of Linkset subcommand at ITP7613.I have been using the Cisco7613 chassis for the ITP(SIGTRAN) service.
However, i know that the "tx-queue-depth" command is used for sctp multihoming buffersize that between primary and secondary path at the Link sub-command mode. but i can't adjust the changeover buffersize(retrieval buffer) that between link and another link at the Linkset subcommand mode.
It's above my comprehension.
My guess is that related to "plan-capacity-rcvd" command. it's right?I want to know command that adjust the buffersize of Link changeover.
I have a requirement to create a site to site vpn tunnel on ASA 5510 from a remote site to my HO, ihave already other site-to-site tunnels are up and running on the ASA.The issue is my remote site has got the network address which falls in one of the subnet used in HO(192.168.10.0/24).My requirement is only My remote site need to accees couple of my servers in HO which is in 192.168.200.0/24 subnet.
View 2 Replies View RelatedWe have ordered a pair of Cisco ASA5520 (ASA5520-BUN-K9).Now there is a requirement to terminate site-to-site VPN from remote site. Do we need VPN plus licence for this and how much it cost?
View 1 Replies View RelatedThe scenario where a Site to Site VPN tunnel has been established between Site A and Site B. Lan on Site A can ping Lan on Site B. My problem is a Printer behind Site B needs to be accessed by using the WAN IP address of Site A. Also i could not ping the remote lan or printer from the router.
Below are my configure on the Cisco 877 in site A.
Building configuration...
Current configuration : 5425 bytes
!
! Last configuration change at 15:09:21 PCTime Fri Jun 15 2012 by admin01
!
version 12.4
no service pad
[code]....
cisco products and am struggling getting a VPN going between an ASA 5505 and 5510. I have a VPN created (using the VPN wizward on both) and it shows the VPN is up, but I can't ping the remote site (from either side).
View 11 Replies View RelatedI have ASA 5505, i configured site to site vpn between central site and remote site and is working. Now the problem is we use remote site for troubleshooting purpose, so we need to create a tunnel from remote site to central site. I need to configure such a way that remote site can craete a tunnel to central site, but central site not able to create a tunnel, it just respond to remote site.
View 3 Replies View Relatedi have 2 router asa 5505 with base license i wanna make site to site vpn connection and remote site using vpn client to connect first i have hdsl router with 5 public ip i wanna try it by giving 1 public ip to each router and try the vpn but nothing work?
View 1 Replies View Relatedi want configure VPN between backoffice which have ASA5510 firewall with static IP and site which have cisco router 1861 with dynamic IP.
how i can configure the site to site between them?
1. i have 1 router with 2 computers.. i both checked their IP's using the whatismyip.com .. turned out they have both same IP.2. then i went to Download Angry Birds to download the demo version of angrybirds.3. my first computer could not download it, it says "unable to connect" , but my second computer can download perfectly..4. so now, i bought the angry birds game from rovio, i used my 1st computer to activate the game, guess what, activation cannot connect, so i cannot activate my game in 1st computer, but can activate in my 2nd computer.
View 7 Replies View RelatedRecently my computer has been unable to connect to a certain website. (cevo.com) I've deleted my cookies, tried different browsers, tried changing my MAC address, and still nothing. I've run several virus scans and tried connecting to the website on different computers in my home. It works on those computers. The website just won't load at all on my computer. Also, a program that must connect to the website to function properly won't work on my computer anymore either. I can connect to the website using a proxy site, but I still need to get this fixed.
When I ping cevo.com, this is what I get:
Pinging cevo.com [50.56.5.59] with 32 bytes of data:
Reply from 50.56.5.59: bytes=32 time=50ms TTL=46
Reply from 50.56.5.59: bytes=32 time=49ms TTL=46
[Code]....
Also, I plugged my computer directly into the modem and it still didn't work.
I don't think this is specifically an internet explorer problem but i could not figure out which category it could have gone in. A few months ago random websites started becoming completely inaccessible to my internet connection, no matter how often i would try. The most recent one to have happened allowed me to connect just yesterday, but today i cannot connect to the website from this connection. I was able to connect to the website when i used the computer at a friend's house.
View 19 Replies View RelatedHow can i lose the connection one particular site while i can connect to other internet sites?
View 1 Replies View Relatedwhat we need to as hardeware to connect two distant remote site by VPN
View 1 Replies View RelatedI have an @Remote appliance through Ricoh for our copiers. This appliance connects to their site to transfer meter readings and other information. This appliance can't connect to their site to transmit data. Ricoh is telling me the problem is on our firewill. I have assigned the Ricoh appliance a static IP address in our network. Our firewall is a Cisco ASA 5510. I don't have much expereince with logging on the ASA, so I'm not sure what "teardown dynamic TCP translation from inside" means. Is there something that is preventing this IP from contacting the Ricoh site? [code]
View 3 Replies View Relatedour office has cisco 2600 series router. i want to know on how i can configure it to connect to another router in a different site.
View 9 Replies View RelatedEveryone else sharing the same wifi connection as me has been having normal connection as always. My laptop does not connect to a single site because it always times out. If it does connect to a site, it takes like 10 mins. I got an alienware laptop.
View 3 Replies View Related