Cisco WAN :: 877 / 1900 Router - DMVPN Cannot Find Reports On Web Of DNS Caching
Jan 8, 2013
My customer is looking at using routers in DMVPN remote locations as DNS servers. He would like to be able to estimate how much memory the DNS cache will consume before going into production. I know you can get cache information when it's running, but he wants to plan ahead.I couldn't find any reports in Cisco or on the web of DNS caching causing memory issues, so I don't think he has much to worry about, but any rule of thumb as to how much memory each cache entry consumes would be useful. Or is there a protection mechanism to limit cache memory size in IOS ? The routers will be 877s and/or 1900-series.
View 0 Replies
ADVERTISEMENT
May 17, 2012
I need to find an iOS version that supports BGP, Dot1q, and MPLS for either a 1800 series or 1900 series not sure the best place to find this sort of info out.
View 1 Replies
View Related
Oct 31, 2011
we have a 4510r-e running 12.2(50)SG1 w/ various rj45 line cards and a 24 port glc card.at any given time, i see 10's of ports in 10/full.i go to the station, and find the station in 100/full or 1000/full.
i go to the switch w/ my fluke, connect it directly to the switch w/o any intermediate infrastructure except a 50cm cat6 patch cable.the fluke reports 1000/full, but THE SWITCH PORT REPORTS STILL 10/FULL.all ports are config'd 'speed auto' and 'duplex auto'.
the switch seems to be erroneously reporting 10/full.there are no errors logged on any of the ports and there is successful communications even when the station and switch port report different speeds.even though there are no errors logged nor reported by 'show int [port]' nor 'sho int count error' certain killer applications crash on some stations. (the applications are GHOST (which dumps disk images from a server to multiple stations) and NETOP (which i sused in a classroom to transmit an instructors screen to a room full of stations) both of which broadcast and/or multicast.all nodes involved in the above 2 applics are on the same vlan and same phyiscal subnet.
the ports which report 10/full vary and occur even when the above applics are not in use.the only way i found to clear this 10/full report is by either a hardware reset of the entire module or by unplugging the cable, the execute on the port shutdown, speed auto, no shutdown, reconnect cable.then it's just a matter of time until it pops back to 10/full in a few minutes,hours or days.
how to address the killer applic problems besides restructuring the whole net by defining separate vlan for each lab of 20 or so stations?
View 7 Replies
View Related
May 8, 2013
I have a client whom uses a DSL 10 MG circuit as their backup circuit for Internet Connectivity in case of a failure. The circuit uses a DSL modem that is unreliable. I was recommending yesterday tot he client that perhaps we could place a Cisco router in place of the residential grade DSL modem /router currently in place.I wanted to place a 1900 ISR G2 in there, which would allow me to swap the DSL module out whenever I can talk the company into a Metro E connection. At that point I could swap the DSL module out and put an Ethernet module in to receive the Metro E. I was not able to find a solution last night using the Dynamic Configuration Tool. Seems DSL has been phased out.Is there any recommendation that could be made to accommodate this clients request for a Cisco router that will handle DSL?
View 7 Replies
View Related
Feb 8, 2013
We are using Cisco 1941 Router as CPE where we wanted to trap CPU, Memory & ISYSTEM MIB. The same we are achiveing using SNMPV2 but when we tried using SNMPV3, there is no response for these MIBs.
We tried to configure SNMPV3 using below Link but still there was issue. There was response fr [URL]
Wanetd to know SNMPV3 MIB are supported for Cisco 1941 Router IOS Code universalk 15.2(3)T1 & Data License. When we tried using Cisco IOS MIB Locator, we are not able to see any MIB for SNMPV3. whats is that mean. Does this Platform + IOS Support SNMPV3 or not.
Below is the Snapshot from Cisco IOS MIB Locator for said image.
[Code]......
View 3 Replies
View Related
Oct 21, 2011
how to configure caching server .
View 3 Replies
View Related
Oct 17, 2011
if I have made a simple mistake with my config. It has authenticated ok and been assinged an Internet IP address from the ISP but the clients can not connect ping any internet address nor can the router.
hostname
!boot-start-markerboot-end-marker!!enable secret 5 $1$WGr1$khNrjiwYANhUsIaKEBDsL0enable password 7 121A0C041104!no aaa
[Code].....
View 6 Replies
View Related
Jul 8, 2012
We have Cisco 1900 Series Integrated Services Routers (has a wired router and a wireless router) and since this morning we can not send emails.I inquired with both the ISP and the hosting provider and all settings are correct.I can receive emails from outside the router, but can't send any emails out.If I try to telnet mail902.opentransfer.com 25 it doesn't connect.Port 25 is the port we were using all the time and was working through the router.I connected my laptop directly to the modem and was able to send emails using port 25, also was able to telnet to outgoing mail server. I didn't change anything in the router.is there a way to "enable" port 25 or "enable" mail.homeserviceclub.com (smtp server) or mail902.opentransfer.com (hosting mail server) if this would solve the problem?I don't understand why is this happening as I never had to enable or disable any email ports or mail server addresses.
View 3 Replies
View Related
Dec 9, 2012
i have one airtel isp connection was connected to beetel adsl modem and this modem is connected to d-link switch to accessing internet for my lan. and one netgear wireless router is aslo connected to this d-link switch. my need is i has one cisco 1900 router, i want to get internet access from adsl modem or netgear router to my cisco router.
View 1 Replies
View Related
Nov 24, 2011
There use to be Cisco 851 routers, but lately these routers are replaced with Cisco 861-K9 routers, and these 861 routers doesn't support DMVPN, instead 851 use to be.
Is there any license file we can upload in 861 router for DMVPN capability, if yes may i know the SKU # for that. We have some customers having 6-7 locations and they are planning to have 2 more locations, we implement already DMVPN in there network, if we go with the 87X or 88X router there price is almost double the price of 861.
View 1 Replies
View Related
Jul 31, 2012
i just want to administor cisco ASA5520 and cisco router mpls 1900 can some tell me as admin what to check as u get into office /reguraly in cisco asa 5520 and vpn mpls router for administrator ,right now its working as configured by supplier for remote sites to connect HQ and access several server,My interest to know what are the basic day to day checkup on cisco asa5520 working as ips and cisco asa 5520 working as content filtering and cisco vpn mpls
View 2 Replies
View Related
Apr 7, 2013
I have an issue that started showing up since I bought a new computer. The old computer ran XP, the new one runs Windows 7. Almost every time I start the computer I get an error message telling me Windows has detected an IP conflict. Sometimes when I click okay I get the message a second timeAbout half the time, I have no internet connection when I start up and have to restart my router, which fixes the problem (after restarting the modem, I do not need to do anything like renew with ipconfig; it just starts working). I do this so often I attached it to a power switch to make it easier than unplugging.My setup is this. My PC is connected to a router connected to my cable modem. The router is also connected to a wireless hub. This hub is used by only one device, my Wii U. I can get the error message even if my Wii U is turned off.
View 3 Replies
View Related
Oct 30, 2011
Is there a router (1900-3900 series router) that will support a 100FX fiber connection. We use to use 2800-3800 and 2600-3700 series routers with FX fiber interface now these routers are no longer available and our need for 100Mbps FX is still a requirement.
View 3 Replies
View Related
Oct 15, 2012
I've got a problem with DHCP running on a cisco 1900 series router, 1921 to be precise. The Data VLAN works perfectly, i configured a ip helper address and its working. Problem tough is VLAN 20. This is the voice vlan. As u can see in the config below, this has been configured using VRRP and VRF for failover purposes. I did more of these configurations, and they all worked fine, just not with this particular router!
As u will notice i deleted all the not needed to know information or i X'ed it!
Jan-Aart
version 15.1
service timestamps debug datetime msec
[Code]......
View 3 Replies
View Related
Oct 3, 2012
I'm a bit new to Cisco and i find this AAA a bit confusing..I've turend on AAA by:aaa new-model
Can I use this "default" list for WebVPN ? And what would be a different if i create new "sslvpn" list..Also when I'll be creating user for VPN remote access.. that user will also exist in local database and have access to router via SSH?Because the research I've done it doesn't seem you can group users in different "aaa groups" e.g. user admin belongs under "admin" aaa group which can do ssh to router, users for VPN can only do remote VPN access and not SSH and login into router.i saw ASA has some attribute for users called remote-user
•admin, in which users are allowed access to the configuration mode. This option also allows a user to connect via remote access.
•nas-prompt, in which users are allowed access to the EXEC mode.
•remote-access, in which users are allowed access to the network.
But i can't find this option in IOS on my 1900 Series ISR router.
View 1 Replies
View Related
Jul 11, 2012
Have been battling a router connection to new ATT t1 connection. Router was configured and sent from sister company to this new location. We have had ATT tech test circuit and it tests good, had cat5 cable tested from ATT to router, it tests good. I continue to get serial up/ line protocol down status though and cant communicate to it from wan.
View 4 Replies
View Related
May 19, 2013
Im trying to make a ACE+caching setup work. Ace is running A5(1.2)Content types considered static (like images, stylesheets and javascripts) should be fetched from caches instead of servers.Content from the caches that can be compressed should be compressed by the ACE (stylesheets and javascripts).I am classifying traffic into * static, not compressable (content should be fetched from caches but is already compressed - this class will hold .jpg, .gif, .png, .ico and others - but for this experiment the class is defined with only (a never to be hit) content type .xico* static, compressable (content should be fetched from caches but can be compressed by the ACE - this class will hold .css and .js but for this experiment is defined only with (never to be hit) content types .xjs and .xcssother For statistics purpose I have included a catch all class for everything else (which shold be send to servers) - class-default is configured but will not be hit in this example because of the catch-all class I configured.Since both "STATIC" classes include only content types that has been renamed to content types not used in the real world, I will not expect any hits on those and since WWW.SITENAME.COM:80_STATIC_COMPRESSABLE is the only class configured for compression I expect that nothing will be compressed since there wil be no hits on this class.
This is how it looks in the configuration:
class-map type http loadbalance match-any WWW.SITENAME.COM:80_STATIC_NOT_COMPRESSABLE 10 match http url .*.xico
class-map type http loadbalance match-any WWW.SITENAME.COM:80_STATIC_COMPRESSABLE 10 match http url .*.xjs 20 match http url .*.xcss
class-map type http loadbalance match-any WWW.SITENAME.COM:80_DEFAULT 10 match http url .*
[code]....
Questions are: Why do I see things being compressed when there is only being accounted hits in a compression:off class ?Why does enabling compression in one class (never being hit) cause hits in other clases to be compressed ?
View 1 Replies
View Related
Mar 28, 2013
How can I install cache server for caching downloaded files ?I try use Squid for it.but it's not working properly.Squid can caching downloaded files when download the file without Download Managers.(Like IDM)When I use a Download Manager , Squid can't cache the downloaded file. ( Max connections number in IDM = 16) How can I cache downloaded file , when download file with IDM and multi connection mode (max connections number = 16 or 8 )
View 1 Replies
View Related
Mar 28, 2013
How can I install cache server for caching downloaded files ?
I try use Squid for it.but it's not working properly.Squid can caching downloaded files when download the file without Download Managers.(Like IDM)When I use a Download Manager , Squid can't cache the downloaded file. ( Max connections number in IDM = 16) How can I cache downloaded file , when download file with IDM and multi connection mode (max connections number = 16 or 8)
View 1 Replies
View Related
Jun 27, 2011
I am trying to spec out some routers for a small DMVPN network.I was thinking 2801's for my hub routers.will these run DMVPN out of the box or do they need additional hardware modules?according to the below linkyou need a "AIM-VPN/SSL-2" module in order for it to work, but then according to"The Cisco 2800 Series supports IPSec Digital Encryption Standard (DES), Triple DES (3DES), Advanced Encryption Standard (AES) 128, AES 192, and AES 256 cryptology without consuming an AIM slot."
View 1 Replies
View Related
Sep 10, 2012
What router would you choose to setup 1500 dmvpn tunnels (mGRE/ipsec)? so this router will be my hub and the hub will have 1500 tunnels.this router with this many tunnels will have to be able to provide excellent service to all spokes/tunnels.the spokes will mainly use the tunnels for business, transfering small files and some email I would say they may transfer 500megabyte of data per day but that's the absolute maximum.
View 4 Replies
View Related
Apr 15, 2013
Trying to setup a DMVPN on out existing equipment that is currently running all point to point vpn connections. basicly its not working. my best guess is something with the config is interfering but i'm not sure the remote router (881) is always comming back with MM_NO_STATE and the main router(2901) is either MM_NO_STATE or MM_SETUP.
I added the config for the 881, 2901 and a debug crypto isakmp and debug crypto ipsec from both routers. I have verified the Keys are correct and it is not blocking port 500. if i issue a sh crypto isakmp policy they are the same on both routers. if you need me to post anything else i will, one note i removed the configs that were part of the point to point tunnls on the 2901 router.
View 3 Replies
View Related
Jun 13, 2013
The wlc config guide of Release 7.4 states that sticky key caching (usefull with apple devices) is supported at AP in local mode. [URL]I am testing the new WLC 8500 with 7.4.100.60.
AP mode = FlexConnect
The wlan i activated skc is centrally switched.I debugged the iPhone (4S) roaming.I think skc works at centrally switched vlan on flexconnect APs.
*apfMsConnTask_1: Jun 14 14:15:17.069: 30:39:26:2c:d3:ee Reassociation received from mobile on BSSID 00:16:9c:ba:a9:b6
*apfMsConnTask_1: Jun 14 14:15:17.069: 30:39:26:2c:d3:ee Global 200 Clients are allowed to AP radio
*apfMsConnTask_1: Jun 14 14:15:17.069: 30:39:26:2c:d3:ee Max Client Trap Threshold: 0 cur: 23
*apfMsConnTask_1: Jun 14 14:15:17.069: 30:39:26:2c:d3:ee Rf profile 600 Clients are allowed to AP wlan
[code]....
View 4 Replies
View Related
May 17, 2012
the following information before:
Switch: WS-C3750X-48P (Stack with 2 Members)
IOS: 12.2(58)SE2
Lic: IPBASEK9
uptime: rebooted this night
[code]....
Since i added another Member to the Stack, i'm facing the following problem:When i login with my tacacs user account, i will not be asked for the password.The same thing is for the tacacs account of my colleague, after entering the username he is logged in.It seems for me, that the passwords are cached only for this Switch.
View 3 Replies
View Related
Jun 21, 2012
I configured dmvpn at cisco router 2900. one hub router and 3 spokes. all of them are working normally but tomorrow i see one error at at one spoke router.
error:
Maximum Tx Bandwidth limit of 85000 Kbps reached for Crypto functionality with securityk9 technology package license
View 1 Replies
View Related
Nov 15, 2011
I configured a 2811 series router for dmvpn. My two tunnels are up but one of the tunnel is flapping with this message.
View 4 Replies
View Related
Jan 20, 2012
I have setup DMVPN and EAZYVPN on one router. Tunnel interface on Spoke one and Spoke two are up/up and show crypto ISakmp sa shows both tunnels are in idle. However, tunnel to Spoke one(10.10.1.1) keep bouncing on and off(see below). Every 30 sec or so, the tunnel gone back to IKE phase while tunnel for spoke two(5.5.5.1) still leave active. THe configuration on the HUB side is the same for both spoke!! show crypto ipsec sec shows both side has the same life time(IOS default). Could that be an IOS debug on the spoke one?
Hub :
Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 15.1(3)T2, RELEASE SOFTWARE (fc1)
HUB#sh crypto ipsec security-association
Security association lifetime: 4608000 kilobytes/3600 seconds
Spoke one:
Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version 12.4(8), RELEASE SOFTWARE (fc1)
[code]....
View 1 Replies
View Related
Jan 1, 2013
i have a cisco 1900 series router from the isp and we connect it the our router the rv042 small biz, and we have here a cisco catalyst 2950 switch with just default configuration connected to the hosts.
my problem is from time to time that the connection is lost there is no connection with the router and the only solution is to turn off and on the cisco 1900 router and the connection will be back.
do we need to configure the routers and switches? what do you need to configure?
View 2 Replies
View Related
May 15, 2013
We are facing network heavy and slow performance at one of our remote site, we are using Cisco2800 series router with same IOS on either of the sites.Our WAN network is running on BGP with EIGRP configured and tunnels were configured on either of the sites. As part of the testing I have removed the tunnel to see the performance was ok from Head office to remote branch and the WAN network is getting heavy and slow down when we put the tunnel back in hub and spoke.
quick info
Cisco 2800 Series router
IOS: (C2800NM-ADVIPSERVICESK9-M), Version 12.4(15)T1, RELEASE SOFTWARE
View 1 Replies
View Related
May 12, 2010
As the subject says, I've hooked up a Samsung BD player to a BEFSR41 router. The router has the current firmware version. When I run the connection test for the player, the local connection is good but the Internet connection fails and the message is " The HTTP port is disabled."
I've searched high and low for a solution to no avail. I did searches on the forum and couldn't find anything. As a test, I connected the BD player directly to the DSL modem and the Internet connection worked perfectly so it appears that the blockage is within the router.
I've serched through the router setup and have changed most settings to try and find something that would work. Nothing worked so I have returned my setup to its original state.
View 7 Replies
View Related
Dec 21, 2011
I have a d-link dsl modem that reports it's getting the full 6 meg download speed from AT&T. I put the dsl modem in bridge mode so the E4200 will do the logon to AT&T with my credentials. If i do a speed check using CNET internet speed test, from both a desktop (wired 1gb card) and any laptop in the house (all draft n 2.4 or 5.0), it ranges anywhere from 3 meg to 4.3 meg. I have 6 cat-e ethernet cords everywhere. I do have 2 switches but have tried to unplug those to see if any difference
View 1 Replies
View Related
Aug 8, 2012
the following information before:
Switch: WS-C3750X-48P (Stack with 2 Members)
IOS: 12.2(58)SE2
Lic: IPBASEK9
[Code]....
Since i added another Member to the Stack, i'm facing the following problem: When i login with my tacacs user account, i will not be asked for the password. The same thing is for the tacacs account of my colleague, after entering the username he is logged in. It seems for me, that the passwords are cached only for this Switch.
View 3 Replies
View Related
Oct 24, 2011
We are running WCS 7.0.1 and ACS 4.2 using TACACS for our techs to login to WCS (to manage access points). However, when the tech trys to run reports, they get an error:
Permissions Denied
The user is setup in Active Directory and not in WCS. I saw something about adding the user to a group in WCS but again the user is setup in AD. Is there something we need to do in ACS? Not sure what do do.
View 1 Replies
View Related
