We have 15 small branches with Cisco 881w in every office, they use VPN site-to-site to vpn- concentrator on V yatta. I launched cacti monitoring of cisco 881's CPU's Errors, Traffics, Non-uni cast, Uni cast. I see that on 10.00 pm in one brunch when nobody works there, CPU load reaches 50% and traffic rises up to 9mbs.
View 10 RepliesWhen WAN traffic meter is enable on RV180 router maximum throughput drops to 40Mbps from ~120Mbps.Enabling WAN traffic meter is needed to get SNMP data from WAN port.
View 1 Replies View RelatedI am implementing mGRE with DMVPN so multicast traffic can be delivered to employee homes over Internet, everything worked fine except that I can not configure PIM or ICMP static groups on C881W's mGRE tunnel interface or BVI interface(RIPv2 works on mGRE interface however), configuring "ip multicast-routing" did not give me any errors, do I need license to be about to configure PIM/IGMP? I am running C880data-universalk9.mz.124-20.T5.bin" with license level advsecurity.
View 3 Replies View RelatedI've got a Cisco 881W Router and I am trying to set up the wireless Network. I've managed to get the SSIDs up and running, but I can't see to get DHCP addresses going from the router to the access point and Laptops .When i am connecting laptop directly to Router ethernet port i am able browse and seeing DHCP address. [code]
View 7 Replies View RelatedI have an 881W with configuration posted below along with IOS version. The site has a local Exchange server and also a LAN-to-LAN IPSec. Exchange's internal IP is statically NAT'd. Problem is that when that when a static NAT for Exchange is in place, Exchage is not accessible thru tunnel. Scenarios is as below:
Exchange's internal IP: 10.50.80.21Exchange's NAT'd IP: 65.X.X.216IPSec interesting traffic: Local - 10.50.80.0/24, remote - 198.168.189.0/24Static NAT for Exchange in place: Excahgne server can be accessed over Internet. We can RDP in to the
[Code].....
I'm putting together a design for a new office with the following requirements:
10 VPN users.For Ethernet – 24 ports POE 10/100/1000
Probably go with VZ FIOS so EthernetAbout 2000 square feet so 2 WAP's should do it I'm thinking a CISCO881W-GN-A-K9 ISR with a SRW224G4P-K9-NA switch should do the trick. This will give me an integrated AP but I need a second one. Do I need to order an autonomous one or does the 881W do some sort of WLC function?
CISCO881W-GN-E-K9 vs. C881W-GN-E-K9. What's the difference between these routers?
For example, the CISCO881G-K9 has a 3.5G ExpressCard Modem and the C881G has an embedded one with GPS and 3.7G in most versions. The C881G is, for all I know, the newer one. But for the two mentioned above, I can't find any differences at all. The C881 is listed in the Teleworking section of the data sheet. But there is no information whatsoever about any feature or license differences.
configure AAA (Radius server, access list) There are two devices An access point and cisco 881w. It is necessary to set up authentication through a radius server. You can configure detailed how to do this?
View 3 Replies View RelatedI have a Cisco 881W router. It has historically run IOS 12.4 (20.T3) without issue. I recently upgraded the IOS to version 12.4 (24.T5). Once I made that upgrade, my ability to fully throttle my downstream bandwidth became seriously limited and variable going from a steady 6Mbps to an unreliable 2-3Mbps. No other changes were made to my environment. The degredation in performance was so bad that my AppleTV would no longer stream Netflix or YouTube.I downgraded back to the original IOS 12.4 (20.T3) and the downstream bandwidth and variability issues disappeared. As well, my ability to stream movies or videos with my AppleTV on Netflix or YouTube returned without issue.I wonder if upgrading to IOS 12.4.24.T5 enabled some new commands that I'm not catching or there is something else at play that I'm totally missing.
View 10 Replies View RelatedIs the max wireless speed on the cisco 881w 54mbps even though it has 802.11n hardware? What about the 891w ?
View 13 Replies View RelatedThe 801 AP on my 881W reboots every other day or so, randomly, on its own. The router / AP works great otherwise, no other issues. I checked the error log and I see no indications of why it would be doing this.
ap#sh ver
Cisco IOS Software, AP801 Software (AP801-K9W7-M), Version 12.4(25d)JA, RELEASE SOFTWARE (fc1)
[Code]......
How to upgrade the IOS of the Integrated wireless AP in a Cisco 881W using TFTP server (I do have software)Router side is not an issue it is the integrated AP that gives problem?
View 14 Replies View RelatedWe've got vpn-concentrator and 15 offices with 881w and 1941 isr connected vo it via ipsec. Our Asterisk is placed behind this vpn-concentrator in local network, so all traffice goes throung vpn tunnels. Is it possible to make QoS rules using just destination IP address of our Asterisk server?
View 7 Replies View RelatedI have been given a new project at work, to configure a 881W for wireless capebilities. how to get it to work using local database for the users to authenticate against, but our goal is to authenticate against a radius server that we have in place for existing Juniper AP's.
I have looked at some documentation out there and I cant seem to find what Im looking for. What I need to find out is an example of how to setup a radius server so that the wireless user can authenticate against. I have found some docs on google but those go over radius server setups for logons to the router etc.
here is what I got so far
Building configuration...
Current configuration : 2005 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname 881W_AP!logging rate-limit console 9enable secret 5
[Code].....
I have a Cisco 881W configured for wireless (just a PSK, nothing special). I can get out to the Internet OK and browse to everywhere except my own websites.
It runs on a connection that does not connect directly to my network, but our website is available to the world externally.
Now, from the router a traceroute and ping work fine to our website but from the wireless connection I can get to everywhere else on the web but our website. A traceroute just stars out. I'm using 8.8.8.8 as a DNS server and nslookup resolves the DNS.
I can't set a DNS server or domain server on the ap on the 881W so are there any commands I can use to see what's going on?
I'm in the process of setting up a working VPN/Firewall setup on an 881W ISR. I have the firewall, NAT, and VPN working, and I'm able to connect remotely to my router. The problem I am having is that I none of my VPN cllients can connect to the internet. I suspect that my firewall rules may have something to do with this. Let me break-down what I have, and what I want to achieve:
1. My router is setup with VLAN1 (172.16.1.0/24) as the inside zone (in-zone), while my outside zone (out-zone) is FastEthernet4 (DHCP WAN Interface). I also have a guest zone (guest-zone) VLAN12 (192.168.12.0/24) used for my guest SSID wireless, which is NATed to the outside zone.
2. I have my EasyVPN setup using a Virtual Template Interface that terminates at the WAN interface FastEthernet4 (something tells me this should be changed). Should I terminate at VLAN1, or an interface or loopback on VLAN1?
3. I ultimately want the VPN users to be able to conenct to the local resources on VLAN1 only, while being able to get out to the internet. [code]
is it possible to do a site to site with a Cisco ISR 881W --> to a Cisco 3060 concentrator head?
View 1 Replies View Relatedis it possible to setup a Cisco ISR 881W so it connects to a Cisco ASA 5500 series head via network extension mode? We did this in the past with our PIX connecting to 3000 series concentrator.
View 1 Replies View RelatedI wanted to load the factory defaults for my 881W so I could get a clean start. Following this Cisco article: [URL]. I used the following commands while tel netted in via an ether net cable to one of the ether net ports: router#configure terminal router(config)#config-register 0x2102router(config)#end router#reload System configuration has been modified. Save? [yes/no]: n Proceed with reload? [confirm] .
Once I hit enter to proceed with the reload, the router power cycled. From that point forward, I never got a link light or connection via my ether net cable to the router on any of the ether net ports (0,1,2,3). I can get a link light on WAN FE4, but no DHCP ip address to telnet in. I do not have a Cisco USB console cable, which is why I've been trying this via my ether net cable. Hopefully, I didn't ***** up the router.
My employer provides me a Cisco 881W. I don't use the wireless features: my computer is cabled via Ethernet. I cannot administer the device, so I cannot disable wireless. I want to remove the 3 antennae and replace them with a dummy load or something else that will not radiate much.
View 1 Replies View RelatedJust recently got a new 881W router. i have downloaded the 2.4 software upgrade. I go into the Office extend AP login and i get just a enter button. when i click on the enter button the AP page does not come up.
View 7 Replies View Related1 router 881w with a site-to-site VPN connected to a switch and a wireless which allows internal users to access the VPN via wireless (this is like a backup, if the switch fails, then they can use the wireless). Everything's working fine so far. Now I want to configure a second WLAN for guest but I'm not really sure if this configuration will work:
ROUTER:
ip dhcp excluded-address 192.168.100.1 192.168.100.200
!
ip dhcp pool GuestNetwork
network 192.168.100.0 255.255.255.0
default-router 192.168.100.1
dns-server 8.8.8.8
[code]....
If it's not clear I want that everyone that is connected to the guest WIFI receives an IP address from the range I wrote before and then goes directly to the internet.
We've had a Cisco 881W set up in one of our remote offices for a while and the wireless has been fine. Yesterday I got a call saying that the wireless was no longer working.
I went over and it's true, the SSID is no longer broadcasting. I reloaded the router but it's still the same. I tried to get access to the embedded ap and I get this
RTR#service-module wlan-ap 0 session
% telnet connections not permitted from this terminal
RTR#
Now I've not changed anything on the configuration since it went in and it was working before. Has the embedded ap died? The embedded ap is still showing as a component in show hardware.
I recently purchased a new Cisco 881w router (last Friday).I have configured the 'wired' part of the router with little trouble, but the wireless side is proving a little challenging.I have read a number of posts complaining about the firmware version installed on my device being very buggy.The version of the firmware on the wired part is: Version 15.0(1)M8, however, the firmware on the wireless side seems to be: Version 12.4(21a)JA1 - the version reported as buggy. The former has a version date of 2012, with the latter being 2009.I have tried to download a newer version, but the site is asking me to provide a support contract.I wouldn't mind buying a support contract if the thing worked in the first place and I was trying to add some feature after it had been working for a while.
View 1 Replies View RelatedPlatform: 881WIOS: C880-DATA-UNIVERSALK9-M 15.0(1)M3License:
I have tried both advsecurity and advipservices
Problem: Configuring an auth-proxy redirect on seccessful authentication,Cisco's documentation states that when you are configuring auth-proxy, you may specify a url in which the clients will be redirected to when successfully authenticated.
The command is:,ip admission proxy http success redirect <url-string>,However, the command does not seem to exist on many of the latter IOS versions. I am also unable to find any documentation with alternate methods of sending a redirection to the client after a successful authentication. Is this command depricated? Is there a more efficient method of redirecting?
We had setup a wired/wireless LAN using Cisco 881W router for one of our client. Wired lan works OK but we have issues with wireless. Users on wireless LAN can connect to the wireless network, but cannot browse the Internet. The wifi network does not give out an ip address to the client so client cannot get to the default gateway and Internet. Not sure what part of config does not work.
##### sh runn #####
881WiFi#sh run
Building configuration...
[Code].....
I have a Cisco 881W and I would like to basically some how bridge the Cisco router to my netgear router. This is what I'm trying to achieve:
Cable Modem ----> Netgear Router ~~~~~ via wifi ~~~~> Cisco 881W ------> FastEthernet Ports
I've tried setting the Cisco 881W with station-role non-root with the SSID of my netgear router, but I get the error %DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: No Response whenever I try to bridge it.
Is bridging the Cisco router via wifi to the Netgear Router something that is not possible or is it an error on my part?
Platform: 881W
IOS: C880-DATA-UNIVERSALK9-M 15.0(1)M3
License: I have tried both advsecurity and advipservices
Problem: Configuring an auth-proxy redirect on seccessful authentication
Cisco's documentation states that when you are configuring auth-proxy, you may specify a url in which the clients will be redirected to when successfully authenticated. The command is: ip admission proxy http success redirect <url-string>
However, the command does not seem to exist on many of the latter IOS versions. I am also unable to find any documentation with alternate methods of sending a redirection to the client after a successful authentication. Is this command depricated? Is there a more efficient method of redirecting?
Documentation I am using:
URL
I need to update my Cisco 881W config to allow port forwarding FROM the Internet TO the following inside device as follows:
IP Address: 192.168.1.254
Protocol: TCP/UDP
Port: 5001
This device is a Slingbox Pro-HD and I want to be able to view it from the Internet.
Attached is a copy of my 881W config. I am horrible at properly configuring my zone based firewall (ZBFW) config
I really need understanding some of the logic behind the default ZBFW settings on my Cisco 881W courtesy of Cisco Configuration Professional. Here are my two questions:
1.) What is the purpose and logic behind consolidating the first class-map (ccp-cls-insp-traffic) in to the second Class-Map (ccp-insp-traffic) as follows?
Code ....
2.) What is the purpose and logic of Policy-Map ccp-inspect is trying to drop traffic from ccp-invalid-src, which is filtering based on ACL 100:
policy-map type inspect ccp-inspectclass type inspect ccp-invalid-src drop logclass type inspect ccp-insp-traffic inspectclass type inspect ccp-protocol-httpclass class-default drop.
Code ....
I'm setting up a couple 881W cisco routers to use Unified wireless and am running into a bit of a brick wall.I've read through the "Upgrading to Unified Cisco Software" section of the following article:[URL]The problem is, I can't run the "service-module wlan-ap0 bootimage unified" command. The keyword "bootimage" does not exist. The router is licensed for advipservices and I'm running version 15.0(1)M4 on the router. AP is currently running version 12.4(21a)JA1. why the bootimage command doesn't appear? Will I need to downgrade the router IOS to 12.4?Additionally I'm having trouble finding an answer to the following:Is there a way to set up the embedded AP on the same network as the Data VLAN on the router, or do I need to create a separate IP network for the embedded AP? I've tried using 'ip unnumbered vlan10' (vlan10 is the data vlan) on the wlan-ap0 interface but then when I try opening a session to the AP it doesn't connect.
bcp4n51001#service-module wlan-ap0 session
Trying 10.199.62.1, 2002 ...
% Connection timed out; remote host not responding
This is my Vlan10 setup for one of the routers:
interface Vlan10
ip address 10.199.62.1 255.255.255.0
ip helper-address 10.151.103.254
ip helper-address 10.150.1.254
ip pim sparse-mode
I have an integrated 881W with a built in 801 access point. I'm interested in increasing the range of my AP. I'm interested in considering any configuration changes while still maintaining support for N. I've included a copy of my running config.As well, I've heard of high gain antennas. I'm using the default antennas that came with the 881W. If there are better antennas that I can buy to increase my range, I'm interested in considering that as well.
View 10 Replies View RelatedI was trying to upgrade the IOS image of the AP and I did a wrong manip.
I downloaded the IOS image (ap801-rcvk9w8-tar.124-10b.JA3.tar) from my TFTP server to the flash of the AP. Everything went find so far. But than I did an archive archive download-sw /overwrite ap801-rcvk9w8-tar.124-10b.JA3.tar and my AP reboot in LWAPP mode.
I should have done: archive download-sw /overwrite tftp://10.0.0.1/ ap801-rcvk9w8-tar.124-10b.JA3.tar instead!
Now I don't how to go back to autonomous mode. archive commando is not available anymore in LWAPP mode.