Below is the config has done on my 881g but the dual NAT failover is not working.I have a easy vpn over NAT (easy vpn firewall: 10.10.10.2 behind the router).
1. After completed the config, I shut down the FastEthernet4, cleared the nat translations, found that nat translations are happening on to Cellular0 with error ( Incomplete ESP translations: 0 esp_conn=0x85A91FF0, hanging off nat entry 0x85A7D1D0)But still the easy vpn is not up as I am not able to ping the remote devices.
2. If I reboot the router then the nat translations are happening with no above error and easy vpn is up and I am able to ping the remote servers. Below is the config, what needs to be done to achieve the NAT failover and easy VPN up.
interface FastEthernet4 bandwidth 2048 ip address 206.206.206.2 255.255.255.240 ip flow ingress ip nat outside ip virtual-reassembly duplex auto speed auto interface Cellular0 ip address negotiated ip nat outside ip virtual-reassembly encapsulation ppp dialer in-band dialer string gsm dialer-group 1 async mode interactive ppp chap hostname. [code]
We deploy 881G routers at our store locations and are planning to upgrade the IOS to 15.2.2. One concern we have is if the router fails to boot to the new image. Is there a way to configure a second boot image as a failover in case the primary boot image does not load? Our current DR plan is to have a laptop on site that we can connect to remotely and setup a console session to manually change the boot file. This can be cumbersome and time consuming, so I'm wondering if the 881 has the ability to have another file loaded if the boot fails.
Can Cisco 881G cellular interface (Modem Firmware Version = K2_0_7_19AP C:/WS/FW) work with r-uim cards? I can't find correct answer in documentation .
What I currently have is a Cisco 891W Router as well as two ISP's (both with dynamic IP's) in. I'm currently just running one of my modems into the 891 through the FE8 port and then if for some reason I have an internet failure switching the ISP modems. What I'm wondering is if there is a fairly simple way to configure (and attach) both modems to this router and then set it up to handle this failover automatically?
In my network we have 2 ISPs connections 2mbps from different service providers are terminated in two different routers (Cisco 3845).Now i want to achive if one router fails(ISP down) next router has to up and if both the links is up i need to achive load balance for both the routers(ISPS).i need 100% uptime.
How can I configure the routers, any examples to achieve the HW failover.
I'm trying to see if I can use both ethernet ports on a 2811 to run hsrp for non-stacked dual switch fail over. Then link the the NM-32A ports to L0, so the remote access server trying to use them can use the l0 ip and failover much faster (it's programming is limited). This is on IOS 12.4(25)f, though we are moving to 15 soon.
We had an interesting situation after an electrical storm moved through where a few of our dual WAN clients didn't have any Internet connectivity. Generally speaking, they are on a wireless broadband and something like DSL/cable/T1. One customer in particular has a cisco 1941 router setup for dual WAN which tested fine during install (pull either connection, external IP changes dynamically and no difference is noticed by user). Well, this storm knocked the wireless broadband out enough that it wasn't usable, but would respond to pings randomly. Because the wireless is the fastest of the two connections it has a higher priority but because it was down but still responded to some pings, the traffic didn't go through the DSL that didn't go down. how to make the dual WAN more reliable in these partial-down situations? I thought about playing with the network service detection (we have a customer on an RV042 who experienced the same problem) but am not real sure what I could change that would make the connection more reliable, especially on the 1941 router.
I am having a hard time getting tunnel fail over working. My setup is illustrated below:
I derive my default route on the border routers. The 6513 peers with the 7206's using BGP to get the default route from each ISP into the core. On the core I use BGP weighting to get my primary default to point to ISP1. So far so good. When I look at my core I see to defaults with ISP1 preferred.
Each ASA has an IP Sec tunnel to the head end site configured (Not shown). The head end site has a crypto map entry with ISP1 and ISP2 defined (in that order) using the "set peer" command.
Fail over works great if an ISP drops the connection or my 7206 or ASA fails, but... While testing fail over I had an issue where both tunnels would be active and there were issues with traffic between sites. I could not determine the root cause. I can only guess that some traffic was going out one tunnel and when trying to come back across the other tunnel was dropped from the firewall because there was no connection built for it. After reading I found that in order to use multiple peers in the "set peer" statement, I needed to configure my head end as "originate-only". I have not done this yet as I have concerns. If the head end site is "originate-only" and the tunnel, for whatever reason drops, I cannot wait for interesting traffic at the head end site bound for this site to bring up the tunnel as most of the traffic originates at this site.
I have been reading about IKE keep alives and DPD but that doesn't sound like it will re-initiate the tunnel. Is this correct? If so I'm looking for a way to make this work.
I have a 1921 router with two wan interface configured, one is primary and the other is standby or backup in case the primary goes down, I was able to configure links to failover from primary to backup once there primary is down, but how do I configure to make sure when primary is up it failbak to to it. [code]
I am putting together a solution for a client. The client has an MPLS circuit and internet as a backup circuit. I understand that we can do WAN failover using ASA5510 appliance.Now, if i am adding dual ASA5510 active/standby mode, How do i automatically failover WAN circuits to standby firewall if both MPLS and Internet circuits are connecting to primary ASA5510. Should i connect MPLS circuit to ASA1 and Internet circuit to ASA2? Ideally, i want both circuits to connect to primary ASA5510 for automatic WAN failover. My concern is , if the primary ASA5510 fails which has WAN and Internet circuits connected , do i need to manually switch connection from primary to standy? The goal is to fully automate wan failover and asa failover .
We have purchased a Cisco 1921 with twin ADSL after advice from a Cisco sales rep. However I am having trouble working out the load balancing/fail over config for the device.
I would like traffic to balance over both ADSL lines and if one goes down not to interrupt connectivity.
I had a look at ppp multilink but I am unsure our ISP (BT) support this?
!! Last configuration change at 13:18:34 UTC Tue Mar 29 2011!version 15.0service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname xxxxxx
I have a two fiber connection from our Central Office(6513) to Remote office (6509). I have a requirement that on the remote office if one of the fiber goes down, the second fiber should work as a failover. I am planning to use SUP720-3B SFP to connect to the CO.
Can I connet one fiber to Sup720-3b G5/1 & another fiber connection to G5/2? or Can I connet one fiber to Sup720-3b G5/1 & another fiber connection to G6/2? I am running EIGRP between sites. Any sample config.
I have an ASA5520 in location A with an ISP connection and a matching ASA5520 in location B with a separate ISP connection. We have fiber connecting the two locations and vlans passing back and forth so I will be able to configure the failover via a vlan as well as extend the ISP's to each location via vlans. The Active/Active configuration with the multiple security contexts does not seem to be an issue but how is a redundant ISP configured in this mode?We want to have context A using the ASA in location A with ISP1 as the primary and failing over to ISP 2 in locaiton B We also want to have context B using the ASA in location B with ISP 2 as the primary and failing over to ISP1 in location A Would route tracking provide the desired result? Is there a better option?
When we had 8.2.2, we bought a Mobile license to make the iPads running AnyConnect happy. I applied it, but since we'd only purchased one license, it broke failover. 8.4 lets you share tracking licenses, and since we were planning on the upgrade to 8.4.x anyway, I figured no big deal, I'll get that straightened out when I do the upgrade.
Did the upgrade this weekend, and I still can't get things happy, the boxes don't see one-another:
Here's a show failover on the primary:
Failover OnFailover unit PrimaryFailover LAN Interface: failover GigabitEthernet0/3 (up)Unit Poll frequency 1 seconds, holdtime 15 seconds Interface Poll frequency 5 seconds, holdtime 25 seconds Interface Policy 1Monitored Interfaces 6 of 160
We have 2 ACEs configured as Active/Standby. FT vlan is configured directly using a crossover cable , not using a switch for the FT vlan.ACE is setup in routed mode ,vlan 29 is client vlan and 28 is server vlan ,both are being trunked on ACE-- trunk 3750 switch.
When I shutdown the port on 3750 for the primary ACE , data connectivity wise ,primary ACE is down ,but the secondary is not taking over ,and also when I do sh ft group status on the secondary ACE,I see the status of STANDBY_HOT and the peer state: ACTIVE.
If we switch from primary to secondary firewall the interfaces on the secondary go to state waitung than to failed. after awhile the secondary gives the control to the primary.
it seem that traffic passes the secondary firewall during this short failover time . we have several context created on the firewall, Switch Ports checked , cabeling check everythink checked
blackhole Interface inside (10.255.102.134): Normal (Waiting) blackhole Interface shared (10.255.102.134): Normal (Waiting) blackhole Interface inside (10.255.102.133): Failed (Waiting) blackhole Interface shared (10.255.102.133): Normal blackhole Interface inside (10.255.102.133): Normal (Waiting) blackhole Interface shared (10.255.102.133): Normal
I have ASA 5510 connected as shown in attached diagram.Ideally when ASA 1 is active and if I boot Switch-1, ASA-2 shood take over. But that is not happening.When I boot SW1 , ASA-2 shows "Failover LAN Interface: failover Ethernet0/0 (Failed - No Switchover)" and remains standby.Fail over works properly If ASA-1 boots.
Turned up a new colo service last week using some PIX 515E firewalls and two Cat 2950 series switches. I have attached a diagram of the layout which I have used elsewhere with good success. Basically I have two switches connected together via port channel (2 ports). The colo facility gives me two HSRP enabled links, of which I plug one into switch A and the other in switch B. The PIxes are a failover pair with the primary plugged into the same switch A as the primary HSRP link.The backup PIX is plugged into the backup switch where the backup HSRP link is. When I unplug the primary HSRP link the PIX can ping the HSRP gateway still, but nothing beyond that. Nothing gets it to work until I plug the link back in.
The only thing I could see that might cause an issue is the 'ip verify reverse-path' command on the PIXes. But even the switches cannot ping out beyond the HSRP gateway. Just seems like all inbound routing stops. I am not sure what the colo facility has going on their side but it seems like they are using just some Cisco 6509s and doing HSRP between them. Seems pretty simple but so far this is proving un-usable as is.
The PIX BTW just uses a default route to the HSRP gateway.
I got Windows 7 Enterprise-32 bit which cannot run some old programs,games,etc.So i decided to install Windows XP professional, but there's a huge problem: The internet does not work when i change to XP, but when i change back to win 7 it works again. Should i call my internet provider?Unplugging,creating,disabling the internet does not work,also it's not the problem with firewall.
I am trying to setup a Wireless Home Network that extends to 2 different Parts of a Large House. Since the House is large 1 Router does not have the Signal strength to cover it all.I have a second wireless Router , a Spare Lan switch and 150ft Ethernet Cord to connect everything.
This all leads me to think that I missed some setting on Router 1.Though I cant figure out what I missed. As i said My Laptop is getting and IP and connected through the Cat 5 cable just fine. Should Router 2 not be able to simply pull an IP from the IP pool Router 1 and use Router 1 as its default Gateway?
Region : UnitedStates Model : TL-WDR4300 Hardware Version : V1 Firmware Version : 3.13.23 ISP : Comcast
I have no problems connecting on a 5 GHz band or wired to the router. However any device connecting on 2.4 Ghz gets barely any bandwidth and drops after running for a short time. I have test numerous devices and have the same issue. What was odd is a device on 5GHz that worked fine had the same issue when connecting on 2.4 GHz which seems to say it is only that band. I have an old router that works fine on 2.4 GHz on channel 1 with all the security settings I used on the 4300.
Region : UnitedStates Model : TL-WDR4300 Hardware Version : V1 Firmware Version : latest ISP : Clear
Get GMT throws an error. I set known good public NTP servers, still get error. Also power cycling or rebooting the router seems to drop manual time settings, as well. I am using WDR4300 as a wireless access point, does that matter? Maybe I don't need time in access mode? It is connected to the Internet and is providing internet access to clients.
We have both DSL and 3G connection to the 881G and both are up and running.There is a NAT for easy vpn device (10.10.10.2) on this router and currently pointing to DSL interface IP (206.206.206.9) ********ip nat inside source static 10.10.10.2 206.206.206.9 extendable*********
My current requirement is that NAT for easy vpn device should work on 3G if DSL link down.So how we can achive the NAT redundancy. Even when I removed the above NAT and pointing to Cellular0, I am not seeing any translations.
I have my RV042 set up in Dual WAN mode and both WANs are working properly. I would like to configure WAN1 to handle all traffic, unless it fails and then have everything to go to WAN2. Pretty much what Smart Link Backup does, however with that enabled only 1 of the WANs is live at any given time. I'd like both WANs to always be live as I'm going to see the second one as a back-door into the network. Is this possible to do with routing? I tried setting a routing rule to have everything to go WAN1, but when WAN1 goes down, nothing is rounted via WAN2.
Region : Argentina Model : TL-WDR4300 Hardware Version : V1 Firmware Version : Region : Others
I have Enable WDS Bridging and run Survey which detect the other SSID to be joined with the correct MAC address.I had filled the password of my second THOMSON v 585 V7 with the correct Auth Type both routers broadcast on channel 11.But my TP-Link 2543ND cannot made it work.I also disable DHCP and changed my LAN ip to 192.168.1.2 and can access it over my lan.
Region : Australia Model : TL-WDR4300 Hardware Version : V1 Firmware Version : ISP :
I've been using inSSider on Windows and trying different settings on my 4300 to get wireless n @ 300MHz working with no luck. The maximum I seem to be able to get it to run is 144MHz.
Is this a fault with the router or the firmware? Since the router is advertised to run at 300Mhz, then by rights if it does not or cannot, then TP-Link owes everyone a refund, at least in Australia because this counts as false advertising.
I had a similar issue with my 1043ND as well. Has anyone got a 4300 working at 300 MHz?
Region : Canada Model : TL-WDR4300 Hardware Version : V1 Firmware Version : ISP :
I recently bought the N750 wireless dual band router and I would like to setup a bridge with another router that I'm currently using.
I have followed the instructions in the documentation [URL]. But I've had 0 success in getting this to work.
How to get this feature to work?
Additional info:
I followed each step to the letter. In the last step when my router reboots I noticed that the System light doesn't flash. Which indicates that there is a system error (according to the user manual). But I'm unable to determine what the system error is because I can no longer log into my router's Administration page anymore.
in the instructions (link above) it says to disable DHCP, so I manually assign an IP address to my computer setting the gateway IP address to the IP address I manually assigned to my router. I can see that a connection to the router is established, but I'm unable connect to the internet and when I type in the IP address of my router I'm unable to get into the administration menu.
I checked the wireless connections on my source router and I don't see the IP address of the N750 router.
quick question regarding a 3G access via a cisco 881G i have a partner sim card (with the same number as the one in my mobile) iserted into the router.now i have the problem that my mobile is unreachable (line busy), is there a way to use both sims at the same time?what do i have to change in the router configuration?
Region : Hongkong Model : TL-WDR4300 Hardware Version : V1 Firmware Version : TL-WDR4300_V1_121225
Even I have upgraded to the newest firmware for WDR-4300, it still not allowed me to connect to a windows PPTP VPN. It worked when I changed to use my old router. On the other hand, when I turned the hardware NAT, I found that the Cisco VPN connection would be dropped after I used for a few minutes. Similarly, it worked when I changed to use my previous old router.
Region : Spain Model : TL-WDR3600 Hardware Version : V1 Firmware Version : 3.13.23 Build 120820 Rel.73549n ISP : Portal Wimax
I have enabled USB Print Server on the router and managed to print from my main PC (connected by cable to router).
However, I cannot get it to work on my laptop.
I connected my laptop running Windows 7 x64 by cable to router, ran the USB print server software (latest version downloaded from web site). The USB server software sees my printer (Canon Pixma iP4200). It appears in the list to auto-connect but there is an X against it and if I try and set it to auto connect, I get the error "the port of auto-connect can not be a LPR/Raw TCP/SMB port". Apart from the occurrence of the printer I had installed before (so, yes the printer driver is installed), the USB-server printer does not appear in my system printer list.
Region : UnitedStates Model : TL-WDR4300 Hardware Version : V1 Firmware Version : 3.13.23 Build 120810 Rel.44064n ISP : COX
Trying to set up my Samsung ML-1430 printer using a Mac OS 10.6.8. Downloaded and installed the TP-Link_UDS_Printer_Controller. The printer controller found the printer and and it is now connected as the "Auto-Connected Printer" but it does not show anywhere to be selected so I can print to it. Tech support suggested uninstalling and reinstalling the software which I did. Still no option to print to it.
