I can not apply the LLQ to ADSL ATM interface. the system take the command with out any error message, but no in the show running config. Any Cisco link can explain this? [code]
I have a Cisco 1721 router with an ADSL wic. I have followed guides on the Cisco website so that I can connect the router to my home adsl connection. The router connects to my broadband provider and sucesfully obtains an IP address along with Dynamically assigned DNS servers. I am able to ping google.co.uk from the router but not from clients attached via DHCP.
I have noticed that if I ping the IP address of google.co.uk from a client it resolves but it will not resolve the name. This would lead me to believe that the problem lies with DNS resolution/forwarding but I do not know how to investigate further.
Trying to work out if I can setup a VLAN interface on a 1721 router.The only interfaces that are listed are the Ethernet (W1-ENET) and the Fast Ethernet interface.I'm still super new to all of this and learn how to change IOS via rommon and TFTP after realizing I had an IOS too large for the memory?
I have cisco 1721 router so I installed an ethernet interface card so when I make show run I found that there is a fast ethernet 0 and ethernet 0 (which I installed) so i wand to make subinfaces of the etheernet 0 but I can't. I tried to make encapsulation dot.1q but it doesn't accept it.
configuration of NAT on an ASA 5520. On the ASA I have 1 x WAN connection and 1 x Internet Connection as well as the Inside and DMZ. I want to translate traffic from certain subnets on the inside (say 10.1.2.0 255.255.255.0) to an outside address (say 1.2.3.0 255.255.255.0). I'm assuming the ASA using the number after the brackets to distinguish what to translate? So if I had another entry with a '2' after the brackets, any of the '1' entries wouldn't translate to this? I have access-lits inbound on the INSIDE interface, I'm assuming these are applied before any NAT and only items allowed through the access-list are allowed to NAT?
I also have an address I would like to statically NAT with a certain port number, how do I do this? After I've configured this, what are the commands to apply NAT on the interface?
I have a 3560G that I cannot apply a policy route-map to one of the VLAN interfaces. I am running up to date software, c3560-ipservicesk9-mz.150-2.SE2 and it accepts the command, but does not show it in the sh run of the interface. I updated to this code as I had seen previously someone said it needed to be version 15 before you could apply route-maps to VLAN interfaces.
I´m a IOS CLI fanatic. Its the first tiem that I have to configure a SB switch. Its very confusing, I want setup a voice vlan id as 200. but I don see that this value change when I try to apply the smartport macro to the interface.Its possible change a smartport macro?
Is it possible to set up a WAN interface on a FastEthernet interface of a Cisco 877 Adsl Router ?Due to my ISP, i've to use an external VDSL modem and must connect it to my cisco 877 router (and leave it's adsl interface unused).But i don't know how to set up a wan port, other than the adsl interface itself (dialer0), on my cisco.
So I have been asked to make the following scenario work: We have 2 Cisco 1721 routers that need a site to site link between them. One will live on a corporate network with the following setup. It will only have one interface active at an internal ip of 10.10.1.76 with a extrnal address nat'd to it (only port open is 500 for VPN traffic). The far end lives behind a DSL and I know that configuration works (hole in the firewall passing to it) (tested already).
The building network is 10.10.0.0/16.
When we first tried this setup we were using both interfaces available on the 1721 for the head end. Now I'm being told we are getting the NATd ip and one interface.
So the question is, can I make a site-to-site work with only one interface on the router? Or do I have to get the client to give us a 2nd network connection?
We have an ADSL2+ line from a WIC in a 1841, everything has been fine for the last few years and then the last few months the connection going down. When checking the interfaces the ATM0/0/0 is up up and the same for the dialer interface we are using, they are both up/up, but this still needs a reload of the router to be functional again, shutting the interfaces does not bring the connection back up.
I am not an expert on ADSL lines, I have never really had a problem with anything previously. The router was running Netflow to a network monitor wondering if this or logging was causing an issue with entries in the buffer??
Here is an output of show dsl int, would change the firmware, it has been fine all this time before though we are running IOS 12.4(24)T1 advseck9-m, as far as I can seen from our ISP the config for ADSL is all correct. [Code]
Using Cisco 1811W with IOS 15.1(4)M5. FE0 and FE1 are connected to the internet via Billion ADSL2+ modems operating in bridged mode. Both lines are similar so I'll only discuss FE0 from this point on.Local subnet is 192.168.128.0/24 with router on 192.168.128.1 as default gateway. Modem on FE0 has static LAN IP of 192.168.128.2 and when plugged into the switch on the LAN side, the web interface can be accessed at that IP address. Unplug the modem from the switch and plug it into FE0 and it now works as desired providing access from the router to the internet but the web interface is no longer accessable at 192.168.128.2
I tried adding a static route "ip route 192.168.128.2 255.255.255.255 FastEthernet 0" and also "ip route 192.168.128.2 255.255.255.255 Dialer 1" Neither worked and presumably it isn't that straight forward. Possibly NAT or other routing configuration required.Although there isn't much to configure when in bridged mode, I mostly want this setup so I can look at the ADSL connection status and for the modem to write messages to syslog (works when plugged into switch on LAN side), or SNMP access.
Is the ADSL line interface on Cisco 877W not initialising a known issue? This interface on my router has been in this state for more than one month, with the rest of the router seemingly operational. The interface was connected directly to my ADSL broadband and worked well for two years. But then, about a month ago, the interface went down. I saw the exact moment this happened recorded as a syslog message. The only information was that the interface status had changed to down.
Initially I thought this was a matter of reload the router and all will be well. Did not happen. Then I thought my broadband connection was to blame. However, this option was quickly ruled out. So I went on to exhaust all troubleshooting options, including reflashing the router with the saved image and totally changing the configuration. Still no change. I have had to go back to my old BT home hub for internet access. In terms of speed this actually works a lot better than the Cisco router. But I would still rather have the router connected to my broadband line. What can I do to bring the ADSL interface back to life?
i will going to buy a router 2911 but i want know if support a interface ADSL modulo like backup in case that my primary link WAN Ethernet down and up the adsl link with a module HWIC ADSL pots.
We are using SRP527 routers with PPPoE ADSL connections. From the SRP527 we create an IPSec tunnel to our core routers (Cisco ASR). We are wanting to change the IPSec tunnels to L2TP, and I need to know if this can be done from the SRP527. I cannot find any L2TP configuration options in the setup options.Can the SRP527W act as an L2TP tunnel initiator over the ADSL PPPoE interface?
i have a problem with my adsl line connected on a HWIC-ADSL on router 2901 it was working good until yesterday the atm interface is down but the interface dialer is up .i connected this line into home adsl modem and the line is working good?
You got lots of bandwidth, expected throughput is low, and anticipated queuing/congestion is insignificant?My understanding is that QoS will kick in when there is congestion or queuing on an interface. Since an interface could either be 100% utilized or 0% utilized, is it fair to say that at any given point there could be congestion or delay on an interface?I know that the higher the interface speed, the lower the serialization delay will be, which means the lower the delay will be to put bits on the wire. For a 10Gig link, where the serialization delay is incredibly short, I imagine that even with occasional congestion, the delay would be insignificant and not affect VoIP traffic. Would this be true?
I installed the Cisco LMS 4.0.1 (test mode), and monitoring services of the switches (data collection and information system) are working.
But when I need to apply some configuration via CiscoView settings are not applied.
The following message is displayed when I try to apply some configuration on an interface of any one switch.
"Message Timeout on 172.20.1.10. This error could be due to lack of access to the host, invalid SNMP credentials, or a busy device. To correct the problem, do one of the following:
- Verify access to the host.
- Check the SNMP credentials.
- Increase the timeout value through the preference options on the chassis view."
I've checked the credentials and SNMP communities, the problem continues.
recently i removed the squid cache from the 7200 router so that i could apply the Qos on the router my topology is simple i have 7200 with two working interfaces
GI0/1====>LAN Gi0/3====>to isp and working bgp
have 550 Mega BW from isp . at the rush hour , the quality of browsing becomes worse .i just need a Qos to apply it on the 7200 router so that the priority for my traffic as follow:
1- browsing has the highest priority
2-youtube has the 2nd priority after browsing
3-download & other applications have the 3nd priority.
I am trying to apply pach 5 to my ACS version 5.3 using FTP but i receive the following errors after issuing the show backup history command. When i use TFTP, i get a message saying that the file is too big, which i understand 164 MB.
after issuing the show repository "repository name", i get the following error.% Error reading directory on remote server.the patch is on one of my hard drives D, how do i specify on the ACS file path which drive to use?I can only place a url but without specifying which drive.
Access-group only allows me to set the mode.access-group > mode > prefer > port > int g2/1,Those are the only options available to me, it doesn't allow me to go.ip access-group <name> in or out or access-group <name> in or out.
I realize the commands may be a little off, I don't have a switch nearby. When I get on our 3750 there are no issues, it allows you to apply the ACL the conventional way. I just can't seem to find any way to apply an ACL on an interface on the 6506 though.
I have a 1721 router in my home & I want to setup it for firewall/ vpn. Is it recommended to purchase a WIC-1ADSL? What module is recommended for VPN? Is it possible to setup VPN using DSL / Dynamic Ip connection ?I want to explore on Cisco security & I get this advice from a supplier.
I've got three Cisco 1721's and a 2610, two of the 1721's are 32f's, the other one is a bit older but is still the same model. The two Cisco 1721 32f's have 1-dsu-t1-v2 wics in them, and the older 1721 has a 1-dsu-t1 wic in it. Now no matter how i have configured it the old t1 wic will not talk to the v2 wic. I've tried putting the old wic into a 1721 32f and it doesn't work at all!
What i have working:
router DCE (1721 32f with v2 wic) can talk to router DTE (1721 32f with v2 wic) no problem with this configuration.
Router DCE:
-service-module t1 clock source internal -service-module t1 data-coding normal
[ code].....
Router DTE:
-service-module t1 clock source line -service-module t1 data-coding normal
[ code]....
Router OLD (1721 with v2 wic) can talk to router DTE (1721 32f with v2 wic) no problem with same config. What doesn't work: Any router with 1-dsu-t1 (old) wic to router DTE (1721 32f with v2 wic). again same configuration as before, so whats going on that i cant get this to work? Is the old t1 wic not compatible with the new t1 wic?
I am having a problem configuring a VPN connection from a 1721 router to an ASA5520. The router has already been configured, but I have been asked to setup the VPN.I think the issue is because they are using a Loop back interface (which I have never configured for before).
The "sh crypto isakmp sa" command shows: dst src state conn-id status 5.6.7.8 1.2.3.4 QM_IDLE 4 ACTIVE
where 5.6.7.8 is the ip on Loopback0, 1.2.3.4 is remote peer ip. Pings to the remote network don't work.
Here is the (slightly edited) config of the 1721 : Current configuration : 3838 bytes! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec [code]......
I am attempting to install a third party SSL cert (GoDaddy) to properly secure the external interface of my 1811 ISR so that I can implement SSL VPN. I have tried using SDM 2.5, but that doesn't appear to be working. I am familiar with doing this on a Cisco 3005 Concentrator, but I'm not aware of how to install an intermediate cert on the 1811 (or if it's even possible), in order to properly have the GoDaddy cert properly imported and used for SSL VPN. I have gone through the CSR process and have the initial cert from them generated and have imported it, but it never appears to be identified correctly if I browse to the external interface on the router. The router always defaults to its self-signed cert.
get a installed certificate work on a 5508 WLC Controller without rebooting. Is there a way? Is it possible to just reload a process to get the certificate work?