I need to configure BGP on our 7204 and 2811 router. The 7204 is our main router and currently running EIGRP internally. Our remote locations just moved to an MPLS connectivity and they have a 2811 router. I will need to configure BGP for the routing protocol. I have the AS number and the remote AS number. Attached is the the current configuration of the two routers.
View 4 RepliesToday we got a new cisco 7204 with NPE-G2 , so we wanna to configure to root for the internet so here is my scenerio
1- Public Ip address =155.155.155.20
2 Private Ip Address =192.168.2.0 /24
3- Gateway = 155.155.155.1
4-DNS Server = 194.155.12.133
Interfaces:
1- Gigabite 0/1 - We put this for Public ip address
2- Gigabite 0/2 - and this for Private Ip address
how to route this for the internet . after routed we want our client computers to get internet from Gigabite 0/2 Interface
I am trying to configure EIGRP on my ASA DMZ Interface - topology as follows: [code] The ASA is currently configured for EIGRP with the inside 3560x switch and passing routing updates properly.However, the ASA will not send/receive routing updates to/from the DMZ 3560x switch - the two devices do establish eigrp neighbor relationship. [code]
View 4 Replies View RelatedOne of our Routers 7204 rebooted unexpectedly. I try to access Output interpreter but is not working. The output from our router is the following:
WAN-ROUTER#sh version
Cisco IOS Software, 7200 Software (C7200-ADVIPSERVICESK9-M), Version 12.4(15)T2, RELEASE SOFTWARE (fc7)
[Code].....
We are replacing a DS3 Internet connection with a 100 Mbps fastE connection from a Tier 1 Provider. I currently have a Cisco 7204VXR with 512 Mb DRAM and 128 Mb of Flash and two 10/100 ports that is connected to the DS3. I also have a 3845 with 1 Gb of DRAM and 256 Mb of Flash with two 10/100/1000 ports available.
We are currently running BGP, below is the summary
BGP table version is 88880414, main routing table version 88880414
379041 network entries using 44347797 bytes of memory
379043 path entries using 19710236 bytes of memory(code)
I was attempting to setup our 7204 Cisco router to use RADIUS for authentication via the AAA commands. I must have messed up when configuring it as it comes up via TELNET asking for a username and password but doesn't take my AD credentials. How might I login to this router to fix the config? Do I need to do a password recover process?
One note, I didn't save the running-config to startup-config, so if I restart the router will it load the startup-config, thus overwriting the running-config that wasn't working?
One of my newly installed router got reloaded ,showing me below error . The same IOS im using in another router and it works fine without any issue ,but this newly installed router gave me this problem. [code]
cisco 7204VXR (NPE-G1) processor (revision B) with 983040K/65536K bytes of memory.
I have a cisco 7204 vxr that terminates a 300 meg ethernet circuit asn well as an mpls DS-3. CPU increases along with utilization of the ethernet circuit. When the utilization gets to around 150 Mbps on the receive, the cpu is maxed out at 100%. I am wondering if the router can support the amount of traffic coming through it. The majority of the traffic is voip using g729 codec, so packet size is small. We are no where close to peak utilization and cpu is at 39%. Here is what I see currently:
#sh verCisco IOS Software, 7200 Software (C7200-ADVIPSERVICESK9-M), Version 12.4(15)T4, RELEASE SOFTWARE (fc2)Technical Support: [URL] 1986-2008 by Cisco Systems, Inc.Compiled Thu 13-Mar-08 10:40 by prod_rel_team
ROM: System Bootstrap, Version 12.3(4r)T3, RELEASE SOFTWARE (fc1)BOOTLDR: 7200 Software (C7200-KBOOT-M), Version 12.3(15), RELEASE SOFTWARE (fc3)
uptime is 3 years, 1 week, 3 days, 6 hours, 40 minutesSystem returned to ROM by Reload CommandSystem restarted at 08:26:49 UTC Wed May 14 2008System image file is "disk2:c7200-advipservicesk9-mz.124-15.T4.bin"
This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.
[code].....
My Cisco 861 wireless router (CISCO861W-GN-E-K9) don't support EIGRP. What will I do to enable it?
View 1 Replies View RelatedWe have a cisco 7204 VXR and would like to know the module which has two fastethernet port. We tried a PA-2FEISL-TX but it did not work.
View 1 Replies View Relatedis 633+ seconds (approximately 10 minutes) load time normal for a Cisco 7204 router? I find that it takes forever for the router to do :Self decompressing the image". I tried the latest IOS and tried different bootloaders but it doesnt seem improve it?
View 2 Replies View RelatedWe have point to point metro ether net link terminating on 7204VXR router.On this point to point link we are configuring GRE over ip sec. Problem is when the traffic exceeding 8mbps we started getting packet drops. from the Cisco documentation it seems the tunnel bandwidth is by default 8mbps and there is parameter like Inherit/receive but those actually not change the tunnel interface bandwidth.If we just give tunnel bandwidth with bandwidth mentioned it allows me to give option of 100mbps but again the tunnel interface bandwidth remains 8mbpos only and probably that 100mbps is useful only for routing decisions.
i am using advance security 12.4.15T12 image. Whether this is a limitation or any other way to go beyond 8mbps for the tunnel interface (7204VXR-NPEG1 processor)
We have software router vyatta and about 15 branches with cisco 881w and cisco 1941. All branches have 10mbs bandwidth and 3 of them have 50mbs. Link to vyatta has 100mbs bandwidth and situated in datacenter.All branches connect to vyatta via vpn site-to-site with ipsec.I want to change vyatta to cisco router or asa.
View 7 Replies View RelatedI would like to find out what the status is of the Cisco 7204 VXR and 7206 VXR routers?I understand they are EOLife and EOSale.Are they also EOSupport? we planning to upgrade 3 of them in our environment and management requires feedback around this.We thinking of going the ASR1000 route..
View 15 Replies View RelatedI need to route a subnet from a 7204 to 2 different gateway's which are not Cisco based. I cannot use HSRP, GLBP or VRRP as the other 2 gateways don't support theses protocols. Yet they do support OSPF, RIP, and BGP.... Take note that this setup is in a ISP scenario. How can I acheive gateway redundancy?
View 4 Replies View RelatedWe have a leased line from one office to a DR site which we use to back up our data. We are using Cisco 7204 and and OC3 circuit. The data is sent in blocks (SRDF) and we are sending changes only. However, we are getting requests from compliance to further secure this connection since it is a leased line. I guess I need to know how secure SRDF traffic is and then if required, how to secure it.
Can we create a simple VPN between the two routers without having to use a VPN concentrator or Firewall? If so, what IOS would be required? How much impact will the VPN have on current bandwidth?
does a router Cisco 887 va k9 support EIGRP and IPsec ?
View 2 Replies View RelatedI can't seem to find out what this means. Every 6 months or so, my 7204 locks up. I can't even get to it via the console port and I must reboot to access it. I noticed this alarm in my logs.( ASSERT CRITICAL PO1/0 Threshold Cross Alarm - B3) I've looked on-line but can't pinpoint it's meaning. Looks like a flapping interface but might be something else.
View 6 Replies View RelatedMy router, a Cisco 7204 with NPE 300, is experiencing output drops and input errors on a fastethernet interface. I have a 100Mbps connection with less than 15Mbps utilization at peak times.
FastEthernet1/0 is up, line protocol is up Hardware is DEC21140, address is 0014.a985.1a1c (bia 0014.a985.1a1c) Internet address is 38.102.66.134/30 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 3/255, rxload 1/255
[Code]....
I was planning to buy 7204 VXR for my site's router for the following requirements:
- support for ATM, Serial, ISDN
- support for 3 10/100/1000 ethernet interface
- support for 2 WAN interface
However, I realized that the 7200 series will not be available for sale after September of this year!! Any "reasonable" replacement for 7204 VXR that meets the above requirements?
I have a 7204VXR Router, with Neflow. The collection for all interfaces is ok, but one interface (Gigabitethernet 1/0), is not showing the egress traffic in the pictures. The configuration has "ip route-cache flow", ip flow egress, and ip flow ingress set. But, is not showing the egress traffic.
View 4 Replies View RelatedI have a Cisco 7204 vxr router that does not have a valid image on the boot flash or on the pcmcia card (disk 2). I tried everything i could to try and get the router to recognize the flash but it keeps giving me a magic card error. I'm losing my mind slowly but surely.
The router boots into Rommon every time and the Rommon options for this router are horrible. No tftpdnld option. Can I get this router to boot from tftp, from Rommon?
I have a 7204VXR NPE-400 running c7200-adventerprisek9-mz.124-24.T3.bin at the moment. This device is being used as a firewall between zones in a service provider network.
My issue is we have a lab device on the corporate side that needs to talk SCTP to the core device. Since there is no option to match SCTP in ACLs or protocol matching, I can't really get this to pass properly. What is the new IOS versions support SCTP? Any options to pass this traffic through the firewall?
In EIGRP, if a router loses the successor to a route, and it has no FS, it goes active (starts asking all neighbors if they have a successor for that route).But if the neighbor did have a successor, shouldn't they have pro-actively told us about it when they learned it (so we already have it as the Feasible Successor?).
View 6 Replies View RelatedI redistribute our MPLS eBGP routes into our internal EIGRP process at each site. This action undesirably redistributes locally generated BGP networks (via network command) that are meant from the MPLS cloud into our internal routing process.I currently have a route-map on my 'redistribute bgp' command that filters each network manually with an ACL. This works but adds obvious administrative overhead; each WAN router advertises different networks, and the ACL must be updated for each new network.Would it make more sense to simply deny routes from BGP to EIGRP with a metric of 32768? Something like this,route-map deny-local-bgp deny 10 match metric 3276 router -map deny-local-bgp permit 20,router eigrp 100 redistribute bgp 65104 route-map deny-local-bgp.
View 19 Replies View RelatedI have a setup where a router learns a subnet from both EIGRP process and a BGP process (EBGP peer). In the network's normal state, the EBGP path is preffered path (Primary Path). When the route to the subnet is lost in EBGP, then the router will install the EIGRP learn route into the routing table and use that as its path to get to subnet now (Backup path). This works as expected.
The problem is when the EBGP learn route comes back, the Router still holds on the EIGRP learned route in its routing table. I would think that since the Admin Distance (AD) of EIGRP (90) is higher then the EBGP AD (20) that once the EBGP route is learned again, that it would re-install itself back into the routing table (replacing the EIGRP learned route). But this is not happening.
Im not sure what Im missing here since I thought AD was highest considered attribute the routing table consider when install a route learned from 2 routing process.
The setup Im running is an Cisco 7206VXR (NPE-G2) processor (revision A) running IOS c7200p-spservicesk9-mz.124-15.T12.bin.
I'm looking for a Cisco device to run a full BGP table with a 60Mb link. And one of the main restrictions is that my traffic is almost 100% real-time (voip). So the average packet size is small. Today we own a Cisco 7204 NPE400 with 512Mb RAM. I think even though I upgrade it to a G2, due to the small average packet size, the router will be near to its limit. Maybe a Cisco 7300 NSE-150? Or should I think about a switch?
View 3 Replies View RelatedI am preparing to move two branch offices from a point to point T1 connection to Century Link Metro Ethernet.Currently my branch locations connect to my HQ 7204 router via a channelized DS3. I have a 4507R at HQ that I will connect the ME circuit to.We will also be moving our Internet connection on the ME circuit.Our service provider Clink will hand me a single Ethernet handoff for the Internet and branch office connections. For the first phase I will connect one branch office using ME. Once that is in place and tested we will move another office and so on. Then our final step is to move our web connection to the ME circuit.Each branch office has their own unique voice and data subnet. They each have a 2801 router and a 3560 switch. The routers are MGCP gateways with only one PSTN connection, a POTs 911 line on a FXO port.
So my questions are;
1 - Should I connect the ME directly in to the 3560 at the branch offices or use the Fa0/1 on the 2801? Fa0/0 is currently connected to the 3560.
2 - On my 4507R at HQ how will I configure the ME switch port? As a dot1q trunk port?
3 - Given that ME is basically a LAN connection will I have to re IP the branch office? HQ is 10.10.1.x/24. Branch is 10.10.166.x/24 (data) 192.168.166.x/24 (voice).
4 - On the 4507R will I need to configure a vlan interface for each branch subnet?
I attached two network diagrams. One represents our current topology (MEexisting) and the second represents the new ME circuit changes (MEprojected).
Im trying to configure a 7204 for radius login authentication, although the router is also configured with radius for VPN access. How can I configure it for both using 2 different raidus servers? the login via radius is working fine on another router, although that one is not doing VPN access so there's no conflict.
My config:
aaa group server radius RADIUS_AUTH server x.x.3.11 auth-port 1645 acct-port 1646
aaa authentication login networkaccess group radius local
[Code]....
For some reason, this does not work. I cannot access the router and authenticate via x.x.3.11 radius server. I think there's a conflict between the VPN and the login authentication but im unsure how to resolve this.
I am working at a client site today on a routing issue. I am currently working on an issue where a 3750 switch running EIGRP will not update its neighbor router when a network statement is added to the eigrp instance.The neighbor is a 3825 router.
Both the switch and the router have a common network which is 192.168.36.0/24.
Both the switch and the router are in a neighbor adjacency.
Both boxes have "no auto-summ" in the routing configuration instance.
I can run debugs on both routers (debug eigrp packets) and then I can watch queries and updates when I issue "auto-summ" or "no auto-summ". Also I see a "graceful restart" for the peers when this is done.I had an expectation that when I added the network (this is just an arbitrary network for testing, which is 172.16.69.0/24). I wanted to watch this network being sent in an update to the neighbor router.When I add the above mentioned network, there are no updates packets sent from the 3750 to the 3845. I have not had success to this point trying to resolve. I have followed the Cisco document "Troubleshooting EIGRP Flow Chart", but have exhausted all it has to offer and now it is at the point where it is telling me to contact TAC.
I have a pair of data center core 6500 is running a single EIGRP AS with the standard core redundant cross connects. Recently an SVI sub net was expanded from a /24 to a /23 and dropped out of the EIGRP routing table. Subsequent trouble shooting lead to the router id being one using an IP address that is no longer active IP address.
Reviewing old configurations I found, that year ago, the ip address used for the EIGRP router-id (10.100.106.3) was removed from the active interface and changed but the EIGRP router-id was not updated. The switch has not been rebooted since, no loop back is configured and there is not a higher IP configured on an active interface. Reviewing documented material on it, I cannot find anything specific on this condition but do see in the discussions on duplicate IDs, that new route updates can be a problem. I know how to update the router id but I am looking for confirmation on what would be the impact when I add a new loop back and manually configure the router-id under the EIGRP process with the new loop back IP.
My assumption is an EIGRP update and route re convergence with the standard 90 seconds of outage. How to confirm this is assumption is correct? I have no test bed to find out myself without doing this on the active cores.
show version Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(33)SXI5, RELEASE SOFTWARE (fc2) show inventory NAME: "WS-C6504-E", DESCR: "Cisco Systems Cisco 6500 4-slot Chassis System"PID: WS-C6504-E VID: V01, SN: <deleted> NAME: "1", DESCR: "WS-SUP720-3B 2 ports Supervisor Engine 720 Rev. 5.3"
PID: WS-SUP720-3B
EIGRP configuration is pretty basic:
router eigrp 10
network 10.0.0.0
redistribute static
passive-interface Vlan110
passive-interface Vlan80
[code]...
We have small which I'm looking to implement and have built this on GNS3.
We have:
Router A in site 1
Router B in site 2
Router C in site 3
Router A and B are connection via a point to point 100M link and from Router C we have a 2 point to point one of which is 5Mpbs and going to Router A and Router B.
For Router C to reach Router A network it will go via Router B and these are 100M connection. When the link between Router A and B goes down. Router C should update and start using the 5m route.
For some reson, the routes are not updating. I have to do 'clea ip eigrp ne' for the routes to update and if I reload the routers all works well, it seems the problem is intermittent.
I have a test on eigrp next week and have been doing it in packet tracer so i`m ready but i can`t seem to get EIGRP to work!I have 3 routers and the loopback interfaces are configured because there`s not enough PCs to actually connect up to the kit. [code]
View 5 Replies View Related