Am trying to do a dynamic configuration of a 3900 series router (3925 to be precise).For the software and licenses, under the IOS technology Package Licenses, what's the significant of SL-39-DATA-K9 and SL-39-SECNPE-K9? Are they really necessary for the router?
View 3 RepliesI am looking for the procedure of the router 3900 series failover. I have got two 3900 series router with the same ISO and other interface cards. What are the main things that I should watch ? Does the standby router takes the same ip of active router if the active router fails ? How should I configure it.
View 1 Replies View RelatedCan the 3900 series router be ordered or upgraded to a license with advances enterprise services? I have a few of these routers and I'm looking to get the license upgraded if possible.
View 1 Replies View RelatedIs there a router (1900-3900 series router) that will support a 100FX fiber connection. We use to use 2800-3800 and 2600-3700 series routers with FX fiber interface now these routers are no longer available and our need for 100Mbps FX is still a requirement.
View 3 Replies View RelatedI have some simple rules on 2 extended lists:ip access-list extended FWINpermit tcp any host 192.36.86.231 eq ftp-data ftp 22 www 443 516 666 671 672 2222permit tcp any host 192.36.86.231 eq 4500 8008 8443permit tcp any host 192.36.86.231 range 5900 5950permit tcp any host 192.36.86.231 range 33434 33550permit tcp any host 192.36.86.241 eq ftp-data ftp 22 www 1935 2195 3306 8888permit tcp any host 192.36.86.241 range 8080 8090permit tcp any host 192.36.86.241 range 33434 33550ip access-list extended FWOUTpermit tcp host 192.36.86.231 any eq ftp-data ftp 22 www 443 516 666 671 672 2222permit tcp host 192.36.86.231 any eq 4500 8008 8443permit tcp host 192.36.86.231 any range 5900 5950,The issue is that 192.36.86.231 can access internet, and 192.36.86.241 can not.Is there a way to troubleshoot 192.36.86.241's connection/packets flow?
View 1 Replies View RelatedI am setting up a DMVPN between several dozen sites using 2800, 2900 and 3900 series ISRs. The DMVPN Design Guide recommends current 12.4 or 12.4T IOS, but the DG was last updated in July 2008. I cannot seem to find any recommendations newer than this. I'm hoping Cisco or the community can give me an updated recommendation.
View 5 Replies View RelatedWe are migrating from a Microwave T1 WAN to a Fiber ring WAN which I'll be connecting to our providers Ciena Metro E switches. Eventually we are going to move away from the routers, but the network is a little too complex as well as spanned across a lot of miles. Since I am the only networking personnel here, I would like to first simply migrate to the fiber by simply moving the connection configs off of the T1 interfaces, and onto one of the Gig interfaces on the 7206 and on one of the Fe interfaces on the 3900 (which is actually a 3700 series because the line card on the 3900 is toast). If this works, I will need to purchase Fe line cards for the 7206, because I found out that the virtual interfaces do not support Policy Mapping for our QOS and Multicasting.
View 6 Replies View RelatedI know this is not a the preferred way to do it, but this just an interim network configuration until the Remote Site gets re-located and reconfigured. I'm trying to bridge and route traffic and hoping the community can offer a review of the sample configuration and/or some ideas to make this a reality.
Existing network is bridged across site-to-site private line (p-2-p) so 192.168.100.0/24 devices exist at both locations. In order to reduce bandwidth consumption across the p-2-p, the 172.20.100.0/24 devices (end user PCs and new to the environemnt) will be routed out a local Internet connection which in turn reduces the p-2-p traffic to just private network traffic for the two networks. That same network requires routing through the 192.168.100.0/24 network in order to access the private WAN connected to the 3900 router with IP 192.168.100.1.
How config dynamic alp inspection for 300 or 500 series ? I find in admin guide it's no simple to do.
View 8 Replies View RelatedI have a SG300-28P switch. I just read in the Administration Guide that, when in Layer 3 mode, the switch doesn't support MAC-based VLAN or Dynamic VLAN Assignment.
So, in order to assign a client to a VLAN based on their MAC or based on the response of a RADIUS server, we have to disable layer 3 features. Without layer 3 switching, the switch is unable to act as a default gateway and forward packets between VLANs. As a result, the VLANs can't communicate in any way, or access the internet, unless a separate router is connected to every VLAN. Right? Doesn't this limitation significantly reduce the usefulness of the DVA feature?
I have just bought my first non-domestic router, a CISCO 887VA-K9 which needs basic configuration to get it working. I have a copy of the configuration guide (334 pages) and CP Express user's guide (94 pages) and have spent an hour reading but either they are missing something or my brain is too small to figure out step 1. How to get started. Perhaps from where to download a CP Express installation kit for Windows.
Is the only way via a terminal emulator connected via a serial port ? Is there a graphical interface I can use ? Are there any basic tutorials for beginners ? This is probably the only non-domestic routrer I shall work on so I don't want to invest in a full training course. I just need enough to plug in the ISP credentials and set up DHCP.
load balancing and automatic failover between two isp
View 13 Replies View RelatedDoes the 22xx Series FEX support static or dynamic LAGs between itself and a server?Imagine a server with dual 10G NICs, and I need to connect them to the SAME 22xx FEX....can I set up a LAG between the two 10G NIC ports and two 22xx FEX Host ports? Does it depend on how the FEX is connected to the parent 55xx?
View 0 Replies View Relatedabout to install first UC320w and wanted some sample 800 series router configurations showing required port fowarding, ACL entries and QoS examples.
View 5 Replies View RelatedCan we terminate 2 WAN link first Lease line and second Broadband internet link on 800 series router . As 800 series router have only 1 wan port and 4 switch port. Also we want to Configure load balancing over the 2 WAN link, is it possible or Basic router for SMB.
View 1 Replies View RelatedI have an 877W router that I would like to have a 2nd pre-configured backup for. I was thinking of getting another 870 series (probably an 877) router, as the more expensive wireless option is not actually required. Am I right to assume that I could simply copy the contents of my current config.txt file onto the second router?
View 4 Replies View RelatedI am just CCNA, i have a project to configure site to site and remote access vpn on cisco 3000 routers and pix firewalls.. but the problem is only main site has the static ip while other sites have dynamic ips.
1- both the sides have dynamic ips.
2- one site have static and the other dynamic.
I'm having some issues configuring NAT statements on my ASA5505 which has recently been upgraded to 8.41.
I have a single dynamic IP on the outside interface of the ASA and would like all internal hosts to NAT/PAT to it. In addition, I would like to have several ports 'forwarded' to internal hosts, one of which is TCP/4343. With the current configuration all hosts are NATing to the external interface properly but the service running on TCP/4343 is not accessible from the outside. See command output below:
"sh run object" output:
object network DrJones host 10.81.220.90object network LAN-10.81.220.0 subnet 10.81.220.0 255.255.255.0
"sh run nat" output:
object network DrJones nat (inside,outside) static interface service tcp 4343 4343object network LAN-10.81.220.0 nat (inside,outside) dynamic interface
"sh run access-list" output:
access-list inside_access_in extended permit ip 10.81.220.0 255.255.255.0 anyaccess-list outside_access_in extended permit icmp any any echo-replyaccess-list outside_access_in extended permit tcp any interface outside eq 4343
I found this reference DCNM-L-NXACCK9 in the configuration generated by a dynamic Tools for a nexus bundle N5K-C5548UP-B-S32. This reference is not reflected in the price list. Has it been replaced? no datasheet on Cisco portal.
View 2 Replies View RelatedI have connected a 10BaseT device to a CISCO Catalyst 3560xPOE switch with dynamic port security. All seems to work fine when the distance between the two devices is closer then 200ft. When I connect to 10BaseT devices farther out near 300ft the response from the attached device is lost. It works ok on unmanaged switches at the longer distance. Is there a minimum response time from attached devices for dynamic port security to work properly? Is there any other explanation why it would work on cheaper switches, but not on the Port Secured Switch?
View 2 Replies View Relatedi have a gateway router going to the internet....using public IP addresses on both interfaces. starting on Monday, traffic would suddenly stop flowing from the inside of the network going out, though i can still ping the outside interface , but when I log in to the router I am able to ping to the internet. so its like traffic is not passing from the outside int to the inside int. I have a 3900 router. other thing is, when i restart the router it will work for some time and then just stop again....
View 6 Replies View Relatedwhy I can't use cisco ehwic-3g-hspa-u card in cisco 2800 series and 1841 series router?documentation said that it should work with that devices but when I installed it, it doesn't work even as device i can't see I am using cisco latest ios advance ent. 15.1(4)M4?
View 3 Replies View RelatedI am in search of a 1 Gig Ethernet WAN module for 2900, 3900 series router.I want to terminate 230mbps link on this module.I found EHWIC-1GE-SFP-CU option but as per service provider it will not support to 230mbps link.
View 3 Replies View RelatedI would like to configure the policy base routing (PBR) on router (3900) base on the "specific tcp port" (TCP port 16255) to re-direct the traffic to another FE port.
From cisco web portal, CAT 4500 should support PBR as below:"Policies can be based on IP address, port numbers, or protocols. For a simple policy, use any one of these descriptors; for a complicated policy, use all of them." url...
Does 3900 router has the same features on the PBR? if yes, can it support "source tcp port" and/or "destination TCP port"?
I recently upgraded from a Cisco 3900 series router to a Cisco ASR1k router. Since the upgrade, I have internal clients who claim they cannot connect to external VPNs. These internal clients are behind a NAT that routes a public IP address to a group of clients with private IP addresses.
How can I ensure that all VPN traffic is able to pass through the NAT?
I have not done much with business routers, but we have a 1700 series with a WAN WIC-1ENET card with a RJ45 connection. We had a T1 line and will be moving to ehternet. We are going to be moving to a 20MB line, and i just wanted to make sure I have the right connections before installing. We also have a T1 line in another loaton and would be moving to this same 2811 router there as well.We would also like to copy over the configuration from 1700 series router to the 2811 router. Would it be easier to do it by hyper-terminal? Also if we keep the 1700 routers are they capable of using layer-3?
View 2 Replies View RelatedTransitioning from 3825 to 3945 (OS is 15.0(1r)M13 c3900-universalk9-mz.SPA.151-4.m4). Turning on FDL on the 3825 was easy but the same command on the 3945 doesn't work.
View 3 Replies View RelatedMy Cisco 3900 router is not taking the no auto summary command?
View 5 Replies View RelatedI've goggled and searched here, and I can't seem to find what I'm looking for. I need to make a couple changes to a clients Cisco 800 series router, enable ping replies add ip addresses to the ssh ACL.I can't seem to find any basic commands for CLI anywhere.
View 2 Replies View RelatedI know we can use copy & Paste, my questions are:
1. Before that, do I need to wipe out the existing confi on the brand new switch?
2. About using TFTP, how does this new switch connects to the TFTP? Does it mean I have to assign a real IP and put it on our network?
I was trying to configure my Catalyst Express 500 switch (PID VID: WS-CE500-24LC V01) and i followed the step i found in a document on Cisco website but still it showed an error "Page not found" and address displayed on bar was"169.254.0.1/catalyst-express.htm).
View 1 Replies View RelatedWe have been using a dhcp and tftp server to automatically configure branch WAN routers such as 1751's and 1841's for years but, have recently purchased a 1921 and 1941 as possible next generation replacements. The problem is when the 1900 series power up instead of getting a dhcp address directions to the tftp server it boots up and asks for the user name to be immediately changed or you will be "locked out". Any workaround to this so that I can again go back to download my common configuration? Or any other way of automatically configuring the newer version ios? Doing extra steps for 500 WAN branch routers is time consuming. Doing configurations without automation for that many is moving in the wrong direction.
View 1 Replies View RelatedI have a HQ with two branches, the HQ contains one 3900 ISR router with two WAN connections, the two branche sites each one contains one 2900 ISR wth two WAN connections for each router.
i need to establish a site to site vpn with GRE between the HQ and the two branches, so is it possible to
1-for HQ: i need to configure site to site VPN to the branches using the both WAN connections on the HQ Router like if one site to site vpn is down the other one will be on and works as High Availabilty.
2- same for the branch offices i want use both wan connections with HA in site to site vpn to the HQ.
3-using GRE for routing after configuring IPSEC VPN.