Cisco WAN :: Failover On Router 1800 Having DSL And Leased Line
Feb 4, 2013
Leased line is between dammam to dubai and the dammam office is getting internet from dubai.The ip address of Dammam office is class A (Public IP) x.x.x.x and for dubai it is y.y.y.y which we are using as proxy for accessing internet.I purchase the local DSL direct line connection through cable from Local Provider and this ip address range is 192.168.1.0 - 192.168.1.254.Is it possible to use the DSL line as failover, so if one line goes down the user should remove proxy and can use local internet.The router which is using is cisco 1800.
I believe that failover is possible, 100%, but would like to know how I can do it and requesting for sharing more inputs about failover in this case.
I am going to design one network. I had queries with this design.Let me explain scenario first( it was attached below).I have two sites, Site-A and Site-B, repectively.
In site-A i have one Cisco 1841 router, one Cisco ASA 5510 firewall and One cisco 3560 layer 3 switch. in site-B i have one Cisco 1841 router, one Cisco ASA 5505 firewall and One Cisco 3560 layer 3 switch.
From ISP side
I have point-to-point leased line between sites A and B. And both sites have internet connectivity from another ISP.
I planned to terminate leased line in cisco 1841 router in both branches for branch to branch connectivity.
I will configure site to site VPN between two sites, A and B.
Here my query was i want make VPN as failover connectivity if leased line fails. In both the cases, i need internet to the inside users in both sides.
Summary requirement:Leased line is Primary and VPN is Back-up, if leased line fails. In both cases internet is needed to inside users.
The reason is i want to know the difference between the leased line and the DSL line. The whole thing behind the confusion is, We plan to have a high speed internet connection in our office. We will don't have a branch office or some thing like that. I preffered to have high speed internet in our office. I found in some website that Lease line will have high speed connectivity(Upto 10Gbps). Can i use the lease line or DSL is enough for our office. Our office contains of 82 user who will use internet.
I have been given a task, where I need to create a failover setup from a 1800 Cisco router to a LAN network 2 hobs away (see topology).The reason I have been given this task is because the wireless links are not so realiably, but necessary.I'm thinking of doing this failover task with IP SLA on the routers fiber 1 and fiber 2 link, so when/if one off the links goes down, it instantly chooses the other link.I have also been thinking about implementing STP instead, and replace the router with a switch, but i'm not sure exactly how to implement it. Unfortunately I'm not able to test anything, as we are still waiting for the fiber lines, but I want to be prepared as much as possible.
my company has a 4mbps leased line from TTSL . we are getting 2 WAN IP and 2 LAN IP. in Addition we are also getting 12 additional IPs .-what is additional IP, their uses?-how are the 2 wan ips configured? & how they are distributed in network? -is 1 IP from the ISP sufficient if i have a 1:1 internet bandwidth connection?
I got following IP address from BSNL to configure Internet leased line.OFC cable was terminated at our premises. it has to connect Ethernet port.Say eg.Wan IP : 192.168.1.6 255.255.255.252Public address pool : 172.168.10.6 to 12if i configure one address on Ethernet port1 as nat outside 192.168.1.6 255.255.255.252.the ip address given for wan & pool are different.Then how can i configure pool and how to configure nat inside eg 185.168.10.1 to 255the above ip are not actual ips just given for example.
I have a cisco 2911 set up at one of my sites and it is configured with sub-interfaces as this provides a default gateway to each of the offices.I have just had a 100mb leased line put in and i have a couple of questions regarding the config.let me start by telling you how it is set up .I have 3 HP Procurve switches connected together then that connects to the Cisco and the Cisco connects to a Zywall
HP Switches > Cisco 2911 > Zywall > Internet
We are wanting to remove the Zywall and connect the Cisco to the Leased line box
HP Switches > Cisco 2911 > Leased Line > Internet
The config of the cisco is
G0/0 - is up but no cable connected as this holds the sub-interfaces G0/1 - Connects the Zywall - 192.168.1.1 (this has firewall rules to forward traffic through) G0/2 - Leased Line
The way i have configured the sub interfaces is with its own DHCP pool and default router, some of the offices have there own ADSL router and hold there own Internet connection and the default gateway for that is 192.168.xxx.253 and the offices that use the Cisco use default gateway of 192.168.xxx.254
Now my question is how would I move everyone onto the Leased line and get rid of the Zywall ? Would it be as simple as giving the leased line an address and put in a static route to forward all traffic through that connection ? Or am i missing a trick or 2.
I have two sites connected via 2901 routers to a head end with an ASA 5510, the WAN circuits are LES running at 100MB and at the head end we have a 100MB leased line. All WAN circuits are provided wires onlyby another supplier. I have setup the two 2901 routers with inside IP addresses on GE0/0 and a /30 subnet for the GE0/1 interfaces to the ASA over the LES circuit.
The LES circuits are set to 100MB but the problem I am having is that one of the 2901s will only negotiate at 10MBps Half Duplex with the ASA at 100MB Half Duplex, the other will negotiate at 100MBps Full Duplex at both ends. My WAN provider tells me both LES circuits are the same so I cannot work out why one will negotiate at 100MB Full and the other at only 10Mb Half.
At the head end I have and ASA 5510 connected to the WAN providers 100MB circuit but testing from my end sites I can only get 6MB download and 0.5MB upload on an Internet Speedtest.
I used Wireshark when downloading from my end sites and I can see lots of TCP retries and duplicates so I think this is a duplexing issue, my question is, my WAN provider is stating the issue is nothing to do with them and it is my 2901 and ASA that is at fault, they state if they connect a laptop to the LES circuit and then their leased line they get 100MB up and down.
I am a total new comer for Cisco Router. All I know is plug the console cable to a serial port on a PC, fire-up HyperTerminal to view and that's it. I don't know any command or scripts.
I am trying to setup my client connection, I already receive the required configuration settings from ISP. It is a Leased Line Serial connection.
How to setup the router with the below configuration.
Serial IP : 1.X.XX.222 Serial Netmask : 255.255.255.XXX LAN IP : 1.X.XXX.1 to 1.X.XXX.31 LAN Netmask : 255.255.255.XXX [Code] ....
I have configured cisco 1751 router for internet with nating. Internet browsing working fine. But We have polycom hdx 6000 conference system to connect from remote site.
1. While calling remote ip it is ringing and connecting but not displaying any thing on the screen but their side is displaying. 2. When they call our side ip it cannot connecting.
I have connected netgear router then video conference is working fine (with out port forwarding also). If I configured that router between 2 local sites (not on internet line) its working fine where i did not configured any thing just given routing. Configure same situation using internet leased line.
We have configured ASA 5510. We have configure Ethernet 0/0 ( Outside ) connected with ADSL line and Ethernet 0/1 ( Inside ) Local LAN. we have configured NAT and all the traffic is passing through outside interface. Now we have connected ethernet 0/3 ( leasedline ) interface with static public IP. Now we want to allow SMTP traffic to pass through from this interface.
How to configure it if we want our local lan SMTP traffic sending through new leased line ( Static Public IP ).
Site A, site B, site C, site D is connected using leased line each other. We are using Cisco 1800, 2800 and 2900. Each site also have Internet connection using ADSL connected to firewall, we are using pix 501 and ASA 5510.My question is, can i use the existing ADSL line to be use as a backup line if the leased line is down on any of the site??
And i want it to trigger itself, once the leased line is down, the firewall UP the backup line? something like that..
Site A, site B, site C, site D is connected using leased line each other. We are using Cisco 1800, 2800 and 2900. Each site also have Internet connection using ADSL connected to firewall, we are using pix 501 and ASA 5510.My question is, can i use the existing ADSL line to be use as a backup line if the leased line is down on any of the site??And i want it to trigger itself, once the leased line is down, the firewall UP the backup line? something like that..
I have an existing 1800 router that is using NAT and VPN to HQ. I now have a new ISP provider and so now i need to chane the Fastethernet1 IP address. I know how to do that but what else do I need to change to make everything continue to work?
I don't know much about routers, but lately I've been playing around with router configuration and getting better but I am kind of stuck now.
The scenario is this.
I have 3 ip net from the ISP: 178.249.51.0/255.255.255.248 Gateway 178.249.51.1 178.249.51.8/255.255.255.248 Gateway 178.249.51.9 178.249.51.16/255.255.255.248 Gateway 178.249.51.17
[Code]....
I am also wondering - when we get more public IP net from the ISP, is this the correct way to do it?
I'm troubleshooting an issue with a new site-to-site vpn setup between 1800 series routers. The tunnel is up but not encrypting traffic on one router, when IP CEF is disabled traffic is encrypted and decrypted!
I have the following network connected and configured to a single Cisco 1800 router.
VLAN 2 (10.1.20.0/24) | int vlan2, ip address 10.1.20.1 | Cisco 1800 ----- int fa0, public ip address ---- Internet | int vlan3, ip address 10.1.30.1 | VLAN 3 (10.1.30.0/24)
VLAN 2 is server vlan with a webserver. VLAN 3 is clients.
NAT configuration: VLAN 2 and VLAN 3 is using NAT to access the internet, and both is configured as inside interfaces.fa0 is configured as outside interface. Now I don't know if this is about NAT, but I've tried several things without luck.
Problem: A client in VLAN 3 tries to access a domain on the webserver in VLAN 2.It starts by sending a DNS query to a DNS server located at the ISP, and gets the ip address for the domain, which is of course a public ip address. Then nothing happens because the client tries to access the domain on the webserver using the public ip address, and the webserver have a local ip address 10.1.20.20 which is on the local LAN (VLAN 2).
I've tried NAT because I have to change the destination ip address, but I can't seem to get it right.
I will have this one router. Its f0/0 will be for the Internet connection with bandwidth of 30Mbps. Its f0/1 will be connected to a switch for internal networks. This link will be separated to 3 VLANs for 3 internal networks. I'm wondering if there is a way to gurantee 10Mbps for each VLAN but allow use up to 30Mbps when another two VLANs are not using any Internet bandwidth? I only worry about download bandwidth from internet.The 3 internal networks will all have public IPs and they belong to their own subnets. There won't be NAT/PAT.
I have configured PBR on my 1800 series router, it is working perfect. Now I am changing my router from 1800 to 2901 router with the same config, so the PBR stop working and I am not getting hits in the second WAN interface. [code]
Currently I have a 4510-48g HP3COM switch as a core switch for my 4 VLAN network (which I hope to send back cause it doesn't do what I wanted it to do... PBR, which is what I need to route specific VLAN's to specific interfaces on the sonicwall,.. cause sonicwall dont understand trunk or spanning tree,. meh!) This may not happen so I've dug out an old CISCO 1800 sdsl router that has 1 FE0 port and 8 other ports, FE 1-8.
The first thing I need to do is get everything to talk to each other. So I plugged the switch into it via its configured trunk port, and configured 4 sub interfaces on the router 1800 and all seemed happy as larry and working. The problem I have is I dont seem to be able to create sub interfaces on the other ports!?
We have 2.5 Mbps connection from an ISP at our branch routers (1800 series)with single physical link terminated on FE0 but have two subinterfaces with separate subnets.
I have applied the following policy-map outbount under physical Interface FastEthernet 0. Show poliocymap output is as follows
Policy Map QoS-OUT Class Email priority 512 (kbps) Class SQL priority 512 (kbps) Class File-Copy police cir 1024000 bc 32000 conform-action transmit exceed-action drop Class CCTV police cir 384000 bc 12000 conform-action transmit exceed-action drop
But it seems that sometimes( not all the time ) the CCTV traffic seems to exceed the 384k and chokes the entire link(2.5 mbps).
I apologize in advance if this is a novice inquiry, but our company just switched from Point-to-Point T1's to Metro Ethernet.
On one point-to-point, from our main office to one of our high profile locations, we had two bonded T1's. Now this site has a 3 Mbps Metro-E link, but it's being over-saturated. I don't know what type of QOS implementation our T1 provider had, but it prevented flooding. Now, I'm getting horrendous latency as the office peak hours approach since there is no QOS on the mesh by our Metro-E providers.
Ultimately, my question is: what's the best way to set a Fast Ethernet port on a Cisco 1800 series router to limit all bandwidth to 3 Mbps? At the moment, I don't have a preference in which traffic takes priority. I tried the rate-limit command, along with a speed calculator I found online, but that slowed the network down immensely.
I am new user of cisco router i can access the hardware and login in the account but the problem is if i use the command "enable" asking for a password, old I.T. personnel who setup this router already resign.
I recently formatted the flash drive of an 1800 router and replaced it with an updated image. However, the new features within the new image aren't reflected in the router. I believe that this is because a reboot would be required for the updates in the new image to be reflected in the router i.e. the image needs to be added to the system. How to get the image to the system without a reboot and if by doing so I would get all the new features from the image.For example, the show version below shows the old image in the system as [code]
