My HO is connected to BOs over MPLS Links.The links are terminated on routers but i dont have access on those routers as it is maintained by the ISP.Behind of the HO router there is s 3560 switch. Can i configure this switch to prioritize some traffic over the WAN link to the BOs.
View 4 RepliesI Do want know what could be best Device to prioritize Skype Traffic i mean should i implement it on Cisco 3560 or squid or Mikrotik according to my current scenario to get best result.Also do Let know how to Prioritize Skype Traffic in Cisco 3560 Switch
View 2 Replies View RelatedI need to prioritize voice traffic through the ASA
priority-queue outside
tx-ring-limit 200
queue-limit 2000
Do the above values look correct? and why is the priority queue applied to the outside interface and not the inside? (or both). Also is this the part that ensures that the regular traffic does not choke the voice traffic?
class-map voip-class
match dscp ef
policy-map outsidemap
class voip-class
priority
service-policy outsidemap interface outside
Will the global policy remain which this interface policy taking priority?
We have 2mb mpls network between three sites. Each site also has its own internet connection for hosting webserver and internal users to access internet. Each site has a few internal subnets. Each site currently has a 2800 series ISR.
1) Increase Internet connection to 10mbps and configure site-to-site VPNS in a mesh configuration so that each site has a vpn to each other site. This would create six vpn tunnels.
2) Configure so that only Exchange and VoiP traffic use the MPLS network under normal conditions. All other traffic (backup/misc apps) should be routed to use the Internet VPNs. If the MPLS fails of course we would like the Exchange and VoiP traffic to fail over to the VPN connections as well until the MPLS comes back up.
We need to give TCP 3389 & 3399 priority over all other traffic between a Cisco 1941 and 2951.What is needed to do this?
View 6 Replies View Relatedwe're looking to use an ASA5505 or 5510 as our firewall but want to see if one of them can prioritize traffic. I know it does QoS but we're wanting to dedicate x amount of our bandwidth to traffic based on destination IP address. Is that possible and does it take a license upgrade?
View 3 Replies View RelatedIs it possible with a 3560 to block all traffic to a certain vlan except for one or two IP addresses? Create an ACL or something? We have a vlan for voice calls (SIP) and we are getting a lot of scnas that are making the phones ring and such, and I think we can stop this if we only allow traffic onto the vlan from the IP's the SIP traffic is SUPPOSED to be coming from.
View 1 Replies View RelatedI would like to properly configure my L3 to support iSCSi traffic. My L3 acts as an internal router between 4 different sub nets.
I have a iSCSi SAN on my network. A Windows server has Microsoft iSCSi initiators connecting to the SAN.
I am using Cisco 3560 as distrubution switch and want to limit port 445 traffic on 1 MB and applied rate limit statment on Gi0/1 port but switch unable to limit said traffic.rate-limit output access-group 120 1024000 128000 128000 conform-action transmit exceed-action drop.
View 25 Replies View RelatedAt one of my field offices I want to redirect internet traffic down a separate DSL connection instead of having it ride the T1 back to the main office then going out. At this office I have a 2600 router, 3560 switch, with a Fortigate firewall in between DSL connection and LAN, Fa0/0 on router and firewall are both plugged in to switch. I have seen posts that mention PBR or static routes which is the reccomended method for dealing with this?
View 6 Replies View RelatedWe have 3560 switch with following IOS. version 12.2(55)SE3 and image name is C3560-IPSERVICESK9-M. On one of the interface we need to know what are traffic is flowing.
Do we have "ip nbar or ip route-cache" support on this switch IOS? Is there any other way to find out which protocol traffic is flowing through that interface.
i have to restrict that router and switches shall join only given multicasts. Means if i change multicast in TVG430 from 239.0.96.1 to 233.0.96.1 than it shall be blocked.My TX rate i set to 20 Mbits on TVG430, i want to rate-limit it to 15 Mbits on switch on Ingress int gi 0/23 or egress gi 0/24 included are three show runs output.ip multicast rate-limit out group-list GROUP source-list SOURCE.
View 2 Replies View RelatedI have a 3560 switch where I have 4 ports connected, one is to our WAN provider - 10Mbps and the other three are connected to different customers who I want to get an equal share of the 10Mbps bandwidth.I'm fairly clued up about configuring modular QoS but I'm being thrown by the fact that you can't apply a service-policy outbound on the ethernet ports.
View 3 Replies View RelatedHow do I limit broadcast/mulitcast traffic on a switchport to e.g. 5000 pps ? I don't want the port to shut down, just block or drop broadcast traffic that exceeds 5000 pps.
View 19 Replies View RelatedWe are in the process of rolling out iPads to our offices. As part of this implementation, we need to print from the iPads to our network printers. Our network printers are mostly HP and Xerox and do not have native Apple AirPrint capabilities. As such, we have been using the FingerPrint software to share out the network printers as Apple AirPrint printers. We have a mixture of switches at our offices. Most offices utilize a 3550 PoE switch. In these offices the AirPrint traffic is being transferred successfully and everything works great. In the offices which are using 3560 PoE switches, the traffic is never seen at the iPads. We are using EnGenius EAP300 access points connected into the Cisco switches to provide wireless access to the iPads. Both 3550 and 3560 switches are running iOS 12.2(25). What might be stopping/blocking the AirPrint traffic on the 3560 switches?
View 3 Replies View RelatedI use WS-C3560G-24TS and try both ios 12.2.50.SE1 and 12.2.46.SE but problem the same. The config as following,
interface GigabitEthernet0/1
no switchport
ip address 1.1.1.2 255.255.255.0
[code].....
but I find the int g0/1 output traffic only can achieve about 500kbps then I try config below,
interface GigabitEthernet0/1
no switchport
[code]....
I find int g0/1 output traffic only can achieve about 5Mbps,but if I change "srr-queue bandwidth limit xx" command xx to 20-90,the int g0/1 can achieve normal traffic bps, for example,
interface GigabitEthernet0/1
no switchport
[code]...
the int g0/1 output can achieve 2Mbps that is correct,just only when limit set to 10%,the traffic only can achieve half of limit bandwidth.
i have a 3560 connecting to a sp with limited bandwidth. i have one interface on the switch whose traffic i do not want to drop. i want this traffic to go into the high priority queue. i am not sure how this should be configured, but here is my best guess and my current qos configuration on the switch:
qos map cos-dscp 0 8 16 26 32 46 48 56
mls qos srr-queue output cos-map queue 1 threshold 3 5
mls qos srr-queue output cos-map queue 2 threshold 1 4 6 7
mls qos srr-queue output cos-map queue 2 threshold 2 3(code)
since cos 5 is mapped to dscp 46 then this traffic would go into the priority queue. is this correct ?
We want to get L2 traffic amount (bit/byte) passing through a cisco switch (6500/3560 ...) for a specific VLAN. it can be via SNMP or CLI ...How can we do that?
note: there is no L3 interface on swtiches.
So im sharing my internet with 3 other people in my family... 1 for each of my brother's computer including me.How do i set my game fuel so that i ave highest priority on internet? haha im tired of gaming and them laggin me up when i play games xD
View 1 Replies View Relatedi have a strange issue with an HSRP Setup. I have two (S1+S2) 3560 as Core/Distribution Layer. Inter-vlan routing are enabled on both Switches. S1 and S2 are connected with an ether channel over four fibre ports. S3 -S5 are the (L2) access layer.
Gi0/1 on S1 and S2 are L3 ports, connect to a Linux Firewall.
HSRP is enabled, S1 is the active router and the STP root bridge.
But, my monitoring via cacti show me, that the Gi0/1 on S2 is active, too! But it should not be active? Only if S1 fails, should S2 the active switch.A client from the access ports on S3 - 5 gets traffic from the Internet via Gi0/1 from S2. Gi0/1 on S1 is active too, but will send mostly traffic to the Internet. Why is S2 active and why route it traffic from the Internet to the client?
Advanced networking but have managed to get our small office IP PBX running over a SIP Trunk. The only real problem we are having is choppy outgoing audio when there is other heavy outgoing traffic on the network.
My understanding is that I need to set some QoS parameters, which I have played with but it didn't seem to be useful. I mostly dealt with allocating bandwidth. I now think I need to somehow prioritize the outgoing RTP packets from our PBX (which runs on a PC on our LAN) to avoid the choppy audio. My research shows this can maybe be done with something called DSCP 46 and my router does support that -- how to exactly set the configuration.
Our router is a Cisco rv180w.
I really am having troubling with my current router wrt120n and it is a dumb router that doesn't even know how to prioritize clients. A low priority client can still lag my gaming experience cause someone in my house is streaming videos. I need a router that isn't dumb and know how to prioritize connections and doesn't destroy my gaming experience.What would be the bestest gaming router out there?
View 1 Replies View RelatedI am working on Videoconferencing solution between two location. locations are now being connected through IPSEC site to site VPN. Since we are having a common internet link for VPN as well other corporate use we have to prioritize the internet bandwidth for Videconferencing. is there any way i can prioritise videoconferencing traffic by ports? following are the configs done on the cisco 2801 router with Version 12.4(15)T10.
!interface FastEthernet0/1description ILL_12Mbpsbandwidth 20480ip address 94.*.*.180 255.255.255.248duplex autospeed autopriority-group 1!
ip forward-protocol ndip route 0.0.0.0 0.0.0.0 94.*.*.*
!!no ip http serverno ip http secure-serverip pim ssm default
access-list 199 permit ip host 94.*.42.* host 78.*.*.130 ( VPN peer IPs both ends)priority-list 1 protocol ip high list 199
Interface status
===========(code)
I work in a small village in Africa and Interent access is often very unreliableTherefore I have 3 different ways of accessing the Interent from my home.The cheapest is Wifi from a local provider, but that doesn't always work. More expensive and still often unreliable is a 3G access. Then, when WiFi and 3G don't work I still can access the Internet via a Inmarsat BGAN satellite terminal, but that is very expensive.What I'd like do is to connect several computers to the same WiFi, 3G, BGAN Satellite Interent (all Ethernet) access via a home WiFi network.Now the questions I have:- can I just connect everything to a switch and then to the Wan-port of a wireless router?- how do the prioritisation works? When there is 3G available, I dont want to access the Internet via the BGAN, bacause that's too expensive?
View 2 Replies View RelatedI have a Desktop wired to my WRT120N. With this router being a wirless one, we have other devices (2 laptop and 2 iPads) conected to the internet via WiFi.The thing is, whenever I play an online game (specifically, League of Legends) my ping skyrockets whenever they use the internet.Is there a way for my PC to take priority in bandwidth over theirs? Or at least some way for my game to take priority over theirs?
View 4 Replies View RelatedWe have cisoc 2821 at one of branch and created five sub inetrfaces for different vlans.Output of Show interface shows very frequent increase in the input error count.I have changed the physical cable and switch port on the other side.But still error rate is increasing.When the traffic is less error rate is low but with high traffic it is increasing drastically.My router process is very less(4%) only.What could be possible reason. [code]
View 8 Replies View RelatedWe are looking to implement traffic shaping/policing primarily for P2P traffic. As natively the ASA5550 is only capable of p2p inspection if the traffic is tunneled via port 80 is the AIP-SSM the way forward? We have 2 5550s in active/active failover config. As a side note we are also looking to implement an IDS/IPS system so could this module cover all?Is this module going to provide the desired outcome or is there another module/device out there better suited for this? I would prefer to use the ASA5550s as opposed to implementing another product if only that we can make use of the investment we already made on these devices.
View 1 Replies View RelatedI am testing limit bandwith using my ASA 8.2, i am trying to limit internet access for certains users , i order to save Bandwith for the important things but i can´t get any limitation
My configuration is the following, the acces list is just for my pc in order to test, and the service policy is applied to outside interface (called internet in my case) for incoming traffic
access-list Internet_mpc_1 extended permit ip host 172.16.127.70 any class-map Internet-class-TEST match access-list Internet_mpc_1 policy-map Internet-policy-web class Internet-class-TEST police output 1024000 1500
service-policy Internet-policy-web interface Internet
With show service policy i can´t see any activity on the policy , but if i do a similar configuration for inside interface outgoing traffic i can see packets allowed and dropped
I have an ASA 5520 with the below config
Gi0/0: outside (Internet)
Gi0/1: inside (Internal users)
Gi0/2: DMZ (web servers, ftp, Mail etc..)
I have a SMTP relay deployed on the DMZ for mailing. I have also a mail servers installed in the internal lan,
I want to allow trafic from dmz to reach internal lan, and i want normally also allow stmp relay from dmz to reach Internet.
How can i block trafic from DMZ to reach Internal Lan (instead of smtp) if the to allow trafic from dmz to internet i must put ANY in the policy?
For allowing trafic from DMZ to reach Internet, the policy must be DMZ -----> ANY ----->Services., this policy means DMZ can implicity reach Internal Lan?
We have a Cisco 2811 running ITP IOS. On that router we run the SMPP service. A client on the network connects to this service, and we need to capture the traffic for debug.
I've tried traffic-export, but I cannot see any outbound traffic.I'm guessing that this is due to the fact that the outbound SMPP traffic is not transit traffic as it is generated by the router itself.
Is there any way to capture the outbound traffic?
I am trying to come up with the best way to traffic shape traffic with 3750 Me switches. the traffic will be coming from a 6504 Sup-7203b downstream and going out the wan. Core---L3---->6504--intvlan80--trunkport to--->3750Me---g/1/1/1-trunkport to---MetroE network--->int f0/0.80--branch router. The idea is to use the 3750 to traffic shape the traffic going towards the wan/branch to 500 to match the contracted rate and then to use qos on shaped rate. I tried to apply it to g1/1/1 using port based policies but it did not shape the traffic. I changed everything to IP interfaces and it worked. I need to break up the metroe into different vlans so I can bring branch offices in on different vlans.c
View 3 Replies View RelatedWe have a 3560 on our head office acting as an aggregare switch as well as Hub terminating remote wan links(one trunk link from provider terminated on FE port with several SVIs for remote location) and routing via OSPF. We have 1800 series at remote locations.
Now, If I want to prioritize say SQL traffic outbound from our head office to each remote brach I cant seem to do it with 3560 as it says... cannot apply service policy out blah blah.
How can I achieve my goal with 3560, Is it a good design to use 3560 as a Hub? our port utilization isnt that much..Wouldnt it be better to use 1800 or 2800 series?
We have cisco 3560G switch I need to configure QOS in this switch. video & vice Is it possible to configure port wise policy ?
View 1 Replies View Related