why I can't use cisco ehwic-3g-hspa-u card in cisco 2800 series and 1841 series router?documentation said that it should work with that devices but when I installed it, it doesn't work even as device i can't see I am using cisco latest ios advance ent. 15.1(4)M4?
i have one cisco router 2811 now its not booting normally.
Router was working without any problems but due to power loss router restarted and goes into rommon mode
I tried to boot from flash and usbfalsh with different images but no use router is in still rommon mode.
here the output of my router:
program load complete, entry point: 0x8000f000, size: 0x3117470 Error : compressed image checksum is incorrect 0x8E095E7F Expected a checksum of 0x8E0AE77F *** System received a Software forced crash *** signal= 0x17, code= 0x5, context= 0x80014e20
We have an MPLS network to a half dozen remote sites. At our main location we have a 2800 series router. In the routers config are the following lines for QOS. When I go to the routers on the other end of the MPLS, none of them are configured with these same policies. Would these not be in the running config of the 1800 series routers, or is this not setup correct and this should be removed?
Each time I enter show run on my router 2821, it takes ages to display and I have a cpu peak from the ssh process ( I am connected through SSH)
RTR-2821-01#sh proc cpu sorted CPU utilization for five seconds: 96%/21%; one minute: 34%; five minutes: 22% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 55 26948 814 33105 74.96% 16.92% 5.87% 323 SSH Process
I'm trying to turn off SSH version 1 & 2 to pass PCI compliance. Problem is, I cannot touch the VPN link between the two offices. I'm afraid the PKI certificate used for the VPN will be deleted if i zeroize the RSA key which seems to be the only way to stop the router responding on port 22.
Here is the stuff from the running config related to the crypto map: crypto isakmp policy 1 encr 3des authentication pre-share group 2 [ code].....
I'm only CCNA so I'm not even sure if the certificate or RSA key is being used for the VPN link, but I can't tell from the running config that zeroizing it would be a good idea and not break the VPN. I'm open to other ways of disabling SSH, as we are able to just connect using a console cable. But it looks like denying port 22 with an access-list doesn't even stop the router from responding to the port.
I have Router 2800 series Global nating is configured on it.
ip nat inside source list 111 interface Dialer1 overload ! access-list 111 deny ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255 access-list 111 permit ip 192.168.1.0 0.0.0.255 any
My object is that i want give internet access only for few users ip E.g IPs addresses from range 192.168.1.0-10 can acess intenet access other all are deny.How i do this with ACL .
i have Router 2800 series we are using leased line Connection 8 Pubilc IP.One IP Config in Router FE0/0 IP 101.102.148.91 and FE0/1 192.168.0.0 Local IP.I have 6 Web Server. How to Config other 7 IP address on Web server in the router 2800 series.
Is there a way to set static routes per VLAN?Example VLAN 100 sends all traffic to 192.168.1.1 and VLAN 200 sends all traffic to 10.1.1.1. (2800 Series RTR)I have 5 networks that have their own gateway to the Internet via satellite link. Those networks run over the same infrastructure on separate VLANs. They frequently send traffic to each other, which gets sent over a slow SAT link. I introduced a router to the network and would like to set all my hosts default gateway to the local routers sub-interface then have a static route that send all traffic that is not on one of my 5 networks back to that VLANs respective SAT modem to get routed out over the Internet.
I am trying to add WCCP to be configured for websense. My first option seems to be either purchase an IPServices license for the stack of 3750E switches, but i am thinking this will require us to license all three switches in the stack. The second option i am looking at is to do the WCCP configuration on the 2800 router we have on the edge. The problem is both Gig ports are in use, one going to the firewall and the second going to the ISP. My first question would be, which option is better in terms of manging as well as cost of implementing it.The second question is, if WCCP on the router is a better option, what is the add on module i should be looking to get to add the additional ports to hook up the Websense cache.
In a site we currently have 1 BT provided ADSL link which is currently terminated using their device which I believe is some kind of 2wire device, which is extremely slow due to distance from the Exchange (4Mbps)...We have a growing number of users here and want to install a second ADSL line from BT to give them increased performance.
We have a Cisco 2800 sat not doing much so I was wondering if I could use this to load balance the link? I know BT do not support MPPP so therefore the maximum any user can get will be the speed of a single link (4Mbps)...But basically how can this be done..
Can I leave the two BT routers in place and place the Cisco 2800 behind them, or do I need to purchase two ADSL modules for the 2800 and terminate the connection there?Also once done, what do I need to do regarding actually setting up the load balancing? I have seen this:
[URL]
But am unsure as to how relevant it is? I am not sure I understand what the ACL's are being used for? I just want all users on the LAN to load balance out...
Also I am unsure of this statement:You potentially need to add policy-based routing for specific traffic to ensure that it always uses one ISP connection. Examples of traffic that require this behavior include IPSec VPN clients, VoIP handsets, and any other traffic that use only one of the ISP-connection options to prefer the same IP address, higher speed, or lower latency on the connection.I do not understand why a established session such as a VPN client, would ever traverse the second ISP connection anyway?
I have a 2801 running c2801-spservicesk9-mz.124-3g.bin According to the Cisco IOS MIB locator the image supports OLD-CISCO-SYSTEM-MIB I have tried .1.3.6.1.4.1.9.2.1.55 etc to set server IP address and the filename string but without any luck.e.g.
Reason: (noSuchName) There is no such variable name in this MIB. Failed object: iso.3.6.1.4.1.9.2.1.55.a.b.c.d (where a.b.c.d is the server IP)
I have also tried the method similar to that for Cat 3550 switches where you create a table of entries to define the transfer paramaters then activate the transfer (I think the CISCO-CONFIG-COPY-MIB)
Clean up at the end - destroy .14 with the value of 6.
example output : - -- earlier output omitted -- Error in packet. Reason: (noSuchName) There is no such variable name in this MIB. Failed object: iso.3.6.1.4.1.9.9.96.1.1.1.1.4.111 Error in packet.
We have recently implemented Windows Deployment Services on our local network, but everytime we do a multicast image deployment the network get flooded to point of total saturation.
We have Netgear switches and a Cisco 2800 series router. IGMP Snooping has been enabled on all Switches, however, we are unsure on how to implement multicasting on the router.
The whole network is flat - no VLANs over than the default VLAN1. We only want multicasting to work within our local network and does not need to go out the other side of the router as that is the connection to the internet.
How to get the Cisco router configured properly to enable multicasting to not flood the network. It seems that even if we were to image 4 PCs using multicast this is enough to completely get the network flooded.
Also, am I right in thinking that IGMP needs to be enabled on all of the Switches?
I just read the Removing and Installing CompactFlash Memory Cards in Cisco 2800 Series Routers instructions and there was nothing said regading powering down the router. Are these CompactFlash cards hot swappable??
What's the main technical differences among the 1140 AP series and the 1260 AP series?I know that the 1260 supports external antennas while the 1140 supports internal antennas, but apart from that, is there any other important difference ?
My Draytek 2710 just dies after 2 years so I was looking for something a little more reliable and noticed the spec of the SRP527W-U.I take it with only one antenna and reading a couple of past discussions, the wireless will only manage n-lite as some people call it i.e. 150Mbps, and not the full 300? Oh, and are the ports still only 100M and not Gig?I know the 547 would tick both these boxes but we are talking twice the price. How does the quality and logevity of the SRP500 series compare to the RV series (which would need an adsl modem) or the Linksys boxes?
I have not done much with business routers, but we have a 1700 series with a WAN WIC-1ENET card with a RJ45 connection. We had a T1 line and will be moving to ehternet. We are going to be moving to a 20MB line, and i just wanted to make sure I have the right connections before installing. We also have a T1 line in another loaton and would be moving to this same 2811 router there as well.We would also like to copy over the configuration from 1700 series router to the 2811 router. Would it be easier to do it by hyper-terminal? Also if we keep the 1700 routers are they capable of using layer-3?
I have two CISCO 2800 routers tied together over a Metro Ethernet bewteen an HQ location and a Colocation facility. There are multiple subnets on both sides of the MAN. All things work in this regard.
I added two new Interfaces to the routers to create a VPN failover should the above MAN go down. I use IP SLA to track the MAN, then move to the VPN route when reachability is down.
I can source ping from one CISCO router Interface to the other, through the two interfaces to the Sonicwalls and reach the router interface of the CISCO on the other side of the VPN tunnel.
Problem: I can not ping any subnet behind the interface I ping through the Sonicwall VPN tunnel?
Example 2800 G0/2 interface 100.1.1.41 /30 through Sonicwal over Internet to other Sonicwall and out ot the G0/2 100.1.10.41 /30 interface on the other 2800 router. Ping is fine.
I am having an issue with a VPN tunnel in that we can only establish this from the VPN 3k side to the 2800 and not from the 2800 to the VPN 3k , the setup is as follows: [code] I am awaiting the logs from the VPN 3k but here is the debugs from the 2800. [code]
we have anew office and have a 2800 router as a WAN router it has a 3G card and a DSL link. We have a ASA which has to be configured to 2800 router. we want that ASA shd have a VPN link with pirmary site over DSL if DSL fails it shd automatically fall to 3G....what we really need and how it would be done interims of IP addressing do we need any special IP from service provider.?
I have a Cisco 2800 router. I have been noticing a lot of traffic to Pandora lately. At times my pipe is 25% music streaming and my router utilization can be quite high. Our web filtering is a hosted service that does not block all traffic depending on some of the ports. It is really designed for port 80 and 443 only.
We decided we want to block access to Pandora completely on both our primary internal LAN's and our Guest wireless LANs.
When I perform the ARIN lookup, I get these results for the IP range:
The CIDR notation does not make sense to me entirely. The IP range includes 8 class C networks. The /21 is a class b subnet of 255.255.248.0 or a router broadcast address for routing tables (depending on how you want to look at it). I was not sure if I could block the address based on the router CIDR range of if I had to use the individual classful IP ranges.
Should I block "208.85.40.0 0.0.7.255" in my ACL or should I create 8 entries to block the networks like this?
I am operating a 2800 series Cisco router. The router is working fine except that I am not able to SSH into the router. I have checked the running config with cisco's documentation and every line is correct. Prior to me getting this job they did an update and think they have corrupted the a certificate key for SSH.
Any command to generate just the SSH key and not all the other keys that would cause bigger connection issues.
I have 2 2800 series routers configured the same, but with different subnets. One works fine, the other the client can't obtain an IP, and hardcoded, cant ping.
I ran DHCP debug and I can see the router assigning the IP, and I see and ARP entry that matches the MAC of the client.