Cisco WAN :: L2L VPN / 3640 With IOS 12.3(16) - Unable To Recognize Crypto Commands
May 23, 2013
I have a Cisco 3640 router with IOS v.12.3(16) It does not recognize the crypto commands.
#sh version Cisco Internetwork Operating System Software IOS (tm) 3600 Software (C3640-I-M), Version 12.3(16), RELEASE SOFTWARE (fc4) Technical Support: [URL] Copyright (c) 1986-2005 by cisco Systems, Inc. Compiled Tue 23-Aug-05 20:03 by ssearch Image text-base: 0x60008B00, data-base: 0x60D36000
ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1) ROM: 3600 Software (C3640-I-M), Version 12.3(16), RELEASE SOFTWARE (fc4)
router01 uptime is 3 hours, 43 minutes System returned to ROM by power-on System image file is "flash:c3640-i-mz.123-16.bin"
[code]....
View 5 Replies
ADVERTISEMENT
Jan 13, 2013
I have just received a new cisco 2901 and started on its configuration. when I started configuring VPN tunnels, I saw that non of the crypto commands are available.
The router runs on iOS 15.1.From what I read, people refer that the router needs to past a license activation or something like that. When I run show verison - i do see "none" under most of the categories.
View 6 Replies
View Related
May 13, 2012
i have configured a cisco router with the following configuration to practice obtaining certificates from a microsoft 2008 server configured as a stand alone CA.this part works okay but what i am trying to do next is giving me a headachei am trying to delete the identity certificate but am having no luck whatsoever
interface FastEthernet0/0ip address 192.168.2.1 255.255.255.0ip nat outsideno shut
interface FastEthernet0/1ip address 192.168.1.1 255.255.255.0ip nat insideno shut
access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 102 deny ip 192.168.1.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 102 permit ip 192.168.1.0 0.0.0.255 any
[code].....
i entered the following commands on the router to delete the certificatebut as you can see its telling me the certificate dosn't exist(this method of deleting the cert has come from Richard Deals complete cisco vpn configuration guide) 3Purley(config)#crypto ca certificate chain PurleyPurley(config-cert-chain)#no certificate 61E0446A000000000002% Certificate not found.ps the router is a 3640 running c3640-jk9o3s-mz.124-7.bin
View 1 Replies
View Related
Mar 14, 2012
I have configured the TACACS in my network and I have configured the aaa authorization commands 15 default if-authenticated group tacacs+ in Cisco 6504 Switch. Its allowing me to Login by Unable to run the Sh run commands ,i am getting Aithorization error emssage. If i am checking sh Privillage its showing level 15. Same configuration fine in other device with out issue.
View 2 Replies
View Related
Mar 24, 2013
When i enter configuration mode for ATM any DSL commands are not recognized. Believe i have the right IOS.
.ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)System image file is "flash0:c2900-universalk9-mz.SPA.151-4.M4.bin"Last reload type: Normal Reloadversion 15.1service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Router!boot-start-markerboot-end-marker!!no aaa new-model!
[Code] .......
View 2 Replies
View Related
Oct 11, 2009
Unable to enter global QoS commands on the 4500E chassis? We're using 12.2(53)SG. If I go to 'conf t', there is no 'qos' command. In the configuration manuals I've seen for the 4500, the following commands seem to be supported:
qos
qos trust dscp
qos dbl
qos dbl exceed-action ecn
qos map dscp 0 to tx-queue 2
qos map dscp 8 10 12 14 to tx-queue 1
qos map dscp 16 18 20 22 to tx-queue 4
qos map dscp 24 26 28 30 to tx-queue 4
qos map dscp 34 36 38 to tx-queue 4
[Code] .....
View 3 Replies
View Related
May 31, 2011
When installing the DIR-615, router installs, but error msg that there is no internet connection. SmartConnect is plugged into the WAN and I have tried the ethernet cable to the computer in spots 1 & 2. Good connection when SmartConnect modem is connected to computer directly.615's Internet indicator will turn green for a while, usually less than a minute or two, then flashes, then may actually cause the routers status indicator to flash off, then back on. Like a reset.
View 2 Replies
View Related
May 11, 2012
I have recently installed a new wireless network in my home. All my internet devices (Laptops, PS3, iPad etc.) have been able to acess the new network but my old Dell XPS 600 with its Dell 1450 wireless card cannot "see" the new network. When I refresh available networks in wireless connections the old XPS 600 can see various networks (neighbours etc.) but cannot recognise the new network even though its working fine with my other PCs
Do I need to upgrade the Dell 1450 wireless card ? If so what am I missing - what requirements do I miss? Which card should I buy?
View 3 Replies
View Related
Jan 28, 2012
I am unable to get my E2000 router to recognize my Ipad2 when trying to connect.
View 2 Replies
View Related
Jan 15, 2012
One moment the laptop was using the wireless connection from the router in our house and the next it lost internet access and then wasn't able to recognize the SSID or connection at all on the available wireless connections. We have reset the router and restarted the laptop countless times yet the only internet access we have is on the computer the router is hooked up to.The wireless connection works neither on the laptop nor the Wii, both previously works merely hours ago and with no problems until now.We assume there is an issue with the router itself, whether it be a loose ethernet cord (which only faintly can be moved in its place).It's almost as if the router is stopping them (Wii, and laptop) from having access. When we explore the wireless internet properties on the laptop, it shows the wireless connection, yet only there and doesn't give access to it. Could it be the router, or could the company have restricted WiFi only to the computer it is hooked up to?
View 1 Replies
View Related
Feb 25, 2013
I'm looking to upgrade the iOS on a Cisco 3640 to the last supported level, 12.4.25, and then see what I can make it do.
I'm understanding that the only way to acquire a legitimate copy of the appropriate iOS version is to pay for a service contract, even though I won't need any other service provided for it.
View 3 Replies
View Related
Apr 1, 2013
when dealing with NATing with port fowarding from a specific IP range on the outside to a inside IP address. Here is what I have now:Cisco 3640 WAN Router: [code]
which ofcouurse did not work and ASA did not respond to 443 on either Anyconnect or HTTPS. Nothing showing in"show ip nat translations" for the incoming traffic from “ip nat outside source static tcp 15.236.10.0 192.168.4.2” and “ip nat inside source static tcp 192.168.4.2 15.236.10.0”
View 1 Replies
View Related
Oct 24, 2012
We have a location that currently has one frame T1 and 4 point-to-point T1s. We are looking at adding a second frame T1 to be bonded with the first. Currently, we have an old 3640 router, so I am thinking this would be a good time for an upgrade. Cost is a concern, so I am hoping to buy something refurbished that is newer than what we have now but is not going to cost a ton as buying new would. My thought is either a 2821 or 2921 with 2 HWIC-4T1/E1. I am not familiar with this HWIC just wanting to make sure this a good solution for our situation.
View 8 Replies
View Related
Feb 8, 2012
I have two routers I am trying to connect via the WIC-2T port. I can ping from router to router, but not from my PC (192.168.2.122) to the 3745 (10.0.1.3)..
3640:
Current configuration : 1846 bytes
!
version 12.2
[Code].....
View 15 Replies
View Related
Jul 19, 2011
how many NM-32A or NM-16A module can be installed on 3745 and 3640 routers?
View 1 Replies
View Related
Jun 27, 2011
i have a cisco 3640 router that i have deleted the image without saving and the router is in ROMM mode i wish to use tftp to download the image
View 2 Replies
View Related
Apr 28, 2013
I'm using 3640 router running on c3640-js-mz.124-25d.bin IOS. I'm using NM-1A-OC3SML= (ATM OC3, long reach single mode) interface card. Now my pc is connected an fast ethernet interface of the router. Need to know the ATM configuration on this cisco 3640 router in order to achieve the ATM over ethernet traffic get success. As of now i've confugred as below but it's not working it seems.
interface ATM2/0
bandwidth 120000
ip address 10.2.2.1 255.255.255.0
no atm ilmi-keepalive
pvc 0/36
protocol ip 10.2.2.10 broadcast
cbr 70000
encapsulation aal5mux ip
let me know the correct encapsulation type for the connectivity.
View 2 Replies
View Related
May 4, 2011
I have a NM-4A/S serial network module which I suspect is having problem on a Cisco 3640 router. Is there a way which I can test the async ports out without connecting to any other devices? [code]
View 2 Replies
View Related
May 14, 2011
I have been confronted with an issue recently with two of my 3640 series router reloading endlessly.Initially i thought it could be a matter of MEM not well seated, but unfortunately it wasn't the problem.i have attached the gibberish produced when these routers are booted up.Be informed as well that these devices are loaded with max MEM.
View 1 Replies
View Related
Oct 17, 2011
i have 2 x T1 terminating on border router cisco 3640 route. (configured using multilink interface). Our IP block is routed on this bundled T1 circuits by At&T. I want more internet bandwidth.
1. Can i connect my DSL (on ethernet interface and using static DSL IP) on the same router and confgure two static routes to internet - one to multilink interface and other to ethernet interface (connected to DSL) ?
2. I have many servers using static NAT to external IPs which are routed on T1 circuits. Will it get into issues when communicating to outside? [for example my exchange server, websites etc?
View 6 Replies
View Related
Sep 23, 2012
The Cisco 3600 series (3640) is hanged during booting proccess, the IOS is decompressed, but after some text it hanges and I even cannot go to user exec. ROMmon and bypassing the config setting, but the result is still the same.
View 5 Replies
View Related
Mar 21, 2013
I got this 3640, trying to apply a service-policy (output and input), but seems like I do it something wrong...because he only apply the output policy... here the config, I already try to config the service police inside the fa0/0, but is not showed at all, he only show the output, its like I never apply that
View 1 Replies
View Related
Apr 8, 2013
I got some unexpected System crash, and this happens to 2 different routers on the same network.. (We suffer a Crash and change the router, happens the same to the new router after some time, maybe 40 minutes!!)
Here is the last console report for the new router....
%Software-forced reload
Preparing to dump core...
4w1d: %SYS-2-WATCHDOG: Process aborted on watchdog timeout, process = IP NAT Age
[Code]....
View 3 Replies
View Related
Nov 1, 2011
We have a Cisco 3640 router running c3640-is-mz.123-3g.bin Switching ports are devided into several VLans. Each VLan has its own IP subnet. We can't ping IP address X in subnet A from subnet B unless we log into the router and ping it from there first. (and then the IP address will show up in "show ip arp" command. Then we can ping X in subnet A from subnet B, and browse web on device X from subnet B, etc. )
View 6 Replies
View Related
May 10, 2011
So apparently the 3600 series do not support the tftpdnld to upgrade your ISO when you upgrade your flash. You have to use the Xmodem transfer as described here: Xmodem Console Download Procedure Using ROMmon [URL]. everything is going great but it is going to take another 3 hours.
Now when i installed the new flash at bootup it said the "device does not contain a valid magic number" now that is just because the flash is not formatting correctly and downloading the new flash file automatically formats the flash setup?
View 18 Replies
View Related
Oct 1, 2012
i am running c3640-is-mz.124-21.bin on a cisco router 3640. i am trying to create a monitor session in the CLI and everytime i type the command Router(config)#monitor session 1 interface ethernet2/1 % Invalid input detected at '^' marker. Router(config)#monitor session 1 interface ethernet2/1 ^% Invalid input detected at '^' marker. i get the error invalid input ?
View 10 Replies
View Related
Feb 8, 2011
I have a 3640 router with 4 Fast Ethernet Network Modules (1fe-tx, 1fe2w & 2fe2w-v2) and a Catalyst 2912 switch. I can not acheive a link between the 2 devices. All four will not get a link light and the interface(s) show no errors. If I plug the Router nic into virtually any other switch or workstation it works flawlessly. I put a switch between the catalyst and the 3640 and it works without error.
Steps I have tried...
1. Configure interfaces on both Switch and Router to Auto Speed, Auto Duplex2. Configure interfaces on both Switch and Router to speed 100, Full Duplex3. Try Both Crossover and Straight-Through verified working cables.4. Tried a second 2912xl-en switch
Both 2912 switches are factory defaulted, other then the changes I made to the speed and duplex to try to get them connected.Both the router and switches have been doing other functions (seperatlly) within our network for years?So my question is...Why is the NICs in the router compatible with every other vendor other than CISCO?
View 5 Replies
View Related
Dec 6, 2011
So I have 2 routers (cisco 3640) that each go to their own ISP and then back to the same switch. I have setup ospf and glbp, and now have pretty good redundancy. If either internet connection or routers go down everything is still golden.
So I was thinking that if an interface went down then the router would not be load balanced with glbp which got me thinking whats the best way to get interface redundancy (and I was going to add a 2nd switch with the second interface).
1) Setup BVI on the 2 interfaces.
2) Setup a 2nd interfaces (on each router), I would have to split the subnet, for instance: [code]then the machines could be on the subnet 192.168.0. 0/23 and setup glbp for 1 ip across all 4 interfaces (I'm not even sure if you can do this but think it would work).
3) Is there a way to utilize etherchannel or anything like this
A negative to option 2 would be that if 1 of the interfaces went down, all the sudden 2/3 (or so) of your traffic would be going through 1 router.
View 5 Replies
View Related
Feb 5, 2012
How to configure my serial modules on my 2600 and 3640? Each router has the WIC-2T with two cables connecting them. I tried to ping one router from the other, but no luck. Serial IP address I just made up, this is my home lab, so if I messed those up some how,
Here is the running config for each rotuer:
2610:
Current configuration : 1071 bytes
!
version 12.3
[Code]...
View 22 Replies
View Related
Dec 28, 2011
I have two routers at our core data center, a 3845 and a 3640. These are configured with GLBP. There are 4 remote sites:
Site #1: One T1 link to the 3825
Site #2: One T1 link to the 3825, and One T1 link to the 3640
Site #3: One T1 link to the 3825, and One T1 link to the 3640
Site #4: One fractional T1 link to the 3825, and One T1 link to the 3640.
My question regards site #4. If i understand correctly, GLBP works on the premise of "host" balancing, and not true "load" balancing. The reason I ask is that the large majority of our WAN traffic is from our Exchange server to our remote sites. In the case of site #4, our exchange server is sending traffic on the fractional T1. Is there any way with GLBP to either split this traffic from a particular host across two links in a round-robin fashion, but leave other hosts to travel wherever the router sends them, or, to force at least our exchange server to use the full T1, rather than the fractional?
I've read up on the weighting mechanism, and it appears that tracking an interface has nothing to do with bandwidth use. If I understand correctly, if I were to track the Site #4 PPP to the 3640, and give a weight of 10 to glbp on there, it would really only take affect if the interface is down. It will have nothing to do with host AVF election.For the record, exchange traffic is constant to this site, so there is no chance for the host connection to reset and potentially elect to use the larger pipe. I would like to "tweak" this to make better use of available bandwidth.
View 2 Replies
View Related
Jun 25, 2012
I have the cisco 3640 with IOS Version 12.2(46) , and it with DRAM:32M , Flash:8M.What IOS version can support IPv6 RIP in the hardware limit?
View 3 Replies
View Related
Mar 7, 2011
I have this situation, I need to establish an IP sec communication to another site but I need to identify all my packets sent, as a different networks as my local one. for example: my local network is 10.5.0.0/24 and I need to sent packets as 10.6.0.0/24. I suppose that I need to do Nat with this IPs. But in this router Nat is already applied to outbound traffic to Internet. How can I apply this NAT to crypto map only?
My router is a Cisco 877 with 12.4 IOS an this is the relevant configuration, crypto map vpn it´s used to sent traffic to second site.
crypto isakmp policy 2 encr 3des authentication pre-share group 2crypto isakmp key xxxxxxxxx address XX.XX.XX.XX
crypto ipsec transform-set vpn esp-3des esp-sha-hmac
crypto map vpn 1 ipsec-isakmp set peer XX.XX.XX.XX
[ code]....
View 2 Replies
View Related
Jan 11, 2013
I'm trying to get several VPN tunnels up. It seems that only 1 map can be assigned to the WAN interface (fa4). Is this true or is there an 'extended' map like ACLs?
View 1 Replies
View Related
