Cisco WAN :: Maximum ARP Cache Entries For ISRg2 1921 And 887VA Devices
Feb 23, 2011
We are looking to find the number of maximum ARP Cache Entries for 1921 and 887VA series Routers. Do they go upto a limit that memory allows, or is there a maksimum arp cache entry limit for both of the router types?
I have a FWSM cluster that I exceeded the maximum number of static nat entries on. i migrated the connectivity off to a pair of PIX 535's that seem to be handling the adderess translation needs. however the number of NAT entries being required is increasing and being the PIX series wal EOL'd several years back..I need to replace them.. The static 1-1 nat entries cannot be summarized into network as the hosts that are being nat'd are scattered all over various micro subnets in the all 3 rfc1918 ipv4 address ranges and they are being manged directly by snmp and SNMP-trap and other services that prohibit the use of many-to-one nat. Is there a mknown maximum number of static 1-1 nat entries that can be defined on the ASA 5515-x, 5525=x and higher ASA firewalls? Say I wanted to be able to grow to 2500 or more static 1-1 nat entries. I am currently running 2010 1-1 static host nats currently.
I'm looking into starting a file sharing server (think this is what its called) which will allow people to login into one of my PC's over the internet and download my files. My goal is to allow family members and friends to access my files and only specific files on this PC. The files could be family videos as well as pictures. Some video files will be in excess of 10gb along with typical jpegs and what not. I'll probably be running windows server 2008 on it. I'm also considering allowing people on some other forums that I'm a member on (cars, hobbies, ect) and allowing people to host vids on my server. My current IP provider is Comcast and I'm on a Dynamic IP so wondering how easy this is or if its recommended I get a static IP.
I' am looking for some articles that you'd recommend on this. I'd also like to have password protection / or login criteria so car members aren't able to view all my family videos, but can only log into some folder labeled (cars) and not my folder labeled family. Or another option would be that people have to login before they are able to even see what folders are accessible.For instance car members could only see car folders Family members could see anything stored on the PC?
I'm in router setting in 1921, I have 40 remote VPN group profile attributes, but I can only connect simultaneously at 30, I wonder if there is a maximum limit of groups configured on a router 1900 IOS
We have Cisco ACS 4.2 in our network and the accounting is done for 750-1000 devices and only for level priv-15.If i want to enable accounting for all levels from priv-1 to 15. All commands executed in devices are sent to ACS. Does the ACS can that much sessions from those many devices?Am also planning to configure acs remote agent to store all the accounting history.
My EA4500 with the latest firmware will only display nine connected devices at a time. It also seems to randomly shuffle which devices to show as connected, even though several more than nine are connected and online. Does anyone else's device list limit itself to displaying only nine devices? The Linksys phone apps also display a maximum of nine devices. I like the routers new user interface and understand that it has received a lot of praise, however this is the second bug I've experienced in as many months (the first being a failure of the device list to update once devices are upgraded to Windows 8, requiring a reset to default settings in order to fix).
I wounder if there is any way to ping the local deviceses connected to a network hosted by a Cisco 1921 router? I wan't to be able to ping the device(computer name) but currently cant do that.
difference of CISCO887VA-K9 and CISCO887VA-SEC-K9.I thought it because of the Advanced Security and Advanced IP Licenses, but it isn't, I've got the -SEC- Version now just with the Advanced Security license. So I asking myself why I bought the more expensive CISCO887VA-SEC-K9 if I have to buy the additional Advanced IP Services licenses extra..
I was wondering to understand if there is an specific license in order to enable NBAR2 in my ISRG2 892 with IOS 15.2(3)T. If not, what is the basic license I need to have for NBAR2 ?
We want to puchase new Cisco ISR 1921/K9 . i want to know does it support the following sample IP-SLA commands
ip sla 2icmp-echo 172.16.1.2timeout 500frequency 1ip sla schedule 2 life forever start-time now
track 10 rtr 1 reachability delay down 1 up 1 ! track 20 rtr 2 reachability delay down 1 up 1 ip route 0.0.0.0 0.0.0.0 192.168.1.2 track 10ip route 0.0.0.0 0.0.0.0 172.16.1.2 track 20
Im asking above question because we will need to enable ip-sla on the mentioned router. as i read on the cisco webside, it says Cisco-ISR-1921/K9-IP Base support only IP-SLA RESPONDER feature nothing else. If Cisco-921/K9 does not support the above commands , should i go for ordering Cisco-1921-SEC/K9 ?
We have created a sample configuration for ISRG2 2901 Router. The sample configuration is long, and with copy/paste it is possible to skip some lines, and it is difficult to ensure the configuration of every device is standardized due to this error possibility. What we are trying to achieve is first create a template from this sample configuration file, and then create configuration files for each device seperately and automatically. After creating this configuration instances, we want to be able to distribute the configuration files (and possibly the ios) to the devices during the staging phase. Since there are about 1000 2901 routers, creating configuration files is important?
From searching we have found the following tools:
1) CCE (Cisco Configuration Engine): This tool seems to be very efficient for distributing the created configuration files. We may use the serial number of the device, and it provides almost zero touch provisioning of the configuration files to the devices. Creating the configuration file from the template seems to be manual, i.e enter the ip addresses of the interfaces, the routing tables one by one for each device. How can we use velocity template for device configs?
2) Ciscoworks LMS Prime: It is possible to create a baseline template for the devices, and after getting the backup configuration of the routers, it is possible to compare the actual configuration of the device with the baseline template, and understand if there is any difference with each other. This is indeed very useful in order to keep the configuration standardized, we again could not find a way to create bulk configuration files from the baseline template.
3) Solarwinds Config Generator: This tool is useful for creating a configuration file from a template, but again not for automatically creating configuration files, and needs manual intervention.
4) Excel Macro: It seems that some people have achived to automatically create configuration files with using an excel macro, but we could not find a procedure or tip of how to achieving this.
5) Pearl or TCL/TK Script: Again since we are not software developers but from networking field, it is difficult to achieve a working form of this scripts or codes due to to lack of documentation and development experience.
If there is a router ISRG2 2900 with SEC license and without HSEC license, there is a limit in count of cumulative encrypted VPN tunnels of 225. Which commands can show us a number of current tunnels on the router, so we can see if we are near this limit of 225?
I develop websites, and we moved a site from one server to another, and now I get the message the site has moved. I ran the cmd to clear the dns cache, but that didn't solve the issue. I tried stopping and restarting the client, that didn't work. It was already set to automatic. I am logged in to my laptop as an administrator. I tried to be the user Administrator, but it doesn't appear as a choice, but when I try to change my name, I get the message it is already in use. I am using XP Pro, SP3?
I have to do ipconfig /flushdns from my Laptop to access my PC, on my local network, for some reason when the Laptop is booted up.After that all works like it should. I made a batch file to do that command during Windows start up. Is there any reason why I have to do this or is it just something quirky with Windows?Both computers have Windows 7 Pro 64 bit. Both use the same DNS servers.
If we have the following setup:Host A (IP :192.168.1.1, Prefix/length : 24, GW : 192.168.1.254) connected to the Router A on int Fa0/1 (IP : 192.168.1.254), Router A is connected to Router B, Host B (IP :192.168.2.1, Prefix/length : 24, GW : 192.168.2.254),connected to Router B on int Fa0/1 (IP : 192.168.2.254).Using the mentioned setup, after Host A pings Host B successfully, which entry will be in the ARP cache of Host A to support the transmission ?.
How do I clear my router DNS cache on my ZyXEL P-660 router?I already cleared it on my PC with "ipconfig /flushDNS" in the command line but everyone sees my online IP camera, except me my online IP camera on LIVEwhen I try to access the camera URL i go to the router default/settings/home page
Every 2 minutes, I want to clear it, because some machines will be turned off. Currently, they will stay on on the left hand side of my host's window explorer.
On my 1841 when i enter the "ip flow-cache timeout active 2" command it accepts this command with no errors. But when i look at my running-config this does not list.I did the same thing on my 2811's and 3745 and it shows up in the running-config. Should I assume if it doesnt' show up in my config file than it is not applied? How can I verify that it is or isn't?
I have a Cisco 2621XM router with two ethernet interfaces that sits before a vendor supplied VPN router. I need to see the IP traffic incoming to my router from the WAN side (fasteth0/1 below). I setup ip cef, and ip flow ingress on the interface. However -- it seems that what I see when I use "ip cache flow" command doesn't have a very long history or life. What commands am I missing so that I can see a summary of the stats over say the last 5, 10 or 15 minutes? Is this the best config that can be used for this, or can I create a more summarized report just using the router HW and IOS? Basic current configuration:version 12.3service timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hostname Littleboy!ip subnet-zeroip cef table event-log size 1024ip cefip cef accounting per-prefix non-recursive prefix-lengthip cef traffic-statistics load-interval 180!ip flow-cache entries 2048ip flow-cache timeout inactive 60!interface FastEthernet0/1 description Littleboy to vpn-wan ip address 10.1.0.1 255.255.255.252 ip flow ingress?
I've successfully integrated ACS 5.3 with Active Directory for 802.1x implementation. Now i want to cache Active Directory users in ACS so that the user request from ACS does not go to AD every time.
After a certain time period the ACS database gets sync with AD.
We have an ASR1006 and I'm just discovering net flow aggregation cache.
I tried prefix aggregation and worked fine. But i cant get any information when checking AS aggregation. All I get is 0 in source and destionation AS. [code]
I have a 510a Cache engine and the IDE hard drive failed. I installed a new blank hard drive, but I can't get it to boot off of the new hard drive. Currently, I moved the original to Disk 1. I switched the boot up disk to disk 1. I was then able to setup the new hard drive (in disk 0). Everything is functioning, but I don't want to keep the dead hard drive in there. How do I setup a boot sector on the new hard drive?