Doing a migration. During comparison of "show bgp nei x.x.x.x advertised-routes" between existing C7600 vs new ASR9K. Found that there were some r>i (RIB-Failure) route in C7600 doesn't flagged w/ r>i in ASR9K. Is it normal behaviour in ASR9K? How can I perserve r>i on ASR9K? Due to my IGP (e.g. AD etc) issue or ASR9K IOS-XR hidden config / default config issue?
View 5 RepliesI think change to c7206xvr G2's. Because I have got 2 GB active traffics. I will buy c7600 router. But I saw c7600 routers since 2001 for the referance guide. When is it c7600 router end of life time?How do I chose equipment?
View 7 Replies View RelatedI got connected ASA ----- ROUTER 2811) to metroethernet switch from my ISP , with a 4MB of bandwidth but the internet connections to all my LAN has been frozen and we lost connection to the internet, to restart the internet service I need to boot the ROUTER 2811 - and ISP switch to rollback the internet operation,My ISP support tell me if is possible to set up the traffic bandwidth in one or both borders devices, ( ASA 5510 or ROUTER 2811)
View 3 Replies View RelatedI have an 1811 as a border router. Initially we had one block from our ISP. We just got a second block of IP's and I'm not sure how to make this work.
Block #1 - Working
209.91.**.129-142 /28
Block #2 - Not Working
209.91.**.146-158 /28
The problem I'm having is block #1's gateway is 209.91.**.129 and block #2's is 209.91.**.145
How do I make it so I can use both blocks in my NAT entries?
I recently purchases new E3000. I setup the E3000 with static IP from border router rather DCHP which seemed to default to the same IP address and DNS. The laptops tied to the E3000 have their own IP's that are different from the IP of the border router. E3000 is configured with no firewall an minimal protection, for now. The reason for minimal protection was to get the handshaking to work between the two routers. The border router is a Verizon product. The old router that I was using is a Netgear that did handshake with the border router. I have the latest firmware for the E3000 namely Firmware version: 1.0.04 build 6. Router will not handshake either with wired or wireless connections. Laptop used to connect to the E3000 is running Windows 7 Ultimate. In fact all laptops here are using the same OS and connect using wireless. I tried the included software package from the website, which housed a diagnostic that apparently couldn't fix the problem as well. I don't have clue as to the reason for E3000 not to handshake with the border router.
View 3 Replies View RelatedI'd like to establish a more robust border router/switch redundancy plan and would like to know if this seems like it would be reliable.I'm looking at using a couple of 3945 routers and 3750 switches in the configuration shown below.
The article found at [URL] outlines the config between a single switch and router but I am looking at doing this with dual routers and switches.
I am currently deploying Cisco ASR9K BNG solution and it needs to be integrated with a Cisco ACS 3.3 (yes that old .. going to migrate to new product in the future) equipment. There are several specific attributes need that are not on the base config of the ACS 3.3 but it seems that i can configure them manually:In addition to supporting a set of predefined RADIUS vendors and vendor-specific attributes (VSAs), Cisco Secure ACS supports RADIUS vendors and VSAs that you define. Vendors you add must be IETF-compliant; therefore, all VSAs that you add must be sub-attributes of IETF RADIUS attribute number 26..This is from the ACS 3.3 configuration manual.I have never done this user defined VSAs.
View 1 Replies View RelatedI need to adapt a Cisco Catalyst switch configuration into a new ASR9000 router and I do not know how to configure trunks and access ports on an ASR9K router.
This is the configuration of the catalyst switch I want to replace.
interface GigabitEthernet1/0/1
description Access-Port -> SERVER
switchport access vlan 5
spanning-tree portfast
!
[code]....
Am I right? Or do I need to use the command “rewrite ingress tag pop 1 symmetric”on any of the interfaces o subinterfaces? Do I have to configure the command “encapsulation dot1q untagged“ on the GigabitEthernet0/0/0/0.5 subinterface?
I want to know, if it is possible to create multiples BGP AS Numbers on a ASR1K6 Router or ASR9K6 Router.
View 3 Replies View RelatedI have two router Cisco 887 with vpn site-to-site:
Site A:
crypto isakmp policy 1
encr 3des
authentication pre-share
crypto isakmp key ********* address 85.34.AAA.AAA
!
crypto ipsec transform-set strong esp-3des esp-md5-hmac
[code]....
I want to remove VPN configuration from the router and put VPN Configuration on Cisco ASA 5505.The scheme would be: ASA5505(vpn site-to-site) -> 887 -> INTERNET this for both sites.My problem is that I do not know what ip put on interface Outside of firewall. For example on Site A delete all VPN configuration from 887 and leave only ATM0.1 point-to-point, on intereface Outside of ASA put ip of loopback(of router 887) and as default route 85.34.2.XXX. Right?
I have an installation of a new SMU on an ASR9k. Unfortunately, a previous install from a remote FTP source has stalled at 1%. The router is currently running v4.2.1, and the stalled installation was for a 4.2.0 SMU.
View 1 Replies View RelatedInventory in CiscoWorks with new devices ASR9K Series is not working. CW version: LMS3.2.1. Device: ASR-9006 AC Chassis. Credentials correct. Screenshot1: inventory request fail.
View 8 Replies View RelatedI need to replace an ASA with an IOS firewall router, and am not sure how to migrate the NAT configuration. Specifically, there is an interface "3rdparty" that has onward connectivity to other private addresses, so our internal addressing is hidden. For some reason there are static NAT rules in different directions across the interface, but at present I cannot see why. Thinking in router terms, all that springs to mind is the inside and outside tags for the interfaces, but also that it might need "overlapping" NAT to be configured.
[code]...
I'm doing a large-scale snmpwalk against an ASR9k (with IOS-XR v4.2.0) running as a provider edge router (full bgp table) and pulling the full contents of the BGP route table. On other routers, this completes within my timeout window, but not on the ASR9k.Figuring that this has to do with CoPP rate-limits, I've adjusted the rate-limits to ridiculously high values.
But still, the walk doesn't complete in an acceptable amount of time. Manual snmpwalks display a rate slower than even 7600s, with occassional stutters. CPU on the box doesn't even register that anything extraordinary is going on (@ 2 - 3%), and "show lpts pifib hardware police location" shows that there are 0 drops against SNMP.I haven't turned yet - either some traffic shaping mechanism or some combination of process scheduling/priority with SNMP.
I am very new to high end Cisco devices.(like 7600/6500 or ASR9K).
Why do we log in on RP. What actions we can perform after logging-on RP (route processor) or Why they are required ? Cant we make those by normal router mode (router#) .
Any "best practices" or recommendations on how to migrate from a fixed router (3745) to vlan routing on Catalyst 4507 switches in order to minimize the disruption to the network.
View 4 Replies View RelatedIs there anyway to migrate off of WCS to Prime NCS? We have a fully built WCS system with maps and all configs and was wondering if there was a way to restore to NCS.
View 1 Replies View RelatedI wonder if you can migrate the cisco ap 1121 by WCS, could not find any specific documentation.
View 3 Replies View Related how to migrate from WLC4404 to WLC5508. I want to know your propositions.
I could replicate the configuration manually but there is a lot of confirugation menus and all. If both could be online and migrate the AP to the new one until there is none on the old one, it would be great.
We are trying to migrate WCS base license to NCS 1.1 .We have procured the migration license .In the licensing guide , it is mentioned as "L-WCS-NCS1-M-K9 License first, before adding the licenses migrated from your WCS installation"
1)Whether we need to add this migration license in WCS before genrating XML file or
2)Before adding XML file in NCS we need to add this in NCS ..
convert a few connections from ADSL to FTTC but would like not to have to replace the Cisco 857 router already installed.To achieve this I would need to allocate one of the Ethernet ports as the WAN interface and configure PPPOE for authentication.
View 1 Replies View Relatedl need change a wlc 4400 to 5500, but l don´t know what l need back up, and how can I do to join the H Reap APs in the new 5500 WLC because all H Reap APs that l have, are not in the same city , and I understand if l want join AP in the new WLC l need to connect in the same network segment, is it rigth ?
View 7 Replies View RelatedWe setup both site-to-site VPN and Remote Access VPN client on VPN 3005 Concentrator. We want to migrate all the configs to the new ASA 5540. Do you recommend that we migrate all the configurations for VPN client first before setting up the site-to-site VPN on the ASA or it does not make any difference?
View 5 Replies View Relatedwhat's required for the migration from Checkpoint R75-20 Splat install to the Cisco ASA firewall, links to documentation - step-by-step.
View 3 Replies View RelatedI am looking for the licensing and upgrade path for going from WCS 7.0 to PI 1.2.At present I have a WCS licensed for 200 APs which is managing one controller and 150 APs.I intend to use the Cisco Prime Upgrade Promotion to order R-W-PI12-M-K9 (WCS 7.0 to Cisco Prime Infrastructure 1.2 Migration) and L-W-PI12-100-M and L-W-PI12-100-M to match the number of licenses on the WCS.
Once Prime is installed I also want to manage another 50 devices, does that mean I have to purchase the Cisco PI 1.2 Base License and Software (R-PI12-Base-K9) and another 50 Lifecycle licenses, or will my existing 200 licenses from the upgrade suffice.
We try to migrate two ASA stateful Active / Passive from version 8.0 to 8.4 but many of acl rules and Nat no longer working. We must go through the version 8.2? The release 8.4 changes everything and seems to me not too stable, it'sl best to stay in 8.2 or 8.3 !!!
View 3 Replies View RelatedI am looking to upgrade an 1812J router to 1921/K9 router with 8-port double wide switch port.What's the best/easiest way to migrate the config? (We have access lists, vlans, etc. configured on the original device)Also, I'm looking for a way to prioritize traffic from an external site on the internal LAN. Reason being that I would like to prevent dropouts of interent streaming radio when Internal LAN traffic is high. If so, what's an easy way to implement on 1921?
View 1 Replies View Relatedmy company will change WAN connection from HDSL (2Mb/2Mb) to Metro Ethernet (10Mb/10Mb). Now, I have CISCO 1841 (12.4(15)T12 ) with 2 FE and HWIC-1T. Can i configure my Metro Ethernet (WAN Connection) on one FE or i need of "external wic" such as hwic-1FE ?
View 1 Replies View RelatedI have a client who has LMS 4.1 with SAS support, I know that I can upgrade him to the Prime infrastructure for LMS and NCS, however he is licensed for 100 devices. He also has WCS 7.0 with 50 AP licenses, I want to upgrade his LMS to Prime infrastructure and then migrate his WCS to NCS, but how do I know combine the both so that he is on one platform.
View 1 Replies View RelatedCurrently have a pair of 6509 chassis setup with VSS. Only have the Sup and two line cards in each chassis. Would like to replace with a new pair of 6504E chassis. Is it possible to fail one chassis at a time and migrate to the new 6504E?
View 3 Replies View RelatedI would like to know if I can migrate the config from ACE20 to ACE30 (last software) without any issue.I don't have any ACE30 to test
View 3 Replies View RelatedI have configuration on PIX804 :
On Pix804
interface Ethernet2
nameif ins10
[Code]....
On PIX515T(804) in packet-tracert option no Phase 1 - Route-lookup and both static nat works fine. May I disable on ASA phase route-lookup, that it not send packet on wrong interfaces ?
I try to remplace WLC because the old wlc (7.0) is capacity full.but the AP (3502) do not "registered" to new WLC (7.3),If you have a idea, without make a reset factory to AP.
View 1 Replies View Related