how can I monitor and prioritise traffic on a ASR 1002? Currently we have allowed another organization to use our 1GB link and we would like to monitor what sort of traffic flows through it and want to prioritise the traffic depending on the applications.
View 1 RepliesWe are running LMS 3.2 with IPM 4.2 installed....and we are looking to do IPSLA monitoring on a couple of our Cisco ASR's with IOS-XE code installed.
I looked at the IPSLA feature mapping and it only talks about supported IOS code....do we need to upgrade our current IPM module to a current version?
We've had problems with our internet router losing connection to the internet. All traffic stops, a reboot resolves the problem. The router only has a public IP and it's connect through a dummy switch to the ASA as shown. I want to be able to monitor netflow or something and wondered if I could add a static route to the 10.x.x.x network and then add the netflow commands. Here is kind of how it looks, I simplified it some by removing unnecessary devices
View 2 Replies View RelatedI have a questions about protecting my network. My parent's have rented out my room, since I'm going to college, and I was wondering if there was a way to monitor the traffic that is going on in my network. Once the guy moved in, the wireless connection speed drastically decreased. I was barely able to sure the internet on my laptop. I currently have about 8 devices connected to my network. I am running a wired connection for my desktop so I don't feel any lag, but everything else runs on wifi.
View 1 Replies View RelatedI am new to the PIX firewall. And recently implemented the PIX 506e in my network. I wants to know how we can monitor the system that is generating the more traffic on Network through Firewall.
View 4 Replies View Relatedhow do I monitor a computer through the wireless router
View 1 Replies View RelatedI have a L3 core switch with multiple VLANs setup. Is there a way to place an IPS so as to monitor the traffic passing between, lets say, VLANS 1-3 and VLANs 4-10?
View 19 Replies View RelatedWe currently have a 3/3 Etherloop. We dont have any internal IT as we are still small and while not a networking guy I can at least understand what is going on. Right now at peaks we are hitting 100% utilization.
We run a call center in house so I am trying to determine at the very least how much of this traffic is from voice data compared to everything else.Was running through our networking configuration and it just seems off to me. The following is the flow.
-Etherloop Demarcation >
-Cisco Integrated Access Device >
-D-Link DIR 655 Wireless Router >
-24port HP Procurve switch >
-24port HP Procruve switch >
Everything up to the first switch is a single line. The first switch has all ports running out except 1 which goes to the second switch. The second switch runs out to machines as well.
I am at the networking level where I understand a switch but have no idea what the IAD really does between the etherloop modem and the wireless router.
For some reason I feel like the router should not be setup in that manner and should be off of the switch. With the cisco IAD running directly to the first switch. So my 2 big questions are.
1. Does this setup even make sense.
2. Whats the easiest way to monitor traffic, at the very least it would be nice to see real time up/down and be able to log in. Then I guess using ports figure out what is being used by voice. My first guess was just putting a machine between the IAD and first switch and monitor and log the traffic.
I have a requirement to monitor all traffic going from the internal LAN to the cloud. The LAN is a layer 2 VLAN which spans multiple Cisco 4507 switched and other smaller switches.
The VLAN has an IP address which the hosts use as the default gateway.
The exit port is on a Cisco 3600X switch connecrted to 4507 #1 via a 10G fiber link. 4507 #1 connects the rest of the LAN. Those switches interconnect via 10G fiber and 1G copper links.
Currently the monitor host is connected to a 1G copper port, configured as a monitor port, on one of the backside 4507s The switch manager says he has the switches configured so that I can see all traffic on the VLAN.
I'm thinking of switching to another ISP which is faster and cheaper than who I'm currently with. Only problem is they have data caps. Any way to log inbound/outbound traffic usage with this router so that I can make sure I'm not going to hit monthly limits?
View 5 Replies View RelatedWe have an SG300 managed switch located in a small business of less than 10 PCs. There has been an ongoing issue with Internet speed. Is there any way that I can monitor the router for traffic so that I can see what might be causing the problem? I would like to focus on the WAN port and Internet activity particularly.
View 1 Replies View RelatedI would like to know the technical Specification regarding the AC power supply for ASR1002.
I need to know the following:
Voltage
Amp
BTU
Watt
BTU and AMP for ASR 1002?
I have one ASR 1002 router and one GSR router. when i insert SFP-OC48-IR1 module with GSR and connect 100 Mb link that comming from MUX then the GSR port is up but when the link is connect with ASR with same module the port not going up.i had cross check the module GSR to ASR but the problem remain same.
View 1 Replies View RelatedI have Cisco router ASR 1002-F on which I have created two subinterface, Gigabitethernet 0/0/1.333 and Gigabitethernet 0/0/2.111. I try to bridge those two subinterface but no success. I can create bridg-group and everything needed but I can not add subinterface to specific bridge-group. If I try write command bridge-group on subinterface there is not even possible to chose this command.
View 1 Replies View RelatedOK ran into a little problem with getting this to work. Only group members participate in the encryption process, correct?
I have numerous remotes all coming into one central location. I set up a KS and have currently only 2 of the remote routers set up as GM's, with the intention of the others coming into play as I move forward. Here is basically what I have in my KS and GM's:
KS
crypto isakmp policy 10 encr aes authentication pre-share group 2crypto isakmp key testkey address [code].........
GM's
crypto isakmp policy 10 encr aes authentication pre-share group 2 lifetime [code]....
So I applied the crypto map to the serial interfaces on my routers on either side of the cloud (central-ASR1002 and remote-ISR1841). When I did this, ALL the remotes went down and I'm not sure why. Even the ones that didn't have anything to do with gdoi. Ya, it wasn't good. I thought that only the group members would be affected.
Is it the fact that my acl is encrypting any to any? Surely I don't have to reverse that and have two statements with the same syntax. I'm basically just trying to encrypt all traffic from specific remotes back to the central side. However, I'm trying to do it without taking down the rest of my network .
I have route-map defined on my ASR 1002 12.2(33)XNE and applied to my gi0/0/1 interface. I need to change the IP address defined on the "set ip next-hop ..." line. My question is, when I make the change in just the route-map definition, does the change take effect immediately, or do I need to remove and re-apply the "ip policy route-map ..." statement on the interface? If I do have to remove and re-apply, will this be service-affecting for all the traffic flowing through the interface? I'm just not sure what to expect.
View 2 Replies View RelatedI have Cisco ASR 1002, code XE 3.4.1 doing site-2-site VPN with an ASA managed by another company that I have no control over running 8.3 (I think).the site-2-site vpn is very easy straight forward as follows.
View 4 Replies View RelatedI have a pair of physical ASR 1002 routers, called ASR-1 and ASR-2. I setup HSRP on both ASR-1 and ASR-2 on both g0/0/0 and g0/0/1 interfaces, nothing complicated, just straight forward HSRP.
Now Cisco TAC told me that HSRP is NOT supported between physical ASR routers. WTF!
Furthermore, they told me that HSRP only supported within a single ASR because of multiple routed processors. In other words, you can setup HSRP with a single physical ASR but not with two physical ASR routers.
HSRP can not supported with two physical ASR routers?
I have 2 sub net directly connected to a ASR 1002. This is the configuration
interface GigabitEthernet0/0/0
ip address 193.145.14.114 255.255.255.252
negotiation auto
[Code] ....
The interface gi0/0/0 is connected directly to 193.147.14.113/30 in another router. And the Gi0/1/1 is connected to my internal infra structure. From my router I can ping 193.145.14.113 . So. I configure my PC with default-gateway 193.147.107.3 (ASR).
From my PC
I can ping 193.147.107.3 (gi 0/1/1)
I can ping 193.145.14.114 (gi 0/0/0)
But I can not ping 193.145.14.113 (the other point connected to gi0/0/0)
Why???? It is a IP inside of a sub net directly connected to the ASR. Why the ASR is not doing routing? ip routing is enable.
I am planning to implement SSL-VPN (Any Connect) on an ASR 1002 router running IOS-XE Software Version 15.1(3)S2. I need to use LDAP for user authentication, and need to understand what are RADIUS/ TACACS requirements to use LDAP. Do I need to use Cisco ACS or can I use something like Microsoft IAS or Free Radius?
View 6 Replies View Related I'm trying to upgrade the ASR 1002 we just purchased and am having some issues (this is a new device and is not in service). I first tried upgrading the ROMMON using the upgrade rom-monitor filename bootflash:asr1000-rommon.150-1r.S.pkg all command, but the upgrade didn't seem to work completely. When I do a sh platform I get the below output showing 15.0(1r)S: [code]
no valid BOOT image foundFinal autoboot attempt from default boot device...Rommon upgrade requestedMaximum upgrade attempts exceeded, continuing with old Rommon...
I've also tried upgrading the IOS, but that is not working either. I tried "boot system flash:asr1000rp1-advipservicesk9.03.02.00.S.151-1.S.bin" command, but that did not work. I made sure the image was good using the "verify" command and made sure to set "config-register 0x2102". After I do a wr me and reload the router I get the below errors. [code]
As soon as I connected my ASR 1002s to the Internet and digested the Internet BGP table, I began receiving this message. I’ve google’d and turned up nothing so far. I assume I need to allocate more memory to this process.
%PLATFORM-4-ELEMENT_WARNING: R0/0: smand: ESP/0: Committed Memory value 312% exceeds warning level 310%
Here's a sh mem:
#sh mem Head Total(b) Used(b) Free(b) Lowest(b) Largest(b)Processor 3008A008 1758530508 647878488 1110652020 1110104020 1109994164lsmpi_io 98FEB1D0 6295088 6294120 968 968 968
I need to know, can i create svi on the ASR 1002 ?
View 2 Replies View RelatedI've been working with a company in the UK to get a PTP connection setup between Minneapolis, MN and Chicago, IL. At each site with have a ASR1002. The connection is made via a fiber connection from Level 3. Level 3 is just handling layer 2 and we are to take care of everything else. As of right now they can see the mac address of the Minneapolis port in the Chicago router. But, I can't see theirs. Nor can I ping the Chicago router. The config that was give to me by the higher engineers is simple enough.
View 3 Replies View RelatedSince a upgrade in IOS XE 3.0.9, our ASR 1002 have a problem with the DHCPDISCOVER.
View 1 Replies View RelatedI am working up a configuration template for an install I am doing in a couple weeks and wanted to take a look at the base config of an ASR1002.
View 1 Replies View RelatedI have a cisco ASR 1002 I have plugged a host into an addressed port and the port comes up however the host cannot ping the router and the router cannot ping the host. Neither can router ping its self. I do the same on a cisco 2800 router and it works fine. What's goin on. Is it the fact that this is a ASR router ?
View 5 Replies View RelatedI have implement MPLS L3VPN on my network to provide service to customer and right now we plan to have service VPLS on our same router. What is needed to run the VPLS in our MPLS network ? I heard that we need addictional switching module and upgrade my IOS to support it but I am not sure.
View 2 Replies View RelatedI want to terminate the IP Sec VPN tunnel on the Cisco ASR 1002 router, but it shouldn't have be bedirectional traffic to the other end., and it should be answer only, We don't run tunnle over GRE (no IPSec profile), just IPSec only. I found there is a command "crypto map *** client configuration address respond" but it looks it is global command and we have lots of VPN terminated on the Cisco ASR 1002 router, How can we configure the "Answer Only" for only one specific VPN tunnel and it won't impact the others?
View 2 Replies View RelatedI get this error when updating the IOS on our ASR 1002 router:
Calculating SHA-1 hash...done
validate_package: SHA-1 hash:
calculated e581b06d:923b1cc8:e5497571:66f9de35:70fd0ac8
expected aedab318:d8f213f5:36e12355:f70fa900:5c12d08c
SHA-1 hash doesn't match
boot: error executing
Is there someplace where I can configure the expected SHA-1 hash?
We have a deployment of 400 store. Each of those have 2 GRE tunnels running over MPLS & 2 GRE Tunnels running over Internet leading to our 2 data-centers. At each Data-Center, we have 1 ASR-1002 connecting both MPLS & Internet MPLS tunnels (800 total per router).
I saw in the documentation that OER & PfR cannot support more than 20 external interface (in our case GRE tunnels) per MC. Does it means that we need to have 20 routers acting as MC to be able to use PfR for our Internet GRE tunnels ?
Is there any more scalable solution for this ? How big company address this issue when they have a lot of interface to run PfR ?
Does any one used third party SPF in Cisco ASR 1002 series routers, does it supports them.
View 2 Replies View Relatedwe are replacing network equipment at one of our sites. The network will have 12, 3750X switches(6 stacks) - one stack will be the core. A 1002 will be the WAN router to the Main campus. The 1002 will connect to the core via 2 ethernet cables. I'm debating whether to use L3 or L2 between the router and Core. I've heard that routing is more efficient if L3 is used and also I will be able to create an L3 etherchannel between the 1002 and Core switch. See the attached doc.
View 6 Replies View Related