Cisco WAN :: Why IP Flow Egress Is Not Functioning On 7600
Jun 2, 2012why ip flow egress is not functioning on 7600?When I do "sho ip cach flow", I can see only inbound flows.
View 5 Replies
ADVERTISEMENT
Cisco :: 7204 VXR - IP Flow Not Showing Egress Traffic
Dec 6, 2011I have a 7204VXR Router, with Neflow. The collection for all interfaces is ok, but one interface (Gigabitethernet 1/0), is not showing the egress traffic in the pictures. The configuration has "ip route-cache flow", ip flow egress, and ip flow ingress set. But, is not showing the egress traffic.
View 4 Replies View RelatedCisco Switching/Routing :: Net-flow Not Reporting Egress Traffic On 6509 Vlan
Nov 27, 2011We have a pair of 6509 working in a VSS configuration (IOS 12.2(33)SX5). The 6509s connect to a pair of ASAs (7.2 code) running in an Active/Standby setup. These ASAs in turn connect to routers going to remote sites. I have configured Netflow on the following VLANS,
VLAN 10 - Servers Vlan
VLAN 9 - Transit/ASA VLAN (connects ASAs to 6509s). All traffic originating from any VLAN on the 6509 crosses this VLAN in order to reach remote sites and vice versa
I configured the netflow source VLAN 11 although I am not collecing any netflow from it.Although I have been getting lots of Netflow info, I noticed that netflow for traffic originating from any user VLAN on the 6509s going to any remote site via TRANSIT/ASA VLAN(9) does not get reported, I even tested with 4 GB traffic but no result. Only reverse traffic (i.e. from remote site to user VLAN) is reported as it traverses the Transit VLAN (9).
I read somewhere that egress netflow is not supported in 6500, but isnt traffic originating from a user vlan to a remote site via the transit VLAN (9) considered ingress with respect to the transit VLAN (9)? I would like to know whether bidirectional Netflow is supported on 6500 VLANS. I have mimimum control on routers beyond the ASAs, and since these ASAs run 7.2 code netflow is not supported, and Monitoring this Transit Vlan gives me extremely useful info.
I do get netflow biderectional traffic from the Server Vlan 10, but I think it is correlated by the netflow collector from vlans 9 and 10. [code]
Cisco WAN :: Traffic Flow Not Reflected Properly Into Fluke With 7600
Aug 8, 2012We are facing one issue at the Customer site as Cisco 7600 series Router's having issue for reflection of traffic flow through netfluke as using by Customer to get bandwidth utilization report for our WAN links.Recently we have brought this 7606S router into production and moved some of our WAN links to this router and We are not getting proper bandwidth utilization report in netfluke after configuring netflow in this device.
HTAINCHN21XXXCR001#sh ver
Cisco IOS Software, c7600s72033_rp Software (c7600s72033_rp-IPSERVICES-M), Version 12.2(33)SRB5, RELEASE SOFTWARE (fc2)
HTAINCHN21XXXCR001#sh run int gi1/12
[code]....
Cisco :: 3500 - WLC QoS Profiles Not Applying Egress
Sep 8, 2011In regards to QoS profiles on the WLC. I have applied a profile to a newly created WLAN and set the Per User Bandwidth to 512k and it seems to be kicking in on the ingress only, this is supposed to work ingress AND egress or is it just designed to work one way? I have a 4402-25 with Cisco 3500 AP's and am running the 7.0.98 code. If it is designed to work one way only is there a different way to apply it ingress and egress simultaneously off the WLC?
View 3 Replies View RelatedCisco WAN :: Egress Queuing On Catalyst 6500
Mar 16, 2012i have a question regarding egress queuing on cat6500 modules. e.g. WS-X 6704 has 1p7q4t is egress-modell. my goal is to limit the priority queue to 15% of the available bandwidth. i can put weights on the wrr-queues and limit their ressources: "wrr-queue bandwidth 50 20 15 0 0 0 0." but this isn´t possible for the priority-queue. only available command is "priority-queue queue-limit 15" but this only restricts the buffer to 15%.
at the end of the day i want to prevent that the wrr-queues don´t have remaining bandwidth when the priority-queue is saturated.
is there an easy way to restrict the bandwidth of the priority queue or do i have to implement additionally some kind of policing?
Cisco WAN :: 7200 - BGP Multi Ingress / Egress QoS
Nov 4, 2012I have a question that so far I haven't been able to find a suitable answer for. This is focused from an ISP perspective. So suppose I have the following scenario:
I have a BGP transit area. On each edge of the my network I have a e BGP connection to the same client for redundancy. This client has his own ASN, iBGP and prefixes. I'm receiving the same NLRI from the client through both sides. Let's assume he's advertzing the prefix 10.10.0.0/16 through both ends. I'm receiving it with no problems and I'm passing it along to the next providers with whom I also have multiple ingress and egress points.
Something like this:
PROVIDER A PROVIDER A
| |
eBGP eBGP
| |
CLIENT A (ASN65100) --- eBGP --- MYROUTERA(ASN65200) ----- iBGP --- MYROUTERB(ASN65200) --- eBGP --- CLIENT A(ASN65100)
| |
eBGP eBGP
| |
PROVIDER B PROVIDER B
Let's say my client pays for a 10Mb. Both links are configured to 10Mb so that each can handle the load in case the other one fails and both are always active. So my question is:
How can I shaped or police the client's traffic across multiple points of entry on different routers so that it won't go beyond the 10Mb. The same scenario applies on how can I limit traffic coming from the providers A, and B destined to the client's prefix: 10.10.0.0/16.
I don't mean using MED, local-pref, weight. Sure I can funnel all the traffic through one single point, but consider that I'm also trying to move away from basic routing and more into PfR, which mean that I have more granular control of the flows. Perhaps there is a PfR service-policy or something that can work.
For this scenario I'm using 7200 as my routers. If there is a solution that assumes any other model don't hesitate to post it. TLDR; How can I police or shape across multi interfaces on different routers?
Cisco WAN :: C2811 Separate Ingress / Egress Interfaces
Apr 14, 2011I have a 2811 Router with two fast ethernet wic cards installed. I need traffic to go out one interface, but it's received back through another. Both interfaces have public IP's and the same subnet, and are connected directly to satellite modems. One can receive data / the other only send.
View 3 Replies View RelatedCisco Switching/Routing :: 6500 QoS COS Egress Not Marked
Feb 15, 2012Problem: My traffic coming inbound appears to be marked but is not marked when egressing.
Setup:
Ingress from encoder G3/9->> Egress G8/1Default DSCP/COS map table (DSCP 24 is COS3)
Cos-dscp map:
cos: 0 1 2 3 4 5 6 7
------------------------------------
dscp: 0 8 16 24 32 40 48 56
1. Any reason COS 3 is not marked outbound on this traffic? I'm determining this by doing a wireshark off of interface g8/1. The traffic appears to be marked on the ingress correctly but does not maintain its mark on the egress. I can confirm this with equipment on other Ethernet links in produciton as well as my test port listed in the config below with wireshark.
FYI: Unfortunately with my cards in the 6509 I cannot port mirror and see outbound multicast (determined through a TAC case). Because the STB does not understand tagged traffic I setup the native vlan for it to function. To see the multicast with tags I temporarily remove the native command and do the wireshark to see the multicast. It still shows a COS setting of 0. I will try to attach a capture of a multicast packet.
interface GigabitEthernet3/9 description Mulicast Encoder
switchport
switchport access vlan 962
switchport mode access
logging event link-status
load-interval 30
Cisco Firewall :: ASA 5510 - Failed To Locate Egress Interface?
Jul 22, 2012having a bit of trouble setting up our 5510. None of us have ever played with a firewall before. We've got most of the basics covered. I was able to get to the outside world to do a software update to the box, but my laptop that sits in the inside can't see the outside. We only have the default access rules in place at the moment. Our old ISA firewall rules don't really translate all that well to this new box.
View 2 Replies View RelatedCisco Switching/Routing :: 3560 Egress Policing And Classification
Jan 17, 2012I have a customer who requires to identify and police traffic on egress on a 3560 trunk link. I cannot use ingress classifications because we do not know what route the traffic will take yet. The egress interface connects to multipoint wireless equipment with 4 different bandwidth point to point links. So the ingress traffic may be routed via any one of 4 point to point wireless links connected to the single egress interface. Am I correct in assuming we cannot mark on the egress direction then put the traffic in a SRR shaped egress queue based on the marking ? So we would only have the option to egress queue based on markings applied or trusted on the inbound direction ? I had thought of some kind of policy map/aggregate policer configuration based on the exit VLAN but it seems we can only apply this type of config inbound. From reading the 3560 configuration guides it seems the 3560 cannot deploy the kind of requirements this customer needs. Perhaps they should have deployed some kind of Metro switch ?
View 1 Replies View RelatedCisco Firewall :: ASA 5510 - Failed To Locate Egress Interface
Mar 9, 2011I have ASA 5510 with 8.3 version and using multi context. I created a new context ABC and tryed to add routes in the context for the ABC networks it would not work. There was an error in the log stating, “failed to locate egress interface”. I changed the metric on the static routes from 1 to 2 and it started working. Is it normal in a multi context?
View 4 Replies View RelatedCisco Firewall :: ASA 5505 / Failed To Locate Egress Interface For TCP From DMZ
Apr 9, 2013I have ASA 5505, in routed mode, basic license.I run a web server in DMZ. I can reach Internet from DMZ. Also, the trafic from outside can reach the web server. However, if the web site is requested from within the DMZ, the request will fail, and the firewall log contains the following message:
Failed to locate egress interface for TCP from DMZ50: 30.30.30.10/49213 to 170.70.30.114/80
I don't have DNS, so the request must go to Internet, even the web site is hosted on the server in DMZ.
Here is sample of my config file:
interface Vlan1
nameif inside
security-level 100
ip address 162.160.1.3 255.255.255.0
!
interface Vlan2
[code]....
What can be the reason for requests, originated in DMZ, to fail, and how could it be fixed?
Cisco Switching/Routing :: 3750 Auto-QoS Egress Discards
Dec 18, 2011I have an issue where I'm seeing output discards on pretty much all my ports configured for QoS. The switches are cisco WS-C3750V2-48PS running 12.2(50)SE1. There are four switches stacked using stack cables. The QoS implemeted was auto-qos with no modifications to the standard config. All ports are in queue-set 1. The phones connected are Cisco 7942's. Already did the standard check for speed duplex mismatch, crc's, runts, giants, etc...No discards before the QoS was applied. No bug ID's I could find regarding these switches and this IOS version. The one thing noticed is that 99% of all the drops are from queue's 2 and 4 or 1 and 3 doing the below command.
**I've limited the cut and paste as to not clutter the discussion until someone requests something else**
show platform port-asic stats drop
Port 18 TxQueue Drop Statistics
Queue 0
Weight 0 Frames 0
Weight 1 Frames 0
[Code]....
Cisco WAN :: 7200 - Egress Netflow V9 And Output Packet Marking Order
Aug 17, 2011when using egress netflow (v9) and output marking.
The topologie : Server <-----> R1 1>-----<1 R2 2>----<2 R3
R2 is a 7200 with c7200p-adventerprisek9-mz.124-15.T11.bin What I'm doing :- R2 forwards ping packets from Server to R3. When they arrive on R2, icmp packets are marked with CS3
- I change the DSCP to CS4 on R2 before forwarding packet to R3. I'm using for that an output service-policy on the R2-2 interface like this : interface ATM2/0.36 point-to-point
ip address 192.168.1.1 255.255.255.252
ip flow ingress
ip flow egress
[Code]....
Cisco WAN :: PBR Is Not Functioning On 2901 G2 Router
Mar 17, 2011I have one router 1841 in which i configured PBR for internet traffic from LAN. I hv two ISPs few server are configured for ISP1 and few for ISP2.I planned to shift my existing setup at 2901 G2 router. when I am configuring the same config on this router so traffic is passing through only from one ISP not from other, if I troubleshoot so I see that the interface which is connected with ISP2 is not getting any input/output packet.
Config is here:
==========
interface FastEthernet0/0
description ****** ISP2 ******
ip address 203.xx.xx.110 255.255.255.248
[Code].......
Cisco Switching/Routing :: Configure Egress Netflow In 6500 (VSS) With VS-S720-10G Supervisor?
Jun 9, 2013I'm trying to configure a egress netflow in a 6500 (VSS) with VS-S720-10G supervisor. I foud some old posts and understood that netflow wasn't supported on 6500 but i found a new document and it seems that netflow is supported in Supervisor Engine 2T:[URL] Does the netflow still not supported in VS-S720-10G? It's weird because the command is supported:
#sh run int vlan 4
Building configuration...
Current configuration : 353 bytes
!
interface Vlan4
ip address X.X.X.X 255.255.0.0
[cod]....
Getting Home Network Functioning?
Jan 27, 2013I've recently bought a new PC (I7) to replace my old one. My main task was to get most of my files across and set up my new PC as the main computer on the home network. Currently my machine has a printer connected to it which I wish to share with all on the network. I've attached a screen cap of the network as displayed by my modem/router. 2 computers (my PC's) connect via ethernet and the other 2 laptops wirelessly. All computers (except my old PC) run Windows 7 - the old PC runs Win XP SP3.
What I can do so far is transfer files from my old to new PC. Each computer on the network (except the XP machine) can see each other but cannot access each other and despite network discovery + file and printer sharing on, cannot see the printer across the network. I've been doing a bit of research to try and solve my problems but am only getting so far. If there is a resource you could point me to that would be great as I'd like to develop a good understanding of how to manage the network.Here's is an IPCONFIG report on my main machine:
[code]
Cisco Firewall :: 515 - ASDM Not Functioning After Upgrade
Nov 7, 2012I bought a pix 515 to play with and i upgraded it to the farthest release 8.0(4) it was at 7.22 and the web interface and ASDM is not working. do i need to upgrade the ASDM? when i run the launcher i get a fatal error :
handshake_failure.
I just updated the IOS, did i need to save certain things? activation key's maybe???
Cisco VPN :: 7604 - Get Redundancy Between Devices Functioning?
Jun 21, 2011We currently run 7206 routers with VAM cards and are able to configure the devices to perform stateful failover of tunnels from router to router. When moving to the 7604 with 15.1 IOS there are not any examples of how to set up the stateful failover of the tunnels between devices. We have the devices in the SSO mode are not able to understand how to get the redundancy between the devices functioning.
View 1 Replies View RelatedWindows 7 Network Card Not Functioning?
Sep 14, 2012I have an ASUS M4A785-M MB with an on-board LAN and all of a sudden stopped working yesterday. I have it connected to a 4-port D-Link network switch which has one other computer connected, and the switch is hard-wired to my wireless router.
Here are the trouble-shooting steps I've tried:
- uninstalling/re-installing the driver
- tried using different wires.
- by-passed the switch
- used the wired connection with the other computer
- tested the wire for my troubled computer on the other computer and it works fine
- pinged the loop-back IP address (127.0.0.1) and it tested ok
- bought a new NIC and still no connection
When I go to Network and Sharing Center, it shows my Home GRoup but then has the bid red X from the Home Group to the Internet.
D-Link DIR-615 :: Orange Globe On And Not Functioning?
Jun 7, 2011The D-link dir-615 is not working.The modem is working perfect, because its the internet that im using right now (its connected directly to my laptop, so i know its the router for sure) But i want to make the internet on my modem wireless, but the D-link router has the orange globe light turned on (as im typing it still has the light on) and i just dont know whats wrong with it. I have already tried reseting it like 2 times, and it still doesn't work. When i connect my router, all it does is acquire the network address, and it just stays there, so no ip address will be detected... I might just buy a lynksys router, d-link sucks. This router was bought years ago by the way. It hasn't been used since like now.
It isnt the computer, i tried disabling the firewall, and reconnecting, but it just stays in 'renewing ip address' (the same things happen with all of the other computers that try to connect to it in my home) I click on the wireless icon and then on 'support' and next to IP Address it says "Invalid Ip Address"... The globe still remains orange on the router..
D-Link DCS-942L :: NTP Not Functioning Properly
Jan 27, 2013My Dlink DCS-942Ls had been updated to the latest firmware both 1.12.1608WW and 1.12.1628EU. (I grouped them into two firmware devices). They are all H/W version A1, agent version 2.0.15-b11. If I setup time to automatic time configuration and sync with NTP servers ( all from drop down list and Thailand NTP server time1.nimt.or.th) , they did not work and I must set time manually every times I power off and on these IP cameras. I knew that this issues has been raised for long times and still exist in the current firmware.Simple way to eliminate this problem is specifying NTP server into IP number. ping your national NTP server URL and then get the IP address , e.g. time1.nimt.or.th has IP 203.185.69.60 , or ntp1.dlink.com has IP 61.67.210.241. I have tested many ways and the results can be comfirmed that URL NTP letter cannot sync time but IP number can do. I also has a DAP-1360 Repeater mode and test with its "System Check" ping test, the result are success either URL NTP server name and IP number. NTP protocol is different to ping test. I'm not sure that which parties (ISP, DNS, Router, IP camera device) should fix this error. I decided to specify NTP server with IP number to all network devices from D-Link. Minor risk may occur if a national NTP server change its IP number.
View 1 Replies View RelatedComputer Not Functioning Properly After Removal Of Virus
Feb 8, 2012I recently removed trojan horse and malware using AVG. This was successfu,l but when I rebooted the machine it will not recognise any network connections, sound etc or operated software such as excel.ll the devices appear to be installed but won't work. When I try to open Intel it shows a message 'No supported wireless adapters available in the system'.
View 9 Replies View RelatedLinksys Wired Router :: BEFSR81 Was Not Functioning Well?
Jun 18, 2011My router was not functioning well so I decided it might be a good idea to reinstall the driver package via the admin upgrade page. Since then it doesn't work at all. The power light flashes constantly now.
View 9 Replies View RelatedDell :: Bluetooth Not Functioning In Inspiron N5010?
May 28, 2011I have a Dell Inspiron n5010. Earlier bluetooth was functioned properly. But today bluetooth icon is not displayed on the tray. could not find my bluetooth devices while searching also not able connect from my my Bluetooth device. I have updated the driver from Device Manager.
View 10 Replies View RelatedDell :: XPS 730 - Onboard Network Card Not Functioning
Dec 30, 2012I'm having a problem with my onboard NVIDIA nForce Network Ethernet card. I have a XPS 730 running Windows 8 (64 bit). What is the most recent date of the driver for this adapter? I was attacked by a VERY bad virus (called SMALL) and have just got everything back to normal (I think). It may be possible that the driver for my network card is corrupted. Device Manager says driver is dated 2/23/2012 and the version is 7.3.1.7336. Is this correct? Two weeks ago the machine ran fine, Windows 8 installed without a problem.
View 1 Replies View RelatedCisco VPN :: 1655 - Replay Check Feature Completely Not Functioning?
Jul 24, 2012[URL]...
1655#comment-12826 I'm experiencing this bug and believe it may be causing a high cpu utilization. Does this bug mean the replay check feature is completely not functioning because I'd like to disable it.
IOS of 2 devices experiencing this issue:
ADVSECURITYK9-M Version 12.4(24)T
ADVSECURITYK9-M Version 12.4(22)YB
Linksys AE2500 / A Device Attached To The System Is Not Functioning
Aug 7, 2011A few weeks ago, I bought a Linksys AE2500 wireless adapter, and it's worked fine up until a few days ago. A few days ago, when I turned on my computer, I could not connect to the internet. I've tried uninstalling and reinstalling the drivers, but I am denied every time; the message I get is "A device attached to the system is not functioning".I've tried connecting to the internet with my other wireless box I used prior to getting the AE2500 and I cannot connect with that, either. The only way I can connect on this computer is with an ethernet cable.
View 12 Replies View RelatedD-Link DIR-615 :: Router Stopped Functioning Because Of Wrong BIN Or Flashing
Mar 5, 2011what should to do if ever or incase something happen during flashing firmware.like power turn off, or you quit the installation, or wrong .bin file.what i did is upgrade the firmware dlink dir 615 3.03 ww c2 to ddwrt factory.bin but before that i have save the original .bin from 192.168.1.1 for incase restore original setting.i did not follow the instruction that get latest firmware from dlink but what i did is restore or use emergency to reback the 3.03 ww c2 .bin from my dlink that i was save from original setting. and it didnt work out it failed the router totally stopped working and functioning. only the dlink name light is on. even the reset button dont work or dont blink.what should we do for this kind of fault is there another way to return the setting back? no ethernet and wifi so no way of communicating with router. the router ethernet and wifi has stopped working. but the computer homw network is detecting the router whenever i plug it in computer through Ethernet but the local area network when plug to router is disconnected. the router wifi is not blinking either.
View 1 Replies View RelatedLinksys Wireless Adapters :: WUSB300N With Windows 8 Not Functioning?
Dec 27, 2012After update at win 8 I had problems with the functionality of the WUSB300N. I installed manually the old driver and I have now the limited network and I can not use it.
View 2 Replies View RelatedDell :: Webcam And Bluetooth Not Functioning In Inspiron 14R 4050
May 6, 2012how to install the bluetooth and wifi so I can be reused.
View 1 Replies View RelatedDell :: XPS Dimension 8300 - Network Adapter Not Functioning?
Jan 1, 2013Since 2 months I have the following problem: the first time each day I power on my computer I cannot get internet access. I cannot reach the networkcenter to check if anything is wrong. Sometimes after a long wait (10 minutes) I get the alert: network adapter is not available. The only option is to power down the computer and to power on again. Usually then I have internetacces. I have run all kinds of diagnostics on the dell site but when internet acces is working nothing seems to be wrong. I have a XPS dimension 8300 with a Broadcom Netlink Gigabit Ethernet adapter
View 3 Replies View Related