I have 7200 Router some flows are not forwarded and when i check ""show ip cache flow"" output i found the destination interface is going to Null i checked the access-list it permits these flows.
View 3 RepliesI have set a tunnel between Cisco pix 6.3 and Cisco Router 7200. Show Isakmp sa showing below detail on Pix
Total : 1
Embryonic : 0
dst src state pending created
xx6.x71.x29.x68 x2.1x7.52.1x1 QM_IDLE 0 0
Is tunnel is UP ? Traffice is not going throgh the tunnel . why ?
ISP environment with 3 Cisco 7200 BRAS ( NPE-G2 ) , we need to load balance traffic between two of them so the load balancer will accept traffic from backhauling link and distribute traffic the upper two BRAS , can we achieve this using spare 7200 we have or is there any software solution can do this .
another question , Cisco 7200 VXR ( NPE-G2 ) , does it support concurrent calls or sessions from more than 16000 subscriber ?
So I have an asa 5505 running ipsec and anyconnect and it has been working great for months. I have not made any changes to the config, but suddenly all of my anyconnect traffic is being dropped. The vpn uses the same subnet as the LAN. I tried putting a rule in to allow all traffic from the LAN subnet on the outside interface. Now I just get the WEBVPN-SVC Action-Drop in packet tracer.
View 1 Replies View RelatedI have a SG300-10 in layer 3 mode attached to a Fortinet firewall (FG). The Fortinet syslog is reporting repeated traffic violations with the following info:
src: << IP of the interface that the SG is attached to >>
dst: << IP of system connected to another interface within the same VLAN on the FG >>
src port: 0
dst port: 1281
service: 5/1/icmp
The traffic is dropped as it is not authorized traffic but I'm wondering what this is....Googling the dst port came up with "healthd" but not sure how that plays into this connection - does the SG use healthd? I have not found any system behind the SG that can be pinned as the source and the ACL/ACEs on the SG are very strict (only allows tcp port 443 from systems behind the SG)
I have a a firewall policy on a Cisco 2911 - the zone policy from OutZone>InZone basically drops everything apart from inspected traffic on the opposite direction and a few essential traffic generated externally (such as Outlook web access and E-mail exchanging). However, I seem to be getting a lot of firewall drops coming from the immediate gateway of the ADSL WAN address to the internal IP range on port 3. I get about 10 hits every 5 seconds.
Policy:
policy-map type inspect FWPol_Out-In
class type inspect CCP_PPTP
pass
class type inspect FCMAP_In-Email
pass
class type inspect FCMAP_In-OutlookWebAccess
inspect(code)
%FW-6-LOG_SUMMARY: 1 packet were dropped from IMMEDIATE WAN GATEWAY:0 => INTERNAL IP ADDRESS:3 (target:class)-(FWPair_Out-In:class-default), the immediate gateway would ping an internal IP address? Keepalive? Could this be stemming from another problem? The traffic wasn't generated internally as all InZone>OutZone is inspected.
As above, I got a problem with C3750e, ios c3750e-universalk9-mz.122-58.SE1.bin, when send AF41 traffic passing through it. My topolygy is as following
WAN link <----------> G0/0/2.100 - ASR1002 - G0/0/5 <---------> G1/0/1 - C3750e - G1/0/3 <--------> G0/0/1 - ASR1004
On this C3750e, I turned on mls qos, trust dscp on both G1/0/1 and G1/0/3 and no else is configured. ASR1002 G0/0/2.100, i applied the CB shaping fror AF41 traffic.
C3750e#sh mls qos
QoS is enabled
QoS ip packet dscp rewrite is enabled
C3750e#sh mls qos int g1/0/3
GigabitEthernet1/0/3
trust state: trust dscp
[code]....
Then, from ASR1004, i send ICMP traffic with TOS set to AF41 (136) and i found out that
1. The traffic is dropped on c3750e
sh mls qos int g1/0/3 statistics
GigabitEthernet1/0/3 (All statistics are in packets)
30 - 34 : 63 63 48 86 1534
2. The traffic never get hit into AF41 class in ASR1002 ? Why C3750e dropped this AF41 traffic? and what can I do to fix it?
Our Local Network is behind the CISCO ASA Firewall.Whenever we are accessing to Client VPN server,it is getting connected but after few Minutes (May be 5/10/30 Min),the sessions are terminating. The same traffic through PIX is no issue , only with ASA Firewall. See the following Error and request you give the possible root cause for this.
2011-04-09 16:15:09 Local4.Info 172.16.1.68 %ASA-6-302016: Tear down UDP connection 87447908 for OUTSIDE:68.22.26.66/4500 to inside:172.16.9.10/4410 duration 0:27:49 bytes 18653
OSPF-4-ERRRCV: Received invalid packet: Bad LLS Checksum with one of our tunnels
View 1 Replies View RelatedMy company has a spare 7200 VXR, originally planned to be placed on our TDM network. This plan was not followed through, but I'd like to switch it's function to work as a core router on our BGP network. I'd like for this 7200 to be able to handle full routes from our eBGP peer, something the SUP module in my 6500 isn't capable of doing. What kind of SUP module should i look at replacing this 7200 VXR with?
View 5 Replies View Relatedhow many GRE tunnels (without IPSEC) can 7206 router supported. I have low bandwidth 2000 links & i want to configure GRE tunnels for them.
View 1 Replies View RelatedOne of my customer is looking for 1 port OC3 card for 7200 series router. There are two options (PA-POS-2OC3/PA-A6-OC3)However my customer is not sure whether he wants a ATM/POS card.
How to determine whether i should go for ATM or POS Card for OC3. Or atleast what should be my approach to determine whether i should go for ATM or POS Card for OC3.
I have on 7200 series router with NPE-G1 module which is facing high CPU utilization. I have not found any particular process causing this high CPU utilization as it is caused due to interrupts. I have already enabled fast switching by "ip cef" command. Please suggest how to normalize the utilization as it is impacting the network and causing slowness. Please find below the output of show process cpu and also find attached the show tech of the device. Also let me know if any other output is required.
[CODE]...
We are running ISP and now a days we have many spam in our network, we want block the SMTP port 25 block on Cisco router 7200. So we can block the spam in our network.
View 3 Replies View RelatedI am having some issues with creating an ACL for my gateway router.I want to block external access to my network 192.168.1.0/24 from internet so i set up the ACL on the WAN port of my 7200 router asI am using named extened access list -
{
deny ip any 192.168.1.0 0.0.0.255 log
permit ip any any
}
and i applied this inbound accesslist on the WAN port of router as
"ip access-group acl-in in"
Now i have blocked the external traffic to my network 192.168.1.0/24 but the issue i am having is i am also unable to reach outside now. All i want is to block external traffic on the router WAN port but allow internal traffic to outside. Did i miss anything in the access list?
I am experiecing issues with HSRP.I have two 7200 core routers connected via one portchannel layer 2 and i set up the HSRP.The switch 01 is the master and 02 is the bkp.the problem is, the bkp router can´t see the master and there are a lot of loggs with active-speak and can´t see the master. the configuration are ok, i just check and recheck but there are no mistakes. [code] the configurations are ok, but the router can´t see each other, just in the vlan 500 the other vlans are ok.
View 7 Replies View RelatedI am facing a problem when configuring the ipsec vpn on my 7200 router. [code]
View 5 Replies View RelatedI am getting the following message while trying to configure WCCP redirection on my 7200 router.
I have added this router to the routerlist of the WAE edge device. Ping is successful, but the following problem prevails.
NASCM-MPLS#show ip wccp
Global WCCP information:
Router information:
[Code]....
I have a CAB-OCT-V35-FC cable in my Cisco 7200 router and not all of them are utilized. I have to connect another site with a point to point leased line and I am planning to use one of the ports in my Cisco 7200 router which is using the CAB-OCT-V35-FC cable. My problem is both the cable end and the modem is V.35 female connector and both are DCE. I need to build a crossover cable of V.35 male to male which will connect the Cisco 7200 router and the modem.
View 2 Replies View Related7200 VXR router got rebooted after due software crash dump.I have replaced NPE-G1 but still router is rebooting. Currently I am running with 12.4 (15)T 13 IOS.Crash Dump file is attached.
View 4 Replies View RelatedHow do I upgrade the boot rom version on the 7200 router? I am running IOS Version 12.4(22)T and when I plug in the serial ds3 card in my router it keeps rebooting with a watch dog error ( see below). Also, what version should I upgrade to?
Router#sh verCisco IOS Software, 7200 Software (C7200-SPSERVICESK9-M), Version 12.4(22)T, RELEASE SOFTWARE (fc1)Technical Support: [URL] Copyright (c) 1986-2008 by Cisco Systems, Inc.Compiled Fri 10-Oct-08 10:10 by prod_rel_team
ROM: System Bootstrap, Version 12.2(4r)B, RELEASE SOFTWARE (fc1)BOOTLDR: 7200 Software (C7200-BOOT-M), Version 12.0(13)S, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
Router uptime is 0 minutesSystem returned to ROM by power-onSystem image file is "sup-slot0:/c7200-spservicesk9-mz.124-22.T.bin"
[code]....
Router is running with IOS 12.4(24T) and we are having problems like file download stalls, some emails not being send or received. CBAC is enabled on this router with default values. MTU is also the default value. This problem has started all of a sudden. seeing lot of errors in the logs as below:
Oct 27 16:47:52: %FW-6-DROP_PKT: Dropping smtp session X.X.X.X:4443 Y.Y.Y.Y:25 due to Stray Segment with ip ident 25800 tcpflags 0x5014 seq.no 288975356 ack 3363647737*Oct 27 16:48:31: %FW-6-DROP_PKT: Dropping http session X.X.X.X:2020 Y.Y.Y.Y:80 due to Stray Segment with ip ident 1472 tcpflags 0x5011 seq.no 2686554796 ack 4275837539
why my router will not synchronize with an NTP server located an off-site facility; the NTP server is located at the Naval Observatory. I have a Cisco 7200 VXR IOS 12.4 The clock and calendar both are set correctly.
View 2 Replies View Relatedwe got a Sonicwall router and we have been having stability issues. Every 1 minute the TCP connectio is dropped as well as UDP packets. This router is connected to a T1 connection and its requesting a DHCP lease every couple minutes as well. We originally had two WAN connections, and we have disabled the second one because someone thought it was that, but obviously it has to do with the internal network. This is a dual WAN router.
View 4 Replies View RelatedI have a E4200 router, and I had previously plugged in a small external hard drive just to test the functionality. The router seemed to recognize the storage, and the computers on the network could see it as a shared drive. Now I have plugged in a Seagate 7200 internal hard drive inside a Rocketfish enclosure, but the router is not recognizing anything. I just upgraded the firmware to 1.0.04, but there was no change. Are there problems using an enclosure rather than just plugging in an external hard drive?
View 1 Replies View RelatedISP - Comcast Cable Internet Modem model SMCD3GNV wired/wireless combo (2 pcs connected 1 wired 1 wireless)When the connection is online, the speeds are fine- the issue is the 2-3 times a day when the connection drops off. The error that we are getting is "cannot connect with primary dns server" however in our attempts to restore the connection we have: [code] is there some issues in the area that we are not aware of? being that the signal levels are within range what do you think the problem resides in? FYI, both connections, the wired and wireless connections both have connectivity issues equally.
View 6 Replies View Related[code] When the connection is online, the speeds are fine- the issue is the 2-3 times a day when the connection drops off. The error that we are getting is "cannot connect with primary dns server" however in our attempts to restore the connection we have: [code] is there some issues in the area that we are not aware of?
View 3 Replies View RelatedI have a WRT110 router (firmware v. 1.0.04) and a PC and an XBox 360 connected to it (both via cable). Every 15-20 minutes the connection is dropped for appr. 1-2 minutes. I tried modifying several router settings, but the connections are still being dropped
View 9 Replies View RelatedI have a WRT400N and approximately every 30-45 minutes the router will drop all connections (wired and wireless), all the lights will go out and then power light (far right light) will flash for a minute or so. I have tried connecting directly to my modem and I have no problems at all.
View 7 Replies View RelatedI've had this WRT300N for several years and it has worked very well.It suddenly dropped all wireless connections and no one can re-connect. My main pc is hard wired directly to the router and works perfectly as always. 3 wireless pc's and 3 handheld devices suddenly can't connect. I've powered down my modem and router for several minutes, but nothing changed. The firmware was upgraded a long time ago and there are no other upgrades available.
View 7 Replies View RelatedBought an E4200 to replace my Netwgear router and am experiencing the following problem.One of my wireless boxes serves as mu mail server. I've been running this configuration for years so the only thing that has changed is the router.The neworkd is up and all wireless clients can connect, but after some time, access to the mail server just 'freezes'. I say freezes as the nework icon (i'm using ubuntu' still show a connection. In addtion, there are not error in any of the logs. I just seems that the mail server and the router just stopped communication.
View 9 Replies View RelatedI am having trouble with a DAP-1522 in AP mode dropping IPv6 packets. It is running in AP mode to supply connectivity to a number of laptops + a 2nd DAP-1522 in bridge mode. The laptops are able to get IPv6 router advertisements from the same wired network the DAP-1522 is plugged into, but they get nothing when connection to the wireless. Tcpdump sees no router adv's coming over the wireless interfaces when sniffing.This appears to be something others have hit as well url...
View 3 Replies View RelatedI recently purchased a linksys E2500 for my home network. Occassionally, we have dropped connections, on both G and N cards.The router is connected to a corei3-2100 cpu with 6 gb ram and a 1tb hd, running win7 64bit. Ive bought home plugs for my wife's computer(in the house)and.an outdoor wireless antenna (a CCRANE super usb wifi antenna) for my computer in the garage. I still get dropped signals in the garage, which is only about 50 ft from the router. My computer in the garage is an AMD dualcore 4400 with 4 gb ram, and multiple hdds.What else can I do to get a better and more constant connection.
View 1 Replies View Related