I have CISCO 2911 with SRE module for Wireless Lan controller software. also between my local network and CISCO router is a firewall, CISCO router is an edge router so router and my Lan are in different subnets. i want Wlan and Lan to be in a same subnet is it possible? In other words, can WLC and Access points be in different subnets? the case is that wireless devices should be behind the firewall.
View 5 RepliesAttached is BGP confederation configuration and Topology. They are taken from "Routing TCP/IP Volume 2" book.AS 65000 is designed as a backbone AS connected to non-backbone AS 65535, 65534 and 65533. All are member AS's in AS 1200.I have couple of questions as i think some parts of Sunshine's and Talisman's configurations are incorrect.
1. The next-hop-self keyword is mentioned only for Panorama router, why the keyword wasn't mentioned for Nakiska and Talisman routers? .. As we know, the next hop is preserved throughout the confederation, therefore, next hop self should be configured in all member AS's inside the confederation. The same thing with Talisman, why the next hop keyword wasn't mentioned for Lakeridge and Sunshine?
2. Why the remote-as keyword wasn't mentioned for Panorama in Sunshine's configuration while the keyword was mentioned correctly for every neighbor routers in Talisman's configuration?
3. I don't understand the below statements that are stated in the book, as it conflicts with the rule "MEDs are preserved throughout the confederation"
"AS 65000 can safely send MEDs to AS 65535. A route that includes 65000 in its AS_PATH is not accepted by Sunshine or Talisman, so MEDs sent from those routers to AS 65535 are not seen by other member AS's".
i have made a topology in packet tracer related to etherchannel configuration.i am using 2 3560 switches and 1 2950 switch. Now what i want is to bundle up the redundant links between these 3 switches. The links fa0/1-3 between 2950_1 and 3560_1 switches have been bundled up but when i try to bundle the links fa0/4-6 of 3560_1 to fa0/4-6 of 3560_2 it wont work. i am using channel-group 1 mode desirable between the 3560 switches. secondly if i want to assign ip to port channels then it has to be of same subnet between 2 3560 switches right and it must be same between 2950_1 and 3560_1. But these 2 subnets should be different from one another.
View 3 Replies View RelatedI have a router Cisco 2911 with two possible Wan interfaces out and a backup configuration using IP SLA. When the Primary Interface goes down the traffic is automatically rerouted through the Backup Interface, but the problem I have is that when the traffic is going through the Backup Interface (because the Primary is down) if the Backup Interface also goes down, if the Primary goes up, the traffic is not automatically rerouted to the Primary Interface. And it looks to me like it keeps trying to goes out the Backup Interface and cannot see that the Primary is down. I guess that the pings are going out the backup Interface and as it is down the router doen't receive any anwer to the ping and doesn't change to the Primary.
The main configuration related to the IP SLA is this:
!
track 1 ip sla 1 reachability
!
interface GigabitEthernet0/0
description backup Interface
ip address 175.xx.xx.10 255.255.255.252
ip nat outside
[Code]....
I try to configure PGM in my 2911 plattform but it was impossible. I tried with many 15.1 version that support this protocol.
Someone configured PGM over 2911 Routers? What does correct IOS for work?
We have CISCO2811 model with VWIC2-2MFT-T1/E1 module working good over the E1 line. Since it's getting hard to find new model of CISCO2811 we decided to connect new branches with CISCO2911/K9 model (according to migration doc)
My question is can we use 2811's old config file with the 2911 model directly?
How I configurate EHWIC-3G-HSPA+7 card on 2911.
View 3 Replies View RelatedI am attempting to establish a Site To Site VPN between our SA540 and 2911 routers and somewhere I have a misconfiguration that eludes me. I suspect maybe in the 2911 Transform Set? Here is the output from the SA540. [code]
View 1 Replies View RelatedRelease 6 controller 9 Mesh APs. 1524 (2x 5G radios, 1x 2.4G) and 1522 (1x 5G radios, 1x 2.4G) Designed for 3 linear hops and then a split to the rest.
AP1 = Root AP
linear to
AP2
Linear to
AP3
Linear to
AP4
equidistant to
AP5 and AP6
The rest are further away from AP4, but have visibility back to AP 4 The issue is after an event (say a power outage) at AP4.AP5 uses AP3 as it's parent.That's okay during the power failure, but when AP4 comes back up, I want to force AP5 to switch it's parent to AP4.You may ask why, if AP5 can reach AP3 okay, it's okay to leave it that way.
test --------packet loss %-----
speed AP3toAP5 AP3toAP4 AP5-AP4
===== ======= ======= =======
54M 100 0 0
48M 100 0 0
36M 52.6 0 0
24M 1.44 0 0
18M 0.89 0 0
So you can see it's desireable now that AP5 uses AP4 as it's parent.Over time, the system might figure it out, but our limited experience shows it seems to stick to the way it is.To complicate matters, sometimes we've found that it doesn't seem to reconfigure when the channel number has changed so AP5 can reach AP3, but AP4 (1524) comes up with a different channel on it's downlink radio.So, how can we force a mesh topology reevaluation/change for either 1 AP or the whole bridge group?I thought changing the bridge speed from "auto" to 54M (on AP3 above, for example) might force the attached children to rethink it, but it didn't seem to work (maybe I needed to wait an hour?).I also thought tweaks to "Radio Performance Profile" for radio might work. (not sure what to change, or how long to wait for a result)reseting APs and hoping they come back in a better topology is painful and slow.
I have to build a MESH topology with 1 Root Access Point and 4 Mesh Access Points which are 1552E.I have a wireless controller which is a WiSM 2 card into a 6500 chassis.I want to know if there is a pre-configuration to do on the AP before installing it, or if they are automaticaly discovered by controller (even for MESH AP which are NOT wired to LAN) ?
View 15 Replies View RelatedI am having one router CISCO2911/K9 (Cisco 2911 w/3 GE,4 EHWIC,2 DSP,1 SM,256MB CF,512MB DRAM,IPB). But now my management asking me to upgrade this router as CISCO2911-SEC/K9.
What will be the BOM for this up gradation.
i have an issue with the lms 4.2 Topology Data Collection. After installation the Topology Data Collection was running normaly, but since first server reload the Topo Data Collect under Inventory > Dashboards > Device Status > Collection Summary is "frozen".Is there any option to stop this process elsewhere? I cannot find anything under jobs in running state or so. Clicking on Schedule only give me the option to start data collection, but lms always returns that the process is running.
View 9 Replies View Related1)i have problem in LMS 4.2 , he shows most devices not connected to topology sitting lonly even though the have cdp enable , how to force these to join the topology
2)why some devices are shown unreachable , even though i can ping them from lms server and gets reply, also they have community and cdp configured
On a LMS 4.0.1 :I want to know what is the right way to change the telnet program on the campus mgr map (topology services map), when right-clicking a device icon and selecting telnet.I would like to use a tool of mine, and not to launch a telnet command from the IE browser.I changed the default telnet of Windows in the registry, but the program is still launched as a telnet URL in the browser and this is not what I would like to do.
View 2 Replies View RelatedThe regular problem with the LMS topology and WAN Links when you see the branches are disconnected from the HQ BUT in my case the branches are already connected via Layer2 links but unfortunately some intermediate layer2 modem/switch exist in some branches which prevent CDP discovery but you will find both HQ and branch router in the same subnet .
View 1 Replies View Relatedi have only 1 switch 2960 POE at customer enviroment.i did run topology service and checked on the right side POE CAPABLE Devices
it shows me that i have 4 switch POE while actually there is only 1 switch POE in real enviroment.
have ether-channel across 2 switches?i am new in cisco LMS . now i am in client site installing cisco LMS 4.1 in UCS server-rack version. we did it well for the installation, and the LMS working properly until i cannot open topology service.
i attached the error message
I have a customer who wants to disable cdp on all switches for securtity reasons. The same customer has also LMS 4.0 installed.
When disabling cdp, does it affect the topology services on LMS? Can you still see the topology tab on device manager or the topology map of the entire network?
I config the routers with EIGRP and also write Static route between two PC before remove the link between router0 and router1 , destination is reachable , but when remove this connection , packet from pc1 to pc0 will drop in a loop and never reach to destination , is it possible to have a Link state routing protocol and static route at the same network like this scenario , how to prevent loop in this topology static route is configure as bellow :
router0 <==> router 1 <==> router2 <==> router3 <==> router <==>pc1
I have problem with topology view in LMS 4.2.1, it doesn't show the tunnels connecting branches, though both devices are shown in sh cdp neighbour command output. If I choose Show Devices in Admin > Collection Settings > Data Collection, it is showing cdp neighbours correctly.
View 4 Replies View RelatedI am running LMS 4.2 , using that i am monitering some switches . I am using topology services also. In that i am getting veiw of all connected devices with links. But bandwidth utilization is for those links are not showning in topology veiw .
Is there any settings to be done in LMS 4.2.2 or any configuration changes to done on my switches ? to find the traffic flow bandwidth utilization.
I installed LMS 4.0.1 and every module works from the local server. Http login from a remote system, topology services does not start, complains about java version. I followed the link to install the java version, it then complains about some Ansiserver stuff.
the client os is win7 64 bits, eplorer version is 7.
i have a problem that i see the devices by ip not hostname in devices report and topology and i checked in device discovery to appear by hostname
View 2 Replies View RelatedWhen i try to launch topology services in LMS 4.0 i get prompted to install a java plugin. When i install this it tells me to restart the browser but nothing is changed, it asks me if i want to install the java plugin again.
View 7 Replies View RelatedI'm trying to make an attached topology. This router should be attached to 2 different ISPs on both WAN interfaces (ISP1 with IP address - A.B.C.D, and ISP2 with IP W.X.Y.Z) and I want to use DMZ, too. My idea is to make a L2/L3 segmentation with 2 VLANs - Vlan RED for DMZ (private network 192.168.1.0/24) and vlan BLUE for Internal network (network 192.168.2.0/24). I checked in the manual that vlans are supported, but I can't see anything about 802.1q, can I use one trunk port or I should use 2 physical cables?
There should be inter-vlan routing and basic stateful firewall, so PCs in Vlan Blue should be able to initiate connections to DMZ servers, but the opposite should be denied. Router should make a port forwarding on its both WAN interfaces and forward incomming traffic (from Internet) to DMZ servers (with NAT). Both DMZ servers and internal PCs should have an internet access with NAT over both WAN uplinks.
Can I use RV042G for this setup and if not at all - are there any cisco SMB device which can do this?
I work with the topology view in LMS 4.1. I can see all the links between the differrent switches (N7K, 3750, 3040).I miss only the links between the different N7K's. This links have one special thinks: they are configured as " rate-mode dedicated force" In the N7K cli this interfaces are displayed with the SN too.
sw-bb13# show cdp ne.The links to sw-bb11 and sw-bb21 are not painted in the topoloyview.
Using Topology I can show device view from all my managed VTP domains. I don't understand why all links are "not in network"!?
View 3 Replies View RelatedI am trying to configure MSTP on Layer-2 network at work. We have multiple switches connected on Wireless point-to-point links with redundent links.MSTP is configured with multiple regions. All the servers are located in RegionA and other regions are connected to RegionA via multiple links.
There are 3 SG-300-10 switches in RegionA --- SwitchA_1, SwitchA_2 and SwitchA_3.One of the simple regions (RegionB) has a single SF-300-08 switch (SwitchB) connected to SwitchA_2 via port e7 and SwitchA_3 via port e8. Hello Time, Forward Delay and Max Age are at their default values of 2, 15 and 20 respectively. The link between SwitchB (port e7) ---- SwitchA_2 is the primary link with cost 200,000 and the link between SwitchB (port e8) ---- SwitchA_3 is the backup link with cost 500,000.
The log on SwitchB is shows in the table below. As it is seen from the table there are frequent topology changes for very short duration (1-4 seconds) before the topology settles back to the configured one. (Primary link forwarding and secondary link blocking). During this time there have been no link failures reported.Same thing is also observed within RegionA (SwitchA_1, SwitchA_2 and SwitchA_3 are connected to each other).
How to stop these frequent topology changes? The topology changes within RegionA causes a lot of PPPoE sessions to reset and re-establish.Is there any way to find out what triggers these topology changes?
21474646232011-May-24 13:54:15Warning%STP-W-PORTSTATUS: e7 of instance 1: STP status Forwarding21474646242011-May-24 13:54:15Warning%STP-W-PORTSTATUS: e7 of instance 0: STP status Forwarding21474646252011-May-24 13:54:15Warning%STP-W-PORTSTATUS: e8 of instance 1: STP status Blocking21474646262011-May-24 13:54:15Warning%STP-W-PORTSTATUS: e8 of instance 0: STP status Blocking21474646272011-May-24 13:54:13Warning%STP-W-PORTSTATUS: e8 of instance 1: STP status Forwarding21474646282011-May-24 13:54:13Warning%STP-W-PORTSTATUS: e8 of instance 0: STP status Forwarding21474646292011-May-24 13:54:13Warning%STP-W-PORTSTATUS: e7 of instance 1: STP status Blocking21474646302011-May-24 13:54:13Warning%STP-W-PORTSTATUS: e7 of instance 0: STP status Blocking21474646312011-May-24 12:53:22Warning%STP-W-PORTSTATUS: e7 of instance 1: STP status Forwarding21474646322011-May-24 12:53:22Warning%STP-W-PORTSTATUS: e7 of instance 0: STP status Forwarding21474646332011-May-24 12:53:22Warning%STP-W-PORTSTATUS: e8 of instance 1: STP status Blocking21474646342011-May-24 12:53:22Warning%STP-W-PORTSTATUS: e8 of instance 0: STP status
[code]....
I'm designing a new topology to access to the Internet using Cisco2921 NAT and MS ISA Firewall. I'm going to use ISA as a proxy to public some internal services and to provide internet access for my users. ISA won’t use NAT. It will route traffic. Cisco 2921 will handle NAT, ISP Failover and IPSec VPN to datacenters.
Cisco 3750 will route outbound internal traffic.My routing for internal users on Cisco 3750 will look like this: [code] My question is about route from Cisco 2921 to my local network 192.168.0.0/22.If I use this route, I'll restrict my traffic from datacenter to go through ISA server BUT all responses from the Internet will go directly to 3750 too.I doubt about security and functionality of such solution. Of course I will public my internal resources to internet that way. It is on Cisco 2921
ip nat inside source static tcp 172.16.0.2 80 (my external IP) 80.I could use PBR to divide my traffic from datacenter and other traffic, but I don't know how to use PBR with IPSec VPN traffic.
After some time LMS stops to refresh network topology (not changing colors for devices which lost/found). However, if I restart topology services devices are refreshed.
Checked the processes. Everything is fine but there is a process named "1018". But I did not found any job with this number.
I have problem with LMS 4.0 when i connect the topology from client PC. On client PC (Install windows 7), I had some check:
- Telnet LMS 42342 ------ OK
- Add host in Program files/system32/drivers/etc: 10.10.10.14 LMS
I have HQ and Branch router
HQ = 2811
Branch = 2801
Connection type Freme-relay between HQ and Branch
CDP enable on interface
The Branch router show in UNCONNECTED DEVICE VIEW of Topology
I have users that are unable to save their changes to topology maps - when devices are moved in a map and the map is exited, the next time the user goes into the map it is back at the default layout. The unusual part is that this does not affect all users - I have two users with the same CiscoWorks rights, but only one can save map changes. The admin user is one that can't save map changes. I'm running LMS 2.2 on Solaris 2.8. The problem existed before and after I upgraded to Campus Manager IDU 11, and stopping and starting services hasn't worked.
View 7 Replies View Related