i am new to MPLS on cisco routers. For our interoperability testing i need MPLS tunnel counters output ( data sent out and data received.). i am not able to find this information in cisco user guide. As per standard it is defined in MIB table mplsTunnelPerfTable of stdte.mib.
View 7 RepliesMy RVS4000 router freezes up when a lot of data is being pushed through the Ipsec tunnel. Let me explain in detail.
On physical location A, I have an RVS4000 router (with IP 192.168.3.1) which is permanently connected with a WRVS4400 router (with IP 192.168.1.1) on physical location B. The Ipsec tunnel has been configured using the Easy Setup Wizard of Cisco and has been working fine and stable for months. Both routers have another Ipsec tunnel with another WRVS4400 router (with IP 192.168.2.1) on physical location C, but this router does not play a role in the problem below.Recently, I’m trying to set up a remote backup service between physical location A and B using “rsync”, which uses port 873. Due to the Ipsec/VPN tunnel, I could configure rsync to move the backup files from our NAS on location A (NAS has IP 192.168.1.2) directly to location B (NAS has IP 192.168.3.2). Both NAS-devices are of the brand Synology (DS211J). The Ipsec tunnel guarantees that the data is coded and thus secure.
However, when pushing the first batch of data, I noticed that the router on the receiving end (RVS4000) freezes up after approx. 1,5h after the batch has started, which is after approx. 1 gigabyte of data has been transmitted. The connection with the WAN is lost, also the VPN-tunnel is not working, I cannot ping the device or reach its configuration pages (on 192.168.3.1), the only option is unplugging it and letting it reboot. I’m thinking the router cannot deal with the huge amount of data that needs to be decoded. I tried 5/6 times, with always the same result (timing / amount of data pushed through before router freezes varies slightly).
Is it at all possible to channel all/some data traffic through an established ipsec tunneled connection using the RVL200? I have successfully established an ipsec connection through RVL200 and RV042 routers and are able to connect to servers/computers behind it.Now I want to channel all or some traffic through the ipsec-tunnel for computers that reside on 192.168.1.0 subnet of RVL200 network.
Main office - RV042 router - 10.200.62.1
Remote office - RVL200 router - 192.168.1.1
I am trying to use the Advanced Routing option to add static routes but I am not 100% sure if I am configuring the routes correctly.To give an example of routing DNS requests for HOTMAIL.COM [65.55.72.183]: [code]For some reason this does not appear to work. I have also tried using the interface setting of WAN and tested - this also does not work.
We have an aironet 1130ag in a remote office connected to the data centre over MPLS. The Radius server is based on server 2003.We have hundreds of these points set up exactly the same but this is the only one giving me issues, I even stripped the config and rebuilt it and then swapped with a new access point
The issue is that clients can't authenticate when connecting to the access point but provides nothing in event viewer. Checking the RADIUs server provides nothing either.The access point error logs just state station: authentication failed
On looking deeper into the problem I enabled RADIUS debugging on the access point and got some interesting results, in particular is the line:
no sg in radius-timers: ctx 0x12EF0A4 sg 0x0000.I can't find out what no SG in Radius-timers actually means, but after that line appears I just see more retransmits and no sg fails.
I inspected the packets on the RADIUs server and found lots access requests coming from my access point and lots of access-challenges returning back from my RADIUS server - I'm not sure how often that's supposed to happen or if it's a one time occurance. I did however see directly after the first access-request that the RADIUS server returns with UDP and is fragmented, length is 1514...... could this be the problem? If so why cannot it hanlde fragmented packets?
I am facing Voice Quality issue in Cisco Ip phone. However I don’t have any issue while calling between extension in the same Site. I am facing voice quality issue while traffic flowing through the MPLS over GRE tunnel. Its working fine If I am removing the mls Qos in Cisco 3550 Interface.
[Code]....
One of the customers has deployed Cisco 7609S in their infrastructure for Branch/RO connectivity. When we tried to configure per-tunnel QoS with DMVPN for MPLS connected sites, we came to know that Cat 6500 and Cisco 7600 series routers don't support this feature.
Now, we are looking for suitable replacement of Cisco 7609S. I found a document for configuring above feature on Cisco ASR 1000 series routers, but it has many restrictions always.
We are now looking for
(a) suitable platform in the league of Cisco 7609S which support above feature.
(b) suitable technology replacement of DMVPN with minimum restrictions.
I am attempting to monitor bandwidth utilization of the WAN port for the RV180 via SNMP and I am getting strange results. If a 256MB file is transferred from a remote server (without compression), the ifInOctets counter doesn't increment by anything resembling 256MB:
$ snmpget -v2c -c public 192.168.1.1 IF-MIB::ifInOctets.5 IF-MIB::ifOutOctets.5
IF-MIB::ifInOctets.5 = Counter32: 365402138
IF-MIB::ifOutOctets.5 = Counter32: 32610053
[Code].....
I'm reasonably certain that the .5 interface is the WAN port based on the value of ipAdEntIfIndex.X.X.X.X, but even if that were not the case, none of the other interfaces increment by a value close to the amount of data transfered. SNMP monitoring of a WAP121 on the same subnet returns expected results. I can only assume that SNMP on the RV180 is completely broken.
The router has the latest firmware available (1.0.1.9). There is only one network connection and the RV180 is the default gateway for all internal hosts.
I am not a ASA expert but I have configured them few times. I have a vision of a task I have to complete but not sure if it is practical or how to go about doing it.
We two locations, Location A and Location B. Both locations have a 100MB internet conection. Location A has a ASA 5510. Location B has a 5505. Users at both locations access the internet via their respective ASA. Location A is the headquarters and Location B is a disaster recovery site. We want to setup a tunnel between both ASAs. This tunnel will be used to replicate data between the two locations for DR purposes. We need the users to still use the same pipe to get to the internet but want to allocate 10MB for internet use and the remaining 90MB for the DR tunnel.
I have P router (7206VXR) and I need to export netflow from its MPLS interfaces to the netflow software.
View 2 Replies View RelatedI am using a Cisco RV110W (Firmware 1.2.09) in a branch and I would like to create a VPN Tunnel to another site that has a Cisco RV042 (firmware v4.2.1.02)
What would be the correct Configuration? the current configuration I am using is
in the RV042 i am using
Check Enable
Local Group Setup
Local Security Gateway Type : IP Only
IP Address : RV042 Pulbic IP address
[Code].....
Having a terrible time finding a single, dual or quad recessed 1 gang data receptacles! All I can find is 2 gang Electrical and Data combo's from Levinton like the one below. I already have Leviton's 1 gang duplex recessed electrical in the wall, and the cat6 keystones terminated in an MPLS wall box, so replacing both of these drops with the 2 gang outlet below would be a nightmare and I don't want to do it.
View 6 Replies View RelatedEnvironment :linksys wrt300n v1.1 which can have ddwrt-mega. Willing to tunnel all lan's outbound traffic through an ssh tunnel.
View 2 Replies View RelatedWe have Cisco 1921 routers that a provider is using for MPLS. They have it configured so that all internet trafic is passed to an internal ip address that is our proxy server. However, they are pushing all of the routing rules down to the workstation which is causing the local route tables to grow to be massive in a very short time.For example, the second I ping a website, the ip address is resolved and then the route is added for the source ip address with the default gateway of the proxy server.I would have thought that all the rules would have been handled by the router and let it keep the table entries.
View 2 Replies View RelatedI wanted to ask a question about the diagram I have included. We are bringing up 2 MPLS WAN connections and would like some specifics on the best design. We are using BGP to the providers. From there we have big questions. We can run BGP internal and are licensed to do so on the N5K's. The N5Ks are currently using HSRP for inside LAN clients as default gateway. We want to load balance and provide redundant routes using a dynamic approach. Should we use BGP internal utilizing the connections between the routers? Should we use HSRP on the routers? How best to get the routes to the N5K and should we be considering this?
View 5 Replies View RelatedHow to set up a home network with 2 routers, where R1 acts as the DHCP server and R2 is basically a switch, connected LAN to LAN and everything is on the same subnet. Currently I have a different setup:Both routers have the DHCP server enabled and I connect R2's WAN port to R1 LAN. Therefore I have 2 subnets. Now my special requirement is that R2 is a DD-WRT router, which establishes a VPN connection to StrongVPN, so that all internet traffic via R2 is encrypted and goes through the StrongVPN server. Now my question:If I change my router setup to the same subnet, meaning R2 connects LAN to R1 LAN and I disable DHCP server on R2, will R2 still be able to establish the VPN connection?
View 5 Replies View RelatedI recently switched over to a new cable modem/wireless router, which is the Zoom DOCSIS 3.0 (Model: 5350-00-03). Me and my brothers have set up a second router, a Netgear N300 (Model: WNR2000v2), on the other side of the house. After the switch, our data usage has been increasing. I just want to know if having two routers affect more data usage.
View 3 Replies View RelatedWe have a Lan with several multicast routers. Each router handles different multicast groups sent by remote sources to the hosts on the Lan. All the routers are connected to a Cisco 3560G switch. The routers range from 7204s to 2621XM, and even a 6503 switch. We found that each router is constantly bombarded with multicast data from each other router, even though the router did not join any groups. Obviously, we'd rather not have this happen, because it causes each router's CPU to rise to very uncomfortable levels. If I bring a new router onto the Lan, as soon as I enable multicast, the data starts hitting the router's interface. In an attempt to stop the traffic, I protected each router port, so that (supposedly) the router will not be able to communicate with any other protected port.
View 5 Replies View Relatedhow to configure WRT54GC compact Router if the data should be configured to flow from PC1 through Switch to Router and then to PC2 back through Switch in the following configuration?
(PC1) -------------------(SW)--------------------(Router)
HD: 10.14.40.10/16 |
G/W: 10.14.40.1 |
[Code]....
That's, the data flow is PC1 -> SW -> Router -> SW -> PC2. I think that Router has to have both routing of 10.14.40.1 & 10.14.50.1, but how should I configure the router?
How to make compatible data card with all Wi-Fi router
View 1 Replies View Relatedwhat the maximum Data Througput can be for this router. Right now, the router is limiting my internet speed compared to what the cable modem can provide..So far, I know that when I connect my computer directly to the output of the Motorola Cable Modem and run a Speed Test on my Charter cable connection, the test shows ~ 50 Mbps for downloads and ~5 Mbps for uploads. That would be great, but I have multiple computers and need to use a router/gateway to feed my LAN. When I insert the RVS4000 router between modem and computer, the Speed Test results drop to ~ 16 Mbps for downloads and remain ~ 5 Mbps for uploads. During that test, there were no other computers online via the router. While 16 Mbps is not shabby, I would like to achieve the full value... is that possible?
Is the RVS4000 unit capable of 50 Mbps for 30 Mbps? How do I setup the router to achieve the maximum available download speed?There is a setup page for the router which has settings right now set at 50000 Kbps Upload and 60000 Kbps for Download; this implies to me that the router is capable of such speeds.
I have 1941, 2901 ISR routers. I will use 3G backup when primary link (metro ethernet / G.SHDSL) goes down. Do I have to use Data License (SL-19-DATA-K9 / SL-29-DATA-K9) in order to switch back to 3G when primary link is not reachable) ?
View 7 Replies View RelatedI am monitoring my WRVS4400N with SNMP and create graphs by MRTG. Problem is that data about traffic are strange, very low. I have 50 MB line but max traffic shown on graphs is about 8000 bits per second. Also the "shape" of graph does not correspond with real traffic.
View 1 Replies View RelatedThis is a new RV180 install. FTP data transfers fail in binary mode. By fail I mean the first packet sent, isn't accepted (acknowledged?) by the FTP server (Network Solutions, Passive Mode), . If I pull the router and replace it with an old D link router or 5th gen Apple Airport Extreme, everything else the same, it works OK. I lack the tools and knowledge to proceed beyond this point.
View 12 Replies View RelatedRSTP port role in the switches are flapping if broadcast data is flowing through the ring. Also I've tried applying broadcast suppression to all the port to 64kbps for ports of 100Mbps/1Gbps, All the devices I'm using are L2 switches.
View 1 Replies View RelatedI want to limit data consumed by one of my devices; how can I do that. I have set up wireless network using Belkin AC 1200 DB.
View 1 Replies View RelatedWe have recently deployed several Ciso 887VAW (IOS 15.1(4)M4) to customer premises and I have come to realise counters show extremely high (not at all accurate) output rate and packets on all of them. [code]
View 2 Replies View RelatedMy customer recently deployed WLCs and WCS in their environment. However, recently they experienced slow performance. To futher finding out the root cause, I generated the 802.11 counters report from the WCS and noticed the following parameters is shown. Tx/Rx Fragment Count/Sec and FCS Error Count/Sec
1. Can I make the assumptions that the overall transfer of packet rate in that interval is the Total of Tx/Rx Fragment Count/Sec and FCS Error Count/Sec?
2. If the output rate of Tx/Rx Fragment Count/Sec and FCS Error Count/Sec are the same, does it mean that 50% of the packet are corrupted and this high FCA Error Count/Sec will cause performance degradation to the wireless througphput?
3. What is the baseline of the FCS Error Count/Sec that is acceptable? As for the case with wired, 1% error rate is acceptable. Will wireless have the same baseline?
If I have the IP ACL firewall enabled in my RVS4000 I have trouble connecting to specific websites and also connecting to Apple's update servers. The problem appears to be that the firewall is blocking incoming data to the ephemeral ports even when they are allowed in the firewall rules. I've also tried port forwarding rules but the only thing that resolves the problem is to disable the firewall entirely, which is not the desired resolution. The firmware version is 2.0.27.
View 11 Replies View RelatedIs Anyconnect supported for SA540 I have installed in on my android phone however I keep getting error "Unable to process data received from secure gateway" when trying to connect. If anyconnect is supported on SA540 how do I get it working?
View 1 Replies View RelatedWe have a quad port NIC on our Dell server.I want to take all 4 ports and plug it into our switch and have it all go to the same IP of the server and just have to share the data load in/out.Do I need to configure anything to do this?
View 6 Replies View RelatedShort of rebooting, is there a way to clear this counter on an ASA 5505?
sh int
Traffic Statistics for "inside":
39514338 packets input, 3103793436 bytes
13578097 packets output, 15566854561 bytes
[Code] ....
I notice strange input rates on the interfaces of a 881 router:
show int fa4
..
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec
..
30 second input rate 85000 bits/sec, 11 packets/sec
30 second output rate 16000 bits/sec, 9 packets/sec
221434 packets input, 287889736 bytes
..
..
142286 packets output, 15683576 bytes, 0 underrun
How can 11 packets/sec be 85000 bits/sec -- average packet size of 8KB?. The total packets input (221434 packets versus 287+ MB) also shows this kind of a 10KB+ average packet size. There is ahardly any traffic through the router when the above snapshot was taken so 11 packets/sec sounds right, but not the 85Kbits/sec.
The router is running c880data-universalk9-mz.151-4.M4.bin and config is simple with a single Vlan (inside NAT) with a public IPs on fa4 and a couple of IPs for dynamic NAT. Everything works fine except for these interface counters that look worng.
I have ACS 5.1, I have created a user with privilege 15. I need to allow a single command by command set. I have configured command set. in command set setting i have unchecked "Permit any command that is not in the table below"
and added command as below.
Grant Command Argument
Permit clear counters
its allowing me to run clear counters, good is its not allowing to show run and configuration t commands. And problem is i can run reload command also even show interface commands.I just want to allow clear counters command only.