I have a small problem and I'm a bit confused, Cisco suggested that you should mark traffic as close to the end devices as possible. So I wanted to try marking the traffic coming from S1 to R1, S2 to R2, and S3 to R3 on Switch 2 (Cisco Catalyst 2960) with the following config:
[code]...
I am trying to mark http packets from a web server with DSCP ef, but when I am doing a traffic capture all http packets have tos 0x0.I am able to mark UDP and ICMP packets originated from this server, but not any TCP traffic.The web server is in VLAN 20This is my config mls qos ip access-list extended MARK-HTTP-ACL permit tcp host 10.10.10.10 eq www. [code]
View 4 Replies View RelatedI am slowly getting this router configured........I am up and running. Traffic from All nodes inside can go outside. My next step is to configure traffic coming in to go to my server. I have Web, FTP, SMTP and POP running on the same server in my LAN. I need to us NAT/PAT to direct incoming traffic to it. I belive I have this done correctly, but obviously not...I only have port 80 configured in the config file, if I can get that to work the rest would be the same........
View 1 Replies View RelatedI have problem with traffic coming from GRE interface and going further through FWSM on the same 6509-E chassis.It's very interesting and confusing. If packets are fragmented, I can go through, however, if I use normal packets (usual ping for example) traffic goes from outside to inside and stops on it's way back.
Here is the detailed info:
WS-C6509-E with WS-SUP720-3B
FWSM HW 4.0, SW 4.1(4)
GRE is done in hardware (source is loopback interface - only one loopback per GRE tunnel).
We have problems on central firewall with restricting traffic coming from remote office from IPsec. (The network sheme is attached) All branch offices are connected to central asa though IPsec. The main aim is to rule access from branch offices only on the central firewall, NOT on each IPsec tunnel According to the sheme:172.16.1.0/24 is on of the branch office LANs10.1.1.0/24 and 10.2.2.0/24 are central office LANThe crypto ACL looks like permit ip 172.16.1.0/24 10.0.0.0/8 the aim is to restrict access from 172.16.1.0/24 to 10.1.1.0/24 When packets are generated from host 10.1.1.10 to 172.16.1.0/24 all is ok - they are dropped by acl2 When packets are generated from 172.16.1.0/24 to 10.1.1.10 they are not dropped by any ACL - the reason is stateful firewall - traffic bypasses all access lists on a back path I thought that TCP State Bypass feature can solve this problem and disable stateful firewall inspection for traffic coming from 172.16.1.0/24 to 10.1.1.0/24, but it didn't work.The central asa 5500 is configured according to cisco doc [URL]
access-list tcp_bypass_acl extended permit tcp 172.16.1.0 255.255.255.0 10.1.1.0 255.255.255.0
!
class-map tcp_bypass_map
description "TCP traffic that bypasses stateful firewall"
match access-list tcp_bypass_acl
[code].....
I have the following setup: Private network <-> SW <-> CISCO VPN <-> ISP MODEM
I have configured VPN part and is working correctly. I have a computer in the private network at static address 192.168.1.100 and an application is running on it on 8100 tcp port for clients.
Now I need to connect from the Internet to the application on 192.168.1.100 on port 8100.
How to configure CISCO router to forward traffic coming in tcp port 8100 to machine 192.168.1.100?? ISP Modem is going to handover all the traffic to CISCO device.
We have configured Cisco 3750X POE series switchs with Stack.WS-C3750X-48P each with Redundant 1100W & 715 W PSU's. They are configured with Stack-Power in Sharing mode and the switches are Smart Stacked as well.IP Phone and Access points are connected its working in last two years,
Now we are facing some issue on Cisco IP Phone and Access point, When i have problem if unplug (disconnect & Reconnect) the IP Phone from Switch port,Power is not comming on switch port.Plug it into another switchport of the same Switch it may not power in any port.I tried shut & no shut and reconfigured on switch port , I have verified multiple switch ports same issue on the switch I have changed cable.
I have RFID Reader (10.10.63.2 - 255.255.255.240) connected Cat-6 POE to ws-c3750x-24p-s - standard TCP/IP web service app pulling data from the reader every 250msec: I have my app server connect via vlan by ws-c3750x-24p-s IP address (128.1.70.1 - 255.255.0.0) as you can see its on a different sub net;
I can ping the device from the server - although I'm not getting any data coming through: my config are as:
0 [switch 1 provision ws-c3750x-24p-s]
1 [system mtu routing 1500]
2 [ip routing]
3 [no ip domain-lookup]
[code]...
I can ping the device from the server - although I'm not getting any data coming through.
Is there any way to do,i on the help menus (what you get when you put in "?")?
View 3 Replies View RelatedNext to network adaptors there are yellow marks in my device manager...as follows.
-??(yellow mark) Other devices
-??? (yellow mark) Unknown device
-??? (Yellow mark) Unknown device
I am using a Sony Vaio with the following Configurations Win 7 Professional 64 Bit SP 1 The Wireless adapter is Intel Centrino N 6230 with the drivers updated The LAN adapter is Realtek PCIe GBE Family Controller
This laptop is pretty new and I had been experiencing some problems with Wifi and LAN connectivity to internet.
Initially there was a yellow mark over network icon but it allowed me to access Internet. I was not bothered then..Offlate this has turned ugly. The yellow icon would not allow me to connect to internet through wifi or LAN
Sometimes LAN would connect but now a days connecting to wifi has become a real task with most of the time having to trouble shoot the connection.
Troubleshooting gives me different suggestions which are as follows
a) DHCP not enabled over wireless networks....Trying to repair the same does not work
b) Your computer seems to have been configured properly.
c) Troubleshooting cannot solve the problem
I cannot connect to wifi in office and home. I had mcafee before but removed it completely using mcafee removal tool..
i'm using win7 and linux mint in my laptop. when i'm on linux i 'm able to connect in a specific ssid with my b43 driver. when i switch back to windows(broadcom a/b/g) i can not connect to this ssid-there is a yellow mark with limited connection. what do you think? is this a driver problem with win7. or win 7 driver has ''less power'' than linux's?
View 2 Replies View RelatedWhen I went to the cmd prompt and typed in ipconfig/all I got...
Ethernet adapeter Wireless Newtork Connection 4:
Description- Dell Wireless Mini Card
Physical Address-00-1E-4C-05-99-B3
[Code].....
I tried to plug in the internet cable in my laptop i kept getting that yellow triangle with an exclamation mark on it (down in the right). i kept plug in and out the cable until i got connected. i use a cable/dsl router, having 2 computers connected in the same time. only mine gave this error, as the other ran perfectly in the meantime. what seems to be the problem? a virus/trojan?
View 1 Replies View RelatedI am showing a yellow question mark on my Ethernet controller.
View 1 Replies View Relatedwhen using Windows 7 network map, there is a "Unknown" with a question mark on the map between my wired pc and the router.
View 10 Replies View RelatedIs there a way to mark BFD control packets in Cisco routers (such as ASR903) with high priority, so it gets treated with priority in swithcing network between two routers, in turn not suffers from packet loss and delay ?
View 3 Replies View RelatedI have windows xp with asus motherboard p5kpl-am se. my issue is that I cannot get on the net. I know there is internet connection, but the computor won't recognise that fact. when I go to repair the internet connection, I get a message ( windows cannot detect any wired or wireless cards on your machine) things I have done is to download drivers for the ethernet card and also the motherboard chipset to see if that would work, but no change. the yellow question mark is still there.
View 4 Replies View Relatedmy computer, my network connections icon have a exclamation mark (!) and it say i don't have internet access,but luckily i have internet access but i can't remote my computer,
View 4 Replies View Relatedin some laptops wireless signal showing yellow mark no internet, but we are getting internet
View 1 Replies View Relatedmy router is sitecom gigabit 300N. since the past week there is this yellow exclamation mark on the connection in the task bar, near the clock. if I pass the mouse over it, it says no internet connection, eventhough I'm connected to the internet and I'm writing this right now, this is on desktop pc and connected to router by cable. the same thing on my laptop that is connected through WiFi, the signal strenght is normal, but there is the same exclamation mark. I'm pretty sure its the router not the PC because this happens on two different machines with the same router. I tried turning the router off and left it that way for about 7 minutes but that didnt work. is there something in settings I should do? or throw it away and buy Linksys/D-link router?
View 6 Replies View RelatedI have some client with Anyconnect 3.0 configured .I want that all traffic (vs. LAN and vs. Internet) is tunnled in the SSL VPN. On the ASA i configured a route that all traffico tunnled goes to Switch 3750. route inside 0.0.0.0 0.0.0.0 192.168.80.229 tunneled The switch ahve this configurtion for the routing
ip default-gateway 192.168.80.228
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.80.228
But if i have a pc that have default gw the switch ip 192.168.80.229 all works fine, but the client vpn have a problem that can't go to internet.I attach a schema and a configuration.If i try to navigate only through the ASA with the client VPN all works. But if i try to tunnle the von traffic to the switch and come back to the and then to internet all stop to works.
I have a L3 core switch with multiple VLANs setup. Is there a way to place an IPS so as to monitor the traffic passing between, lets say, VLANS 1-3 and VLANs 4-10?
View 19 Replies View Relatedi have a core switch of 4500 series. some system are generating the traffic Extra LAN traffic. how i can monitor on switch that which system is generating the traffic,
View 1 Replies View RelatedI have an Cisco ME3400-24TS-A Switch with is not behaving normal.
I have already erased its flash, uploaded new IOS but could not fix the issue. However it boots normally and pass all tests show in boot process. Issue is this the i cant access or ping the computers attached to its ports from one to other.
However i can ping the switch vlan 1 IP from all computers attached to it.
When i tried Debug All Command, its shows the following:
debug all
This may severely impact network performance. Continue? (yes/[no]): yes
All possible debugging has been turned on
Switch#
*Mar 1 00:03:41.467: special_oce_change_vectors: select debug vectors
[Code]....
How do I monitor the traffic passing each individual ports on a Cisco SLM2048 Gigabit smart switch.This switch is the core where other switches connects to.I wanted to know which ports carries the most traffic and probably apply some changes.
View 1 Replies View RelatedI want to mark traffic on Cisco 3020 switch entering to interface gigabitEthernet 0/1 ingress direction with DSCP values. interface gigabitEthernet 0/1 is in access mode and in vlan 10.
This is my config:
access-list 1 permit host 10.10.1.1
class-map match-all ipclass1
match access-group 1
[Code].....
Every so ofter, the switch of the router just stops moving traffic between the LAN and to/from internet, though the WiFi keeps working and can still use internet.
I can still use the router's switch, and ping other computers on the local LAN, what happens is that the router stop routing wired traffic from/to internet, the rest of the issue is still the same, I opened reddit on my smartphone and there it was working via WiFi, but the would have none of it for the computers on wired LAN, not even accessing the router's page or telnet.
It is like some service or bridge between the switch LAN and the router itself dies... I'm still clueless.
The only "pattern" that I see is that my desktop is on line, because I can be not at home for 12+ HS and I can connect remotely to the server (rd p and trans droid) so I know it has internet access, but sometimes I think this happens when I turn on my desktop, like just now, this morning, but again, I feel is not every morning, trying to be more scientific about it I come here after every time it happens to record it, and also set the record straight about the issue description.
So, assuming it is not a hardware issue, because I did not had this problem in all 2011 and 2012, I do not overclock the router neither use other than default TX power level.
- How do I begin diagnosing this issue?
- If it is a known issue with this builds? I could no find it.
My goal is to be able to provide info for debugging the problem and possible finding a fix/workaround it. If it is indeed hardware failing, how do I even begin to diagnose it from that POV? The message is empty...
Even with the new build r21061 still happened two more times. Now the real problem to me, is that I cant even revert it to stock firmware, I tried even with:
- unplug router
- press and hold reset
- plug router
- keep pressing until power led blinks orange
- enter 192.168.0.1 (PC must have static IPA, i use 192.168.0.200)
Can't open 192.168.0.1 in FF nor chrome and does not even ping. [URL]. I just want to get it back to stock or do not hang up the switch-to-router(ing).
I just purchased a new SF-300 managed switch for the purpose of using it on the DMZ, so we can mirror the internet port and monitor traffic for my company. I have set it up from the web interface to miror port 1 to port 2 and that's pretty much it. I decided to test it before putting it in production, by hooking it up to one of my core network switches, connecting a laptop to it and trying to get online. It doesn't even connect to my DHCP server to get an IP address. If I put the laptop back on the same subnet as the switch management IP, I can still connect to the switches web interface. Isn't the basic functionality of a switch to pass traffic?
I should also mention that I'm not a network engineer, so there might just be something I'm missing with regard to a default setting that needs to be switched off?
I have a setup where two servers are on the same network are plugged into a L3 switch. Off that switch there is a WAN Optimizer device which is inline going to the MPLS cloud. Also off that switch is an ASA firewall which leads to the Internet for the location. When the two servers communicate with each other i would think the traffic would only go through the L3 switch between the two servers. I am seeing traffic between these two servers hitting the WAN optimizer for some reason. I would think being that these two servers are on the same network the traffic between them would stay at Layer 2. routing is enabled on the switch because of other vlans on the network. What would cause the traffic between the two servers to leave the switch and go up to the optimizer? Below is a diagram that shows the basic setup.
View 6 Replies View RelatedMy issue: I have installed a firewall within my network. Currently all my clients default gateway defaults to GW:192.168.1.1. I would like all my internet traffic to route to the firewall ip 192.168.1.30. My Primary switch ip is 192.168.1.10, which is a 3560G running 12.2(25)SEE2 IPBASE-M.
My main problem is, I do not have access to the gateway, so I am trying to route internet traffic from within my switch to the firewall. I have already tried Route-Map, but seems this version of the OS does not support. I have already tried Policy-Map, but same as above. I have also tried IP ROUT command, but it did not work either.
And remember, I would like to perform the routing from the switch, because I do not have access to the default gateway which is a router to perform forward internet traffic to the firewall.
I have configured SPAN session on 2960 switch, source port being a VLAN and destination being one of the fastethernet ports. All I see in the capture is control traffic (HSRP, RIP, Syslog, DNS..etc). However I dont see any real data traffic being captured. Below is how I have SPAN configured..
monitor session 1 source vlan <vlan_id> both
monitor session 1 destination interface fa0/42
We are using Cisco 3750 switches in our environment as distribution switches.We currently use to police inbound traffic, but we need to find a solution to limit inbound traffic per IP.Something like this “Inbound traffic for each IP can be maximum 1 Mbps” This can be done having, one ACL and one class-map for each IP, but in my situation is not a practical solution, because we have more than 500 IP’s on that site.
Is any way to accomplish this without writing 500 ACLs and 500 class-map?
