I need to remove (or change) the default entry in the routing table for Windows XP, which routes packets with a destination equal to the adapter's address to localhost. The reason for this is I want the PC to be able to send packets to a device (with IP address A) connected to one adapter on the PC with IP address B, even though a second adapter on the PC has IP address A.
View 1 RepliesThe issue is occuring on our local LAN where my ARP requests are being modified after a period of time by the router for one host. I'm finding that the host will work fine with the correct MAC IP pairing for a period of time and then about 15-30 minutes later, the arp table is changing so the associated mac/IP address is now the mac address of the router interface.
The FastEthernet 0/1 port has no ip proxy-arp enabled and is set with ip nat inside.This only started happening after restarting the router, however the running config was saved as the startup config prior to the restart.I've tried hard-coding the entry with the command arp 10.15.4.190 c82a.1459.0579 ARPA however that is not working as expected.
The device is an 1841 ISR with the advanced IP Services bundle loaded. Is there some way that the router is viewing my host (provides DNS, Directory Services) as a intrustion attempt and somehow rejecting the packets?
I have a problem connecting SRP541W to my ISP (L2TP). Connection is established, but default routing table is wrong: instead of gateway I see Server IP: [code]
In similar situations other users of my ISP with Cisco routers (IOS) solved this problem by adding command no peer neighbor-route but i can't do it through the WEBgui...
I have a question about filtering incoming bgp route updates from an internet provider. This provider sends the full internet routing table and default route and on an incoming prefix-filter on the customer switch (C6509-sup720) the default route is only accepted.What happens on the 6509 switch when the BGP peer flaps?Does it need to process all the internet routing updates, and if yes probably it cannot handle all these updates?What happens with the CEF table, will the switch install the routes first?
View 4 Replies View Relatedthrough asa webvpn we need to provide our user remote destkop access; we would not use static rdp:// bookmarks for this accomplishmet as this would grow too much management effort with bookmarks updating. Our strategy would be to give users the "url entry" bar where they can input the resource name (example: "pc-flavio.mydomain") so the management effort is outplaced to the guys who manage the dns server. This stated, we noticed that most end-users would get in troubles because of the default-ing "url-protocol" is http://, so they don't change it to the correct rdp:// from the drop-down list and don't have the java-rdp applet started. There is a chance to admin the default protocol for URL Entry Functions? Our setup is asa 5510 ver 9.1, act/stb failover.
View 2 Replies View RelatedIn datasheet of WS-SUP720-3B - link- was said that are only supported around 256K routes (fib?rib?).With this value I can't get 2 full bgp - that is around 850K ..
The supervisor is that control this or just memory ? I said this because I have a 7204-npe-g1 whith 2 fullrouting and 1G of and he are ok..
In my environment, VPN users are connecting to corparate network via ASA 5540 and using 3.5.1, 4.8, 5.0 (32 bit) and 5.0(64 bit) VPN clients.After they have built VPN connection, they use program that generates traffic to a bradcast address (x.x.x.255) inside corparate network.
There is no problem with users who are using 3.5.1 and 5.0(64 bit), but 4.8 and 5.0 (32 bit) vpn clients can not add ARP entry to Windows machines ARP table. If i add ARP entry for x.x.x.255 on VPN interface, they can work.
1) I had Windows XP 2012 Security virus that I removed. The antivirus software also removed afs.sys and afs.reg file, that I repalced from backup. I also copied and merged afs.reg Doing this got me an ipaddress for my PC.
2) I can not connect my wired desktop to the Internet. I can ping the ip address of google.com but not the url. I can also not ping ip address of netgear.com. My laptop has no problem connecting to the wireless network.
3) I ran Winsockxpfix and flushed dns and no luck. [code]
I was working on adding a Cisco 6513 to TACACS but ran into trouble. While I work on the issue offline (recreate and test another switch), I wanted to place this switch on radius temporarily.
For some reason i cant undo/delete the AAA commands in order to point to my radius server. Below was done via console: [code]
I disabled my telemetry port on the Cisco 6513 as a precaution. The IOS im using is "s72033-advipservicesk9_wan-mz.122-33.SXI5.bin".how to remove the AAA authentication statement. Hope its not intrusive cause i have a customer on the box.
NTP server When I setup NTP server to take time from [URL] everything is working fine but as soon as I reset my router during boot I can see that router is first trying to get time before it's even connected to ATM and when it can't get time from NTP server it's removing NTP line from configuration (ntp server uk.pool.ntp.org source Dialer0 ). How I setup to wait with sync and do it once ATM connection is up and established? Or How to get IOS to leave this line and sync with NTP every 10 min)?
View 9 Replies View RelatedWe have a stack of 3 cisco swithes 3750s WS-C3750G-24TS 12.2(25)SEB4 .We plan to recover a switch from the stack as it is not needed any more The switch we plan to recover is the existing Master.If we change the priority (switch 1 priority) and make another switch the master using command line will we have any loss of connectivity to the servers conecting to the stack ?
View 1 Replies View RelatedI have 2 x 3750's in a stack, switch 2 is the master. We only have 5 hosts in each switch so we decided to move all hosts into switch to and removed switch 1 as we need it elsewhere. Anyway all worked fine, but I wanted to tidy the config up as it was still provisioned so I removed the provisioning for switch 1 and the config was now showing ports 2/0/1 to 2/0/24, I then wanted to renumber switch 2 in the stack to 1 and saved the config to NVRAM and reloaded and then disaster the switch reloaded with it provisioned with 2 switches. Switch 1 was now the main switch with no config on ports 1/0/1 to 1/0/24, but the correct config was still on 2/0/1 to 2/0/24 so I just copied those ports over switch 1's ports and then removed the second switch and all was good, but I did this all wrong, what is the best way to un-provision a switch from a stack and change the master?
The more I think about it when the switch 1 member was removed should I of copied the port config from the switch 2 (master) first and overlaid it on ports 1/0/1 to 1/0/24, renumber then master form 2 to 1 then rebooted, then removed the 2 switch from the provision?
We have a live stack with 4 Cat 3750 switches of mixed varieties. Switch 1 crashed the other day and didn't come back up. A power reset brought the switch online again, and switch 2 is now running as the stack master. We are going to replace switch 1 in a staged approach to minimise client downtime. Switch 1 is a ws-c3750-48ts and we will be replacing it with a ws-c3750g-48ts. I will be pre-provisioning and installing the new switch into the stack as switch 5 and configuing the ports to be the same as switch 1. The cables will then be moved over from switch 1 to switch 5 so the changeover time should be minimal. When all cutover, I'll power down switch 1, reconfigure the stack cables and remove switch 1 from the stack.
My question is to what occurs next. If I perform a 'no switch 1 provision ws-c3750-48ts' will I be left with switch 2 through to 5 (ie no switch 1)? I can live with this moving forward. I know I can renumber switch 5 to be switch 1 if I want, but my understanding is that I have to reload the member switch which is something I'd like to avoid at this stage. In my reading, I saw the statement - "Note: You cannot use the switch current-stack-member-number renumber new-stack-member-number global configuration command on a provisioned switch. If you do, the command is rejected." I'm a bit confused by this statement, I'm assuming that it is saying that if I do as above but don't issue the 'no switch 1 provision' command, I cannot renumber switch 5 to switch 1 but as long as I use the 'no switch 1 provision' command first, I can renumber switch 5 to switch 1? Will all of my switch 5 port configuration information and any associated references (eg port-channel configuration etc) be changed from gi5/0/x to gi1/0/x if I do renumber?
I am a bit confused by the output of 'show run' and 'show run switch-profile' that pertains to a port-channel interface configured in a switch-profile. My main gaol is to find out how can I add/remove the allowed vlans the port-channel (configured as trunk) carries. The setup is like this. I have 2 N5k in vPC domain and Etherner1/11 on both switches is configured as trunk vPC that connects to a core switch. When I issue ‘show run’ for the port-channel and physical interface I get the following output. [code] From above it seems the switch-profile configuration is missing the 'switchport trunk allowed vlan' in the port-channel interface. If want I to remove vlan 30 from the allowed vlan, should I go under the switch-profile mode and remove vlan 30 from the allowed list even though the switch-profile configuration seems to be missing this.
View 2 Replies View RelatedWe have a site and on that site we have a server which is down form last two days. However , to manage these devices we are not using any tools. We are not able to find this server that where it is located and on which switch it is connected to.
I want to know that the timer for mac address is 5 minutes and arp timeout is 4 hours . Is there any way to find out the mac address of the server . I feel like this can we done with cef ? Is it true or not I am not sure. I am running 3750 stacks and 2811 routers. 3750 stacks are working as layer 3 devices. They are also running the pretty new IOS 12.2(53)SE.
According to my understanding now a days CEF entry does not expire if we are not using them. They remain in cache as we are running with destination base CEF.
We have a pair of 6509's with duplicate ACL lists & entries.
1 = Version 12.2(33)SXI4a
2 = Version 12.2(18)SXF15a
I wanted to remove some logging that was on an entry on one of our extended ACL's. On 1 this worked fine with the no 400
400 <acl rule without log>
However on 2 it lets me carry out the no 400 command but when i go to add the 400 <acl rule without log> i get the error % Duplicate sequence number.sure enough when i perform the 'Show access-lists <Name>' it is still there!
I have tried the following:
Adding a duplicate ACL entry before it (399) without log and i still get hits on line 400Adding and removing the duplicate created line 399 (without logging) with no issues.Adding and removing a dupliacte ACL (without Logging) after (line 401) with no issues
It looks like it is just this line it seems to think it has removed but hasn't?!
I understand an option is to duplicate the ACL in a text editor remove line, delete the ACL and put the edit back in .....however i wondered if this is something known (bug).
Does PBR with deny ACL entries on a 3750 are still punted to the CPU? I found this article: URL
High CPU Due to Policy Based RoutingPolicy Based Routing (PBR) implementation in Cisco Catalyst 3750 switches has some limitations. If these restrictions are not followed, it can cause high CPU utilization. You can enable PBR on a routed port or an SVI. The switch does not support route-map deny statements for PBR. Multicast traffic is not policy-routed. PBR applies only to unicast traffic. Do not match ACLs that permit packets destined for a local address. PBR forwards these packets, which can cause ping or Telnet failure or route protocol flapping.
Do not match ACLs with deny ACEs. Packets that match a deny ACE are sent to the CPU, which can cause high CPU utilization.
In order to use PBR, you must first enable the routing template with the sdm prefer routing global configuration command. PBR is not supported with the VLAN or default template
I checked the latest config guide, and those same guidelines are still listed. If that limitation is still there, are those packets switched at the process level (ip_input) or the interrupt level?
ws-c2960-24tt-L Ethernet switch adding or removing any device from switch cause a loss of connection to all other devices on switch for about 60sec.
View 1 Replies View RelatedI plugged an IP device into a 2960 Catalyst switch. The port is up, but there is no MAC address learned on it:
TNSWAGCS01002(config-if)#do sh mac add int fa0/16
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
TNSWAGCS01002(config-if)#
TNSWAGCS01002(config-if)#do sh int fa0/16
FastEthernet0/16 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is 0064.40ee.f510 (bia 0064.40ee.f510)
Description: --- STC ---
[code]....
I read that it may be a L1/L2 issue. We tried with another ethernet cable. We also tried with another IP device of the same model. That did not solve the issue.
I have some error messages in the Nexus 7000 log, after searching i cannot find an adequate explanation, pretty much the only thing i can find is below and i don’t think it is very relevant to my situation. The device is in production and so reloading and pulling card willy nilly is the last resort.
Device = Nexus 7018
IOS version = 5.1(2)
Log messages=
2011 Dec 2 14:52:35 IAS01LVSWIPC01 %OC_USD-SLOT8-2-RF_CRC: OC2 received packets with CRC error from MOD 6 through XBAR slot 1/inst 1 and slot 2/inst 1 and slot 3/inst 1
[code]....
I have configured a new switch 3560 switch and connected to 4500 switch and formed a trunk connectivity.Now the issue i am facing is when i do a SH CDP NEIGHBOUR from 3560 switch i am able so see 4500 swries switch but at the same time when i do SH CDP NEIGHBOUR form 4500 series switch i am not able to see the entry for 3560 switch.But i am able to telnet the new switch with out any issues
View 11 Replies View RelatedI just read the Removing and Installing CompactFlash Memory Cards in Cisco 2800 Series Routers instructions and there was nothing said regading powering down the router. Are these CompactFlash cards hot swappable??
View 2 Replies View RelatedIs there any way to clear a single ARP cache entry on the 6500 switch ?
View 8 Replies View RelatedI have seen other discussions regarding Static MAC address entries on IPv4, but what of IPv6?We have MS NLB solutions and they are working fine. We have Cisco 6509/6504, Version 12.2(33)SXI5
But then we have a new one for a new ActiveDirectory solution, and on those networks we have implemented IPv6.
How is Static MAC address entries and MS NLB solved in IPv6 (i.e arp ip.ip.ip.ip mac.mac.mac ARPA gi1/1). I can't seem to find much examples or documentation on this? Is it replaced with another function?The reason I ask is twofold.
1. I really want to know
2. The NLB cluster seem to drop IPv6 traffic at even intervals, witch seems to correspond with NLB transition.
We have two Cisco 3560E layer 3 switches at the core of our network. The switches are configured as an HSRP pair and the clients on our network point to the HSRP address as their default gateway. So if CORE-A dies, then CORE-B will pick up the address and the default route for the clients will continue to be available.We also need to specify a few static routes on the core switch to allow us to get to specific networks. Is there a way to do this so that the routes failover in the same way that the default gateway does?
View 2 Replies View RelatedI tried the "Advanced Routing" Feature over the RV-042 V3 Dual WAN VPN Router , And the New IP Subnet i added ( 10.0.7.0 ) in the Static Routing Table does NOT Appear in the Routing Table of the Router. Please review the attached Print Screen for both the Static Routing Entry Configuration & the Routing Table of the RV-042 Router.
View 0 Replies View RelatedI started using RIPv2 on Packet Tracer. I got two subnets to connect with two routers. After I completed that, I decided to add a third router. How to setup the Routing Table for atleast R3 ?
View 5 Replies View RelatedI am using Cisco 2911 & IOS version is 15.1. My problem is that after some days (e.g. 15-20 days), the routing table suddenly stops updating & then I have to enter the default route again to make it up. I am using Track 1 to track default route here. After primary link goes down, the Track is also going down but after coming the primary link up, the track is not coming up. So, I have to add the default route again to make it up.
View 2 Replies View RelatedWe have small which I'm looking to implement and have built this on GNS3.
We have:
Router A in site 1
Router B in site 2
Router C in site 3
Router A and B are connection via a point to point 100M link and from Router C we have a 2 point to point one of which is 5Mpbs and going to Router A and Router B.
For Router C to reach Router A network it will go via Router B and these are 100M connection. When the link between Router A and B goes down. Router C should update and start using the 5m route.
For some reson, the routes are not updating. I have to do 'clea ip eigrp ne' for the routes to update and if I reload the routers all works well, it seems the problem is intermittent.
I am attempting to filter a specific host(s) from my OSPF routiing table on a ASA 5550 (ABR) using LSA prefix lists. However, when I look at the other routers in that area, I notice that ALL LSA type-3's are being removed (10 hosts are now missing from the routing table). I have verified the filter is working on the ABR, but I can't figure why ALL hosts/routes that were coming into the area are now being filtered instead of the specific one that I want to filter out.
Here is the config on the ABR:
prefix-list pdm_pl_000 seq 10 permit 206.253.180.137/32
!
!
router ospf 1
network 10.0.0.0 255.255.255.0 area 0
network 10.150.10.0 255.255.255.0 area 10
network 10.150.252.0 255.255.255.224 area 10
[code]....
The 206.253.180.137 host is actually coming from Area '3'. Am I doing something that is removing all type-3 LSA's?
I'm learning about iptables, but I don't fully understand the chains of NAT table (prerouting, postrouting and output).I'm specially in doubt about prerouting and postrouting. As far as I know, DNAT can be made with prerouting and SNAT can be made with postrouting, so I think prerouting is for input and postrouting is for output, but the material I'm reading (and another sources) are not clear.
View 4 Replies View RelatedIn my lab, there are some machines that are connected using Cisco 2950 switches. Those machines belong to a VLAN.Now I need to modify the VLAN settings of the machines and as such I also need to modify the VLAN settings on the ports on the Cisco switches.
In order to do this, first I need to login to those switches, but due to a lack of knowledge transfer, I don't have the password. Is the some generic password?Second I will need to modify the VLAN settings on each individual port. How can I do this?
I need a switch to configure a static ARP entry for a MS NLB multicast.
Could answer me if I can do with the SRW2024-K9-BR?