I am looking a old exercise I did last year about subnetting and I am wondering if is possible to subnet:
198.18.9.1 /22
I wrote down, last year, that:
16 bit are assigned to network
6 to subnet
10 to hosts
when actually I see a class C ip address with 10 bit assigned to hosts. So, how many bit do I have for network, subnet and hosts?
Given the IP address of 172.16.10.22 and the network mask of 255.255.255.240... answer the following:
What is the network address?
What is the broadcast address?
What is the valid host IP range?
What I have done so far:
Part 1 - Broadcast address
172.16.10.22 - 10101100.00010000.00001010.00010110
255.255.255.240 - 11111111.11111111.11111111.11110000
Researching different ways to find the Broadcast address I took the binary IP address and replaced all numbers with 1's for the host bits identified in the subnet mask and came up with:
172.16.10.31 - 10101100.00010000.00001010.00011111
Is that the correct Broadcast address?
Part 2 - Network address
I am not sure what is meant by the network address and all my research has come up with either MAC addresses (obviously wrong) or CIDR notation...How do I calculate the network address?
Part 3 - List of valid IP's
Using the same address 172.16.10.22/28 I did the following:
28 is closest to 32 (block wise) so 32 - 28 = 4... 2 ^ 4 = 16 (block size)
IP address listing:
172.16.0.0
172.16.16.0
172.16.32.0
172.16.48.0
172.16.64.0
and so on...
The IP address in question is 172.16.10.22 and falls in the 172.16.0.0 - 172.16.15.0 block...
Is this the correct list of valid IPs?
how to subnet a class B IP address?I have a homework, I don't know how to subnet a class B.
View 2 Replies View RelatedI was trying to set a DHCP pool with 127.16.0.0/16 with RV220W, however, RV220W UI can't save it. It displays "IP Address Range -"Step to reproduce: (it is 100% reproducible)
1. login into RV220W admin web
2. Create a VLAN, id 201
3. Go to "Multiple VLAN subnets", select the VLAN, click edit
4. Enter following info:
IP Address: 172.16.0.1
Subnet Mask: 255.255.0.0
DHCP Mode: DHCP Server
Domain Name: Cisco
Starting IP Address: 172.16.2.100
Ending IP Address: 172.16.10.254
Primary DNS Server: 172.16.0.1
Leave rest of settings with default value.
DNS proxy is enabled
5. Press Save button. The UI shows text "IP Address Range -".
Expected result: RV220W shall save the setting and make use of 172.16.0.0 subnet in IP pool. By the way, the error message "IP Address Range -" seems incompleteI tried same setting on netgear FVS318N (very similar settings to RV220W), it accepts 172.16.0.0/16 as DHCP IP pool and works.RV220W has great feature set meets my needs. Its UI is slow and sometime dashboard freezes, which I can live with comparing to features. But DHCP server IP pool can't be class B is huge limitation to me.
Im having a (from google-fu) seemingly unique issue with load balancing. So for background, I am running the ACE 4710 device in "on a stick" mode, so I am using NAT and all that good stuff. I am also utilizing class maps and host header matching so I can save on IP space. [code]
Basically, as soon as I add that ACL_CLASS_beta.mainsite.com class map, all I get back from the ACE is RST packets and it comes back with an L7 LB Policy Miss.
It SEEMS like it should work, but it doesnt seem to like matching on those source addresses at all.
I am currently trying to understand Subnetting via CCNA. My progress is going well,I understand the class below:
Class A 0-127 Max IP 2^24 = 16777216
Class B 128-191 Max IP 2^16 = 65536
Class C 192-223 Max IP 2^8 = 256
However I have seen an example from an ip calculator website, and noticed this :
Address: 192.168.1.0 11000000.10101000 .00000001.00000000
Netmask: 255.255.0.0 = 16 11111111.11111111 .00000000.00000000
Wildcard: 0.0.255.255 00000000.00000000 .11111111.11111111
=>
Network: 192.168.0.0/16 11000000.10101000 .00000000.00000000 (Class C) - I would have thought this would have been Class B?
Broadcast: 192.168.255.255 11000000.10101000 .11111111.11111111
HostMin: 192.168.0.1 11000000.10101000 .00000000.00000001
HostMax: 192.168.255.254 11000000.10101000 .11111111.11111110
Hosts/Net: 65534 (Private Internet)
Is this an invalid IP/masks as the max hosts is 65534 (which should be class B?). If so shouldnt the IP address range from 128-191- eg 172.16 (I know that CIDR is the amount of 1's. ).What calculates the class is it the netmask or the range of the first octet?
Why isn't it possible to make following configuration:
View 9 Replies View RelatedI am in the process of acquiring a static ip address from my isp time Warner. I only want to pay for a single static, but I have a number of machines I want to put on the internet, a web server and a e-mail-server. Using a cisco router, a Cisco Rv 120w. Can I assign the static ip address my isp gave me to the Rv 120w and then crate a vlan to assign addresses to various computers. Or is this something my ISP does. I get the impression from the tech guy at Time Warner that this is something they do.
View 11 Replies View Relatedyou can subnet to meet the number of networks required, or you can subnet to meet the number of hosts required. In which circumstances would you use either one? or are they both the same? am kinda confused.Is subnetting according to the number of hosts VLSM? and subnetting according to the number of networks required is not VLSM subnetting? Also I'm on CCNA 1 chapter 6, if the other CCNA 2, 3 and 4 has chapters explaining subnetting better cos It's totally confusing me atm.Also, is my understanding correct, when a company wants a LAN made, a network designer see's how many hosts they require in each of their LANS and then chooses an appropriate address class and subnets it? and to connect the LAN to the internet he implements NAT on the router that connects to the internet, and that router translates the internal addressing scheme that was created into a public registered IP address from an ISP? Also does he just make the address up? for example if he decides to use class C, he just picks any random number in the class C range and subnets it?
View 6 Replies View Relatedwe currently use the ASA 5505 router. We would like to create another subnet inside our LAN because we are running out of IP addresses.
current subnet info:
subnet:10.1.1.X
submark: 255.255.255.0
gateway: 10.1.1.251
we want to make another subnet, which we plan to use for all our network printers for now( other use in the future) PCs at 10.1.1.X will be able to print on the new subnet. the new subnet will be able to connect to the internet.
What's the best options we can do for the subneting? how can we configure the router? is possible to set another DHCP on the new subnet. we currently have one DHCP on the 10.1.1.X
I wanna subnet my Network to increased performanced but im alil confused hereWhen looking at my ROUTER STATUS this is what i have.
INTERNET PORT
IP Address XX.XX.XXX.XX
gateway ip XX.XX.X.X
XX.XXX.XXX.XX
LAN PORT
ip address xxx.xxx.x.x
Which one of this ip addresses do i have to subbnet?,my router is a ,NETGEAR N600 Wireless Dual Band Gigabit ADSL2+ Modem Router DGND3700 Wireless router - 4-port switch (integrated) - EN, Fast EN, Gigabit EN, IEEE 802.11b, IEEE 802.11a, IEEE 802.11g, IEEE 802.11n.
I have a slew of 106001 messages coming into ASA log, from the outside interface. it appears like most of them are for standard traffic, such as TCP 80/443. i suspect these messages are from clients on the inside who have initiated connections to the internet, but then the client abruptly terminates application of something similar. Server side finally issues a close connection, reset or something else. Here is an example, with the ASA address being 1.1.1.195 (changed to protect the innocent ).
Another theory is that the NAT ip for clients is different than the actual interface IP, so that is behaving differently. For example, once the xlate times out, the IP used for the xlate is no longer active and any return packets to the interface would also error out - be refused. If the xlate was using the interface IP, that it would always respond in some way?
I can bump 106001 down to notification (5) or informational (6) level.
can i use both class B and class C at the same time?If so, what should i do with class B? and with the other Class C?i got 500 computer into 5 segments
View 2 Replies View RelatedI need to provide logical addressing this network using class C but I have been given no address to start with, only the network diagram:
[URL]
How do I even start this? How do I know which address to use?
I've noticed a Class A IP address on our Class C network. What does this mean and how can I determine what's causing this? I've can ping and tracert which gives 10.44.10.34 and 10.44.10.33. The DHCP Scope on the DC is 192.168.3.1 - 3.200.
View 1 Replies View Relatedi want 192.168.0.1 with mask 255.255.255.0 class network to communicate with 10.7.27.1 with 255.255.255.128 mask to have the same gateway
View 2 Replies View Relatedwhy do class D doesn't have subnetmask
View 1 Replies View RelatedWhy my 857 adv security don't have class-map and policy map command ? now i wanna use traffic shaping on this but when i use command class-map it doesn't have. [code]
View 3 Replies View RelatedI am trying to configure QoS on my Cisco 851w router using the class-map command.However it won't accept the class-map command.The router is running cisco IOS version 12.4(15)T10 "C850-advsecurityk9-mz.124-15.T10.bin".
View 3 Replies View RelatedI set globally the QOS on my infrastructure and I want to monitor graphically the usage of each classes.I'd like to do that on my COREs Switchs which are Catalyst C6509.I can achieve that in command line, but it's not user friendly and it's not possible to have daily/hourly graphs.
So the idea is to find the value in the MIBS and put it in MRTG graphs.The only problem is that I cannot find it in the MIBS.
I have tried multiple IOS for the 2821, including service provider, and advanced enterprise, and none of them have the pseudowire-class command.I have compared the features to the ones that do have the pseudowire-class command on the 6500 series and cannot figure out what I am missing.Is that command not supported on the 2821?
View 7 Replies View RelatedThere around 70 remote sites and head end is of 200 Mbps MPLS WAN link..
Platform: 7206VXR, IOS: 12.4(15)T7
The QOS configuration at present is attached..
At the head end, we would like to shape based on remote sites bandwidth. Having said that, how many classes should I create to achieve this? Is there any other simplified way of achieving this ?
Remote Site MPLS bandwidth
No. of remote sites
64 kbps
3
128 kbps
3
[code]...
I read in the RV082 user manual can I configure a Ip address class C in the LAN interfaces.I need to know if the router support a class B addressing.
View 1 Replies View RelatedI'm currently looking at doing some re-design work for a platform we manage on the ACE.I want to be able to run a single VIP and only do a sticky session based around specific URL's not all. I've got the following configuration to apply a sticky session to a URL. [code]Notice, under the Policy-map type loadbalance http first-match WEB-POLICY-L7 i have two class statements, one that matches the URL L7 policy and applies a sticky farm and the second class falls into the default.Am i right in saying with this configuration, any http traffic hitting the VIP 192.168.1.1 that does NOT match /urltobedefined.co.uk/test sticky sessions are NOT applied. But traffic hitting 192.168.1.1 that does match /urltobedefined.co.uk/test will apply the sticky policy?
View 2 Replies View RelatedI was under the impression that all Cisco ASA firewalls shipped with a default inspection policy.
Example
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
[Code]......
can I build this myself? Why is it missing (I have two other ASA 5505s here that also do not have it). What would I do to rebuild it?
I have a request for blocking urls using a class map. I have made this work with HTTP, however it does not work for https. This is a 2851 router with IOS Version 12.4(15)T7. I see i could use the command "match protocol secure-https" however this does not let me specify any specific urls.
Does a new IOS version will support what I'm trying to do? Or if there is another way?
I have a Cisco 871 router that used to have Access list based security. now I am trying the ZBFW for the first time. I thought I had a pretty good program until I found all my traffic was getting dropped. This is my first stab at ZBFWs and I am a bit confused esp with the default class part.
The router is for my house and thus also has to have priority for gaming. I will add the gaming and voice QOS once I get it working,
Guest VLAN has access to 2 IP's in Data for printing. Cisco871#sh run
Building configuration...
Current configuration : 8005 bytes
!
version 12.4
no service pad
[Code].....
I really need understanding some of the logic behind the default ZBFW settings on my Cisco 881W courtesy of Cisco Configuration Professional. Here are my two questions:
1.) What is the purpose and logic behind consolidating the first class-map (ccp-cls-insp-traffic) in to the second Class-Map (ccp-insp-traffic) as follows?
Code ....
2.) What is the purpose and logic of Policy-Map ccp-inspect is trying to drop traffic from ccp-invalid-src, which is filtering based on ACL 100:
policy-map type inspect ccp-inspectclass type inspect ccp-invalid-src drop logclass type inspect ccp-insp-traffic inspectclass type inspect ccp-protocol-httpclass class-default drop.
Code ....
I tried to put QoS in a WS-C3560CG-8TC-S version 12.2(55)EX2.It shows 0 traffic in class-map. Here is the config My question is why I can not see the traffic via class-map?it should in the default Q if incorrect mark.I erased the config and config with the autoQoS, shows the same result.
class-map match-any VoIP description Voice IP Phone RTPmatch access-group 157
class-map match-any WEB description Internal Web, SSL Web, DNS query, Pinnaclematch access-group 153
!
policy-map QOSMARK
class VoIP set dscp ef
class WEB set dscp cs3
class class-default set dscp default
[code].....
I am carving up an internet Class C for customer. This class C is used by 3 distinct QA, Corporate and Production firewalls. I want to carve up IP space so there is a /26 for each environment. The issue I have is the firewalls may need communication with each other via the public IP space. Currently I don’t have any L3 switches in between the firewalls and the edge internet router. So with subnetting, it would seem I need to push everything through the internet router for the intra-firewall communication.I would rather not push this traffic through the edge router, so I came up with an idea to allocate all firewall outside interface IP’s in the 4th (last remaining) /26. That way, I can allow firewalls to communicate over the primary interface IP’s, which will all be in the same subnet – without going through a routing “engine”/device.
For the actual environment subnets (NAT's on respective firewalls), I create a static route on the edge router pointing to each of the firewall’s primary IP’s for the respective environment routes (the first 3 - /26’s).This is still a beta design, but I have done this before on small scale when ISP gave me 2 subnets for example, assuming I was going to put a router in between the customer firewall and ISP. I would use the “routed subnet” on the ASA interface, and then pull the NAT’s from the other subnet. The ISP would have to add a static route directing the NAT subnet to the “routed subnet” correct IP - which would be the firewall outside interface primary IP.I recently found out that with ASA OS 8.4.3 and up, ASA will not proxy arp for IP’s not in its local interface subnet. This means the ISP/router will have to assign static ARP entries on the edge router. This can get messy after the first few NAT entries. So I am debating the design now. I think this kind of stuff going forward won’t be worthwhile with newer ASA 8.4.3 code.
How to communicate between different ASA’s, while still carving up the Class C into usable smaller subnets? The primary reason for doing this in the first place is to support routing on the edge router. I am thinking it might be time to ask for another Class C to do the routing functions, and keep the firewalls all at Layer 2 in one /24 - Class C?
ACS 5.3 always sends the class=cacs:xyz attribute in an authentication response. How can I suppress that behaviour? The Cisco Email Security Appliance doesn't support multiple class attributes (defect 49096) and even treats guest users as administrators.
View 2 Replies View RelatedConnecting Avaya 9611G IEEE class 1 devices to a Cat2960s. How ever some of the phone are registering as class 3 devices no matter what interface the phone is connected to. Typical port config is as follows:
interface GigabitEthernet1/0/2
switchport access vlan 25
switchport mode access
switchport nonegotiate
switchport voice vlan 22
srr-queue bandwidth share 1 30 35 5
[code]....
I was looking at a problem where a traffic from certain sites have a restricted bandwidth, an ongoing problem for a year or so, apparently this throughput never exceeds around 25Mbps. My customer describes a situation where the end to end utilisation rises, eventually flat-lining at around 25Mbps. how many extra systems come on line, this traffic never exceeds this rate, and end users complain of poor responses.
During my investigation I found that one of the switches (Cat 6509) in the traffic path has a policer configured on a vlan interface, the policer has 3 sections for different traffic based on DSCP markers, and a default (unconfigured) class-default. Various people have had a poke about with this config over the years, with the result that all the traffic has the CoS and DSCP tags set to 0. All this traffic is hitting the class-default in the policer.The link that this traffic hits the Cat 6509 on is a 100Mbps link.
If I was designing this from scratch I'd probably configure a rate for the class-default.my question is, in the case where no specific configuration has been entered for the class-default, how much bandwidth is allocated to this class?
