Cisco WAN :: 2900 Isr Suggested Upper Limit For EIGRP Hub And Spoke Setup

Mar 25, 2013

Is there any suggested upper limit to a single EIGRP hub-and-spoke design (i.e. with a single central router)?Router is a 2900 ISR,I'm vaguely aware of a similar design limitation with OSPF areas where no single area should contain more than 40 - 80 routers.

View 8 Replies


Cisco WAN :: 2900 ISR - Upper Limit For EIGRP Hub And Spoke Setup?

Aug 9, 2011

Is there any suggested upper limit to a single EIGRP hub-and-spoke design (i.e. with a single central router)?
Router is a 2900 ISR
I'm vaguely aware of a similar design limitation with OSPF areas where no single area should contain more than 40 - 80 routers. Could be heresay...

View 13 Replies View Related

Upper Limit Of Bandwidth In Fibre Optics Communication?

Sep 17, 2011

What is the upper limit of bandwidth in fibre optics communication?

View 1 Replies View Related

Routers / Switches :: How To Setup Cisco 2900

Feb 17, 2011

We are in the process of switching to a new internet provider in our office and have run into some problems. Our old setup was with AT&T, where they provided a managed router which linked to our internal switch and also provided NAT to the internal IP of our email server.Our new setup right now is just the internet coming in through a cable connected to a switch, we were told we needed to provide our own router. Someone donated a Cisco 2900.What should our proper set-up be? Should the internet come in directly to the router and then to our switch, or should it go to the switch they provided, then the router, and then our switch?Also, there seems to be some confusion about whether or not we need anything else to get the internet to work. There are slots for network cards in the router. Does it come with at least one built in we can use, or do we need to provide one?

View 1 Replies View Related

Cisco WAN :: BGP Setup With 2 2900 Routers And One Sonicwall

Apr 24, 2013

I am looking to setup for BGP with the following conditions:
Client has two 2900 routers, each connecting to a seperate ISP
Client has a Sonic Firewall with a link to each router
Client owns their own /24 block of public IPs and has their own AS Number.
Client has a public /24 and /25 from the corresponding ISPs
Client has supplied the following routing rules they would like to use:
-Anything from their own public subnet should advertize via the two ISP's with best path selection
-Anything from the respective ISP public subnets should use only their link (The ISP's are not auth'd to advertize the other's network)
The two routers are directly connected to eachother and each has a link going to the Sonicwall.

View 5 Replies View Related

Cisco WAN :: 2621 - How To Setup Enterprise EIGRP

Dec 19, 2011

OPTEMAN: 3 routers connected via a private subnet (/29) over the OPTEMAN: Site A, Site B, and HQ. Site A is a 3560 that is the gateway for two subnets: siteA1 and siteA2. SiteB is a 2621, and HQ is a 6509 w/ MFSC.
HQ also connects to 4 other sites via MPLS: SiteC, SiteD, SiteE, and Site F.
HQ has the server subnet, Internet connection, and connection to other services via MPLS.
I have basic EIGRP  setup on HQ, SiteA, and SiteB. So far only siteA and HQ are updating each other. Not sure why. I am looking for the best practice example of how I should setup my enterprise EIGRP. I currently use static routes between the sites. I would prefer to be able to setup EIGRP in parallel, the remove the static routes.

View 2 Replies View Related

Cisco :: Setup P2p Link Between L2 Fast Ethernet Module (within A 2900) To 6506

Oct 14, 2012

Trying to set-up a p2p link between a L2 fast ethenet module (within a 2900) to a 6506.Have created a subinterface SVI on the 2900 and put the fast ethernet port in the respective VLAN. However on 6506, am I correct in thinking I can do a no switchport and just create a L3 interface? Do I need to put the 6506 in the same vlan and the fast ethernet module and create a L3 SVI on it? As it's not a trunk port between the 6506 and the fastethernet module, the packets won't be tagged?

View 3 Replies View Related

Cisco VPN :: ISRG2 2900 - How To Count Number Of Cumulative VPNs On 2900

Aug 25, 2011

If there is a router ISRG2 2900 with SEC license and without HSEC license, there is a limit in count of cumulative encrypted VPN tunnels of 225. Which commands can show us a number of current tunnels on the router, so we can see if we are near this limit of 225?

View 4 Replies View Related

Cisco :: Suggested Restart Time For WLC 4404

Mar 8, 2011

I have (2) WLC-4404's with one in standby.  I noticed this controller has been up for 300+ days and i was just wondering if it will be useful to reboot these once in a while? Any benefits or should i just leave them running?

View 4 Replies View Related

D-Link DIR-615 :: Game Keeps Disconnecting - Suggested Settings Missing From Web Interface

Apr 9, 2013

I keep getting disconnected from the game "Vindictus". I'm not sure what protocols it uses, but it shouldn't require any configuration on the Router, since it was working fine before. I upgraded the firmware to 4.13 in an attempt to fix the issue, but it didn't work. Some people have suggested "Endpoint filtering" to be set to independent, but I cannot find such an option. Where is the option? I was told it was on the Firewall page, but it is not there (Advanced->Firewall/DMZ). The router is supplied by Virgin Media (ISP) but I'm not sure if that matters.

View 6 Replies View Related

Cisco Firewall :: 65535 ASA - Port Scanning Protection Through Embryonic Limit Setup

Jul 1, 2011

url...I discovered that it would be possible to be protected from portscan, i mean when someone scan our nework/host from outside, the attacker will see all the 65535 ports as "open" (in that way it will be more difficult for an attacker to perform customized attacks...)So I have follow the setup in that link: policy-map global_policy class class-defaults set connection embryonic-conn-max 15 per-client-embryonic-max 3 service-policy global_policy global . The problem is that I don't have the exepected result..If i do a portscan over Internet from an external host to my hosts the portscan is successfully working and I can view my open ports...I have also tried to set this through a "match" in an access-list but without any sucess.

View 3 Replies View Related

Cisco VPN :: L2L Hub And Spoke Using ASA 5510

Feb 18, 2012

I'm setting up a L2L VPN Hub and Spoke. I have 3 sites (1 HUB and 2 SPOKES).
HUB and SPOKE 1 is okay. My problem was the communication between HUB and SPOKE 2. PING failed on both directions. BTW, I am simulating this only in GNS3. :-). The configuration for HUB and SPOKE 1 are the same also for HUB and SPOKE 2.
Here is my show isakmp sa and ipsec sa on HUB
ciscoasa# sh isakmp sa
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1


View 4 Replies View Related

Cisco :: Config DMVPN Between 2 Hub Location And One Spoke?

Nov 19, 2011

suppose i have 2 hub location and one spoke and i want to config DMVPN between them and want to keep 1 HUB as active and 2nd HUb as passive then how its possible.

View 2 Replies View Related

Cisco VPN :: ASA5505 And Spoke VPN Between Multiple Sites

Aug 12, 2012

I currently have a "hub" ASA 5505 that links to 4 sites running 877 routers. From the hub network i can connect to all sites fine but what i would like to do is to almost compartmentalise the various VPN links into little clusters.The hub ASA 5505 basically provides IP telephony through the VPN's from a PBX allowing the users at the other end of the VPN to make outgoing calls and recieve incoming calls. However, a couple of the sites would like to be able to call between eachother internally via the hub. This obviously requires traffic to be allowed between their various networks. Currently when you attempt an internal call it rings but there is no audio either way. I assume this is due to access list restrictions. I am not even sure whether what I am trying to achieve is possible. I've attached the hub and 2 spokes below. The ideal end result would be interconnectivity between the two spokes via the hub, from reading up it would seem that its possible but i can't quite get my head around it! Would it involve using different subnet masks at the hub?

View 1 Replies View Related

Cisco VPN :: 2800 / Tunnel Is Not Forming Between Hub And Spoke?

Jan 12, 2012

i am trying to set up a tunnel connection between twO 2800 routers A<->B

1) destination  ip is-204.x.x.x-ROUTER A2) source  ip is 166.x.x.22-ROUTER B The router B has the modem connected to GE0/1 whose interface ip is 166.x.x.22 The ip-forward-protocol nd is configured as  below

ip route 204.x.x.x 166.x.x.21

Also tunnel 1 configuration,isakmp policy are configured properly when i run show crypto isakmp sa it shows MM_NO_STATE,i checked the preshared key on both ends and they are same.whenever i remove the ip address of the interface Ge0/0 and ip route i can ping the 166.x.x.21  which is the modem gateway.when i revert back the configuration to the above ,the ip 166.x.x.21 cannot be pinged,the dsl connection is live though.ways to fix this so that i can make this tunnel state to QM_IDLE?

View 1 Replies View Related

Cisco Routers :: Hub And Spoke Between SA540 And RV120

Jul 11, 2011

I want to build a "hub and spoke" topology for one of my clients. For the "HUB" , I'm planning to use an SA540, with a static public IP provided by a 4Mb SDSL. For the "spokes" (21 at the moment), I'm planning to use RV120. They will be behind a NAT, provided by a "SAGEM LIVEBOX", and a static public IP. The boss will connect to the HUB using Cisco VPN client, or quickVPN, and get access to all the spokes. Some spokes will have to connect to each other, via the HUB. I searched a long time on this forum and reading documentation, but I didn't find at the moment the answer to my question : is this topology suitable with the choosen hardwares ?

View 7 Replies View Related

Cisco WAN :: 2851 How To Make Spoke Going To Hub To Get To Internet

Mar 23, 2011

Imagine MPLS network. Total of 4 sites.
HQ-HUB is the only site with access to the Internet.
So if Site1 or Site2 or Site3 need to access the Internet, traffic will have to go through HQ-HUB and from there reach the Internet.I have routes 2851's on the spoke sites. Which command or mechanism you would explore in this case to make the spoke sites point to the HQ-HUB to reach the Internet?
Would you do this based on DNS settings or getting an access-list & static route defining when the spoke routers traffic need to go the internet, point to the HUB-HQ as the default?

View 3 Replies View Related

Frame Relay Hub And Spoke Resiliency?

Apr 7, 2011

I am having real problems trying to build resiliency into a hub and spoke frame relay scenario. I know the hub is a single point of failure. Is there any way to put some resilience into the network? There is 4 attached branch offices.

View 8 Replies View Related

Cisco VPN :: Allow Access For VPN Client To Spoke Network Through ASA 5520?

Mar 26, 2012

I'm trying to set-up 3 remote access groups on an ASA5520 running version 8.4(3) software so that remote clients connected via Cisco VPN Client can also access spoke networks which are also connected to the ASA.   I've previously set this up on ASAs running v7.2 software without issue but don't seem to be able to do the same here and can't for the life of me figure out what's wrong!
I have set-up the 3 remote access groups:
Group 1 - subnet 2 - subnet 3 - subnet
My remote access user groups can all connect to the head office subnet ( without issue.  But only one of the groups ( appears to be able to access the spoke sites ( and that I have set-up.  However, I can't see what the difference is between the 3 groups I have configured so can't understand why it works ok for one group and not the others?
When I use the packet tracer, it tells me that the flow is being dropped at the VPN encryption phase but why is that?  How can I find out more? Here's the relevant config on my ASA:
!same-security-traffic permit intra-interface!crypto dynamic-map remoteuser 5 set transform-set ESP-3DES-MD5crypto dynamic-map remoteuser 5 set security-association lifetime seconds 28800crypto dynamic-map remoteuser 5 set security-association lifetime kilobytes 4608000!crypto map outside_map 65000 ipsec-isakmp dynamic remoteuser!ip local pool pool1clients local pool pool2clients local pool pool3clients!access-list split-tunnel-pool1 standard permit access-list split-tunnel-pool1 standard permit access-list split-tunnel-pool1 standard permit  !access-list split-tunnel-pool2 standard permit access-list split-tunnel-pool2 standard permit split-tunnel-pool2 standard permit  !access-list


View 12 Replies View Related

Cisco VPN :: 3745 DMVPN Design Using ISP Dial-up Redundancy At Spoke Side

Apr 14, 2013

I'm working on a new DMVPN configuration with one 3745 at the hub site and a 1941 the spoke. I have internet through gsm for the primary line at the spoke and a dsl line for  backup on spoke.I have one tunnel interfaces on both the hub and the spoke.Currently my VPN tunnel is coming up fine , however we are planing to do an ISP failover at spoke side . since in the tunnel interface i can only define one "tunnel source interface" which is gsm cellular interface , i don;t know how to use my another ISP for the same tunnel interface as it will always initiate traffic from gsm.
do i have to create another tunnel interface with same hub site , or do i need another hub as backup? is their any other way to create loopback interface and initiate the traffic from that loopback?

View 1 Replies View Related

Limit The Bandwidth Limit To The Guests?

Oct 28, 2012

I am planning to buy a router for my hotel and I would like to know is it possible to limit the bandwidth limit to the guests? And the admin computer can utilize the maximum speed? it it possible to create a login page paper when some one enters my wifi connection?

View 7 Replies View Related

Cisco :: DMVPN With OSPF Area Router Limit And Per-area Limit?

Oct 31, 2012

need to know the OSPF best design. I have a customer currently running their OSPF only in two area. Area 0 is provider reside and area 1 reside 700 hundred over of router including HQ router and remote branch router connecting to metro-E 10Mbps networks. Is this design have any weakness? Area 1 about 800 hundred router reside in, the HQ model is cisco router 7200 and remote end is cisco router 1841.Let's say they want a solution, for 3G remote router connect back to the HQ using Lease line with a fixed IP. Using DMVPN and OSPF communicating back to HQ. What should we aware when designing and implementing for the OSPF best practice. They have 700 hundred over remote branch need to terminate back to their HQ. I read cisco recommend an area should not be more than 50 router and per-area no more than 28 area.

View 4 Replies View Related

Cisco WAN :: PBR On 2900 Series For Ip Through Put

Feb 11, 2011

I am looking for a Cisco document that gives me the,IP through-put on 2901, 2911 and 2921 routers with Policy based routing applied.,IOS version 15.1.3TOther processes, EIGRP Stub, VLAN routing, SRST,MGCP gateway (analog and PRI).

View 1 Replies View Related

Cisco WAN :: 2900 Nothing Appear For ACL Debug

Mar 22, 2012

i have 3 access-list configured IN | Out  on my Border router (MARTIAN) ,i have to look which one block some of  the traffic passing through ,for that matter i have enabled the below commands on my ISR 2900: with nothing output.

View 3 Replies View Related

Cisco WAN :: Update IOS 15.2.2T For 2900?

Feb 23, 2012

latest IOS version is from 18Nov11 and with little amount of traffic it keeps cpu usage sky-high until it starts losing packets (I've tried performance fine tuning according to cisco webpages and saw little difference)
Downgrading isn't an option as 15.2.1 version doesn't implement everything I need...

View 4 Replies View Related

Cisco VPN :: 2900 - How To Get VPN Design

Nov 24, 2011

Is GET VPN be a better  choice than DMVPN in order to support VoIP, Video over IP, Advanced QoS  and Multicast? I think it should be the better choice based on what is described as the benefits and how it works but I just want  an expert opinion.
Can separate groups be created using the same key serves? I need to protect two functionally separate WAN segments that terminate on the same DC core routers. However I want the separate WAN segments to have different encryption policies. Is this possible?
It is stated in the deployment guide for GET VPN that "Network Address  Translation (NAT) is not supported by GETVPN. NAT must be performed  before encryption or after decryption when GET is used." However the NAT  capability is required on all the routers.
The 2900 series routers has embedded hardware encryption but according to the router perfomance guide, with a mix of traffic such as NAT, QoS and IPSec VPN they are unable to provide 100 mbps of throughput. Does the new ISM VPN modules would allow the routers to achieve 100 mbps of throughput with the services mentioned above?

View 5 Replies View Related

Cisco WAN :: MBTF For 2900 And 3900?

Jun 20, 2012

provide my some (official) info regarding the MBTF for the C2900 and C3900 routers (2911 and 3945)? This info is currently not part of the data sheets.

View 0 Replies View Related

Cisco WAN :: Can 2900 Working As A UC Manager

Feb 15, 2012

I want to know if the Cisco 2900 series can do UC without having to buy any other hardware.I read through the 2900 series datasheet, and i can understand it does.But will want to clarify if i do not need any other hardware except the Unified Communications License for Cisco 2901-295.Does this mean all i need to activate UC is buying this license?My organisation wants to do UC, especially Voice and Wireless.It requires APs, IP Phones(both wired and wireless).To achieve this on a 2900 series, is all i need just the UC license to work, and then my IP Phones both wired and wireless once plugged to the switch connected to the 2900 series starts working?Or do i still need to buy another hardware for the Unified communication Manager Express ?

View 1 Replies View Related

Cisco Application :: Configuring IP SLA On 2900?

Jan 9, 2013

I am having two sites, at one site the ISP is terminated on 2900 Router and at one site ISP is terminated on 3500 L3 Switch. Now need to configure the IP SLA on this. In the current setup I am having two 2900 routers at one location and 3500 L3 switches which by point to point link.

View 1 Replies View Related

Cisco WAN :: QOS Not Supported On SVI Interface 2900

May 15, 2011

Service policy output command is not supporting on Vlan interface of Cisco 2900 Router.I am having one  HWic 4ESW Card and configured VLAN interface. But Service policy output command is not supporting.Same config is supporting in the Cisco 2800 Router.

View 13 Replies View Related

Cisco WAN :: 2900 - LAN Side Redundancy?

Nov 14, 2011

We will be getting a circuit from the same ISP at two of our sites and will be doing eBGP.  Couple of notes. 1. We are fully aware of the risks associated with depending on a single ISP and have mitigated them as much as possible with the ISP. 2. We will be getting assistance on the eBGP setup from the ISP, so I’m not as concerned with that config at this point.
Site Summary
Site A:Cisco 2900 Series (RtrA) connected to single Ethernet based ISP circuit (ISP-1-A)eBGP will run between RtrA and ISP-1-A, default routes from provider onlyLayer 2 Switch (SwA) connected to LAN of RtrA and uplinks to SwB
Site B:Cisco 2900 Series (RtrB) connected to single Ethernet based ISP circuit (ISP-1-B)eBGP will run between RtrB and ISP-1-B, default routes from provider onlyLayer 2 Switch (SwB) connected to LAN of RtrB and uplinks to SwA
I need advise on the LAN side redundancy. Our goal is redundancy; load balancing is not a concern (If load balancing ever becomes a concern I will look at GLBP). We have several devices on the LAN side of the routers that can only use a single gateway. Given that I’ve surmised I need to use HSRP in some way for LAN gateway redundancy.

1. HSRP with Object Tracking, No IGP.HSRP handles LAN gateway failover if a router dies. Object tracking ensures LAN gateway failover if an interface fails or if an interface is up, but there is an upstream traffic issue. ie. track the physical WAN interface and use an IP SLA icmp to track a specific upstream IP incase of an upstream traffic issue.
2. HSRP with OSPFHSRP handles LAN gateway failover if a router dies. OSPF redistributes eBGP default routes to RtrA and RtrB so that each router should have a route to the ISP even if they loose their local ISP circuit.  i.e if ISP-1-A on Router A goes down, Router A knows to send traffic out ISP-1-B via RtrB. In other words, traffic enters RtrA LAN, but exits on RtrB WAN.
3. HSRP with iBGP HSRP handles LAN gateway failover if a router dies. I have no experience with BGP, but assuming this would work similar to the OSPF solution above except for the required iBGP config and possible route reflectors?

View 2 Replies View Related

Cisco VPN :: 2900 ISR / Change VPN Client To Over TCP?

Nov 13, 2011

I have a 2900 ISR that my VPN clients connect to using IPSEC over UDP.  I am having periodic problems, especially with clients connecting through DSL, where they connect and immediately drop.  Sometimes this is resolved by users updating their home router firmware.  I'd like to issue a new client PCF file using IPSEC over TCP to see if that resolves the problems.
Can I have both running at once, and what do I need to add to the 2900 to enable this connectivty without breaking the existing clients?  If the test is successful, I will migrate all users to the new configuration.  This ISR is also used to support L2L connectivity for a handful of sites.

View 1 Replies View Related

Cisco WAN :: QOS GTS Shaping Without Effect On ISR G2 2900

May 29, 2013

I try to setup a basic GTS shaping on a cisco ISR G2 2900
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.2(4)M3, RELEASE SOFTWARE (fc2)
Cisco CISCO2901/K9 (revision 1.0) with 1957856K/40960K bytes of memory.
ipbase        ipbasek9      Permanent      ipbasek9
the policy-map was applied to a svi interface (vlan interface)
And my problem is the shape isn't effective, in my attempt the max bw is 20Mb and I have gigabit interface
I know this kind of setup is classic and I see it working on older ios version 12.x
interface VlanX
ip address X X
no ip redirects


View 6 Replies View Related

Copyrights 2005-15, All rights reserved