Limiting bandwidth in GRE Tunnel

Hello experts

We have two Cisco 2811 Routers Cisco 3560 from 3Anetwork.com setup with a GRE tunnel that we would like to constrain the bandwidth on to replicate a

satellite connectinon of 400 kbits. We tried the bandwidth command 400, but from what I understand that is only for routing metrics and not actual speed of the interface. Any suggestions?

The supplier 3Anetwork.com can help but their technical support charge is a bit high, so I would prefer to do Cisco 3560V2  by myself.

Thanks for your help.

Sharing routes between carriers using BGP

Question:

I currently have 14 US offices WS-C3560X-24P-L connected via MPLS.  We have recently opened a new office in Ottawa Canada.  Our primary US MPLS carrier cannot provide services in Canada.  I currently have a site to site tunnel setup between Ottawa (Internet circuit) and our head quarters in the US.  It works, but at times we experience connection issues.

I am in the process of ordering MPLS services from a different carrier.  Below is what I have in mind of doing.

                               ------------------ Chicago Head Quarters ( Cisco 2951) Primary BGP -------------- MPLS ------------|------------ BGP Remote Office

Core 6509 (Chicago)  |                                                                                                               |                  |

                               |                                                                                                                |-----------------|------------ BGP Remote Office

                                |                                                                                                       

                               -------------------- Chicago Head Quarters ( Cisco 2851) New Carrier----------------MPLS--------|----Ottawa Office

So I would like my Ottawa office to also be able to see my other remote offices.

What would I need to configure on both of my Cisco routers in Chicago and my core 6509 switch?

Answer:

Yes, you should be good to go,

The ASA will participate in the OSPF cluster and it will learn the default route via the Chicago Head-quarters router,

So most of the job will be done on the Core router (where redistribution will happen)

On the Chicago Head-quarters router you will just build the OSPF relationship with the ASA and advertise the default route,

The ASA and internet breakout is in Ottawa, not Chicago.

Jaime - I don't see any problems with what you propose but you will need to alter the design I suggested slightly. You will need to:

1. Configure users in Ottawa to use the MPLS router as their default gateway (not the ASA)

2. Add a default route on the Ottawa MPLS router pointing at your ASA firewall. Do not redistribute this default route into BGP.

3. In Chicago you will need to redistribute your other site and Chigaco subnets from OSPF into BGP and advertise them out to Ottawa.

I would use route-maps in the redistribute statements so you tightly control what you are advertising. This is not essential but it is useful to keep on top of what is being advertised where and can stop things breaking in the future if additional links WS-C3560X-24P-S are added.

877 default route using track command

Question:

I have an 877 router WS-C3750X-12S-S which has a DSL WAN interface. The DSL service at this site is unreliable, so the company have purchased a separate 3G router to be used as a backup. This device maintains 3G connectivity at all times and has a static IP on the internal subnet (for arguments sake let's say 10.0.0.253).

What I want to do with the Cisco router is to track the DSL interface and if it is up, install a default route pointing to it. If it is down, I want the default route to be the 3G router.

I am thinking the best way to do this is to set up a track and then set 2 default routes; one which is installed if the tracking is up, the other has a higher admin distance and points to the 3G router and thus should only be used if the track is down. For example:

track 10 interface Dialer0 ip routing
delay down 30 up 30

ip route 0.0.0.0 0.0.0.0 Dialer0 track 10

ip route 0.0.0.0 0.0.0.0 10.0.0.253 100

Is this likely to work or is there a better way to do it?


Answer:

This configuration will work in your scenario. No further config required as far as I know.
This will track the interface as well as up up state and if it has a IP address.

If it fails it will switch over to your backup route which has a higher metric.

If you want faster switch over time you might want to tweak the delays?

Apart from this, all good :)

Sent from Cisco Technical WS-C3750V2-48PS-S Support iPhone App

QOS on 3560's Problem

Hello Experts

I am replacing some WAN Catalyst 3560X  connections: Point to Point T1's (running from 2820's to a 7200).  I am replacing them with metro Ethernet connections with a 3560 layer 3 switch at each end.  We run Cisco Call Manager, and have IP phones at our locations.  I want to set up QOS on my WAN connection to make sure my packets arrive in the correct order.  I have a few remote users complaining of voice problems, crackling, etc.  The 3560's are acting as routers, and don't directly connect to all the phones.  So I won't be using the mls/auto QOS features, I don't think.  I am trying to use service-policies and class-maps to handle qos, as I have done in the past, but I'm not finding the correct commands.  This is the QOS I currently have set up on my 7200/2820:

class-map match-any voip-control
  match ip dscp af31
class-map match-any voip-rtp
  match ip dscp ef
!
!
policy-map my-voice
  class voip-rtp
    priority 512
  class voip-control
   bandwidth percent 5
  class class-default
   fair-queue

I can create the class-maps on my 3560's, but when I start trying to modify the class settings under the policy-maps, the commands like "priority", "bandwidth", and "fair-queue" are not available.  These are the options at the (config-pmap-c)# prompt:

QoS policy-map class configuration commands:
  exit            Exit from QoS class action configuration mode
  no              Negate or set default values of a command
  police          Police
  service-policy  Configure QoS Service Policy
  set             Set QoS values
  trust           Set trust value for the class
  <cr>


Perhaps I am trying to do this the old way, but I'm just looking to set up some QOS on these switches.  These switches are running a mix of
ip base and ip services IOS versions.  Can anyone help me with the right syntax to setup QOS?

The supplier 3Anetwork.com can help but their technical support charge is a bit high, WS-C3750X-48T-S so I would prefer to do by myself.

Thanks for your help.

Object-groups in access-lists on 3750X?

Question:

I have started to use ip extended access-lists on several 3750X-switches WS-C3750X-24S-S to filter inbound and outbond traffic on the VLANs. But it seems that the use of object-groups is not supported, is this correct? Is it really no way to group different ip-addresses into groups and then use these groups in the access-lists?

I am running sw version 15.0(1)SE2.

Answer:
It is not supported on switches.
I had a brief look at the cisco feature navigator http://tools.cisco.com/ITDIT/CFN/ and it only shows support on router type platforms - not switches.
With exception to the 6500 WS-C3750X-12S-S

Cisco WS-C2960S-24TD-L Problem

Hello experts,

I just got the 2960 switch Cisco Switches Price from 3Anetwork.com and I would like to MGBSX1 when connect to SG500X switches , need configuration adittional ?? or only plug and play ?

The SFP-10G-LRM= is compatible for connect between WS-C2960S-24TD-L with SG500X ??

The supplier 3Anetwork.com can help but their technical support charge is a bit high, so I would prefer to do by myself cisco price.

Thanks for your help.

Cisco SG300 L3 Performance

We have a network with over 300 devices.Cisco Switches We have one primary switch from 3Anetwork.com(SG300-52 L2) with 10 secondary switches (SG300-28 L2) to handle all the traffic.
Alle devices are operating in the same subnet (10.10.0.0/16), and in the same VLAN.

Because we have quiet a lot of video-traffic on the network we want to split the network in 10 different VLAN's and change the primary switch from L2 to L3.
Each VLAN will handle one subnet (10.10.x.0/24) with 15 devices (video).

The routing between the VLAN's will be done by inter-VLAN-routing in the SG300-52

Is a SG300-52 switch in L3-mode able to route this amount of devices in a decent way ?


The supplier 3Anetwork.com WS-C3750V2-24TS-S can help but their technical support charge is a bit high, so I would prefer to do by myself.

Thanks for your help.