Outbound Traffic Manage via eBGP

Question:

We are using multihomed eBGP Cisco 3560X  in single Router from multiple ISPs bandwidth for internet.

We have our own IP Address , at present our oubound traffic going throug ISP 1 , when ISP-1 b/w goes down then it will autometic traffic going throug ISP-2 bydefault.

But our required when ISP-1 B/W goes down our all outbound traffic will going throug ISP-3 inplace of ISP-2.

How can i achieve this as per our requirement.

Answer:

Another option is to specify weight - with again giving  the higher vaule to the most preferred path.

Local pref on a single router is a possibility but as I understand it, It would usually be best utilised with ibgp peering-res

ust to clarify - do you mean when the link on ISP1 goes down? It is just that you said "when ISP-1 b/w goes down" which could be interpreted differently.

It would be helpful if you could share your existing configs but the solution that springs to mind is to use local preference on the BGP learned routes with ISP1 routes having a higher local preference than ISP3.

Yes - that will do it. Ignore my comments about Local Preference - for some reason I thought you had 3 routers on site which is why I recommended LP. Weight is a better option if you have a single router.

You can do the configuration as you have written above or write a route-map statement to apply weight Catalyst 3560 Price to the routes learned from each peer.

OSPF path selection ??

Question:

I have the below topology Catalyst 3560 Price in my network I am planing to configure ospf in my network .
Can any one confirm that how traffic will flow from B router to reach the networks behind the a router .
with default ospf configurations .

will it take the directly connected link to reach the router A 's network network ? or will it go through router C to reach the router A ?

Answer:

If you have default OSPF configuration. It will do load balance.

Cost of link connecting Router-A and Router-B = 10^8/1mb = 100
Cost of link connecting Router-B and Router-C = 10^8/2mb = 50
Cost of link connecting Router-C and Router-A = 10^8/2mb = 50

So router B is having two equal Catalyst 3560V2 Price cost path to reach A.

Outbound Traffic Manage via eBGP

Question:

We are using multihomed eBGP in WS-C3750X-48T-L Price single Router from multiple ISPs bandwidth for internet.

We have our own IP Address , at present our oubound traffic going throug ISP 1 , when ISP-1 b/w goes down then it will autometic traffic going throug ISP-2 bydefault.

But our required when ISP-1 B/W goes down our all outbound traffic will going throug ISP-3 inplace of ISP-2.

Answer:

Another option is to specify weight - with again giving  the higher vaule to the most preferred path.

Local pref on a single router is a possibility but as I understand it, It would usually be best utilised with ibgp peering-

Just to clarify - do you mean when the link on ISP1 goes down? It is just that you said "when ISP-1 b/w goes down" which could be interpreted differently.
It would be helpful if you could share your existing configs but the solution that springs to mind is to use local preference on the BGP learned routes with ISP1 routes having a higher WS-C3750X-24T-S local preference than ISP3.

L2L VPN, Cisco 3640 with IOS 12.3(16) no crypto

Question:

I have a Cisco 3640 router Cisco 3560 Switch with IOS v.12.3(16)

It does not recognize the crypto commands.

What reading I have been able to find says that it should be there.

Any idea?

Thank you.

#sh version

Cisco Internetwork Operating System Software

IOS (tm) 3600 Software (C3640-I-M), Version 12.3(16), RELEASE SOFTWARE (fc4)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2005 by cisco Systems, Inc.

Compiled Tue 23-Aug-05 20:03 by ssearch

Image text-base: 0x60008B00, data-base: 0x60D36000

ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

ROM: 3600 Software (C3640-I-M), Version 12.3(16), RELEASE SOFTWARE (fc4)

router01 uptime is 3 hours, 43 minutes

System returned to ROM by power-on

System image file is "flash:c3640-i-mz.123-16.bin"

cisco 3640 (R4700) processor (revision 0x00) with 89088K/9216K bytes of memory.

Processor board ID 18209909

R4700 CPU at 100MHz, Implementation 33, Rev 1.0

Bridging software.

X.25 software, Version 3.0.0.

2 FastEthernet/IEEE 802.3 interface(s)

DRAM configuration is 64 bits wide with parity disabled.

125K bytes of non-volatile configuration memory.

32768K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

Answer:

That IOS image is not a crypto image:

System image file is "flash:c3640-i-mz.123-16.bin"

Actually images with K9 in the image name are indicating only that they have crypto support that will do RSA keys and SSH. It does not necessarily mean that the image will support VPN.

I am pretty sure that the image given by the OP is the IP Base image and it does not support VPN. Perhaps the best way to know what is supported in an image is to use the Feature Navigator from Cisco which has an option to research an image and will list the features supported in that image.Cisco 3560 This link will get you to the Feature Navigator

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

Cannot get outside access

I have my router setup with a gig 0/1 as WS-C3560X-48P-L my primary interface and I'm using cellular as a backup.  However, I cannot get outside access

MWA-CTT#sh run

Building configuration...

Current configuration : 2596 bytes

!

! Last configuration change at 19:24:01 UTC Wed May 15 2013

! NVRAM config last updated at 19:24:03 UTC Wed May 15 2013

! NVRAM config last updated at 19:24:03 UTC Wed May 15 2013

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service internal

!

hostname MWA-CTT

!

boot-start-marker

boot-end-marker

!

!

enable secret 5 $1$OPFk$X6REGd34.xo/ZU5nnIbQC1

enable password verizon

!

no aaa new-model

!

no ipv6 cef

!

!

!

!

!

!

!

ip dhcp excluded-address 10.1.1.1 10.1.1.20

!

ip dhcp pool DHCP_POOL

network 10.1.1.0 255.255.255.0

default-router 10.1.1.1

dns-server 8.8.8.8

!

!

ip name-server 8.8.8.8

ip cef

multilink bundle-name authenticated

!

chat-script ltescript "" "AT!CALL1" TIMEOUT 20 "OK"

crypto pki token default removal timeout 0

!

!

license udi pid CISCO1921/K9 sn FTX160685BJ

license boot module c1900 technology-package datak9

!

!

!

redundancy

!

!

controller Cellular 0/1

!

!

!

!

!

interface Loopback1

ip address 1.2.3.9 255.255.255.255

!

interface Embedded-Service-Engine0/0

no ip address

shutdown

!

interface GigabitEthernet0/0

ip address 10.1.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

duplex auto

speed auto

!

interface GigabitEthernet0/1

ip address 166.150.246.179 255.255.255.0

ip nat outside

ip virtual-reassembly in

no ip route-cache

duplex full

speed 100

no cdp enable

!

interface Cellular0/1/0

ip address negotiated

no ip unreachables

ip nat outside

ip virtual-reassembly in

encapsulation slip

load-interval 30

dialer in-band

dialer idle-timeout 0

dialer string ltescript

dialer watch-group 1

async mode interactive

!

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

ip nat inside source list 100 interface Cellular0/1/0 overload

ip nat inside source list 101 interface GigabitEthernet0/1 overload

ip route static adjust-time 1

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 166.150.246.180 100

ip route 0.0.0.0 0.0.0.0 Cellular0/1/0 166.159.128.30 110

!

access-list 100 permit ip any any

access-list 101 permit ip any any

dialer watch-list 1 ip 5.6.7.8 0.0.0.0

dialer watch-list 1 delay route-check initial 60

dialer watch-list 1 delay connect 1

!

!

!

control-plane

!

!

!

line con 0

line aux 0

line 2

no activation-character

no exec 

transport preferred none

transport input all

transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh

stopbits 1

line 0/1/0

script dialer ltescript

modem InOut

no exec

line 0/1/1 0/1/3

no exec

line vty 0 4

password verizon

login

transport input all

!

scheduler allocate 20000 1000

!

end

MWA-CTT#

The supplier 3Anetwork.com can help but their technical support charge is a bit high, so I would prefer to WS-C3560X-48P-S do by myself.

Thanks for your help.

Cisco 887VA M K9 on domestic (dynamic IP) BT ADSL

Question:

Does anyone have a working config Cisco Catalyst 3560 for this setup, I configured using the BT instructions but still no internet, I have tried various solutions from the forums but still no internet or ability to ping outside networks. I have in vain tried to get the latest BT firmware for the router but no joy so far.

Answer:

Okay then just change the dhcp pool to have your isp dns server address in###########stead of  your ##router then you should be good to go.

You can remove the two virgin dns server address also is you wish.

more information ,you can visit  http://www.3anetwork.com/cisco-catalyst-3560-switches-price_c40

WIC 1DSU-T1 vs VWIC2-1MFT-T1/E1

Question:

I'm looking at a production router Catalyst 3560X  with a VWIC2-1MFT-T1/E1 module and neither side of the serial p2p connection has any clock rate configurations. Now I know with the VWIC2-1MFT-T1/E1 that everything is configured under the controller interface. However I'm seeing no clock rate command like with the WIC 1DSU. How does this work? Does that mean that there is a DSU/CSU at that location? I'm just used to seeing the WIC 1DSU-T1 more and haven't worked with the multiflex modules before.

Answer:

If you have a WIC-1DSU-T1, WIC-1DSU-T1-V2 or HWIC-1DSU-T1, you need to go under interface configuration and type service-module t1 clock source:

3845_2(config)#int serial 0/1/0

3845_2(config-if)#service-module t1 clock source ?

  internal  Use adapter internal clock

  line      Recover clock from line

You have 2 options here as you can see. Internal provides clocking and line receives clocking. In a back-to-back circuit, it is recommended to configure one end as "internal" while the other remains "line". If your provider is in the middle providing clocking for both ends, the "line" configuration is recommended but this depends on the circuit specifications. You can use the "show service-module" (do not forget clearing the counters to see the fresh statistics) command to know if there are clocking issues. Basically, you need to focus on the " Slip Secs" value. If it is increasing, it is recommended to check if clocking is properly configured. Sometimes you will need to get the provider involved to confirm the proper clocking configuration you should have.

On the other hand, if you have a VWICX-XMFT-T1/E1 you need to enter controller configuration and choose the proper clocking configuration. It basically works the same as in a WIC-1DSU-T1 and similar hardware.

3845_1(config)#controller t1 0/0/0

3845_1(config-controller)#clock source ?

  free-running  Free Running Clock

  internal      Internal Clock

  line          Recovered Clock

"The free-running keyword  specifies a free-running clock derived from the oscillator on the  motherboard, which is used only for testing and back-to-back  connections".

http://www.cisco.com/en/US/docs/ios/12_2/12_2z/12_2zj/feature/guide/gthwecan.html

To look for statistics use the "show controllers t1 X/X/X" command and avoid using any "loopback" command for it would affect the connection since it is used just for testing purposes. WS-C3560X-24T-L I hope this information helps and do not forget rating the useful posts.