Router: port forwarding problems.

Question:

I want to make Catalyst 3560X  my HTTP-server accessible from the outside (it's located on my LAN).

HTTP-server listens on port TCP 80 on all interfaces, IP address 192.168.112.17/24. (I can ping outside addresses from this machine.) My router - Cisco 2951, here's a part of its config:

interface GigabitEthernet0/0

ip address W.A.N.IPAddress W.A.N.Netmask

ip nat outside

ip virtual-reassembly in

duplex auto

speed auto

interface GigabitEthernet0/1

ip address 192.168.112.254 255.255.255.0

ip nat inside

ip virtual-reassembly in

duplex auto

speed auto

ip forward-protocol nd

!

ip nat inside source list 1 interface GigabitEthernet0/0 overload

ip nat inside source static tcp 192.168.112.17 80 W.A.N.IPAddress 80 extendable

ip route 0.0.0.0 0.0.0.0 W.A.N.GatewayIP

!

access-list 1 permit 192.168.X.0 0.0.0.255

access-list 1 permit 192.168.112.0 0.0.0.255

access-list 1 permit 192.168.Z.0 0.0.0.255

access-list 101 permit tcp any host W.A.N.IPAddress eq www

So I cannot reach the server from the outside. The router responds to pings (ICMP echo packets). I'm entering router's W.A.N.IPAddress in my browser's address field and there's no result. Help me, please!

Answer:

Here is simple config:

ip nat inside source static tcp 192.168.112.17 80 46.45.33.X 80

As WAN IP address for server here you need to use one spare address from your scope e.g. 46.45.33.5 as you have big enough subnet /25.

Also I would not recommend to Catalyst 3560X Price post here real Public IP addresses.

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080093f31.shtml

T1 Card for data on Cisco 3945 and Cisco 7206

Question:

I am working on a case where WS-C3750X-12S-S Price T1 card is required for Cisco 3945 and Cisco 7206 Router.

For Cisco 3945 we have variety of cards available i.e.

HWIC-4T      (Clear channel)

HWIC-1CE1T1-PRI (Channelized T1\E1)

Which one should i go for and what is the difference between clear channel and channelized ports

 

For Cisco 7206

PA-MC-8TE1+ , seems only this one is available.

Would requuire your inputs on the same.

Answer:

The problem that I find with the HWIC-4T is that this is not a real T1 card. Its synchronous maximum speed is 8 Mbps and you will need an external DSU, which will provide clocking and determine the speed of the link. On the other hand, HWIC-1CE1T1-PRI is basically an ISDN PRI card but it can be also used as a T1/E1 card for data. Check this configuration guide and look for the options you have with this card:

http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4_11xw/fmt1e1ic.html

PA-MC-8TE1 is also a versatile card that has T1/E1 functions so you will need to use the "card type" command to determine if the card would be a T1 or an E1.

http://www.cisco.com/en/US/docs/interfaces_modules/port_adapters/install_upgrade/multichannel_serial/8-port_multichannel_t1.ei_8pri_install_config/2738cfg.html

The configuration for both cards to get a T1 circuit is pretty similar because you need to configure "card type", controllers and their respective channel-groups and timeslots to get the proper number of DS0s to obtain a T1 (For a full T1 is always timeslots 1-24). Moreover, avoid using "network-clock-participate" and "network-clock-select" commands for they are voice/ISDN commands that could trigger clocking issues in a normal data circuit. The clock source command is important and is configured under the controller T1. When the Telco provides clocking in the middle, you can keep "clock source line" on both ends but if the circuit is back-to-back, it is recommended to use "clock source line" in router A and "clock source internal" in router B. In summary, I think the cirucit will come up if you use PA-MC-8TE1/HWIC-1CE1T1-PRI in the circuit as long as you use the proper clocking, timeslots, WS-C3750X-12S-S  framing and line coding for a T1.

CME 2911 load balancing for two Internet gateway

Question:

I have a customer he has Catalyst Switches Price two internet gateway connected through fast-Ethernet, and he wants to load balancing between two internet gateway.

How can I make load balancing for two gateway



Answer:

By searching forum before asking. Catalyst Switches

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080950834.shtml

http://www.discountroutercenter.com/wp-admin/

Redistribution - Perplexing

Question:

I greet everyone.WS-C3560V2-24PS-S  Please be patient with me.  Here I am supposed to have a very basic network.

The configurations are as follows:

R1#

!

!

ip cef

!

!

interface Loopback0

ip address 2.2.2.2 255.255.255.255

!

!

interface FastEthernet0/0

ip address 10.0.0.1 255.255.255.0

speed 100

full-duplex

!

!

interface FastEthernet0/1

ip address 192.168.1.1 255.255.255.252

speed 100

full-duplex

!

!

router bgp 100

no synchronization

bgp log-neighbor-changes

network 2.2.2.2 mask 255.255.255.255

network 10.0.0.0 mask 255.255.255.0

network 192.168.1.0 mask 255.255.255.252

neighbor 192.168.1.2 remote-as 100

no auto-summary

!

!

end

*************************************************************************************

R2#

!

!

ip cef

!

!

interface Loopback0

ip address 3.3.3.3 255.255.255.255

!

!

interface Loopback1

ip address 6.6.6.6 255.255.255.255

!

!

interface FastEthernet0/0

ip address 192.168.1.2 255.255.255.252

speed 100

full-duplex

!

!

interface FastEthernet0/1

ip address 172.16.1.1 255.255.255.0

speed 100

full-duplex

!

!

router eigrp 45

redistribute bgp 100 metric 1000 100 255 1 1500

network 6.6.6.6 0.0.0.0

network 172.16.1.0 0.0.0.255

no auto-summary

!

!

router bgp 100

no synchronization

bgp log-neighbor-changes

network 3.3.3.3 mask 255.255.255.255

network 192.168.1.0 mask 255.255.255.252

redistribute eigrp 45

neighbor 192.168.1.1 remote-as 100

no auto-summary

!

!

end

*********************************************************************************************

R3#

!

!

ip cef

!

!

interface Loopback0

ip address 4.4.4.4 255.255.255.255

!

!

interface FastEthernet0/0

ip address 172.16.1.2 255.255.255.0

speed 100

full-duplex

!

!

router eigrp 45

network 4.4.4.4 0.0.0.0

network 172.16.1.0 0.0.0.255

!

!

end

******************************************************************************************************

The verifications are as follows:

R1#show ip route

!

!

     2.0.0.0/32 is subnetted, 1 subnets

C       2.2.2.2 is directly connected, Loopback0

     3.0.0.0/32 is subnetted, 1 subnets

B       3.3.3.3 [200/0] via 192.168.1.2, 00:04:57

     4.0.0.0/32 is subnetted, 1 subnets

B       4.4.4.4 [200/156160] via 172.16.1.2, 00:04:52

     6.0.0.0/32 is subnetted, 1 subnets

B       6.6.6.6 [200/0] via 192.168.1.2, 00:04:57

     172.16.0.0/24 is subnetted, 1 subnets

B       172.16.1.0 [200/0] via 192.168.1.2, 00:04:57

     10.0.0.0/24 is subnetted, 1 subnets

C       10.0.0.0 is directly connected, FastEthernet0/0

     192.168.1.0/30 is subnetted, 1 subnets

C       192.168.1.0 is directly connected, FastEthernet0/1

  

    No problems in this case.  I see all the routes to the remote subnets.

*****************************************************************************************************************

R2#show ip route

!

!

     2.0.0.0/32 is subnetted, 1 subnets

B       2.2.2.2 [200/0] via 192.168.1.1, 00:23:33

     3.0.0.0/32 is subnetted, 1 subnets

C       3.3.3.3 is directly connected, Loopback0

     4.0.0.0/32 is subnetted, 1 subnets

D       4.4.4.4 [90/156160] via 172.16.1.2, 00:23:49, FastEthernet0/1

     6.0.0.0/32 is subnetted, 1 subnets

C       6.6.6.6 is directly connected, Loopback1

     172.16.0.0/24 is subnetted, 1 subnets

C       172.16.1.0 is directly connected, FastEthernet0/1

     10.0.0.0/24 is subnetted, 1 subnets

B       10.0.0.0 [200/0] via 192.168.1.1, 00:23:35

     192.168.1.0/30 is subnetted, 1 subnets

C       192.168.1.0 is directly connected, FastEthernet0/0

This is okay, I see all the remote subnets.

************************************************************************************************************************

R3#show ip route

!

!

     3.0.0.0/32 is subnetted, 1 subnets

D EX    3.3.3.3 [170/2588160] via 172.16.1.1, 00:00:34, FastEthernet0/0

     4.0.0.0/32 is subnetted, 1 subnets

C       4.4.4.4 is directly connected, Loopback0

     6.0.0.0/32 is subnetted, 1 subnets

D       6.6.6.6 [90/156160] via 172.16.1.1, 00:00:34, FastEthernet0/0

     172.16.0.0/24 is subnetted, 1 subnets

C       172.16.1.0 is directly connected, FastEthernet0/0

     192.168.1.0/30 is subnetted, 1 subnets

D EX    192.168.1.0 [170/2588160] via 172.16.1.1, 00:00:36, FastEthernet0/0

As you can see, only two out of the four remote networks are in this routing table.  R2 simply redistributed the BGP networks that are directly connected to it.  What happened to the BGP networks that R2 learned from R1?  How come these BGP routes were not redistributed even though they are in R2's routing table?

Please, help in any way you can.

Answer:

Hello Jaighobahi,

you are on the right track about iBGP and IGP redistribution, you need also a command under router bgp to allow injection of iBGP routes into IGP redistribution. I'm sorry I have missed it in my first replay.

BGP by default provides a protection mechanism to avoid to overload the IGP database being BGP much more scalable,

This protection can be disabled with the commands below:

on R2:

router bgp 100

bgp redistribute-internal

BGP AS number and EIGRP AS number are different concepts and they don't need to be equal and this does not change the behaviour

see

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bgp/command/bgp-a1.html#wp4270480859

https://supportforums.cisco.com/docs/DOC-1575  WS-C3560V2-24PS-S Price

CME 2911 load balancing for two Internet gateway

Question:

I have a customer Cisco 1900 sereis router he has two internet gateway connected through fast-Ethernet, and he wants to load balancing between two internet gateway.

How can I make load balancing for two gateway



Answer:

By searching forum Cisco 2921 price before asking.

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080950834.shtml

How to check QoS queues on an interface?

Question:

We were dropping packets WS-C3560V2-24TS-S Price across some WAN links and we found that the problem cleared up when we removed our QoS configs from the interface. So I'm thinking that some of the queues were becoming saturated with specific types of traffic. But I can't remember the commands to check individual queues. Can anyone suggest some commands to see if the different queues on our interfaces are filling up?

Answer:

you haven't specified the platform you are interested in.

For a router with modular QoS you should be able to get  enough information from

show policy-map interface type x/y

='m� r p c �6 P�3 >

Would the best option for  OSPF network statements be:

MPLS router: network 192.168.1.0 0.0.0.255

Core router: network 192.168.1.0 0.0.7.255

or

MPLS router: network 192.168.1.0 0.0.7.255

Core router: network 192.168.1.0 0.0.7.255

or

MPLS router: network 192.168.1.0 0.0.0.255

Core router: network 192.168.1.0 0.0.0.255, network 192.168.2.0 0.0.0.255, network 192.168.3.0

Answer:

I would enable OSPF just in the interfaces that are going to speak this protocol, for WS-C3560V2-24TS-S example:

net 192.168.1.1 0.0.0.0 area 0

net 192.168.2.1 0.0.0.0 area 0

net 192.168.3.1 0.0.0.0 area 0

routing problem on cisco 887

Question:

i have pings from router Cisco 1900 sereis router to outside (internet) and from router to inside (lan) but i have no ping from inside to outside ,

it seem like nat table is wrong or router just not doing routing...

please have a look at my configuration, may be you'll see something suspicious.

##############################

##############################

##############################

version 15.1

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Riwip-R

!

boot-start-marker

boot-end-marker

!

!

enable secret 5 $1$ijuH$FLQZC0k.e.Zq/ya41uYFa0

enable password *********

!

aaa new-model

!

!

!

!

!

!

!

aaa session-id common

memory-size iomem 10

crypto pki token default removal timeout 0

!

!

ip source-route

!

!

!

!

!

ip cef

ip domain name

*********

no ipv6 cef

!

!

license udi pid CISCO887VA-K9 sn FTX1715828L

!

!

username ***** privilege 15 secret 4 8R9Jpx2OkfxKJM2qBI.

d617QvuuNwdr@#EA7Yb.ebRE

!

!

!

!

controller VDSL 0

!

ip ssh version 2

!

!

!

!

!

!

!

interface Ethernet0

no ip address

pppoe-client dial-pool-number 1

!

interface ATM0

  no ip address

shutdown

  no atm ilmi-keepalive

!

interface FastEthernet0

no ip address

!

interface FastEthernet1

no ip address

shutdown

!

interface FastEthernet2

no ip address

shutdown

!

interface FastEthernet3

  no ip address

!

interface Vlan1

ip address 10.0.0.130 255.0.0.0

ip nat inside

no ip virtual-reassembly in

!

interface Dialer0

mtu 1492

ip address negotiated

ip nat outside

ip virtual-reassembly in

  encapsulation ppp

ip tcp adjust-mss 1452

dialer pool 1

dialer-group 1

ppp pap sent-username *****@****password 0 ************

!

ip forward-protocol nd

no ip http server

no ip http secure-server

!

ip nat inside source list NAT-ACL interface Dialer0 overload

ip route 0.0.0.0 0.0.0.0 Dialer0

!

ip access-list extended NAT-ACL

permit ip 10.0.0.0 0.255.255.255 any

!

dialer-list 1 protocol ip permit

!

!

!

!

!

!

!

line con 0

no modem enable

line aux 0

line vty 0 4

privilege level 15

password **********

transport input ssh

!

end

##############################

##############################

##############################

Answer:

Your config looks correct. Can you verify the default-gateway on the hosts is the vlan 1 IP address and that they Cisco 2921 price are in the correct subnet.