Question:
Ok, WS-C3750V2-48PS-S I recently recieved the EHWIC so I can eliminate a cheap switch at our remote sites, and have POE as well so I can power the IP phone and camera. I have installed the card into the router and it has no problems recognizing the card, ports gig 0/0/0 - 0/0/3. I upgraded to Version 15.2(3)T2 on the router, but still having a couple problems.
1. I do not have any POE commands
2. For some reason I cannot get it configured properly
All I want to do is use it as a switch for the local lan, which is literally a computer, printer, ip phone and camera. The router has a T1 serial card for access to the network. No problems with the current config, gig 0/0 lan and serial 0/0/0 is the T1. How do I go about making all the ports on the EHWIC part of the LAN?
Answer:
It is an expected behavior that when there are no devices plugged into any switch ports that the switch ports will be down and that the Vlan will be down. So if you would be willing to do it, please plug your laptop back in and try the show ip interface brief and show arp again.
Also I wonder if you would check on and report some things to establish what is working and what is not working.
With the laptop connected to a switch port, and from the command line of the router:
- can you ping the laptop?
- can you ping the router gateway at 10.0.0.1?
- can you ping something in the network beyond 10.0.0.1?
then from the laptop:
- can you ping the router Vlan interface at 10.0.200.1?
- can you ping the router interface at 10.0.0.11?
- can you ping the router gateway at 10.0.0.1?
- can you ping anything in the network beyond 10.0.0.1?
And it occurs to me WS-C3750X-12S-S Price to ask whether the device at 10.0.0.1 has a route to 10.0.200.0?. For more info, please refer to http://www.pereza.info/es/blog/static-pat-ms-exchange-router
2013年8月15日星期四
2013年8月14日星期三
ios for bgp
Question:
does ip base Cisco 3925 router support bgp?
Answer:
From a traditional perspective Leo is
correct. Historically BGP was not available in IP BASE. But things change and IOS changes. And in
recent versions of IOS BGP is now available in IP BASE.
Here is a quote from the Release
Notes:"
BGP is available in the "IP base"
software package in Cisco IOS Release 12.4(11)T for Cisco 1841, Cisco 2800
family, and Cisco 3800 family routers."
For additional details see this link:
For futher information, please refer to http://www.3anetwork.com/cisco-cisco3925/k9-price_p284.html
Subnetting Issue
Question:
I have two Pc's connected WS-C3750X-24T-L together. PC1 i
configured 10.1.1 .1/8 address and PC2 with
10.1.1.10/16 address. I feel it should not ping between this two systems
because though the IP address may be same but the subnetmask is different. But
it pings how can this ping.
Answer:
of course.
1) IP addresses and netmasks are all 32
bits binary values so
255.0.0.0= 11111111000000000000000000000000
boolean AND is, T meaning True or 1 and F
meaning False or 0
T AND T= T
T AND F= F
F AND T=F
F AND F= F
so if we do the bitwise AND between the IP
address and the mask we get:
00001010000000000000000000000000 which is 10.0.0 .0
The same operation is done on the
destination address.
For futher information, please refer to http://www.3anetwork.com/cisco-ws-c3750x-24t-s-price_p102.html
2013年8月11日星期日
VPN behind NAT
Question:
I have estabilished a WS-C3560X-48T-L site-to-site VPN. The
config is as follows: 192.168.32.0/24 (SITE A) >--> 192.168.30.0/24 (SITE
B)
Site B has 192.168.30.1 as outside address
of the ASA firewall. On the other peer of the cable I have a Debian server
(192.168.31.2) that re-routes the packets from/to the internal network
(192.168.31.0/24). All the packets arriving to the ASA from the internal
network appear as 192.168.31.2 (the ip of the debian server).
When VPN is estabilished, from the Site A I
can ping the debian server installed on the Site B correctly.
If I try to ping any server on the site B
from the Debian server, the ping works correctly.
When I try to ping any host of the internal
network of the site B behind the debian from the site A, I get the following
message:
"Teardown ICMP connection for faddr
192.168.31.11/0 gaddr 192.168.32.10/1 laddr 192.168.32.10/1".
Any idea why this happens? I mapped both
the networks (192.168.30.0/24 and 192.168.31.24) when I created the VPNs tunnel
using the wizard.
Thanks,
Dario
SITEA Configuration:
object-group network DM_INLINE_NETWORK_1
network-object object SITE-B-DEBIAN-SUBNET
network-object object
SITE-B-INTERNAL-NETWORK
access-list outside_cryptomap extended
permit ip object SITE-A-INTERNAL-NETWORK object-group DM_INLINE_NETWORK_1
nat (inside,outside) source static
SITE-A-INTERNAL-NETWORK SITE-A-INTERNAL-NETWORK destination static
DM_INLINE_NETWORK_1 DM_INLINE_NETWORK_1 no-proxy-arp route-lookup
!
object network SITE-A-INTERNAL-NETWORK
nat (inside,outside) dynamic interface
object network obj_any
dhcpd auto_config outside
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy GroupPolicy_XXXXXXXX internal
group-policy GroupPolicy_XXXXXXXX
attributes
vpn-tunnel-protocol ikev2
tunnel-group XXXXXXXX type ipsec-l2l
tunnel-group XXXXXXXX general-attributes
default-group-policy GroupPolicy_XXXXXXXX
tunnel-group XXXXXXXX ipsec-attributes
ikev2 remote-authentication pre-shared-key
*****
ikev2 local-authentication pre-shared-key
*****
!
class-map inspection_default
match default-inspection-traffic
!
===============
SITEB CONFIGURATION
object network SITE-B-INTERNAL-NETWORK
subnet 192.168.31.0 255.255.255.0
object network SITE-A-INTERNAL-NETWORK
subnet 192.168.32.0 255.255.255.0
object network SITE-B-DEBIAN-SUBNET
subnet 192.168.30.0 255.255.255.0
object-group network DM_INLINE_NETWORK_1
network-object object SITE-B-EXTERNAL-IP
network-object object SITE-B-VPN-SERVER
object-group network DM_INLINE_NETWORK_2
network-object object SITE-B-DEBIAN-SUBNET
network-object object
SITE-B-INTERNAL-NETWORK
access-list outside_cryptomap extended
permit ip object-group DM_INLINE_NETWORK_2 object SITE-A-INTERNAL-NETWORK
nat (inside,outside) source static
DM_INLINE_NETWORK_2 DM_INLINE_NETWORK_2 destination static
SITE-A-INTERNAL-NETWORK SITE-A-INTERNAL-NETWORK no-proxy-arp route-lookup
!
route inside 192.168.31.0 255.255.255.0
192.168.30.2 1
group-policy GroupPolicy_YYYYYYYYYYYYYYYYY
internal
group-policy GroupPolicy_YYYYYYYYYYYYYYYYY
attributes
vpn-tunnel-protocol ikev2
tunnel-group YYYYYYYYYYYYYYYYY type
ipsec-l2l
tunnel-group YYYYYYYYYYYYYYYYY
general-attributes
default-group-policy
GroupPolicy_YYYYYYYYYYYYYYYYY
tunnel-group YYYYYYYYYYYYYYYYY
ipsec-attributes
ikev2 remote-authentication pre-shared-key
*****
ikev2 local-authentication pre-shared-key
*****
Answer:
In that case, you would need to remove all
the crypto map and disable isakmp configuration from the ASA.
That port is already reserved on the ASA
outside interface because you have those VPN tunnel configured earlier.
no crypto isakmp enable outside WS-C3560X-48T-S Price
2013年8月8日星期四
WAN Config Blank on 857w
Question:
My client has an 857w, WS-C3750X-24S-S but although the
site for the SDM express loads, the Internet WAN page always shows as
blank. We need access to this to alter
the ISP.
On IOS 12.4(6)T5
Telnet access appears to work and shows the
details.
Answer:
your WAN IP is learned dynamically with
PPP:
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
Just change the credentials, they should be
given by new ISP and also check this( ask ISP):
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
no snmp trap link-status
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
For SDM, what is your Java version, try to
downgrade it and see if it works.
For more info, WS-C3750X-48P-L Price http://www.3anetwork.com/cisco-ws-c3750x-48p-l-price_p118.html
2013年8月7日星期三
QoS (dscp-to-exp mutation) on Sup-2T/Cat6500
Question:
just
a quick question WS-C3560X-48T-L in regards to the crypto certificate keys. I notice on our
DMVPN routers, a large hexadecimal key shows up.
For example:
crypto pki certificate chain
TP-self-signed-708137789
certificate self-signed 01
3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 37303831 33373738 39301E17 0D313231 31313331 39323230
375A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3730 38313337
37383930 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B6C79947 3412D002 025566ABF2C7A830 .................
Answer:
The self signed certificate may be
associated with DMVPN but it can also be associated with other things. For
example, if you configure ip http secure-server it will cause a self signed
certificate to be generated.
For more WS-C3560X-48T-S Price news about Price ans Specification, you can click here.http://www.3anetwork.com/cisco-ws-c3560x-48t-s-price_p47.html
2013年8月6日星期二
Reset a Router -- Start Over?
Question:
How do I reset WS-C3750X-24S-S a Cisco 876 ISR? I seem to
remember from class it was easier than the option to change a register value
that I've found through research. Can I just delete the startup.cfg and it will
then try to run me through the wizard the next time I boot?
I've got a problem where the Dialer
interface is hooked to a FastEthernet interface as it's WAN link. This was
because I misconfigured with the pppoe-client command. But now I don't know how
to back out of the problem I made for myself. Just negating the commands on the
Fa3 interface doesn't seem to work. I need to hook the dialer it to the ATM
interface instead.
Answer:
How do I reset a Cisco 876 ISR?
Check the back of the unit. There should be a "Reset" button.
1.
Power down the router;
2.
Hold down the "Reset" button;
3.
Power up the router WS-C3750X-48P-L Price
For more Cisco WS-C3750X-24S-S news about Price ans Specification, you can click here http://www.3anetwork.com/cisco-ws-c3750x-24s-s-price_p112.html
订阅：
博文 (Atom)