2013年8月30日星期五

TFTP Service

Question:

i am trying Cisco 3945 router to find a way to verify that the TFTP service is not running on the router.  i issued the no tftp-server flash: <ios> and it accepted it even though it does not show up in the show running config.   any docs would be helpful.    

Answer:

If the command isn't in the running config, it's disabled. The tftp server isn't turned on by default. There are version differences that seem to either support the control-plane command and those that don't. I have a 3845 that has it, but I have a 3825 that doesn't. Here's a 3745 that does that would show you the results should you decide to maybe update your router:

R1#sh control-plane host open-ports
Active internet connections (servers and established)
Prot        Local Address      Foreign Address                  Service    State
tcp                 *:23                  *:0                   Telnet   LISTEN
udp                 *:69                  *:0              TFTP-Server   LISTEN

R1#  Cisco 3945 price


2013年8月29日星期四

Issue redistributing between EIGRP and BGP using (match internal)

Question:

We currently WS-C3750X-48T-L have two routing protocols that we use in our DCs. Internally we use EIGRP, and externally we use BGP. Each of DC's has an internet link and an MPLS link.

To redistribute between the EIGRP instance and the BGP instance in the DC, we use a route map that matches internal routes.

I have an ASA firewall that is connected to the core switch, this firewall is the Internet firewall, and is part of the EIGRP AS. There are site to site tunnels, the default route, and client vpn subnets that the firewall advertises to EIGRP.

Those routes are not getting redistributed into BGP, which is a huge issue. The routes coming from the firewall are all showing as external, so BGP is not advertising them.

Here's the configuration of the edge MPLS router (the one that needs to redistribute between the two):

router eigrp 50
network x.x.x.x 0.0.63.255
redistribute bgp 50 route-map BGP-TO-EIGRP
!
router bgp 50
bgp log-neighbor-changes
network y.y.y.y mask 255.255.255.255
aggregate-address y.y.y.y 255.255.192.0 summary-only
timers bgp 30 90 90
redistribute eigrp 50 route-map EIGRP-TO-BGP
neighbor z.z.z.z remote-as 50
<output ommitted>
!
route-map EIGRP-TO-BGP permit 10
match route-type internal
!
route-map BGP-TO-EIGRP permit 10
set metric 10000 100 255 1 1500
!


Here's a sample route from one of the networks that the firewall is advertising:

xxx-3925-01#sh ip route 150.175.49.3
Routing entry for 150.175.49.3/32
  Known via "eigrp 50", distance 170, metric 3328, type external
  Redistributing via eigrp 50, bgp 50
  Last update from 10.34.0.73 on GigabitEthernet0/0, 00:45:12 ago
  Routing Descriptor Blocks:
  * 10.34.0.73, from 10.34.0.73, 00:45:12 ago, via GigabitEthernet0/0
      Route metric is 3328, traffic share count is 1
      Total delay is 30 microseconds, minimum bandwidth is 1000000 Kbit
      Reliability 255/255, minimum MTU 1500 bytes
      Loading 1/255, Hops 2

xxx-3925-01#sh ip bgp neighbors x.x.x.x advertised-routes               <--- ISP MPLS Peer
BGP table version is 121306, local router ID is x.x.0.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, x best-external
Origin codes: i - IGP, e - EGP, ? - incomplete


   Network          Next Hop            Metric LocPrf Weight Path
*> x.x.0.0/18     0.0.0.0                            32768 i


Total number of prefixes 1


Looking at that output from the show route it seems it's being redistributed, but I'm not seeing it anywhere else and it doesn't show as being advertised out.

Answer:

Yes, the redistribution causes the route to be external. Matching on internal routes won't work in this case and you'll either need to have them also match on external routes, or they should be able to tie it down to just that routing protocol (if you have more than bgp/eigrp on this router).

route-map EIGRP permit 10
match route-type internal
route-map EIGRP permit 20
match route-type external
match source-protocol eigrp <AS>

You can't do much with the ASA in regards to tagging routes (at least in the older versions). Otherwise, I would say tag your statics during redistribution and then match on the tag. WS-C3560X-48PF-S

Original comes from http://cisco3560.weebly.com/

2013年8月28日星期三

NATproblem

Question:

I've a small problem with NAT.WS-C3750X-48T-L  I have a Cisco1861 and that's connected to my ISP's modem via FE0/0. I can ping my intern network without any problem but the NAT isn't working so I can't connect to the internet.

Can somebody check what I've did wrong? Hereby the config:

Many thanks for the help!

ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 192.168.3.1
ip dhcp excluded-address 192.168.2.255
ip dhcp excluded-address 192.168.3.255
ip dhcp excluded-address 192.168.2.10
!
ip dhcp pool INTERN
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1 255.255.255.0
   dns-server 8.8.8.8
!
ip dhcp pool GUEST
   network 192.168.3.0 255.255.255.0
   default-router 192.168.3.1 255.255.255.0
   dns-server 8.8.8.8
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
license udi pid C1861W-SRST-C-F/K9 sn FGL153422S3
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface Integrated-Service-Engine0/0
no ip address
shutdown
!
interface FastEthernet0/1/0
!
interface FastEthernet0/1/1
switchport mode trunk
!
interface FastEthernet0/1/2
!
interface FastEthernet0/1/3
switchport access vlan 2
spanning-tree portfast
!
interface FastEthernet0/1/4
!
interface FastEthernet0/1/5
!
interface FastEthernet0/1/6
!
interface FastEthernet0/1/7
!
interface FastEthernet0/1/8
!
interface Dot11Radio0/5/0
no ip address
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface FastEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
!
access-list 1 permit 192.168.0.0 0.0.255.255
!

Answer:

you should take this off:
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
as your f0/0 interface gets an IP address by DHCP it should also get a default gateway, verify this after deleting the default static route you entered  with sh ip route static WS-C3750X-48T-S Price command.

For more info, please refer to http://lilirouter.tblog.com/

2013年8月15日星期四

c3560 switch is not allowing telnet or SSH

Question:

I have configured new WS-C3750X-12S-S  DS3 link as below.Also GRE tunnel build on it.EIGRP running between tunnel interfaces.
EIGRP is flapping every minute , i dont found any packet drop between 2 routers WAN interfaces, but ping stcuks for some time.
During this time EIGRP flaps.ISP dont found any issue in network.


int s4/0
ip add x.x.x.x
encapsulation ppp
dsu bandwidth 44210
scramble
crc 32
serial restart-delay 0

interface Tunnel155
  bandwidth 25000
ip address A.B.C.D
no ip redirects
no ip proxy-arp
ip tcp adjust-mss 1432
load-interval 30
delay 100
qos pre-classify
keepalive 10 3
tunnel source Serial4/0
tunnel destination YY.Y.Y.

Answer:

Did you check the IP MTU on both sides of the tunnel? You might want to reduce the MTU size according to how much your physical link supports. WS-C3750X-24S-S Price   For more info, http://www.pereza.info/es/blog/2811-router-needs-be-reloaded-every-week

2013年8月14日星期三

E1 Modules for Cisco1921

Question:

I was searching for C2951-VSEC an E1 card on Cisco1921, however I couldn't find out an exact replacment for HWIC-4T1/E1.

The modules which I came across are, VWIC2-1MFT-T1/E1  and   VWIC2-1MFT-G703

Can anyone please let me know the differences between these two cards VWIC cards ?

Which one should I purchase?

Answer:

Actually, 1921 supports HWIC-4T1/E1.
http://www.cisco.com/en/US/prod/collateral/routers/ps10538/aag_c07_563807.pdf



The WIC G703 supports unframed E1, that is usually not necessary.

For futher information, please refer to  http://www.3anetwork.com/cisco-c2921-vsec/k9-price_p251.html

Ripv1

Question:

Hi I have two router WS-C3560X-48PF-S R1 and R2. My R1 network address are

R1                                                            R2
Fa0/0                                                        Fa0/0
172.16.100.0/24                                         172.16.200.0/24
S0/0                                                          S0/0
172.16.10.1/24                                            172.16.10.2/24



I'm using Ripv1 as my routing protocol. What will be in my R2's routing table. Please explain.

Answer:


if we answered your question then would you mind marking the thread as solved and give ratings to whom you considered WS-C3750X-24T-L Price gave you the informations you needed.

2013年8月11日星期日

BGP conditional advertisement + object tracking

Question:

Hope someone can help,WS-C3560X-48T-S  we have multihomed environment advertising 4 prefixes to both ISPs and running an iBGP between two routers. Both ISPs send us default routes. Attached diagram to understand how we are connected.
Issue: traffic for prefix x.x.x.x/24 is taking a path from AS-2 which is what i dont want, reason being bandwidth is highly utilized. We have higher bandwidth for AS-1.

I have been trying to get a solution setup in much unconventional way to influence inbound path by not advertising 2 prefixes to AS-2. The issue we have is we are a private AS and cannot influence inbound traffic taken from dual-homed ISPs, part of the problem is AS-2 is now using AS-1 as a transit provider.

what i would like to do is for AS-2 link only advertise prefixes a.a.a.a/24 and b.b.b.b/24 whilst eBGP peer/interface is up for AS-1, if the link with AS-1 is down advertise a/b/x and y prefixes to AS2. This way i can control traffic destined to x/24 prefix will not take path through AS-1. I have been trying object tracking using ip sla's, prefix advertisements etc, is there a neater solution then what i have been trying.

Answer:

There is one useful link
http://openweb.or.kr/wp-content/uploads/2012/03/BGP-MHing-HOWTO-whitepaper.pdf

But if local communities not helping you should contact to your ISP.

If you can aggreagate these subnets x.x.x.x/24 and y.y.y.y/24 into subnet with mask 23. It's better to advertise a summary from secondary router and more specific from primary.WS-C3560V2-24TS-S Price

2013年8月8日星期四

. Error message:FW[Mod 05]: Error!!! Temperature sensor number 4

Question:

I can't find anything WS-C3750X-48P-L in the cisco.com about this error message:
01:22:58.286 FW[Mod 05]: Error!!! Temperature sensor number 4
01:22:58.286 FW[Mod 05]: Error!!! Temperature sensor number 5
Someone knows this error message?

Answer:


Sup 5 can't get data from its temperature sensors and complains of that. Open Service Request -  Supervisor may need replacement.

2013年8月7日星期三

How to advertise 2 vlans connected to a port of SM-D-ES3-48-P in 3945 for routing to the next 3945

Question:

I'v got  2 3945 WS-C3560X-48T-S  routers with SM-D-ES3-48-P and sm-2ge-sfp-cu. They are connected by gi2/1 and gi1/0. OSPF is up.
A link (2 vlans) connected to one fe port of SM-D-ES3-48-P. What do i need to do to see them (vlans) from both sites(3945s).
Thank you in advance

Answer:

If they established adjacency just add these subnets under ospf process:

router ospf 1
network 192.168.0.0 0.0.0.255
network 192.168.1.0 0.0.0.255

And to verify

sh ip ospf neighbor
sh ip route


On routers


For more WS-C3560V2-24TS-S Price news about Price ans Specification, you can click here.http://www.3anetwork.com/cisco-ws-c3560v2-24ts-s-price_p48.html

2013年8月6日星期二

Clear the AUX line, reverse telnet session starts again

Question:

I have a rollover WS-C3750X-48P-L cable between two 3925 routers (AUX->Console) whilst I am remotely configuring a device.
I have setup reverse telnet to get access to the device needing configuration and when I try and reconnect through the Aux port again, I get an error:
Trying 192.168.1.1, 2001 ...
% Connection refused by remote host

The first time it connected without issues. If I check with who and sh line I find that the session is still idle.
I've tried to clear it with clear line aux 0, and clear line 1 which I confirm it clears it, but all that happens is the idle timer starts from 0 again.I've changed the exec-timeout to 1 minute, and after a minute the counter starts again.

Also I tried to remove the transport input telnet to break the session but its still not disconnecting.

    Line       User       Host(s)              Idle       Location
   1 aux 0                idle                 00:00:11 
*578 vty 0     jason      idle                 00:00:00 10.1.1.1

line aux 0
exec-timeout 1 0
transport output all
transport input telnet
stopbits 1

Currently running: c3900e-universalk9-mz.SPA.151-2.T4.bin

Anyone have any ideas?

Answer:


Can you actually configure your AUX 0 with no exec command? In this case, you do not want to run shell on this aux port whenever a newline comes from the attached device. WS-C3750X-48PF-L Price

For more Cisco WS-C3750X-48P-L Price news about Price ans Specification, you can click here http://www.3anetwork.com/cisco-ws-c3750x-48p-l-price_p118.html

2013年8月5日星期一

Port forwarding HTTP Error 504

Question:

I've a little problem WS-C3560X-48T-S  with my 890SFP Router, which is configured behind a Virtual DMZ.
The 192.168.178.0/24 network is the DMZ and the 192.168.0.0/24 is my network with all my devices.

The router has NAT and the inside interface is 192.168.0.1, the outside interface ist 192.168.178.253 (the other Router in the DMZ has .254).

I added (with Cisco Configuration Professional) a static NAT Rule with Original address 192.168.0.201:80 (my Webserver which needs to be accessable from outside) and translated address 192.168.178.253:8080.

When I open a Websession from outside and call the address http://my.real.outside.ip:8080 I get the HTTP Error 504.

Where can be the problem?

Answer:

can you do this:
enable
config t
ip inspect log drop-pkt
logging con 6
ip access-list extended autosec_firewall_acl

5 permit tcp any host 192.168.178.253 eq 8080  WS-C3560V2-24TS-S Price

For more WS-C3560X-48T-S  news about Price ans Specification, you can click here.

Show etherchannel summary equivalent for 10008?

Question:

Does anyone happen WS-C3750X-48P-L to know if theres an equivalent command of show etherchannel summary for a 10008 router running 12.2(33)SB9 ?

Answer:

You can try

Show lacp internal  WS-C3750X-48PF-L Price



For more Cisco Switch news about Price ans Specification, you can click here.
http://www.3anetwork.com/cisco-ws-c3750x-48pf-l-price_p121.html

2013年8月2日星期五

Interface Issues Netgear Smartswitch to Cisco 881 LAN port

Question:

    Hi we have 100 Cisco WS-C3560X-48P-L  881 routers in our network and they all work fine to Linksys, 3Com, etc switches.  The problem we have encountered is interfacing to Netgear switches.  Netgear switches use autosensing on their ports and it does not seem to be compatible with MDIX autosensing on the Cisco 881 4 port LAN hub that is standard on the 881 router.  Has anyone encountered this issue before?  Would a cross over cable resolve the problem?  Since both run autosensing MDIX they never synch - so likely a cross over would not do much.  I see this with all types of Netgear smartswitches.  If you put a small switch between the Netgear switch and the 881 Cisco router everything works fine except for getting port 9000 traffic through.  Any ideas would be appreciated.

Answer:


There should be no problem using crossover cable.You could try disabling autoMDI/MDIX( no mdix auto) on the cisco device and keep a straight through cable but if it fails use a crossover cable. WS-C3560X-48P-S Price

2013年8月1日星期四

Any Cisco Devices to terminate bonded copper pairs?

Question:

I am trying to find out WS-C3560V2-24PS-S of Cisco has a device similar to the Actelis ML600 that can terminate bonded copper pairs and provide an Ethernet handoff.  We could certainly use the Actelis but we like to keep the network as Cisco-centric as possible.

Answer:

Yes, the G.SHDSL EHWIC, do supports ethernet First Mile, bonding and all the desirable features.


Also the HWIC version that for practical purposes do the same things.

For more Cisco WS-C3560V2-48PS-S Price news about Price ans Specification, you can click here. http://www.3anetwork.com/cisco-ws-c3560v2-48ps-s-price_p55.html