Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About shawn
Stats
Member since
05-18-2006
14
Posts
0
Helpful
0
Solutions
02-20-2018
05:19 PM
Hello, I'm planning to replace the AC power source for our AIR-AP1572EAC-A-K9 AP's with PoE+ switches, specifically the WS-C2960X-24PS-L series. Documentation for the AP is not clear; here it states that PoE is supported:
https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1570-series/guide-c07-733334.html
Power Aironet 1570 Series Outdoor Access Points can be powered by AC, DC, power over cable (PoC), and Power over Ethernet (PoE). Table 10 shows the powering options for each model.
In the same document, UPoE is required
Power over Ethernet The AP1572EAC can be powered over the Ethernet connection. Power can be sourced directly from an appropriately powered Universal Power over Ethernet (UPoE) switch port or from the inline power injector listed in Table 12. Table 12. Power Injector for Use with PoE Part Number Description AIR-PWRINJ1500-2= 1520/1550/1570 Series Power Injector; for indoor environments only
Can the WS-C2960X-24PS-L power the AP?
Thanks,
Shawn
... View more
Labels:
01-14-2018
11:14 AM
Thanks for the response, good suggestion, however port one on each sup will be connected to redundant firewalls.
Shawn
... View more
01-14-2018
10:22 AM
Hello,
I'd like to get check my understanding of HA and back plane capabilities of this platform. Scenario:
One 4507R+E with dual SUP7-E in SSO mode; Version 03.08.00.E
Two 10G uplinks, one per SUP connected to two separate WS-C3750X-24T-S with C3KX-NM-10G; Version 12.2(55)SE1
Diagram attached.
The desired intention is to have traffic flow from both 3750's back to the 4507.
Questions:
1. Will this work?
2. Will this work if one of the SUP's fails?
Thanks,
Shawn
... View more
Labels:
09-11-2012
02:43 PM
Hello All, I am working with another vendor's wireless hardware and they require that that management traffic is marked with DSCP 6. The vendors CPE mgmt IP is in its own vlan and gets an IP from our dhcp server, where i can see the dhcp request marked with DSCP 6. The problem is i cannot ping or access the web management interface on the CPE once it has an IP. The vendor says that it becasue I'm not marking traffic on my switch with DSCP 6, does that make sense? I didn't think that packets would be dropped or filtered if they didn't have a particular DSCP value. Does any have any suggestions on how to make this work? Thanks! CPE <---------> AP <---------------> 3560 <------------> 2621 mgmt ip 10.1.10.100/24 | vlan10 vlan 10 | ip 10.1.10.1/24 dscp 6 | PC 10.1.10.5/24
... View more
Labels:
Created by
shawn
in VPN and AnyConnect
in VPN and AnyConnect
02-06-2011
12:43 PM
02-06-2011
12:43 PM
Hi Jennifer, Thanks for the reply, yes, i didn't do a very goog job sanatizing the config before posting it. During my troubleshooting efforts, I found a post suggesting to add routes on each ASA to the remote subnet to using the outside interface ip as the gateway. I did that but it didn't help, I should of removed it from my config before posting. WRT the hosts @ .3.350 & .10.250, they both Server 2003, no firewall and the default gateway for each is the local ASA inside int. I've posted the details below for confirmation. Is seems to be that the site1 ASA does not identify traffic destine for the remote LAN. When I run a tracert from the .10.250 host to the .3.250 host, the traffic gets sent to the ASAs default gateway. I should point out that both ASAs are in the same ISP network and both have the same default gateway. Seems like a possible NAT ACL issue, but again, the config seems fine. Any other suggestions? I've attached ASDM traces while the vpn is up that suggest this is the issue, I think. site1 host (192.168.10.250) IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x10003 ...1c c1 de 0f 7c b4 ...... HP NC107i PCIe Gigabit Server Adapter =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.10.1 192.168.10.250 20 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.10.0 255.255.255.0 192.168.10.250 192.168.10.250 20 192.168.10.250 255.255.255.255 127.0.0.1 127.0.0.1 20 192.168.10.255 255.255.255.255 192.168.10.250 192.168.10.250 20 224.0.0.0 240.0.0.0 192.168.10.250 192.168.10.250 20 255.255.255.255 255.255.255.255 192.168.10.250 192.168.10.250 1 Default Gateway: 192.168.10.1 =========================================================================== Persistent Routes: None site2 host (192.168.3.250) IPv4 Route Table =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x10003 ...78 e7 d1 bd 1f 16 ...... HP NC107i PCIe Gigabit Server Adapter =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.3.1 192.168.3.250 20 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.3.0 255.255.255.0 192.168.3.250 192.168.3.250 20 192.168.3.250 255.255.255.255 127.0.0.1 127.0.0.1 20 192.168.3.255 255.255.255.255 192.168.3.250 192.168.3.250 20 224.0.0.0 240.0.0.0 192.168.3.250 192.168.3.250 20 255.255.255.255 255.255.255.255 192.168.3.250 192.168.3.250 1 Default Gateway: 192.168.3.1 =========================================================================== Persistent Routes: None
... View more
Created by
shawn
in VPN and AnyConnect
in VPN and AnyConnect
02-05-2011
02:03 PM
02-05-2011
02:03 PM
Hello All, I've setup a site-to-site vpn between 2 5505s, with 1 subnet per site directly behind the ASAs. site1 192.168.10.0/24 --- asa 1.1.1.1/24 ------ ISP ------ asa 2.2.2.2/24 --- site2 192.168.3.0/24 The VPN establishes connection successfully, but i can only access resources from site2 to site 1. E.g. I can ping or rdp from a server in site2 at IP 192.168.3.250 to a site1 server at IP 192.168.10.250. I cannot make the opposite connection, i.e. 192.168.10.250 to 192.168.3.250. Configs and sho crypto out put attached, any ideas? I'm sure I'm just overlooking something simple but I'm not seeing it! Thanks, Shawn
... View more
Labels:
04-08-2010
05:52 PM
Hello, We are an ISP that hosts several commercial customers using Cisco VPN hardware (IOS, PIX & ASA devices) for site-to-site connectivity to their head offices on other networks. We've had several situations where there was a loss of connectivity between two of these end points (host on our network and off network) and the headoffice VPN device 'flooded' our network with thousands of ESP packets for several minutes. This has casued us service issues and we are searching for a way to mitigate this activity. The VPN is never an issue when the connection is good and we have no control over the configuration of the end points. We have two devices in our ISP headend that I think can be used to throttle this traffic, a 4507 IOS 12.2(31)SGA1 and an ASA 5540 8.2 with a ASA-SSM-20 7.0 module. The goal is to identify this traffic behavior and rate limit the traffic to a level that doesn't cause network issues when flooding but not interfer with normal VPN operation for our customers. Can anyone recommend which solution would work best? Thanks, Shawn
... View more
Labels:
12-30-2009
12:57 PM
Good point on the L2 vs L3. The servers are in a single vlan and we're going to be restricting access via ACL, so an L3 will be used.
... View more
12-30-2009
11:05 AM
Thanks for the comments eveyone, very useful. Redundancy is definitely important and the servers have dual nics so I want to take advantage of that. Looking at the comments, I'm going to scope out two options: 1. Single 4507R-E with Dual SUP 6-E and 1 WS-X4506-GB-T card . Two 3750's, teamed server nics with nice connected to each switch, dual uplinks to the 4507 in etterchannel. 2. Dual 4506-E using HSRP with single SUP 6-E and 1 WS-X4506-GB-T card. Same 3750 & server config except using all 4 uplink ports on the switches to connect dual etterchannels to each 4506. Feedback is welcome as always. Thanks, Shawn
... View more
12-29-2009
05:09 PM
Hello, I'm spec'ing out a new 4506-E with a SUP 6-E for a LAN upgrade. This will be a core switch in the server room, where there are 20 servers. As I understand it, Cisco recommends the Core/Distribution design approach where the servers would be connected to their own switch, say a 3750 and then uplinked to the 4506. Is there any reason beyond design recommendations that I wouldn't want to add a 24 or 48 port gigabit line card in the 4506 and connect the servers directly? I'm trying to justify costs and understand the implications of doing this. Any feedback is welcome. Thanks, Shawn
... View more
Labels:
12-06-2009
07:57 PM
Thanks for the feedback. HSRP is not an option at this time due to budget but we are adding a second SUP IV for some redundancy. The ASA has to stay, its our internet gateway. Cheers, Shawn
... View more
12-06-2009
02:53 PM
Hello All. I'm looking for some feedback on a network design. We're replacing our 2821 with a 4507 and I have some questions about the best way to implement this. I've attach a simple diagram that shows our current config and the proposed new config. We currently have a 2950-12 that is connected to a second 2950-12 via fiber GB, using GBIC interfaces. The second 2950 is connected to the 2821 via copper int. I have a 4507 with the following modules: Mod Ports Card Type Model Serial No. ---+-----+--------------------------------------+------------------+----------- 1 2 Supervisor IV 1000BaseX (GBIC) WS-X4515 3 24 10/100/1000BaseT (RJ45) WS-X4424-GB-RJ45 4 6 1000BaseX (GBIC) WS-X4306-GB My initial thought was remove the 2950 currently connected to the 2821 and run the 2 fiber connects directly to Gi4/1 & Gi 4/2 on the 4306 blade. I would then configure these ports as an etterchannel in trunk mode to support our VLANs and configure VLAN interfaces as necessary. Int Gi3/1 would be configured in routed mode as the default gateway for 0.0.0.0. Have I overlooked anything in this configuration? Is this the best practice configuration? All feed back is welcome. Thanks, Shawn
... View more
Labels:
09-26-2006
11:04 AM
I have a 1841 currently configured for firewall and NAT. I have a HWIC-4ESW module installed. What I would like to do is configure one of the ports on the module as a DMZ for a mail server. How would I best go about this? Thanks. Cisco IOS Software, 1841 Software (C1841-ADVSECURITYK9-M), Version 12.4(3a), REL EASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2005 by Cisco Systems, Inc. Compiled Thu 29-Sep-05 19:12 by hqluong ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1) ADMrt02 uptime is 5 weeks, 4 days, 16 hours, 3 minutes System returned to ROM by power-on System restarted at 20:53:05 MDT Thu Aug 17 2006 System image file is "flash:c1841-advsecurityk9-mz.124-3a.bin" This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco 1841 (revision 5.0) with 234496K/27648K bytes of memory. Processor board ID FTX0949Y16X 6 FastEthernet interfaces 1 Virtual Private Network (VPN) Module DRAM configuration is 64 bits wide with parity disabled. 191K bytes of NVRAM. 62720K bytes of ATA CompactFlash (Read/Write)
... View more
Labels:
09-14-2006
08:02 AM
I'm looking for some guidance on setting up a mobile VPN solution using our 1841 and Windows AD with IAS for authentication. I've done this before with the PIX 6.x and it worked perfectly. I've been searching online and can't find anything specific to this senario. Thanks.
... View more
Labels:
02-20-2018
Hello, I'm planning to replace the AC power source for our
AIR-AP1572EAC-A-K9 AP's with PoE+ switche...
01-14-2018
Thanks for the response, good suggestion, however port one on each sup
will be connected to redundan...
01-14-2018
Hello, I'd like to get check my understanding of HA and back plane
capabilities of this platform. Sc...
09-11-2012
Hello All,I am working with another vendor's wireless hardware and they
require that that management...
02-06-2011
Hi Jennifer,Thanks for the reply, yes, i didn't do a very goog job
sanatizing the config before post...
02-05-2011
Hello All,I've setup a site-to-site vpn between 2 5505s, with 1 subnet
per site directly behind the ...
04-08-2010
Hello,We are an ISP that hosts several commercial customers using Cisco
VPN hardware (IOS, PIX & ASA...
12-30-2009
Good point on the L2 vs L3. The servers are in a single vlan and we're
going to be restricting acces...
12-30-2009
Thanks for the comments eveyone, very useful.Redundancy is definitely
important and the servers have...
12-29-2009
Hello,I'm spec'ing out a new 4506-E with a SUP 6-E for a LAN upgrade.
This will be a core switch in ...
12-06-2009
Thanks for the feedback. HSRP is not an option at this time due to
budget but we are adding a second...
12-06-2009
Hello All. I'm looking for some feedback on a network design. We're
replacing our 2821 with a 4507 a...
09-26-2006
I have a 1841 currently configured for firewall and NAT. I have a
HWIC-4ESW module installed. What I...
Public Statistics
| Date Registered | 05-18-2006 12:39 PM |
| Date Last Visited | 03-14-2019 11:42 PM |
| Total Messages Posted | 14 |
