Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Sheraiz Ahmad
Stats
Member since
09-23-2012
16
Posts
0
Helpful
0
Solutions
12-05-2012
01:01 AM
My Route Map is Set, but I get ping google.com.. Even tracert does not work. My switch port ip is 192.168.200.2 - 255.255.255.0 and the Router is 192.168.200.10/24 pbr is enable and route Map is applied to the int Vlan180. I cannot get access to any Data. and when I apply the Ip policy I get the following error : ""PLATFORM PBR 3 UNSUPPORTED RMAP : Route Map kddi not supported for PBR.."" Please advise. Thank you
... View more
12-05-2012
12:38 AM
Hi I am woundering as my 3750 has a default route that points to the other Router. Should I create another static route to point to the new Router or Router B
... View more
12-04-2012
10:53 PM
Hi Raju Yes, the Ip for my Router is 192.168.200.X - 255.255.255.0 The Port its connected on the switch is No switch Port with Ip of 192.168.200.B - 255.255.255.0 I am connected on the Lan and I can ping the Ip of the switch Port, but I cannot ping the IP of the Router.. Could you please advise.. vlan 120 = 10.120.0.0/24 vlan 140 = 10.140.0.0/24 access-list 120 permit ip 10.120.0.0 0.0.0.255 any access-list 140 permit ip 10.140.0.0 0.0.0.255 any Create a policy that matches on these acls: route-map NewISP permit 10 match ip address 120 set ip next-hop route-map NewISP permit 20 match ip address 140 set ip next-hop Then apply to your vlan interfaces: int vlan 120 ip policy route-map NewISP int vlan 140 ip policy route-map NewISP
... View more
12-04-2012
09:17 PM
Hi I have a 2 ISP One Hooked to router A and the Other to B both are hooked to Core switch 3750. The Port on the switch where the Router is connected is No switch Port and I have given the IP address. 3750 - has the PBR templated I would like to use PBR to redirect traffic to Router B VLan 120 - 172.20.20.0 access-list 120 permit ip 172.20.20.0 0.0.0.255 any route-map NewISP permit 10 match ip address 172.20.20.0 set ip next-hop <new asa ip> But this does not work....I can ping to the switch Port, cannot be to the Router B. Could you please advise.. Thankyou
... View more
Labels:
12-04-2012
07:37 PM
Hi I can ping and run the tracert, but I cannot get the Internet data. I can ping the switch port - which connect to the Router..but I cannot get to the router..
... View more
12-04-2012
12:17 AM
I have all the requirements as per above. The port on the switch where the router connects is a no switch port and I have given the IP, and router is directly connected to that port. Just not sure where data cannot go to second router.
... View more
12-04-2012
12:08 AM
Thank for your Email. The template that I have on the 3750 is Desktop Routing and version is 15.0 (0) SE. I think the routing is working as I have the below : route-map newisp permit 10 match ip address 120 set ip next-hop 172.20.20.2 ! Gateway of last resort is 192.168.100.1 to network 0.0.0.0 S* 0.0.0.0/0 [1/0] via 192.168.100.1 172.20.0.0/16 is variably subnetted, 12 subnets, 2 masks C 172.20.10.0/24 is directly connected, Vlan110 L 172.20.10.1/32 is directly connected, Vlan110 C 172.20.20.0/24 is directly connected, Vlan120 L 172.20.20.1/32 is directly connected, Vlan120 C 172.20.30.0/24 is directly connected, Vlan130 L 172.20.30.1/32 is directly connected, Vlan130 C 172.20.40.0/24 is directly connected, Vlan140 L 172.20.40.1/32 is directly connected, Vlan140 C 172.20.50.0/24 is directly connected, Vlan150 L 172.20.50.1/32 is directly connected, Vlan150 --More-- 003201: *Mar 1 23:59:57.542: %SEC-6-IPACCESSLOGDP: list 100 denied icmp 172.20. 20.80 -> 192.168.171.30 (3/3), 1 packet C 172.20.60.0/24 is directly connected, Vlan180 L 172.20.60.1/32 is directly connected, Vlan180 192.168.10.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.10.0/24 is directly connected, Vlan10 L 192.168.10.1/32 is directly connected, Vlan10 192.168.20.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.20.0/24 is directly connected, Vlan20 L 192.168.20.1/32 is directly connected, Vlan20 C 192.168.28.0/22 is directly connected, Vlan30 192.168.30.0/32 is subnetted, 1 subnets L 192.168.30.1 is directly connected, Vlan30 192.168.40.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.40.0/24 is directly connected, Vlan40 L 192.168.40.1/32 is directly connected, Vlan40 192.168.50.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.50.0/24 is directly connected, Vlan50 L 192.168.50.1/32 is directly connected, Vlan50 192.168.60.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.60.0/24 is directly connected, Vlan60 L 192.168.60.1/32 is directly connected, Vlan60 192.168.70.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.70.0/24 is directly connected, Vlan70 L 192.168.70.1/32 is directly connected, Vlan70 192.168.80.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.80.0/24 is directly connected, Vlan80 L 192.168.80.1/32 is directly connected, Vlan80 192.168.90.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.90.0/24 is directly connected, Vlan90 L 192.168.90.1/32 is directly connected, Vlan90 192.168.100.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.100.0/24 is directly connected, GigabitEthernet2/0/35 L 192.168.100.2/32 is directly connected, GigabitEthernet2/0/35 C 192.168.168.0/22 is directly connected, Vlan1 192.168.168.0/32 is subnetted, 1 subnets L 192.168.168.168 is directly connected, Vlan1
... View more
12-03-2012
11:26 PM
Hi Yes the Internet Router is directly connected to the switch. I am woundering the port where the Router is connected on the switch should be a normal port, or should I configure this as a non switch port. Thank you
... View more
12-03-2012
10:42 PM
Hi I have 2 ISP connected to Router A and Router B Both the routers are connected to the core 3750 switch.. I want to send the traffic from the switch that goes to router A to router B... I have done the following but its not working... vlan 120 = 10.120.0.0/24 vlan 140 = 10.140.0.0/24 access-list 120 permit ip 10.120.0.0 0.0.0.255 any access-list 140 permit ip 10.140.0.0 0.0.0.255 any Create a policy that matches on these acls: route-map NewISP permit 10 match ip address 120 set ip next-hop <new asa ip> route-map NewISP permit 20 match ip address 140 set ip next-hop <new asa ip> Then apply to your vlan interfaces: int vlan 120 ip policy route-map NewISP int vlan 140 ip policy route-map NewISP
... View more
Labels:
Created by
Sheraiz Ahmad
in Switching
in Switching
12-02-2012
04:09 PM
12-02-2012
04:09 PM
Hi Could any one please advise the following : I almost have same issues as above. I have 2 router connected to a 3750. Router A is hooked up with Internet and Router B is also hooked up with Internet Current all the Traffic is going to Router A, I have connected the Router B on the 3750 and configured as no switch port and given a IP. I was woundering how can I determine or change some traffice to go to Router B as all are going to Router A. Below is the configuration that I have : ip default-gateway 192.168.100.1 ! ip http server ip http secure-server ! ip route 0.0.0.0 0.0.0.0 192.168.100.1 ! ! ip sla enable reaction-alerts access-list 20 permit 0.0.0.0 255.255.255.0 access-list 40 permit 0.0.0.0 255.255.255.0 access-list 100 remark GUEST NETWORK CONTROL access-list 100 permit udp 172.20.20.0 0.0.0.255 host 192.168.171.1 eq domain access-list 100 permit udp 172.20.20.0 0.0.0.255 host 192.168.171.30 eq domain access-list 100 permit udp any any eq bootps access-list 100 permit udp any any eq bootpc access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.168.0 0.0.3.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.10.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.20.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.30.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.40.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.50.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.60.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.70.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.90.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 172.20.10.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 172.20.30.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 172.20.40.0 0.0.0.255 log access-list 100 permit ip 172.20.20.0 0.0.0.255 any access-list 100 remark
... View more
Created by
Sheraiz Ahmad
in Switching
in Switching
12-02-2012
04:01 PM
12-02-2012
04:01 PM
Hi John Good Morning My New Internet is Hook in a Cisco 2951 Router - That router is Hooked to a ASA 5520 Firewall and the ASA is hooked to the core switch. The port where the ASA is hooked I have configured that as a no switch port and given the IP. what I cannot work out is do I have to configure some route on the 3750, where by packets can go to ASA..Once the Traffic can go to Router, I think I I can configure the PBR. Below is the details I have 2 router connected to a 3750. Router A is hooked up with Internet and Router B is also hooked up with Internet Current all the Traffic is going to Router A, I have connected the Router B on the 3750 and configured as no switch port and given a IP. I was woundering how can I determine or change some traffice to go to Router B as all are going to Router A. Below is the configuration that I have : ip default-gateway 192.168.100.1 ! ip http server ip http secure-server ! ip route 0.0.0.0 0.0.0.0 192.168.100.1 ! ! ip sla enable reaction-alerts access-list 20 permit 0.0.0.0 255.255.255.0 access-list 40 permit 0.0.0.0 255.255.255.0 access-list 100 remark GUEST NETWORK CONTROL access-list 100 permit udp 172.20.20.0 0.0.0.255 host 192.168.171.1 eq domain access-list 100 permit udp 172.20.20.0 0.0.0.255 host 192.168.171.30 eq domain access-list 100 permit udp any any eq bootps access-list 100 permit udp any any eq bootpc access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.168.0 0.0.3.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.10.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.20.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.30.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.40.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.50.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.60.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.70.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 192.168.90.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 172.20.10.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 172.20.30.0 0.0.0.255 log access-list 100 deny ip 172.20.20.0 0.0.0.255 172.20.40.0 0.0.0.255 log access-list 100 permit ip 172.20.20.0 0.0.0.255 any access-list 100 remark
... View more
Created by
Sheraiz Ahmad
in Switching
in Switching
11-29-2012
08:35 PM
11-29-2012
08:35 PM
Hi John Thanks for your Email. I have connect the ASA 5520 on the Core Switch Port and configured it following : # no switch port IP address x.x.x.x.x.x.x. I also have a default route in the core 3750 that sends all the traffic to the Old ISP - Do I have to change this as well. This address is same as the LAN of the ASA... The place where I am stuck is that, Vlan 120 and Vlan140 are already configure in the switch and the Traffic is going to the Old ISP.. Inorder for these 2 Vlan Traffic to go to New ISP, do I have to remove those to route and add new one. I have also checked the Template that we are using is Desktop Routing Template. so I think PBR is already enable in this switch. Please advise. Thank you
... View more
Created by
Sheraiz Ahmad
in Switching
in Switching
11-29-2012
12:20 AM
11-29-2012
12:20 AM
Hi John Thanks for your Email. I already have these 2 Vlans created in the current switch, which is going to the current ISP..so I can just route these. I was woundering if I enable sdm prefer routing, will that make my 3750 exhausted. The 3750 I am using is on the switch stack, I was woundering if that would be fine. Thank you
... View more
Created by
Sheraiz Ahmad
in Switching
in Switching
11-28-2012
05:55 PM
11-28-2012
05:55 PM
Hi I have 1 ISP connection that goes to a Router - ASA and then to the core switch 3750. I have 1 more new ISP link, that goes to a different Router - then to ASA and to the same 3750 switch. On the 3750 I have many Vlans and I would like to configure PBR whereby all the Traffic from Vlan 120 and Vlan 140 goes to this New ISP Internet Line. Could you please help me with the configuration
... View more
Labels:
11-20-2012
11:30 PM
Hi Can some one help me with the above error in ASA 5520.
... View more
Labels:
12-05-2012
My Route Map is Set, but I get ping google.com..Even tracert does not
work.My switch port ip is 192....
12-05-2012
HiI am woundering as my 3750 has a default route that points to the
other Router.Should I create ano...
12-04-2012
Hi RajuYes, the Ip for my Router is 192.168.200.X - 255.255.255.0The
Port its connected on the switc...
12-04-2012
HiI have a 2 ISP One Hooked to router A and the Other to B both are
hooked to Core switch 3750. The ...
12-04-2012
HiI can ping and run the tracert, but I cannot get the Internet data.I
can ping the switch port - wh...
12-04-2012
I have all the requirements as per above.The port on the switch where
the router connects is a no sw...
12-04-2012
Thank for your Email. The template that I have on the 3750 is Desktop
Routing and version is 15.0 (0...
12-03-2012
HiYes the Internet Router is directly connected to the switch. I am
woundering the port where the Ro...
12-03-2012
HiI have 2 ISP connected to Router A and Router BBoth the routers are
connected to the core 3750 swi...
Created by
Sheraiz Ahmad
in Switching
12-02-2012
12-02-2012
HiCould any one please advise the following : I almost have same issues
as above.I have 2 router con...
Created by
Sheraiz Ahmad
in Switching
12-02-2012
12-02-2012
Hi JohnGood MorningMy New Internet is Hook in a Cisco 2951 Router - That
router is Hooked to a ASA 5...
Created by
Sheraiz Ahmad
in Switching
11-29-2012
11-29-2012
Hi JohnThanks for your Email. I have connect the ASA 5520 on the Core
Switch Port and configured it ...
11-29-2012
Hi JohnThanks for your Email. I already have these 2 Vlans created in
the current switch, which is g...
11-28-2012
HiI have 1 ISP connection that goes to a Router - ASA and then to the
core switch 3750.I have 1 more...
Public Statistics
| Date Registered | 09-23-2012 05:32 PM |
| Date Last Visited | 12-04-2019 03:16 PM |
| Total Messages Posted | 16 |
