Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About pawanharlecisco
08-18-2017
Stats
Member since
04-22-2011
55
Posts
0
Helpful
0
Solutions
Created by
pawanharlecisco
in Routing
in Routing
02-03-2014
01:34 AM
02-03-2014
01:34 AM
Hi experts, Can you please tell the info about CCIE v5 Lab Hardware. Please let me know which Routers and switches series required for CCIE v5 lab. Please update me .
... View more
Labels:
Created by
pawanharlecisco
in Routing
in Routing
01-21-2014
03:01 AM
01-21-2014
03:01 AM
Hi Amit, Have u done this? If yes can u plz help me out and share the details. will appreciate the efforts .
... View more
01-19-2014
09:45 AM
Hello Experts, Can any one please help me in configuration.
... View more
Labels:
Created by
pawanharlecisco
in Routing
in Routing
01-06-2013
09:05 PM
01-06-2013
09:05 PM
Hi Team, I have certain queries. As mentioned in topology I have two locations (Location A & Location B). I have data MPLS lease-line to connect this two location. Thing is that i want to configure Same subnet IP address on LAN of both locations.As my machine dont have a facility to configure default-gateway ,so i need to specify same subnet IP on both sides.Please suggest me and help me to do so. I want to communicate Location-B IP 172.16.15.1 to Location-A IP 172.16.15.5. Dual Nat is not possible as MY machine dont have a facilty to assign default-gateway. Please find the attached topology
... View more
Labels:
02-21-2012
12:10 AM
Thanks Hobbe for the reply. I have Cisco 1921 Router with this IOS c1900-universalk9-mz.SPA.150-1.M4.bin Thanks Pawan
... View more
02-17-2012
08:04 AM
Hi Experts, I need your help. From my service provider i have IPV6 address for internet lease line.I want to configure this address in such a way that LAN user can access internet using ip v6. Its easy to configure same senario in IPV4. But i dont have any idea to configure it using IPv6. WAN IP ADD 2001:4490:FFFC:8801::1/64----BSNL IP at my end---Serial 0/1/1 Gateway for BSNL IS 2001:4490:FFFC:8801::2/64----BSNL GW other IP 2001:4490:8500:0100::1/64 Gi0/0..---IP for internet Please help Thanks Pawan
... View more
Labels:
Created by
pawanharlecisco
in Routing
in Routing
10-07-2011
09:42 PM
10-07-2011
09:42 PM
Hi Alain, Please tell me rough guide for pfr...and also tell me on which cisco exam contain its detail information... pawan
... View more
Created by
pawanharlecisco
in Routing
in Routing
10-07-2011
04:48 AM
10-07-2011
04:48 AM
thnkx Cadet, I already did IP SLA,but it is for only failover for link. I want to do this on link latency. i.e if ping latency of mpls link goes more than 100 then it should route al the traffice thorugh site to site VPn. Regards Pawan
... View more
Created by
pawanharlecisco
in Routing
in Routing
10-07-2011
04:01 AM
10-07-2011
04:01 AM
Hi Experts, Please find topology attached.we have 1 MPLS line and 1 Site to Site VPN (as backup) connected from head office to branch office We want to monitor ping delay on interface GigabitEthernet1/0/23 whose ip address is 172.16.24.1 255.255.255.252 as shown in attached diagram. and conditions are, For example, If ping delay is more than 100 milliseconds on interface GigabitEthernet1/0/23, then route all traffic to default route i.e. S* 0.0.0.0/0 [1/0] via 10.10.10.2. and if ping delay is less than 100 milliseconds, then route all the traffic through 172.16.24.2, vice versa. Please suggest me.how can we make it possible.. Regards Pawan.
... View more
Labels:
Created by
pawanharlecisco
in Firewalls
in Firewalls
09-02-2011
09:35 PM
09-02-2011
09:35 PM
Hi Mr.Mike Thanks for the help. It has been done sucessfully by using your suggestion. Thanks Pawan
... View more
Created by
pawanharlecisco
in Firewalls
in Firewalls
09-02-2011
04:12 AM
09-02-2011
04:12 AM
Hi, Please take look of topology attached herewith. I want to deny this below Lan IP address of Manewada Router to accessing Server connected to L3 switch. Source Destination Action 172.16.1.0 172.16.99.0 Deny 172.16.2.0 172.16.90.0 Deny 172.16.3.0 172.16.90.0 Deny 172.16.4.0 172.16.90.0 Deny 172.16.99.0 172.16.1.0 Permit 172.16.99.0 172.16.1.0 Permit 172.16.99.0 172.16.3.0 Permit 172.16.99.0 172.16.4.0 Permit Any Any Permit I did the below configuration, but this is blocking two way traffic ... Please help me to solve this issue. ! hostname ASA enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Ethernet0 nameif outside security-level 0 ip address 172.16.222.2 255.255.255.0 ! interface Ethernet1 nameif inside security-level 100 ip address 172.16.111.2 255.255.255.0 ! interface Ethernet2 shutdown no nameif no security-level no ip address ! interface Ethernet3 shutdown no nameif no security-level no ip address ! interface Ethernet4 shutdown no nameif no security-level no ip address ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive access-list branch-ctrl extended permit ip 172.16.99.0 255.255.255.0 any access-list branch-ctrl extended deny icmp 172.16.1.0 255.255.255.0 172.16.99.0 255.255.255.0 access-list branch-ctrl extended deny icmp 172.16.2.0 255.255.255.0 172.16.99.0 255.255.255.0 access-list branch-ctrl extended deny icmp 172.16.3.0 255.255.255.0 172.16.99.0 255.255.255.0 access-list branch-ctrl extended permit ip any any pager lines 24 mtu outside 1500 mtu inside 1500 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 access-group branch-ctrl in interface outside ! router ospf 1 network 172.16.111.0 255.255.255.0 area 0 network 172.16.222.0 255.255.255.0 area 0 log-adj-changes ! timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute dynamic-access-policy-record DfltAccessPolicy no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart no crypto isakmp nat-traversal telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp ! service-policy global_policy global prompt hostname context Cryptochecksum:f1cb9b8578dc3e36f453a9cd616db34a : end
... View more
Labels:
08-30-2011
09:45 PM
Hello Varun sir, Please see the captured output and help me.. Regards pawan
... View more
08-30-2011
03:39 AM
Hi Varun sir, As u suggested for capture,i did the same.please find the sh-run and capture packets below.And help me sir. firewall transparent hostname ASA enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Ethernet0 nameif outside security-level 0 ! interface Ethernet1 nameif inside security-level 0 ! interface Ethernet2 shutdown no nameif no security-level ! interface Ethernet3 shutdown no nameif no security-level ! interface Ethernet4 shutdown no nameif no security-level ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive same-security-traffic permit inter-interface access-list branch-ctrl extended permit ip host 172.16.1.200 172.16.99.0 255.255.255. 0 access-list branch-ctrl extended permit ip 172.16.99.0 255.255.255.0 host 172.16.1.20 0 access-list branch-ctrl extended deny ip any any pager lines 24 mtu outside 1500 mtu inside 1500 ip address 172.16.222.2 255.255.255.0 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 route outside 0.0.0.0 0.0.0.0 172.16.222.1 1 route inside 172.16.99.0 255.255.255.0 172.16.222.222 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute dynamic-access-policy-record DfltAccessPolicy no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart no crypto isakmp nat-traversal telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list ! ! prompt hostname context Cryptochecksum:c7cc84788cd9e6bd6104499c6a33d2c6 : end ASA# Capture Output. 108 packets captured 1: 10:35:18.910536 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 2: 10:35:18.910597 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 3: 10:35:20.301742 802.3 encap packet 4: 10:35:22.167960 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 5: 10:35:22.168036 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 6: 10:35:22.259584 802.3 encap packet 7: 10:35:24.263566 802.3 encap packet 8: 10:35:26.249712 802.3 encap packet 9: 10:35:28.199834 802.3 encap packet 10: 10:35:28.802479 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 11: 10:35:28.802540 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 12: 10:35:30.037672 802.3 encap packet 13: 10:35:31.439491 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 14: 10:35:31.439567 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 15: 10:35:31.448569 802.3 encap packet 16: 10:35:33.043042 802.3 encap packet 17: 10:35:34.586288 802.3 encap packet 18: 10:35:36.173376 802.3 encap packet 19: 10:35:36.627744 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 20: 10:35:36.627805 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 21: 10:35:37.861985 802.3 encap packet 22: 10:35:39.460913 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 23: 10:35:39.460989 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 24: 10:35:39.499791 802.3 encap packet 25: 10:35:41.167273 802.3 encap packet 26: 10:35:41.930936 802.3 encap packet 27: 10:35:42.771246 802.3 encap packet 28: 10:35:44.415139 802.3 encap packet 29: 10:35:44.851426 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 30: 10:35:44.851503 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 31: 10:35:46.004623 802.3 encap packet 32: 10:35:47.432899 802.3 encap packet 33: 10:35:47.432976 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 34: 10:35:47.433037 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 35: 10:35:48.498646 802.3 encap packet 36: 10:35:50.045438 802.3 encap packet 37: 10:35:51.588501 802.3 encap packet 38: 10:35:52.001266 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 39: 10:35:52.001327 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 40: 10:35:53.080989 802.3 encap packet 41: 10:35:53.372295 802.3 encap packet 42: 10:35:54.749289 802.3 encap packet 43: 10:35:54.789982 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 44: 10:35:54.790059 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 45: 10:35:56.752921 802.3 encap packet 46: 10:35:58.738365 802.3 encap packet 47: 10:36:00.681147 802.3 encap packet 48: 10:36:01.231616 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 49: 10:36:01.231677 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 50: 10:36:02.658642 802.3 encap packet 51: 10:36:04.628156 802.3 encap packet 52: 10:36:04.668163 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 53: 10:36:04.668239 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 54: 10:36:06.658321 802.3 encap packet 55: 10:36:08.618437 802.3 encap packet 56: 10:36:10.606551 802.3 encap packet 57: 10:36:11.058544 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 58: 10:36:11.058605 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 59: 10:36:12.540957 802.3 encap packet 60: 10:36:14.472921 10.10.1.2 > 172.16.99.1: icmp: echo request 61: 10:36:14.473287 10.10.1.2 > 172.16.99.1: icmp: echo request 62: 10:36:14.482305 802.3 encap packet 63: 10:36:14.516818 172.16.99.1 > 10.10.1.2: icmp: echo reply 64: 10:36:14.517108 172.16.99.1 > 10.10.1.2: icmp: echo reply 65: 10:36:14.517261 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 66: 10:36:14.517291 172.16.222.1 > 224.0.0.5: ip-proto-89, length 48 67: 10:36:14.579727 10.10.1.2 > 172.16.99.1: icmp: echo request 68: 10:36:14.579834 10.10.1.2 > 172.16.99.1: icmp: echo request 69: 10:36:14.608839 172.16.99.1 > 10.10.1.2: icmp: echo reply 70: 10:36:14.608946 172.16.99.1 > 10.10.1.2: icmp: echo reply 71: 10:36:14.648648 10.10.1.2 > 172.16.99.1: icmp: echo request 72: 10:36:14.648754 10.10.1.2 > 172.16.99.1: icmp: echo request 73: 10:36:14.672725 172.16.99.1 > 10.10.1.2: icmp: echo reply 74: 10:36:14.672816 172.16.99.1 > 10.10.1.2: icmp: echo reply 75: 10:36:14.742789 10.10.1.2 > 172.16.99.1: icmp: echo request 76: 10:36:14.742896 10.10.1.2 > 172.16.99.1: icmp: echo request 77: 10:36:14.772146 172.16.99.1 > 10.10.1.2: icmp: echo reply 78: 10:36:14.772237 172.16.99.1 > 10.10.1.2: icmp: echo reply 79: 10:36:14.848649 10.10.1.2 > 172.16.99.1: icmp: echo request 80: 10:36:14.848756 10.10.1.2 > 172.16.99.1: icmp: echo request 81: 10:36:14.868637 172.16.99.1 > 10.10.1.2: icmp: echo reply 82: 10:36:14.868729 172.16.99.1 > 10.10.1.2: icmp: echo reply 83: 10:36:16.463766 802.3 encap packet 84: 10:36:17.078822 10.10.1.2 > 172.16.99.1: icmp: echo request 85: 10:36:17.079112 10.10.1.2 > 172.16.99.1: icmp: echo request 86: 10:36:17.120507 172.16.99.1 > 10.10.1.2: icmp: echo reply 87: 10:36:17.120812 172.16.99.1 > 10.10.1.2: icmp: echo reply 88: 10:36:17.145744 10.10.1.2 > 172.16.99.1: icmp: echo request 89: 10:36:17.145866 10.10.1.2 > 172.16.99.1: icmp: echo request 90: 10:36:17.185781 172.16.99.1 > 10.10.1.2: icmp: echo reply 91: 10:36:17.185888 172.16.99.1 > 10.10.1.2: icmp: echo reply 92: 10:36:17.248796 10.10.1.2 > 172.16.99.1: icmp: echo request 93: 10:36:17.248919 10.10.1.2 > 172.16.99.1: icmp: echo request 94: 10:36:17.283585 172.16.99.1 > 10.10.1.2: icmp: echo reply 95: 10:36:17.283707 172.16.99.1 > 10.10.1.2: icmp: echo reply 96: 10:36:17.349850 10.10.1.2 > 172.16.99.1: icmp: echo request 97: 10:36:17.349957 10.10.1.2 > 172.16.99.1: icmp: echo request 98: 10:36:17.383540 172.16.99.1 > 10.10.1.2: icmp: echo reply 99: 10:36:17.383662 172.16.99.1 > 10.10.1.2: icmp: echo reply 100: 10:36:17.448814 10.10.1.2 > 172.16.99.1: icmp: echo request 101: 10:36:17.448920 10.10.1.2 > 172.16.99.1: icmp: echo request 102: 10:36:17.468878 172.16.99.1 > 10.10.1.2: icmp: echo reply 103: 10:36:17.468969 172.16.99.1 > 10.10.1.2: icmp: echo reply 104: 10:36:18.448844 802.3 encap packet 105: 10:36:20.394968 802.3 encap packet 106: 10:36:20.898925 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 107: 10:36:20.898986 172.16.222.222 > 224.0.0.5: ip-proto-89, length 60 108: 10:36:22.370738 802.3 encap packet 108 packets shown
... View more
08-27-2011
01:27 AM
Thanks sir, Tha out is ASA# sh access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) alert-interval 300 access-list branch-ctrl; 3 elements access-list branch-ctrl line 1 extended deny ip 172.16.1.0 255.255.255.0 172.16.99.0 255.255.255.0 (hitcnt=0) 0x8cfdcb7b access-list branch-ctrl line 2 extended deny ip 172.16.1.0 255.255.255.0 172.16.100.0 255.255.255.0 (hitcnt=0) 0x233949c5 access-list branch-ctrl line 3 extended deny ip 172.16.2.0 255.255.255.0 172.16.100.0 255.255.255.0 (hitcnt=0) 0x9e85e14b
... View more
02-03-2014
Hi experts, Can you please tell the info about CCIE v5 Lab Hardware.
Please let me know which Router...
Created by
pawanharlecisco
in Routing
01-21-2014
01-21-2014
Hi Amit, Have u done this? If yes can u plz help me out and share the
details. will appreciate the e...
Created by
pawanharlecisco
in Routing
01-06-2013
01-06-2013
Hi Team, I have certain queries. As mentioned in topology I have two
locations (Location A & Locatio...
02-21-2012
Thanks Hobbe for the reply. I have Cisco 1921 Router with this IOS
c1900-universalk9-mz.SPA.150-1.M4...
02-17-2012
Hi Experts, I need your help. From my service provider i have IPV6
address for internet lease line.I...
10-07-2011
Hi Alain, Please tell me rough guide for pfr...and also tell me on which
cisco exam contain its deta...
10-07-2011
thnkx Cadet, I already did IP SLA,but it is for only failover for link.
I want to do this on link la...
10-07-2011
Hi Experts, Please find topology attached.we have 1 MPLS line and 1 Site
to Site VPN (as backup) con...
09-02-2011
Hi Mr.Mike Thanks for the help. It has been done sucessfully by using
your suggestion.ThanksPawan
09-02-2011
Hi, Please take look of topology attached herewith. I want to deny this
below Lan IP address of Mane...
08-30-2011
Hi Varun sir, As u suggested for capture,i did the same.please find the
sh-run and capture packets b...
Public Statistics
| Date Registered | 04-22-2011 11:50 PM |
| Date Last Visited | 08-18-2017 04:00 AM |
| Total Messages Posted | 55 |
