Dear All, can I use ROUTER   CISCO 2911 WITH 4 PORT EHWIC S card for connecting links havin speed as follows.Is the throuput of 2911 is enough ??? link 1 :     100 Mbps link 2:      100 Mbps link 3:      8 Mbps lin 4 :     3 Mbps Please help.. Thanks Sihanu ... View more

Dear all, We are using asa 5510 having Version 7.0(7).Some times its DMZ interface and Outside interface utilisation suddently rised to 100 Mbps and come down after 30 sec, That time the cpu utilisation its normal CPU utilization for 5 seconds = 5%; 1 minute: 6%; 5 minutes: 6% But internet connection and DMZ server accesing are not working. Please help me for resolving the issue. I will send the full config if reqired. Thanks& Regards Sihanu.N ... View more

Hi Experts, Recently i have established VPN connection between our Head Office and Branch Office ASA firewalls. But we are facing some issues as well as one more requirement is pending to do. Please find attached config for your kind reference. Issues facing One way Ping Issue: Branch office connectivity to Head Office connectivity(LAN to LAN) is fine. But from Head Office to Branch office LAN connectivity is not happening to particular subnet (172.16.20.X). Because ping from remote subnets at branch office to head office subnets are fine but ping from Head office LAN(172.16.10.X) to branch office LAN (172.16.20.X) is not happening. From HO ASA also its not pinging New requirement to do Only Users at remote subnet (172.16.20.X) should use the intern et of Head Office. The reason why we try to implement this is because there is no proxy set at Remote office at the moment, so we would like to use the same proxy located in the HO LAN(172.26.10.X) for remote location users as well. Any Help is appreciated. Thanks and Regards, Sihanu N ... View more

Hi Experts, We have a Cisco 3945 router at one of our location. Our requirement is to enable the IOS based IPS engine within in the router and would like to load new signature files from cisco website to the router. But i am not much familiar with the licensing part. show version and show ip ips license output has been attached for the reference. Following are my queries. 1) Is this platform and IOS is capable for enabling IPS Engine? 2) Is there any extra IPS Services Contract is required (other than the smartnet Coverage) for this router to enable IPS engine and to load new IPS Signature files from Cisco? Advanced Thanks and Regards, Sihanu N ... View more

Dear all, Our headoffice and branch officeare connected  by ethernet  lease line.our network range is 192.168.0.0/16. In headoffice we having 9 cisco 2960 48 port gigabyte swich connected in daisy chain model having lot of servers and desktops .serves having ip address  192.168.12.12,192.168.12.17,192.168.10.19,192.168.10.10 In branch office having 24 desktops connetd with 4   8port dink swich,Branch network is same headofiice having ip range 192.168.40.1 - 192.168.40.24. Problem is some of the servers and desktops  in head office  cant access from branch office and vise  versa sometimes,  some time it vil get sometime it vil fail...there is no issue with leased line,firewall and all.. please help Thanks Sihanu N ... View more

Hi, I wanted to publish a webserver without using nat. With bgp I publish full network.. network 103.10.168.0 If I put one of the ip from the pool to webserver it avialable from internet??? 103.10.168.4 255.255.255.0 103.10.168.1 i nterface GigabitEthernet0/0 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$ ip address 117.239.74.241 255.255.255.252 ip virtual-reassembly in duplex auto speed auto ! interface GigabitEthernet0/1 ip address 103.10.168.1 255.255.255.0 duplex auto speed auto router bgp 131787 bgp log-neighbor-changes neighbor 117.239.74.242 remote-as 9829 neighbor 117.239.74.242 version 4 ! address-family ipv4   network 103.10.168.0 mask 255.255.255.0   neighbor 117.239.74.242 activate exit-address-family show ip bgp summ Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd 117.239.74.242  4         9829       4       5        3    0    0 00:00:33        1 thanks Sihanu N ... View more

Hi Experts, We  had a core switch (Cisco 4503), distribution switches(Cisco 3750) and access switches in our  network and consists of many vlans. Almost all vlans uses DHCP Pools.  But for few vlans DHCP is not yet configured due to initial design poblems. Recently one of the rogue  user in vlan 1 connected to one of the access switch send rogue arp packets to the network (suspecting arp packet with interface vlan 1 ip of core switch with wrong mac-address (gateway ip of vlan 1)) and resulted in a prolonged network outage for the vlan 1.  Any way we are going to seggregate vlan 1 into different vlans, but  before that we need a temporary plan to block such kinds of attack like enabling DAI in the switch. I have checked the DAI implemenation feasibility with my knowledge and found that it is not possible to configure to the access switches(Cisco 2960) in which the user directly connected. But found that Distribution switch connected to that particular access switch seems to be able to configure since DAI commands are available to configure in switch. Is it possible to block ARP packets with the interface vlan 1 IP Address with rogue mac-address by configuring DAI in the above mentioned Distribution switch and the port connected to the mentioned access switch? Any suggetions and advices are highly appreciable. Thanks & Regards Sihanu N ... View more

Hi Experts, We had a core switch (4503), distribution switches and access in our network and consists of many vlans. Almost all vlans uses DHCP Pools. But for few vlans DHCP is not yet configured. Recently one of the rogue user in vlan 1 gave the corresponding interface vlan ip of core switch (gateway) as his ip and caused a prolonged network outage for the vlan. Any way we are going to seggregate vlan 1 into different vlans, but before that we need a temporary plan to block such kinds of attack. What are the possible ways we can avoid the network outage problem even if a user gave the gateway ip to the machine? Any suggetions and advice are highly appreciable Thanks & Regards Sihanu N Sent from Cisco Technical Support iPhone App ... View more

Hi Experts, Recently we have successfully configured and established Remote access VPN to our ASA. But the problem is we are not able to access any of the LAN devices. From the ASDM log the packets are denied like below 2    May 09 2012    23:25:42        10.100.1.4    138    10.100.1.255    138    Deny inbound UDP from 10.100.1.4/138 to 10.100.1.255/138 on interface inside DHCP pool created for Remote Access VPN is 10.100.1.0/24 and inside range using is 10.1.1.0/24. Connected machine is getting ip from the pool after connection, but no ping or any other access cannot be established to the inside network range even after successful connection. Any suggessions regarding this are highly appreciable. Thanks and Regards, Sihanu N ... View more