How do you properly size Performance License and or not one with the Cisco ISR 4000 Series routers?   For example, say I have an ISR 4221, which can do 35Mbps to 75 Mbps. Now with the default License, you can only do 35Mbps. So, does that mean if I have a Metro E service at 30Mbps I should get 30Mbps ingress and 30Mbps egress at the same time, or that to get symmetrical throughput I would need to get something like a Metro E service for 15Mbps ingress and 15Mbps egress?   Although, I'm guessing that same logic may or may not apply for Security Performance licenses as well?   And, what exactly does the Boost Performance license do? It looks like if you go over the PERF license, it will then only come into play. Cisco can be a bit confusing on throughput as well as know, I'm just curious.   Thanks for any input! ... View more

Greetings,  I'm trying to configure an EEM script with an 'event of none', so that I can manually run the EEM script. I basically have the following script configured on a router. event manager applet TSHOOT  event none  action 1.0 cli command "sh run | I LINK"  action 2.0 cli command "sh run | I LINE"  action 3.0 cli command "sh log | I Controller"  action 4.0 cli command "sh int x/x/x:0 | sec rate"  action 5.0 cli command "sh controller t1 x/x/x | I [1-9]" I can go to Privileged Exec mode and type "event manager run TSHOOT", it accepts the command but nothing happens. I put the "event none", since it's not really waiting on a trigger, and so I can manually run it. Am I doing something wrong? I don't see any output at all from these commands after I run "event manager run TSHOOT". ... View more

While reading Cisco documentation, router have a specific WAN speed up to 21 Mbps etc or more depending on router. You also see port speeds of 100Mbps or 1Gbps, but why are Wan speeds limited to far less on most Cisco routers. ... View more

Hey guys, So, let's say I have an ISR G1 router, and a Lan-to-Lan IPSec tunnel built. On the outside interface(WAN) I have an MTU of 1260, with the 'ip mtu 1260' command. Now if I put this command in, the max IPSec (ESP) packet will be 58 bytes, and with tunnel mode you add an additional 20 bytes as well, for the new IP header, since the original or encapsulation within ESP, encrypted and authenticated.   So this would come to 1338 with my math. Now if I ping from the source of my WAN to the remote IP (Extended Ping) with  1338 as the size, and DF-bit set I don't get any successful pings. If I do an Extended Ping with the byte size of 1178 which is (1100+50+20) I get successfully pings. So would it be wise to get ride of 'ip mtu 1260' and put 'ip mtu 1100' ?     ... View more