Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About xcz504d1114
Stats
Member since
07-21-2005
298
Posts
185
Helpful
11
Solutions
10-23-2013
10:47 AM
This is exactly what i was looking for, I was applying it to the wrong interface, cleaned up all the other unnecessary NAT's and applied this, thank you.
... View more
10-22-2013
10:42 AM
Sure, here is a drawing of what I was trying to describe. Also, I can completely delete any and all existing NAT's, and start from scratch.
... View more
10-22-2013
09:21 AM
My PIX experience has clearly gone the way of the DoDo. I have a customer that has switched their internet provider, and is on a migration path to remove their existing PIX. The new internet connection is attached to an ASA, not the PIX, but servers still sit behind the PIX DMZ for now. So, the data path has changed from PIX DMZ to PIX Outside, to PIX DMZ to PIX Inside then routed to the ASA. I cannot get the NAT to work proper going from the PIX DMZ (Security lvl 4) to the PIX Inside (Sec Lvl 100). Traffic routes properly, but only if a connection is initiated by the inside first, to establish an existing NAT. The DMZ cannot properly NO Nat out. I have tried the following: Nat (inside) 0 0.0.0.0 0.0.0.0 access-list dmz_nonat permit 10.1.0.0 255.255.255.0 any Nat (dmz) 0 access-list dmz_nonat The 10.1.0.0/24 would represent the DMZ IP address space. Going from teh Inside to DMZ works, but the DMZ cannot initiate connectivity out, until a NAT entry is built from the Inside first.
... View more
Labels:
08-01-2013
12:09 PM
Found the problem, queue limit is not supported in hierchical policy-maps in IOS XE
... View more
06-28-2013
10:10 AM
I am running into an issue nesting policy-maps on the IOS XE. I have tested the configuration on IOS and it works fine, but XE gives me errors, stating it can't apply a default policy type inside of a default policy type: An overview of what I am trying to accomplish, I have an MPLS connection at my datacenter, and for simplicity sake, we will say 3 remote locations. The datacenter side has a 100 meg connection, and each site has different bandwidth amounts, site 1 = 50, site 2 = 40, site 3 = 10 mbps. To keep packets from being dropped by the carrier policier when traffic is going from the datacenter to any individual site, I want to traffic shape based on destination. Here is the configuration I am trying to build, it works on IOS, but not XE (ASR and CSR's, multiple code revisions) ip access-list extended Site1_Subnets permit ip 0.0.0.0 0.0.0.0 10.1.1.0 0.0.0.255 ip access-list extended Site2_Subnets permit ip 0.0.0.0 0.0.0.0 10.1.2.0 0.0.0.255 ip access-list extended Site3_Subnets permit ip 0.0.0.0 0.0.0.0 10.1.3.0 0.0.0.255 class-map match-any Site1_Class match access-group name Site1_Subnets class-map match-any Site2_Class match access-group name Site2_Subnets class-map match-any Site3_Class match access-group name Site3_Subnets policy-map Site1_Policy class Site1_Class shape average 50000000 set cos 3 policy-map Site2_Policy class Site2_Class shape average 40000000 set cos 3 policy-map Site3_Policy class Site3_Class shape average 10000000 set cos 3 policy-map Datacenter_100Mbps class class-default shape average 100000000 queue-limit 512 packets set cos 5 service-policy Site1_Policy service-policy Site2_Policy service-policy Site3_Policy This is the error I get when I try to nest the policies (this is done on a CSR in a lab, same error on an ASR in production): ASR-MPLS-1(config-pmap-c)#policy-map Datacenter_100Mbps ASR-MPLS-1(config-pmap)#class class-default ASR-MPLS-1(config-pmap-c)# shape average 100000000 ASR-MPLS-1(config-pmap-c)# queue-limit 512 packets ASR-MPLS-1(config-pmap-c)# set cos 5 ASR-MPLS-1(config-pmap-c)# service-policy Site1_Policy Queueing policy Site1_Policy attached to class with random-detect or queue-limit configured is not supported % service-policy Site1_Policy of type default is not allowed in policy-map Datacenter_100Mbps of type default
... View more
Labels:
06-28-2013
09:35 AM
If I understand you correctly, you have 4 routers in AS 300, the two ASBR routers (that have an eBGP connection to the other AS's), those two ASBR's are recieving all the routes, but the other two are not learning the routes via iBGP, is that correct? If so: 1) All iBGP neighbors must be fully meshed 2) You must have a bgp router-id configured 3) You should peer to a loop back (if you don't it will give you an error) 4) Disable synchronization HTH, Craig
... View more
09-28-2012
07:54 AM
Sounds like you are almost there, the other interface that you connected to your ISP, will need to be configured as well, and you probably need some DNS server information configured on your PC. If your ISP is using DHCP, from your hyperterminal window type (this also applies if you have a cable modem): enable configure terminal interface gig X/X <------Fill in this area for the interface you connected to the ISP ip address dhcp If they are not giving you a DHCP address, do the following: enable configure terminal interface gig X/X <------Fill in this area for the interface you connected to the ISP ip address a.a.a.a b.b.b.b <------------- This will be the IP address and subnet mask your ISP has given you Also, if you are not using DHCP from your ISP, you will need to create a default route: enable configure terminal ip route 0.0.0.0 0.0.0.0 c.c.c.c <--------- The c.c.c.c will be the ISP Now, so you don't have to use static IP addresses anymore for your PC: enable confiure terminal service dhcp ip dhcp excluded-address 10.10.10.1 ip dhcp pool users network 10.10.10.0 255.255.255.0 default-router 10.10.10.1 dns-server 8.8.8.8 <------------------ This is a google public DNS server, if you know your ISP's DNS, use that Sorry this is all CLI, I have never used the GUI. Craig
... View more
09-28-2012
07:37 AM
You're not going to come anywhere near the capabilities of a 3560 with 50'ish users, the Layer 3 switch will work fine, and also your router on a stick scenario will also work fine for what you have described so far. From a simplicity perspective, the layer 3 switch is a better idea. From a throughput perspective, the layer 3 switch is most likely a better idea as well, a router on a stick design reduces the throughput of an interface by half. For a high end environment with heavy route processing, a layer 3 switch is typically not recommended, because it does routing in software, where as a router uses hardware, but you have not described an envrinoment that will be demanding on layer 3 performance. HTH, Craig
... View more
09-28-2012
06:40 AM
If the load balancing is set to src-dst-ip, will a layer 2 switch forward based on that information? Particularly talking about a 6500, with trunk interfaces, since those packets never go to the layer 3 engine, will the load-balancing work as intended? Thanks, Craig
... View more
Labels:
Created by
xcz504d1114
in Network Management
in Network Management
10-10-2011
07:30 AM
10-10-2011
07:30 AM
Joseph, as always, thank you very much! Craig
... View more
Created by
xcz504d1114
in Network Management
in Network Management
10-07-2011
03:01 PM
10-07-2011
03:01 PM
I didn't have this problem in 4.0, and I've tried to upgrade 2 different model routers (891 and 2811) with the same error, anyone know what this means? Google was no help. SWIM0151: The device is not running IOS Modular image in Install mode. Hence patch images cannot be distributed. Thanks, Craig
... View more
Labels:
Created by
xcz504d1114
in Network Management
in Network Management
10-03-2011
08:28 AM
10-03-2011
08:28 AM
Nevermind, I found my answer, apparently IOS-XE is not supported in LMS 4.1 on anything other than ASR 1000's: http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/device_support/table/lms41sdt.html The following tables list the devices supported in Cisco Prime LAN Management Solution 4.1: Application Control Engines Cable Products (CVA120, uBR 7100, uBR7225VXR, uBR900, uBR 10000, uBR 7200) Catalyst OS Devices (1000, 4000, Catalyst 4000, Catalyst 5000, MGX 8200, MGX 8800) Content Networking Devices (CE 2600, 3600, 3700, 500, 600, 7000, CDM 4600, CSS 11000, WAE) FS Devices (Catalyst 2800, Catalyst 5500) Global Site Selector Appliances IOS Devices (10000, 10700, 12000, 1800, 1900, CGR 2000, CGS 2500, 2600, 2800, 2900, MAR 3k, 3600, 3700, 3750, 3800, 3900, 7000, 7100, 7200, 7300, 7400, 7500, 7600, 800, Aironet 1100, Aironet 1200, Aironet 1240AG, Aironet 1400, Catalyst 2350, Catalyst 2960, Catalyst 2970, Catalyst 2975, Catalyst 3560, Catalyst 3560-E, Catalyst 3560-E, Catalyst 3750, Catalyst 3750, Catalyst 3750-E, Catalyst 4500, Catalyst 4900, Catalyst 6500, Catalyst Blade Switch 3000, Ethernet Switching Network, Gigabit Ethernet, IAD2400, IAD880, IE 3000, ME 2400, ME 2400, ME 3400, ME 3600X, ME 3800X, ME 4900, ME 6500, MWR 2900, MWR1900, MWAM, VG200, Rockwell Stratix 8000) IOS XE Devices (ASR 1000) IOS XR Devices (ASR 9000, CRS, XR 12000) Network Analysis Modules (NAM for Cisco 2600, NAM) Other Devices or Modules Security Context Devices (ASA 5500, PIX 500 Series Firewalls, PIX 500 Series Security Appliances) Server Fabric Switches (SFS 7000, SFS, IBM Blade Center InfiniBand) Storage and Data Center Switches (MDS 9000 Series Multilayer Fabric, MDS 9000 Multilayer, MDS 9000, Data Center Switches, Unified Computing) WLSE Devices Wireless LAN Controllers
... View more
Created by
xcz504d1114
in Network Management
in Network Management
10-03-2011
08:24 AM
10-03-2011
08:24 AM
We just replaced a floor swithc, and ended up going with an IOS-XE software, LMS does not seem to like this software, the device is not available in my Identity dashboard, it's abviously running dot1x. LMS shows it as software version 03.02.01.SG, same as you get when you do a show version, license level is enterprise services. Actual Image name: cat4500e-universalk9.SPA.03.02.01.SG.150-2.SG1.bin Also, the IOS upgrade option does not work for this device, it give an error saying to perform an inventory collection, which I have manually performed, the device is reachable and manageable by LMS, and it does not show up in any of the IOS version reports. The more I think about it, I'm sure this is going to be a Cisco TAC case, but maybe someone else has an idea.
... View more
Labels:
09-19-2011
08:06 AM
I ended up unassigning the resources from the MRGL, and removed the MRGL, my devices now use the system as a default, not ideal, but that's what seemed to do the trick. HTH Craig
... View more
10-23-2013
This is exactly what i was looking for, I was applying it to the wrong
interface, cleaned up all the...
10-22-2013
Sure, here is a drawing of what I was trying to describe. Also, I can
completely delete any and all ...
10-22-2013
My PIX experience has clearly gone the way of the DoDo. I have a
customer that has switched their in...
06-28-2013
I am running into an issue nesting policy-maps on the IOS XE. I have
tested the configuration on IOS...
06-28-2013
If I understand you correctly, you have 4 routers in AS 300, the two
ASBR routers (that have an eBGP...
09-28-2012
Sounds like you are almost there, the other interface that you connected
to your ISP, will need to b...
09-28-2012
You're not going to come anywhere near the capabilities of a 3560 with
50'ish users, the Layer 3 swi...
09-28-2012
If the load balancing is set to src-dst-ip, will a layer 2 switch
forward based on that information?...
10-07-2011
I didn't have this problem in 4.0, and I've tried to upgrade 2 different
model routers (891 and 2811...
Created by
xcz504d1114
in Network Management
10-03-2011
10-03-2011
Nevermind, I found my answer, apparently IOS-XE is not supported in LMS
4.1 on anything other than A...
Created by
xcz504d1114
in Network Management
10-03-2011
10-03-2011
We just replaced a floor swithc, and ended up going with an IOS-XE
software, LMS does not seem to li...
Public Statistics
| Date Registered | 07-21-2005 11:06 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 298 |
| Total Helpful Votes Received | 185 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 18 | |
| 5 | |
| 4 | |
| 5 | |
| 20 |
.jpg "Hall of Fame Expert"){kind=icon}
.jpg "VIP Expert"){kind=icon}
