looks kind of normal, as the graph is at 5mins interval. you may want to view daily or weekly graph, if available. you will be able to observe some pattern and trend of the network. ... View more

from what i understand, you want 3560#2 to perform intervlan routing. this can be done by "ip routing" command. you can also refer to this document. http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_example09186a008019e74e.shtml you may also need other commands for the design to work, depending on the existing setup/configuration you have. hope it helps ... View more

try to get in contact with a cisco acct mgr and liase with the partner to get a better pricing. you might need him again if you need a better price comparison for 3 quotes/partners. anyway, datacraft (data dimensions) should have office in MY. they do provide SI service and installation services. however, their service are a bit expensive. ... View more

it should not be a dns issue, as it is configured with ip addresses on both ends. *********************************************** R1 - config crypto map 123map 10 ipsec-isakmp set peer 70.72.69.12 set transform-set MYSET match address 101 *********************************************** R2 - config crypto map map123 10 ipsec-isakmp set peer 75.154.119.14 set transform-set MYSET match address 101 furthermore, the isakmp works (from the results of show crypto isakmp sa) have you verify the "show crypto ipsec sa"? if the ipsec tunnels are not up, maybe you can try to the following steps. 1-clear all tunnels and statistics/counters 2-run debug crypto isakmp ,debug crypto ipsec on both ends. (since isakmp works, you may leave it out of debug logs) 3-ping from one end to the other end 4-no debug all 5-show crypto isakmp sa, show crypto ipsec sa [not sure if i get all the commands correct] ... View more

The problem is that our ISP has given us 100MB leaased line.But when we deployed in production network the speed is same as DSL.We have reported this issue to ISP they then carried out Iperf test by connecting laptop directly with the ISP router.They have tested the speed and it shows  about 94-96 Mbps and argu that it is up to the mark and there is problem at your side(i.e our internal network). Since their test included the ISP router and the link, 94-96mbps result sounds reasonable. the problem may possibly be located within your network. you can use " http://speedtest.net/ " to test the link's bandwidth. it is pretty accurately for where i am located. you may also want to check the statistics on your network equipments. cpu usage memory usage interface bandwidth utilisation interface errors logging, for any possible errors having a snmp server could do the job, and also provide you with historical data. ... View more

are you asking if it is possible to run both a l2l vpn and remote access vpn are running on the same router? if so, it should be possible. http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a00809c7171.shtml ... View more

vpn can be configured with keepalive. http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#solution07 as for the counter measures, you may have to determine the root cause, possibly by checking the logs on both ends. you can also check the configuration if they have been configured with keepalives. ... View more

there are many possible reasons and you may want to try the following: 1> no interesting traffic - you may need to send some traffic across to the remote site/s in order to establish the tunnels 2> try to check the syslogs if there is any information or errors. 3> run commands to verify the status, show crypto isakmp sa, show crypto ipsec sa 4> run debug commands, debug crypto isakmp, debug crypto ipsec ... View more

you may want to check the bandwidth utilisation on your backbone GE interfaces. ... View more