There is a system generated subnet object 1.1.1.1 found in subnet groups, may this is the reason its sending the requests to 1.1.1.1. whats this system generated 1.1.1.1 and its really requitred? how can delete it?   Shanil ... View more

Hi if its ADSL you have to configure the public static ip on the Dialer only. As below interface Dialer1 ip address 2.2.2.2 255.255.255.252 ip virtual-reassembly in encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 ppp chap hostname xxxx ppp chap password xxxx ppp pap sent-username xxxx password xxxx ***Please rate if helps**** Sent from Cisco Technical Support iPhone App ... View more

Hi any wan interafce . The cable has to connect to the wan interface or adsl interface and configure the static public ip. Sent from Cisco Technical Support iPhone App ... View more

i have all the parameters are correct, below is the debug errors im getting from router Dec 31 06:05:57.790: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer x.x.x.x) Dec 31 06:05:57.790: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer x.x.x.x) Dec 31 06:05:57.790: ISAKMP: Unlocking peer struct 0x2B137500 for isadb_mark_sa_deleted(), count 0 Dec 31 06:05:57.790: ISAKMP: Deleting peer node by peer_reap for x.x.x.x: 2B137500 Dec 31 06:05:57.790: ISAKMP:(0):deleting node 1251907952 error FALSE reason "IKE deleted" Dec 31 06:05:57.790: ISAKMP:(0):deleting node -886541283 error FALSE reason "IKE deleted" Dec 31 06:05:57.790: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL Dec 31 06:05:57.790: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_DEST_SA Dec 31 06:05:57.926: ISAKMP:(0): SA request profile is (NULL) Dec 31 06:05:57.926: ISAKMP: Created a peer struct for x.x.x.x, peer port 500 Dec 31 06:05:57.926: ISAKMP: New peer created peer = 0x2B137500 peer_handle = 0x800003F6 Dec 31 06:05:57.926: ISAKMP: Locking peer struct 0x2B137500, refcount 1 for isakmp_initiator Dec 31 06:05:57.926: ISAKMP:(0):Setting client config settings 2B81EDB0 Dec 31 06:05:57.926: ISAKMP: local port 500, remote port 500 Dec 31 06:05:57.926: ISAKMP: set new node 0 to QM_IDLE      Dec 31 06:05:57.926: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 3313A92C Dec 31 06:05:57.926: ISAKMP:(0):Can not start Aggressive mode, trying Main mode. Dec 31 06:05:57.926: ISAKMP:(0):found peer pre-shared key matching x.x.x.x Dec 31 06:05:57.926: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID Dec 31 06:05:57.926: ISAKMP:(0): constructed NAT-T vendor-07 ID Dec 31 06:05:57.926: ISAKMP:(0): constructed NAT-T vendor-03 ID JO-LDC-GW# Dec 31 06:05:57.926: ISAKMP:(0): constructed NAT-T vendor-02 ID Dec 31 06:05:57.926: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM Dec 31 06:05:57.926: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1 Dec 31 06:05:57.926: ISAKMP:(0): beginning Main Mode exchange Dec 31 06:05:57.926: ISAKMP:(0): sending packet to x.x.x.xmy_port 500 peer_port 500 (I) MM_NO_STATE Dec 31 06:05:57.926: ISAKMP:(0):Sending an IKE IPv4 Packet.        Experts please help.. Thanks SHanil ... View more

Dear Mahmoud, Hopes both sides you have static ips. On Cisco 1801 ---------------------- ---configure isakmp policy---- crypto isakmp policy 20 encr 3des hash md5 authentication pre-share group 2 ---configure key ,(x.x.x.x would be public ip address of the other end ) crypto isakmp key 0 xxxxxxxxxxxxxxxx address x.x.x.x no-xauth ---configure ipsec policy -transformset---- crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac ---configure cryptomap- to tie all the parameters transformset,peer address and acl) crypto map MY-MAP 5 ipsec-isakmp set peer x.x.x.x set transform-set ESP-3DES-SHA match address MY-ACL ---configure crypto acl-interesting traffic---- ip access-list extended MY-ACL permit ip 10.0.0.0 0.0.0.255 10.10.10.0 0.0.0.255 ---Apply the crypto map on outside interface, if dialer interface apply on dialer interface---- int fa4 ip address y.y.y.y 255.255.255.252 crypto map MY-MAP The same need to configure the other end 887 router, peer ip and access-list will change as per. please note that all other parameters used in crypto should be same including the key. If you have to use internet need to excempt VPN traffic from nating Hopes this help  ***please rate helpful posts*** Shanil ... View more

Dear Mahmoud, For site to site VPN you have to apply the crypto-map on Dialer interface not on physical interface ATM0 interface Dialer1 crypto map atleast one side you need static public ip to configure site to site VPN there is no need for subinterface point-topoint configuration  Thanks Shanil ... View more

Yes in that case it's Adsl (ATM) interface you have to use the first configuration. The difference is if you have rj-11 connection from provider you need an Adsl interface on the router. If it's rj-45 wan Ethernet interface is needed in router Thanks Shanil Sent from Cisco Technical Support iPhone App ... View more

Dear Hari, I think F5 is the market leader in Loadbalancers The basic idea of loadbalncers is to have redundancy ,fault tolernce and best performance of application. Multiple physical servers are grouped into a virtual Ip address in the loadbalancer .The clinets will be accessing the service torugh this virtual IP address.  Traffic to the service will be hitting the Loadbalancer and loadbalancer will be distribute the packet to different servers in the group based on the loadbalancing method configured. (ex round-robin, based on weight, based on load of the servers) Hopes this helps Thanks ***Please rate helpful posts*** Shanil ... View more

Dear Mahmoud, You have to get the PVC, username, password informations from tour ISP, below would be typical configuration for ADSL interface and ethernet interface. ADSL interface -------------------- interface ATM0 no ip address no atm ilmi-keepalive pvc 0/35   pppoe-client dial-pool-number 1 interface Dialer1 ip address negotiated ip mtu 1452 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 ppp authentication chap pap callin ppp chap hostname xxxx ppp chap password xxxx ppp pap sent-username xxxx password xxxx Ethernet Interface ------------------------- interface GigabitEthernet0/0 no ip address ip mtu 1492 duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 interface Dialer1 ip address negotiated ip virtual-reassembly in encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 ppp chap hostname xxxx ppp chap password xxxx ppp pap sent-username xxxx password xxxx Thanks *** please rate helpful posts*** Shanil ... View more