Hi everyone,   Just bought an ASA 5510 with a Security Plus license. Can someone clarify me if I buy the module AIP SSM-20 with IPS this function will work? Or I need another license to IPS work? Thanks in advance! ... View more

  Hi, I have Cisco 1921/K9 behind operator’s router. And I want to pass multicast traffic – IPTV - from WAN port to a VLAN. At the bottom is a resumed router configuration. When I execute sh ip igmp snooping mrouter there is no port at the vlan! I’m sure there’s missing something but I don’t know what. Please, can you help this newbbie? Thanks!   Router#sh ver Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.5(3)M7, RELEASE SOFTWARE (fc1)   ROM: System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)   Router#sh ip int bri Interface                  IP-Address      OK? Method Status                Protocol Embedded-Service-Engine0/0 unassigned      YES NVRAM  administratively down down GigabitEthernet0/0         192.168.1.15    YES NVRAM  up                    up GigabitEthernet0/1         unassigned      YES NVRAM  administratively down down GigabitEthernet0/0/0       unassigned      YES unset  up                    up GigabitEthernet0/0/1       unassigned      YES unset  administratively down down GigabitEthernet0/0/2       unassigned      YES unset  up                    up GigabitEthernet0/0/3       unassigned      YES unset  up                    up NVI0                       192.168.1.15    YES unset  up                    up Tunnel0                    192.168.1.15    YES unset  up                    up Vlan1                      unassigned      YES unset  administratively down down Vlan10                     10.0.10.30      YES NVRAM  up                    up Vlan20                     10.0.20.2       YES NVRAM  up                    up Vlan30                     10.0.30.14      YES NVRAM  up                    up Vlan105                    10.0.105.6      YES NVRAM  up                    up   Router#sh run ! ip dhcp excluded-address 10.0.10.1 ip dhcp excluded-address 10.0.10.25 10.0.10.30 ip dhcp excluded-address 10.0.105.2 10.0.105.6 ! ip dhcp pool 10  network 10.0.10.0 255.255.255.224  default-router 10.0.10.30  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool 105  network 10.0.105.0 255.255.255.248  default-router 10.0.105.6  dns-server 192.168.1.254 ! ! ! ip name-server 192.168.1.254 ip multicast-routing ip cef no ipv6 cef ! ! interface Embedded-Service-Engine0/0  no ip address  shutdown ! interface GigabitEthernet0/0  description *** WAN ***  ip address 192.168.1.15 255.255.255.0  ip access-group Default in  ip nat outside  ip inspect Default out  ip virtual-reassembly in  duplex auto  speed auto ! interface GigabitEthernet0/0/0  description *** Cisco Switch 2950T ***  switchport trunk allowed vlan 1,10,105,1002-1005  switchport mode trunk  no ip address ! interface Vlan1  no ip address  shutdown ! interface Vlan10  des *** Data ***  ip address 10.0.10.30 255.255.255.224  ip nat inside  ip virtual-reassembly in ! interface Vlan105  des *** Multicast ***  ip address 10.0.105.6 255.255.255.248  ip pim sparse-mode  ip nat inside  ip virtual-reassembly in  ip igmp join-group 224.0.1.40  ip igmp version 3 ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip pim rp-address 192.168.1.254 ! ip nat inside source list 10 interface GigabitEthernet0/0 overload ip nat inside source list 20 interface GigabitEthernet0/0 overload ip route 0.0.0.0 0.0.0.0 192.168.1.254 ! ! ! access-list 10 permit 10.0.10.0 0.0.0.31 access-list 20 permit 10.0.105.0 0.0.0.7 ! control-plane ! !  vstack ! end   Router#sh ip igmp snooping groups Vlan      Group                    Version     Port List --------------------------------------------------------- 105       239.195.7.2              v3          Gi0/0/0 105       239.196.1.35             v3          Gi0/0/0 105       239.255.255.250          v3          Gi0/0/0   Router#sh ip igmp snooping mrouter Vlan    ports ----    -----  105 ... View more

Hi! I want to pass muticast traffic from WAN to VLAN interface but it's not working. I'm sure that is missing something but I'm not seeing what. I appreciate your help. Thanks!   Router#sh ip int bri Interface                  IP-Address      OK? Method Status                Protocol Embedded-Service-Engine0/0 unassigned      YES NVRAM  administratively down down GigabitEthernet0/0         192.168.1.15    YES NVRAM  up                    up GigabitEthernet0/1         unassigned      YES NVRAM  administratively down down GigabitEthernet0/0/0       unassigned      YES unset  up                    up GigabitEthernet0/0/1       unassigned      YES unset  administratively down down GigabitEthernet0/0/2       unassigned      YES unset  up                    up GigabitEthernet0/0/3       unassigned      YES unset  up                    up NVI0                       192.168.1.15    YES unset  up                    up Tunnel0                    192.168.1.15    YES unset  up                    up Vlan1                      unassigned      YES unset  administratively down down Vlan10                     10.0.10.30      YES NVRAM  up                    up Vlan20                     10.0.20.2       YES NVRAM  up                    up Vlan30                     10.0.30.14      YES NVRAM  up                    up Vlan105                    10.0.105.6      YES NVRAM  up                    up Router#sh run Building configuration...   Current configuration : 4702 bytes ! ! Last configuration change at 22:03:12 GMT Tue Sep 25 2018 by someone ! version 15.5 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! ! no aaa new-model ethernet lmi ce clock timezone GMT 0 0 clock summer-time GMT recurring ! ! ! ! ! ! ! ! ! ip dhcp excluded-address 10.0.10.1 ip dhcp excluded-address 10.0.10.25 10.0.10.30 ip dhcp excluded-address 10.0.20.2 ip dhcp excluded-address 10.0.30.2 ip dhcp excluded-address 10.0.30.11 10.0.30.14 ip dhcp excluded-address 10.0.105.2 10.0.105.6 ! ip dhcp pool 10  network 10.0.10.0 255.255.255.224  default-router 10.0.10.30  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool 20  network 10.0.20.0 255.255.255.252  default-router 10.0.20.2  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool 30  network 10.0.30.0 255.255.255.240  default-router 10.0.30.14  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool IPTV  network 10.0.105.0 255.255.255.248  default-router 10.0.105.6  dns-server 192.168.1.254 ! ! ! ip name-server 192.168.1.254 ip multicast-routing ip inspect log drop-pkt ip inspect audit-trail ip inspect name Default http ip inspect name Default https ip inspect name Default ftp ip inspect name Default ftps ip inspect name Default tftp ip inspect name Default pop3 ip inspect name Default pop3s ip inspect name Default imap ip inspect name Default imaps ip inspect name Default tcp ip inspect name Default udp ip inspect name Default icmp ip inspect name Default dns ip inspect name Default telnet ip cef no ipv6 cef ! parameter-map type inspect global  log dropped-packets enable  max-incomplete low 18000  max-incomplete high 20000 multilink bundle-name authenticated ! ! ! license udi pid CISCO1921/K9 sn   XXXXXXXXXX ! ! username xxxxx   privilege 15 password 7 xxxxx ! redundancy ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Embedded-Service-Engine0/0  no ip address  shutdown ! interface GigabitEthernet0/0  description *** WAN ***  ip address 192.168.1.15 255.255.255.0  ip access-group Default in  ip nat outside  ip inspect Default out  ip virtual-reassembly in  duplex auto  speed auto ! interface GigabitEthernet0/1  no ip address  shutdown  duplex auto  speed auto ! interface GigabitEthernet0/0/0  description *** Switch ***  switchport trunk allowed vlan 1,10,105,1002-1005  switchport mode trunk  no ip address ! interface GigabitEthernet0/0/1  no ip address  shutdown ! ! interface GigabitEthernet0/0/2  description *** AP 2 ***  switchport trunk native vlan 30  switchport trunk allowed vlan 1,30,1002-1005  switchport mode trunk  no ip address  speed 100 ! interface GigabitEthernet0/0/3  description *** AP 1 ***  switchport trunk native vlan 10  switchport trunk allowed vlan 1,10,20,1002-1005  switchport mode trunk  no ip address ! interface Vlan1  no ip address  shutdown ! interface Vlan10  ip address 10.0.10.30 255.255.255.224  ip nat inside  ip virtual-reassembly in ! interface Vlan20  ip address 10.0.20.2 255.255.255.252  ip nat inside  ip virtual-reassembly in ! interface Vlan30  ip address 10.0.30.14 255.255.255.240  ip nat inside  ip virtual-reassembly in ! interface Vlan105  ip address 10.0.105.6 255.255.255.248  ip pim sparse-mode  ip nat inside  ip virtual-reassembly in  ip igmp join-group 224.0.1.40  ip igmp version 3 ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip pim rp-address 192.168.1.254 ! ip nat inside source list 10 interface GigabitEthernet0/0 overload ip nat inside source list 20 interface GigabitEthernet0/0 overload ip nat inside source list 30 interface GigabitEthernet0/0 overload ip nat inside source list 40 interface GigabitEthernet0/0 overload ip route 0.0.0.0 0.0.0.0 192.168.1.254 ! ! ! access-list 10 permit 10.0.10.0 0.0.0.31 access-list 20 permit 10.0.20.0 0.0.0.3 access-list 30 permit 10.0.30.0 0.0.0.15 access-list 40 permit 10.0.105.0 0.0.0.7 ! control-plane ! !  vstack ! line con 0  exec-timeout 15 0  login local line aux 0 line 2  no activation-character  no exec  transport preferred none  transport output pad telnet rlogin lapb-ta mop udptn v120 ssh  stopbits 1 line vty 0 4  exec-timeout 15 0  login local  transport input telnet ! scheduler allocate 20000 1000 ntp source Vlan10 ntp server pt.pool.ntp.org prefer ntp server europe.pool.ntp.org ! end   Router#sh ip igmp snooping groups Vlan      Group                    Version     Port List --------------------------------------------------------- 105       239.195.7.2              v3          Gi0/0/0 105       239.196.1.35             v3          Gi0/0/0 105       239.255.255.250          v3          Gi0/0/0   Router#sh ip igmp snooping mrouter Vlan    ports ----    -----  105   Heeeeelp!!!  ... View more

Bom dia! Ando às cabeçadas com este router por causa do multicast. O que pretendo é passar tráfego multicast pela porta WAN até uma interface vlan. A configuração está como podem verificar abaixo. No entanto não consigo que a vlan tenha uma porta associada para que possa receber o tráfego multicast!  O que é que me está a escapar? Agradeço desde já a vossa ajuda.   Router#sh ip int bri Interface                  IP-Address      OK? Method Status                Protocol Embedded-Service-Engine0/0 unassigned      YES NVRAM  administratively down down GigabitEthernet0/0         192.168.1.15    YES NVRAM  up                    up GigabitEthernet0/1         unassigned      YES NVRAM  administratively down down GigabitEthernet0/0/0       unassigned      YES unset  up                    up GigabitEthernet0/0/1       unassigned      YES unset  administratively down down GigabitEthernet0/0/2       unassigned      YES unset  up                    up GigabitEthernet0/0/3       unassigned      YES unset  up                    up NVI0                       192.168.1.15    YES unset  up                    up Tunnel0                    192.168.1.15    YES unset  up                    up Vlan1                      unassigned      YES unset  administratively down down Vlan10                     10.0.10.30      YES NVRAM  up                    up Vlan20                     10.0.20.2       YES NVRAM  up                    up Vlan30                     10.0.30.14      YES NVRAM  up                    up Vlan105                    10.0.105.6      YES NVRAM  up                    up Router#sh run Building configuration...   Current configuration : 4702 bytes ! ! Last configuration change at 22:03:12 GMT Tue Sep 25 2018 by someone ! version 15.5 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! ! no aaa new-model ethernet lmi ce clock timezone GMT 0 0 clock summer-time GMT recurring ! ! ! ! ! ! ! ! ! ip dhcp excluded-address 10.0.10.1 ip dhcp excluded-address 10.0.10.25 10.0.10.30 ip dhcp excluded-address 10.0.20.2 ip dhcp excluded-address 10.0.30.2 ip dhcp excluded-address 10.0.30.11 10.0.30.14 ip dhcp excluded-address 10.0.105.2 10.0.105.6 ! ip dhcp pool 10  network 10.0.10.0 255.255.255.224  default-router 10.0.10.30  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool 20  network 10.0.20.0 255.255.255.252  default-router 10.0.20.2  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool 30  network 10.0.30.0 255.255.255.240  default-router 10.0.30.14  dns-server 1.1.1.1 1.0.0.1 ! ip dhcp pool IPTV  network 10.0.105.0 255.255.255.248  default-router 10.0.105.6  dns-server 192.168.1.254 ! ! ! ip name-server 192.168.1.254 ip multicast-routing ip inspect log drop-pkt ip inspect audit-trail ip inspect name Default http ip inspect name Default https ip inspect name Default ftp ip inspect name Default ftps ip inspect name Default tftp ip inspect name Default pop3 ip inspect name Default pop3s ip inspect name Default imap ip inspect name Default imaps ip inspect name Default tcp ip inspect name Default udp ip inspect name Default icmp ip inspect name Default dns ip inspect name Default telnet ip cef no ipv6 cef ! parameter-map type inspect global  log dropped-packets enable  max-incomplete low 18000  max-incomplete high 20000 multilink bundle-name authenticated ! ! ! license udi pid CISCO1921/K9 sn XXXXXXXXXX ! ! username xxxxx privilege 15 password 7 xxxxx ! redundancy ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Embedded-Service-Engine0/0  no ip address  shutdown ! interface GigabitEthernet0/0  description *** WAN ***  ip address 192.168.1.15 255.255.255.0  ip access-group Default in  ip nat outside  ip inspect Default out  ip virtual-reassembly in  duplex auto  speed auto ! interface GigabitEthernet0/1  no ip address  shutdown  duplex auto  speed auto ! interface GigabitEthernet0/0/0  description *** Switch ***  switchport trunk allowed vlan 1,10,105,1002-1005  switchport mode trunk  no ip address ! interface GigabitEthernet0/0/1  no ip address  shutdown ! ! interface GigabitEthernet0/0/2  description *** AP 2 ***  switchport trunk native vlan 30  switchport trunk allowed vlan 1,30,1002-1005  switchport mode trunk  no ip address  speed 100 ! interface GigabitEthernet0/0/3  description *** AP 1 ***  switchport trunk native vlan 10  switchport trunk allowed vlan 1,10,20,1002-1005  switchport mode trunk  no ip address ! interface Vlan1  no ip address  shutdown ! interface Vlan10  ip address 10.0.10.30 255.255.255.224  ip nat inside  ip virtual-reassembly in ! interface Vlan20  ip address 10.0.20.2 255.255.255.252  ip nat inside  ip virtual-reassembly in ! interface Vlan30  ip address 10.0.30.14 255.255.255.240  ip nat inside  ip virtual-reassembly in ! interface Vlan105  ip address 10.0.105.6 255.255.255.248  ip pim sparse-mode  ip nat inside  ip virtual-reassembly in  ip igmp join-group 224.0.1.40  ip igmp version 3 ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip pim rp-address 192.168.1.254 ! ip nat inside source list 10 interface GigabitEthernet0/0 overload ip nat inside source list 20 interface GigabitEthernet0/0 overload ip nat inside source list 30 interface GigabitEthernet0/0 overload ip nat inside source list 40 interface GigabitEthernet0/0 overload ip route 0.0.0.0 0.0.0.0 192.168.1.254 ! ! ! access-list 10 permit 10.0.10.0 0.0.0.31 access-list 20 permit 10.0.20.0 0.0.0.3 access-list 30 permit 10.0.30.0 0.0.0.15 access-list 40 permit 10.0.105.0 0.0.0.7 ! control-plane ! !  vstack ! line con 0  exec-timeout 15 0  login local line aux 0 line 2  no activation-character  no exec  transport preferred none  transport output pad telnet rlogin lapb-ta mop udptn v120 ssh  stopbits 1 line vty 0 4  exec-timeout 15 0  login local  transport input telnet ! scheduler allocate 20000 1000 ntp source Vlan10 ntp server pt.pool.ntp.org prefer ntp server europe.pool.ntp.org ! end   Router#sh ip igmp snooping groups Vlan      Group                    Version     Port List --------------------------------------------------------- 105       239.195.7.2              v3          Gi0/0/0 105       239.196.1.35             v3          Gi0/0/0 105       239.255.255.250          v3          Gi0/0/0   Router#sh ip igmp snooping mrouter Vlan    ports ----    -----  105   Heeeeelp!!!  ... View more

Hello everyone, I have router configured in NAT, with 3 vlan's for certain purposes and DHCP server for each one. I show the configuration of the router, however and with regard to IPTV in Vlan 20, the STB only works for a few seconds and the image freezes. Is there a way to overcome this? Thank you in advance!   Router#sh ip igmp snooping Global IGMP Snooping configuration: ----------------------------------- IGMP snooping              : Enabled IGMPv3 snooping support    : Basic Report suppression         : Enabled Last Member Query Interval : 1000   Vlan 1: -------- IGMP snooping                       : Disabled IGMPv2 immediate leave              : Disabled Multicast router learning mode      : pim-dvmrp Last Member Query Interval          : 1000 CGMP interoperability mode          : IGMP_ONLY   Vlan 10: -------- IGMP snooping                       : Disabled IGMPv2 immediate leave              : Disabled Multicast router learning mode      : pim-dvmrp Last Member Query Interval          : 1000   Vlan 20: -------- IGMP snooping                       : Enabled IGMPv2 immediate leave              : Disabled Multicast router learning mode      : pim-dvmrp Last Member Query Interval          : 1000 CGMP interoperability mode          : IGMP_ONLY   Vlan 30: -------- IGMP snooping                       : Disabled IGMPv2 immediate leave              : Disabled Multicast router learning mode      : pim-dvmrp Last Member Query Interval          : 1000   Router#sh run Building configuration...   Current configuration : 3476 bytes ! ! Last configuration change at 22:55:18 UTC Mon Apr 16 2018 by ademin ! version 15.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! ! no aaa new-model ! ! ! ! ! ! ! ! ! ! ! ! ! ! !     ! ip dhcp excluded-address 10.0.10.1 ip dhcp excluded-address 10.0.10.12 10.0.10.14 ip dhcp excluded-address 10.0.20.1 ip dhcp excluded-address 10.0.30.1 ! ip dhcp pool Vlan10  import all  network 10.0.10.0 255.255.255.240  default-router 10.0.10.1  dns-server 8.8.8.8 8.8.4.4 4.2.2.2 ! ip dhcp pool Vlan20  import all  network 10.0.20.0 255.255.255.252  default-router 10.0.20.1  dns-server 10.0.0.1 ! ip dhcp pool Vlan30  import all  network 10.0.30.0 255.255.255.248  default-router 10.0.30.1  dns-server 10.0.0.1 ! ! ! ip name-server 10.0.0.1 ip cef no ip igmp snooping vlan 10 no ip igmp snooping vlan 30 no ipv6 cef ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! cts logging verbose license udi pid CISCO892-K9 sn xxxxxxxxxxx ! ! username xxxxxxx privilege 15 password 0 xxxxxxxxxx ! redundancy ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface BRI0  no ip address  encapsulation hdlc  shutdown  isdn termination multidrop ! interface FastEthernet0  switchport access vlan 30  no ip address  storm-control broadcast level 5.00 ! interface FastEthernet1  switchport access vlan 10  no ip address  storm-control broadcast level 5.00  spanning-tree portfast ! interface FastEthernet2  switchport access vlan 10  no ip address  storm-control broadcast level 5.00 ! interface FastEthernet3  switchport access vlan 10  no ip address  storm-control broadcast level 5.00 ! interface FastEthernet4  description *** IPTV ***  switchport access vlan 20  no ip address  storm-control broadcast level 5.00  storm-control multicast level 10.00 ! interface FastEthernet5  no ip address ! interface FastEthernet6  no ip address ! interface FastEthernet7  no ip address ! interface FastEthernet8  no ip address  duplex auto  speed auto ! interface GigabitEthernet0  description *** WAN ***  ip address 10.0.0.2 255.255.255.252  ip nat outside  ip virtual-reassembly in  duplex full  speed auto ! interface Vlan1  no ip address ! interface Vlan10  ip address 10.0.10.1 255.255.255.240  ip nat inside  ip virtual-reassembly in ! interface Vlan20  ip address 10.0.20.1 255.255.255.248  ip pim sparse-mode  ip nat inside  ip virtual-reassembly in  ip igmp version 3 ! interface Vlan30  ip address 10.0.30.1 255.255.255.248  ip nat inside  ip virtual-reassembly in ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source list 10 interface GigabitEthernet0 overload ip nat inside source list 20 interface GigabitEthernet0 overload ip nat inside source list 30 interface GigabitEthernet0 overload ip route 0.0.0.0 0.0.0.0 10.0.0.1 ! ! ! access-list 10 permit 10.0.10.0 0.0.0.15 access-list 20 permit 10.0.20.0 0.0.0.3 access-list 30 permit 10.0.30.0 0.0.0.7 ! control-plane ! ! mgcp behavior rsip-range tgcp-only mgcp behavior comedia-role none mgcp behavior comedia-check-media-src disable mgcp behavior comedia-sdp-force disable ! mgcp profile default ! ! ! ! ! ! ! ! line con 0  login local line aux 0 line vty 0 4  login local  transport input telnet ! ! end ... View more