Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Ashish Arora
04-03-2018
Stats
Member since
02-04-2012
36
Posts
14
Helpful
3
Solutions
05-26-2015
10:49 AM
Agreed. Authentication is best option to fullfill the requirement in your case. Generally for the Guest users we can use authentication or it can bypass the phase, May be separate SSID's will be solution for your case. Regards: Ashish Arora
... View more
Created by
Ashish Arora
in Small Business Routers
in Small Business Routers
05-26-2015
10:36 AM
05-26-2015
10:36 AM
ollyahmed, If you are looking specially for a router,then following configuration would be good. there is a quick need to modify the configuration according to the type of configuration you are running , i mean (QOS policies, route directions and Tracking(ip sla). version 15.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ip cef ! multilink bundle-name authenticated ! track 1 ip sla 1 reachability ! track 2 ip sla 2 reachability ! class-map match-all skype match protocol skype ! policy-map skype-policy class skype set dscp ef ! interface GigabitEthernet0/0 description LAN ip address 10.0.0.1 255.255.254.0 ip nat inside ip virtual-reassembly in duplex auto speed auto ! interface GigabitEthernet0/1 description TASK ip address 213.192.65.106 255.255.255.252 ip access-group 101 in ip nat outside ip virtual-reassembly in duplex auto speed auto crypto map GLIWICE-MAP service-policy input skype-policy service-policy output skype-policy ! interface GigabitEthernet0/2 description "Wit-NET" mac-address 0030.4f61.5521 ip address 193.107.215.133 255.255.255.224 ip access-group 101 in ip nat outside ip virtual-reassembly in duplex auto speed auto ! ip default-gateway 213.192.65.105 ip forward-protocol nd ip nat inside source route-map nat_isp1 interface GigabitEthernet0/1 overload ip nat inside source route-map nat_isp2 interface GigabitEthernet0/2 overload ip nat inside source static tcp 10.0.0.24 777 193.107.215.133 777 extendable ip nat inside source static tcp 10.0.0.2 1723 193.107.215.133 1723 extendable ip nat inside source static tcp 10.0.0.24 777 213.192.36.106 777 extendable !---more static routes has been omitted--- ip default-network 213.192.65.105 ip route 0.0.0.0 0.0.0.0 213.192.65.105 track 1 ip route 0.0.0.0 0.0.0.0 193.107.215.129 track 2 ip sla 1 icmp-echo 213.192.65.105 source-interface GigabitEthernet0/1 threshold 2 timeout 1000 frequency 5 ip sla schedule 1 life forever start-time now ip sla 2 icmp-echo 193.107.215.129 source-interface GigabitEthernet0/2 threshold 2 timeout 1000 frequency 5 ip sla schedule 2 life forever start-time now ! access-list 110 deny ip 10.0.0.0 0.0.1.255 10.0.100.0 0.0.0.255 access-list 110 permit ip 10.0.0.0 0.0.1.255 any access-list 190 permit ip 10.0.0.0 0.0.1.255 10.0.100.0 0.0.0.255 route-map TASK permit 10 match ip address 110 match interface GigabitEthernet0/1 ! route-map track_isp permit 10 match ip address 101 match interface GigabitEthernet0/1 set ip next-hop 213.192.65.105 ! route-map track_isp permit 20 match ip address 102 match interface GigabitEthernet0/2 set ip next-hop 193.107.215.129 ! route-map nat_isp2 permit 10 match ip address 110 match interface GigabitEthernet0/2 ! route-map nat_isp1 permit 10 match ip address 110 match interface GigabitEthernet0/1 ! - See more at: https://supportforums.cisco.com/discussion/11710646/dual-isp-connection-and-load-balancing#sthash.m0FSJNmn.dpuf
... View more
02-09-2014
09:09 AM
Sravan, There are lot of times it happenes when we use Usb to serial converter. Are you using the same ? 1. In case if this is the issue try to restart the computer and check the new com port number and try it again with the new number. 2. What error message are you getting, If blank screen try to use diff application. 3. Default speed is 9600 ;however you can also try to use 115200 and 3 8400. 4. If you have access to the device via telnet , please check the following command:- Show run | sec line Show line console 0 or line number. 5.check the following speed and try console again:- sh line console 0 Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int 0 CTY - - - - - 0 0 0/0 - Line 0, Location: "", Type: "" Length: 24 lines, Width: 80 columns Baud rate (TX/RX) is 9600/9600, no parity, 2 stopbits, 8 databits -Ashish
... View more
02-09-2014
08:58 AM
Artur, There are two WAN ports in the 867VAE-K9 , one is layer 3 GE and other is VDSL/ADSL over the pots. You can use those as primary and back up and can alse be used as a load balancing over the two providers. Since GE can be used for ethernet handoff connections like (cable) and other port can be used as ADSL/VDSL line over the POTS and it has an ATM connectivity. for load balancing over you should have to use a route map and match the interface and access-list which needs to be permit and can PAT over it. Best example is given in the following doc:- http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080950834.shtml Since 887VA only supports VDSL/ADSL on a single termination so it will be hard to achcieve redundancy/load balancing. Cisco 887VA # Multimode VDSL2/ADSL2/2+ over basic telephone service # 4-port 10/100-Mbps managed switch # Yes (Cisco 887VAW) # Yes (Cisco 887VAG) # No In the 887 You can create a SVI and make switch interface as routed ;however this is not a suggested method for ethernet termination. Rate helpful posts. -Ashish
... View more
02-09-2014
08:55 AM
Salman , Here are the answers:- interface GigabitEthernet0/2 description *** CONNECTED TO 10Mbps link *** no ip address ip nat outside ip virtual-reassembly in duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 <====== (do we need to keep it dial-pool-number 1 ) Answer: This command helps to determine which dialer to bound with. ! interface GigabitEthernet0/2 interface Dialer1 mtu 1492 ip address negotiated ip nat outside ip virtual-reassembly in encapsulation ppp dialer pool 1 <===== (do we need to keep pool 1) Answer: DIaler pool helps to understand which Fa/GE port are associated with it. numeric 1 identify it and the same number should be on the Ge/FE port. dialer-group 1 <===== (do we need to keep group 1) Answer:- "Dialer group 1" helps to trigger the dialer when intresting traffic start flowing. usually we put the following commnad under global configuration to make the above command to work. dialer-list 1 protocol ip permit. THis means that dialer 1 will be triggered and negotiate PPP when any ip traffic starts flowing. ppp authentication pap callin ppp pap sent-username xxxx password 0 xxxxxx crypto ipsec client ezvpn OCS_Deira
... View more
02-09-2014
08:43 AM
Artur, There are two WAN ports in the 867VAE-K9 , one is layer 3 GE and other is VDSL/ADSL over the pots. You can use those as primary and back up and can alse be used as a load balancing over the two providers. Since GE can be used for ethernet handoff connections like (cable) and other port can be used as ADSL/VDSL line over the POTS and it has an ATM connectivity. for load balancing over you should have to use a route map and match the interface and access-list which needs to be permit and can PAT over it. Best example is given in the following doc:- http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080950834.shtml Since 887VA only supports VDSL/ADSL on a single termination so it will be hard to achcieve redundancy/load balancing. Cisco 887VA Multimode VDSL2/ADSL2/2+ over basic telephone service 4-port 10/100-Mbps managed switch Yes (Cisco 887VAW) Yes (Cisco 887VAG) No In the 887 You can create a SVI and make switch interface as routed ;however this is not a suggested method for ethernet termination. -Ashish
... View more
01-17-2014
08:37 AM
Oliver, Correct your configuration is correct and you can use the same Hope you will mark this thread as marked and rate your experience. -Ashish
... View more
01-17-2014
02:02 AM
Sam, there are lot of things needs to be checked befor providing any working cinfiguration. Please check the following steps and provide me the output: 1. Go to router CLI mode( either telnet or console). In case if you are not sure how to log in to the router please look at the link:- http://www.cisco.com/en/US/docs/routers/connectedgrid/cgr1000/hardware/cgr1240/app.console.html 2. Type a command:- show run copy the output to a notepad and attach it to the thread. 3. Explain me the topology:- Topology means how things are connected and on which interface(LAN,WAN) etc. I will create a running configuration and you can use the exact same thing in your network. -Ashish
... View more
01-17-2014
01:45 AM
Ali, correct , but we should always look at the ppp Debugs which were initiated by multilink interface in our case , because multilink is the one which in the question. Since we bound our interface in the mulilink and other end is still indepenedent , then it creates issues while reaching to the upplar layers of the ppp and leads to the rejection. We should wait till provider provisioned it and lets see what happen. Thank you -Ashish Please don't forget to rate the posts.
... View more
01-17-2014
01:38 AM
Coleman, I cheked the configuration and it seems like your active bandwidth is somewhere close to 512kbps. VCIs per VPI: 1024, Max. Datagram Size: 4528 PLIM Type: ADSL - 512Kbps Upstream, DMT, TX clocking: LINE 1850 input, 2 output, 1293339 IN fast, 1094027 OUT fast Avail bw = 512 Config. is ACTIVE On the dialer interface:- Available Bandwidth 3750 kilobits/sec 5 minute input rate 515000 bits/sec, 116 packets/sec 5 minute output rate 402000 bits/sec, 105 packets/sec On virtual access interface:- Output queue: 0/40 (size/max) 5 minute input rate 540000 bits/sec, 133 packets/sec 5 minute output rate 436000 bits/sec, 125 packets/sec THese 3 results evidently showed that your net bandwidth asllowed acording to the Telco and according to the line rate is not more than .5 megs. We can enable ATM layer traffic shapping or can enable policing under the dialer interface to privent this. Please try the following command:- Policy-map TEST class class-default police rate percent 99 Please make sure you change the bandwidth statement under the dialer as 512kbps , else calculation will be done according to the current bandwidth command which is manually 5000 kbps. interface dialer 1 bandwidth 512000 Apply policy to the dialer:- interface dialer 1 service-policy out TEST Once this policy will be configured please take the output of :- show policy-map interface dialer 1 It will show you the offered rate and drop rate , drop rate will be observed once policer will start polcing above 512. NEXT ACTION:- 1. Please provide the above outputs (show policy-map int dia 1) 2. show interface dia1 3. Change th hold-queue valus under the dialer to 100 (hold-queue 100 out) 4. Confirm with the telco about the line rate and allowed bandwidth. _THnak you Ashish
... View more
01-17-2014
01:16 AM
Sean, I am not sure if you are talking about data or voice. As per the info it seems like You need to know about the data. you also go with PVDM2-36DM and following PIR cards"- NM-1CE1T1-PRI (1-Port Channelized E1/T1/ISDN-PRI Network Module) • NM-2CE1T1-PRI (2-Port Channelized E1/T1/ISDN-PRI Network Module) • HWIC-1CE1T1-PRI (1-Port Channelized E1/T1/ISDN-PRI HWIC) • HWIC-2CE1T1-PRI (2-Port Channelized E1/T1/ISDN-PRI HWIC) Maximum port denstity supported are by Cisco 3825, 3925, 3845, 3945 is 144 channels. You can check the same under following doc:- http://www.cisco.com/en/US/prod/collateral/modules/ps2641/product_data_sheet0900aecd8050918e_ps5854_Products_Data_Sheet.html In case if you are looking for new deployment , please get in touch with cisco presales team for the replacement parts as these is already EOS. http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/htpvdm2.html
... View more
01-16-2014
05:01 PM
Hello , Nice suggestion given by Alex to see the debugs. I would like add a following point :- 1. Try to put static ip address on the fa interface and see if it works. 2. Static ip will be the same which is Acquired on the laptop. 3.try to change the port. 4.Mac address can be registered by telco , which can either be cleared by reloading the modem device or can be flused upon calling your provider. 5. Try to shut the port , reload the modem and unshut it. 6. Share the debugs. -Ashish Arora
... View more
01-16-2014
06:54 AM
Oliver, Nice suggestion by John. Also, Can you please log the session in the putty(go to change settings >> logging>>save file.txt) and collect output of show run and share it here. I want to see if there is any configuration mismatch in it. * Please make sure you are able to ping the next hop form the cisco to make the things more better for us to isolate it. THank you Ashish
... View more
01-16-2014
06:48 AM
hi , THank you for pasting the outputs. Since traffic rate is somethere close to 136 down and 67 Up. It seems to be ok for the link as Saturated bandwidth allowed is 650 Mbps ;however only 40 Packets can be buffered into the output queue , which is quite less when compared to 1 Gig link. I should say try to change it to 100 and keep on incrementing till 200.You can perform as follow:- Interface gig 0/0/1 hold-queue 70 out Check the behaviour hold-queue 100 out Check the behaviour now for 5 minutes atleast. hold-queue 150 out ( monitor it for some time) We shoudn't increase this a lot beause it may create issues for the voice traffic and experience a little delay in RTP traffic. Please also try to remove the policy and put it back in. In order to check the CIR, We should follow the policy :- Policy-map TEST class class-default police rate 600000000 conform-action transmit exceed-action drop Now we need to send traffic till it reached the max limit and once it would start dropping , CIR can be roughly observed. -Thank you. Ashish
... View more
01-16-2014
04:20 AM
Hi, It seems like a queuing issue , before providing any feedback here , i would like to know the following things:- 1. Show interface gig (repeat output for 3-4 consecutive attempts). 2. Make sure to put load-interval 30 command under the gig interface before providing any outputs. 3. Are you we sure we are getting CIR 600 megs for this cirtuit, Can we test it by applying legacy QOS (rate-limiting) or Policing. 4. Aren't we geeting any burty traffic ?, This can be checked by a packet capture for 10-15 minutes and see the same under wireshark (go to statastics >> IO graph). Please share this output also. 5.since this is 600 megs link , we should need to check the output hold queue as paskets are getting tail dropped. so need to increase the size slowly and see the behaviour.(Note if we will increase the size at a higher number , we may expect voice delay),so please check the production impact befor applying it. 6. What is the actual issue are we experiance , Do you feel slowness or voice issue or any other issue. 7. I will provide you an action plan after seeing the output asked above and :- Show interface gig stats show interface gig switching. -THank you Ashish Arora
... View more
05-26-2015
Agreed.Authentication is best option to fullfill the requirement in your
case.Generally for the Gues...
05-26-2015
ollyahmed, If you are looking specially for a router,then following
configuration would be good.ther...
02-09-2014
Sravan, There are lot of times it happenes when we use Usb to serial
converter. Are you using the sa...
02-09-2014
Artur,There are two WAN ports in the 867VAE-K9 , one is layer 3 GE and
other is VDSL/ADSL over the p...
02-09-2014
Salman ,Here are the answers:-interface GigabitEthernet0/2description
*** CONNECTED TO 10Mbps link *...
02-09-2014
Artur, There are two WAN ports in the 867VAE-K9 , one is layer 3 GE and
other is VDSL/ADSL over the ...
Created by
Ashish Arora
in Routing
01-17-2014
01-17-2014
Oliver,Correct your configuration is correct and you can use the same
Hope you will mark this thread...
01-17-2014
Sam, there are lot of things needs to be checked befor providing any
working cinfiguration.Please ch...
01-17-2014
Ali, correct , but we should always look at the ppp Debugs which were
initiated by multilink interfa...
01-17-2014
Coleman, I cheked the configuration and it seems like your active
bandwidth is somewhere close to 51...
01-17-2014
Sean,I am not sure if you are talking about data or voice. As per the
info it seems like You need to...
01-16-2014
Hello ,Nice suggestion given by Alex to see the debugs. I would like add
a following point :-1. Try ...
Created by
Ashish Arora
in Routing
01-16-2014
01-16-2014
Oliver, Nice suggestion by John.Also, Can you please log the session in
the putty(go to change setti...
01-16-2014
hi , THank you for pasting the outputs.Since traffic rate is somethere
close to 136 down and 67 Up. ...
Public Statistics
| Date Registered | 02-04-2012 03:36 PM |
| Date Last Visited | 04-03-2018 04:29 AM |
| Total Messages Posted | 36 |
| Total Helpful Votes Received | 14 |
