Hi All I have an ASA 5510 with a DMZ interface that has a Cisco 2800 router directly connected to it.  I am having two issues: 1. I want to use WhatsUpGold on the Inside Lan to ping the router to monitor up status(at least the e0 int. directly connected to the ASA) 2. I want to connect to the router from the inside LAN using putty on port 22  (I believe I have configured the router properly to handle ssh connections on vty)  *Right now I get a Putty fatal Error:Network error: Connection refused The issue is, on the ASA we have an ACL bound to the inside interface with a Deny IP any any statement at the end so it is adding a layer of difficulty. Do I need an ACE to the inside ACL allowing access from Inside to DMZ interface eq ssh?  Same with ICMP Pings? Thanks ... View more

Hi All I have an ASA 5510 with a DMZ interface that has a Cisco 2800 router directly connected to it.  I am having two issues: 1. I want to use WhatsUpGold on the Inside Lan to ping the router to monitor up status(at least the e0 int. directly connected to the ASA) 2. I want to connect to the router from the inside LAN using putty on port 22  (I believe I have configured the router properly to handle ssh connections on vty)  *Right now I get a Putty fatal Error:Network error: Connection refused The issue is, on the ASA we have an ACL bound to the inside interface with a Deny IP any any statement at the end so it is adding a layer of difficulty. Do I need an ACE to the inside ACL allowing access from Inside to DMZ interface eq ssh?  Same with ICMP Pings? Thanks ... View more

I have attached a document to show our BGP topology with our ISP.  We have a FR Circuit from our ISP to Corp Office and a FR circuit to our Production  location.  We had a major outage when our Production FR circuit went down and it impacted our end users.  Working with the ISP, we went with a BGP config to re-route traffic from router FES02 over to FES01 into Corp router, across the p2p T1 into the Prod router.  At the time of implementation, it was tested and worked. We recently had another outage and this time BGP failed.  What are some troubleshooting methods I can do on my side to validate that the BGP config is working properly?  I have checked some standard show commands and things appear to be ok but I do not know BGP well enough to make sure I am looking at the info properly. Also, what steps do I need to complete to enable BGP debugging AND have the router display the activity real time? Below are the summary outputs CORP Router: # sh ip bgp summary BGP router identifier 172.19.17.223, local AS number 64515 BGP table version is 23, main routing table version 23 4 network entries using 468 bytes of memory 6 path entries using 312 bytes of memory 6/4 BGP path/bestpath attribute entries using 744 bytes of memory 2 BGP AS-PATH entries using 48 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1572 total bytes of memory BGP activity 6/2 prefixes, 21/15 paths, scan interval 60 secs Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd 172.16.25.26    4 20057  125162  125169       23    0    0 12w2d           2 172.16.220.25   4 64515  125220  125221       23    0    0 1w2d            3 PROD Router: #sh ip bgp summary BGP router identifier 172.19.17.224, local AS number 64515 BGP table version is 13, main routing table version 13 4 network entries using 468 bytes of memory 6 path entries using 312 bytes of memory 6/3 BGP path/bestpath attribute entries using 744 bytes of memory 2 BGP AS-PATH entries using 48 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1572 total bytes of memory BGP activity 4/0 prefixes, 10/4 paths, scan interval 60 secs Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd 172.16.25.29    4 20057   14061   14064       13    0    0 04:54:35        2 172.16.220.26   4 64515   14251   14254       13    0    0 1w2d            3 ... View more

I have two locations: Corporate and Production I need to send traffic from a PC on the Corp inside LAN with address, 192,168.100.20 to a destination of 192.168.101.1 On the Prod LAN on port 12123. The path for this traffic is Corp LAN into a Cisco ASA then into a 2811 router, over frame Relay circuit to 2811 router in Production.  The destination address of 101.1 if s the interface of the ASA in Prod directly connected to the 2811 router. ****The application sending the traffic is configured with a destination address of 172.168.25.30 NOT 192.168.101.1 Question: How would I set up PBR on the Corp router to take this traffic to its next hop of 172.16.25.30 and reach the destination address of 192.168.101.1 I have attached a drawing for hopeful clarity ... View more

I tried to set up traffic shaping on our PIX to restrict users from reaching th 3mb limit of our bonded Ts. One I applied it to the outside interface, all outbound traffic was shutdown completely. When i removed it from the interface, traffic immediately began to flow again. Below is the config I added: (config-pmap)#policy-map shape_policy (config-pmap)# class class-default (config-pmap-c)# shape average 2560000 30960 (config-pmap-c)# service-policy shape_policy interface outside ... View more

Currently we have 5 remote IP Phone users. They use Nortel IP Phones(model#2004) which are plugged into a Nortel Contivity 221 VPN switch. Presently, they connect to a Nortel 1100 router at the office. The goal is the following: 1. Set up VPN between the Contivity 221s and Cisco PIX 2. Prioritize the VoIP traffic using QoS Does anyone have experience with this scenario? Any config examples would be a HUGE help. Thanks ... View more