Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About baxta2712
Stats
Member since
10-19-2010
37
Posts
0
Helpful
0
Solutions
05-08-2018
12:15 AM
Hello, this is configuration and diagram
==========================
no ip domain lookup ip domain name gino.ge ipv6 multicast rpf use-bgp ! ! ! ! ! spanning-tree mode rapid-pvst spanning-tree extend system-id spanning-tree vlan 1-110,112-500 priority 24576 spanning-tree vlan 111 priority 4096 diagnostic bootup level minimal no errdisable detect cause pagp-flap no errdisable detect cause dtp-flap no errdisable detect cause link-flap no errdisable detect cause gbic-invalid no errdisable detect cause arp-inspection no errdisable detect cause loopback
! ! transceiver type all monitoring vlan internal allocation policy ascending ! vlan 10 name ESXi ! vlan 11 name CCTV1 ! vlan 12 name CCTV2 ! vlan 13 name CCTV3 ! vlan 14 name CCTV4 ! vlan 15 name CCTV5 ! vlan 16 name CCTV6 ! vlan 17 name CCTV7 ! vlan 18 name CCTV8 ! vlan 20 ! vlan 30 name Guests ! vlan 40 name Wifi-Office ! vlan 44 ! vlan 50 name Voice ! vlan 60 name Servers ! vlan 91 name Welness ! vlan 93 name BackUp ! vlan 100 name Management ! vlan 101 name Unifi ! vlan 123 name OUTSIDE ! vlan 168 name Miner ! vlan 192 ! vlan 200 name Exchange ! vlan 754 name Internet ! vlan 756 name TBC-Bnkomati ! ip ssh version 2 lldp run ! ! ! interface GigabitEthernet0 no ip address shutdown speed auto duplex auto negotiation auto ! interface GigabitEthernet0/1 description Delta-Internet switchport trunk allowed vlan 754,756 switchport mode trunk no cdp enable spanning-tree bpdufilter enable ! interface GigabitEthernet0/2 description Gino-Router switchport mode trunk ! interface GigabitEthernet0/3 description Server-SW switchport mode trunk ! interface GigabitEthernet0/4 description SW1-Patara-Otaxi switchport mode trunk ! interface GigabitEthernet0/5 description SW-GASTRO switchport mode trunk ! interface GigabitEthernet0/6 description SW-Camera1 switchport mode trunk ! interface GigabitEthernet0/7 description SW-PuertoRico switchport mode trunk ! interface GigabitEthernet0/8 description Gastro lan switchport mode trunk ! interface GigabitEthernet0/9 switchport mode trunk ! interface GigabitEthernet0/10 switchport mode trunk ! interface GigabitEthernet0/11 description didi auzi switchport mode trunk ! interface GigabitEthernet0/12 switchport mode trunk ! interface GigabitEthernet0/13 switchport mode trunk ! interface GigabitEthernet0/14 switchport mode trunk ! interface GigabitEthernet0/15 switchport mode trunk ! interface GigabitEthernet0/16 switchport mode trunk ! interface GigabitEthernet0/17 switchport mode trunk ! interface GigabitEthernet0/18 switchport mode trunk ! interface GigabitEthernet0/19 ! interface GigabitEthernet0/20 switchport mode trunk ! interface GigabitEthernet0/21 switchport mode trunk ! interface GigabitEthernet0/22 switchport mode trunk ! interface GigabitEthernet0/23 switchport mode trunk ! interface GigabitEthernet0/24 switchport mode trunk ! interface TenGigabitEthernet0/1 ! interface TenGigabitEthernet0/2 ! interface Vlan1 no ip address shutdown ! interface Vlan10 description ::CAM_ESX1:: ip address 10.10.0.1 255.255.255.0 ! interface Vlan11 description ::CAM11:: ip address 10.11.0.1 255.255.255.0 ! interface Vlan12 description ::CAM12:: ip address 10.12.0.1 255.255.255.0 ! interface Vlan13 description ::CAM13:: ip address 10.13.0.1 255.255.255.0 ! interface Vlan14 description ::CAM14:: ip address 10.14.0.1 255.255.255.0 ! interface Vlan15 description ::CAM15:: ip address 10.15.0.1 255.255.255.0 ! interface Vlan16 description ::CAM16:: ip address 10.16.0.1 255.255.255.0 ! interface Vlan17 description ::CAM17:: ip address 10.17.0.1 255.255.255.0 ! interface Vlan18 description ::CAM18:: ip address 10.18.0.1 255.255.255.0 ! interface Vlan40 description ::Office-WIFI:: ip address 10.40.0.1 255.255.255.0 ! interface Vlan50 description ::Voice:: ip address 10.50.0.1 255.255.255.0 ! interface Vlan91 description ::Welness:: ip address 192.168.1.1 255.255.255.0 ! interface Vlan100 description ::Management:: ip address 10.100.0.1 255.255.255.0 ! interface Vlan101 description ::Unifi:: ip address 192.168.8.1 255.255.252.0 ! interface Vlan111 no ip address ! interface Vlan123 description ::OUTSIDE:: ip address 10.100.100.3 255.255.255.0 ! interface Vlan192 description ::Molareebi:: ip address 192.168.0.1 255.255.255.0 no ip proxy-arp ip policy route-map MAIL ! interface Vlan200 description ::EXCHANGE:: ip address 172.16.0.1 255.255.255.0 ! ip default-gateway 10.100.0.1 ip forward-protocol nd ! ! ip http server no ip http secure-server ip route 0.0.0.0 0.0.0.0 10.100.100.1 ip route 92.241.67.178 255.255.255.255 10.100.100.2 name Mtskheta_VOIP ip route 192.168.3.0 255.255.255.0 10.100.100.1 name Servers ip route 192.168.32.0 255.255.255.0 10.100.100.2 name GWE_LAN ip route 192.168.34.0 255.255.255.0 10.100.100.2 name GWE_LAN_WIFI_EMP ip route 192.168.35.0 255.255.255.0 10.100.100.2 name GWE_VPN_AnyConnect ip route 192.168.128.0 255.255.255.0 10.100.100.2 name EC_LAN_SERVERS ip route 192.168.130.0 255.255.255.0 10.100.100.2 name EC_LAN_WORKSTATIONS ip route 192.168.134.0 255.255.255.0 10.100.100.2 name EC_LAN_WIFI ip route 192.168.136.0 255.255.255.0 10.100.100.2 name EC_LAN_GIO-B_GPB ip route 192.168.144.0 255.255.255.0 10.100.100.2 name KO_LAN_SERVERS ip route 192.168.146.0 255.255.255.0 10.100.100.2 name KO_WORKSTATIONS ip route 192.168.149.0 255.255.255.0 10.100.100.2 name KO_WIFI ip route 192.168.152.0 255.255.255.0 10.100.100.2 name KO_PBX ! ip access-list extended PBR permit ip host 192.168.0.51 any permit ip host 192.168.0.30 any ! access-list 101 permit ip host 192.168.0.51 any access-list 101 permit ip host 192.168.0.30 any ! route-map MAIL permit 10 match ip address 101 set ip next-hop 10.100.100.2 ! route-map PBR permit 10 match ip address PBR set ip next-hop 10.100.100.2 ! ! ! ! control-plane ! ! line con 0 logging synchronous line vty 0 4 exec-timeout 0 0 transport input ssh line vty 5 15 exec-timeout 0 0
! controller BITS input applique E1 framing fas_nocrc linecode ami ! end
=========================
... View more
05-07-2018
06:34 AM
Hello, I have L3 switch, several interface VLAN-s are configured there, for example one network is 192.168.1.0/24, another is 192.168.0.0/24, host 192.168.0.51 is mail server so it should have next hop 10.100.100.2 default gateway for switch is 10.100.100.1, it is very strange but after configuring PBR i cant ping 192.168.0.51 neither from switch (192.168.0.1), nor from 192.168.1.0/24 network, when i tried to put on ACL entry above permit, to deny host 192.168.0.51 to network 192.168.1.0/24 still not working.
if I remove pbr from interface it starts working
... View more
05-07-2018
12:57 AM
Hello I need help
after applying PBR to VLAN interface on my switch, I cant ping 192.168.0.51 and 192.168.0.30 neither form switch nor from other networks connected to switch
interface Vlan192 ip address 192.168.0.1 255.255.255.0 no ip proxy-arp ip policy route-map MAIL end
Extended IP access list 101 10 permit ip host 192.168.0.51 any 20 permit ip host 192.168.0.30 any (138 matches)
route-map MAIL, permit, sequence 10 Match clauses: ip address (access-lists): 101 Set clauses: ip next-hop 10.100.100.2 Policy routing matches: 66 packets, 5998 bytes
can anyone help me?
... View more
Labels:
05-07-2018
12:53 AM
Labels:
09-25-2012
01:51 AM
I want to match only routes from certain neighbors, this routes may change and because of this I can not define routes in access-list.
... View more
09-25-2012
12:40 AM
Hi Could anyone help me? My simplified scenario is: I have two iBGP neighbor neighbor X.X.X.X and neighbor Y.Y.Y.Y I am redistributing BGP into OSPF and I need neighbor X.X.X.X to have lower metric than Y.Y.Y.Y in OSPF domain how can I solve this? thank you in advance
... View more
Labels:
08-16-2012
01:15 AM
I have done this but, than VPN client cannot even connect Ip access-list extended WAN_ACL 10 permit udp host X.X.X.X host X.X.X.X (287276145 matches) 20 permit ip host X.X.X.X host X.X.X.X log (1392 matches) 25 permit tcp any host X.X.X.X eq 3389 (713 matches) 30 permit tcp host X.X.X.X eq 3389 host X.X.X.X eq 3389 35 permit tcp any host X.X.X.X eq 10000 (16 matches) 40 permit udp host X.X.X.X host X.X.X.X gt 5059 log 50 permit udp host x.x.x.x host X.X. gt 5059 log 60 deny udp any host X.X.X.X range 5060 5090 log (404 matches) 70 permit tcp any eq 9000 host X.X.X.X eq 9000
... View more
08-12-2012
02:37 PM
! ! ! crypto isakmp client configuration group VPN1 key XXXX pool LAN2 acl SPLIT save-password ! ! ! ! ! crypto ipsec transform-set evpnts esp-aes esp-md5-hmac crypto ipsec transform-set sms esp-3des esp-sha-hmac crypto ipsec transform-set SPD esp-aes 256 esp-sha-hmac ! crypto dynamic-map emap 1 set transform-set evpnts reverse-route ! ! crypto map dynmap client authentication list userauth crypto map dynmap isakmp authorization list groupauthor crypto map dynmap client configuration address respond crypto map dynmap 20 ipsec-isakmp set peer XXXXXX set transform-set sms match address SMS crypto map dynmap 30 ipsec-isakmp set peer XXXXXX set security-association lifetime seconds 7200 set transform-set SPD set pfs group5 match address SPD crypto map dynmap 65535 ipsec-isakmp dynamic emap ! ! ! ! interface GigabitEthernet0/1.2145 description ::XXXXX:: encapsulation dot1Q 2145 ip address XXXXXX ip access-group WAN_ACL in ip access-group PRIVATE out no ip proxy-arp ip nat outside ip virtual-reassembly in crypto map dynmap ! Keep in minde that behind NAT client works just fine
... View more
08-12-2012
02:23 AM
Hi Could anyone help me? there is a VPN client PC with Public IP address (without NAT router), it can connect to EZVPN server and recive reoutes but traffic is not passing,
... View more
Labels:
10-21-2011
11:16 PM
Yes you are right traffic-shape was an issue, this command was shaping unidentified traffic and I did not think that traffic shaping occurs after encription
... View more
10-20-2011
07:04 AM
Hello could anyone help me? I created VTI tunnels between HO and branches HO is 3925 and branches are 881 and 871, configuration is very basic and when traffic pass through tunnel ping rises very heavily from 200 to 1000 ms, CPU on 881 and 871 is ok, how can I improve this problem? 881 interface Tunnel10 description To C-3925 bandwidth 4196 ip address 192.168.193.22 255.255.255.252 ip mtu 1300 ip tcp adjust-mss 1260 ip flow ingress ip flow egress ip route-cache flow ip ospf cost 90 ip ospf mtu-ignore keepalive 20 5 tunnel source X.X.X.X tunnel destination X.X.X.X tunnel mode ipsec ipv4 tunnel protection ipsec profile VTI_BR 3925 interface Tunnel5 description to 881 bandwidth 4192 ip address 192.168.193.21 255.255.255.252 ip mtu 1300 ip virtual-reassembly ip tcp adjust-mss 1260 ip policy route-map BRANCHES_TO_ASA ip ospf cost 100 ip ospf mtu-ignore no snmp trap link-status traffic-shape group 111 512000 7936 7936 1000 tunnel source X.X.X.X tunnel mode ipsec ipv4 tunnel destination X.X.X.X tunnel protection ipsec profile VTI_BR before VTI there was GRE and averything was OK
... View more
Labels:
08-23-2011
12:04 AM
Here is network diagram, I think the problem is that ESW520 does not understand pvst, and they did not accept BPDU- from CE500
... View more
05-08-2018
Hello, this is configuration and diagram ========================== no
ip domain lookupip domain nam...
05-07-2018
Hello, I have L3 switch, several interface VLAN-s are configured there,
for example one network is 1...
05-07-2018
Hello I need help after applying PBR to VLAN interface on my switch, I
cant ping 192.168.0.51 and 19...
09-25-2012
I want to match only routes from certain neighbors, this routes may
change and because of this I can...
09-25-2012
Hi Could anyone help me?My simplified scenario is:I have two iBGP
neighbor neighbor X.X.X.Xand neigh...
08-16-2012
I have done this but, than VPN client cannot even connect Ip access-list
extended WAN_ACL 10 permit ...
08-12-2012
!!!crypto isakmp client configuration group VPN1 key XXXX pool LAN2 acl
SPLIT save-password!!!!!cryp...
08-12-2012
Hi Could anyone help me? there is a VPN client PC with Public IP address
(without NAT router), it ca...
10-21-2011
Yes you are right traffic-shape was an issue, this command was shaping
unidentified traffic and I di...
10-20-2011
Hello could anyone help me? I created VTI tunnels between HO and
branches HO is 3925 and branches ar...
Public Statistics
| Date Registered | 10-19-2010 01:47 AM |
| Date Last Visited | 05-15-2018 04:32 AM |
| Total Messages Posted | 37 |
