Great replies and very helpful. I particularly like James' suggestion to put a third vlan on for management purposes. And yes, the first three octets are all the same. Thanks for the help.
... View more
I would like to create two vlans on one switch, one without an IP address. Here's why: One vlan would be outside of my firewall. It would have the Internet connection, connection to the firewall, and the outside card of my video bridge. The IP addresses connected to that switch would be 168.xxx.xxx.1, 168.xxx.xxx.3 and 168.xxx.xxx.34. The other vlan is for the DMZ for my firewall. The IP addresses in there are in the 168.xxx.xxx.15-30 range. I would like to assign an IP address to one VLAN for management purposes, but I don't see how I can assign one to the second VLAN because of overlapping IP addresses. Right now these connections are on different switches. Can I do this? Carl Carpenter Acting Director, Information Services Hill Country Community MHMR Center (830)258-5414
... View more
I'd rather be lucky than good, I guess. After spending a week getting the phone company to check out the circuits, they finally verified that they worked. They went to site A and used their test set to call site B successfully. So I began troubleshooting again. Replaced the ISDN card, replaced the router, replaced the cable. Nothing. I could ping the other router but only get 2/5 success. Put everything back and planned to go to site B. Turned the router back on and tried it again. 5/5. Tried pinging a server on the main network (one more hop). 5/5. Went up front to see about IP addresses. Computers already had them. As one of my guys said, "Who knew the router had to be rebooted 47 times to work?" Thanks for your help.
... View more
I will attach 3 files. Router-A.txt is from my first visit yesterday to Router-A. I'm using HyperTerminal and its Capture file feature, so the file looks a little weird at times. I tried to turn on and list everything that might be helpful. One of the interesting things is related to the pings. If I ping the network address of Router-B (192.168.7.1) it fails. If I ping the secondary address of Router-B(168.54.104.161 which used to be it's primary) I get some success. ?? Router-B.txt is my visit to Router-B after I couldn't get Router-A to ping or connect. You will also see some configurations from other similar routers on my network. Router-A2 is a return trip to Router-A, checking to see why it wouldn't reconnect when I cleared the connection at Router-B. Here's the sh ip int brief from Router-B: Fredericksberg_CM#sh ip int brief Interface IP-Address OK? Method Status Protocol FastEthernet0/0 192.168.7.1 YES NVRAM up up BRI0/0 192.168.7.1 YES TFTP up up Serial0/0 10.32.0.38 YES NVRAM up up BRI0/0:1 unassigned YES unset down down BRI0/0:2 unassigned YES unset down down
... View more
Part of the problem is solved. I had set 'security password min-length 8' on the Router A. The password for the router was only 4. But the system didn't care until the router got rebooted. Then, apparently because the password didn't meet the standard, the IOS didn't load that command. Hence, no username, and no authentication. As soon as I resolved that problem, the router dialed and connected. Now here's where it gets a little strange. The router immediately sent out NTP packets and got its clock set. However, I can not ping or connect to Router B or anything else. I went to Router B to check on its configuration. Nothing out of the ordinary. Compared it to two other similarly configured routers. Mind you, these routers have been running this way for several years. I also did a 'show cdp n' from Router B and that showed Router A. I am at a total loss (again). I do have a lot of debug info if there is something you want to see that would be helpful.
... View more
I don't have one from when I was there. Wish I did, although I do have a tftp copy. I just completed an exercise going through each of the routers and trying to make them more secure (according to Nipper). When it came the ISDN portion, though, I was careful to not mess with it. I know I saved to start when I saved to tftp which should be the last one, but there's no guarantee that I saved it to tftp if I made a minor change afterwards. I did discover in the Router B that the username for Router A was missing. Don't know how or why, but it was. The last copy saved to tftp had it. Re-added it, but none of the messages have changed. Does it look like Router A is the one failing to authenticate? That's how I'm reading the log. I have been comparing notes with older configurations and currently running A-types. Looks like a road trip coming up.
... View more
I notice that another router B-type has the following entries when I do 'show run': no network-clock-participate slot 1 no network-clock-participate wic 0 The two router B's that I'm having trouble with don't show those entries. I noticed the other day at the Router A site that those messages were displayed when the router was rebooted, but it didn't show in the log. Is this significant? It's not something I can add.
... View more
The connection lasts for maybe 2 seconds. I don't have (and can't get) show dialer and debug dialer for Router A (it's 1 1/2 hours away). I do have a debug isdn q931 output that I thought to capture on my laptop when I was there. See contents of Capture.txt Here are the results of 'debug dialer' on Router B (RouterB.txt) IP address 192.168.0.19 is a Linux machine running MRTG; 192.168.17.1 is Router A. Router B is not configured to make a phone call since Router A is configured to stay up 24/7. I can provide any outputs necessary from Router B.
... View more
Router A uses ISDN BRI to connect to Router B. Router B also has a T1 card that connects to our hub. Router A maintains a 24/7 connection. Up until last Friday I had no problems. Suddenly, Router B will receive the call from Router A and then disconnect it. Running 'debug isdn all' shows no error messages on Router B. Running 'debug isdn q931' on Router A shows no error messages. I have 5 such setups and two failed at the same time (thunderstorms?). Replaced the ISDN card, no effect. Phone company has verified that the ISDN circuits are working correctly. I REALLY need help on this.
... View more
Current configuration : 2208 bytes ! ! Last configuration change at 16:38:55 CST Thu Feb 2 2006 ! NVRAM config last updated at 15:59:41 CST Thu Feb 2 2006 ! version 12.1 no service pad service timestamps debug datetime localtime show-timezone service timestamps log datetime localtime show-timezone no service password-encryption ! hostname ScheibMR ! enable secret 5 ! clock timezone CST -6 clock summer-time CDT recurring ip subnet-zero ! spanning-tree extend system-id ! ! interface FastEthernet0/1 description Community no ip address ! interface FastEthernet0/2 description Bea-II (not used) no ip address ! interface FastEthernet0/3 description Carmilita no ip address ! interface FastEthernet0/4 description Jodie no ip address ! interface FastEthernet0/5 description Nurse no ip address ! interface FastEthernet0/6 description Conference no ip address ! interface FastEthernet0/7 description Laura no ip address ! interface FastEthernet0/8 description Darleen no ip address ! interface FastEthernet0/9 description Printer (4100) no ip address ! interface FastEthernet0/10 description Behavior no ip address ! interface FastEthernet0/11 description Bea-I no ip address ! interface FastEthernet0/12 description Brenda no ip address ! interface FastEthernet0/13 description Printer (4000) no ip address ! interface FastEthernet0/14 description Donna no ip address ! interface FastEthernet0/15 description Michele no ip address ! interface FastEthernet0/16 description Susan no ip address ! interface FastEthernet0/17 no ip address ! interface FastEthernet0/18 no ip address ! interface FastEthernet0/19 no ip address ! interface FastEthernet0/20 no ip address ! interface FastEthernet0/21 no ip address ! interface FastEthernet0/22 no ip address ! interface FastEthernet0/23 no ip address ! interface FastEthernet0/24 description Scheib MH Switch no ip address ! interface Vlan1 ip address 192.168.2.3 255.255.255.0 no ip route-cache ! ip default-gateway 192.168.2.2 ip http server ! snmp-server engineID local 800000090300000AF4FABF01 ! line con 0 line vty 0 4 password login line vty 5 15 password login ! ntp clock-period 17179909 ntp server 128.249.1.1 end
... View more