After removing all HSRP groups from mv 3550,  also 12.2(44)SE6 (just one svi and one routed "no switchport" interface) and trying to configure "no standby version 2" or "standby version 1" on either, i get the message % Warning: Current config does not permit HSRP version 1. and no configuration change. So do i really need to write a static new config.text and reload the device to get rid of the broken hsrp version 2 ? Thank you for advice, Juergen. ... View more

Adam, the problem with dialer 0 is, that it will not go down, so the default route pointing to it will not disappear. In the ISDN/BRI/Modem case, that is fine, since outgoing traffic gets routed to the interface which is "up (spoofing)" and triggers (thru the dailer-group/list pair) the dail-out process. For allways-online xdsl "dial-"connections with "dialer persistent" and "time-flat" charging, this brings those backup problems. One solution is, iff the remote side never changes and has allways the same IP adress (on my dail-infrastructure this is true, even over several dial-in devices. On the backup interface, i have "no peer neighbor route". You may set the "dsl" default route to the IP of the ISP's router (that is the peer-ip-address for which the router installs noramlly a host route to the dialer interface). During successful login, you see this ip address using "show users" . For the backup dialer, the default-route may then go to the dialer interface with higher "cost" . An other solution would be a track monitoring the state of the atm0 interface an discarding the default route to your dialer0 track 11 interface ATM0 line-protocol ip route 0.0.0.0 0.0.0.0 dailer0 track 11 The dialer watch is not nessassary if you want to dail the backup-device on demand. The dialer watch watches the route and calls the backup line when the route disappers. Discussion of the differnet backup-strategies in http://www.cisco.com/en/US/tech/tk801/tk133/technologies_tech_note09186a008009457d.shtml if the route you watch is the host-ip of the remote-side, you should use this as the next hop fore the normal/dsl default-route and remove the dialer watch commands. Hope this help's, Juergen. here, you have a floating staic route as the default route which gets recursively resolved when the peer neighbor (host)-route gets installed during PPP negotiation of the main interface. If dsl goes down, or the ppp data flow stoppes (even when dsl is in sync!) the interface will go down ofter 5 ppp lcp keepalive packets got lost. Default (cisco) is every 10 seconds to send a keepalive, most xDSL Carrier equipment and home-routers use every 30 seconds. Tune with keepalive 1 to every one second, may not work depending on Carrier and ISPside. After that, the peer neighbor route diappers. The default route will be dropped when the process checking them runs next, you may tune that with ip route static adjust-time 10 to every 10 seconds (works on 87x without too much cpu load). gate#sh users ... Interface User Mode  Idle     Peer Address Vi1            PPPoE 00:00:00 aaa.bbb.ccc.ddd gate# sh run ! ... interface Dialer0 description DSL Dialer dialer pool 1 dialer idle-timeout 0 dialer persistent dialer-group 1 no cdp enable !... ! interface Dialer1 description ISDN/PSTN Dialer Backup dialer pool 2 dialer-group 2 no peer neighbor-route no keepalive no cdp enable ! ... ! ip route 0.0.0.0 0.0.0.0 aaa.bbb.ccc.ddd ip route 0.0.0.0 0.0.0.0 dialer1 100 ! ... ... View more

You want to use VRF 's to seperate the two differnet Upstrems and the Custormer's LAN. This will make things much easier and more elegant without route-maps etc. Works also with cable providers and WAN-IP by dhcp. On the mutlilink gre-tunnel, you can select a) which vrf if for the inside tunnel traffic b) which vrf is for the gre/ip packets .    This will probably inherited by the tunnel source interface command. Yes, this works ! (tested on multiple 87x er) Juergen. ... View more

Adam, i am very sure that the 87x CON/AUX may function as AUX port since we had some devices (hanging firewalls) serial console connected to it, and then telneted to router-ip 2001 . (876, 878 and , yes, we have a 877 in UK). line con 0 modem enable did the trick. Either the modem autoconfig or the modem are changing speed on the port to see which one works... debug confmodem should show you whats going on. try:"no flush-at-activation" on the line aux 0 . Juergen. ... View more

Adam, at least your config must have ! line con 0 modem enable ! so the logical line aux 0 is connected to the physical port. You may try to speak with the modem by " telnet router-ip 2001 " I strongly recommend USR Courier Modems since you can program them per DIP Jumpers, so forgetting config-settings in their nvram after some weeks or months powered off will be no issue. Some "white" USR Sportsterr Modems had those Jumpers also . Find attached relevant Parts of the working configuration of a 1720 with real aux port (line 5 ---> int async 5, telnet ... 2005 ) and USR Courier Modem. Hope this help's, Juergen. ... View more

(This thread should be in LAN, switching) The Linksys (web-)managed "smart" Switch may have spanning-tree enabled. Those devices are not so dumb as many other el-cheapo so called switches . Probably, the port of your core switch is configured as an access-port with bpduguard, shutting down the port when an spanning-tree bpdu beeing recieved. - How is the Port on your core-switch configured ? - How is the "uplink" port on the slm2048 configured ? - Does this fit ? - Is spanning tree working between the switches? - really ? What does the core-switch tell you (show logging) about whats happening on that port ? Juergen. For the electrical RJ45 4 pair Gigethernet cabeling you do not need Crossovercables. When using a crossovercable, all 4 pairs (1-2, 3-6, 4-5, 7-8) must be connected, not only the "fastethernet" two pairs (1-2, 3-6)  and it will work too. Nachricht geändert durch j-marenda ... View more

Pardon, i had seen this on our two 1130ag when they were brand new before up/downgrading them to be LW (and were unconfigured) and bringing them under WLC control. Did not want to lay out a false hint, sorry. Juergen. ... View more

sure, i just attached the config. ten0/1 and ten 0/2 go to routers, generating lots of traffic. gig0/47 to a line with limited bandwidth and some vlans on it and a router at the end and gig0/2 to a bandwidth limited line with one access vlan to check functionality of per-port-per-vlan qos (my post form 5.1.2011) Hope this helps, but this is work in progress and may not function as desired, use at your own risk. Juergen. ... View more

.. so the dhcp relay was not running. ... View more

No, the src is not changed, but the routers ip address with the helper-adress recieving the dhcp-request will be put into the gi-addr dhcp field to be able to distinguish different remote lans. Just seen as "via..." on linux dhcp server. From http://www.cisco.com/en/US/docs/ios/12_4t/ip_addr/configuration/guide/htdhcpre.html : ..., the DHCP client broadcasts a request for an IP address and additional configuration parameters on its local LAN. Router B, acting as a DHCP relay agent, picks up the broadcast and generates a new DHCP message to send out on another interface. As part of this DHCP message, the relay agent inserts the IP address of the interface containing the ip helper-address command into the gateway IP address (giaddr) field of the DHCP packet. This IP address enables the DHCP server to determine which subnet should receive the offer and identify the appropriate IP address range to offer. The DHCP relay agent sends the local broadcast, via IP unicast, to the DHCP server address 172.16.1.2 specified by the ip helper-address interface configuration command. probably the (default-)behaviour of the dhcp-relay has been changed, and needs to be configured now ? Juergen. ... View more

On the 88xW Routers, the wireless Module is a device independant of the router (ok, its connected to the on-board-switch and gets some power and configuration interface). Simply, the access-point tries to boot, that is: get ip -adresse etc, seek configuration, probably seek for a wlan-controller, etc. If this fails for some time, it relaods. That is the normal behaviour, also found on say 1131G accespoints. (In the worst case, they have only the light-wight firmware and are very unhappy not to find their wlan-controller). I would suggest trying to configure the wlan part of the 88xW (problay shutting down wlan) to keep it quit. Juergen. ... View more