Advantages of an End-to-End Cisco LAN

Hi ALL,
I am trying to build a technical case for deploying Cisco end-end.
The current plans are to have a Cisco Core and try to re-use other vendor access layer switches. This environment will be running VoIP, multicasting, and some Video conferencing.
Any technical/operational reasons for going down the Cisco end-end route.
Thanks in Advance.

Thanks for that.
Taking the above in order:
QoS: if the traffic if marked appropriately, at L2/L3, then provided that the Cisco/3rd part devices are configured correctly then will this still be an issue. Or is there more to it than this.
Security/Features/Functionality: what in particular would you loose.
ROI: is this just from having to employ someone with Cisco skills, or are there any other things that need to be factored in.
Cheer.

Similar Messages

Premiere Pro CS6 to Take Advantage of High-End Hardware

Here is an interesting video where David Helmly of Adobe demonstrates the advantages of Xeon processors plus a Quadra 2000 and a Tesla 2750 in a Maximus configuration. Evidently Premiere Pro CS6 has been redesigned to take advantage of higher end hardware that only demonstrated a marginal performance advantage in CS5 - CS5.5. David also mentioned increased program stability. The 2750 must be a new card, perhaps under development. I couldn't find mention of it anywhere online, Nvidia's Website etc.
Here is the video
Other Tesla cards I looked at were in the $4000 range. Would like to look at benchmarks of the very high-end system David spoke of in the video.

James.. It's probably too technical for me to explain, but see this link: http://www.tomshardware.com/reviews/xeon-e5-2687w-benchmark-review,3149-10.html from a recent review by Tom's Harware Review. I was originally expecting that a 3930 would produce output much the same as a similarly clocked E5 Xeon, however, there seems to be more to the puzzle. FYI, E5-1600 series are single socket CPUs, E5-2600 are for dual socket boards. A "W" on the end denotes workstation processor. Hope this helps.
I'm also in need of upgrading (Pr-Pro 5.5 with an older Bad-Ax2 MD w/quad X6700 CPU - ancient for HD needs). Was considering a 3930 or new i7-3770 Ivy Bridge set up, but maybe should consider spending big bucks $$$. By the way, I found a 460GTX, at a good price, with 336 Cuda cores and ran the hack. It does help quite a bit, but 1080P AVCHD still is tough on the timeline.
Curious to get your takes on the Toms reviews/ benchmark results.
Doug A

HTTP and SMB over Cisco LAN-to-LAN IPSec-VPN

we are connecting Cisco 887VA router with various other Non-Cisco routers.
VPN tunnels are up and we can ping devices on the remote network through the VPN.
However, we have a few devices (on the Cisco lan) that provide a web interface (NAS etc) and these are not accessible over the VPN, the connection seems to just hang like its waiting for a response but it never gets one and eventually the browser times out.
Strangely, if I request a page that does not exist from the NAS (eg. http://192.168.3.x/test) I will receive a 404 error so it is kind of working.
Similar problems with SMB, if I access \\192.168.3.x I can list the content (4 items) but if I go into one of those folders (containing 10+ items) it hangs and eventually gives up.
I have tried adjusting MTU and MSS with no change.
Any ideas cause I'm running out of hair
My config is attached, it is most likely a mess as this is my first Cisco device so please go easy

Hi,
i can get you a example VPN config (Cisco 1841) that works:
//192.168.49.0 INSIDE IP | 192.168.0.0/16 and 172.20.0.0/24 RemoteSite IP
access-list 102 permit ip 192.168.49.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 102 permit ip 192.168.49.0 0.0.0.255 172.20.0.0 0.0.0.255
access-list 150 deny ip 192.168.49.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 150 deny ip 192.168.49.0 0.0.0.255 172.20.0.0 0.0.0.255
access-list 150 permit ip 192.168.49.0 0.0.0.255 any
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key CRYPTOKEYHERE address REMOTEWANIP
crypto isakmp keepalive 30
crypto ipsec transform-set SETNAME esp-aes esp-sha-hmac
crypto map B2B 10 ipsec-isakmp
description b2b-fw
set peer PEERWANIP
set security-association lifetime seconds 86400
set transform-set SETNAME
match address 102
interface FastEthernet0/0
description wan_primary
crypto map B2B
ip nat outside
interface FastEthernet0/1
ip nat inside
route-map nonat permit 10
match ip address 150
ip nat inside source route-map nonat interface FastEthernet0/0 overload
Regards
Markus

Cisco LAN Management Solution is required to support Cisco Nexus 5548P and 5596UP switches?

Hi,
Could someone help to know what Cisco LAN Management Solution is required to support Cisco Nexus 5548P switches and Cisco Nexus 5596UP switches?
These new Cisco switches are being implementing on customer network and he ask us that he requires these equipments be supported on a LMS solution (customer currently is using LMS 3.2.1)
Can someone help?
Thanks in advanced,
guruiz

Some very limited Nexus support is present in LMS 3.2.1 - see the supported device table here.
To get more complete support, including the 5596UP, they need to upgrade to LMS 4.x (e.g. LMS 4.2.2 is the latest and is sold under the Cisco Prime Infrastructure 1.2 umbrella). The major upgrade from 3.x to 4.x requires purchasing an upgrade license.
Some functions (namely User Tracking ) will not be available on the 5k due to non-support of the requisite MIB on the device. I believe LMS still doesn't let you do VLAN management on 5k's - you need to use DCNM for that if you want to do it from a GUI.
See the table here for LMS 4.2 device support.

No Audio on either end Cisco Jabber for Windows over Cisco AnyConnect

Our telephony staff is replacing our aging/unsupported VoIP system with a Cisco system and as the network tech, I'm trying to get Jabber for Windows to work over our AnyConnect VPN client. Jabber to Cisco phone and Jabber to Jabber calls work fine within our LAN.
However, when I take a laptop to a separate internet connection and connect to the network via the VPN, I can't get any audio to pass across the system, in either direction. If I call a phone on our LAN using the Jabber client (via AnyConnect), the phone rings and when I answer it, it's just dead air on both ends. If I reverse the process, calling from the phone to the Jabber client, the same thing, Jabber client rings, but dead air both ways once I answer.
Things I can do from the laptop over the VPN connection:
I'm able to get to the phone's web interface using that same laptop.
I can ping the phone as well. In fact, the VPN profile I'm using has full access to the entire VoIP Vlan including all IP traffic (all ~65,000 ports).
Searching the address book also works fine. I can search for staff and it's pulling directly from our Active Directory environment.
Is there any special settings on the firewall that I need to setup to allow the voice traffic (which I assume is RTP traffic)? I tried to add a service policy for RTP traffic, but that didn't seem to work...unless I built it wrong.
Jabber for Windows - 10.6.0
Cisco Anyconnect - 3.1.06079
Cisco 5515-x ASA - 9.2

I was able to resolve this on my own. I thought that SIP traffic needed to be inspected via the global inspection policy in order for it to pass through the firewall. I ran into the same issue with ICMP traffic from an Anyconnect client to LAN devices. I had to enable ICMP in that policy for us to be able to ping LAN devices over the VPN tunnel. So when I saw that SIP was already being inspected by this policy, I moved on looking for other solutions. Then I stumbled deep within a Google search (almost hit the end of the Internet doing so) where someone mentioned that SIP shouldn’t be inspected by that policy. So I unchecked it and bam! Voice is now working over the anyconnect client to phones on the LAN.

WUMC710 Won't Connect To High-end Cisco Routers

I just dropped some pretty big bucks on a shiny new Linksys / Cisco AC 1300 / WUMC710 Wireless Bridge, mainly because it was both gigabit speed and it had multiple ports available. It is flashed-up to the latest firmware. The configuration went pretty well and I was able to set the SSID with no trouble, but when I tried to do the "Site Survey" it only found one of the neighbors' networks, even though it was only a few feet away from my new Cisco RV180W Wireless-N router, which was open with no security whatsoever enabled and the SSID set. The computer was a fairly new Dell desktop running 32-bit Windows 8.1 Professional with a Realtek gigabit NIC and Cat6 patch cable. No connection was ever made even though, as I mentioned, the SSID was set to match the router's and no security was in place on either the bridge or the router. Of course, the computer connected perfectly via a hardwire connection.
Next I took it to another location where I had another fairly new Dell desktop running 32-bit Windows 7 Professional with an Intel gigabit NIC using a Cat6 patch cable and where this time there was a Cisco WRVS4400N Wireless-N router which has had various and sundry devices, from wireless printers to iPhones and everything else under the sun connected to it with no problem whatsoever (no wireless devices were present at this particular time, though); the network SSID name on it was the same as at the other place so I didn't need to change that on the bridge. This router also had open (no) security so I didn't have to monkey around with that on the bridge either. Now you would think, given the pre-configuraton, that the bridge would have immediately connected to this router but no such luck. And then to add insult to injury, when I tried to do a "Site Survey" I was able to access the internal setup program just fine but not only did it not find the new (or any other, for that matter) network, it would freeze up and make me have to bail out of setup and start the process over and over again. Today I dug-up an old, ancient Linksys WET54G (v3) Wireless-G Bridge that I had had buried in my junk box for years, plugged it in and it immediately found my router and connected, without me even configuring the thing. Then I took it over to the other location and it did exactly the same thing, without hesitation. So somebody out there (a Linksys guy or whoever) please enlighten me as to just what the Devil is wrong with my new state-of-the-art bridge to cause this kind of disfunction. I've also used and installed several Linksys / Cisco WAP610N Wireless-N access points with no problem at all; setup on these units was a snap and they connected immediately every time. I would have gotten one except (as stated above) I wanted the gigabit connection speed and the extra ports. Any advice would be welcome, from troubleshooting to some Magic Bullet which will make the crummy thing come back to life. If my old antique Wireless-G Bridge can connect-up immediately then what on Earth is keeping this new, high-powered one from doing so? Thanks & standing by...

You are probably not going to like this.
The RV180W is not Dual Band meaning it doesn't have a 5Ghz radio
The WUMC710 is a 5Ghz only high performance wireless bridge.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Advantages of Using Secure Connect in Cisco Jabber Version 9.0

Hello,
About a month ago we deployed Jabber for iPhone. For VPN we used Cisco AnyConnect,certificate authentication and VPN on demand. We used our MDM to deploy the certificates and AnyConnect configuration. So far everything is working as designed. Now with the release of version 9, Secure Connect is an option and I was wondering what are the advantages of using Secure Connect?
Thanks

Hi Manrico,
Are the all the systems using the same firewall policy. It could be one of the rules configured in the SEP client. What build version are you running? Are all systems using the same version of VPN client? As Parminder stated, you should disable the firewall and check behavior.
If the firewall is found to be the cause, you can troubleshoot by adding an "Allow All" rule to the top of the SEP policy. Moving the rule down one line at a time until the problem occurs again. Once that happens, you will have narrowed it down to the rule just above.
Let us know how it goes for you.
Best,
Thomas

IP messenger in cisco lan

Hi ,
I want to block the IP Messenger in my university campus. I have multiple VLAN.
I have large LAN environment with cisco 2960 and cisco 3750 series switches.

georgemc wrote:
DrClap wrote:
How did you convert "DNS" into "JNDI"?Easy. Reverse the order of D and N, then split S into J and I. I is the 9th letter of the alphabet, J is the 10th, and S is the 19th. 10 + 9 is 19. Bookend ND with that, and Bob's yer uncleAnd since from your perspective, the above was written by "I", and since capital "I" looks like a number one, we see that 9 for I and 10 for J with 1 added becomes 9 and 11, which proves that you were responsible for the 9/11 attacks. And since your name is George, and an M is an upsidedown W and C is a play on "See", which you thought nobody ever would, you must be Dubya. Ergo, the attacks were a conspiracy at the highest levels of government, QED.

Cisco lan setup

Hi all, When setting up a proper 3 layer model, i.e core,distribution,access what do they normally do, would you put the vlans on the distribution and have them routed there, or routed at the core ?

The Core Layer :
The core layer provides an optimized and reliable transport structure by forwarding traffic at very high speeds. In other words, the core layer switches packets as fast as possible. Devices at the core layer should not be burdened with any processes that stand in the way of switching packets at top speed. This includes the following:
Access-list checking
Data encryption
Address translation
The Distribution Layer :
The distribution layer is located between the access and core layers and helps differentiate the core from the rest of the network. The purpose of this layer is to provide boundary definition using access lists and other filters to limit what gets into the core. Therefore, this layer defines policy for the network. A policy is an approach to handling certain kinds of traffic, including the following:
Routing updates
Route summaries
VLAN traffic
Address aggregation
Use these policies to secure networks and to preserve resources by preventing unnecessary traffic.
If a network has two or more routing protocols, such as Routing Information Protocol (RIP) and Interior Gateway Routing Protocol (IGRP), information between the different routing domains is shared, or redistributed, at the distribution layer.
The Access Layer :
The access layer supplies traffic to the network and performs network entry control. End users access network resources by way of the access layer. Acting as the front door to a network, the access layer employs access lists designed to prevent unauthorized users from gaining entry. The access layer can also give remote sites access to the network by way of a wide-area technology, such as Frame Relay, ISDN, or leased lines.
HTH,
Thanks
Raj

Metropolis DMX Multiplexer or Higher End Router

hello to all,
i want to understand which one is best Metropolis DMX Access Multiplexer or Higher End Cisco Router?
some where i read that DMX mulitplexer is used to fill up the bandwidth gap... it means it will divide DS3 to multiple T1 or can combine multile T1 to DS3... right... now we can do it with router also if we are usind 10000 cisco router with DS3 modules and T1 card then also we can have same workout... so which one is best? and Why?
regards
Devang

Hello Devang,
the first question in a design study is: what are the requirements?
Based on that one could then look for the required features and finally hardware/software can be picked.
In other words, to define "best" one needs some explanation about the "rating system".
Based on the requirements the answer also might be: "Neither DMX nor High End Router will be best".
Regards, Martin

Route ISDN Voice calls over LAN/WAN

Is it possible within the relms of normal Cisco LAN to have an ISDN Line coming into one building, Connect it to a LAN/WAN so we could pick up the voice calls on the ISDN on the other end, In a different location?

There are no CCM logs to tell you that, CUCM has nothing to do with the RTP, this is usually QoS issues, you always hear "nothing has changed" but they often overlook things they think are not worth mentioning, or that they think would have nothing to do. Make sure really nothing has changed.
The only way to look at this would be to run a sniffer trace on both ends to see what you send, and you receive.

Extending SAN&LAN over dark fiber (DWDM)?

Hi, sorry for my English, but I hope you understand me, and I understand your answers:)
We are in the process of adding new data center (DC2), which will be geographically located about 20 km from our existing data center (DC1). Between them laid dark fiber (two fibers). We need a solution for the LAN(layer 2) and SAN(native FC) extension ...
Solution is to see me use two passive EWDM-MUX8 at both ends of dark fiber with DWDM transceivers on the equipment in the DC1 & DC2.
For Ethernet, we propose to use Cisco 10GBASE DWDM X2 Modules (p/n:DWDM-X2-xx.xx =) - equipment at both ends supports these modules.
For FC we propose to use DWDM SFP Modules for Cisco ONS Family (p/n:ONS-SC-4G-xx.x =).
SAN equipment at both ends - Cisco MDS 9124 (p/n:DS-C9124AP-K9).
But I'm not entirely sure of the correctness of this decision, especially in SAN extension.
Is this workable solution?
Does the Cisco MDS 9124 supports this transceivers (ONS-SC-4G-xx.x=)?
There are other potential pitfalls are not visible to me?
In advance, thanks for the advice.

For ethernet, your decision is correct.
For SAN, things get a little dicey. The MDS 9124 doesn't support the ONS transcievers, and the FC 4G LH transciever is limited in distance to about 10 km.
If it were me, I would do things a little differently. I would put a Nexus 5000 series at each end of your dark fiber, with a 20 GB etherchannel trunk between them. Each nexus would then be connected to your data center ethernet network via 10 gig ethernet, and to your MDS's via 2/4/8 gig FC. The nexus could then be set up such that FC traffic destined for the other end will be encapsulated in ethernet, sent over the link, unencapsulated at the other end, and sent to the appropriate FC host.
It's relatively easy, simple to operate, and no mucking around with DWDM/CWDM, which can be a very complex animal.

Cisco IOS NTP: "show ntp associations" versus "show ntp status"

what is the difference of the commands "show ntp ass det" and "show ntp status" ?
these commands differs on the referenced time source.
switch#sh ntp ass detail
Load for five secs: 17%/4%; one minute: 20%; five minutes: 20%
Time source is NTP, 10:45:15.469 MET Tue Feb 4 2014
10.1.5.4 configured, ipv4, sane, valid, stratum 2
ref ID 154.71.99.39   , time D69B3383.9D414772 (10:38:11.614 MET Tue Feb 4 2014)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 0.38 msec, root disp 5.93, reach 377, sync dist 11.77
delay 0.84 msec, offset 0.3778 msec, dispersion 1.06, jitter 0.97 msec
precision 2**21, version 4
assoc id 26601, assoc name 10.1.5.4
assoc in packets 12339, assoc out packets 12361, assoc error packets 28
org time 00000000.00000000 (01:00:00.000 MET Mon Jan 1 1900)
rec time D69B347C.4ACDE42A (10:42:20.292 MET Tue Feb 4 2014)
xmt time D69B347C.4ACDE42A (10:42:20.292 MET Tue Feb 4 2014)
filtdelay =     0.88    0.87    0.85    0.90    0.84    0.90    0.89    0.87
filtoffset =    0.31    0.31    0.32    0.28    0.37    0.32    0.25    0.31
filterror =     0.97    1.00    1.03    1.06    1.09    1.12    1.15    1.18
minpoll = 6, maxpoll = 10
FD8C:2208:32F7:8EA::5 configured, ipv6, our_master, sane, valid, stratum 1
ref ID .PPS., time D69B318B.92FDD88A (10:29:47.574 MET Tue Feb 4 2014)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 0.00 msec, root disp 0.42, reach 377, sync dist 17.18
c4507r01#show ntp status
Load for five secs: 19%/4%; one minute: 20%; five minutes: 20%
Time source is NTP, 10:42:03.441 MET Tue Feb 4 2014
Clock is synchronized, stratum 2, reference is 81.201.114.7
nominal freq is 250.0000 Hz, actual freq is 249.9987 Hz, precision is 2**10
ntp uptime is 752342800 (1/100 of seconds), resolution is 4016
reference time is D69B2950.47571873 (09:54:40.278 MET Tue Feb 4 2014)
clock offset is 0.9771 msec, root delay is 0.94 msec
root dispersion is 47.43 msec, peer dispersion is 1.03 msec
loopfilter state is 'CTRL' (Normal Controlled Loop), drift is 0.000005068 s/s
system poll interval is 1024, last update was 2881 sec ago.
switch#sh ntp associations
Load for five secs: 18%/4%; one minute: 20%; five minutes: 20%
Time source is NTP, 10:53:12.750 MET Tue Feb 4 2014
address         ref clock       st   when   poll reach delay offset   disp
+~10.1.5.4      154.71.99.39     2    690   1024   377 0.848   0.377 1.069
*~FD8C:2208:32F7:8EA::5
                  .PPS.            1    400   1024   377 0.931   0.892 1.007
* sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

Its hard to find expert on switches/IOS on the Network Management Forum, which is for NMS applications.
You should post this thread on Switching community of CSC forum.
Though, what i can suggest is to use SNTP. Certain low-end Cisco devices only support SNTP. SNTP is a simplified, client-only version of NTP. SNTP can only receive the time from NTP servers and cannot be used to provide time services to other systems. SNTP typically provides time within 100 milliseconds of the accurate time. In addition, SNTP does not authenticate traffic, although you can configure extended access lists to provide some protection. An SNTP client is more vulnerable to misbehaving servers than an NTP client and should only be used in situations where strong authentication is not required.
SNTP may not be much of an alternative because it is not widely supported in software.
You can use command # sntp server. SNTP generally is supported on those platforms that do not provide support for NTP.
Device (config)# sntp server {address | hostname} [version number]
For more clarification post this to Lan Switching and Routing section.
-Thanks
Vinod
**Rating Encourages contributors, and its really free. **

WAN encryption in cisco 805

Hi,
I need to configure WAN encrption between the two Cisco 805 routers.
Appreciate if you can help me in configuring.I am new to routers.
The items choose are as below:
Description Qty
Cisco 805 Serial Router 2
Cisco 805 Series IOS IP/FW PLUS IPSEC 3DES 2
Cisco 805 8-MB to 12-MB DRAM factory upgrade 2
Cisco 800 8MB to 12MB Flash Factory Upgrade 2
V.35 Cable, DTE Male to Smart Serial, 10 Feet 2
Regards,
Prashanth

The Cisco 805 Serial Router provides IPSec encryption technology to enable small offices and telecommuters to deploy VPNs. IPSec encryption provides privacy, integrity, and authenticity for transmission of sensitive information over the Internet. The unique end-to-end Cisco offering allows customers to implement IPSec encryption transparently into the network without affecting individual PCs. The Cisco 805 Serial Router with IPSec encryption allows significant cost savings by using the Internet to create secure connections between small offices and teleworkers. As a component of the Cisco VPN solution, the Cisco 805 Serial Router supports:
IPSec tunneling with 128- or 56-bit Data Encryption Standard (DES or Triple DES [3DES])
Layer 2 Tunneling Protocol (L2TP)
Generic routing encapsulation (GRE)

Cisco DPC3925 vpn with Netscreen FW

Hi All
I am trying to get up an point to point VPN between a Cisco DPC3925 and a netscreen 5GT Firewall
I have configured up everything as i think it should, i belive the phase one and phase two are both configured ok, if i change the phase one settings to something different then i will get a different error
on the cisco I am using Auto Ike, with a shared key and PFS - both phase one and phase two are set the same at both ends cisco / netscreen
I'm pretty savy with the netscreen so I can pretty much pull out what ever data is needed, not so much with the cisco as the config options seem quite limited
When I try to connect, the VPN log on the CISCO shows the below, but on the netscreen it thinks that phase one Negotiations are complete (in logs etc)
The netscreen seems to be much more configurable than the CISCO, so i guess i need to change something on that but im not sure what
I know I haven't provdided much info on my config, but I was hoping someone may be able to give me abit more of an idea of what the cisco is expecting to receive ftom the netscreen that its not getting from the logs, I have chaged the external IP's in this log, the log goes from the bottom up as thats how the cisco dumps it
Anything obvios stand out to anyone?
1.1.1.1 is the Cisco,, 2.2.2.2 is the netscreen
Thu Sep 13 14:49:53 2012    IKE Phase 1 Negotiation FAILED 1.1.1.1==>2.2.2.2
Thu Sep 13 14:49:47 2012    phase2 negotiation failed due to time up waiting for phase1. 02.2.2.2 ==>1.1.1.1
Thu Sep 13 14:49:43 2012    error -1 process rcvd packet
Thu Sep 13 14:49:43 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1
(origCookie=e3 4e 2c 81 b7 2a 40 e3 , respCookie=58 0a 56 24 e8 3d 78 f4 )
Thu Sep 13 14:49:32 2012    error -1 process rcvd packet
Thu Sep 13 14:49:32 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1 (origCookie=e3 4e 2c 81 b7 2a 40 e3 , respCookie=58 0a 56 24 e8 3d 78 f4 )
Thu Sep 13 14:49:26 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1 (origCookie=16 60 41 e5 51 8e b9 43 , respCookie=39 0e 63 70 48 49 36 7b )
Thu Sep 13 14:49:26 2012    unknown Informational exchange received.
Thu Sep 13 14:49:21 2012    error -1 process rcvd packet
Thu Sep 13 14:49:21 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1 (origCookie=e3 4e 2c 81 b7 2a 40 e3 , respCookie=58 0a 56 24 e8 3d 78 f4 )
Thu Sep 13 14:49:11 2012    error -1 process rcvd packet
Thu Sep 13 14:49:11 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1 (origCookie=e3 4e 2c 81 b7 2a 40 e3 , respCookie=58 0a 56 24 e8 3d 78 f4 )
Thu Sep 13 14:49:01 2012    error -1 process rcvd packet
Thu Sep 13 14:49:01 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1 (origCookie=e3 4e 2c 81 b7 2a 40 e3 , respCookie=58 0a 56 24 e8 3d 78 f4 )
Thu Sep 13 14:48:50 2012    error -1 process rcvd packet
Thu Sep 13 14:48:50 2012    Bad IKE packet received 2.2.2.2 ==>1.1.1.1(origCookie=e3 4e 2c 81 b7 2a 40 e3 , respCookie=58 0a 56 24 e8 3d 78 f4 )
Thu Sep 13 14:48:50 2012    invalid ID payload.
Thu Sep 13 14:48:49 2012    IKE Phase 1 Negotiation Started 1.1.1.1==>2.2.2.2

Hi Tony,
Thank you for your question. However this community is for Cisco Small Business Products and the DPC3925 is not a Cisco Small Business Product.
Your product is an internet service provider (ISP) supported product. In other words you need to contact your ISP or technology reseller that you purchased this from to help you with your question.
I did some research and found the following links on the DPC3925 that may be of help.
http://www.cisco.com/web/consumer/support/modem_DPC3925.html
http://www.cisco.com/web/consumer/support/prod_modems.html
http://www.cisco.com/web/consumer/support/modem_DPC3925.html#~drivers
Regards,
Cindy Toy
Cisco Small Business Community Manager
for Cisco Small Business Products
www.cisco.com/go/smallbizsupport
twitter: CiscoSBsupport

Advantages of an End-to-End Cisco LAN

Similar Messages

Maybe you are looking for