Choose Cisco Routers to impliment a large network

Hello i am a student and i am working on a project consisting on creating a large network for a big company which has different sites in different countries and different departments in each site (about 70 users in each department).
I have to choose the appropriate routers with the appropriate IOS permetting me to impliment a DNS server , an FTP server, a HTTP server, a DHCP sever, a Syslog server also using SSH protocol for remote control of the routers.
Thank you for your help.

Are you sure that it is WRT900N ??
I think it is WRT600N !!

Similar Messages

Two Cisco Routers in one class-c network

Hello,
i have two cisco routers, which are connected to one switch. On this switch, there are several servers connected as well.
When i connected the second cisco router, i got messages on the first router, that there is an ip address conflict. After a few minutes it seems as if the vpn tunnel on the first router breaks down because of this conflict. I'm not sure about this, but when i disconnected the second router again, the vpn tunnel could be established again. The vpn tunnel goes to another router via WAN and ends in the local class-c network, where both routers are in.
Router1
LAN 192.168.105.254 (255.255.255.0)
WAN 212.xxx.xxx.xxx
||
||
Cisco Switch
||
||
Router2
LAN IP 192.168.105.253 (255.255.255.0)
WAN IP 217.xxx.xxx.xxx
Router1
int fa 0/1
ip address 192.168.105.254 255.255.255.0
Router2
int fa 0/1
ip address 192.168.105.253 255.255.255.0
Could the /24 mask on the interfaces cause the conflicts?
From the servers, none has the ip 192.168.105.253 or 192.168.105.254 and if i disconnect Router2, the IP 192.168.105.253 is not reachable from any system on the switch.
So how does this ip address conflict occur?

hello,
can you check the router 1 log. with error message you should have a mac address
May 10 05:32:20.489: %IP-4-DUPADDR: Duplicate address 10.10.10.1 on GigabitEthernet0/1.1, sourced by 0003.oc12.a2c3
This should help you to identify host already with 192.168.105.253.
Before connecting Router 2, from Router 1 ping 192.168.105.253 and do a sh arp ?
HTH,
regards,
cisand

Ask the Expert: Packet Capture Capabilities of Cisco Routers and Switches

With Rahul Rammanohar
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about packet capture capabilities of Cisco routers and switches.
In May 2013, we created a video that included packet capture capabilities across multiple Cisco routers and switches. For each product, we began with a discussion about the theory of the capabilities, followed by an explanation of the commands, and we concluded with a demo on real devices. In this Ask the Expert event, you’re encouraged to ask questions about the packet capture capabilities of these Cisco devices:
•       7600/6500: mini protocol analyzer (MPA), ELAM, and Netdr
•       ASR9k: network processor capture
•       7200/ISRs: embedded packet capture
•       Cisco Nexus 7K, 5K, and 3K: Ethanalyzer
•       Cisco Nexus 7K: ELAM
•       CRS: show captured packets
•       ASR1K: embedded packet capture
More Information
Blog URL: Packet Capture Capabilities of Cisco Routers and Switches
Watch the Video: https://supportforums.cisco.com/videos/6226
Hitesh Kumar is a customer support engineer in the High-Touch Technical Services team at Cisco specializing in routing protocols. He has been supporting major service providers and enterprise customers in routing, Multiprotocol Label Switching (MPLS), multicast, and Layer 2 VPN (L2VPN) issues on routing platforms for more than three years. He has more than six years of experience in the IT industry and holds a CCIE certification (number 38757) in service.
Rahul Rammanohar is a technical leader with the High-Touch Technical Support Team in India. He handles escalations in the area of routing protocols and large-scale architectures for devices running Cisco IOS, IOS-XR, and IOS-XE Software. He has been supporting major service providers and large enterprise customers for routing, MPLS, multicast, and L2VPN issues on all routing platforms. He has more than 13 years of experience and holds a CCIE certification (number 13015) in routing/switching and service provider.
Remember to use the rating system to let Hitesh and Rahul know if you have received an adequate response.
Because of the volume expected during this event, Hitesh and Rahul might not be able to answer each question. Remember that you can continue the conversation in the Service Provider, sub-community forum shortly after the event. This event lasts through November 1, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hello Erick
    Thanks for the topology. The trigger will be different for labelled packet as you would need to mention the values of labels too in the trigger.
     Below are two examples of one or two labels being used, it depends on where you are capturing the packet in mplsvpn scenario which will decide teh number of labels being imposed on the packet.
Trigger for one label. (if the router on which you are capturing the packet PHP is being performed)
VPN label - 5678
Source Address - 111.111.111.111
Destination Address - 123.123.123.123
show platform capture elam trigger dbus others if data = 0 0 0 0x88470162 0xE0000000 0 0 0x00006F6F 0x6F6F 7B7B 0x7B7B0000 [ 0 0 0 0xffffffff 0xf0000000 0 0 0x0000ffff 0xffffffff 0xffff0000 ]
Trigger for two labels. (for other core routers)
IGP label - 1234
VPN label - 5678
Source Address - 111.111.111.111
Destination Address - 123.123.123.123
show platform capture elam trigger dbus others if data = 0 0 0 0x8847004D 0x20000162 0xE0000000 0 0 0x00006F6F 0x6F6F7B7B 0x7B7B0000 [ 0 0 0 0xffffffff 0xf000ffff 0xf0000000 0 0 0x0000ffff 0xffffffff 0xffff0000 ]
    You can check the labels being used (by using show ip cef <> details) and covert their values to hex and change the trigger accordingly.
     I have changed the colors for better understanding. If you notice carefully in the trigger the values for ip address, labels have just been converted to their respective hex values which could be replaced.
     Please let me know if this helps.
Thanks & Regards
Hitesh & Rahul

Implementing WAAS using 3925 and 2911 Cisco routers

Dear all,
I am new to Cisco WAAS and therefore I would like to request some help regarding the following scenario:
I have a star network (1 hub and 5 spoke) topology where each satellite site is connected via a 2 MB (symmetric) to the Head-Quarters (Central node). In order to be able to concentrate all servers (services) at the head-quarters and improve the users experience in remote sites when accessing network services that are located at the head-quarters we want to implement Cisco WAAS instead of increasing the existing bandwidth.
At the head-quarters we are using a 3925 Cisco router and at the remote locations we are using 2911 Cisco routers. Last but not least there will be approximately 75 concurrent users from remote sites accessing resources at the head-quarters.
Currently I am planning to use the following:
·At the head-quarters I am planning to use a Cisco Wide Area Application Services (WAAS) Module: SM-SRE-900-K9 with an Enterprise license (for large deployment) in the Cisco router 3925
·At the remote sites I am planning to use a Cisco Wide Area Application Services (WAAS) Module: SM-SRE-700-K9 with an Enterprise license (for medium deployment) in the Cisco router 2911
Is there anything else that I am missing or need to take into consideration for deploying the WAAS.
Regards,
Screech

Hi Screech,
Answers:
Is the dedicated WAE hw for central management purpose a required component?not required as WAEs can optimize even without Cntral managementbut you will not be able to collect statistics, reports and will have to manage WAEs from CLI. This a kind of highly recommended management piece you will need.
What is the difference between using a full blown WAE instead of a Sm SRE module: Using a fully blown WAE at DC is recommended as you are then avoiding couple of bottlenecks.
1. Bandwidth allcoation
2. SM / NM models have low capacity, disks where as fully blown models like 674s have 10k/15k SATA / SAS drives.
3. HW redundancy: you have backup PS / HD in dedicated WAEs in msot of the models.
4. HW dependency: Your SM moduels depened upon your router / switch. If for some reason, switch or router goes down, SM moule goes down at same time.
5. Additional NICs / HW availability.
There are various other reasons you might want to consider. You can ask your cisco sales engineer or one of the PDI help engineer on the forum can also punch in here.
but basicaly, I would go for fully blown WAE on DC side and central management piece as well.
Regards.

How to choose Cisco Prime NCS

Dear Cisco Team,
I would like to know what are the main facts to choose Cisco Prime NCS.
And how many kind of monitoring system are there in Cisco.
Best Regards,
Thet Htar

Hi Thet,
Cisco Prime Infrastructure simplifies the management of wireless and wired networks. It offers Day 0 and 1 provisioning, as well as Day N assurance from the branch to the data center. We call it One Management. With this single view and point of control, you can reap the benefits of One Management across both network and compute.
Prime Infrastructure enables you to configure and monitor one or more controllers, switches and associated access points. Prime Infrastructure includes the same configuration, performance monitoring, security, fault management, and accounting options used at the controller level and adds a graphical view of multiple controllers and managed access points.
Read the below link for more detail::
http://www.cisco.com/c/en/us/td/docs/wireless/prime_infrastructure/1-2/configuration/guide/pi_12_cg/ovr.html
You can download it from here and use it under evaluation period for testing::
https://software.cisco.com/download/release.html?mdfid=286236028&flowid=72882&softwareid=284272932&release=2.2&relind=AVAILABLE&rellifecycle=&reltype=latest
Thanks-
Afroz
***Ratings Encourages Contributors ****

Why choose Cisco Catalyst WS-C2960-24TC-L Switch ?

As the new family of fixed-configuration standalone devices, Cisco 2960s series intelligent Ethernet Switches provide desktop 10/100 Fast Ethernet and 10/100/1000 Gigabit Ethernet connectivity for entry-level enterprise, mid-market, and branch office networks
to enable enhanced LAN services.
Why choose cisco WS-C2960-24TC-L ?
The Cisco Catalyst WS-C2960-24TC-L has hardware enhancements for network managers, including configurations featuring dual-purpose (alternatively wired) uplinks for Gigabit Ethernet, allowing the network manager to use their Cisco switches as either a copper
or a fiber uplink.

Agreed! WS-C2960-24TC-L has hardware enhancements for network managers, and if you want to buy it, here 3anetwork.com 64%
off, USD 460 !

Securing Telnet access on Cisco routers (access class)

Dear All,
In all my network i have cisco catalyst switch and cisco routers deployed in my WAN. In cisco routers, it was activated an ACL to secure telnet access to WAN devices. only 3 hosts (remote) were autorized to access these devises. I need to modify this secuirty to have access from the LAN (locally).
The ACL was implmented in all routers, and activated using access class in.
in there any idea without changing more the configuration and only tell the router to apply this ACL for WAN and not access for the LAN ?
Thanks for your help,
Best regards,

Hi,
here is the ip int brief.
thanks
CISCO1841#show ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.1.1 YES NVRAM up up
FastEthernet0/1 192.168.2.1 YES NVRAM up up
ATM0/0/0 unassigned YES NVRAM up up
Dot11Radio0/1/0 unassigned YES NVRAM up up
Dot11Radio0/1/0.1 192.168.2.129 YES NVRAM up up
Dot11Radio0/1/0.2 192.168.3.1 YES NVRAM up up
NVI0 unassigned NO unset up up
Virtual-Access1 unassigned YES unset up up
Dialer1 151.16.203.203 YES IPCP up up

Facing issue in using SNMPV3 on Cisco Routers

Hi,
Actually, i am trying to implement SNMPV3 on Cisco Routers & Switches to manage & monitor these devices in a more secure manner using NMS called Orion (NPM) Network Performance Monitor.
When i am going to add the node on Orion (NPM), it is showing me an error that the device does not support the interfaces MIB.
The Routers IOS Version and its feature set is as under:
Cisco 3800 & 2800 (IOS version 12.4(20)T2 Advance IP Services).
Configuration as under:
snmp-server DEPT_GRP V3 auth context DEPT_CTX read DEPT_VIEW
snmp-server view DEPT_VIEW iso included
snmp-server view DEPT_VIEW internet included
snmp-server view DEPT_VIEW interfaces included
snmp-server view DEPT_VIEW system included
snmp-server view DEPT_VIEW chassis included
snmp-server context DEPT_CTX
snmp-server user SNMPADMIN DEPT_GRP v3 auth sha cisco123 priv des cisco123
snmp-server host 213.42.48.158 version 3 auth SNMPADMIN
At Orion parameters are given as under:
username :- SNMPADMIN
SNMPV3 context :- DEPT_CTX
SNMPV3 Authentication :- SHA1
SNMPV3 Privacy/Encryption :- DES56
Password Key :- cisco123 (All the places)
Kindly help me out and advise me where i am going wrong. Kindly check the configuration above is anything missing in it regarding the SNMPV3 configuration.
Rgds,
Ayaz Ali

Hi Joe,
Thanks for your response. As per your reply, i had removed the context and views which were configured earlier on the router and followed the same instructions as you mentioned in your reply, but i would like to tell you one thing about the configuration that i had done for snmp v3.
Your configuration is :-
snmp-server group DEPT_GRP v3 auth read v1default
snmp-server user SNMPADMIN DEPT_GRP v3 auth sha cisco123 priv des cisco123
My Configuration is :-
snmp-server group DEPT_GRP v3 priv read v1default
snmp-server user SNMPADMIN DEPT_GRP v3 auth sha cisco123 priv des cisco123
In your configuration, you are using Authentication (Auth) for the SNMP v3 group and if u select auth (Keyword) then you have to only provide authentication method (SHA,MD5) no privacy keys for encryption (DES,AES) in snmp user configuration, otherwise it will give you an error that credential not matched on the host when you try to poll the device.
In my configuration, I am using privacy (priv) for the SNMP v3 group, thats why i had given both authentication and encryption keys under SNMP user configuration.
In short, user settings are dependent on the group settings if you are using auth then it only support authentication but no privacy and if you are using priv then it allow both authentication and encryption (privacy).
Thanks for your support, it really helped me out in solving the issue. Now, i am able to poll my all routers using snmp v3.
Rgds,
Ayaz Ali

The difference of the IEEE802.1x Auth between Cisco Routers and Catalyst switches

Hello
I am investigating the difference of the IEEE802.1x Auth between Routers and Switches.
Basically dot1x auth is availlable on Catalyst Switches. however if I want to check to
PortBased Multi-Auth , MAC address Auth and any certification Auth with this feature,
Is it possible to integrate into Cisco Router such as Cisco 891F ?
In my opinion Cisco891F is also available to use basic IEEE802.1x but if it compares with Catalyst switches such as Cat3560X
I think there might be any unsupported feature on Cisco 891F.
I appreciate any information. thank you very much in advance.
Best Regards,
Masanobu Hiyoshi

Many time in interviews asked comaprison between cisco routers and switches that i was answerless bcoz i dont have much knowledge about that.Can anyone provide me the compariosin sheet of the same.how are the cisco devices differ with each other how much Bandwidth each routres support and Etc...
Ummmm ... The most common question I get is "what is the difference between a router and a switch".
However, if you get a question like this, then my impression to this line of questioning are:
1. The candidate they are looking for has in-depth knowledge of routers and switches. And I mean IN-DEPTH!;
2. They are not looking for a candidate. They just want to stroke their ego. There is not alot of people who can give you the "names and numbers" of routers and switches at a snap of a finger. And if you do happen to know the answer, then and there, then expect a tougher follow-up question.

Problems on Large Network, Limited Administrative Pull

Alright, well I am full of problems here. First let me share the problem. I am on a very large network, over 100 sites, and Tens of thousands of computers, 99% of which are Windows machines. The respect and support for Macs in this school district is non existant, so there is not going to be any favours to help out with these problems, like opening ports. I am merely a Tech Support student at the school, the only one that is willing to help with the little Mac lab we have. We have over 600 computers at the school, only 21 Macs.
The department that owns the Macs, Yearbook Departement, purchased Apple Remote Desktop 2 last year, a week before 3 came out. Since it was bought, there has been nothing but troubles. I know it is version 2, I am not sure if there are any updates installed. I am hesitant to do that, because I have to go to every machine and upgrade the software.
Now to the problem, I have looked around and seen really nothing on the specific problem I am having. The issue that I have is when opening Remote Desktop, I see maybe a few machines connected, and it varys which ones they are. All the others either say, Offline, or something like "Remote Desktop not Enabled" Which I know for a fact it is enabled. What I need to know is, what can I do about this? I am just a student with the Admin password for the Macs, that is all I have, and all I can get. If any favour is asked to make it work, I will more than likely be laughed at and made fun of, even by older so called "Pros." It is very immature it seems.
So the run down of some "fixes" I have seen have been this. Opining ports, not an option, Static IP's, not an option, fowarding ports, not an option, the only thing I have access to are the Macs and the Admin Mac. Also, I have had problems when starting up Remote Desktop and getting an "Unexpectedly Quit" dialogue. And one more question related to licensing. If we own the Unlimited license, can the Remote Desktop Admin software be installed on more than one Admin machine, the school is planning to get a few more Macs for video production. Currently the Macs we have run Panther and Tiger, should be the newest updates of each.
Thanks for any help, I really need the answers quick, school is about to get out and I am a Senior, so I probably wont be back. And I really feel bad for the Yearbook teacher, because I am the first time anybody has really helped her out with any problems or not poked fun at her or completely ignored her.
 PowerBook G4 15" Mac OS X (10.4.7) 1.67 Ghz, 1G RAM, 128MB VRAM, 80G HD, DL SuperDrive

> Well, the DHCP addresses are on a 3 day lease, so it
shouldn;t reset unless we have a long weekend. If the
IP on the computer does change, how does the ARD
Admin find the computers again? That is what seems to
be the problem, after IP's change, the Admin computer
can no longer find it.
One way is to rescan the network looking for the machines. This is not a desirable way to do it, but it works...most of the time.
The better way is to have the machines check in on a daily basis and update their information. In ARD2, select machine(s), click on Manage -> Set Reporting Policy. By default it is set for midnight, change this to sometime during the day when you know the admin and client machines will be on. Click on Set.
An important note is that the admin machine should always keep the same IP so the client machines can find it. If the admin machine's IP changes frequently, rescanning may be the only option.

Cisco China is Hiring Japanese Speaking Network Consulting Engineer!

思科中国正在热招有日语能力的Network Consulting Engineer人才。申请者需是能够讲流利的日语，您可以是数据中心/虚拟化的专家，也能使SP Mobility的能人，亦能是语音/视频的天才！
工作地点可以选择大连或者北京。
更多详细内容请联系HR: [email protected]
Cisco China is hiring Japanese Speaking Network Consulting Engineer talents. The desired candidates will be the expert in Data Center/Virtualization or SP Moblity or Collaboration technologies.
Location will be in Dalian or Beijing of China.
Please reach to HR: [email protected] for further information.

Hello Jerome,
A variety of Cisco devices are supported by the the Cisco Prime Network. I would encourage you to go through the below links on the user guide depending the version of Cisco Prime Network being used.
"Cisco Prime Network Supported Cisco Virtual Network Elements (VNEs)"
"Cisco Prime Network Supported Cisco VNEs - Addendum"
Below is the link for the user guide.
http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-network/products-user-guide-list.html
Hope this would help in providing you more clarity.
***********Plz do rate this post if you found it helpful*************************
Thanks & Regards,
Vignesh R P

Just like HP servers, does Cisco UCS C-Series Standalone supports Network Fault Tolerance ?

Just like HP servers, does Cisco UCS C-Series Standalone supports Network Fault Tolerance ? if yes then, where can i find this option
Windows :- 2k8 R2

Just like HP servers, does Cisco UCS C-Series Standalone supports Network Fault Tolerance ? if yes then, where can i find this option
Windows :- 2k8 R2

Cisco Routers - optimal dsl sync interval for bt a...

Hi has anybody played around with the "dsl sync interval" on Cisco routers, I was after finding out the optimum setting.........or is it a "well it depends" type answer?
Many thanks

Hi has anybody played around with the "dsl sync interval" on Cisco routers, I was after finding out the optimum setting.........or is it a "well it depends" type answer?
Many thanks

Cisco routers support ipv6 in OPNET?

Hi all,
my question is: which of cisco routers support ipv6 in OPNET Modeler simulator?
please, It's urgent.
Thanks in advance.

Hi Dan,
This is a funny community section to pose questions on the SOHO 97
It's End of Like annoucement was a wee while ago, in June 2006.
http://www.cisco.com/en/US/prod/collateral/routers/ps4866/prod_end-of-life_notice0900aecd804d5ad6.html
As you appreciate, the replacement for the SOHO97, the 800 series product supported IPv6.
I have taken the liberty , in relation to soho97, to copy a section from the IOS software release notes from the following URL;
http://www.cisco.com/en/US/products/hw/routers/ps221/prod_bulletin09186a00801ffda1.html#wp1003249
It states the following in relation to IOS version12.3(4)XG
"Baseline IPv6
Supported Platforms: Cisco 831, 836, and 837 Series Routers; Plus Images Only
Support of the baseline initiatives IPv6 features—providing IPv6 support to all Cisco 830 Series platforms. Further details in release notes."
Like yourself, no where can i see a reference to the SOHO 97 product supporting IPv6.
regards Dave

Difference between setting up a vpn with windows 7 and cisco routers

Hi.I was wondering what the main difference Is between setting up a vpn with windows 7 or configuring It on cisco routers.
When you setup the vpn on windows 7 or xp do the client and server pc's take care of the encryption and decryption whereas configuring vpn on routers , the encryption and decryption Is done solely by the routers?
If I want to setup a connection where an IP In the same Internal lan Is assigned to the client pc I'm guessing I'd have to use a router configuration.
Thanks

Thank you for the response, lucky for me there was another option. Threatened to cancel with the ISP on the NAT side unless they assigned us a public static ip/gateway/subnet. They ended up doing that and the VPN connected as soon as the changes were made in the Linksys.

Choose Cisco Routers to impliment a large network

Similar Messages

Maybe you are looking for