Cisco 1760 my default GW. Optimizing external interface.

Hello, my current setup is....
[comcast 10 Mbps]<----->[Cisco 1760]<------->[Dell PowerConnect 3024]--------[LAN]
I have a WIC-1ENET on my 1760 connected to the the motorola cable modem. I was wondering if there are any specific commands I should apply to an external interface to improve performance, or keep unwanted traffic from being sent out.
interface Ethernet0/0
ip address dhcp
no ip redirects
no ip proxy-arp
ip nat outside
no ip route-cache cef
no ip route-cache
no ip mroute-cache
half-duplex
priority-group 1
no cdp enable
That is my current setup for my external interface. I have the priority set for my xbox 360. So that netflix gets highest priority. This allows for me to get HD streams 90% of the time, with little to no slow downs from others using the network. I would like to set full-duplex, but doing so brings the connections to the internet down to a crawl. I don't know if this is because the cable modem needs to be reset after full-duplex has been set, or what.
I have seen some configurations with a hold-queue value. Would this help me any? Speed tests using dlsreports i see about 8Mbps/1.5Mbps down/up. I have modified the nat tcp timeout to 10 minutes.
Thanks for any information guys.

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
Regarding the duplex settings on Ethernet 0/0 there are some rules in the standards. If you set the duplex manually on the interface auto negotiation is turned off and requested duplex will not be ‘announced’ to your cable modem. The default behavior according to the standard is for the cable modem to use half duplex. This will also happen if you set Ethernet 0/0 to full duplex since auto negotiation is turned off.
So in order to get full duplex you have two options:
1) Use the command ‘duplex auto’ on Ethernet 0/0
2) Configure both Ethernet 0/0 and your cable modem to full duplex.
André

Similar Messages

Problem adding CSA external interface in IPS 6

I configured my AIP-SSM sensor running IPS 6 to connect to the CSA MC, but I get a connection failure. The sensor is showing the following error when trying to connect:
evError: eventId=1168311248090659938 severity=warning vendor=Cisco
originator:
hostId: os-ips
appName: externalProductInterface
appInstanceId: 317
time: 2007/01/20 02:50:22 2007/01/19 20:50:22 GMT-06:00
errorMessage: name=errNotAvailable Failure opening a subscription on the Management Center for Cisco Security Agents external interface at 1.1.1.1: Parse response found a different element when expecting the SOAP Envelope element

The interface is currently disabled, but I think you'll get the picture.
cisco-security-agents-mc-settings (min: 0, max: 2, current: 1)
ip-address: 1.1.1.1
interface-type: extended-sdee
enabled: no default: yes
url: /csamc/sdee-server
port: 443
use-ssl
always-yes: yes
username: adminuser
password:
host-posture-settings
enabled: yes default: yes
allow-unreachable-postures: yes
posture-acls (ordered min: 0, max: 10, current: 1 - 1 active, 0 inactive)
ACTIVE list-contents
NAME: 1-subnet
network-address: 192.168.1.0/24
action: permit
watchlist-address-settings
enabled: yes
manual-rr-increase: 25
session-rr-increase: 25
packet-rr-increase: 10

ASA 5505 external interface dying

Hi,
We have an ASA 5505 ( version 9.1(2) ) that frequently stopped functioning ie the external interface refuses to pass any traffic , ASDM wont connect,etc.
The internal interface does continue to function and if we SSH into the unit and do a reload , everything springs back into life again.
What are the best steps to troubleshooting and finding a fix to this problem?
Chris

Hi Amrin,
you can configure SLA monitoring on ASA and that woudl work fine for you:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml
Hope that helps.
Thanks,
Varun

ASA 5510 Anyconnect VPN question-"Hairpin" vpn connection on same external interface

I have a Cisco ASA 5510, I want to allow a VPN connection to be established by a client on one of the inside interfaces(10.20.x.x) to be able to go out the single External interface and get authenticated by the ASA to create a VPN tunnel to the other inside interface (10.0.X.X) and access resources on that subnet.
Basically want clients on a WLAN to be able to VPN back in to the LAN with the ASA in the middle to get to company resources,
Is this possible?
Thanks,
Tommy

When we connect any VPN on a device then it is always a TO THE DEVICE connection and I am afraid we can connect only to the local / nearest interface where user is connected in a network with respect to ASA.
I have seen this scenario working though earlier with one of my clients wherein he has configured his DNS server accordingly so that depending upon the source of the DNS request an appropriate IP address was provided for same DNS name. For example if user from IP address range 192.168.0.0 range connects to abc.com then it will get IP address 192.168.1.1 and if a user from range IP address10.0.0.0 connects then it will get 10.1.1.1.
If we configure the same scenario as well then your requirement will be fulfiled with same name however VPN has to be enabled on wireless interface again. If not, then as you have described configuring a new domain name for VPN connection only for wireless users should do the deal.
Regards,
Anuj

Two external interfaces; one to be used for outboud; second to be used for incoming VPN\Web traffic.

I'm configuring our ASA and we have two AT&T circuits which we're only using one with our current Juniper firewall. I know the ASA doesn't support policy based routing so I'm wondering if the following hypothetical "config" is possible.
External Interfaces:
OUT_01 - 12.133.X.X
OUT_02 - 201.61.X.X
I would route all internal traffic to go out through OUT_01.
We have over 5 site-to-site VPN and 30 external facing servers. Could I use OUT_2 to configure all the inbound connections for the VPN and NAT rules?

You can configure the ASA to allow asynchronous routing, as you are describing, by configuring TCP bypass.
http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_tcpstatebypass.html
What this will do is you will still need to send traffic out one interface but the ASA will accept return traffic on either of the outside interfaces. Configuring this can be a security risk as the ASA will ignor the state table.
Or you could wait until ASA version 9.4 which will have support for PBR. Ofcourse this is the first version that will support it, so don't be suprised if it has a few bugs.
Please remember to select a correct answer and rate helpful posts

Cisco 1760 router will not recognize wic1-dsu-t1-v2 card in slots 3 or 4

My 1760 router will not recognize a wic1-dsu-t1-v2 card in slots 3 or 4. They only work in slots 1 & 2. Never saw this before where the same card would not work in different slots.
Need assistance.
Thanks,
Ron
Router#show version
Cisco Internetwork Operating System Software
IOS (tm) C1700 Software (C1700-IPBASE-M), Version 12.3(6c), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Tue 20-Jul-04 07:00 by kellythw
Image text-base: 0x80008120, data-base: 0x80C74650
ROM: System Bootstrap, Version 12.2(7r)XM2, RELEASE SOFTWARE (fc1)
Router uptime is 20 minutes
System returned to ROM by power-on
System image file is "flash:c1700-ipbase-mz.123-6c.bin"
cisco 1760 (MPC860P) processor (revision 0x500) with 55598K/9938K bytes of memory.
Processor board ID FOC0849230K (3846615071), with hardware revision 0000
MPC860P processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
1 FastEthernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
WIC T1-DSU
32K bytes of non-volatile configuration memory.
32768K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Router#show flash
System flash directory:
File Length   Name/status
1   7517112 c1700-ipbase-mz.123-6c.bin
[7517176 bytes used, 25775112 available, 33292288 total]
32768K bytes of processor board System flash (Read/Write)
Router#show diag
Slot 0:
        C1760 1FE VE 4SLOT DV Mainboard Port adapter, 3 ports
        Port adapter is analyzed
        Port adapter insertion time unknown
        EEPROM contents at hardware discovery:
        Hardware Revision        : 5.0
        PCB Serial Number        : FOC0849230K
        Part Number              : 73-7167-05
        Board Revision           : B0
        Fab Version              : 04
        Product (FRU) Number     : CISCO1760
        EEPROM format version 4
        EEPROM contents (hex):
          0x00: 04 FF 40 03 16 41 05 00 C1 8B 46 4F 43 30 38 34
          0x10: 39 32 33 30 4B 82 49 1B FF 05 42 42 30 02 04 FF
          0x20: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
          0x30: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
          0x40: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
          0x50: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
          0x60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
          0x70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
        WIC/VIC Slot 0:
        FT1 4351
        Daughter card-Version 4 TLV Cookie Format
        Hardware Revision        : 1.1
        PCB Serial Number        : FOC09053XP1
        Part Number              : 73-8346-04
        Board Revision           : A0
        RMA Test History         : 00
        RMA Number               : 0-0-0-0
        RMA History              : 00
        Deviation Number         : 0-0
        Product (FRU) Number     : WIC-1DSU-T1-V2
        Top Assy. Part Number    : 800-22193-02
        CLEI Code                : IP4I380GAB
        WIC/VIC Slot 1:
        FT1 4351
        Daughter card-Version 4 TLV Cookie Format
        Hardware Revision        : 1.2
        PCB Serial Number        : FOC10073JND
        Part Number              : 73-8346-05
        Board Revision           : A0
        RMA Test History         : 00
        RMA Number               : 0-0-0-0
        RMA History              : 00
        Deviation Number         : 0-0
        Product (FRU) Number     : WIC-1DSU-T1-V2
        Top Assy. Part Number    : 800-22193-03
        CLEI Code                : IPUIAPRRAA

Hi Ron,
Slots 3 & 4 are for VICs only.
Have a look at the Location/ Function table here:
http://www.cisco.com/en/US/products/hw/routers/ps221/products_tech_note09186a00800c3399.shtml
cheers,
Seb.

Public Server on 2 external interfaces

I suspect this is relatively simple, but I'm brand new to the Cisco line (and to the forums), so my apologies if I'm unclear or in violation of forum etiquette.
I have an ASA5515 which will be using 2 external interfaces, and I need to make a single internal server available to the outside world on both interfaces. I can accomplish this easily for the main external interface (the faster circuit), but I'm running into issues getting connections through on the backup circuit. Here's the interface configuration:
interface GigabitEthernet0/0
description ISP-2
nameif backup
security-level 0
ip address 10.177.188.22 255.255.255.248
interface GigabitEthernet0/1
description ISP-1
nameif outside
security-level 0
ip address 10.131.225.158 255.255.255.240
interface GigabitEthernet0/2
description LAN
nameif inside
security-level 100
ip address 192.168.2.250 255.255.255.0
I'd like outside (internet) users to be able to make an HTTP request on port 80 to 10.131.225.146, which comes in GigabitEthernet 0/1, gets translated to the internal web server at 192.168.2.1:80, and then any response traffic leaves GigabitEthernet 0/1, looking to the user like it originated form 10.131.225.146.
Additionally, I'd like the same user to be able to make an HTTP request on port 80 to 10.177.188.18, which comes in GigabitEthernet0/0, goes through the above translation, and then response packets exit via GigabitEthernet0/0.
I've been able to get most of the above working, but when working on the NAT rule for the backup side, packet-tracer tells me that my NAT is fine (it NATs the packet from 192.168.2.1:80 to 10.177.188.18:80, but it wants to then route that packet through the outside interface (GigabitEthernet0/1)
While I've been able to find many references to this on-line (such as this blog post), they all appear to be outdated, using pre-8.3 syntax.
I suspect I'm close on this, but I can't seem to get that last piece to make everything 'click'. Any help would be greatly appreciated.

Basically you need three elements in your config:
An ACL-Entry on both interfaces allowing the needed traffic.
Two NAT-statements, one for each external interface.
A route to the Backup-NH with a higher AD.
object network SERVER-VIA-OUTSIDE
host 192.168.2.1
nat (inside,outside) static 10.131.225.146 service tcp 80 80
object network SERVER-VIA-BACKUP
host 192.168.2.1
nat (inside,backup) static 10.177.188.18 service tcp 80 80
access-list OUTSIDE-IN extended permit tcp any object SERVER-VIA-OUTSIDE eq 80
access-list BACKUP-IN extended permit tcp any object SERVER-VIA-BACKUP eq 80
access-group OUTSIDE-IN in interface outside
access-group BACKUP-IN in interface outside
route outside 0.0.0.0 0.0.0.0 NH-ON-OUTSIDE 1
route backup 0.0.0.0 0.0.0.0 NH-ON-BACKUP 100

Cisco 1760

I have a cisco 1760 router (see config attached) with one ADSL and one SHDSL card.The cd led on the adsl card turns green the atm interface is up but the bvi1 interface remains down.The router is not detecting the shdsl card.What can i do?

what IOS version have you got on it?
Please also paste the output of : sh ver

Delete Intransit from APO which Loaded by PI from external interface

Hi all,
I am facinf a problem in deleting the Order created by External Interface.
We are loading Inransit as PO Mamo (ATP Category AH). Now we need to delete all the Record with AH ATP categoy before we reload new intransit to APO.
Problem is we are not able to delete those order as those are not in Live Cache.
We try using transaction /n/sapapo/bp2 but every time its throwing error "SAP APO system Q51CLNT100 has been declared as an SAP R/3 system.
and even i try deleting from /SAPAPO/RLCDEL. but its not deleting those order.
Can some one suggest what to do.
What all the option that we can try to delete the intransit.
Thanks & Regards,
Amit Sharma

Hi Amit,
You can use BAPI to delete AH ATP Category.
1. Read all Purchase Documents from BAPI_POSRVAPS_GETLIST3 for product u2013 location for AH Type ATP Category only.
2.Get the ORDID on the selection made.
3.Call BAPI_POSRVAPS_REMOVEITEMS and load the list of order no. and then delete it.
Please try this.
Thanks,
Dipankar

External interface.call is not working

hi, i am trying to call one java script function in
actionscript by using External interface.call method. but its not
working .can u pls tell me why this happend

"angadala" <[email protected]> wrote in
message
news:gmpc58$g9p$[email protected]..
> skill status.mxml
>
>
> <mx:Script>
> <![CDATA[
> if (ExternalInterface.available) {
> ExternalInterface.call(getDataFromXml);
> }
>
> it is javascript
> <script type="javascript">
> var data = new Array();
> data[0]=[1,2,3];
> function getData()
> {
> return data;
> }
> </script>
> </head>
> <body>
> <div id="SkillStatus">
> <p>Alternative content</p>
> </div>
>
> </body>
> </HTML>
>
1) Your JavaScript function name and the function name you
are calling
don't match.
2) On the Flex side, you are calling a JS function that I
think you are
expecting to return a value, but not assigning the result of
the value to a
function.

Is there a way to run an existing PS-JS script using external interface

I have several previously written Photoshop JS scripts which I'd like to run through buttons on PS panels, much like the example for the HelloWorld introduction. I assume that--using external interface--I'll somehow be able to fire off these script files. Is this a correct assumption?
Thanks!

Certainly, but not with external interface.
Have a look at the cookbooks. There are examples of how to use the root host object to call directly into extendscript.

Memory leak in external interface SetReturnValue?

I'm having trouble with a memory leak in my application. I'm
hoping someone out there can help me find a fix or workaround, or
tell me what I'm doing wrong.
The leak seems to be coming from the flash external
interface; specifically, IShockwaveFlash.SetReturnValue(String). My
application is written in Visual Basic 2008, connecting to Flash
9.0.124.0 (activex version).
I've written a fairly simple flash/VB program pair to
illustrate the problem.
The SWF contains a button, 2 dynamic text fields, and the
ActionScript 2 code below.
The VB project contains a Form with a AxShockwaveFlash object
and the VB code below.
When this program is run, and the button is clicked a lot
(10's of thousands of times), the application's memory creeps up
and never seems to fall back down. If the string passed to
SetReturnValue is longer, memory is consumed faster. But if the
call to SetReturnValue is commented-out, the application's memory
usage remains stable.
If anyone has any suggestions on how to proceed, I'd be
grateful.
(By the way: I'm using a freeware program called DoItAgain to
automate the button pressing.)

I have developed two simple Java and corresponding
C++ classes. Use code tags when you post your code.
You are missing a lot of error checking. JNI calls, every single one, will usually be followed by some sort of error checking. Any that access classes, methods, fields or allocate object must be followed by checks for java exceptions.
You will need to reduce your code to a smaller sample. Otherwise it is unlikely anyone will look at it.
You also need to specify how you know that a memory leak is occurring.

What does "No External Interface" mean?

Adobe Flash Player will not install the complete program. It's telling me that it can only install a single file at a time. The display box states that I have version 9.0.45.0 installed and my operating system is Windows XP then for the browser in states No External Interface. Not sure how to correct the problem but it's telling me that Flash Player didn't install completely.

Download and run the offline installers from http://helpx.adobe.com/flash-player/kb/installation-problems-flash-player-windows.html#mai n-pars_header (under the heading Progress bar hangs).

External interface memory leak?

Hello,
I am embedding the flash player inside a Visual C++
application. My program uses the external interface extensively.
The external interface is called several times a second ( ~20 fps )
each time a ~1k XML string is passed to the flash player.
During execution the program increases its memory by ~10 Mega
each hour. I have used the Umdh tool to try to locate the problem.
It points to the line where the container program uses the external
interface to call a function inside the swf movie.
Below is a typical output of the Umdh tool:
+ 3396588 ( 3405883 - 9295) 261991 allocs BackTrace12EF
+ 261276 ( 261991 - 715) BackTrace12EF allocations
ntdll!RtlpNtMakeTemporaryKey+000074D0
ntdll!RtlInitializeSListHead+00010D08
ntdll!wcsncat+00000224
FlDbg9c!DllUnregisterServer+0010261A
FlDbg9c!DllUnregisterServer+0010263C
FlDbg9c!DllUnregisterServer+0000F1B7
myProgram!CZFlash::CallFunction+0000004D (c:\documents and
settings\amit\my documents\visual studio projects\ myProgram
\zflash\zflash.cpp, 255)
myProgram!MainDialogProc+000012A2 (c:\documents and
settings\amit\my documents\visual studio projects\ myProgram
\w32\maindlg.cpp, 2324)
USER32!GetDC+0000006D
USER32!PrivateExtractIconExW+000002B2
USER32!PrivateExtractIconExW+000000FE
USER32!DefDlgProcW+00000022
USER32!GetDC+0000006D
USER32!GetDC+0000014F
USER32!IsWindowUnicode+000000A1
USER32!CallWindowProcW+0000001B
COMCTL32!Ordinal11+00000328
COMCTL32!RemoveWindowSubclass+0000017E
COMCTL32!DefSubclassProc+00000046
COMCTL32!Ordinal389+000028DF
COMCTL32!RemoveWindowSubclass+0000017E
COMCTL32!DefSubclassProc+00000046
COMCTL32!Ordinal389+000028DF
COMCTL32!RemoveWindowSubclass+0000017E
COMCTL32!DefSubclassProc+00000046
COMCTL32!Ordinal389+000028DF
COMCTL32!RemoveWindowSubclass+0000017E
COMCTL32!DefSubclassProc+00000046
COMCTL32!Ordinal389+000028DF
COMCTL32!RemoveWindowSubclass+0000017E
COMCTL32!DefSubclassProc+00000046
COMCTL32!Ordinal389+000028DF
The System.totalMemory value of the flash player ranges from
2.2 Mbyte to 3.2. I tried using memory leak detection software like
IBM's Purify but couldn't find the problem.
I also tried to disable the BSTR caching by setting the
environment variable OANOCACHE, but the memory of my program
continues to increase.
Below is my C++ code. The m_iflash object is a pointer to the
ActiveX of the flash player.
wstring CZFlash::CallFunction(wstring call_string)
BSTR pcall_string = SysAllocString(call_string.c_str());
BSTR presponse = NULL;
HRESULT status = m_iflash->CallFunction(pcall_string,
&presponse);
SysFreeString(pcall_string);
if (status != S_OK)
if (presponse != NULL)
SysFreeString(presponse);
return L"";
wstring sresponse(presponse);
SysFreeString(presponse);
return sresponse;
Currently the swf movie contains only action script that
displays the System.totalMemory value and an empty function that
the external interface calls.
Any help will be appreciated.
Thanks in advance,
Amit

Hello,
Thanks for coming to National Instruments Discussion Forum.
Can you give us more details about your application? Basically, I can’t find your main VI for your User Interface. Can you also give us the different steps to do to run your application and reproduce your problem?
Generally speaking, your code on your block diagram have to be displayable in one screen.
Benjamin R.
R&D Software Development Manager
http://www.fluigent.com/

Hide messages for External Interface Program Error

Hi,
I am facing problem in removing the external interface errors encountered during EPC of a Y program. Can you please suggest any solution for hiding the error in the custom Y program using #EC.
Regards,
Kajari

Hello IvoK,
The 9881 needs to be externally powered. You can do it with a CAN Breakout Box or with a CAN cable.
Regards
Mélinda B
National Instruments France
#adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
Travaux Pratiques d'initiation à LabVIEW et à la mesure - Nouveau contenu
34 sessions partout en Fra...

Cisco 1760 my default GW. Optimizing external interface.

Similar Messages

Maybe you are looking for