Cisco isr 819 cellular interface...

my cisco isr 819 constantly cycles between the gigabyte interface and the cellular...? _i have the device configured for auto failover with the gigabyte interface being the primary and the cellular as backup. _i used Cisco Configuration Pro to configure the router. _i have attached the router config for expert evaluation.....thanks in advance.

Yes you are correct Cinthia, it is the NAT and depending on which external interface i configure first with NAT, that's the only interface providing NAT to out going packets.
What i hope to achieve with my C819HG ISR router is provide the G0 interface as primary internet access. If that access goes down i want the Cellular0 interface to come up and provide a path to the internet. When the G0 access is restored i want the Cellular0 interface to go back to standby.   
here is my config.....
! Last configuration change at 14:30:15 Chicago Thu Feb 19 2015 by ADMIN
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname rtr-cisco
boot-start-marker
boot-end-marker
aqm-register-fnf
no aaa new-model
clock timezone Chicago -6 0
clock summer-time Chicago date Apr 6 2003 2:00 Oct 26 2003 2:00
crypto pki trustpoint TP-self-signed-3083563774
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3083563774
 revocation-check none
 rsakeypair TP-self-signed-3083563774
crypto pki certificate chain TP-self-signed-3083563774
 certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 33303833 35363337 3734301E 170D3135 30323133 32313035
  35305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30383335
  36333737 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100AB4C 2DA1C3C3 CABBB054 765A1E14 A7BA0347 AFFD1913 B04113DD A21D7CEB
  F09F6572 5BF58323 586BEF24 929003D4 4CAD8864 A00FF40A A59A9969 C12615A0
  1DFE5527 BA6E2C27 33F75615 A36DA242 42862F33 D2823AA3 B838AA3B C938930A
  6D48BD79 11BD9CF5 8B7BEBC8 8C6D9D34 6E5415EB A3CFF3C7 E48F20C4 B18B15FE
  38BD0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 14B5AEAA D7E9FEF2 3A4FF79D 4251425F EF9F28DC 61301D06
  03551D0E 04160414 B5AEAAD7 E9FEF23A 4FF79D42 51425FEF 9F28DC61 300D0609
  2A864886 F70D0101 05050003 81810039 C6D2590C 0741F53E 62E6E7CE 62534CF9
  3A8A6C79 BECBACD7 AF73FA4C 8ED5C059 58A7B08C FBCE2ED0 66196250 20C570AC
  8D802A6B 5E33FFD7 580BBC4C 7C442C42 0F77E3FD F465B724 69D29CFF 19F59635
  D55A9E71 290CE668 B2C74CA1 ED641A2E 714BC06F 17CE9E44 B998945A C1733318
  BFDA96CD 9D66ACA7 B1D79229 8A1322
        quit
ip dhcp excluded-address 172.17.37.1 172.17.37.9
ip dhcp excluded-address 172.17.37.16 172.17.37.254
ip dhcp pool ciscoPool
 import all
 network 172.17.37.0 255.255.255.0
 dns-server 8.8.8.8 8.8.4.4
 default-router 172.17.37.1
ip domain name sr.nwris.noaa.gov
ip cef
no ipv6 cef
multilink bundle-name authenticated
chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"
license udi pid C819HG-4G-V-K9 sn FTX181583HV
username ADMIN privilege 15 secret 4 wYSo2PORqoebHxp3dazS6tzNpgOc5RQBMmrsFZ5l6jE
controller Cellular 0
track 1 ip sla 1 reachability
ip ssh version 2
ip scp server enable
interface Cellular0
 ip address negotiated
 ip nat outside
 ip virtual-reassembly in
 encapsulation slip
 dialer in-band
 dialer string lte
 dialer-group 1
 async mode interactive
interface FastEthernet0
 no ip address
interface FastEthernet1
 no ip address
interface FastEthernet2
 no ip address
interface FastEthernet3
 no ip address
interface GigabitEthernet0
 description $ETH-WAN$
 ip address dhcp client-id GigabitEthernet0 hostname rtr-wxk37
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
interface Serial0
 no ip address
 shutdown
 clock rate 2000000
interface Vlan1
 ip address 172.17.37.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
ip local policy route-map track-primary-if
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 1 interface Cellular0 overload
ip nat inside source list 2 interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 track 1
ip route 0.0.0.0 0.0.0.0 Cellular0 253
ip sla auto discovery
ip sla 1
 icmp-echo 8.8.8.8 source-interface GigabitEthernet0
ip sla schedule 1 life forever start-time now
dialer-list 1 protocol ip permit
route-map track-primary-if permit 1
 match ip address 100
 set interface GigabitEthernet0
route-map source permit 10
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 172.17.37.0 0.0.0.255
access-list 2 remark CCP_ACL Category=2
access-list 2 permit 172.17.37.0 0.0.0.255
access-list 100 remark CCP_ACL Category=0
access-list 100 permit icmp any host 8.8.8.8
control-plane
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
mgcp profile default
line con 0
 no modem enable
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
 stopbits 1
line 3
 script dialer lte
 modem InOut
 no exec
 transport input all
 rxspeed 100000000
 txspeed 50000000
line vty 0 4
 login local
 transport input ssh
scheduler allocate 20000 1000
ntp update-calendar
ntp server 24.56.178.140 source GigabitEthernet0
ntp server 129.6.15.28 prefer source GigabitEthernet0
ntp server 132.163.4.102 source Cellular0
end

Similar Messages

  • ISR 819 maximum recommended throughput?

    Hi All,
    We are looking at providing an ISR 819 for one of our customers using FTTC & 3G for failover .. However, I cant seem to find any recommended throughput guidence for the device? We could be looking at up to 80Mbps via the ethernet interface and I just dont know if the device will cope? If not, do you have any other ISR suggestions which could do the job..
    Any input grately recieved..
    Thanks
    Matt

    Disclaimer
    The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.
    Liability Disclaimer
    In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.
    Posting
    Unfortunately, only the later general models are on that document.  I also don't see the 819 on this reference:
    http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf
    This is probably because its such a special purpose router.  Even its datasheet doesn't note absolute performance.

  • Rate limit in Cisco ISR 4451X

    Hello friends,
    I have a problem; now i'm changing the router that have at work of Cisco 3925 to Cisco ISR 4451X but in the new router i can't put the command that have in my old router:
    rate-limit input access-group 110 16384000 3072000 6144000 conform-action transmit exceed-action drop
    Can someone help me telling what command replace it or which is the equivalent?
    Atte.
    Percy

    Edison,
    Thanks for helping with this it is greatly appreciated.  I have been playing around with this and have managed to get the policing working successfully on the SVI. 
    The problem was basically the direction the policing was being applied.  Initially I was applying the service policies to the customer SVIs in an inbound direction.  This would only be traffic coming into the VLAN interface from within the VLAN; therefore, in terms of internet traffic this would be upload and NOT the required download.
    In order to resolve this, I have applied the service policy to the Internet facing VLAN.  Please see below -
    Class Maps and Policy Maps
    class-map match-all CUST-A-VL10-CMAP1
    match input-interface  FastEthernet1/0/24
    class-map match-all CUST-A-VL10-CMAP2
    match access-group name CUST-A-VL10-ACL-POL
    policy-map CUST-A-VL10-PMAP1
    class CUST-A-VL10-CMAP1
    police 100000 18750 exceed-action drop
    policy-map CUST-A-VL10-PARENT-PMAP1
    class CUST-A-VL10-CMAP2
    set ip precedence 1
    service-policy CUST-A-VL10-PMAP1
    VLAN Confguration
    interface Vlan300
    ip address ************
    service-policy input CUST-A-VL10-PARENT-PMAP1
    This works successfully and polices the traffic as expected.  However, I have now run into the problem with assigning multiple service policies to the VLAN interface.  As this is the internet facing VLAN for the routing of traffic to and from the internet, all customer service policies need to be applied to this interface.  When I attempt to apply more than one service policy to this VLAN i receive the following error -
    (config-if)#service-policy input CUST-B-VL20-PARENT-PMAP1
    Policy map CUST-A-VL10-PARENT-PMAP1 is already attached
    Looks like another couple of hours needed working around this problem!!
    Thanks
    Nick

  • Bridge over Cellular interface

    Hi all,
    I'm looking for a way to bridge between a cellular interace and vlan interface on a 881. Is it possible? I failed to find relevant examples. (I also have a dialer interface connected to this cellular interface, though I it can be removed with some configs if not possible like this) My goal is to forward the IP assigned by the ISP(via cellular and/or dialer) directly to the client behind.
    Thanks for the ideas in advance
    Regards,

    Please find the cellular interface config.
    1. Create a Profile specific to your mobile ISP
            Router# cellular 0/2/0 gsm profile create 1 chap cisco cisco
    * --> provided by ISP.
    2. Unlock SIM
            Router# cellular 0/2/0 gsm sim unlock 1234
    3. Define ATDT command
            Router#chat-script gsm "" "ATDT*99#" TIMEOUT 60 CONNECT
    4. Configure the line interface
            line 0/2/0
             script dialer gsm
             modem InOut
             no exec
             transport input all
             rxspeed 7200000
             tspeed 5760000
    5. Configure cellular interface
            interface Cellular0/2/0
             ip address negotiated
             ip nat outside
             ip virtual-reassembly in
             encapsulation ppp
             dialer in-band
             dialer idle-timeout 0
             dialer string gsm
             dialer-group 1
             async mode interactive
             ppp chap hostname cisco
             ppp chap password cisco
             ppp ipcp dns request
    6. Create access-list for interesting traffic.
    ip access-list extended cellular_traffic
    permit ip 192.168.1.0 0.0.0.255 any
    7. Initiate cellular dialer interface
    dialer-list 1 protocol ip list cellular_traffic
    6. Verifying the cellular interface
            Router#show cellular 0/2/0 all

  • LDAP Source Query IP (Cisco ISR G2 WebSecurity)

    Hi Cisco folks,
    Goal:
    I would like to implement Cisco ISR Connector with ScanSafe for the company.
    I have followed the ISR Solution Guide carefully (found here:
    http://www.cisco.com/en/US/docs/security/web_security/ISR_SS/ISR_ScanSafe_SolutionGuide.pdf)
    So far I have managed to get a basic configuration working.
    Problem:
    This configuration consists of the basic Web Security features and a VPN to our internal network.
    I would now like to implement authentication on the device with LDAP.
    As far as I can tell the configuration is correct. (I followed the solution guide precisely)
    The authentication though doesn't work.
    Here an output from the debug:
    *Feb 22 13:07:35.034: LDAP: LDAP: Queuing AAA request 52 for processing
    *Feb 22 13:07:35.034: LDAP: Received queue event, new AAA request
    *Feb 22 13:07:35.034: LDAP: LDAP authentication request
    *Feb 22 13:07:35.034: LDAP: Username sanity check failed
    *Feb 22 13:07:35.034: LDAP: Invalid hash index 512, nothing to remove
    *Feb 22 13:07:35.038: LDAP: New LDAP request
    *Feb 22 13:07:35.038: LDAP: Attempting first  next available LDAP server
    *Feb 22 13:07:35.038: LDAP: Got next LDAP server :scansafe-ldap-server
    *Feb 22 13:07:35.038: LDAP: Free connection not available. Open a new one.
    *Feb 22 13:07:35.038: LDAP: Opening ldap connection ( Internal IP of DC, 636 )ldap_open
    ldap_init libldap 4.5 18-FEB-2000
    open_ldap_connection
    ldap_connect_to_host: Internal IP of DC
    :636
    *Feb 22 13:07:35.038: LDAP: socket 5 - connecting to Internal IP of DC (636)
    *Feb 22 13:07:35.038: LDAP: socket 5 - connection in progress
    *Feb 22 13:07:35.038: LDAP: Connection on socket 5
    *Feb 22 13:07:35.038: LDAP: Connection to LDAP server (scansafe-ldap-server, Internal IP of DC) attempted
    *Feb 22 13:07:35.038: LDAP: Connection state: DOWN => CONNECTING
    *Feb 22 13:07:35.038: LDAP: LDAP request saved. Will be served after Root Bind is done.
    *Feb 22 13:07:35.038: LDAP: LDAP request successfully processed
    *Feb 22 13:08:05.038: LDAP: Received socket event
    *Feb 22 13:08:05.038: LDAP: Process socket event for socket = 5
    *Feb 22 13:08:05.038: LDAP: Server is not valid and non-TLS
    *Feb 22 13:08:05.038: LDAP: Socket read event socket=5
    *Feb 22 13:08:05.038: LDAP: Found socket ctx
    *Feb 22 13:08:05.038: LDAP: ldap tcp transport closing on socket 5
    *Feb 22 13:08:05.038: LDAP: Transport DOWN notification for scansafe-ldap-server/5
    *Feb 22 13:08:05.038: LDAP: Clearing all ldap transactions
    *Feb 22 13:08:05.038: LDAP: Triggering server failover for transit requet
    *Feb 22 13:08:05.038: LDAP: Connection state: CONNECTING => DOWNldap_unbind
    ldap_free_connection lc=0x8C5C14D4
    ldap_free_connection: actually freed
    As you can see the router can't contact our DC.
    Now I did some sniffing and noticed that the router sends the LDAP query with the source address of the external interface (Public IP).
    This results, that the queries are sent out into the internet with an internal destination IP. --> hence can't connect.
    Question:
    Now to my actual question.. How can I force the ISR to originate the LDAP queries from our internal interface ... which would then enter the VPN and connect to the DC?
    Thanks in advance, and if you need any additional information, please don't hesitate to ask
    Kind regards
    - Sam

    I recently went through this exact issue with Cisco TAC. The answers are quite unpleasant, but Cisco feels the LDAP protocol doesn't need a source-interface command because an LDAP server doesn't need a specific source IP. The "workaround" is to include your egress interface IP in the VPN tunnel so it will get encapsulated and be able to reach the LDAP server over the VPN. There is another even less desirable workaround to use a Virtual Tunnel Interface, but it is not practical for companies with more than 1 remote site or using the headend VPN concentrator for internet routing because of the requirement of the tunnel being ip any any.

  • Cisco ISR G2 SIP Calls Capacity

    Dear all,
    We're planning for Cisco Voice Gateway configuration with SIP trunk, till now no E1s are used.
    I would like to know how can we calculate the number of simulataneous calls that a cisco ISR G2 router (1921. 2921.3945,etc...) can support ?
    How much sip simultaneous calls each ISR G2 model can support ?
    Is it better to use SIP or we must get into E1 PRI ?
    Regards,

    The Q and A below has the call capacity you are looking for
    Table 1. Number of IP-to-IP Calls per Platform
    Platform
    Maximum Number of Simultaneous Calls (Flow-Through)
    Cisco 3945E
    2500
    Cisco 3925E
    2100
    Cisco 3945
    950
    Cisco 3925
    800
    Cisco 2951
    500
    Cisco 2921
    400
    Cisco 2911
    200
    Cisco 2901
    100
    Cisco ASR 1004; and Cisco ASR 1006 Router Processor 2 (RP2)
    5000; 16000*
    Cisco ASR 1002, ASR 1004, and ASR 1006 RP1
    1750
    Cisco AS5350XM and AS5400XM
    600
    Cisco 3845
    500
    Cisco 3825
    400
    Cisco 2851
    225
    Cisco 2821
    200
    Cisco 2811
    110
    Cisco 2801
    55
    http://www.cisco.com/en/US/prod/collateral/voicesw/ps6790/gatecont/ps5640/prod_qas09186a00801da69b.html
    Please rate all useful posts
    "opportunity is a haughty goddess who waste no time with those who are unprepared"

  • 3G : 2 Cellular interfaces on one HWIC

    Hi during troubleshooting I saw that out EHWIC-3G-HSPA-U creates two cellular interfaces, so the question is why two ??
    Following Config
    cellular 0/2/0 gsm profile create 1 vpn.apn.net  chap UMTS_BACKUP_TEST #password#
    chat-script UMTSDIAL "" "atdt*99#" TIMEOUT 30 "CONNECT"
    interface Cellular0/2/0
    description UMTS-Nr. +43xxxxxxxx
    no ip address
    encapsulation ppp
    dialer in-band
    dialer-group 2
    dialer pool-member 207
    async mode interactive
    interface Cellular0/2/1
    no ip address
    encapsulation ppp
    shutdown
    interface Dialer207
    description UMTS_Backup_7
    vrf forwarding UMTS_APN
    ip address negotiated
    ip virtual-reassembly in
    encapsulation ppp
    dialer pool 207
    dialer idle-timeout 10
    dialer enable-timeout 6
    dialer string UMTSDIAL
    dialer-group 2
    ppp chap hostname UMTS_BACKUP_TEST
    ppp chap password #password#
    ip route vrf UMTS_APN 0.0.0.0 0.0.0.0 Dialer207
    dialer-list 2 protocol ip permit
    line 0/2/0
    exec-timeout 0 0
    script dialer UMTSDIAL
    modem InOut
    no exec
    rxspeed 7200000
    txspeed 5760000
    line 0/2/1
    no exec
    rxspeed 7200000
    txspeed 5760000
    Thx
    Hubert

    Im having exactly the same issue..  I believe it has something to do with the 3G cards supporting 2 PDP contexts but i have no idea how to remove it... The thing i can think is upgrading the firmware on the card which might remove it but i dont know...
    Can anyone help ?

  • Manage Cisco ISR routers as one device

    I'm looking for a tool that allows me to manage two Cisco ISR routers (2911) as one device ("cluster" device or "virtual" device).
    Both routers are connected directly to the internet and are using HSRP to perform a function of the virtual default gateway for LAN devices.
    What about Cisco ASA in Active/Active or Active/Passive Failover mode?
    Thanks,
    Jernej

    No, this is not currently possible.  The devices need to be managed using their individual IP addresses (i.e. not the virtual IP of HSRP).  You'll generally want to do that for the time being since both devices will have their own CPU, memory, buffer, etc. characteristics.

  • Firewall Cisco ASA 5505 new interface license problem

    Hi
    I have one ASA 5505 with a Base License
    The problem is when i want to use a new named interface the system says "With current License maximum number of named interfaces allowed is 3. Name cannot be set for this interface"
    And the question is if with this base license the interface cannot be used or only cannot be named?
    here the output of my firewall:
    Cisco Adaptive Security Appliance Software Version 8.2(5)
    Device Manager Version 6.4(5)
    Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz
    Internal ATA Compact Flash, 128MB
    BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
    Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                                 Boot microcode   : CN1000-MC-BOOT-2.00
                                 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
                                 IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05
    0: Int: Internal-Data0/0    : address is e02f.6de6.7843, irq 11
    1: Ext: Ethernet0/0         : address is e02f.6de6.783b, irq 255
    2: Ext: Ethernet0/1         : address is e02f.6de6.783c, irq 255
    3: Ext: Ethernet0/2         : address is e02f.6de6.783d, irq 255
    4: Ext: Ethernet0/3         : address is e02f.6de6.783e, irq 255
    5: Ext: Ethernet0/4         : address is e02f.6de6.783f, irq 255
    6: Ext: Ethernet0/5         : address is e02f.6de6.7840, irq 255
    7: Ext: Ethernet0/6         : address is e02f.6de6.7841, irq 255
    8: Ext: Ethernet0/7         : address is e02f.6de6.7842, irq 255
    9: Int: Internal-Data0/1    : address is 0000.0003.0002, irq 255
    10: Int: Not used            : irq 255
    11: Int: Not used            : irq 255
    Licensed features for this platform:
    Maximum Physical Interfaces    : 8        
    VLANs                          : 3, DMZ Restricted
    Inside Hosts                   : Unlimited
    Failover                       : Disabled
    VPN-DES                        : Enabled  
    VPN-3DES-AES                   : Enabled  
    SSL VPN Peers                  : 2        
    Total VPN Peers                : 10       
    Dual ISPs                      : Disabled 
    VLAN Trunk Ports               : 0        
    Shared License                 : Disabled
    AnyConnect for Mobile          : Disabled 
    AnyConnect for Cisco VPN Phone : Disabled 
    AnyConnect Essentials          : Disabled 
    Advanced Endpoint Assessment   : Disabled 
    UC Phone Proxy Sessions        : 2        
    Total UC Proxy Sessions        : 2        
    Botnet Traffic Filter          : Disabled 

    Hi,
    The ASA5505 has with Base License the limitation of 3 Vlan interface of which 1 is also limited in access (shown by the above output mentioning DMZ Restricted)
    For an interface on the ASA to operate it must have a name with the command "nameif"
    If you already have 3 Vlan interfaces in use then with this license you wont be able to configure 4th Vlan interface without getting a license that supports more interfaces. I guess that would be the Security Plus license.
    I know that this has come as a surprise to several users that have posted here on the forums. I too think that its a needles "feature" in the ASA to limit the use of the device in such a way.
    - Jouni

  • Cisco ASA 5510 Backup Interface configuration

    Hi Experts,
    I am a newbie with Cisco Firewalls, pls help.
    We have a BSNL Leased Line of 2MBPS with few Static IP's of Which 2 IP's are configured in Firewall 1 For the Outside Interface and one for publishing the DMZ server. Most of the times due to some reasons or the other the BSNL line is going down. so now I need to configure one another TATA Broadband 1MBPS Dialup Line as a Backup for the BSNL Line so as to provide a uninterupted Internet to our users.
    Pls guide me the Steps
    Thank in Advance.
    Anish N

    Hi Anish,
    Check the below mentioned link for configuration.
    http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

  • Cisco AP 1131AG Web Interface Problem

    Hello,
    I purchased two Cisco access points (model AIR-AP1131AG-A-K9) from a seller on eBay. The Access Points power up fine and are able to get an IP address (I can see the AP's MAC address on my router), but it won't let me connect to the web interface to manage it. I have tried using different browsers, but they all say something along the lines of "The page could not be found" when I enter the IP address into my browser. No login screen, no nothing: just a time-out error.
    When the Access Points are powered on, the Ethernet and Radio lights start out green, but then the Ethernet light stays green and the radio light flashes amber and the two alternate being lit. The status light on the outside of the Access Point goes from green to orange to red and back again, looping infinitely.
    Any ideas what could be wrong? Thanks for any and all help in advance! (Please let me know if you need more information; I don't ahve the AP's with me, but I will be home in a few hours and can respond then.)

    do a show cdp neighbor detail on the port the AP is connected to.  Take a look at the software that is running, IOS will show k9w7, and lightweight will show k9w8.
    if it''s k9w8, you'll need to convert them back to IOS
    http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918
    HTH,
    Steve
    Please remember to rate useful posts, and mark questions as answered

  • Cisco ASA 5512 two interfaces

    i have an Cisco ASA 5512 working as Firewall
    We configure one ASA interface connecting to Cisco router 1700 with leasd line internet service without any problem.
    Now we have an extra internet connection ADSL 2MB connected to another ASA interface  
    I configure the ASA like this :
    1-    Enable interface 2 on ASA and connect it to ADSL router (interface ip 192.168.1.100 from the same ADSL router {192.168.1.1}range ) 
    2-    Create Access rule say source (My computer ip) destination  ADSL network range action accept
    3-    Create Nat Rule say source interface inside source ip (my ip) destination interface ADSL ip 192.168.1.100 destination source router ip 192.168.1.1
    4-    Add static route say ADSL interface source ip my ip gateway ADSL router
    This steps what I do but it doesn't work.
    Thanks in advance

    FYI for internet access I doubt this will work because if you configure two default route then ASA won't distribute traffic across two interface, first default route will be the one where ASA will send traffic. However from your description it is not very clear which IP address you are trying to ping and how exactly rules you have configured.
    Either attach your config or paste the relevant config in post.

  • "failed to find profile ID" on Cellular Interface

    Hello World,
    I try to make a connection to a Wirelless 3G.
    I configure modem and I think that the modem is connected 
    show cellular 0/0/0 all
    Hardware Information
    ====================
    Modem Firmware Version = T1_0_3_2AP R361 CNSZ
    Modem Firmware built = 04/15/11
    Hardware Version = 1.0
    International Mobile Subscriber Identity (IMSI) = 546010100686679
    International Mobile Equipment Identity (IMEI) = 357115041341178
    Integrated Circuit Card ID (ICCID) = 8968701111106200287
    Mobile Subscriber International Subscriber
    IDentity Number (MSISDN) =
    Factory Serial Number (FSN) = CC3322315641011
    Modem Status = Online
    Current Modem Temperature = 29 deg C, State = Normal
    PRI SKU ID = 9900198, SKU Rev. = 1.2
    Profile Information
    ====================
    Profile 1 = INACTIVE* **
    PDP Type = IPv4
    Access Point Name (APN) = USB
    Authentication = None
    Username:
    Password:
      * - Default profile
    Data Connection Information
    ===========================
    Data Transmitted = 0 bytes, Received = 0 bytes
    Profile 1, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 2, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 3, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 4, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 5, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 6, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 7, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 8, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 9, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 10, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 11, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 12, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 13, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 14, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 15, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Profile 16, Packet Session Status = INACTIVE
            Inactivity Reason = Normal inactivate state
    Network Information
    ===================
    Current Service Status = Normal, Service Error = None
    Current Service = Combined
    Packet Service = UMTS/WCDMA (Attached)
    Packet Session Status = Inactive
    Current Roaming Status = Home
    Network Selection Mode = Automatic
    Country = NCL, Network = MOBNCL
    Mobile Country Code (MCC) = 546
    Mobile Network Code (MNC) = 1
    Location Area Code (LAC) = 10
    Routing Area Code (RAC) = 1
    Cell ID = 30521
    Primary Scrambling Code = 434
    PLMN Selection = Automatic
    Registered PLMN = NCL MOBILIS , Abbreviated = MOBNCL
    Service Provider =
    Radio Information
    =================
    Radio power mode = ON
    Current Band = WCDMA 2100, Channel Number = 10762
    Current RSSI(RSCP) = -63 dBm
    Band Selected = Auto
    Number of nearby cells = 1
    Cell 1
            Primary Scrambling Code = 0x1B2
            RSCP = -64 dBm, ECIO = -7 dBm
    Modem Security Information
    ==========================
    Card Holder Verification (CHV1) = Disabled
    SIM Status = OK
    SIM User Operation Required = None
    Number of CHV1 Retries remaining = 3
    GPS Information
    ==========================
    GPS Info
    GPS State: GPS disabled
    SMS Information
    ===============
    Incoming Message Information
    SMS stored in modem = 1
    SMS archived since booting up = 0
    Total SMS deleted since booting up = 0
    Storage records allocated = 60
    Storage records used = 1
    Number of callbacks triggered by SMS = 0
    Number of successful archive since booting up = 0
    Number of failed archive since booting up = 0
    Outgoing Message Information
    Total SMS sent successfully = 0
    Total SMS send failure = 0
    Number of outgoing SMS pending = 0
    Number of successful archive since booting up = 0
    Number of failed archive since booting up = 0
    Last Outgoing SMS Status = SUCCESS
    Copy-to-SIM Status =     0x0
    Send-to-Network Status = 0x0
    Report-Outgoing-Message-Number:
      Reference Number =     0
      Result Code =          0x0
      Diag Code =            0x0 0x0 0x0 0x0 0x0
    SMS Archive URL =
    Error Information
    =================
     Cached info is displayed
    at!err
    QDSP6                             ARM9 (not saved)
    00   08 uim              08480    00   01 hsu_conf_sel_nv  00572
    01   63 gsnvif           00245    01   01 hsu_conf_sel_nv  00616
    02   FF cmtask           01162    02   01 timer            03552
    03   1B mmglbl           00392
    04   1B gsnvif           00478
    05   1B rr_init          01597
    06   1B rr_init          01601
    07   1B rrcdata          08026
    08   01 gmmutil          01099
    09   01 gmmutil          01118
    10   01 gmmutil          01141
    11   01 gmmutil          01156
    12   01 gmmutil          01174
    13   01 gmmutil          01198
    14   14 rrcllcp          16550
    15   04 rrccspf          02198
    16   17 rrccsp           20686
    17   04 gsdi             09787
    18   01 gsdi_co          01538
    19   1B cnlbs            03307
    OK
    at!gcdump
    No crash data available
    OK
    Modem Crashdump Information
    ===========================
    Modem crashdump logging: off
    I have the following config
    chat-script OPT3G "" "ATDT*99***1#"
    interface Cellular0/0/0
     ip address negotiated
     ip virtual-reassembly in
     encapsulation slip
     no ip route-cache
     load-interval 60
     dialer in-band
     dialer string OPT3G
     dialer-group 1
     async mode interactive
    interface Cellular0/0/1
     no ip address
     encapsulation slip
    ip forward-protocol nd
    no ip http server
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 Cellular0/0/0
    dialer-list 1 protocol ip permit
    access-list 1 permit any
    line 0/0/0
     exec-timeout 0 0
     script dialer OPT3G
     login
     modem InOut
     no exec
     transport input all
     transport output all
     autoselect during-login
     autoselect ppp
    line 0/0/1
     exec-timeout 0 0
     script dialer OPT3G
     login
     modem InOut
     no exec
     transport input all
    I make debug
    debug chat
    debug cellular 0/0/0 messages all
    I try to start the interface
    Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
    *Jul 22 07:08:31.363: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 96 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3E 00 0D
    *Jul 22 07:08:32.283: CHAT0/0/0: Attempting async line dialer script
    *Jul 22 07:08:32.283: CHAT0/0/0: Dialing using Modem script: OPT3G & System script: none
    *Jul 22 07:08:32.283: CHAT0/0/0: process started
    *Jul 22 07:08:32.283: CHAT0/0/0: Asserting DTR
    *Jul 22 07:08:32.283: CHAT0/0/0: Chat script OPT3G started
    *Jul 22 07:08:32.283: CHAT0/0/0: Sending string: ATDT*99***1#
    *Jul 22 07:08:32.283: CHAT0/0/0: Chat script OPT3G finished, status = Success.
    *Jul 22 07:08:34.283: %LINK-3-UPDOWN: Interface Cellular0/0/0, changed state to up
    *Jul 22 07:08:34.283: cellular_dip_ip_address_negotiated: failed to find profile ID for Cellular0/0/0
    *Jul 22 07:08:34.363: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 97 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3F 00 0C
    *Jul 22 07:08:35.283: %LINEPROTO-5-UPDOWN: Line protocol on Interface Cellular0/0/0, changed state to up.
    *Jul 22 07:08:36.283: cellular_dip_cell_set_encap_whip: Invalid profile ID 255 for Cellular0/0/0
    *Jul 22 07:08:36.835: [Cellular0/0/0]:MGMT RX (HEARTBEAT) (14 bytes):
     00 0A 6B 98 00 00 07 00 00 00 00 00 00 00
    *Jul 22 07:08:37.363: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 99 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3E 00 0C
    *Jul 22 07:08:38.283: cellular_dip_cell_set_encap_whip: Invalid profile ID 255 for Cellular0/0/0.
    *Jul 22 07:08:40.283: cellular_dip_cell_set_encap_whip: Invalid profile ID 255 for Cellular0/0/0
    *Jul 22 07:08:40.367: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 9A 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 40 00 0F
    Success rate is 0 percent (0/5)
    RTR-TEST98#
    *Jul 22 07:08:43.371: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 9B 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3C 00 11
    *Jul 22 07:08:43.835: [Cellular0/0/0]:MGMT RX (HEARTBEAT) (14 bytes):
     00 0A 6B 9C 00 00 07 00 00 00 00 00 00 00
    *Jul 22 07:08:46.375: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 9D 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3E 00 0D
    *Jul 22 07:08:49.379: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B 9E 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3E 00 0C
    *Jul 22 07:08:50.835: [Cellular0/0/0]:MGMT RX (HEARTBEAT) (14 bytes):
     00 0A 6B 9F 00 00 07 00 00 00 00 00 00 00
    *Jul 22 07:08:52.383: [Cellular0/0/0]:MGMT RX (RSCP_ECIO) (24 bytes):
     00 14 6B A0 70 0B 07 00 00 00 00 00 00 0A 00 01
     00 01 01 B2 00 3E 00 0E

    hello everyone,
    I still have my issue and can't connect my 3G interface.
    I can complete my issue with this log 
    *Aug 12 08:35:34.023: cellular_dip_ip_address_negotiated: failed to find profile ID for Cellular0/0/0
    *Aug 12 08:35:38.019: cellular_dip_cell_set_encap_whip: Invalid profile ID 255 for Cellular0/0/0
    Thank's for your help.

  • Not access WLC cisco 2106 by GUI interface

    Hi Expert ,
                    i am trying to configure it but i can not access GUI interface.it is true this is my frist time.please help me to access this GUI interface.

    I assume you have read through the Quick start guide for the 2106 controller?
    http://www.cisco.com/en/US/docs/wireless/controller/2100/quick/guide/ctrl206q.html
    Also the configuration guide covers connecting via cli and gui:
    http://www.cisco.com/en/US/docs/wireless/controller/5.2/configuration/guide/c52intf.html

  • Cisco 9201 Routing between interfaces

    Done
    Thanks

    We are upgrading our internet gateway to a cisco 9201 router. Two interfaces. 
    GE0/0 - 67.x.x.98 255.255.255.252
    GE0/1 - 184.x.x.217 255.255.255.248
    Next hop from GE0/0 is 67.x.x.97
    I have a static route of 0.0.0.0 0.0.0.0 67.x.x.97
    The problem is that I can not get the two interfaces to route
    ping from 184.x.x.220 to 67.x.x.97 fails. Trace route fails. 
    I am having an off-week. Any help would be greatly appreciated. 
    This topic first appeared in the Spiceworks Community

Maybe you are looking for