Conect two routers over console port

Hi Guys ,
How conect two routers or firewall over console port for manager ?
Thanks
Jorge

Hi Jorge,
I do not believe that you can connect to devices over console ports.
I have in the past connected from an aux port on a router to a console port on a switch using one of the old RJ45-RJ45 rollover cables Cisco used to ship with DB9-RJ45 adapters before they starting shipping DB9-RJ45 console cables.
You should be able to use the configuration in the document at the link below as a starting point.
http://www.cisco.com/en/US/tech/tk801/tk36/technologies_configuration_example09186a008014f8e7.shtml
This document is for a terminal server with 16 async ports. The config below should be ok for an aux port.
ip host switch 2001 172.21.1.1
interface Loopback1
ip address 172.21.1.1 255.0.0.0
line aux 0
session-timeout 20
no exec
exec-timeout 0 0
Please rate if helpful.

Similar Messages

Is It possible connect two router**from console port to console port

Hi,
I need this for doing reverse telnet.
Thanks very much

No
you can connect router 1's aux port to router 2's console port.
line aux 0
password blablabla
login
modem InOut
transport input all
find the aux port's line number which depends on the router model then telnet to a live ip on router 1 on that port.
Worc_3640#sh line
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
0 CTY - - - - - 0 0 0/0 -
129 AUX 9600/9600 - inout - - - 0 0 0/0 -
* 130 VTY - - - - - 75 0 0/0 -
so say 10.1.1.100 2129 if 10.1.1.100 is on that box.
should get you going..
Chris

Ways to connect two routers

Hello,
We have two routers connected as shown in the diagram:
We would like to create a one-hop connection ("peering") between the two routers (over the link shown) for routing purposes (iBGP, OSPF, static routes).
What are the suggested way(s) to do it?
Method 1: We have tried creating two GRE tunnels (one for IPv4 and one for IPv6) and it works but we are having various issues (which we are still troubleshooting)
Method 2: We could create IPSec tunnels; I have not tried it.
Method 3: This is my main question here. Can we define a common VLAN on the two routers so that, by using trunk links in-between, the two interfaces (actually a new subinterface of each: R1,G0/0.x - R2,G0/1.x) can coexist "alone" on one VLAN?
Other suggested methods please?
Thanks in advance for your assistance.
Regards,
Nick

Thanks for the reply.
Here is the current setup:
{View image and zoom in to full scale for clearer reading!}
With this configuration, the tunnels seem to be working correctly, however we are still having a problem: When I switch traffic so that it uses the tunnels, netflow export from R1 to a netflow server (using nfdump/nfsen) which is located at a LAN connected to R2, is not recorded correctly; I see (on R1):
# sh ip flow export
Flow export v9 is enabled for main cache
Export source and destination details :
VRF ID : Default
Source(1) 195.251.xxx.yyy (Loopback0)
Destination(1) 195.251.xxx.xxx (9995)
Version 9 flow records
680074 flows exported in 8490 udp datagrams
0 flows failed due to lack of export packet
1579 export packets were sent up to process level
0 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures
and I find that our traffic is not recorded correctly. (When we don't use these tunnels -but another route not shown in the diagram, which does not involve tunnels- then "export packets sent up to process level" are 0 and netflow export works correctly.)
Netflow monitoring is critical to our network, so we have to troubleshoot this, before we can use this configuration in production. (I am thinking of opening a new thread for this problem.)
Any and all suggestions will be welcome.
Nick

How to : connect two routers running under another

So this issue is tricky and i have had no luck in getting this to work. Basically what i need to do, is connect "Network 2" with "Network 1" and both run off of another larger network. The Base Network is out of my control and i cannot set or change any setting within that network's routers or DHCP Servers. Thus i am forced to set routes within my routers to communicate to each other. The need for this communication is software that runs on a server within "Network 1" needs to be available to all client computers running on both "Network 1" and 'Network 2". Obviously the computers running off the same router as the server are fine. Getting the computers running off the router for "Network 2" is the tricky part. Here is a link to a diagram of the setup : http://i64.photobucket.com/albums/h176/m4x70r/networkquery.jpg Some of the things i have tried are setting the DMZ on "Network 1" to point at the server. Setting routes in both to point at the other. Setting the Gateway in "Network 2" router to point at the WAN address of "Network 1" and setting the DNS of "Network 2" to the WAN of "Network 1". No matter what i do, the laptops inside "Network 2" cannot ping the laptops in "Network 1" or even ping the router for "Network 1". However, when pinging the name of the server, it does show the IP addy i gave it, so it sees it in some small fashion but cannot link to it. I'm stumped. Time to get a networking cert i suppose. Any help or suggestions would be much appreciated!

First you have missed to mentioned the most important thing for your setup: are those two routers running in gateway mode or router mode?
It is also quite confusing which routes you tried to set exactly. (in particular why you mentioned the DNS server?). Please simply post the exact settings of the routes you have entered on either routers.
As you have mentioned that you have no control over the main network I guess your routers operate in gateway mode. In that case they do NAT - network address translation. NAT shares a single public IP address with multiple computers with private IP addresses inside the LAN. NAT makes computers in the LAN inaccessible from the outside unless you have configured an explicit port forwarding or DMZ host.
Moreover, with NAT you cannot access the computers inside the LAN on an inside IP address. This is impossible because the private IP addresses inside the LAN are not visible on the outside. You can only access any computer on the WAN IP address of the router. You cannot ping any computer inside the LAN behind the router with NAT. UDP or TCP access is limited to what you forward. The DMZ host is the "default" forward which gets all ports which are not forwarded otherwise.
If both routers are in gateway mode you don't have to define any routes on the routers as the destination subnet is not accessible. To make your server accessible you have to define port forwardings to your server on 192.168.1.2 or put it into the DMZ. You can then access the server the external IP address of the router, i.e. 10.7.2.101. The router forwards incoming traffic on that address to your server at 192.168.1.2.

Using two routers for the same SSID

So here's my story. I have a standard Actiontec router in my basment, connected straight to the coax outlet, and connected by LAN Ethernet to a crappy computer nobody uses. It gives off a WPA2 wifi network, let's call it MyNetwork. For the longest time it's been the only router in the house. The coax outlet is on a splitter, splitting the coax outlet into one wire that goes to the Actiontec modem/router and the other to my TV STB. Recently we installed a new coax outlet on the other side of my house and next to it we have a brand new desktop computer that we use often. It has no wifi so and we can't run an ethernet cable throughout the entire house so we got a new Actiontec modem/router from our neighbor who just moved out. It's the exact same Actiontec device.
What we want to do is make it so that both routers give off signal on the same MyNetwork we have to make it a wider reaching signal, and so that I can connect the new desktop computer to the new router with an ethernet cable. I've read so many guides and they're all so confusing and it's such a mess that I almost completely screwed over my network. it seems like the two routers are completely independent of one another, not even aware of the others' existence. The new router is definitely in range of the old one. I've logged into 192.168.1.1 on the new computer and the new router seems to think it IS the old router (or so I think). It showed me all the same devices that have connected to MyNetwork and such, but then again it's always hard to be certain exactly which device is which. After messing around I must have changed some IP address or something, but it seems that 192.168.1.1 doesn't take me to the Verizon login screen, but 192.168.2.1 does. Can I reset those IP addresses?
And of course, can somone please provide a clean, easy to follow course of action as to how to set up two routers on one network?

maxbirch wrote:
... I have a standard Actiontec router in my basement ... connected by LAN Ethernet to a computer ... It gives off a WPA2 wifi network, let's call it MyNetwork ... The coax outlet is on a splitter ... one wire that goes to the Actiontec ... other to my TV STB ...
... installed a new coax outlet on the other side of my house ...
... What we want to do is make it so that both routers give off signal on the same MyNetwork we have to make it a wider reaching signal, and so that I can connect the new desktop computer to the new router with an ethernet cable ...
... can somone please provide a clean, easy to follow course of action ... ?
I suspect it might be a good idea to step back reconsider your ultimate layout. Essentially you now have two (or if the STB is also included, three) coax drops connected to the ONT. It seems that you desire that one of these service the STB, and the other two each service a desktop and a wireless access point. If this is the case, continue reading.
There is no need to consider the original Actiontec router as the primary router, wireless or otherwise. Use the new coax location to connect to the primary Actiontec router (you can use either router). For starters, reset both routers to their factory defaults using the reset switch on the back of each device (for details, do a search).
Once the primary router has been located (or relocated) to the new coax drop, just connect the new desktop there using an Ethernet cable connected to one of the LAN ports on the back of the router. Then set up your primary wireless network based on this router (once again, do a search on these forums for specifics on setting up a basic wireless home network).
Now use the original coax outlet where the first router was located to set up another access point. This access point will provide Ethernet connections plus an additional wireless network (if it's still needed). However you cannot have two wireless devices on a single home network with the same SSID (i.e., network name). Here are details on some methods to do this:
http://www.dslreports.com/faq/12506
For additional details, here's the complete FAQ:
http://www.google.com/url?sa=t&rct=j&q=&esrc=s&frm=1&source=web&cd=1&cad=rja&sqi=2&ved=0CCwQFjAA&url...
Take a careful look at these suggestions and references to decide if this is what you want. Then report back if there are remaining questions. Good luck.

CISCO 1721 :// No Echo/Response from CONSOLE Port

I have a CISCO 1721 I found in my 'stuff' when I was moving and I want to use it as a home router. Connecting to the CONSOLE port I get nothing echo'ed back. I confirmed connection hardware (USB=>Serial/Roll-Over cable, etc) by consoling into my CISCO 1841 lab router.
Other things I've tried are:
1) Wireshark'ed CONSOLE port - nothing;
2.) Wireshark'ed the AUX port - nothing;
3.) Wireshark'ed the ETH port - looks like 'normal' data.
I wanted to see if I could access the CONFIG from the AUX port by directly connecting my Laptop w/ a Roll-Over cable but not sure how to do that w/out a modem. Any suggestions from anyone??
Best regards....
J. David FIG
[email protected]

J. David FIG
The aux port is not restricted to use for modem. Depending on how the router is configured you might be able to start an exec session, get into privilege mode, and access the configuration of the router. I have been successful on similar routers connecting the console cable to the aux port and accessing the router.
HTH
Rick

Add time capsule to existing network to make subnetwork (two routers?)

We have a modem/router (motorola) provided by isp to connect to internet. Most devices connect to this wirelessly. We just purchased an Airport + Time Capsule to create a subnetwork (add to existing network via ethernet cable), so that only a few devices can wirelessly connect to Airport + Time capsule to store time machine back up and to wirelessly print to one printer connected by usb to Time Capsule. When I select "I want to add to existing network" the motorola only shows up as a wireless, can't see the wired option. I tested that the ethernet cable works and connected to one port on motorola and WAN on Time Capsule. How do I tell Airport + Time Capsule to connect to motorola modem/router via the ethernet cable? I think I want it to connect via cable because I don't want the Airport to replace the existing router, rather I want to end up with two routers (one for entire network, and second one just for subnetwork).
Thank you.

Ok, your question confused me with the airport and TC as if it is two things not one.
when I connect the ethernet cable to TC, why doesn't modem/router show up in connect to list? Or if wrong list, where should I look, to select, to get it to "see" what it is connected to by ethernet?
Are you using v6 in Lion utility? I am using SL with 5.5 utility. There is no such place that I can find. (You will do better downloading and using v5.6 for Lion anyway).
On the manual setup.. summary page it will show the IP you get on the WAN port. From default settings this will all work properly.. there is nothing you need to do.
Plug ethernet from modem router to TC wan port. When you do the TC will get an IP.
If you open the internet tab, you can see Connect using.. ethernet. Just leave that. and everything else on auto.
For connection sharing, you still need to share a public IP.. although TC will complain you are not using public but private IP.. there is nothing you can do about that. Just set the TC to ignore the error double NAT.
When I began installation, I plugged everything in, then plugged in power. I opened Airport Utility, and followed on-screen instructions, but when selecting "connect to existing network with ethernet cable" my modem/router doesn't appear in the list.
Do not use connect to existing network.. that will bridge the TC which you don't want.
You have to use the existing network as if it is public network. And stuff behind your TC is private.
If I set the TC to bridge mode, won't it "take over" all router activity, and the first group of computers won't be able to connect directly to motorola? (I don't want this first group of computers to be able to connect to the TC).
Also, I don't want the TC to connect to the motorola wirelessly.)
If you set the TC to bridge it will not route at all... it will become a client of the existing network. And all IP addresses will be taken from the Motorola.. you will have one flat network, which is what usually people want.
If you are still struggling.. do this.
1. Tell me the IP address the existing Motorola is passing to the clients. Your one big issues here is making sure they are in fact on two different subnets.
2. As long as condition of 1 is fulfulled this will work at default setting. Reset the TC by holding down the reset for 10sec.
Plug Lan motorola to WAN TC.
Plug a computer into the TC to do setup.
Set up as if you have public IP on wan. Tell TC to ignore double NAT.
Set wireless and TC names as you want.
Now test internet.. on a client computer on the TC. it should work fine. At least for everything that doesn't need interactive connection.
3. You can improve things by using DMZ in the Motorola to the TC. That alleviates at least some of the issues that arise with double NAT.

Difference between console port and dedicated management port

Can someone explain what the difference is between the console port and the dedicated management port(fa0) , on a Cisco 2960s switch.
Thank You.

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
A console port is special for two reasons. First, it's "known" to the system as its console port which means the system will send status information to it, and often treat it special when accepting input. Second, the console port is generally wired as a serial port. (It also normally doesn't have an IP address.)
The console port was intended for where the system operator controls the system from, usually nearby (physically). (Console ports are/were used for any computer based system.)
Management ports are generally for remote management using an Ethernet port. On older switches/routers, a device might be configured to use an ordinary Ethernet port for this purpose. On newer switches/routers, a Ethernet port is provided for this purpose. For these, the device may actually use different hardware for port and might treat it internally differently. For example, often the Ethernet management port is only FE, it may not have ASIC support for high speed switching, and it might be in it's own predefined VRF. Generally, a management port will have an IP address, but different from IP address spaces used by other hosts.
Out-of-the-box, a console port will allow you to configure the device, but a management port will often require some additional configuration.

Load balancing between two routers

I have two routers connected through the LAN connection. The first one is using as routing protocol EIGRP, the other one is part of the managed service and I do not have access to it. I would like to make a load balancing between the two of them by redistributing the static routes in EIGRP. When I tried this, I am loosing the EIGRP entry for this route in the routing table. I would like to have both of them , so we could have traffic sharing. I appreciate if you give me any hints.

Raju,
you have two choices as far as I can see. If you want to use static routing over the WAN to your branch, you could duplicate your static routes to the branch and point them to the secondary router. You will have two identical sets of static routes in the primary router, one set pointing to the WAN interface and the other one pointing to the secondary router.
ip route x.x.x.x "WAN-interface"
ip route x.x.x.x "secondary router"
ip route y.y.y.y "WAN-interface"
ip route y.y.y.y "secondary router"
etc.
As a result the primary router will have two routes to the branch and will load-balance. If one next-hop fails (either the WAN interface or the secondary router), only the other will be used. If the next-hop comes back up, load-balancing will resume.
The other choice would be to use EIGRP over the WAN, and make sure the two routers become EIGRP neighbors. Then you can use the "variance" command to achieve unequal cost load-balancing between the two routers. Let me know if you need more information about this, but i think static routes will be sufficient in your situation.
HTH, Thomas

ACE 4710 transparent LB with two Caches and two routers.

Hello,
I have ACE 4710 that load balance two cach flows (bluecoat), i am doing pbr on the routers to send the traffic destined to port 80 to ACE then Cach farm. After that the Cach flow will get the page from the internet via two routers. The return traffic will match another pbr on the routers with source port 80 that will send it to the ACE then CachFlow again .....then to the users.
I am not using ip-spoofing on the CachFlow for now. In the figure attached i created a VIP 0.0.0.0 0.0.0.0 port 80 on the interface on the ACE facing the routers, but the question is do i have to create another VIP 0.0.0.0 0.0.0.0 port 80 on the interface on ACE facing the Cach Flow? or just forward the traffic on the default route? What might be the default route since i have to use two routers and i cannot use hsrp?
Kindly I need some assistance
Thank you and regards,
George
access-list PERMIT_ALL line 8 extended permit ip any any
access-list CFLOW line 8 extended permit ip any any
ip name-server 8.8.8.8
ip name-server 4.2.2.2
##################################Config for Cache Cache Servers###################
probe http CISCO_WWW_PROBE
ip address 72.163.4.161
interval 2
faildetect 2
passdetect interval 2
passdetect count 5
request method head url /index.html
expect status 200 200
exit
probe http YAHOO_WWW_PROBE
ip address 87.248.112.181
interval 2
faildetect 2
passdetect interval 2
passdetect count 5
request method head url /index.html
expect status 200 200
exit
serverfarm host TRANSPARENT_PROXY_SF
description Transparent Proxy Farm
transparent
predictor hash url
probe CISCO_WWW_PROBE
probe YAHOO_WWW_PROBE
rserver CFLOW01
    inservice
rserver CFLOW02
    inservice
exit
exit
############################################# Router Cache Farm ############################
probe icmp ICMP_PROBE
description *** Probe for icmp health monitoring ***
interval 5
faildetect 2
passdetect interval 60
passdetect count 2
exit
rserver host Router01
description Connection to Sodetel Router
ip address 192.168.14.4
probe ICMP_PROBE
inservice
rserver host Router02
description Connection to IDM Router
ip address 192.168.14.5
probe ICMP_PROBE
inservice
serverfarm host Routers
description Transparent Proxy Farm
transparent
predictor hash url
probe ICMP_PROBE
rserver Router01
    inservice
rserver Router02
    inservice
exit
exit
################################# Management################################
class-map type management match-any REMOTE_MGMT
description Allow Remote management for below protocols
8 match protocol icmp any
9 match protocol ssh source-address 172.31.13.31 255.255.255.255
10 match protocol ssh source-address 172.31.31.21 255.255.255.255
policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
class REMOTE_MGMT
    permit
class-map match-all CFLO2Internet
2 match virtual-address 0.0.0.0 0.0.0.0 any
class-map match-all TRANSPARENT_VIP_CM
2 match virtual-address 0.0.0.0 0.0.0.0 tcp eq www
policy-map type loadbalance first-match TRANSPARENT_LB_PM
class class-default
    serverfarm TRANSPARENT_PROXY_SF backup Routers
policy-map type loadbalance first-match CFLO2Internet_LB
class class-default
    serverfarm Routers
policy-map multi-match CFLO2Internet_PM
class CFLO2Internet
    loadbalance vip inservice
    loadbalance policy CFLO2Internet_LB
    loadbalance vip icmp-reply active
    connection advanced-options TCP
policy-map multi-match L3L4_PM
class TRANSPARENT_VIP_CM
    loadbalance vip inservice
    loadbalance policy TRANSPARENT_LB_PM
    loadbalance vip icmp-reply active
    connection advanced-options TCP
====Interfaces======
interface vlan 11
description Interface between Routers and ACE
ip address 192.168.14.2 255.255.255.224
alias 192.168.14.1 255.255.255.224
peer ip address 192.168.14.3 255.255.255.224
no icmp-guard
access-group input PERMIT_ALL
service-policy input REMOTE_MGMT_ALLOW_POLICY
service-policy input L3L4_PM
no shutdown
interface vlan 21
description Connection to CFlow ServerFarm
ip address 192.168.12.2 255.255.255.224
alias 192.168.12.1 255.255.255.224
peer ip address 192.168.12.3 255.255.255.224
no icmp-guard
access-group input CFLOW
service-policy input CFLO2Internet_PM ------>>>> Is this necessary???
no shutdown

Hi George,
In the topology you described, only the service-policy in the interface towards the routers is necessary. For the traffic from the caches, the ACE will just forward to the default gateway.
The only problem is, as you mentioned, that you cannot use HSRP. In that case, you can still configure two default gateways, but there is no way to predict which one the ACE will use at a given time (the way it does to select the one it will use is sending an ARP request to both gateways and using the one that replies first until the ARP entry expires)
If you need to load-balance the traffic between both routers, then yes, you would need to configure a new VIP on the cache side and load-balanced to a transparent serverfarm composed of both routers.
Regards
Daniel

CATALYST 2820, console port config for modem

Hi,
Im a 2nd semester CCNA student, and I purchased a old CATALYST 2820 switch for training purposes. I do not know the password and the console port has been configured for a modem. I thought that it would be easy to reset the passwordbut cannot find any way to do it with the 2820, and the console port configured for a modem.
Does anyone know what the default factory password is? If the password has been changed (from the factory default), how can I reset the system?
Thanks!

I appreciate your help!
I did look at that link several timesmy 2820 has a mfg. date of Sept 97. I held in the Mode button, but the LED above port 1x does not come on (held it in for over a minute). I never see any info. using the console port.
I did try attaching a modem to the console portit worksI get a login prompt. I dont know if it is the factory default password. I know that the rollover cable is workingtried a 827-4v.
Am I doing something wrong???
Thanks, David

No AAA authentication on Console port

I would like to configure our routers to use our ACS server for authentication and enable authorization for all telnet access but not use the ACS when connected to the console port. I was able to get the router configured so that console username and password access was local. However, when I attempt to go into enable mode from the console port the router still goes after the ACS server for the enble password. How do I get around this?

--begin ciscomoderator note-- The following post has been edited to remove potentially confidential information. Please refrain from posting confidential information on the site to reduce security risks to your network. -- end ciscomoderator note --
Thanks this does help. However, I'm still running into and issue. My ultimate goal is to have all users authenticate and get enable access through our ACS server based on there corporate NT domain username/pw. If the ACS server is unavailable go to the local data base. This is working fine for user telneting to the routers and also works for the console port (if the ACS server is unavailable).
However, with the ACS server active, when I console in I authenticate based on the local database admin/cisco. But when I attempt to go into enable mode the router still goes after the ACS server for a password. I would like console port users to always use the local enable password.
I'm just trying to protect myself from a possible misbehaved ACS server.
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication login console local
aaa authentication enable default group tacacs+ enable
aaa authorization exec console local
enable secret 5 --moderator edit--
username --moderator edit--privilege 15 password 0 --moderator edit--
line con 0
exec-timeout 300 0
authorization exec console
login authentication console
line aux 0
line vty 0 4
password --moderator edit--

CRS-1 console port problem

Hi expert ,
I has CRS-1/8 with two RP , my problem is when i connect my console port to RP0 is work fine (( and i reload the rp1 )) but when i connect the same console cable to RP1 i see nothing , (just black screen ) ...can you please give me any suggestion ?

Hi ,
tomorrow
1- i will take the flash from this RP1
2- insert it to other RP ( I have one ) and try to fix this bug
3- then return the flash to its place our RP1 and then we will see show platform from RP0
if it is come back then we will try to fix the console issue and I will update you
thanks again
Bilal

Dot1q between two routers connected via 2950

Hi,
I have two 7200's connected to a 2950 (FE 22 + FE 24 - Both configured as trunks).
On the 7200's, I have the following:
7200-A
interface FastEthernet0/0.23
encapsulation dot1Q 23
ip address 192.168.1.1 255.255.255.252
no snmp trap link-status
7200-B
interface FastEthernet0/0.23
encapsulation dot1Q 23
ip address 192.168.1.2 255.255.255.252
no snmp trap link-status
2950:
interface FastEthernet0/22
switchport mode trunk
no ip address
duplex full
speed 100
interface FastEthernet0/24
switchport mode trunk
no ip address
duplex full
speed 100
But I cannot ping between the two routers?

7200-A has dot1q ints for servers connected to the 2950 (Access Ports)....these are all currently successfully trunked down FE24
I want to connect 7200-B to 7200-A, and have dot1q Ints on both routers(As /30's) that can communicate (They will be used on 7200-B as Internet gateways for VRF's (With IP Nat enabled)....I was hoping that by having 7200-B connected to 2950 FE22, and configuring that port as a trunk also, that the dot1q ints on both routers could talk.
vlan 23 does exist on 2950, and is being trunked on both FE 22 + FE 24
I dont have any spare FE ports on 7200-A, hence the reason for me connecting 7200-B to the 2950.

Noise on console port

I noticed a number of failed console port logins in our tacacs logs from a couple of remote routers. In both cases the usernames are gibberish - random characters in one case; access-list logs in the other.
logging in to these 2 routers (both 870s)I can see a lot of noise on the console ports. Anyone know what could be causing this?
router#sh line
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
0 CTY - - - - - 0 46524396 374144/0 -
1 AUX 0/0 - - - - - 0 0 0/0 -
* 2 VTY - - - - 61 5 0 0/0 -
3 VTY - - - - 61 0 0 0/0 -
4 VTY - - - - 61 0 0 0/0 -
5 VTY - - - - 61 0 0 0/0 -
6 VTY - - - - 61 0 0 0/0 -
sample log:
01/24/2007 11:19:35 Authen failed | ACCESSLOGP: list 101 denied udp 192.175.48.6(53) -> 87.42.147.10(54724) 4 packets | async | Invalid characters in username | tty0 | 192.168.20.62

well there shouldn't actually be anything plugged into the console, though I have no way of checking this.
#sh line con 0
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
0 CTY - - - - - 0 46983615 374144/0 -
Line 0, Location: "", Type: ""
Length: 24 lines, Width: 80 columns
Baud rate (TX/RX) is 9600/9600, no parity, 1 stopbits, 8 databits
Status: Ready
Capabilities: none
Modem state: Ready
Special Chars: Escape Hold Stop Start Disconnect Activation
^^x none - - none
Timeouts: Idle EXEC Idle Session Modem Answer Session Dispatch
02:00:00 never none not set
Idle Session Disconnect Warning
never
Login-sequence User Response
00:00:30
Autoselect Initial Wait
not set
Modem type is unknown.
Session limit is not set.
Time since activation: never
Editing is enabled.
History is enabled, history size is 20.
DNS resolution in show commands is enabled
Full user help is disabled
Allowed input transports are none.
Allowed output transports are telnet.
Preferred transport is none.
No output characters are padded
No special data dispatching characters
looks ok to me.

Conect two routers over console port

Similar Messages

Maybe you are looking for