Disappearance of IP Routing config on 6509
Our 6509 Switch (Cisco WS-C6504-E) suddenly lost its Routing table & entire Routing configs including all Static & Dynamic route configurations.
We had to turn on ip routing & restore the routing configuration .
Have anyone experienced this & does it could be some kind of caveat with the MSFC or the Layer 3 engine .
Any thoughts are welcome.
No config changes were applied to the switch ; except only a SNMP ip address was allowed .
Thanks
Prabs
Ah, ok, thanks. I guess that was pretty obvious, now that I know the answer.
The "ip routing" command isn't mentioned anywhere in the CLI documentation, but I guess if I'd thought about it a little longer, I may have come to the same conclusion.
Thanks Tom.
Similar Messages
-
WRT54G firmware failure leaving no access to router config
I have a WRT54G router. Running Vista SP2 64-bit on a laptop wired to router. When I first tried to upgrade the firmware I was connected wirelessly. (I know, please just think it but don't type it) During the upgrade the internet connection disconnected and the upgrade failed. I am connecting right now wirelessly using someones unsecure network. I attempted to upgrade the firmware to 8.00.7. Since then I am unable to access the router config using IP 192.168.1.1. I have read as many posts as I can handle. I have checked and that is the IP showing in Vista, (Network & Sharing, view status, properties) however I cannot ping that IP. It times out every time. I have done all the resets (10 seconds and up to 1 minute) on the router and power cycle etc. Nothing. I downloaded the firmware utility and I get an error message everytime that it is unable to get responses from the server. I have tried my password, which I think is gone due to all the resets, and am using admin as the password. I have disabled my firewall. I do have Network Magic and when I checked control internet access it says I am able to do so. Is there a way to disable Network Magic? Can that be the issue? When all this started I had my own internet connetion. I'm in the process of moving so I have disconnected my internet service. Since I'm only trying to connect to the router locally, do I really need to have a live internet connection? Please, HELP! I don't want to buy a new router. This one has been very reliable. If I do have to buy something new, can you recommend something just as reliable.
There have been 2 or 3 times where it looked as though I was going to be able to connect to config interface and the firsrt basic screen loads with minimal data and no clickable links to allow me to change screens. The "&" from one of the links that is supposed to appear but does not, is the only thing that appears in that area and if I click it, I either get a error from IE that it cannot connect, or, it takes me to the Ports screen with minimal data and I cannot progress from there. In the top right corner of the screen, it does show the firmware version is 8.00.7. ?????
P.S. Obviously, I'm not very computer savvy so excuse me if I'm missing the obvious.
Message Edited by Steviegt on 09-29-2009 08:38 AM
Message Edited by Steviegt on 09-29-2009 08:43 AM
Windows Vista Home Premium SP2 64-bit
Internet Explorer v8
Office 2007 SP2 Home and Student
Outlook 2007 Standalone
ESET Smart Security
WRT54G v8.00.6
Solved!
Go to Solution.Its Great that your issue has been resolved now...
-
Review my first 892 router config
This is the first router config that I have done, and I used CLI to program a Cisco model 892. There are about 10 users behind this router connected to a series SG300 switch. This router will provide DHCP, VLANs, and NAT access to the internet (via cable modem). The lan port is FE0 and the WAN port is FE8 to the internet. There are 4 Cisco WAP321 connected with two SSID's. The guest SSID (internet access only) uses VLAN2 and the normal SSID uses VLAN1.. Please let me know if there are security or efficiency improvements that I can add to this. Thanks!
! Last configuration change at 20:04:03 PST Mon Dec 22 2014
! NVRAM config last updated at 15:10:16 PST Mon Dec 22 2014
! NVRAM config last updated at 15:10:16 PST Mon Dec 22 2014
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname gateway
boot-start-marker
boot config usbflash0:CVO-BOOT.CFG
boot-end-marker
no aaa new-model
clock timezone PST -8 0
ip cef
ip dhcp excluded-address 192.168.10.1 192.168.10.99
ip dhcp excluded-address 192.168.8.1 192.168.8.99
ip dhcp pool data
import all
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 192.168.8.60
domain-name summmitdrive.local
ip dhcp pool guest_wifi
import all
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 64.59.168.13 64.59.168.15
no ip domain lookup
ip domain name summitdrive.local
ip host gateway 192.168.0.1
ip host fs1 192.168.8.60
ip name-server 64.59.168.13
ip name-server 64.59.168.15
no ipv6 cef
multilink bundle-name authenticated
license udi pid CISCO892-K9 sn FCZ1714C2ZD
username sdcadmin privilege 15 secret 4 zsc1w55wVxL1behpFMAW8XrxKcVujVnNHLpMKP.ZgXk
redundancy
ip ssh version 2
interface Loopback0
ip address 192.168.0.1 255.255.255.0
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
interface FastEthernet0
switchport mode trunk
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
no ip address
interface FastEthernet5
no ip address
interface FastEthernet6
no ip address
interface FastEthernet7
no ip address
interface FastEthernet8
ip address 184.71.128.156 255.255.255.252
ip access-group INBOUND_INTERNET in
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
interface GigabitEthernet0
no ip address
shutdown
duplex auto
speed auto
interface Vlan1
description data_vlan
ip address 192.168.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
interface Vlan2
description guest_vlan
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list NAT interface FastEthernet8 overload
ip route 0.0.0.0 0.0.0.0 184.71.128.154
ip access-list extended INBOUND_INTERNET
permit icmp any host 184.71.125.118 echo-reply
permit icmp any host 184.71.125.118 time-exceeded
permit icmp any host 184.71.125.118 unreachable
deny ip any any log
ip access-list extended NAT
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended SSH
permit ip 192.168.8.0 0.0.0.255 any
control-plane
mgcp profile default
line con 0
logging synchronous
line aux 0
line vty 0 4
access-class SSH in
exec-timeout 5 0
login local
transport input ssh
ntp server 1.ca.pool.ntp.org
ntp server 0.ca.pool.ntp.org
endI've modified inbound_internet:
ip access-list extended INBOUND_INTERNET
permit icmp any host 184.71.125.118 echo-reply
permit icmp any host 184.71.125.118 time-exceeded
permit icmp any host 184.71.125.118 unreachable
permit udp any any eq ntp
permit tcp any any established
deny ip any any log
The idea is to block anything inbound unless it is an already established connection from the inside. Does that make sense? -
Hi all,
Hopefully this will be a nice easy one for you all.
I have recently configured and installed an 851 router successfully :) I now only have one issue, the damn thing switches itself off after a period of inactivity!
If I want to use it again I have to issue a reset command then a boot command.
This takes me to the:
router>
prompt. I then have to issue a copy start run command. And then a no shut on each of my interfaces.
Obviously I would just like the router to stay up and running. But I cant work out how to do it. Im sure that this is just a simple config issue and I would dearly love for you all to solve it!
If any of you know the answer can you please provide clear an accurate commands as I will copy it parrott fashion into the router.
Thank you all in advance.
StuartHello,
as spremkumar already pointed out the config register usually is set to 0x2102. You can reconfigure the register by:
Router#configute terminal
Router(config)#config-register 0x2102
Router(config)#end
Then perform a reload and check whether the config is present after the router finished booting.
Hope this helps! Please rate all posts.
Regards, Martin -
Security Wireless 857w router config.
Hi,
I do have adsl & wireless internet connection running properly under my Cisco 857w router.
However, I am trying to configuring with out success the (wap), my wifi internet connection still open for everyone.
I will really appreciate your advices.
Thanks in advance.
Daniel.Hi Brandon,
Thanks for your response, but unfortunally I could not setup my Wireless Security yet.
With the following config I am unable to connect with my laptop:
Encryption mode: "Cipher TKIP"
Authentication Key Management:
Key Management: "Mandatory" "WPA"
WPA Preshared key: "xxxxxxxxx" "ascii"
I mean, if I want to connect with my laptop via wifi the router encryption modes need to be configure to (none).
Here below I attached my router config, maybe you can see what is wrong on it.
Thanks in advance.
Daniel -
EEM Script to stop SIP service if a network route disappears from the routing table
Trying to run this on an ASR 1001-x with 3.13 code. It seemed to behave properly in the lab, but not on customer's router:
event manager applet WebEx_DOWN
event routing network 62.109.194.64/26 type remove
action 1.0 syslog msg "WebEx Route Lost - Disabling CUBE Service"
action 2.0 cli command "enable"
action 3.0 cli command "config t"
action 4.0 cli command "voice service voip"
action 5.0 cli command "sip"
action 6.0 cli command "call service stop"
action 7.0 cli command "end"
event manager applet WebEx_UP
event routing network 62.109.194.64/26 type add
action 1.0 syslog msg "WebEx Route Added - Enabling CUBE Service"
action 2.0 cli command "enable"
action 3.0 cli command "config t"
action 4.0 cli command "voice service voip"
action 5.0 cli command "sip"
action 6.0 cli command "no call service stop"
action 7.0 cli command "end"
When the route disappeared, there was a line in the syslog "WebEx Route Lost - Disabling CUBE Service", but the service was not stopped. I had to stop it myself. I then let it sit. Once the route reappeared, the message "WebEx Route Added - Enabling CUBE Service" showed up, but SIP did not start. Any ideas?If you have AAA command authz enabled, then make sure you've configured "event manager session cli username USER", where USER is a name authorized to run all of the CLI commands in your applets.
If you still don't see the behavior you want, enable "debug event manager action cli" to see what the results of the CLI commands are. -
We have a 6509 running in hybrid mode and are looking to convert to native mode for familiarity. How do I back up the config for the switch portion and for the router portion? Can you do this with one command? or are there seperate commands for these?
Hi, There are a number of different ways to do this, but to answer your question, you will need to separately back up your switch config and your MSFC config.
You can either back up the config to a flash device such as slot0, or to a TFTP server. See the following documents that explain the process in detail, with examples:
Switch:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_7_6/confg_gd/config.htm
MSFC:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_7_6/confg_gd/config.htm#1017196 -
Forgive me, I have configured several routers on the inside but never a default gateway. It seems simple enough but I am stuck.
I can ping the Gateway from the inside. I can ping the inside from the gateway. I can ping the outside from the gateway, but I cannot ping the out side from the inside. (Or get to the DNS server assuming they have ICMP turned off) Heres my config (IPS have been changed to protect the innocent:) )
My guess is something is screwed up with NAT
Configuring g
!b
boot-start-ma
no
ip subnet-zeroered, becomes
no ip routinghe configurat
!n
!e
no ip cef
interface Ethernet0er enable secret: b
ip address 63.223.13.115 255.255.255.128The enable password is used when you do n
ip access-group 20 out
[OK]
ip nat outside
*Mar
enable
no ip route-cacheith some older sof
half-duplexs, and Trans
!i
ip nat inside source list 20 pool poolone
ip nat inside source static 192.168.10.5 63.223.13.121
ip classless
ip route 0.0.0.0 0.0.0.0 63.223.13.1
no ip http server
access-list 20 permit 192.168.0.0 0.0.255.255
banner login ^Cc
###### WARNING ######
AUTHORIZED ACCESS ONLY^C
line con 0
password 7 03005A1C011C70
login
line aux 0
line vty 0 4
password 7 06020E364B5D58
login
no scheduler allocate
end
ZaxT1#
Pro Inside global Inside local Outside local Outside global
--- 63.223.13.121 192.168.10.5 --- ---
ZaxT1#I do not know how you generated this config listing but it seems to be quite garbled. So I am not sure how accurately we can evaluate it.
But one things that does appear to be there is that you are using access list 20 to control what addresses get translated by NAT and it permits 192.168.0.0/16. So that any address in 190.168.0.0 will get translated. However the same access list is applied outbound on Ethernet 0. So Ethernet 0 will only permit outbound traffic whose source address is 190.168.x.x. Except all these addresses have been translated so that the source address is no longer 192.168.x.x. This would prevent any traffic going out through Ethernet 0.
Do not use the same access list to control translation and to control outbound traffic on the interface.
HTH
Rick -
Hi,
How can I configure 6509 switch to have a standby capabalities? How does it work? (show standby). Thanks.
Cheers!
GagamboyHello Irvine,
show standby refers to the HSRP protocol that provides a Virtual default gateway on a vlan.
Using HSRP makes sense if you have two devices routers or multilayer switches (even of different models) that can be the exit point for clients in a vlan
on a C6500 the standby configuration is performed on L3 SVI Vlans
interface vlan 50
ip address 10.10.50.3 255.255.255.0
standby 50 ip 10.10.50.1
standby 50 preempt
standby 50 priority 105
standby 50 track vlan 10
this an example, default priority is 100 the highest priority router becomes active.
the VIP address is an address in the same IP subnet of the vlan interface
HSRP emulates VIP 10.10.50.1 at both L3 and L2 using a well known mac address that in the righmost byte has 0x32 = 50
On a multilayer switch you can reuse the same group number (50 in the example) on different SVI VLans but VIP address has to be given accordingly to vlan subnet
And again this is useful if you have multiple L3 devices serving the same subnet otherwise you are just preparing to install a second router/multilayer switch
Hope to help
Giuseppe -
I am a newbie to Cisco. I have a router that pings another at a remote location. We only use pings on this particular router to monitor a link, so when the pings drop we know a link is going down. It used to do a continuous ping of the distant end router, but since restarting and adding a new IOS, the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings? This is a major router and I can't afford to make an config error that would shut the routers down or stop the pings.
Hi,
" the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings?"
Use IP SLA icmp-echo and IP SLA logging traps to alert you when a certain condition is met.
http://www.cisco.com/c/en/us/td/docs/ios/ipsla/command/reference/sla_book/sla_02.html#wp1052104
Regards
Alain -
Hi everybody!!!
I have a script to backup my ASA configuration. I want to use the same script to backup my routers, but Im looking for special questions, look..
I want to create a user, like "backup" and this user can run the command "more system:running-config"
The idea is the user "backup" log on the router, without enable and run that command above...
That command needs to run automatically, and after, the user needs to log off..
I tried something like parse viewer and autocommand but without success...
If anyone can help me..
Im trying in a Cisco 2801 Router.
Thanks
DiegoHi all...
Rancid sounds good..
I tried kron now. I could send my config to my tftp server, but when I run sh kron sch I receive this message:
Kron Occurrence Schedule
back-0303log01 inactive, will run again in ERROR - Timer Not Running
Look my conf for kron
kron occurrence back-0303log01 at 14:56 recurring
policy-list back-0303log01
kron policy-list back-0303log01
cli sh running-config | redirect tftp://172.19.4.121/0301router
My clock conf:
clock timezone BR -3
clock summer-time BRV recurring 3 Sun Oct 0:00 3 Sun Feb 0:00
ntp clock-period 17178040
My clock:
15:19:27.036 BRV Tue Dec 11 2012
What is wrong? -
I found this paragraph in the IOS 12.x documentation. The second sentence seems odd to me. Because WCCP redirection was enabled on a specific interface, it affects all interfaces on a router. Does it only affect interfaces that have an outbound redirection statement associated with them or does it affect all traffic on all interfaces?
Configuring WCCP for redirection for inbound traffic on interfaces allows you to avoid the overhead associated with CEF forwarding for outbound traffic. Setting an output feature on any interface results in the slower switching path of the feature being taken by all packets arriving at all interfaces. Setting an input feature on an interface results in only those packets arriving at that interface taking the configured feature path; packets arriving at other interfaces will use the faster default path. Configuring WCCP for inbound traffic also allows packets to be classified before the routing table lookup, which translates into faster redirection of packets.Has anyone tried configuring a Cisco 2621 with NAT/CBAC/CEF/WCCP simultaneously? I have a branch office connection with a single router and am having serious trouble getting CBAC and WCCP to work nicely together. I'm redirecting to a Volera Cache Engine. Synopsis of config:
ip wccp web-cache redirect-list http
ip wccp 98 redirect-list streams
ip cef
ip inspect audit-trail
ip inspect name filter cuseeme
ip inspect name filter ftp
ip inspect name filter h323
ip inspect name filter http java-list 90
ip inspect name filter netshow
ip inspect name filter realaudio
ip inspect name filter rtsp
ip inspect name filter streamworks
ip inspect name filter tcp
ip inspect name filter udp
ip inspect name filter vdolive
ip audit notify log
interface FastEthernet0/0
ip address 10.32.2.1 255.255.255.0
ip nat inside
ip wccp web-cache redirect in
ip wccp 98 redirect in
interface Serial0/0.100 point-to-point
ip address 100.100.100.217 255.255.255.252
ip access-group 101 in
ip nat outside
ip inspect filter out
interface FastEthernet0/1
ip address 32.100.100.241 255.255.255.248
ip nat pool office-net 32.100.100.245 32.104.73.246 netmask 255.255.255.248
ip nat inside source list 99 pool office-net overload
ip access-list extended http
permit tcp any any eq www
ip access-list extended streams
permit tcp any any eq 1755
permit udp any any eq 1755
permit udp any any eq 554
permit tcp any any eq 554
access-list 90 permit any
access-list 99 permit any
access-list 101 permit (all my vpn tunnel entries)
access-list 101 permit (certain icmp)
access-list 101 deny ip any any log -
Sound disappears when changing speaker config
Hello all, I currently have a bit of an annoying issue when using my x-fi titanium card in vista 64 bit.
When I goto change my speaker config from headphones to 5.1 or vice versa, the sound from the running apps disappears
and I have to restart the applications for sound to come back. For example I am playing a song in winamp, i change speaker config
from 5.1 to headphones, sound gone, close winamp and reopen sound is back. Same thing goes for my games.
Any possible solutions to this thanks.The only thing I don't like about the iPhone headset solution is that the earplugs are uncomfortable, and keep falling out. I basically don't like things stuck in my ear. So I am thinking of buying an actual over-the-ears headset to plug in to the headset port.
A couple of questions:
- Is there any reason at all to go USB headset instead? It seems like a waste of a USB port since there is a headset jack.
- Is there any way of switching the output sound back to the speakers while the headset is plugged in? Or do I have to physically unplug it each time it is not in use for a Skype call (which is the only time I would use it)?
Thanks,
doug -
Router config for console modem access
We're upgrading 2500 series routers with 2811's in several remote sites, and we have preferred modem access to be connected to the console port as opposed to AUX, in order to see boot-up and diagnostics we wouldn't otherwise see. Our only issue is that we aren't replacing the modems out there and some aren't connecting correctly. We obviously need AA turned on, and also be able to continue a session if the cable is moved to another device's console port (like the local switch.) If we were using the AUX port, I know autoconfigure discovery and other commands might fix this; but we'd like to keep the modem connected to the router console port. Are there any router commands I can use?
If I understand correctly these modems were connected on the Aux port of the 2500 & now you intent to connect then on the console port of the 2800, what vendor modems are in use?
The below doc has info on router console port configuration, we will need to configure the correct initialization string on the modem based on the modem vendor (the AT commands will change as per the description based on the modem vendor).
http://www.cisco.com/en/US/tech/tk801/tk36/technologies_tech_note09186a00800941c9.shtml
Thanks, Mak -
Hi,
We are configured new installation of SAP Router. Router side it's working fine.
We are not able to connect OSS1. It's given error was "Service ? unknown".
Out saprouttab like
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 172.17.3.9 3200
P 172.17.3.25 194.39.131.34 3299
dev_rout showing this error.
***LOG Q0I=> NiPGetServByName: service 'sapdp99' not found: getservbyname [ninti.c 463]
Please check it and suggest me.
Regards
S.PrasadHello,
I already solve my problem. I had an error when I tried to log on at transaction OSS1 after I setup the saprouter configuration. It showed a window with the error "Unable to connect to SAPNet message server" and after service 'sapdb99' unknown".
The solution for this was put this entry sapdp99 3299/tcp in services file located in C:WINDOWSsystem32driversetc (on Window) on sap router server!!
After doing a restart the to service (services.msc) of SAP Router the problem has been overcome.
King regards,
João Dimas - Portugal
Maybe you are looking for
-
Document Window display is goofy
Dreamweaver 8, Mac OS X 10.4.8 Yesterday my web pages looked great in Dreamweaver and in several browsers. This morning I opened up Dreamweaver and viewed my pages and the graphics were jumbled all around and the table outline guide is no where to be
-
HTML to PDF conversion problem
Using Adobe Acrobat Pro X, I am having a problem converting HTML to interactive PDF, all of the HTML does not convert to the PDF. My HTML code creates "tabbed" data when displayed via a browser. I have had success with converting one very LARGE tabb
-
MSI 5900U VTD256 tv out problem
Where can I get the cables for the TV out from? Ive got the card but only recently went to use the TV out. THe people who supplied it to me never gave me the cables for it so I cant use it. Is there a dept at MSI where I can buy them as Im abit stuck
-
I have following xml file. I want to generate an oracle view on this file using xpath/xquery so that I can access individual elements in SQL statements for join etc. How can I do this? <MemberShips> <Membership> <MemberStatusDesc>Conti
-
I upgraded to the latest 10.2.0.424 OS. After which the contacts are not showing up under contacts, but under whatsapp the names are still there. Even if I add a contact it doesn't show up under contacts. Tried restarting the device, but same problem