IP CEF in a router
Hi Guys,
I am trying to understand more about how cef works in a router.
If we disable, cef and fast switching in a router, then all the packet will be processed by the hardware itself. ie, processing switching means the actual router hardware is taking care of the packets
CEF and fast-switching are software based packet switching. ie, in software, they have written which outgoing interface to select and how the L2 header is to be re-written.
Am I correct in my understanding?
CF
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
BTW, using Jon's example of the EoL 7200, all the NPEs did all packet forwarding using the main CPU. However the NSE-1 (and 7300s' NSE-100 and NSE-150) had special hardware, their PXF, to accelerate packet forwarding. (Also BTW, the ASR1K series, with its Quantum Flow hardware, is also special hardware to accelerate packet forwarding.)
Again, you need to examine sales literature and/or datasheets. Hardware acceleration is usually listed as a major feature. (Oh, one clue, if overall performance starts to exceed a couple of gig, special hardware is usually doing it.)
Similar Messages
-
How to allow ping from inside to outside in 2900 router?
Hi,
I have a Cisco router 2900 with firewall, i need to know how can i allow the ping from self zone to outside zone, i trried to create policy from self to outside but i still didn't allow ping or tracert, i get that message when i try to ping from cisco router:
"Unrecognized host or address, or protocol not running"
any help will be appreciated.
Thank youHi jcarvaja
here is the used configuration:
Building configuration...
Current configuration : 5584 bytes
! Last configuration change at 09:00:20 UTC Tue Apr 9 2013 by admin
version 15.1
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
service udp-small-servers
service tcp-small-servers
service sequence-numbers
hostname Router
boot-start-marker
boot-end-marker
security authentication failure rate 3 log
security passwords min-length 6
no logging buffered
no logging console
enable secret 5
no aaa new-model
no ipv6 cef
ip source-route
ip gratuitous-arps
ip icmp rate-limit unreachable 1
ip cef
ip name-server 163.121.128.134
ip name-server 163.121.128.135
ip port-map user-custom-fleet port tcp 2000 list 1
multilink bundle-name authenticated
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-324261422
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-324261422
revocation-check none
crypto pki certificate chain TP-self-signed-324261422
certificate self-signed 01
30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33323432 36313432 32301E17 0D313330 34303930 38343034
375A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3332 34323631
34323230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B8ABD60F 8C879B3B BC1C1643 48059AD2 F940A700 6D58161E 37D53E6E E028B806
61EAA942 CED2A3C6 3FB3A47E 20E05B10 0941A9D8 38FFA6F9 D2B9E52C 225A57BA
14F8842A A26E7E02 38E9F7C8 328504D0 5C3EEE41 CC75B237 BBD07CBA 1A850540
2A5AAFAD 4553FB03 0E366211 9AC09967 4DC03082 0AF546A3 F6AA2739 1D8A8AA9
02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
23041830 16801428 FEEB3910 B7A1D374 1F86BCD5 96CEDF75 8DF11E30 1D060355
1D0E0416 041428FE EB3910B7 A1D3741F 86BCD596 CEDF758D F11E300D 06092A86
4886F70D 01010405 00038181 006BBF7A 430905F6 D5B27B0D 96315504 87816DAA
B5EA86D9 6E9A1D58 7B328C88 A6A358D0 00D035A9 8CDDEC41 15AF0108 F5CB1072
B0485D7D CFC0D0CB 71E9B153 FB7B8B40 40C157E4 B254D01C 890D615F D8395545
F0B47E0B 57341EB2 C0CE0039 DC18EAD6 078986F0 A5A5D04F D5041DB6 23CAA002
4901248C 95B61A0B 3ED5B26A EF
quit
license udi pid CISCO2901/K9 sn FCZ1526C3JL
object-group service Outside-Reply
icmp echo-reply
username admin privilege 15 secret 5
redundancy
ip finger
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
class-map type inspect match-any Deny_ALL
match access-group name dwdwd
class-map type inspect match-any Inside-Outside
match protocol http
match protocol https
match protocol dns
class-map type inspect match-any ICMP_RQST
match protocol icmp
policy-map type inspect Inside-Outside
class type inspect Inside-Outside
inspect
class class-default
drop
policy-map type inspect Self_to_Outside
class type inspect ICMP_RQST
inspect
class class-default
drop
policy-map type inspect Outside_to_Self
class type inspect Deny_ALL
pass log
class class-default
drop
zone security IN
zone security OUT
zone-pair security Self_to_Outside source self destination OUT
service-policy type inspect Self_to_Outside
zone-pair security Outside_to_Self source OUT destination self
service-policy type inspect Outside_to_Self
zone-pair security Inside-Outside source IN destination OUT
service-policy type inspect Inside-Outside
interface GigabitEthernet0/0
ip address 101.101.100.245 255.255.255.0
ip mask-reply
ip directed-broadcast
ip flow ingress
duplex auto
speed auto
interface GigabitEthernet0/1
description $FW_INSIDE$
ip address 49.31.152.80 255.255.255.248
ip mask-reply
ip directed-broadcast
ip flow ingress
zone-member security IN
duplex auto
speed auto
interface Serial0/0/0
no ip address
ip mask-reply
ip directed-broadcast
ip flow ingress
encapsulation frame-relay IETF
no fair-queue
frame-relay lmi-type q933a
interface Serial0/0/0.16 point-to-point
description $FW_OUTSIDE$
ip address 172.17.18.122 255.255.255.252
ip mask-reply
ip directed-broadcast
ip flow ingress
ip verify unicast reverse-path
zone-member security OUT
frame-relay interface-dlci 16
interface Serial0/0/1
no ip address
ip mask-reply
ip directed-broadcast
ip flow ingress
shutdown
clock rate 2000000
ip forward-protocol nd
ip http server
ip http access-class 2
ip http authentication local
ip http secure-server
ip route 0.0.0.0 0.0.0.0 Serial0/0/0.16
ip identd
ip access-list extended ICMP
remark CCP_ACL Category=128
permit ip any any
ip access-list extended deeef
remark CCP_ACL Category=128
permit ip any any
ip access-list extended dwdwd
remark CCP_ACL Category=1
permit object-group Outside-Reply any any
access-list 1 remark CCP_ACL Category=1
access-list 1 permit 196.219.234.77
access-list 2 remark Auto generated by SDM Management Access feature
access-list 2 remark CCP_ACL Category=1
access-list 2 permit 101.101.100.0 0.0.0.255
access-list 2 permit 10.20.10.0 0.0.1.255
no cdp run
control-plane
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
login local
transport input all
line vty 5 15
login local
transport input all
scheduler allocate 20000 1000
end -
How to get the number of routes in MLS L3SW table with SNMP
Hello experts,
Is there any way to get the number of routes in the MLS-hardware Layer 3-switching table with SNMP, like with CLI command "show mls cef summary"?
If possible, please let me know the OID and which MIB do I use.
[e.g.]
#show mls cef summary
Total routes: 400000
<omit>
====
Device : C6509E
IOS : s72033-advipservicesk9_wan-mz.122-33.SXH3a.bin
====
Thank you,function buttonClick()
var table = profileTable;
var lnRow = table.rows.length;
var insertedRow = table.insertRow(parseFloat(lnRow));
var cell1 = insertedRow.insertCell();
cell1.innerHTML ="<tr><td><Input type=\"hidden\" >>>name=\"rowNum\" value="+cnt"+></td></tr>";
document.profileform.submit;
on submit it goes to the second page, but the value i got using >>>System.out.println("row number from text >>>box"+request.getParameter("rowNum")); is null. What is wrong with >>>my coding. Can anyone solve this.HI carry
Check the value of bold data
function buttonClick()
var table = profileTable;
var lnRow = table.rows.length;
var insertedRow = table.insertRow(parseFloat(lnRow));var cnt=inRow
var cell1 = insertedRow.insertCell();
cell1.innerHTML ="<tr><td><Input type=\"hidden\" >>>name=\"rowNum\" value="+cnt+"></td></tr>";
document.profileform.submit;
}try with it -
CALL DOES NOT ROUTE OUT THE LOCAL GATEWAY
Local calls will not route out the local Gateway of branch1 to the PSTN or from the PSTN back to branch1, however they will route out either CorpHQ or branch2 backup gateways. When I go into the route group configuration for branch1, and remove the backup gateways, I get a fast busy tone when I dial the local number. I know the MGCP Gateway at branch1 is functioning because when I dial 911 and run debug ISDN Q931, the call routes properly through branch1, so I have a call routing problem. I ran DNA and it came back as ROUTE THIS PATTERN and all of the number translations looked accurate, so I didn't have to check for any block patterns. I'm not getting any errors on the calling party phone display. When I deleted the route pattern for the branch1 site and forced it to use the global route pattern, I received a debug output on branch1. I do not know a debug command (such as debug voip dial-peer or debug ccsip messages) to use for an MGCP Gateway to see if the call is actually reaching the Gateway.
I have checked the following:
the route pattern configuration
the translation pattern configuration
the called party transformation pattern configuration
the route list configuration to make sure the correct route group for branch1 was selected
the route group configuration to make sure that the branch1 Gateway was first in the order of selected devices
the route pattern configuration to make sure the correct route list for branch1 ist selected
the Gateway configuration to make sure it's using the device pool for branch1 and to make sure the called party transformation CSS for the branch1 Gateway is applied
the device pool configuration to make sure it's using the route group branch1
Any assistance would be greatly appreciated
Regards,
RonHi Nishant:
Please see the attachments for the Gateway pages
The significant digits for inbound calls for all 3 gateways is '4'
Please see the running-configs of the 3 gateways and the PSTN
Please see the debugs for the INBOUND calls
Many Thanks,
Ron
The following INBOUND call from the PSTN to 2065011001 is now working, however it is supposed to be routing through CorpHQ and is instead routing through Branch1. Please see 'DEBUG VOIP CCAPI INOUT' & 'DEBUG ISDN Q931'
Branch1#
ISDN Se0/0/0:23 Q931: RX <- DISCONNECT pd = 8 callref = 0x0096
Cause i = 0x8290 - Normal call clearing
//22/xxxxxxxxxxxx/CCAPI/ccCallReportDigits:
(callID=0x16, digit_event=0x0, enable=FALSE, consume=FALSE)
//22/5A001212800B/CCAPI/ccCallReportDigits:
Enabled=TRUE, Call Id=22
//22/xxxxxxxxxxxx/CCAPI/cc_api_call_report_digits_done:
(vdbPtr=0x49E07FD4, callID=0x16, disp=0, digit_event=0x0, enable=FALSE, consume=FALSE)
//22/5A001212800B/CCAPI/cc_api_call_report_digits_done:
Enabled=TRUE, Disposition=0x0, Interface=0x49E07FD4, Call Id=22
//22/5A001212800B/CCAPI/cc_api_call_report_digits_done:
Call Entry(Initial Digit Timeout=4000(ms), Inter Digit Timeout=4000(ms))
//22/5A001212800B/CCAPI/ccGenerateToneInfo:
Stop Tone On Digit=FALSE, Tone=Null,
Tone Direction=Network, Params=0x0, Call Id=22
//23/5A001212800B/CCAPI/ccGetCallStatistics:
Call Stats=0x4A5346FC, Call Id=23
//22/5A001212800B/CCAPI/ccConferenceDestroy:
Conference Id=0xC, Tag=0x0
//22/xxxxxxxxxxxx/CCAPI/cc_api_bridge_drop_done:
Conference Id=0xC, Source Interface=0x49E07FD4, Source Call Id=22,
Destination Call Id=23, Disposition=0x0, Tag=0x0
//23/xxxxxxxxxxxx/CCAPI/cc_api_bridge_drop_done:
Conference Id=0xC, Source Interface=0x495BABA4, Source Call Id=23,
Destination Call Id=22, Disposition=0x0, Tag=0x0
//22/5A001212800B/CCAPI/cc_generic_bridge_done:
Conference Id=0xC, Source Interface=0x495BABA4, Source Call Id=23,
Destination Call Id=22, Disposition=0x0, Tag=0x0
//22/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
//22/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Call Entry(Responsed=TRUE, Cause Value=16)
//22/5A001212800B/CCAPI/cc_api_get_transfer_info:
Transfer Number Is Null
//23/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
//23/5A001212800B/CCAPI/ccCallDisconnect:
Cause Value=16, Call Entry(Responsed=TRUE, Cause Value=16)
//23/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Disposition=0, Interface=0x495BABA4, Tag=0x0, Call Id=23,
Call Entry(Disconnect Cause=16, Voice Class Cause Code=0, Retry Count=0)
//23/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Call Disconnect Event Sent
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
:cc_free_feature_vsa freeing 4821DDE8
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
vsacount in free is 1
//22/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Disposition=0, Interface=0x49E07FD4, Tag=0x0, Call Id=22,
Call Entry(Disconnect Cause=16, Voice Class Cause Code=0, Retry Count=0)
//22/5A001212800B/CCAPI/cc_api_call_disconnect_done:
Call Disconnect Event Sent
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
:cc_free_feature_vsa freeing 4821DEC8
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
vsacount in free is 0
ISDN Se0/0/0:23 Q931: TX -> RELEASE pd = 8 callref = 0x8096
ISDN Se0/0/0:23 Q931: RX <- RELEASE_COMP pd = 8 callref = 0x0096
ISDN Se0/0/0:23 Q931: RX <- SETUP pd = 8 callref = 0x0097
Bearer Capability i = 0x8090A2
Standard = CCITT
Transfer Capability = Speech
Transfer Mode = Circuit
Transfer Rate = 64 kbit/s
Channel ID i = 0xA18381
Preferred, Channel 1
Progress Ind i = 0x8183 - Origination address is non-ISDN
Display i = 'Seattle US Phone'
Calling Party Number i = 0x4180, '2065015111'
Plan:ISDN, Type:Subscriber(local)
Called Party Number i = 0xC1, '2065011001'
Plan:ISDN, Type:Subscriber(local)
//-1/xxxxxxxxxxxx/CCAPI/ccIFCallSetupRequestPrivate:
Interface=0x49E07FD4, Interface Type=6, Destination=, Mode=0x9,
Call Params(Calling Number=,(Calling Name=)(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
Called Number=(TON=Unknown, NPI=Unknown), Calling Translated=FALSE,
Subscriber Type Str=, FinalDestinationFlag=FALSE, Outgoing Dial-peer=0, Call Count On=FALSE,
Source Trkgrp Route Label=, Target Trkgrp Route Label=, tg_label_flag=0, Application Call Id=D000000002f5368f000000F580000097)
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:cc_get_feature_vsa malloc success
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
cc_get_feature_vsa count is 1
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:FEATURE_VSA attributes are: feature_name:0,feature_time:1210179280,feature_id:24
//24/74820328800C/CCAPI/ccIFCallSetupRequestPrivate:
SPI Call Setup Request Is Success; Interface Type=6, FlowMode=1
//24/74820328800C/CCAPI/ccCallSetContext:
Context=0x4A524790
//-1/xxxxxxxxxxxx/CCAPI/ccIFCallSetupRequestPrivate:
Interface=0x495BABA4, Interface Type=9, Destination=0.0.0.0, Mode=0x9,
Call Params(Calling Number=,(Calling Name=)(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
Called Number=(TON=Unknown, NPI=Unknown), Calling Translated=FALSE,
Subscriber Type Str=, FinalDestinationFlag=FALSE, Outgoing Dial-peer=0, Call Count On=TRUE,
Source Trkgrp Route Label=, Target Trkgrp Route Label=, tg_label_flag=0, Application Call Id=D000000002f5368f000000F580000097)
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:cc_get_feature_vsa malloc success
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
cc_get_feature_vsa count is 2
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:FEATURE_VSA attributes are: feature_name:0,feature_time:1210179056,feature_id:25
//25/74820328800C/CCAPI/ccIFCallSetupRequestPrivate:
SPI Call Setup Request Is Success; Interface Type=9, FlowMode=1
//25/74820328800C/CCAPI/ccCallSetContext:
Context=0x4A524580
//25/74820328800C/CCAPI/cc_api_call_connected:
Interface=0x495BABA4, Data Bitmask=0x0, Progress Indication=NULL(0),
Connection Handle=0
//25/74820328800C/CCAPI/cc_api_call_connected:
Call Entry(Connected=TRUE, Responsed=TRUE, Retry Count=0)
//24/74820328800C/CCAPI/cc_api_call_proceeding:
Interface=0x49E07FD4, Progress Indication=NULL(0)
//24/74820328800C/CCAPI/cc_api_call_connected:
Interface=0x49E07FD4, Data Bitmask=0x1, Progress Indication=DESTINATION IS NON ISDN(2),
Connection Handle=0
//24/74820328800C/CCAPI/cc_api_call_connected:
Call Entry(Connected=TRUE, Responsed=TRUE, Retry Count=0)
//24/74820328800C/CCAPI/ccCallModify:
Nominator=0x1000, Params=0x4A2E7368, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/ccCallReportDigits:
(callID=0x18, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/ccCallReportDigits:
Enabled=TRUE, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/cc_api_call_report_digits_done:
(vdbPtr=0x49E07FD4, callID=0x18, disp=0, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Enabled=TRUE, Disposition=0x0, Interface=0x49E07FD4, Call Id=24
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Call Entry(Initial Digit Timeout=15000(ms), Inter Digit Timeout=10000(ms))
//24/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
(confID=0x4A2E757C, callID1=0x18, callID2=0x19, tag=0x0)
//24/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
(confID=0x4A2E757C, callID1=0x18, gcid=0-0-0-0, tag=0x0)
//25/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
(confID=0x4A2E757C, callID2=0x19, gcid=0-0-0-0, tag=0x0)
//24/74820328800C/CCAPI/ccConferenceCreate:
Conference Id=0x4A2E757C, Call Id1=24, Call Id2=25, Tag=0x0
//24/xxxxxxxxxxxx/CCAPI/cc_api_bridge_done:
Conference Id=0xD, Source Interface=0x49E07FD4, Source Call Id=24,
Destination Call Id=25, Disposition=0x0, Tag=0xFFFFFFFF
//25/xxxxxxxxxxxx/CCAPI/cc_api_bridge_done:
Conference Id=0xD, Source Interface=0x495BABA4, Source Call Id=25,
Destination Call Id=24, Disposition=0x0, Tag=0x0
//24/74820328800C/CCAPI/cc_generic_bridge_done:
Conference Id=0xD, Source Interface=0x495BABA4, Source Call Id=25,
Destination Call Id=24, Disposition=0x0, Tag=0x0
//24/74820328800C/CCAPI/ccConferenceCreate:
Call Entry(Conference Id=0xD, Destination Call Id=25)
//25/74820328800C/CCAPI/ccConferenceCreate:
Call Entry(Conference Id=0xD, Destination Call Id=24)
//24/74820328800C/CCAPI/cc_api_caps_ind:
Destination Interface=0x495BABA4, Destination Call Id=25, Source Call Id=24,
Caps(Codec=0x1, Fax Rate=0x1, Vad=0x1,
Modem=0x2, Codec Bytes=20, Signal Type=3)
//24/74820328800C/CCAPI/cc_api_caps_ind:
Caps(Playout Mode=1, Playout Initial=60(ms), Playout Min=40(ms),
Playout Max=1000(ms), Fax Nom=300(ms))
//25/74820328800C/CCAPI/cc_api_caps_ind:
Destination Interface=0x49E07FD4, Destination Call Id=24, Source Call Id=25,
Caps(Codec=0x4, Fax Rate=0x2, Vad=0x1,
Modem=0x0, Codec Bytes=20, Signal Type=2)
//25/74820328800C/CCAPI/cc_api_caps_ind:
Caps(Playout Mode=1, Playout Initial=60(ms), Playout Min=40(ms),
Playout Max=1000(ms), Fax Nom=300(ms))
//25/74820328800C/CCAPI/cc_api_caps_ack:
Destination Interface=0x49E07FD4, Destination Call Id=24, Source Call Id=25,
Caps(Codec=g729r8(0x4), Fax Rate=FAX_RATE_VOICE(0x2), Vad=OFF(0x1),
Modem=OFF(0x0), Codec Bytes=20, Signal Type=2, Seq Num Start=9314)
//24/74820328800C/CCAPI/cc_api_caps_ack:
Destination Interface=0x495BABA4, Destination Call Id=25, Source Call Id=24,
Caps(Codec=g729r8(0x4), Fax Rate=FAX_RATE_VOICE(0x2), Vad=OFF(0x1),
Modem=OFF(0x0), Codec Bytes=20, Signal Type=2, Seq Num Start=9314)
//24/74820328800C/CCAPI/cc_api_call_modify_done:
Result=0, Interface=0x49E07FD4, Call Id=24
//24/74820328800C/CCAPI/cc_api_voice_mode_event:
Call Id=24
//24/74820328800C/CCAPI/cc_api_voice_mode_event:
Call Entry(Context=0x4A524790)
//24/74820328800C/CCAPI/cc_process_notify_bridge_done:
Conference Id=0xD, Call Id1=24, Call Id2=25
//24/74820328800C/CCAPI/ccSetDigitTimeouts:
Initial Digit Timeout=4000(ms), Inter Digit Timeout=4000(ms)
//24/74820328800C/CCAPI/ccSetDigitTimeouts:
Call Entry(Inter Digit Timeout=4000(ms), Initial Digit Timeout=4000(ms))
//24/74820328800C/CCAPI/ccRestartDigitTimeoutMsec:
Digit Timeout=0, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/ccCallReportDigits:
(callID=0x18, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/ccCallReportDigits:
Enabled=TRUE, Call Id=24
//24/xxxxxxxxxxxx/CCAPI/cc_api_call_report_digits_done:
(vdbPtr=0x49E07FD4, callID=0x18, disp=0, digit_event=0x1, enable=TRUE, consume=FALSE)
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Enabled=TRUE, Disposition=0x0, Interface=0x49E07FD4, Call Id=24
//24/74820328800C/CCAPI/cc_api_call_report_digits_done:
Call Entry(Initial Digit Timeout=4000(ms), Inter Digit Timeout=4000(ms))
ISDN Se0/0/0:23 Q931: TX -> CALL_PROC pd = 8 callref = 0x8097
Channel ID i = 0xA98381
Exclusive, Channel 1
//24/74820328800C/CCAPI/ccCallModify:
Nominator=0x1000, Params=0x4A2E6E68, Call Id=24
//24/74820328800C/CCAPI/cc_api_call_modify_done:
Result=0, Interface=0x49E07FD4, Call Id=24
ISDN Se0/0/0:23 Q931: TX -> ALERTING pd = 8 callref = 0x8097
Progress Ind i = 0x8088 - In-band info or appropriate now available
//24/74820328800C/CCAPI/ccGenerateToneInfo:
Stop Tone On Digit=FALSE, Tone=Ring Back,
Tone Direction=Network, Params=0x0, Call Id=24
//24/74820328800C/CCAPI/cc_handle_inter_digit_timer:
Generate inter-digit timeout CC_EV_CALL_DIGIT_END event
The following INBOUND call from the PSTN to 5126022001 fails and is supposed to be routing through Branch1 and is instead routing through CorpHQ. Please see 'DEBUG VOIP CCAPI INOUT'
CorpHQ#
//-1/A31ADF52800B/CCAPI/cc_api_display_ie_subfields:
cc_api_call_setup_ind_common:
cisco-username=
----- ccCallInfo IE subfields -----
cisco-ani=5126026222
cisco-anitype=4
cisco-aniplan=1
cisco-anipi=0
cisco-anisi=0
dest=5126022001
cisco-desttype=4
cisco-destplan=1
cisco-rdie=FFFFFFFF
cisco-rdn=
cisco-lastrdn=
cisco-rdntype=-1
cisco-rdnplan=-1
cisco-rdnpi=-1
cisco-rdnsi=-1
cisco-redirectreason=-1 fwd_final_type =0
final_redirectNumber =
hunt_group_timeout =0
//-1/A31ADF52800B/CCAPI/cc_api_call_setup_ind_common:
Interface=0x49F42894, Call Info(
Calling Number=5126026222,(Calling Name=)(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed),
Called Number=5126022001(TON=Subscriber, NPI=ISDN),
Calling Translated=FALSE, Subscriber Type Str=RegularLine, FinalDestinationFlag=TRUE,
Incoming Dial-peer=1, Progress Indication=ORIGINATING SIDE IS NON ISDN(3), Calling IE Present=TRUE,
Source Trkgrp Route Label=, Target Trkgrp Route Label=, CLID Transparent=FALSE), Call Id=-1
//-1/A31ADF52800B/CCAPI/ccCheckClipClir:
In: Calling Number=5126026222(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed)
//-1/A31ADF52800B/CCAPI/ccCheckClipClir:
Out: Calling Number=5126026222(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed)
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:cc_get_feature_vsa malloc success
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
cc_get_feature_vsa count is 1
//-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
:FEATURE_VSA attributes are: feature_name:0,feature_time:1241383960,feature_id:13
//13/A31ADF52800B/CCAPI/cc_api_call_setup_ind_common:
Set Up Event Sent;
Call Info(Calling Number=5126026222(TON=Subscriber, NPI=ISDN, Screening=Not Screened, Presentation=Allowed),
Called Number=5126022001(TON=Subscriber, NPI=ISDN))
//13/A31ADF52800B/CCAPI/cc_process_call_setup_ind:
Event=0x497D0010
//-1/xxxxxxxxxxxx/CCAPI/cc_setupind_match_search:
Try with the demoted called number 5126022001
//13/A31ADF52800B/CCAPI/ccCallSetContext:
Context=0x4A131A54
//13/A31ADF52800B/CCAPI/cc_process_call_setup_ind:
>>>>CCAPI handed cid 13 with tag 1 to app "_ManagedAppProcess_Default"
//13/A31ADF52800B/CCAPI/ccCallProceeding:
Progress Indication=NULL(0)
//13/A31ADF52800B/CCAPI/ccCallDisconnect:
Cause Value=1, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
//13/A31ADF52800B/CCAPI/ccCallDisconnect:
Cause Value=1, Call Entry(Responsed=TRUE, Cause Value=1)
//13/A31ADF52800B/CCAPI/cc_api_get_transfer_info:
Transfer Number Is Null
//13/A31ADF52800B/CCAPI/cc_api_call_disconnect_done:
Disposition=0, Interface=0x49F42894, Tag=0x0, Call Id=13,
Call Entry(Disconnect Cause=1, Voice Class Cause Code=0, Retry Count=0)
//13/A31ADF52800B/CCAPI/cc_api_call_disconnect_done:
Call Disconnect Event Sent
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
:cc_free_feature_vsa freeing 49FE0410
//-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
vsacount in free is 0
PSTN#sh run
Building configuration...
Current configuration : 13975 bytes
! No configuration change since last restart
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname PSTN
boot-start-marker
boot-end-marker
card type e1 0 0
card type t1 0 1
logging message-counter syslog
no aaa new-model
clock timezone EST -5
clock summer-time EST recurring
network-clock-participate wic 0
network-clock-participate wic 1
no network-clock-participate aim 0
dot11 syslog
ip source-route
ip cef
no ip domain lookup
ip domain name att.com
ip name-server 177.1.100.110
ip multicast-routing
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type primary-ni
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
redirect ip2ip
fax protocol cisco
sip
bind control source-interface Loopback10
bind media source-interface Loopback10
header-passing
voice translation-rule 101
rule 1 /^\+.*/ //
rule 2 /^501.*/ //
rule 3 /^1206.*/ //
rule 4 /^00.*/ //
rule 5 /^0011.*/ //
rule 6 /^206/ /1206/
rule 7 /^1512.*/ /\0/
rule 8 /^011\(.*\)/ /\1/
voice translation-rule 102
rule 1 /^1\(2065015111\)$/ /\1/ type any subscriber plan any isdn
rule 2 /^1\(2065015555\)$/ /\1/ type any subscriber plan any isdn
rule 3 /^1\(2065015151\)$/ /\1/ type any subscriber plan any isdn
rule 4 /^1\(5126026222\)$/ /\1/ type any national plan any isdn
rule 5 /^31670357575$/ /&/ type any international plan any isdn
rule 6 /^31207037333$/ /&/ type any international plan any isdn
rule 7 /^31107047444$/ /&/ type any international plan any isdn
rule 8 /^911$/ /&/ type any unknown plan any unknown
rule 9 /^15126022.../ /&/ type any unknown plan any unknown
rule 10 /^31207033.../ /&/ type any unknown plan any unknown
rule 11 /^....$/ /&/ type any unknown plan any unknown
voice translation-rule 103
rule 1 /^206.*/ /&/ type any subscriber plan any isdn
rule 2 /^1/ // type any national plan any isdn
rule 3 /^00/ // type any international plan any isdn
voice translation-rule 201
rule 1 /^\+.*/ //
rule 2 /^602.*/ //
rule 3 /^1512.*/ //
rule 4 /^00.*/ //
rule 5 /^0011.*/ //
rule 6 /^512/ /1&/
rule 7 /^1206.*/ /&/
rule 8 /^011\(31.*\)/ /\1/
voice translation-rule 202
rule 1 /^1\(5126026222\)$/ /\1/ type any subscriber plan any isdn
rule 2 /^1\(2065015555\)$/ /\1/ type any national plan any isdn
rule 3 /^1\(2065015151\)$/ /\1/ type any national plan any isdn
rule 4 /^1\(2065015111\)$/ /\1/ type any national plan any isdn
rule 5 /^31670357575$/ /&/ type any international plan any isdn
rule 6 /^31207037333$/ /&/ type any international plan any isdn
rule 7 /^31107047444$/ /&/ type any international plan any isdn
rule 8 /^911$/ /&/ type any unknown plan any unknown
rule 9 /^12065011.../ /&/ type any unknown plan any unknown
rule 10 /^31207033.../ /&/ type any unknown plan any unknown
rule 11 /^....$/ /&/ type any unknown plan any unknown
voice translation-rule 203
rule 1 /^512.*/ /&/ type any subscriber plan any isdn
rule 2 /^1/ // type any national plan any isdn
rule 3 /^00/ // type any international plan any isdn
voice translation-rule 301
rule 1 /^\+.*/ //
rule 2 /^20.*/ //
rule 3 /^0\([1-8].*\)/ /31\1/
rule 4 /^011/ //
rule 5 /^0031/ //
rule 6 /^703..../ /3120&/
rule 7 /^00\(1.*\)/ /\1/
voice translation-rule 302
rule 1 /^31207037333$/ /7037333/ type any subscriber plan any isdn
rule 2 /^7033\(...\)$/ /0207033\1/
rule 3 /^911$/ /112/ type any unknown plan any unknown
rule 4 /^31\(670357575\)$/ /0\1/ type any national plan any isdn
rule 5 /^31\(107047444\)$/ /0\1/ type any national plan any isdn
rule 6 /^12065015555$/ /&/ type any international plan any isdn
rule 7 /^12065015151$/ /&/ type any international plan any isdn
rule 8 /^12065015111$/ /&/ type any international plan any isdn
rule 9 /^15126026222$/ /&/ type any international plan any isdn
rule 10 /^12065011...$/ /&/ type any unknown plan any unknown
rule 11 /^15126022...$/ /&/ type any unknown plan any unknown
rule 12 /^....$/ /&/ type any unknown plan any unknown
voice translation-rule 303
rule 1 /^703.*/ /&/ type any subscriber plan any isdn
rule 2 /^010/ // type any national plan any isdn
rule 3 /^1/ // type any international plan any isdn
voice translation-rule 1000
rule 1 /.*\(1...$\)/ /206501\1/
rule 2 /.*\(2...$\)/ /512602\1/
rule 3 /.*\(45..$\)/ /020757\1/
voice translation-rule 1001
rule 1 /^1206...5...$/ /+&/
rule 2 /^1512...6...$/ /+&/
rule 3 /^31.0...7...$/ /+&/
voice translation-profile 1-HQ-Change_DNIS-Check_ANI
translate called 101
voice translation-profile 1-HQ-Proper_Types
translate calling 102
translate called 103
voice translation-profile 2-BR1-Change_DNIS-Check_ANI
translate called 201
voice translation-profile 2-BR1-Proper_Types
translate calling 202
translate called 203
voice translation-profile 3-BR2-Change_DNIS-Check_ANI
translate called 301
voice translation-profile 3-BR2-Proper_Types
translate calling 302
translate called 303
voice translation-profile SIP-NORMALIZE-DNIS-ANI
translate calling 1001
translate called 1000
voice-card 0
dspfarm
archive
log config
hidekeys
controller E1 0/0/0
clock source internal
pri-group timeslots 1-3,16
description == Voice Circuit to Branch2
controller T1 0/1/0
clock source internal
cablelength long 0db
pri-group timeslots 1-3,24
description == Voice Circuit to CorpHQ
controller T1 0/1/1
clock source internal
cablelength long 0db
pri-group timeslots 1-3,24
description == Voice Circuit to Branch1
interface Loopback0
ip address 177.1.254.254 255.255.255.255
interface Loopback10
ip address 177.1.254.250 255.255.255.255
interface Loopback11
ip address 177.1.254.251 255.255.255.255
interface FastEthernet0/0
description ==TO INTERNET==
ip address 192.168.1.150 255.255.255.0
duplex auto
speed auto
interface FastEthernet0/1
description === To HQ
ip address 177.1.19.1 255.255.255.0
duplex auto
speed auto
interface Serial0/0/0:15
description == PRI Circuit to R3-BR2
no ip address
encapsulation hdlc
isdn switch-type primary-net5
isdn protocol-emulate network
isdn incoming-voice voice
isdn negotiate-bchan resend-setup
no isdn outgoing ie network-facility
isdn outgoing display-ie
no cdp enable
interface Serial0/1/0:23
description == PRI Circuit to R1-HQ
no ip address
encapsulation hdlc
isdn switch-type primary-5ess
isdn protocol-emulate network
isdn incoming-voice voice
isdn negotiate-bchan
isdn outgoing display-ie
no cdp enable
interface Serial0/1/1:23
description == PRI Circuit to R2-BR1
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn protocol-emulate network
isdn incoming-voice voice
isdn supp-service name calling
isdn negotiate-bchan resend-setup
isdn outgoing ie network-facility
no cdp enable
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:
control-plane
voice-port 0/0/0:15
translation-profile incoming 3-BR2-Change_DNIS-Check_ANI
description == Voice PRI to Branch2
voice-port 0/1/0:23
translation-profile incoming 1-HQ-Change_DNIS-Check_ANI
description == Voice PRI to CorpHQ
voice-port 0/1/1:23
translation-profile incoming 2-BR1-Change_DNIS-Check_ANI
description == Voice PRI to Branch1
dial-peer voice 1 pots
description == All inbound calls from HQ BR1 BR2 into PSTN
incoming called-number .
direct-inward-dial
dial-peer voice 101 pots
description == Subscriber Calls from PSTN into CorpHQ
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern ^2065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 102 pots
description == National Calls from PSTN into CorpHQ
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern ^12065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 103 pots
description == International Calls into CorpHQ from PSTN Coming from NL Ph
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern ^0012065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 104 pots
description == + Calls into CorpHQ from PSTN Coming from Mobiles
translation-profile outgoing 1-HQ-Proper_Types
preference 1
destination-pattern +12065011...$
direct-inward-dial
port 0/1/0:23
forward-digits 10
dial-peer voice 201 pots
description == Subscriber Calls from PSTN into Branch1
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern ^5126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 202 pots
description == National Calls from PSTN into Branch1
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern ^15126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 203 pots
description == International Calls into Branch1 from PSTN Coming from NL Ph
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern ^0015126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 204 pots
description == + Calls into Branch1 from PSTN Coming from Mobiles
translation-profile outgoing 2-BR1-Proper_Types
preference 1
destination-pattern +15126022...$
direct-inward-dial
port 0/1/1:23
forward-digits 10
dial-peer voice 301 pots
description == Subscriber Calls from PSTN into Branch2
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^7033...$
direct-inward-dial
port 0/0/0:15
forward-digits 7
dial-peer voice 302 pots
description == National Calls from PSTN into Branch2
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^0207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 10
dial-peer voice 303 pots
description == International Calls into Branch2 from PSTN Coming from US Ph
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^01131207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 9
prefix 0
dial-peer voice 304 pots
description == International Calls into Branch2 from PSTN Coming from US Ph
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern ^31207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 9
prefix 0
dial-peer voice 305 pots
description == + Calls into Branch2 from PSTN Coming from Mobiles
translation-profile outgoing 3-BR2-Proper_Types
destination-pattern +31207033...$
direct-inward-dial
port 0/0/0:15
forward-digits 9
prefix 0
dial-peer voice 1000 voip
description == Calls into AT&T SIP ITSP for VC Week1 Lab1
rtp payload-type nse 99
rtp payload-type nte 100
voice-class sip localhost dns:sip1.att.com
session protocol sipv2
incoming called-number .
dtmf-relay rtp-nte
codec g711ulaw
dial-peer voice 5000 voip
service aa
destination-pattern A5000
session target ipv4:177.1.254.254
incoming called-number A5000
dtmf-relay h245-alphanumeric
codec g711ulaw
no vad
num-exp 1888....... 911
num-exp 1900....... 911
num-exp 1976....... 911
num-exp 1777....... 911
num-exp 1444....... 911
num-exp 0800....... 911
num-exp 0900....... 911
sip-ua
telephony-service
no auto-reg-ephone
max-ephones 1
max-dn 10
ip source-address 177.1.254.254 port 2000
caller-id block code *67
system message You WILL PASS this Exam!
voicemail A5000
max-conferences 8 gain -6
call-forward pattern .T
dn-webedit
transfer-system full-consult
transfer-pattern .T
create cnf-files version-stamp 7960 Sep 01 2012 15:29:37
ephone-dn 1 dual-line
number 12065015111 secondary +12065015111
label Seattle, US +1 206 501 5111
description INE PSTN Phone
name Seattle US Phone
ephone-dn 2 dual-line
number 15126026222 secondary +15126026222
label Austin, US +1 512 602 6222
name Austin TX Phone
ephone-dn 3 dual-line
number 31207037333 secondary +31207037333
label Amsterdam, NL +31 20 703 73 33
name Amsterdam NL Phone
ephone-dn 4 dual-line
number 12065015555 secondary +12065015555
label Hurley Mobile +1 206 501 5555
name Hurley's Mobile
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 5 dual-line
number 12065015151 secondary +12065015151
label Hurley's Home +1 206 501 5151
name Hurley's Home
call-forward busy A5000
call-forward noan A5000 timeout 12
ephone-dn 6 dual-line
number 31670357575 secondary +31670357575
label Sawyer's Mobile +31 6 70357575
name Sawyer's Mobile
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 7 dual-line
number 911 secondary 112
label US/EU Emer/FreePhone/Prem
name Emergency Services
ephone-dn 8 dual-line
number 15126026262 secondary +15126026262
label BLinus Mobile +1 512 602 6262
name Benjamin Linus Mobile
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 9 dual-line
number 31207037373 secondary +31207037373
label DHume Home +31 20 703 73 73
name Desmond Hume Home
call-forward busy A5000
call-forward noan A5000 timeout 16
ephone-dn 10 dual-line
number 31107047444 secondary +31107047444
label Rotterdam, NL +31 10 704 74 44
name Rotterdam NL Phone
ephone 1
device-security-mode none
mac-address A456.3040.0DAA
type 7975
button 1:1 2:2 3:3 4:10
button 5:6 6o7,8,5,4
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous level 0 limit 20
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
no login
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
no login
scheduler allocate 20000 1000
ntp source Loopback0
ntp master 10
ntp server 64.90.182.55
end
CorpHQ#sh run
Building configuration...
Current configuration : 6353 bytes
! No configuration change since last restart
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname CorpHQ
boot-start-marker
boot-end-marker
logging message-counter syslog
no aaa new-model
clock timezone PST -8
clock summer-time PDT recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
dot11 syslog
ip source-route
ip cef
ip dhcp excluded-address 177.1.11.1 177.1.11.14
ip dhcp excluded-address 177.1.11.21 177.1.11.254
ip dhcp excluded-address 177.2.11.1 177.2.11.14
ip dhcp excluded-address 177.2.11.21 177.2.11.254
ip dhcp pool CorpHQ-Phones
network 177.1.11.0 255.255.255.0
option 150 ip 177.1.10.10 177.1.10.20
default-router 177.1.11.1
dns-server 177.1.100.110
ip dhcp pool Branch1-Phones
network 177.2.11.0 255.255.255.0
option 150 ip 177.1.10.10 177.1.10.20
default-router 177.2.11.1
dns-server 177.1.100.110
no ip domain lookup
ip multicast-routing
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type primary-ni
voice service voip
allow-connections h323 to h323
fax protocol cisco
sip
bind control source-interface Loopback0
bind media source-interface Loopback0
no update-callerid
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729r8
voice translation-rule 1
rule 1 // // type any subscriber plan any isdn
voice translation-rule 2
rule 1 // // type any national plan any isdn
voice translation-rule 3
rule 1 // // type any international plan any isdn
voice translation-rule 10
rule 1 /^[2-9].........$/ /9&/
rule 2 /^1[2-9].........$/ /9&/
rule 3 /^011/ /9&/
voice translation-profile MakeInternational
translate called 3
voice translation-profile MakeNational
translate called 2
voice translation-profile MakeSubscriber
translate called 1
voice translation-profile Prefix9_InFrom_CUCM
translate called 10
voice-card 0
dsp services dspfarm
archive
log config
hidekeys
controller T1 0/0/0
pri-group timeslots 1-3,24
description == Voice Circuit to PSTN
interface Loopback0
ip address 177.1.254.1 255.255.255.255
ip pim dense-mode
interface FastEthernet0/0
description == To CorpHQ-Switch
no ip address
duplex auto
speed auto
interface FastEthernet0/0.10
description == Server VLAN
encapsulation dot1Q 10
ip address 177.1.10.1 255.255.255.0
ip pim dense-mode
interface FastEthernet0/0.11
description == Voice VLAN
encapsulation dot1Q 11
ip address 177.1.11.1 255.255.255.0
ip helper-address 177.1.10.10
ip nbar protocol-discovery
ip pim dense-mode
interface FastEthernet0/0.12
description == Data VLAN
encapsulation dot1Q 12
ip address 177.1.12.1 255.255.255.0
interface FastEthernet0/0.13
description == PSTN PHONE VLAN
encapsulation dot1Q 13
ip address 177.1.13.1 255.255.255.0
interface FastEthernet0/1
description === To PSTN
ip address 177.1.19.254 255.255.255.0
duplex auto
speed auto
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
no cdp enable
interface Serial0/1/0
description == Frame-Relay Circuit to WAN
no ip address
encapsulation frame-relay
fair-queue 64 256 36
cdp enable
frame-relay lmi-type ansi
ip rsvp bandwidth
interface Serial0/1/0.1 point-to-point
description == FR To BR1
bandwidth 384
ip address 177.0.101.1 255.255.255.0
ip pim dense-mode
snmp trap link-status
frame-relay interface-dlci 101
ip rsvp bandwidth 136
interface Serial0/1/0.2 point-to-point
description == FR To BR2
ip address 177.0.201.1 255.255.255.0
snmp trap link-status
frame-relay interface-dlci 102
ip rsvp bandwidth 136
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 177.1.19.1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0.10
no ip http server
no ip http secure-server
control-plane
voice-port 0/0/0:23
voice-port 0/3/0
voice-port 0/3/1
ccm-manager music-on-hold
sccp local Loopback0
sccp ccm 177.1.10.10 identifier 1 priority 1 version 5.0.1
sccp ccm 177.1.10.20 identifier 2 priority 2 version 5.0.1
sccp ccm 177.1.254.3 identifier 3 priority 3 version 5.0.1
sccp
sccp ccm group 1
bind interface Loopback0
associate ccm 2 priority 1
associate ccm 1 priority 2
associate ccm 3 priority 3
associate profile 1 register CorpHQ-729-MTP
associate profile 2 register CorpHQ-711-MTP
associate profile 3 register CorpHQ-HW-Xcode
dspfarm profile 3 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
codec ilbc
maximum sessions 2
associate application SCCP
dspfarm profile 1 mtp
codec g729ar8
codec g729r8
rsvp
maximum sessions software 10
associate application SCCP
dspfarm profile 2 mtp
codec g711ulaw
rsvp
maximum sessions software 10
associate application SCCP
dial-peer voice 1 pots
incoming called-number .
direct-inward-dial
dial-peer voice 10 pots
translation-profile outgoing MakeSubscriber
destination-pattern 911
no digit-strip
port 0/0/0:23
dial-peer voice 11 pots
translation-profile outgoing MakeSubscriber
destination-pattern 9[2-9]..[2-9]......$
port 0/0/0:23
dial-peer voice 12 pots
translation-profile outgoing MakeNational
destination-pattern 91[2-9]..[2-9]......$
port 0/0/0:23
forward-digits 11
dial-peer voice 13 pots
translation-profile outgoing MakeInternational
destination-pattern 9011T
port 0/0/0:23
prefix 011
dial-peer voice 100 voip
description == Inbound/Outbound SIP PSTN GW From/To CUCM Pub
translation-profile incoming Prefix9_InFrom_CUCM
destination-pattern ^2065011...$
voice-class codec 1
session protocol sipv2
session target ipv4:177.1.10.10
incoming called-number .
ip qos dscp cs3 signaling
dial-peer hunt 1
sip-ua
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous level 0 limit 20
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
no login
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
no login
scheduler allocate 20000 1000
ntp source Loopback0
ntp master 2
ntp server 177.1.254.254
end
Branch1#sh run
Building configuration...
Current configuration : 3838 bytes
! Last configuration change at 01:19:02 CDT Thu Oct 10 2013
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname Branch1
boot-start-marker
boot-end-marker
logging message-counter syslog
no aaa new-model
clock timezone CST -6
clock summer-time CDT recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
dot11 syslog
ip source-route
ip cef
ip multicast-routing
no ipv6 cef
ntp update-calendar
ntp server 177.1.254.1
multilink bundle-name authenticated
isdn switch-type primary-ni
voice-card 0
dsp services dspfarm
archive
log config
hidekeys
controller T1 0/0/0
pri-group timeslots 1-3,24 service mgcp
interface Loopback0
ip address 177.1.254.2 255.255.255.255
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.11
description == Voice VLAN
encapsulation dot1Q 11
ip address 177.2.11.1 255.255.255.0
ip helper-address 177.1.254.1
ip pim dense-mode
interface FastEthernet0/0.12
description == Data VLAN
encapsulation dot1Q 12
ip address 177.2.12.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
isdn supp-service name calling
isdn bind-l3 ccm-manager
isdn outgoing ie facility
isdn outgoing display-ie
isdn outgoing ie redirecting-number
no cdp enable
interface Serial0/1/0
description == Frame-Relay Circuit to WAN
no ip address
encapsulation frame-relay
fair-queue 64 256 37
cdp enable
no frame-relay inverse-arp
frame-relay lmi-type ansi
ip rsvp bandwidth
interface Serial0/1/0.1 point-to-point
description == FR To HQ
ip address 177.0.101.2 255.255.255.0
ip pim dense-mode
snmp trap link-status
frame-relay interface-dlci 101
ip rsvp bandwidth 136
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
no ip http server
no ip http secure-server
control-plane
voice-port 0/0/0:23
ccm-manager fallback-mgcp
ccm-manager redundant-host 177.1.10.10
ccm-manager mgcp
no ccm-manager fax protocol cisco
ccm-manager music-on-hold
mgcp
mgcp call-agent 177.1.10.20 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp fax t38 ecm
mgcp bind control source-interface Loopback0
mgcp bind media source-interface Loopback0
mgcp profile default
sccp local Loopback0
sccp ccm 177.1.254.3 identifier 3 priority 3 version 5.0.1
sccp ccm 177.1.10.10 identifier 1 priority 1 version 5.0.1
sccp ccm 177.1.10.20 identifier 2 priority 2 version 5.0.1
sccp
sccp ccm group 1
bind interface Loopback0
associate ccm 2 priority 1
associate ccm 1 priority 2
associate ccm 3 priority 3
associate profile 3 register Br1-HW-Xcode
associate profile 1 register Br1-729-MTP
associate profile 2 register Br1-711-MTP
dspfarm profile 3 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 2
associate application SCCP
dspfarm profile 1 mtp
codec g729ar8
codec g729r8
rsvp
maximum sessions software 10
associate application SCCP
dspfarm profile 2 mtp
codec g711ulaw
rsvp
maximum sessions software 10
associate application SCCP
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous level 0 limit 20
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
no login
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
no login
scheduler allocate 20000 1000
end
Branch2#sh run
Building configuration...
Current configuration : 5789 bytes
! No configuration change since last restart
version 12.4
no service pad
no service timestamps debug uptime
no service timestamps log uptime
no service password-encryption
hostname Branch2
boot-start-marker
boot system flash:c2800nm-advipservicesk9-mz.124-24.T7.bin
boot system flash:
boot-end-marker
card type e1 0 0
logging message-counter syslog
no aaa new-model
clock timezone CEST 1
clock summer-time CEDT recurring
network-clock-participate wic 0
no network-clock-participate aim 0
dot11 syslog
ip source-route
ip cef
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type primary-net5
voice service voip
no supplementary-service h225-notify cid-update
fax protocol cisco
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729r8
voice class custom-cptone JOIN-TONE
dualtone conference
frequency 300 3600
cadence 150 100 500
voice class custom-cptone LEAVE-TONE
dualtone conference
frequency 300 3600
cadence 500 100 150
voice translation-rule 1
rule 1 /^7033...$/ /020&/
voice translation-rule 10
rule 1 /^0/ /0&/
voice translation-rule 200
rule 1 /^206501...$/ /1&/
voice translation-profile 7DigitDNIS-to-10Digit
translate called 1
voice translation-profile Prefix0_InFrom_CUCM
translate called 10
voice translation-profile Prefix1-toCorpHQ-ANI
translate calling 200
voice-card 0
dsp services dspfarm
archive
log config
hidekeys
controller E1 0/0/0
pri-group timeslots 1-3,16
description == Voice Circuit to PSTN
controller E1 0/0/1
interface Loopback0
ip address 177.1.254.3 255.255.255.255
h323-gateway voip bind srcaddr 177.1.254.3
interface FastEthernet0/0
no ip address
duplex auto
speed auto
interface FastEthernet0/0.11
encapsulation dot1Q 11
ip address 177.3.11.1 255.255.255.0
ip helper-address 177.1.10.10
interface FastEthernet0/0.12
encapsulation dot1Q 12
ip address 177.3.12.1 255.255.255.0
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0:15
no ip address
encapsulation hdlc
isdn switch-type primary-net5
isdn incoming-voice voice
isdn bchan-number-order ascending
no cdp enable
interface Serial0/1/0
description == Frame-Relay Circuit to WAN
no ip address
encapsulation frame-relay
fair-queue 64 256 37
cdp enable
no frame-relay inverse-arp
frame-relay lmi-type ansi
ip rsvp bandwidth
interface Serial0/1/0.1 point-to-point
description == FR To HQ
ip address 177.0.201.2 255.255.255.0
snmp trap link-status
frame-relay interface-dlci 102
ip rsvp bandwidth 136
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
interface Service-Engine1/0
no ip address
shutdown
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:
control-plane
voice-port 0/0/0:15
translation-profile incoming 7DigitDNIS-to-10Digit
ccm-manager music-on-hold
sccp local Loopback0
sccp ccm 177.1.10.20 identifier 2 priority 2 version 5.0.1
sccp ccm 177.1.10.10 identifier 1 priority 1 version 5.0.1
sccp ccm 177.1.254.3 identifier 3 priority 3 version 5.0.1
sccp
sccp ccm group 1
bind interface Loopback0
associate ccm 2 priority 1
associate ccm 1 priority 2
associate ccm 3 priority 3
associate profile 4 register Br2-HW-Conf
associate profile 3 register Br2-HW-Xcode
associate profile 2 register Br2-711-MTP
associate profile 1 register Br2-729-MTP
dspfarm profile 3 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 2
associate application SCCP
dspfarm profile 4 conference
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 1
conference-join custom-cptone JOIN-TONE
conference-leave custom-cptone LEAVE-TONE
associate application SCCP
dspfarm profile 1 mtp
codec g729ar8
codec g729r8
rsvp
maximum sessions software 10
associate application SCCP
dspfarm profile 2 mtp
codec g711ulaw
rsvp
maximum sessions software 10
associate application SCCP
dial-peer voice 1 pots
incoming called-number .
direct-inward-dial
dial-peer voice 10 pots
destination-pattern 112
no digit-strip
port 0/0/0:15
dial-peer voice 11 pots
destination-pattern 00[1-9]T
port 0/0/0:15
prefix 0
dial-peer voice 12 pots
translation-profile outgoing Prefix1-toCorpHQ-ANI
destination-pattern 000T
port 0/0/0:15
prefix 00
dial-peer voice 100 voip
description == Inbound/Outbound H323 PSTN GW From/To GK and CUCM Pub
translation-profile incoming Prefix0_InFrom_CUCM
destination-pattern 0207033...$
voice-class codec 1
session target ipv4:177.1.10.10
incoming called-number .
ip qos dscp cs3 signaling
dial-peer voice 101 voip
description == Outbound H323 PSTN GW To CUCM Sub
destination-pattern 0207033...$
voice-class codec 1
session target ipv4:177.1.10.20
ip qos dscp cs3 signaling
dial-peer hunt 1
telephony-service
max-ephones 1
max-dn 1
ip source-address 177.1.254.3 port 2000
max-conferences 8 gain -6
moh test.au
multicast moh 239.2.1.1 port 16384 route 177.1.254.3 177.3.11.1
transfer-system full-consult
create cnf-files version-stamp 7960 Sep 13 2013 18:55:27
line con 0
exec-timeout 0 0
line aux 0
line 66
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
login
scheduler allocate 20000 1000
ntp source Loopback0
ntp update-calendar
ntp server 177.1.254.1
end -
2611XM refuses to grab a DHCP address from an upper router.
HI, first time here. Im a homeschooled student and trying to work on getting a CCNA. I ran into an issue which puts me in a stopping point. I have a Cisco 2611XM router in which im trying to pass internet traffic to a few select computers. The problem is the WAN (fa0/1) will not get an address from the d-link router which is handing out dhcp addresses to all my computers in the main network. Ive watched lots of youtube videos but only to validate Ive used the same methods they did. SO here is a quick run down of the topology.
cable modem>dlink router>cisco2611XM>dumbSwitch>Computer#3
> >LinksysSLMG224G 24 port switch>computers 1,2
As you can see my network splits off from the dlink into what needs to be 2 networks.
So why cant I get the WAN interface of the 2611XM to grab a dhcp address?
config
secureROUTER#sh run
Building configuration...
Current configuration : 1031 bytes
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname secureROUTER
boot-start-marker
boot-end-marker
enable secret 5 $1$fq4Z$ty8gmQfFw6v0sM2O0rW2D1
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
no ip domain lookup
interface FastEthernet0/0
description LAN
ip address 10.0.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
no cdp enable
interface FastEthernet0/1
description WAN
ip address dhcp
ip nat outside
no ip route-cache cef
no ip route-cache
duplex auto
speed auto
no cdp enable
ip nat inside source list 1 interface FastEthernet0/0 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
access-list 1 permit 10.0.0.0 0.0.0.255
no cdp run
banner motd ^CGet the fuck out!!^C
line con 0
line aux 0
line vty 0 4
password 7 111B1F5244000D
logging synchronous
login
endDuplicate post.
Go HERE. -
Cisco 876w: wlan client - routing problem
I configured a Cisco 876w to connect to an existing WLAN as a client. Now I would like to connect 3 PCs to the 876w which should be able to access the internet via the 876w.
Problem:
Being at the console (ssh) of the 876w, I can ping hosts in the internet (even with their name like www.google.com) but when I'm using a client PC, I can't... What am I missing here? Could it be a NAT problem?
Config:
Internet <---> DSL Router 192.168.1.1 (and WLAN AccessPoint) <---> Cisco 876w (gets IP per DHCP, VLAN1 IP: 10.10.10.1) <---> PC (10.10.10.101)
Current configuration : 9897 bytes
version 12.4
no service pad...dot11 vlan-name wlan-lan vlan 1
dot11 ssid WLAN
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii 7 0923467F1B2E52789807132F7A202E3D31
no ip source-route
ip dhcp excluded-address 10.10.10.1 10.10.10.9
ip dhcp excluded-address 10.10.10.101 10.10.10.254
ip dhcp pool ccp-pool1
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
domain-name cisco.test.com
dns-server 208.67.222.222
ip cef
no ip bootp server
ip domain name test.com
ip name-server 208.67.222.222ip ddns update method sdm_ddns1
HTTP
add http://[email protected]/nic/update?system=dyndns&hostname=//[email protected]/nic/update?system=dyndns&hostname=<h>&myip=<a>
remove http://[email protected]/nic/update?system=dyndns&hostname=//[email protected]/nic/update?system=dyndns&hostname=<h>&myip=<a>
no ipv6 cef
multilink bundle-name authenticated
isdn switch-type basic-net3
username admin privilege 15 secret 5 $1$uiouLKjbLIUBlKbj
username service privilege 15 secret 5 $1$LKjblkJNBLKkjlbkm
archive
log config
hidekeys
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
class-map type inspect match-all sdm-cls--1
match access-group name AllowAny
policy-map type inspect sdm-policy-sdm-cls--1
class type inspect sdm-cls--1
inspect
class class-default
drop
zone security wan
zone security lan
zone-pair security sdm-zp-lan-wan source lan destination wan
service-policy type inspect sdm-policy-sdm-cls--1
interface BRI0
description <--
no ip address
ip flow ingress
ip virtual-reassembly
encapsulation ppp
shutdown
dialer pool-member 1
isdn switch-type basic-net3
isdn point-to-point-setup
ppp multilink!
interface ATM0
backup interface BRI0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
shutdown
no atm ilmi-keepalive
interface ATM0.3 point-to-point
description <--
ip flow ingress
shutdown
pvc 1/32
pppoe-client dial-pool-number 2
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface Dot11Radio0
description <--
no ip address
no ip proxy-arp
ip flow ingress
ip virtual-reassembly
no ip route-cache cef
no ip route-cache
encryption mode ciphers aes-ccm
encryption vlan 1 mode ciphers aes-ccm
ssid WLAN
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role non-root
no cdp enable
interface Dot11Radio0.1
encapsulation dot1Q 1 native
ip address dhcp
ip nat outside
ip virtual-reassembly
no ip route-cache
no cdp enable
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat inside
ip virtual-reassembly
zone-member security lan
ip tcp adjust-mss 1412
interface Dialer0
ip ddns update hostname blahblah.dnsalias.com
ip ddns update sdm_ddns1
ip address negotiated
ip nat outside
ip virtual-reassembly
zone-member security wan
encapsulation ppp
shutdown
dialer pool 1
dialer idle-timeout 600
dialer string 01919214124
dialer load-threshold 20 outbound
dialer watch-group 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname asfa
ppp chap password 7 128763520
ppp pap sent-username asfa password 7 0302141555
ppp multilink
interface Dialer2
ip ddns update sdm_ddns1
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
zone-member security wan
encapsulation ppp
dialer pool 2
dialer-group 2
no cdp enable
ppp authentication chap pap callin
ppp chap hostname gast
ppp chap password 7 095B239876473F06090A
ppp pap sent-username gast password 7 1239847629873693D
router rip
network 10.0.0.0
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip http server
ip http access-class 23ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 105 interface Dialer0 overload
ip nat inside source list 106 interface Dot11Radio0.1 overload
ip access-list extended AllowAny
remark CCP_ACL Category=128
permit ip 10.10.10.0 0.0.0.255 any
ip access-list extended nix
remark tut nix
remark CCP_ACL Category=2
permit tcp any any
permit udp any any
permit icmp any any
permit ip any any
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 100 remark CCP_ACL Category=2
access-list 100 permit ip any any
access-list 101 remark CCP_ACL Category=2
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
access-list 102 remark CCP_ACL Category=2
access-list 102 permit ip 10.10.10.0 0.0.0.255 any
access-list 103 remark CCP_ACL Category=2
access-list 103 permit ip 10.10.10.0 0.0.0.255 any
access-list 105 remark Alles
access-list 105 remark CCP_ACL Category=2
access-list 105 permit ip 10.10.10.0 0.0.0.255 any
access-list 105 permit icmp 10.10.10.0 0.0.0.255 any
access-list 105 permit udp 10.10.10.0 0.0.0.255 any
access-list 105 permit tcp 10.10.10.0 0.0.0.255 any
access-list 106 remark NAT wlan
access-list 106 remark CCP_ACL Category=2
access-list 106 permit ip 10.10.10.0 0.0.0.255 any
access-list 106 permit icmp 10.10.10.0 0.0.0.255 any
access-list 106 permit udp 10.10.10.0 0.0.0.255 any
access-list 106 permit tcp 10.10.10.0 0.0.0.255 any
dialer watch-list 1 ip 208.67.222.222 255.255.255.255
dialer-list 1 protocol ip permit
no cdp run
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
control-plane
banner exec ^C
% Password expiration warning.
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
^C
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
line con 0
no modem enable
transport output telnet
line aux 0
transport output telnet
line vty 0 4
transport input telnet ssh
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end
#sh ip int brief
ndrmedienturm#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset up up
FastEthernet1 unassigned YES unset up down
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
BRI0 unassigned YES NVRAM standby mode/disabled down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
Dot11Radio0 unassigned YES TFTP up up
Dot11Radio0.1 unassigned YES DHCP up up
ATM0 unassigned YES NVRAM administratively down down
ATM0.3 unassigned YES unset administratively down down
SSLVPN-VIF0 unassigned NO unset up up
Vlan1 10.10.10.1 YES NVRAM up up
NVI0 unassigned YES unset administratively down down
Dialer0 unassigned YES NVRAM administratively down down
Dialer2 unassigned YES NVRAM up up
Virtual-Dot11Radio0 unassigned YES TFTP up up
Virtual-Dot11Radio0.1 192.168.1.54 YES DHCP up upHi,
Just check it out few things from client are you able to ping the wan interface of the cisco 876w and when you ping the internt address from client pc what is the out put of the nat translation in router.
The command to check the same is show ip nat translation is packet is gettin translated or not.
Hope to Help !!
Ganesh.H -
Cisco 877W router and external ADSL modem
Cisco 877W router and external ADSL modem
In order to support ADSL2+ on a pre ADSL2+ router and in preparation for a later migration to BT infinity I am trying to configure the Router using an external adsl2+ modem appropriately.
The original configuration had 3 ports configured as one (internal lan) vlan and bridge group together with one wireless sub-interface, the remaining port configured a second vlan and bridge group with a second wireless sub- interface. The Dialer was a member of the second bridge group. This way the second wireless interface and associated bridge group provided a kind of DMZ for outbound access.
The configuration I am attempting is similar the lan ports remain the same, but port 0 as a member of the vlan and bridge group (now a pppoe client) associated with one of the wireless sub interfaces as per above. The ATM interface is downed. This nearly works except that if the wireless subinterface on this bridge group is configured the dialer no longer dials giving a 'no dialer string' error. If I do not configure that wireless sub interface all works well.
If anyone is interested to look I would appreciate any comments. I enclose a sanitised config in which you will note the 'commented out' wireless subnet interface (in red).
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
hostname xxxxxxxxxxxxxxxxxxxxx
boot-start-marker
boot-end-marker
logging buffered 4096 warnings
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxx
aaa new-model
aaa group server radius sdm-vpn-server-group-2
aaa group server radius rad_eap
server 192.168.253.1 auth-port 1812 acct-port 1813
server 192.168.253.1 auth-port 1645 acct-port 1646
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_2 group sdm-vpn-server-group-2
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa authorization ipmobile default group rad_pmip
aaa authorization network sdm_vpn_group_ml_2 local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
crypto pki trustpoint TP-self-signed-2834265337
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2834265337
revocation-check none
rsakeypair TP-self-signed-2834265337
crypto pki certificate chain TP-self-signed-2834265337
certificate self-signed 01 nvram:IOS-Self-Sig#2F.cer
dot11 syslog
dot11 ssid GuestAP
vlan 101
authentication open
authentication key-management wpa
mbssid guest-mode
wpa-psk ascii 7 113B162712001F4A2D2B25
dot11 ssid LanAP
vlan 100
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
mbssid guest-mode
no ip source-route
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.252.1 192.168.252.8
ip dhcp excluded-address 192.168.252.15 192.168.252.254
ip dhcp pool sdm-pool1
import all
network 192.168.252.0 255.255.255.0
domain-name XXX.Local
dns-server xxx.xxx.xxx.xxx
default-router 192.168.252.254
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
no ip bootp server
no ip domain lookup
ip domain name XXX.Local
ip name-server xxx.xxx.xxx.xxx
ip name-server xxx.xxx.xxx.xxx
ip reflexive-list timeout 120
vpdn enable
vpdn-group 1
request-dialin
protocol pppoe
username administrator privilege 15 secret 5 £££££££££££££££££££££
class-map type inspect match-any IN_to_OUT_CLASS
match protocol tcp
match protocol udp
match protocol icmp
class-map type inspect match-any OUT_to_IN_CLASS
match protocol https
match protocol smtp extended
class-map type inspect match-any DMZ_to_IN_CLASS
match protocol http
match protocol https
match protocol smtp extended
policy-map type inspect DMZ_to_IN_POL
class type inspect DMZ_to_IN_CLASS
inspect
class class-default
drop log
policy-map type inspect IN_to_OUT_POL
class type inspect IN_to_OUT_CLASS
inspect
class class-default
drop log
policy-map type inspect OUT_to_IN_POL
class type inspect OUT_to_IN_CLASS
inspect
class class-default
drop log
zone security INSIDE
zone security OUTSIDE
zone security DMZ
zone-pair security OUT_TO_IN source OUTSIDE destination INSIDE
service-policy type inspect OUT_to_IN_POL
zone-pair security IN_TO_OUT source INSIDE destination OUTSIDE
service-policy type inspect IN_to_OUT_POL
zone-pair security DMZ_TO_OUT source DMZ destination OUTSIDE
service-policy type inspect IN_to_OUT_POL
zone-pair security DMZ_TO_IN source DMZ destination INSIDE
service-policy type inspect DMZ_to_IN_POL
bridge irb
interface Loopback0
no ip address
interface Null0
no ip unreachables
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
interface FastEthernet0
description Outside Interface (PPPoE)
interface FastEthernet1
description Inside Interface
switchport access vlan 10
interface FastEthernet2
description Inside Interface
switchport access vlan 10
spanning-tree portfast
interface FastEthernet3
description Inside Interface
switchport access vlan 10
spanning-tree portfast
interface Dot11Radio0
no ip address
no ip route-cache cef
no ip route-cache
encryption vlan 100 mode ciphers aes-ccm tkip
encryption vlan 101 mode ciphers aes-ccm tkip
ssid GuestAP
ssid LanAP
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2437
station-role root
interface Dot11Radio0.100
description LanAP
encapsulation dot1Q 100
no ip route-cache
no cdp enable
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
!interface Dot11Radio0.101
! description GuestAP
! encapsulation dot1Q 101
! no ip route-cache
! no cdp enable
! bridge-group 1
! bridge-group 1 subscriber-loop-control
! bridge-group 1 spanning-disabled
! bridge-group 1 block-unknown-source
! no bridge-group 1 source-learning
! no bridge-group 1 unicast-flooding
interface Vlan1
description $ES_LAN$
no ip address
ip virtual-reassembly
pppoe enable group global
pppoe-client dial-pool-number 1
bridge-group 1
interface Vlan10
no ip address
ip virtual-reassembly
bridge-group 10
interface Dialer1
description $FW_OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip nat outside
ip virtual-reassembly
zone-member security OUTSIDE
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname XXXXXXX
ppp chap password 7 xxxxxxxxxxxxxxxxxxx
ppp pap sent-username xxxxxxxxxxxxxxxxxx password 7 xxxxxxxxxxxxxxxxxxxxx
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
interface Dialer0
no ip address
interface BVI10
description Inside Interface
ip address 192.168.253.254 255.255.255.0
ip access-group 101 in
ip helper-address 192.168.253.1
ip nat inside
ip virtual-reassembly
zone-member security INSIDE
interface BVI1
description DMZ Interface
ip address 192.168.252.254 255.255.255.0
ip nat inside
ip virtual-reassembly
zone-member security DMZ
ip local pool SDM_POOL_1 192.168.20.9 192.168.20.14
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list Inside_Clients_NAT interface Dialer1 overload
ip nat inside source static 192.168.253.10 xxx.xxx.xxx.xxx
ip access-list extended DMZ_to_IN_POL
remark SDM_ACL Category=128
permit ip any any
ip access-list extended Inside_Clients_NAT
remark SDM_ACL Category=2
permit ip 192.168.253.0 0.0.0.255 any
logging 192.168.253.10
access-list 1 remark Auto generated by SDM Management Access feature
access-list 1 remark SDM_ACL Category=1
access-list 1 permit 192.168.253.0 0.0.0.255
access-list 100 remark VTY Access-class list
access-list 100 remark SDM_ACL Category=1
access-list 100 permit ip 192.168.253.0 0.0.0.255 any
access-list 100 deny ip any any
access-list 101 remark Auto generated by SDM Management Access feature
access-list 101 remark SDM_ACL Category=1
access-list 101 remark Auto generated by SDM for NTP (123) xxx.xxx.xxx.xxx
access-list 101 permit udp host xxx.xxx.xxx.xxx eq ntp host 192.168.253.254 eq ntp
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq telnet
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq 22
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq www
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq 443
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq cmd
access-list 101 deny tcp any host 192.168.253.254 eq telnet
access-list 101 deny tcp any host 192.168.253.254 eq 22
access-list 101 deny tcp any host 192.168.253.254 eq www
access-list 101 deny tcp any host 192.168.253.254 eq 443
access-list 101 deny tcp any host 192.168.253.254 eq cmd
access-list 101 deny udp any host 192.168.253.254 eq snmp
access-list 101 permit ip any any
access-list 199 permit ip any host 10.1.1.1
dialer-list 1 protocol ip permit
no cdp run
radius-server attribute 32 include-in-access-req format %h
radius-server host 192.168.253.1 auth-port 1812 acct-port 1813 key 7 XXXXXXXXXXXXXXXXXX
radius-server host 192.168.253.1 auth-port 1645 acct-port 1646 key 7 XXXXXXXXXXXXXXXXXX
radius-server vsa send accounting
control-plane
bridge 1 protocol ieee
bridge 1 route ip
bridge 10 protocol ieee
bridge 10 route ip
banner login C Border Router
line con 0
no modem enable
transport output telnet
line aux 0
transport output telnet
line vty 0 4
access-class 100 in
privilege level 15
length 0
transport input telnet ssh
scheduler max-task-time 5000
scheduler interval 500
ntp server xxx.xxx.xxx.xxx source Dialer0 prefer
ntp server xxx.xxx.xxx.xxx source Dialer0 prefer
sntp server xxx.xxx.xxx.xxx
endHi Jody,
Apologies delay in replying. I have done the following:
Made two of the FE ports vlan1,BVI1 (for LAN traffic)
Left one port as VLAN10 as the pppoe client conected to the externalmodem
Made the last port VLAN10 as well and gave it an IP addess as for a DMZ client.
I have DHCP configured to serve the DMZ addresses.
This all works for LAN clients and also works for a client attachedto that physical DMZ port.
When I added a dot11radio sub interface into VLAN 10 the wireless client did not get an IP lease. Everything else continued to work.
I had never thought about this before, but if a dot11radio interface is on the same vlan (but not being part ofa bridge group) why are DHCP broadcasts not propogating to all the vlan members as I would have expected. I recognise that this isa limit in my understanding.
If I then made VLAN10 a member of a new Bridge Group, I lost WAN connectivity as per original posting.
I cannot add another VLAN due to the 2 vlan limit in this image.
Finally regarding your comment about giving it what it wants, what exactly did you have in mind. The dialer already has a dial string parameters configured.
Think I am about to give upon this.
Regards, -
%IPRT-3-RIB_LOOP: Resolution loop formed by routes in RIB
Does someone know how to debug this error message please?
%IPRT-3-RIB_LOOP: Resolution loop formed by routes in RIB
This error message spread everywhere inside my network.
thanks!!Hello Vincent,
This error mean that RIB route producers have installed routes in the RIB that form a loop during resolution. But, there could be several reasons for this. For. eg: a route received from a neighboring device and being installed in the RIB that conflicted with an already known/installed path.
When were these logs observed? Are there any other logs alongside this which can shed some more light on the actual problem. The supporting logs can tell which component is triggering this (like CEF discovering the routing for a prefix has recursive paths that lead back to itself). These logs are merely symptoms.
"show log" and "show ip route loops" will be good to have to start with!
Regards,
Imran -
857 Router Dot11Radio0 reset - problem
Hi all
I have just upgraded the IOS in a 857 Router to this:
ROUTER#sh version
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3)
but now I can't get the dot11radio 0 interface to come up. I just get a message saying the interface is reset and line protocol is down. I get this error message when I remove and re-insert the SSID -
ROUTER(config)#int dot11radio 0
ROUTER(config-if)#no ssid SSID
*Mar 1 04:04:24.655: %DOT11-4-NO_SSID: No SSID configured. Dot11Radio0 not started.
ROUTER(config-if)#ssid SSID
ROUTER(config-if)#
*Mar 1 04:04:24.655: %DOT11-4-NO_SSID: No SSID configured. Dot11Radio0 not started.
'Show run' shows the ssid is configured on the interface but the error message is saying that it doesn't have an ssid, even after a 'copy run start' and a 'reload'
I have spent hours on this and I can't find the problem. I have done numerous 'write erase' and 'reload' as well as re-installing the IOS twice.
Any advice would be very appreciated.
--- show output ---
ROUTER# sh ip int dot11Radio 0
Dot11Radio0 is reset, line protocol is down
Internet protocol processing disabled
ROUTER#sh int dot
ROUTER#sh int dot11Radio 0
Dot11Radio0 is reset, line protocol is down
Hardware is 802.11G Radio, address is xxxx.xxxx.xxxx (bia xxxx.xxxx.xxxx)
Description: WLAN
MTU 1500 bytes, BW 54000 Kbit/sec, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/30 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
ROUTER#
--- show run summary ---
dot11 syslog
dot11 ssid SSID
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii 0 ppppppppppp
bridge irb
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
interface ATM0.1 point-to-point
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
interface Dot11Radio0
description WLAN
no ip address
encryption vlan 1 mode ciphers tkip
ssid SSID
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
infrastructure-client
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Vlan1
description Bridged LAN and WLAN
no ip address
ip virtual-reassembly
ip tcp adjust-mss 1452
bridge-group 1
bridge-group 1 spanning-disabled
interface Dialer1
description $OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
ip nat outside
ip virtual-reassembly
encapsulation ppp
no ip route-cache cef
no ip route-cache
ip tcp adjust-mss 1242
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap ppppppp
ppp chap refuse
ppp pap sent-username uuuuuuuuu password 0 ppppppp
interface BVI1
ip address xxx.xxx.xxx.xxx 255.255.255.0
ip nat inside
ip virtual-reassemblyNot to worry everyone. I have figured it out. I replaced the dot11radio 0 intface with this config
interface Dot11Radio0
description WLAN
no ip address
encryption vlan 1 mode ciphers tkip
ssid SSID
no cdp enable
no ip address
no shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
infrastructure-client
and added in this config for the sub interface which was missing:
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
Thanks anyway. -
7200 intervlan routing question
Hi experts, look this.
I have 7200 router conect to a switch with two interfaces Giga, trunk dot1q.
My problem is I lost traffic in my LAN, physical problems are discarded.
?This can be the source of the problem, two uplinks trunk with the same switch?
This is my config.
interface GigabitEthernet0/2
no ip address
no ip unreachables
no ip route-cache cef
no ip route-cache
load-interval 30
duplex full
speed 1000
media-type rj45
negotiation auto
no cdp enable
interface GigabitEthernet0/2.1
encapsulation dot1Q 1 native
ip address 200.235.110.1 255.255.255.192
no ip unreachables
no ip route-cache
no cdp enable
interface GigabitEthernet0/2.2
encapsulation dot1Q 2
ip address 200.235.110.65 255.255.255.224
no ip unreachables
no ip route-cache
ipv6 address 2910:1F0:FEFE:FEFE::1/48
no cdp enable
interface GigabitEthernet0/2.3
encapsulation dot1Q 3
ip address 200.235.110.97 255.255.255.224
no ip unreachables
no ip route-cache
no cdp enable
interface GigabitEthernet0/3
no ip address
no ip unreachables
no ip route-cache cef
no ip route-cache
load-interval 30
duplex auto
speed auto
media-type rj45
negotiation auto
no cdp enable
interface GigabitEthernet0/3.1
encapsulation dot1Q 23
ip address 200.230.64.41 255.255.255.252
no ip route-cache
no cdp enable
interface GigabitEthernet0/3.24
encapsulation dot1Q 24
ip address 200.235.110.201 255.255.255.248
no ip route-cache
no cdp enable
debug arp
*Feb 28 11:18:46.270: IP ARP: rcvd req src 206.23.14.139 0022.90f8.388e, dst 206.23.14.178 GigabitEthernet0/1
*Feb 28 11:18:46.294: IP ARP: rcvd req src 206.23.14.135 001e.f7f6.6280, dst 206.23.14.178 GigabitEthernet0/1
*Feb 28 11:18:46.294: IP ARP req filtered src 192.168.1.201 0030.48d8.5f80, dst 192.168.1.201 0000.0000.0000 wrong cable, interface GigabitEthernet0/2.11
*Feb 28 11:18:46.578: IP ARP: creating incomplete entry for IP address: 200.235.110.16 interface GigabitEthernet0/2.19
*Feb 28 11:18:46.578: IP ARP: sent req src 200.235.110.254 001a.2fe1.c71a,
dst 200.235.110.16 0000.0000.0000 GigabitEthernet0/2.19
*Feb 28 11:18:46.646: IP ARP: sent req src 200.235.119.254 001a.2fe1.c71a,
dst 200.25.9.84 0000.0000.0000 GigabitEthernet0/2.19
*Feb 28 11:18:46.670: IP ARP throttled out the ARP Request for 200.235.225.25
*Feb 28 11:18:46.670: IP ARP throttled out the ARP Request for 200.235.226.26
*Feb 28 11:18:46.710: IP ARP: sent req src 200.235.209.254 001a.2fe1.c71a,
dst 200.25.9.140 0000.0000.0000 GigabitEthernet0/2.19
*Feb 28 11:18:46.738: IP ARP: sent req src 200.235.224.1 001a.2fe1.c71a,
dst 200.25.24.51 0000.0000.0000 GigabitEthernet0/2.20
*Feb 28 11:18:46.742: IP ARP throttled out the ARP Request for 200.235.229.84The default gateway statement does not provided routing capability. You need to create a static default route for this to happen:
ip route 0.0.0.0 0.0.0.0 164.156.24.1
However, if you are unable to ping work station to workstation that are connected to ports directly on the switch then there is another problem.
With the workstations connected are you able to ping the respective Vlan interfaces associated with these devices?
If you do a "show IP interface brief" do the VLAN interfaces indicate they are up?
Are the workstations connected to ports in the appropriate VLAN and are these interfaces up and do they have the proper default gateway (VLAN IP) configured?
All things to check at this point, and then proceed form there. -
Cisco 3945 Policy Base Routing
I have a Cisco 3945, it has on it two DS3 lines which I like to treat independent from each other.
I can ping both Serial interfaces from the internet, and I can ping only GIG 0/0 from the internet. but since the router is configured with one static route, GIG 0/1 can't be ping from the outside
Any help would be greatly appreciated
This is my current config:
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname MOVLABT3-CA-ES
boot-start-marker
boot-end-marker
card type t3 1
card type t3 2
enable secret 4 oMCBqgRTCeX5XeEW3HsBW6zI763Fibuq/UrLhF/91Rs
no aaa new-model
no ipv6 cef
ip source-route
ip cef
multilink bundle-name authenticated
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-1015775704
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1015775704
revocation-check none
rsakeypair TP-self-signed-1015775704
crypto pki certificate chain TP-self-signed-1015775704
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31303135 37373537 3034301E 170D3132 30393237 31383132
32305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30313537
37353730 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
810097B2 EE9BF6EF F19DDD93 71CA6D5B D672A749 6997BB7E 81256BFA A2BE8B0F
E8EC5D36 F8618878 88C7016D D8998B95 293DE6F3 C0BB5CFE F2356AFD 26645A29
F3BB69C9 46B6959B 98F35193 9729499A 8C9097FE BD0A80A4 727C87F8 963200CE
E852DD3E 1F9F3B97 1DA1902D 7B352FAE 4FA08D32 95362373 887C6D02 6209152F
73850203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14BCCEA0 AF8EBDF2 05F01968 14CAE720 A41AE8FE EA301D06
03551D0E 04160414 BCCEA0AF 8EBDF205 F0196814 CAE720A4 1AE8FEEA 300D0609
2A864886 F70D0101 05050003 81810066 18505A9D 0D3C4C8F 0C90108D F0606014
0EAE4129 2908928E D4DA7FDC 17D2A21A 4B2689F3 AF6CA062 82A5E7EF 1A0EDA37
297AE79B 65F7182E ED4A57D7 081EC729 A85F2AFB 5A46136A F0F91853 46C89FA7
A1D9F67F 83961EFF E92D7363 D2862517 D1214501 84D675A0 8561891F 4E791F32
6E67990A 9A7B49F9 8D1A8CA0 51AAF2
quit
license udi pid C3900-SPE150/K9 sn FOC16313DE8
hw-module sm 1
hw-module sm 2
controller T3 1/0
cablelength 75
controller T3 2/0
cablelength 75
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address 207.168.4.49 255.255.255.240
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
ip address 206.135.120.114 255.255.255.240
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface Serial1/0
ip address 206.135.100.202 255.255.255.252
ip nat outside
ip virtual-reassembly in
dsu bandwidth 44210
interface Serial2/0
ip address 205.214.40.6 255.255.255.252
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dsu bandwidth 44210
no ip classless
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 206.135.100.201
access-list 1 permit 10.0.0.0 0.0.0.255
snmp-server community RO-N1mS0ft RO
control-plane
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input all
scheduler allocate 20000 1000
endThis is what it looks like now, and I still can't ping gig 0/1 from the internet
interface GigabitEthernet0/0
ip address 207.168.4.49 255.255.255.240
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
ip address 206.135.120.114 255.255.255.240
ip virtual-reassembly in
ip policy route-map pbr
duplex auto
speed auto
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface Serial1/0
ip address 206.135.100.202 255.255.255.252
ip virtual-reassembly in
dsu bandwidth 44210
interface Serial2/0
ip address 205.214.40.6 255.255.255.252
ip virtual-reassembly in
encapsulation ppp
dsu bandwidth 44210
ip local policy route-map PBR
no ip classless
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 206.135.100.201
access-list 1 permit 10.0.0.0 0.0.0.255
access-list 101 permit ip 206.135.120.112 0.0.0.15 any
route-map pbr permit 10
match ip address 101
set ip next-hop 205.214.40.5
snmp-server community RO-N1mS0ft RO
control-plane
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input all
scheduler allocate 20000 1000
end -
Cef + vrf bug in 12.3 ios?
i configured cef and vrf routing:
ip cef
ip vrf lan
rd 300:1
route-target export 300:1
route-target import 300:1
route-target import 200:1
ip vrf vrf1
rd 100:1
route-target export 100:1
route-target import 100:1
route-target import 300:1
ip vrf vrf2
rd 200:1
route-target export 200:1
route-target import 200:1
route-target import 300:1
interface GigabitEthernet0/0
ip vrf forwarding lan
interface GigabitEthernet0/1
ip vrf forwarding vrf1
interface GigabitEthernet1/0
ip vrf forwarding vrf2
ip route vrf lan 0.0.0.0 0.0.0.0 GigabitEthernet0/1
ip route vrf lan 0.0.0.0 0.0.0.0 GigabitEthernet1/0
when i send ping from vrf lan to vrf1, it doesn't work so well:
if i disable cef, it work fine.
i tried to delete vrf 2 and just route to vrf1, still no luck.
i used 3825 with ios 12.3, ip base. i upgraded to 12.4 spservices, and now it works.
same thing happend to me with 3845.
by the way, it does work with 3845 12.4 ipbase ios.Hi RJ ,
The private config contains data that can never be displayed , these are keys and certificates used by crypto image.
-Laxmi -
Setup 1941 router with cable modem and 2 vlan?
hello everyone,
i need a little help setting up my new 1941 router with cable modem using 2 vlns.
this is what i have:
1- 1941 router configured as g0/0 wan port facing isp configured as (dhcp). g0/1 is lan facing the switch (192.168.1.1)
dhcp pool (192.168.1.x)
2- sg300-28pp switch.
3- wap371 AP/ 11pcs..
now everything is working perfect except sometimes we have more than 250 to 300 people trying to connect to the wifi, the router will have no enough ip addresses.
i heard that i can setup 2 vlans to solve this problem? and is there any setup that i have to do on switch and Access points?
please i will appreciate any little help
Regardshello Andre Neethling i added network 192.168.0.0 255.255.254.0 to dhcp pool config and it seems that it is working but i am concern that i am going to have problem in the future so please take a look at the running config and let me know if i have everything done right. also we want to order static ip address from the provider for our security camera system and we will not longer receive dhcp ip from them and my router setup is to receive it as dhcp on g0/0 so what i should do about changing the settings on g0/0?
i appreciate your help
Building configuration...
Current configuration : 1163 bytes
! Last configuration change at 00:46:35 UTC Wed Apr 15 2015
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Abdullah
boot-start-marker
boot-end-marker
no aaa new-model
no ipv6 cef
ip source-route
ip cef
ip dhcp excluded-address 192.168.1.1 192.168.1.50
ip dhcp pool Local
import all
network 192.168.0.0 255.255.254.0
default-router 192.168.1.1
multilink bundle-name authenticated
license udi pid CISCO1941/K9 sn FTX1523022E
redundancy
interface GigabitEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
control-plane
line con 0
line aux 0
line vty 0 4
login
scheduler allocate 20000 1000
end -
How to find all routes that are going out an interface in IOS-XR.
Hi all,
So if I have the following set up in IOS:
interface GigabitEthernet7/0/0.265
encapsulation dot1Q 265
ip vrf forwarding test
ip address 1.1.1.1 255.255.255.252
ip verify unicast reverse-path
end
ip route vrf Apollo 2.2.2.0 255.255.255.248 1.1.1.2
I can see all the routes that are going out the interface using show ip cef command:
ios-router#show ip cef vrf test GigabitEthernet7/0/0.265
2.2.2.0/29
nexthop 1.1.1.2 GigabitEthernet7/0/0.265
1.1.1.0/30
attached to GigabitEthernet7/0/0.265
1.1.1.2/32
attached to GigabitEthernet7/0/0.265
In case of IOS-XR (ASR9K 4.3.2 or 4.3.1) the same setup and command shows only
attached routes:
router static
vrf test
address-family ipv4 unicast
2.2.2.0/29 1.1.1.2
RP/0/RSP0/CPU0:TST_riga-sb7-pe-asr9#show cef vrf test bundle-ether2.265
Prefix Next Hop Interface
1.1.1.0/30 attached Bundle-Ether2.2220333
1.1.1.0/32 broadcast Bundle-Ether2.2220333
1.1.1.1/32 receive Bundle-Ether2.2220333
1.1.1.2/32 1.1.1.2 Bundle-Ether2.2220333
1.1.1.3/32 broadcast Bundle-Ether2.2220333
Is there any command to see all the routes that are going out an interface without complicated parsing
of the configuration, recursive show cef commands etc.?You can accomplish this with the "show route" command. Here is an example:
P/0/RSP1/CPU0:ASR9006-E#sh route next-hop tenGigE 0/3/0/2
Tue Oct 8 15:34:58.046 UTC
Codes: C - connected, S - static, R - RIP, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - ISIS, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, su - IS-IS summary null, * - candidate default
U - per-user static route, o - ODR, L - local, G - DAGR
A - access/subscriber, - FRR Backup path
Gateway of last resort is 172.18.87.1 to network 0.0.0.0
D 10.95.248.1/32 [90/128512] via 10.129.56.210, 4d00h, TenGigE0/3/0/2
C 10.129.56.208/30 is directly connected, 4d00h, TenGigE0/3/0/2
L 10.129.56.209/32 is directly connected, 4d00h, TenGigE0/3/0/2
O 10.242.142.240/30 [110/20] via 10.129.56.210, 3d11h, TenGigE0/3/0/2
[110/20] via 10.129.56.214, 3d11h, TenGigE0/3/0/3
D 192.168.1.16/32 [90/128512] via 10.129.56.210, 4d00h, TenGigE0/3/0/2
D 192.168.20.39/32 [90/128512] via 10.129.56.210, 4d00h, TenGigE0/3/0/2
RP/0/RSP1/CPU0:ASR9006-E#
Thanks,
Bryan -
I'm not new to Cisco routing and switching by any means, but I seem to be missing a basic routing issue somewhere. It looks like a rookie mistake, probably. I could use a second set of eyes on it. Basically, I have a remote switch that I cannot ping or telnet/ssh into directly. I have to get into the router in that remote office, then telnet into the switch from the router. That switch also cannot ping back to the gateway in my office. Here is a diagram of the situation:
Basically, I have a 3750X layer 3 switch acting as my core network router. It is the gateway for many of my subnets that traverse my network, such as 10.1.250.0 and 10.1.252.0. That switch is directly connected to a 2811 router that terminates a few Point to Point T1's. One of those T1's in question goes to a remote office and terminates on a 2820XM router. That router is then connected to a 3524PWR switch. It is the 3524 that I cannot ping or manage from my corporate office.
Connectivity:
The remote 2620 can ping and telnet into the 3524 (10.1.250.50)
Neither the local 2811 nor the local 3570x can ping the remote 3524
The remote 3524 cannot ping either of the local devices
I am using eigrp as my standard dynamic routing protocol
Configs
Below are the main portions of my configs, including interfaces and route entries. I have also listed pertinent portions of my route tables.
Local 3750x:
interface FastEthernet0
no ip address
no ip route-cache cef
no ip route-cache
interface GigabitEthernet1/0/8
switchport access vlan 252
speed 100
duplex full
interface Vlan30
description Management VLAN 30
ip address 10.1.250.1 255.255.255.0
interface Vlan252
ip address 10.1.252.101 255.255.255.252
router eigrp 7
network 10.0.0.0
redistribute static
Gateway of last resort is 10.1.252.250 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 10.1.252.250
10.0.0.0/8 is variably subnetted, 42 subnets, 5 masks
D 10.1.24.0/22 [90/2181376] via 10.1.252.102, 4w6d, Vlan252
C 10.1.250.0/24 is directly connected, Vlan30
L 10.1.250.1/32 is directly connected, Vlan30
C 10.1.252.100/30 is directly connected, Vlan252
L 10.1.252.101/32 is directly connected, Vlan252
D 10.1.252.112/30 [90/2178816] via 10.1.252.102, 4w6d, Vlan252
Local 2811:
interface FastEthernet0/0
ip address 10.1.252.102 255.255.255.252
duplex full
speed 100
interface Serial0/1/0:0
ip address 10.1.252.113 255.255.255.252
router eigrp 7
network 10.0.0.0
redistribute static
Gateway of last resort is 10.1.252.101 to network 0.0.0.0
D*EX 0.0.0.0/0 [170/28416] via 10.1.252.101, 3d15h, FastEthernet0/0
10.0.0.0/8 is variably subnetted, 37 subnets, 5 masks
D 10.1.24.0/22 [90/2181120] via 10.1.252.114, 3d15h, Serial0/1/0:0
D 10.1.250.0/24 [90/28416] via 10.1.252.101, 3d15h, FastEthernet0/0
D 10.1.250.16/29 [90/31232] via 10.1.252.101, 3d15h, FastEthernet0/0
D 10.1.250.24/29 [90/28928] via 10.1.252.101, 3d15h, FastEthernet0/0
C 10.1.252.112/30 is directly connected, Serial0/1/0:0
L 10.1.252.113/32 is directly connected, Serial0/1/0:0
D 10.1.252.248/29 [90/28416] via 10.1.252.101, 3d15h, FastEthernet0/0
Remote 262XM:
interface FastEthernet0/0
no ip address
speed 100
full-duplex
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 10.1.24.1 255.255.255.0
ip helper-address 10.1.2.10
interface FastEthernet0/0.20
encapsulation dot1Q 20
ip address 10.1.25.1 255.255.255.0
ip helper-address 10.1.2.10
interface FastEthernet0/0.30
encapsulation dot1Q 30
ip address 10.1.250.49 255.255.255.0
interface Serial0/0
ip address 10.1.252.114 255.255.255.252
ip summary-address eigrp 7 10.1.24.0 255.255.252.0 5
router eigrp 7
passive-interface FastEthernet0/0.10
passive-interface FastEthernet0/0.20
passive-interface FastEthernet0/0.30
network 10.0.0.0
no auto-summary
Gateway of last resort is 10.1.252.113 to network 0.0.0.0
10.0.0.0/8 is variably subnetted, 35 subnets, 4 masks
D 10.1.252.248/29 [90/2181376] via 10.1.252.113, 6d21h, Serial0/0
C 10.1.25.0/24 is directly connected, FastEthernet0/0.20
C 10.1.24.0/24 is directly connected, FastEthernet0/0.10
D 10.1.24.0/22 is a summary, 4w6d, Null0
C 10.1.252.112/30 is directly connected, Serial0/0
D 10.1.252.100/30 [90/2181120] via 10.1.252.113, 6d21h, Serial0/0
D 10.1.252.108/30 [90/2690560] via 10.1.252.113, 3d15h, Serial0/0
D 10.1.252.104/30 [90/2690560] via 10.1.252.113, 6d21h, Serial0/0
D 10.1.250.56/29 [90/2181888] via 10.1.252.113, 6d21h, Serial0/0
D 10.1.250.32/29 [90/2184192] via 10.1.252.113, 6d21h, Serial0/0
D 10.1.250.16/29 [90/2184192] via 10.1.252.113, 6d21h, Serial0/0
D 10.1.250.24/29 [90/2181888] via 10.1.252.113, 6d21h, Serial0/0
C 10.1.250.0/24 is directly connected, FastEthernet0/0.30
D 10.1.248.0/24 [90/2181632] via 10.1.252.113, 6d21h, Serial0/0
D*EX 0.0.0.0/0 [170/2181376] via 10.1.252.113, 6d21h, Serial0/0
Remote 3524PWR
interface VLAN30
description Management Interface
ip address 10.1.250.50 255.255.255.252
no ip directed-broadcast
no ip route-cache
ip default-gateway 10.1.250.1
Can anyone see what I'm missing? I'm thinking the problem is probably with my 2620XM.
ThanksIn addition to the issues that Reza identifies I see this issue. You have configured this on the 3750
interface Vlan30
description Management VLAN 30
ip address 10.1.250.1 255.255.255.0
and then on the 3524 you have configured vlan 30 and subnet 10.1.250.0. The use of vlan 30 in two different parts of the network may be a bit confusing but it is not necessarily a problem. But the fact that you have the same subnet in two different parts of the network is a big problem. The 3750 believes that 10.1.250.0 is locally connected and will never go to the 2811 or over the T1 to try to get to that subnet somewhere else.
HTH
Rick
Maybe you are looking for
-
Table controlled partitioning - please share your experiences.
hello , is anyone using table controlled partitioning in the sap on db2 for z/os enviroment? can you please share your [good/bad]experiences on the subject ? is there anything we should all watchout for ? thanks omer brandis visit the sap on db2 for
-
Installed firefox 4 and now mouse wheel doesn't scroll in browser
I upgraded to the Firefox 4 browser, and since then I cannot scroll using the "mouse wheel" on my laptop's touch pad in the browser window. It works fine in other applications. I tried the tips suggested for a similar problem with version 3.etc, etc,
-
2007 imac shuts down intermittently mountain lion
I recently upgraded my mid 2007 from snow leopard to mountain lion and have noticed a few times since then that my mac shuts itself down if I leave it for a spell without using it (with safari pages open). I have it set to use screensaver after 15 m
-
Trouble shoot mac problems on a pc?
I am developing my AIR project on a PC, the project runs as desired on the PC, but is having several problems on the Mac I am testing on. It is becoming extremely painful trying to trouble shoot the problem, I have to change 1 line at a time, then co
-
hey, im doing a school project in iMovie on Jimi Hendrix. so i downloaded a few of his videos, and im going to make something out of it. but when i import it into iMovie, the 600 meg file ends up being 10 gig. it takes about 50 minutes to import, and