Redundancy Configure in WAN connectivity

Hi
I want to configure redundant link (Failover) for my WAN conectivity with two different provider.Can anybody guide me the best method about this configuration ?

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
For selecting a "best method", need more information. However, in general, often dynamic routing is used to deal with loss and restoration of WAN connectivity.

Similar Messages

NEED HELP PLEASE Setting up 2 VLANS and a redundant WAN connection

I have a remote branch office which is actually a huge bar/lounge. The bar wants to enable patrons to access the Internet with their wireless laptops. I want to prevent those patrons from accessing our private network, and also prevent them from traversing our static VPN tunnel back to HQ.
The bar processes all credit cards via the T1 connection, and this has caused us to lose money every time the T1 goes down while we're open, since there is no WAN redundancy right now.
Here is my current hardware configuration:
1) one PIX 501 50-user 3des.
2.) two Dell 3024
3.) one Aironet 1100(g) AP.
Current LAN Network: 10.35.35.0
(internal employees only, static VPN tunneled to remote HQ network)
Current Wireless SSID's:
SSID1=PRIVATESSID
SSID2=PUBLICSSID (not currently in use, waiting to figure this out)
Current WAN: one T1 connection.
WHAT I WOULD LIKE TO DO AND NEED HELP FIGURING OUT:
#1a) I want to create two separate VLAN's that are able to share the WAN connection, but not be able to "see" each other.
#1b) These VLAN's would be mapped to their respective SSID's on the AP (PRIVATESSID>10.35.35.0 and PUBLICSSID>192.168.1.0).
#1c) The 192.168.1.0 network should not be able to traverse the static tunnel between the branch site and HQ.
#2) I would like to install a backup WAN connection such as a modem 56k dial-up to an ISP or a cable modem to an ISP. In case the primary T1 goes down, I would like the router to automatically dial out over the modem conection and route all Internet bound traffic over that backup WAN connection, until the primary comes back online.
Question 1:
I'm assuming I need a router to do the intervlan routing. Could this router also do the on-demand WAN backup dialing to an ISP via analog modem?
What IOS version and flavor (IP base, IP+, etc.) would I need? What is the cheapest router I can do all that with (i.e. 2620/2621/1720/3600 series)? What WIC's or NM's would I need?
Question Two:
I would like to prioritize PRIVATESSID's traffic over PUBLICSSID's traffic, which I know I can do on the access point. Can I do this on the router so that any 10.35.35.0 traffic takes priority over any 192.168.1.0 traffic?
Question Three
If the primary T1 WAN connection goes down, I don't want the router to re-route the 192.168.1.0 traffic over the backup 56k dial-up WAN connection. That traffic can wait until the T1 comes back up.
Any help you can provide would be very much appreciated.

Assuming your access points can place SSID into separate vlans and support 802.1q trunks then I can attempt to answer your questions. There are seperate secuity issues with both SSID for protection and VLANs for seperation but in your case in may be minimal.
q1
Any cisco router that will run 802.1q trunking will work. Since you are looking at older routers you will need IP+ to get it. Even 2610's will support 802.1q on their 10m ethernet at the correct code level but 10m and 802.1q is sorta nonstandard. Since your backup is only 56k you can use the internal modem port as a dial backup. A wic-2a/s will also work if you prefer not to use the modem port. You will need some wic to run your t1 line. If you are planning to leave the t1 on another router it makes the next 2 questions much harder.
q2
This is fairly simple and depends on your ios level. "priority queing" is supported on even the older software. I assume you do not control the far end of the t1 line since it sounds as if this goes to a ISP.
You will need to have them do the QoS since most issues with the internet are inbound and not outbound. You can only control outbound traffic.
q3
If the T1 is on the same router then this is fairly simple. You can just put a floating static default route in that will cause the dialer to come up if the the t1 goes down. There is no easy way to protect against the line being up but no traffic passing. This is also why it would be best to have the t1 on the same router. If its not you will need to get very creative to solve this. You could build a GRE tunnel to a remote location and montior the tunnel or run a routing protcol over the tunnel. In the newest software you could use SAA and policy routing to force the traffic over the dialer but the router must support ios 12.4.
3a. You mentioned a cable modem as a backup. That can be much easier sometimes since it is all routing and no dialer interfaces with nasty modem issues. This does not make the issue of the t1 not on the same router easier.

Can't configure both WAN ports on 1811 with SDM

Hi,
We recently procured an 1811 router to replace a SOHO linksys at a store we service. We needed redundant WAN interfaces to use the DSL as a backup to the main cable connection, and a Linksys RV082, while doing the job when it actually worked, died repeatedly. We decided after looking at the 1811's feature set to just get the Cisco and be done with it and not monkey with SOHO gear anymore.
Where I'm having difficulty is SDM won't let me configure both WAN interfaces from the GUI, it only allows me to configure one. I have it configured, and the router is working nicely in the test lab but I need to get that other interface configured and failover enabled before I can put this thing into production.
What am I doing wrong? Do I need to suck it up and learn IOS?
Thanks,
Todd Phipps
Certco, Inc.

I ended up figuring out the IOS commands to enable one fastethernet port as a primary and the other one as a backup (running both cable and DSL for redundancy; it's a grocery store that runs electronic transactions over IP so 100% availability is a must).
The trouble I was running into in SDM is that while it would allow me to configure one WAN port through the GUI, the config options for the second one were grayed out. Now that both are configured through IOS the edit buttons for both WAN interfaces appear normally in SDM. It's almost as if Cisco didn't want users to be able to configure both interfaces graphically for initial setup.
Now just to test it at the site before the store opens to see if the failover works...
Todd

RV016 with 3 WAN Connections - Windows Messenger Intermittent problems.

I have a RV016 Router with 3 internet DSL conections.
Firmware version : 3.0.0.1-tm (Jun 6 2008 20:17:06)
LAN IP : 192.168.11.254 /24
WAN1 IP : 192.168.1.253 /24
WAN2 IP : 192.168.2.253 /24
WAN3 IP : 192.168.3.253 /24
MODE: Gateway.
Windows Messenger continually connects and disconnects. This behavior is permanent
I only have problems with Messengers (all releases), web page access is correct.
I check bandwith saturation and It's ok, I use less than 50% of each DSL.
I configured the correct size of MTU for each DSL and the problem continues.
Is there any way to set priority to this service?
Is there any way to check if the "load balance mode" affect this kind of connections?
I appreciate any idea.

Changing the DSL connections to bridge mode is part one of the solution. When they weren't in bridge mode, they were also acting as gateways/routers, probably also doing NAT.
Now that they are in bridge mode, the rv016 has control of the connections and the routing. Now that it has control, you can make the appropriate changes.
I ran into a similar issue as yours when I had an rv082 at one of my businesses. I had to access the state's web site to file sales taxes online. But their system detected when my router used a different WAN connection than the one I logged in on, so it would kick me off each time the router used both WAN connections. I could enable only one WAN connection each time I used their system (which would also work in your case with messenger), but that wasn't a real solution.
For you the solution will be a port trigger range. (For me the solution was to bind that destination site to a WAN connection.) Go to Setup-->Forwarding in the rv016 web management. You will see a section for port triggering at the bottom. Here's a link to a site that goes more into detail on the ports that need to have triggers on them:
http://www.electrictoolbox.com/article/networking/open-firewall-msn-icq/
I don't have messenger setup, so I don't know the ports off-hand. This setup should allow any system connected (just as they are now) to properly use messenger.
Let me know if you need any more help.

RV180W loses port forwarding rules when switching WAN connections

We have a backup WAN connection in our office, but we switch this connection manually on our RV180W when the primary goes down. Our normal connection is ADSL with PPPoE, and the backup is Cable with DHCP.
However, we also have some port forwarding rules for our VoIP PBX (UDP port 5060) as well as SSH, and these rules seem to stop working completely when we switch our WAN connection to our cable connection. We can still surf the web from our workstations, but our incoming phone calls and SSH connections all cease to work completely. The problem does not persist after we've switched back to our normal ADSL connection.
This behaviour is completely bizarre and suggests that there's some kind of bug in the Cisco RV180W.

helm,
I'm sorry, I wasn't clear which IP address renewal I am speaking about.
I believe that the problem is caused when the router renews the WHS's local IP address (192.168...). My WAN IP address remains unchanged througout the tests I performed and the problems I experienced.
The very act of changing the local clients' lease time in the router's configuration causes the forwarding to be lost immediately. (I am gusessing that when the lease time is changed, the router immediately renews the lease and begins a new countdown.)
(In fact, I might go as far as to say it is a bug in the firmware, but I haven't done enough testing to nail it down.)

SA 540 drops wan connectivity after some time interval

hello guys,
I have problem. after a certain period of time (ranging from 2 minutes to several hours) the unit keeps dropping the WAN connection, making the unit unaccessible from the WAN side. The strange thing is, that when the connection is dropped, the unit is perfectly accessible from the LAN side, the WAN LED is still on, status info shows the WAN link up, and packet trace shows broadcasted traffic on the WAN interface, so only the directed communication to and from the ISPs gateway (configured to fix IP) seems to be blocked for some reason. When this happens, then plugging the WAN cable to the Optional WAN port enables traffic again, but it is also dropped after some time, and then only power cycling the unit restores WAN connectivity.
please suggest me as soon as possiblethat how to fix this problem?
Awaiting for valuable reply.....

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Ether Channel for WAN connection

We have 2 WAN connection from the ISP 2 links (155M and 300M) . We would like to perform a Etherchannel on this links.
Both the links termination are RJ45 to a Layer 3 switch. Can we configure Ether-Channel ? What is the condition for EtherChannel (eg no signalling from ISP) ?

If you're on an ethernet connection, you should be able to do etherchannel but like what the others have said, you're do not have the same speed for each, load-sharing wouldn't be optimal.
i'd rather do balancing via BGP by choosing what prefix gets advertised to a certain link, so I can at least maximize the two links. I have the same scenario before, I had 1 FastEthernet and 1 STM1 to a service provider, eBGP multihop load-share wouldn't cut it, I have to do manual prefix advertisement.
hope that helps.

Layer 2 WAN Connectivity

Hi all.
This is something new for me and I'd appreciate any help.
We have currently a Layer 2 WAN connection through a 3rd party provider. They use 3400 switches to connect two different sites. One is our DC and the other one is the client. In our DC we have two switches in stack mode 3750Gs. The client has two Dell switches in stack mode as well - Layer 3 switches. We need to configure communications of both sites via the link to perform replication. We do not want VLANs to go through the WAN. What is the best way of configuring our switches? We cannot configure the 3rd party switches.
Thanks for your help.

Hi ,
If you have got VPLS services from your service provider , You can perform replication between two location , without any addition VLAN creation on your switches . (Same VLAN can be spanned between both datacenter) .
http://www.cisco.com/c/en/us/products/ios-nx-os-software/virtual-private-lan-services-vpls/index.html
If it DWDM link , You can ask your service provider to create new VLAN for your replication , same can extended to your both end switches .
https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/fm_3_4_x/dwdm.pdf
HTH
Sandy

Rv042 v4.1.1.01-sp drops wan connection

I recently implemented the rv042 as a replacement for a wrt54gs running DD-WRT. I upgraded to the latest release (v4.1.1.01sp) to solve 6to4 and SIP problems. These problems were indeed solved. However after some minutes the WAN1 connection gets somehow disconnected from the ADSL modem.
It does show the public ip address, but I cannot ping the ptp router anymore. I also cannot renew the lease. Rebooting the rv042 does not help. When rebooting the modem it briefly works again, but then loses the connection again and it never comes back.
Currently I returned to the old wrt54gs as a workaround. Because I am planning on an extra WAN connection (via cable), which is the main reason why I bought the rv042, I am eager to get this problem solved quickly. Since the ADSL modem is pretty old, I ordered a more current one that also supports IPv6, so I do not have to use a 6to4 tunnel. I will test again with this new modem, but I doubt that it will solve my problem since I do not have any problems with the old router.
Has anyone seen this type of problem, and can I do something in the configuration to solve this? Or is it just a bug?
Thx,
Hans Feringa
I replaced the ADSL modem. That fixed the problem.

I recently implemented the rv042 as a replacement for a wrt54gs running DD-WRT. I upgraded to the latest release (v4.1.1.01sp) to solve 6to4 and SIP problems. These problems were indeed solved. However after some minutes the WAN1 connection gets somehow disconnected from the ADSL modem.
It does show the public ip address, but I cannot ping the ptp router anymore. I also cannot renew the lease. Rebooting the rv042 does not help. When rebooting the modem it briefly works again, but then loses the connection again and it never comes back.
Currently I returned to the old wrt54gs as a workaround. Because I am planning on an extra WAN connection (via cable), which is the main reason why I bought the rv042, I am eager to get this problem solved quickly. Since the ADSL modem is pretty old, I ordered a more current one that also supports IPv6, so I do not have to use a 6to4 tunnel. I will test again with this new modem, but I doubt that it will solve my problem since I do not have any problems with the old router.
Has anyone seen this type of problem, and can I do something in the configuration to solve this? Or is it just a bug?
Thx,
Hans Feringa
I replaced the ADSL modem. That fixed the problem.

Srp521w voip ports with no wan connected

Hello.
I need some help. I am trying to connect my voice ports to my SIP server but is not working.
I have a lot of this same srp521 working all arround perfectly, except that they are connected to mpls via Wan.
In this new workaround, i want the router to act as a AP and to have those 2 voip ports working with the router connected just to the lan of my network, no wan connection, but it seems to be a problem on this that.
Is it possible to have the voip ports working on just with a lan connection?
Thanks, best regards.

Hi EveryoneI
created an etherchannel on two ports (2960 switch) and placed them into
an etherchannel. Did the same on the other switch Cisco 3020 blade
chassis switch. Without connecting any cables the 2960 had done an
up/down sequence as though a cable had been connected and yet this had
not been done. Can someone try and help with what could be the
technical explanation of this interesting phenomena. the etherchannel
was a trunk and the ports were sitting in vlan 200 and this vlan was
also configured as the native vlan for the trunk.Please, please help - any comment is appreciated.Sydney
Hi Sydney,
It can be possible that speed and duplex setting between the switches are not in sync. Configure all interfaces in an EtherChannel to operate at the same speeds and duplex modes.Enable all interfaces in an EtherChannel. If you shut down an interface in an EtherChannel, it is treated as a link failure, and its traffic is transferred to one of the remaining interfaces in the EtherChannel.
For EtherChannels:
–Assign all interfaces in the EtherChannel to the same VLAN, or configure them as trunks.
–If you configure an EtherChannel from trunk interfaces, verify that the trunking mode (802.1Q) is the same on all the trunks. Inconsistent trunk modes on EtherChannel interfaces can have unexpected results.
–An EtherChannel supports the same allowed range of VLANs on all the interfaces in a trunking Layer 2
Hope to help
If helpful do rate the post
Ganesh.H

WAN connection to 1 specific LAN RV320

Hi,
I have one cisco RV320, I use 2 wan connections with different isp.
It is possible to go out just with one ISP to one of the 4 LAN ports ?
I need one specific LAN port to have internet connection just from a specific wan1 or wan 2, and the other lan ports to use load balancing feature.
It is possible?
Thanks

Hello,
The RV320 has a feature called Protocol Binding that will allow you to link a single or a range of IP addresses on the LAN to use a specific WAN connection for an specific protocol.
Here is a document on how to configure such feature:
http://sbkb.cisco.com/CiscoSB/ukp.aspx?vw=1&docid=d6c17b6ee53141f59ae03c6defeb20cb_Dual_WAN_Configuration_on_RV320_Router.xml&pid=2&respid=0&snid=4&dispid=0&cpage=search
If what you are intending to do is to force, lets say a range of IP addresses on the LAN to only use WAN 1 as the outbound connection for all the traffic, then you want to configure the protocol binding as follows:
Service = Any
Source IP: Beginning of the range or single address
to: End of range or singe address
Destination IP: 0.0.0.0 (Anywhere on the internet)
to: 0.0.0.0 (Anywhere on the internet)
Interface: WAN 1
Status: Mark the checkmark to enable it.
Please remember that you can Bind the protocols via IP addresses and no specific LAN ports.
I hope this helps
Please don't forget to mark the answer as correct or grade it if it was helpful to you so that other members can benefit from it.

Reports fail when running across a WAN connection

We have a remote site in Detroit that has excutables installed on local file server but connects to a database here in Memphis. Since doing this, we are having issues running some reports from Detroit. When we attempt to run the reports, we get an error "Failed to retrieve data from the database. Detail: [Database Vendor Code:11]". The database is SQL 2005. The following facts are true:
1. Certain reports will not run from production PCs in Detroit; these PC just have a Crytal 11.5 runtime installed.
2. We can run the exact same report (same .rpt file) from production PCs in Memphis using the same paramters and it runs fine. The PCs are configure the same as the ones in Detroit.
3. We can run the exact same report from a development PC in Detroit (has Crystal 11.5 installed) and it runs fine.
Since some reports do run, it seems that the workstation is configured properly, and since the reports do run with no errors from PCs in Memphis, it seems that there is nothing wrong with the .rpt files, the data, or the database. So, it seems to boil down to something with the WAN connection possibly. I'm out of ideas at this point. This issue really seems to make no sense, and any help would be appreciated.

Hi Clint,
You should have a link to log a Message in Service Market Place ( SMP ). From there once the case is enter an Engineer will pick it up and give you a call to discuss.
313 is the original release and you should upgrade to at least SP4.
What you should do is install the SP4 update to your test machine first and then download and deploy the runtime using the same version of merge modules or MSI. Updating runtime without re-building your app is likely going cause issues. You should also test all this on a test machine first for the obvious reasons.
SP4 Merge modules are available, not available for SP 5 yet, they are working on getting them posted for download.
You did not say what technology ( report engine ) you are using, RDC or CR .NET assemblies?
It may also be due to different MDAC or MS SQL Server client installed. 2005 has a separate Client install now, previously MDAC was used to install the client, depends on which connection type you are using.
It may also be a table or database permission issue. MS SQL Server enhanced their security and fully support DB security. Try a different user to see if that works.
Also to clarify, a UDL file does NOT use ODBC unless you select Microsofts OLE DB for ODBC. Create a txt file and then rename the extension to udl. Double click the file and the OLE DB UI should pop up, then select MS SQL Server OLE DB Provider. Fill in the connection info and test it. This may explain why it's failing also.
Thank you
Don
Edited by: Don Williams on Apr 1, 2009 10:30 AM

Extending a wifi network, two WAN Connections

I'm in an apartment that has WAN connections dotted all over it (every room has at least one hard wired WAN access point - no configuration required to access the internet, all you have to do is plug in a router). I have an airport extreme (time capsule actually) set up in a room that is relatively central to the apartment. However between all of the rooms the walls are quite significant to the point that while I've used Airport Expresses to extend the network reasonably effectively for browsing (all rooms are covered), in any room that doesn't have the Airport Extreme in it, streaming content to an Apple TV results in unnaceptable quality. Move the Extreme into that room (WAN ports in every room), it's fine.
So what I'd like to do is either configure the expresses to plug into the WAN ports in each room but still all be on one wifi network, but instead of having to reach through two/three heavy walls to get back to the Extreme, then reach all the way back and transmit to the Apple TV, I could have the airport in the room just go to the internet straight through the wall connection that in most cases sits right next to it.
If expresses can't do this I am willing to invest in a new Extreme as well if that would help.
In short I want multiple airports, all on the same WiFi network but accessing the internet from whichever airport has the strongest signal. Also if I'm in a room a long way from the primary Extreme and I want to stream to the Apple TV from a laptop, I want it to bounce just through the Airport in that room, not have to go all the way back to the primary Airport.
The layout of the apartment doesn't really give me much scope for doing anything with connecting by ethernet cables unfortunately.

DGBaas wrote:
I'm in an apartment that has WAN connections dotted all over it (every room has at least one hard wired WAN access point - no configuration required to access the internet, all you have to do is plug in a router).
All those WAN ports run back to a main switch somewhere in the building.. and that connects to a router that gives you internet access..
I have never heard of a place that gives you WAN outlets in every room.. how many can you use at once??
Talk to the building services IT admin as they might be happy to help you out.. the multiple units can only connect back to the main switch.. the danger here is so does everyone elses network.. if you take away the router you lose the protection.. if you have the router in place .. you cannot use the WAN ports as LAN. Each router protects the local LAN network from access by Joe Blow down the hall.
But if the system is complex enough you can be assigned a block of IP addresses on a vlan.. and use the building infrastructure as your own personal LAN.. with good security..
Only the buildings admin can do that for you.. otherwise don't even think about it.. you will expose your network to outsiders.. or you will need extremely complicated vpn which means replacing all your apple routers anyway.

How many WAN connections (Rj45) supported on ISR G2 router

Hi
How many WAN connections (Rj45) supported on ISR G2 router ?
If my router have the data license can I do load balancing between 3 or more WAN connection ?
Thanks & Regards
Lakshman Kumar S

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
As Rick and Reza have both noted, number of routable Ethernet ports varies per ISR G2 model. Ethernet switch options would allow the most Ethernet ports, but you need to route through them using SVIs.
However, most ISR G2s often do not have the performance capacity to run their built-in Ethernet ports at full capacity. Often the add-in Ethernet ports have bandwidth restrictions to/from the port.
Basically, ISR G2 routers were designed to have a LAN Ethernet connection and some WAN, non-Ethernet connection, of much less bandwidth.
ISR G2 router performance is also very much impacted by device configuration.

ASA 5505 configured for WebVPN connecting to Citrix Web Interface

ASA 5505 configured for WebVPN connecting to Citrix Web Interface.
i have a ASA 5505 that I am attempting to configure for WebVPN with passthrough into Web Interface . The user authenticates into WebVPN OK and gets the option to click on the Citrix Link (which is i add bookmark citrix server http:// 172.30.40.5.) i enter the citrix and then for example i want to open to outlook it can not open. (when i want to open some application no application is open)).there is no alarm at asa. how i solve this issue?
thanks.

Teymur,
Can you confim that after disabling the ssl/tls on the Citrix server (secure connectivity) that you are getting exactly the same error. It is possible that it is generating a different error.
The bug where we have see the existing error was CSCtf06303 but that has been fixed in 8.4.1. Can you confirm the exact version of code you are running on the ASA.
If you have confirmed the above two notes it may be adventageous to open a TAC case as we may need to do some live additional troubleshooting.
Thanks
-Jay

Redundancy Configure in WAN connectivity

Similar Messages

Maybe you are looking for