Router Config Question

I am a newbie to Cisco. I have a router that pings another at a remote location. We only use pings on this particular router to monitor a link, so when the pings drop we know a link is going down. It used to do a continuous ping of the distant end router, but since restarting and adding a new IOS, the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings? This is a major router and I can't afford to make an config error that would shut the routers down or stop the pings.

Hi,
" the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings?"
Use IP SLA icmp-echo and IP SLA logging traps to alert you when a certain condition is met.
http://www.cisco.com/c/en/us/td/docs/ios/ipsla/command/reference/sla_book/sla_02.html#wp1052104
Regards
Alain

Similar Messages

WRT54G firmware failure leaving no access to router config

I have a WRT54G router. Running Vista SP2 64-bit on a laptop wired to router. When I first tried to upgrade the firmware I was connected wirelessly. (I know, please just think it but don't type it) During the upgrade the internet connection disconnected and the upgrade failed. I am connecting right now wirelessly using someones unsecure network. I attempted to upgrade the firmware to 8.00.7. Since then I am unable to access the router config using IP 192.168.1.1. I have read as many posts as I can handle. I have checked and that is the IP showing in Vista, (Network & Sharing, view status, properties) however I cannot ping that IP. It times out every time. I have done all the resets (10 seconds and up to 1 minute) on the router and power cycle etc. Nothing. I downloaded the firmware utility and I get an error message everytime that it is unable to get responses from the server. I have tried my password, which I think is gone due to all the resets, and am using admin as the password. I have disabled my firewall. I do have Network Magic and when I checked control internet access it says I am able to do so. Is there a way to disable Network Magic? Can that be the issue? When all this started I had my own internet connetion. I'm in the process of moving so I have disconnected my internet service. Since I'm only trying to connect to the router locally, do I really need to have a live internet connection? Please, HELP! I don't want to buy a new router. This one has been very reliable. If I do have to buy something new, can you recommend something just as reliable.
There have been 2 or 3 times where it looked as though I was going to be able to connect to config interface and the firsrt basic screen loads with minimal data and no clickable links to allow me to change screens. The "&" from one of the links that is supposed to appear but does not, is the only thing that appears in that area and if I click it, I either get a error from IE that it cannot connect, or, it takes me to the Ports screen with minimal data and I cannot progress from there. In the top right corner of the screen, it does show the firmware version is 8.00.7. ?????
P.S. Obviously, I'm not very computer savvy so excuse me if I'm missing the obvious.
Message Edited by Steviegt on 09-29-2009 08:38 AM
Message Edited by Steviegt on 09-29-2009 08:43 AM
Windows Vista Home Premium SP2 64-bit
Internet Explorer v8
Office 2007 SP2 Home and Student
Outlook 2007 Standalone
ESET Smart Security
WRT54G v8.00.6
Solved!
Go to Solution.

Its Great that your issue has been resolved now...

A few post config questions on new setup

Hi Group,
Just a few post config questions.
First, how can I confirm my controller is in fact associating properly with an NTP server? On a typically cisco product, I could just do a 'show ntp associations' or a 'show ntp status'. I cannot see a way to confirm this on the gui or command line.
Second, on my guest network with web-auth, if one were to choose to not use https for web-auth and instead use unsecure http, would that be possible and if so where in the gui?
Thanks.

The third field is from a WLC running v7.4 not v7.2. I usually would install a 3rd party certificate, but what eles you can try is issue this command on from the CLI. It had issues working with certain code versions, but you might as well give it a try.
config network web-auth secureweb disable
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Workshop Weblogic config questions

I'm using Oracle Workshop for WebLogic 10.3 and I'm hoping someone can answer some setup/config questions.
When I double click on the server (WebLogic Server v10.3 at localhost) a window opens with various settings that manage how workshop and weblogic work together.
Under "Startup & Deployment" I have the following turned on:
Launch WebLogic server in Eclipse console
Always start WebLogic Server in debug mode
Ignore project compilation errors when publishing (I have this turned on because of errors in a portal project, the errors aren't inmportant, and don't prevent the project form running)
Run stand-alone web module directly from workspace
So, first question, with these settings I was able to quickly switch to debug mode, with out restarting the server, now the server restarts whenever I turn debugging on. What have I done that has stopped this working correctly? How can I get it to start debugging without a full restart?
next question, what happens if I turn on "Start WebLogic Server in Express Mode"? As far as I can tell nothing happens.
Lastly, under "Automatic Publishing" I have it set to "Never publish automatically", if I choose another setting workshop essentially freezes because it's constantly publishing. So whenever I make a change, even in a jsp, I need to remove the project, then re-add it to see my changes in the browser. This is frustrating, not just because it takes 8 or 9 minutes (8 or 9 MINUTES!!!), but because the project doesn't run properly until it is redeployed. You'd think that if it needs to be re-deployed, then none of my changes should matter on the server until it is re-deployed.
So, my question is, Is there any way to get this re-deployment to happen faster?
Thanks for any and all help

Well, in my experience performance is not bad as you experienced. Is it locally connected server or remotely connected server? If it is a remote server, network issue could cause this latency issue.
Is performance better if you run the server without enabling debug mode? If yes, probably you can also review any break points set.
You could also try out the following options
1) Run workshop with -clean option, by opening command prompt and navigating to workshop_home\'workshop.exe -clean'
2) Untick the option 'Launch WebLogic server in Eclipse console' and start server which would enable server to start on command prompt
3) This would enable you to take multiple thread dumps (cutl +Break) on the server console output, while performance is very bad, to see where threads are halt.

Re: PLM4P v6003 Config Question: Any way to configure UGM Notifications?

After reading:
PLM4P v6003 Config Question: Any way to configure UGM Notifications?
This is one of the requirements from me as well. We always wanted to customize emails sent not only for UGM but also for other modules. We wanted to conveysome message to approvers. But it seems this is still not possible. Is this functionality on road-map of AgielP4P product management?

Currently, the subject and body of emails can be customized to an extent, as they are translations that can be overridden. The translations have some placeholder fields that get populated by the system, but you are limited to those placeholder fields. The upcoming release will give you full control of the email body and subject lines, for GSM and SCRM emails, as well as Supplier Rep emails.

Redundant FWSM Config Question

Hello All,
I'm going to be configuring failover with FWSMs for our 6500 at my job and I have a config question. There is one current 6500 chassis with 2 FWSMs installed. They are both online but currently since failover isn't setup, only one FWSM is actually active. My question is since we are using mutiple contexts where do I setup the failover interface, and do I need to configure failover on every single vlan on the FWSM? We have over 10 contexts each with 2-3 interfaces on them, so do I need a failover IP for every vlan that exists on every context? Also, does the failover config get setup on the admin or system context? Any help would be greatly appreciated, and thank you so much in advance!

Hi John.
Failover config goes in the system context. For the data interfaces in each context, you will need a primary and a standby IP i.e. 2 IP's per VLAN. Once failover happens, the secondary FWSM will assume the active role and the secondary FWSM will take over the Primary IP address thus making the failover process transparent to end users.
HTH.
Regards
Zubair

Routing priority question

Hello guys,
I have 2 lines below on my Cisco router, I just wanted to confirmthat i understand it right.
ip route 0.0.0.0/0 10.10.1.5 10
ip route 0.0.0.0/0 10.10.2.5 20
if my traffic hit this router then its outbound next hop would be 10.10.2.5 as that route has higher priority '20'?
Thanks.

Based on the lower AD, the route 10.10.1.5 would be preferred over the other one right?
I'm current using ospf for routing protocol and trying understand how the ospf works. I've looked at the router config last few minutes and realized, we're using ospf and also static route, here is the configure:
interface g0/0
ip address 10.10.1.6 255.255.255.0
interface g0/1
ip address 10.10.2.6 255.255.255.0
router ospf 1
router-id 172.20.1.2
network 10.10.1.0 0.0.0.255 area 0
network 10.10.2.0 0.0.0.255 area 0
network 172.20.1.0 0.0.0.255 area 0
ip route 0.0.0.0/0 10.10.1.5 10
ip route 0.0.0.0/0 10.10.2.5 20
I know you mentioned the AD but why do i need static route 'ip route 0.0.0.0/0 10.10.1.5 10' and 'ip route 0.0.0.0/0 10.10.2.5 20 ' as I already have dynamic route ospf?
Thanks,

Disappearance of IP Routing config on 6509

Our 6509 Switch (Cisco WS-C6504-E) suddenly lost its Routing table & entire Routing configs including all Static & Dynamic route configurations.
We had to turn on ip routing & restore the routing configuration .
Have anyone experienced this & does it could be some kind of caveat with the MSFC or the Layer 3 engine .
Any thoughts are welcome.
No config changes were applied to the switch ; except only a SNMP ip address was allowed .
Thanks
Prabs

Ah, ok, thanks. I guess that was pretty obvious, now that I know the answer.
The "ip routing" command isn't mentioned anywhere in the CLI documentation, but I guess if I'd thought about it a little longer, I may have come to the same conclusion.
Thanks Tom.

SCCM 2012 application portal: config questions

Hi,
We have setup SCCM 2012 application portal correctly and it's working fine.
However some config questions:
-can we change the name of the configuration portal? Now its servername/CMApplicationCatalog ... what's not userfriendly.
We'd like it to be applicationportal.ourcompany.com. Howto achieve that?
-can we customize layout in a supported way (we could change html pages but after an upgrade of SCCM they would/could be erased)?
-how does flexera (adminstudio?) plugs in into this. I've read this entry
http://helpnet.installshield.com/appportal2014/Content/helplibrary/AP_CreatingCatItemSCCM.htm but what's the big picture here? Anybody using this? What are the advantages?
J.
Jan Hoedt

We want to offer software center for overview of mandatory installs, application catalog for optional software.
On our companies portal, we can then set a link which directs to the application portal. User can then install optional software from there.
My current config works http://applicationportal.ourcompany.com/ goes to the sccm-server but not to the url below.
That would be http://applicationportal.ourcompany.com/CMApplicationCatalog/#/SoftwareLibrary/AppListPageView.xaml
how can I make sure the application portal shows up when this link is opened?
It sounds like you want to perform a URL rewrite?
http://www.iis.net/learn/extensions/url-rewrite-module/creating-rewrite-rules-for-the-url-rewrite-module
You should test this to see if it's what you want - I may have misunderstood your question.
Also, I wouldn't host this module on your AppCatalog server, I'd host the rewrite module elsewhere.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Review my first 892 router config

This is the first router config that I have done, and I used CLI to program a Cisco model 892. There are about 10 users behind this router connected to a series SG300 switch. This router will provide DHCP, VLANs, and NAT access to the internet (via cable modem). The lan port is FE0 and the WAN port is FE8 to the internet. There are 4 Cisco WAP321 connected with two SSID's. The guest SSID (internet access only) uses VLAN2 and the normal SSID uses VLAN1.. Please let me know if there are security or efficiency improvements that I can add to this. Thanks!
! Last configuration change at 20:04:03 PST Mon Dec 22 2014
! NVRAM config last updated at 15:10:16 PST Mon Dec 22 2014
! NVRAM config last updated at 15:10:16 PST Mon Dec 22 2014
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname gateway
boot-start-marker
boot config usbflash0:CVO-BOOT.CFG
boot-end-marker
no aaa new-model
clock timezone PST -8 0
ip cef
ip dhcp excluded-address 192.168.10.1 192.168.10.99
ip dhcp excluded-address 192.168.8.1 192.168.8.99
ip dhcp pool data
import all
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 192.168.8.60
domain-name summmitdrive.local
ip dhcp pool guest_wifi
import all
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 64.59.168.13 64.59.168.15
no ip domain lookup
ip domain name summitdrive.local
ip host gateway 192.168.0.1
ip host fs1 192.168.8.60
ip name-server 64.59.168.13
ip name-server 64.59.168.15
no ipv6 cef
multilink bundle-name authenticated
license udi pid CISCO892-K9 sn FCZ1714C2ZD
username sdcadmin privilege 15 secret 4 zsc1w55wVxL1behpFMAW8XrxKcVujVnNHLpMKP.ZgXk
redundancy
ip ssh version 2
interface Loopback0
ip address 192.168.0.1 255.255.255.0
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
interface FastEthernet0
switchport mode trunk
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
no ip address
interface FastEthernet5
no ip address
interface FastEthernet6
no ip address
interface FastEthernet7
no ip address
interface FastEthernet8
ip address 184.71.128.156 255.255.255.252
ip access-group INBOUND_INTERNET in
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
interface GigabitEthernet0
no ip address
shutdown
duplex auto
speed auto
interface Vlan1
description data_vlan
ip address 192.168.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
interface Vlan2
description guest_vlan
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list NAT interface FastEthernet8 overload
ip route 0.0.0.0 0.0.0.0 184.71.128.154
ip access-list extended INBOUND_INTERNET
permit icmp any host 184.71.125.118 echo-reply
permit icmp any host 184.71.125.118 time-exceeded
permit icmp any host 184.71.125.118 unreachable
deny ip any any log
ip access-list extended NAT
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended SSH
permit ip 192.168.8.0 0.0.0.255 any
control-plane
mgcp profile default
line con 0
logging synchronous
line aux 0
line vty 0 4
access-class SSH in
exec-timeout 5 0
login local
transport input ssh
ntp server 1.ca.pool.ntp.org
ntp server 0.ca.pool.ntp.org
end

I've modified inbound_internet:
ip access-list extended INBOUND_INTERNET
permit icmp any host 184.71.125.118 echo-reply
permit icmp any host 184.71.125.118 time-exceeded
permit icmp any host 184.71.125.118 unreachable
permit udp any any eq ntp
permit tcp any any established
deny ip any any log
The idea is to block anything inbound unless it is an already established connection from the inside. Does that make sense?

851 Router Config Issue

Hi all,
Hopefully this will be a nice easy one for you all.
I have recently configured and installed an 851 router successfully :) I now only have one issue, the damn thing switches itself off after a period of inactivity!
If I want to use it again I have to issue a reset command then a boot command.
This takes me to the:
router>
prompt. I then have to issue a copy start run command. And then a no shut on each of my interfaces.
Obviously I would just like the router to stay up and running. But I cant work out how to do it. Im sure that this is just a simple config issue and I would dearly love for you all to solve it!
If any of you know the answer can you please provide clear an accurate commands as I will copy it parrott fashion into the router.
Thank you all in advance.
Stuart

Hello,
as spremkumar already pointed out the config register usually is set to 0x2102. You can reconfigure the register by:
Router#configute terminal
Router(config)#config-register 0x2102
Router(config)#end
Then perform a reload and check whether the config is present after the router finished booting.
Hope this helps! Please rate all posts.
Regards, Martin

Security Wireless 857w router config.

Hi,
I do have adsl & wireless internet connection running properly under my Cisco 857w router.
However, I am trying to configuring with out success the (wap), my wifi internet connection still open for everyone.
I will really appreciate your advices.
Thanks in advance.
Daniel.

Hi Brandon,
Thanks for your response, but unfortunally I could not setup my Wireless Security yet.
With the following config I am unable to connect with my laptop:
Encryption mode: "Cipher TKIP"
Authentication Key Management:
Key Management: "Mandatory" "WPA"
WPA Preshared key: "xxxxxxxxx" "ascii"
I mean, if I want to connect with my laptop via wifi the router encryption modes need to be configure to (none).
Here below I attached my router config, maybe you can see what is wrong on it.
Thanks in advance.
Daniel

SSL VPN Full and Split Tunnel Config Question

I am Beta testing SSLVPN on an IOS router. The question I have is this:
Is it possiable to have slit and full tunnel configs. It seems that once you create your context and default profile that is all you have either split or full. The books say you can use Radius and assign different profiles but, I would like to give the users a choice (like in the VPN3000 .pcf) of either split or full depending on where they are working from.

The below is an example using the ASA - but the principle remains the same:-
http://www.cisco.com/en/US/customer/products/ps6120/products_configuration_example09186a0080975e83.shtml
HTH>

ACE: design/config question: trans.slb + slb + mngt

Hi,
Could this ACE setup/design work?
I want PROXIED sessions (to VIP proxy 10.0.0.10) to be loadbalanced
All other sessions (eg. Some public ip's) will have to transparent loadbalanced to proxy servers. Thus not destinations NAT
ACE is inline between firewalls and proxy servers.
Vip definitions:
class-map match-all P_PXYVIP_VS_LB
2 match virtual-address 10.0.0.10 255.255.255.255 tcp 8080
class-map match-all P_PXYTRANS_VS_LB
2 match virtual-address 0.0.0.0 0.0.0.0 tcp any
Question in this case: would it still be possible to have management sessions towards proxy servers routed by the ACE ? (physical ip addresses of proxy)
Probably the classmap PXYTRANS is catching those sessies also.
Are there other design/config solutions to solve this one?
Thank you!
Wim

Let me repose the question:
How could one still be able to access the realserver IP (which is directly connected
to the ACE) for manangement.
Knowing that there is 1 VIP which (normal) loadbalance to the realservers
and
there is 1 VIP 0.0.0.0 tcp any which is configure to catch all other traffic to be
transparant loadbalanced.
The VIP 0.0.0.0 is always catching the sessions which need only to be routed
to the real servers ip.

Backup router config

Hi everybody!!!
I have a script to backup my ASA configuration. I want to use the same script to backup my routers, but Im looking for special questions, look..
I want to create a user, like "backup" and this user can run the command "more system:running-config"
The idea is the user "backup" log on the router, without enable and run that command above...
That command needs to run automatically, and after, the user needs to log off..
I tried something like parse viewer and autocommand but without success...
If anyone can help me..
Im trying in a Cisco 2801 Router.
Thanks
Diego

Hi all...
Rancid sounds good..
I tried kron now. I could send my config to my tftp server, but when I run sh kron sch I receive this message:
Kron Occurrence Schedule
back-0303log01 inactive, will run again in ERROR - Timer Not Running
Look my conf for kron
kron occurrence back-0303log01 at 14:56 recurring
policy-list back-0303log01
kron policy-list back-0303log01
cli sh running-config | redirect tftp://172.19.4.121/0301router
My clock conf:
clock timezone BR -3
clock summer-time BRV recurring 3 Sun Oct 0:00 3 Sun Feb 0:00
ntp clock-period 17178040
My clock:
15:19:27.036 BRV Tue Dec 11 2012
What is wrong?

Router Config Question

Similar Messages

Maybe you are looking for