RV042G port/bandwidth configuration

Hi,
I'm in the process of setting up my new router to help me managing internet connections for various devices, but I'm not sure I fully understand what to configure where.
What I want is essentially this: all machines in the household (>10) should use WAN1 for any internet activity, except for 2 machines that always use WAN2 (these are my work machines that need special priority as I often have large down/uploads with them). But there are exceptions: big downloads should go via WAN2 (the satellite connection) if WAN1 is saturated to a specific percentage and interactive services (RDP, SSH, Telnet etc.) as well as DNS should always go via WAN1. This way my work machines can take advantage for things that need low network latency and the other machines for things that need high bandwidth on demand.
I see a special problem with HTTP because for quick browsing you'd need low latency (hence use the DSL line) but for big downloads via HTTP you'd need the other line. I have no idea how to define a rule for this special scenario.
Another question is: can I use Mac addresses instead of IP addresses? Would help to avoid having to set fixed IP addresses (especially for a mixed IPv4/IPv6 setup)?
Thank you,
Mike

I don't know anything about iptables. How hard is it to log traffic for a single port and be able to view the histiry in an easy to read way? Any tutorials you could point me to that would be useful to me for iptables?
Nmap needs snmp which my router doesn't support. Could I install snmp on my linux box and use nmap that way?
Iptraf doesn't log. I need logging.

Similar Messages

6248 connected to 3750 yet ports not configured as trunkport

I've setup a 2 5108's with 6248 Fabrics and my ethernet uplinks are going to a 3750x. I'm not proficient with all that comes with switching but I manage to get my systems up and running effectively. After installing my esxi's on the systems I noticed that all of them were getting DHCP addressed from my network yet although I enabled my uplinks and configured them as 1gb I hadn't move the patch cables to the uplink ports on the 3750 configured as Trunk ports. Now in the past this was a show stopper. Am I missing something here. And lastly, I intend to aggregate some links with Port Channeling which is easy enough on the UCS but a note states the upstream switch needs to be configured as LACP.
In short:
1.) Do i need to configure my ports on the 3750 as Trunk dot1q or has something changed and it's auto-sensing
2.) To do the Port Channel does it require Trunk or Switch and is it absolute that I configure LACP on the upstream 3750.
Thanks

I understand Trunking, a little however, when it comes to the UCS fabrics I have never been able to configure the upstream switch with anything other than Trunk Mode where I connect my ethenet uplink ports. Yet using a newer 3750x it is running without trunkports where my uplinks are connected. This is not normal. My test....I moved the patch cables to the configured Trunk Ports on the upstream 3750 and it stopped working, moved them back to the switchports and it started working. Next to this system is another with an earlier model 3750, (sorry I'm missing the specifics) and this will not work with the switctport mode, yet when plugged into the trunk ports of the upstream 3750 it works fine. As for Vlan's I have one other than Vlan 1 which is always the way I've configured these. I've configured about 15 sets of fabrics and only this one is acting this way.
As for the Port Channel configuration thanks. I'm assuming that even in trunk mode I can set LACP.

WAAS Port Channel Configuration

In the recent weeks we got some reports that CIFS writing performance to NETAPP OnTap 7.3 filer was degraded for WAAS accelerated connections. NETAPP OnTAP 7.2 and native Microsoft filers were running fine. In our Testlab we could correlate this issue with the port channel setup on our WAAS devices. With round robin (standard setting) the CIFS writing perforamce was poor. By switching the port channel loadbalancing to src-dst-ip-port the performance was excellent.
Is there any known best practices recommendation for port channel configuration on WAAS devices?
Many thanks in advance, Peter.

The best practice depends on your network. Most deployments are fine with the default round robin configuration for port channel on the WAE. But I have encountered some installations where the configuration had to be changed in order to avoid out of order packets causing slow performance (like, if there is a firewall between the WAE and the server).
Sent from Cisco Technical Support iPhone App

HT4262 WI-Fi not working says air port not configured

Wi-fi not working says air port not configured, help]

Life is getting more complicated to do support..
You need to tell us what version airport.. extreme or express and the model number. A1xxx from the label.
You need to tell us OS.. if the profile which says 10.6.8 is wrong.. as that is confusing.
The new AC version Extreme needs 6.3 version airport utility which is only available for Lion or mountain Lion.
You might also need to turn on ipv6 local-link to get it to show in the utility.

Port 0 configuration error number 37

Hello,
I'm running a Labview routine which talks to two instruments, one via serial RS232 and the other through
GPIB. It logs back values from these instruments about once a minute over several days.
The routine uses frames to sequentially address these instruments and read back values to graph and file. It was written with standard Serial and GPIB write and read modules (in each frame), basically sending the appropriate instrument command.
The problem I have is that it can work flawlessly for days logging data and then it will throw up an error (Port 0 configuration error number 37). If the prompt box (asking whether to continue), comes up when there is noone there, the routine will hang (and data lost).
Does anyone know
why this might be happening (doesn't always happen) and any work round? Is there a way of stopping promt boxes from appearing and just re-trying the connection again if it occurs?
A similar problem of occasional GPIB read error (EABO 6) was cured by increasing the timeout settings slightly. This may not be relevant.
PC running Labview 5.1 and OS =Win95
Standard GPIB write and Read vi,s,
Standard Serial write and read vi,s
Any help gratefully received.
GP

Hello,
Thank you for both your replies.
Yes, the serial ports are working OK and you're right its just that the problem occurs occasionally. I might run the routine over a weekend (say ~3 days) and it will work fine, no errors and all data safely to file. I'll run it again another time and find I got an error (usually in the middle of the night!).
The slowing down question is interesting. Sometimes I do think the computer is slower after running the application e.g. loading data in to Excel etc. takes ages. A restart usually sorts this out. There was a strange problem running Labview routines on another platform (HP Brio, Win 98), which resulted in a time lag (the computer clock slowed down). This appeared to be a hardware thing though (tried different operating systems) as it doesn't do it on the Win 95 Dell machine (current platform).
No, the routine appears to work OK on the Dell except for this error.
The routine was one of the first I wrote so it is quite intuitive in structure. Frame cell to write to instruments followed by frame cell to read back etc. There are frames for each instrument. The frame sequences run in a loop which executes after every minute. Logging is to file and screen chart with elapsed time and instrument values.
I'm interested in the closing and reopening of the serial port if this happens. How would you implement this simply in Labview? Would you need some sort of conditional linked to the error codes of the serial module? Is there a good text on this. I must admit I haven't delved too deeply into the detail of managing errors properly in Labview.
The serial instrument in this set up is an environmental chamber. So its reading back values from I think a Eurotherm module. I don't know whether there could be an error with this?
Its a bit of a problem to test a solution to this as it takes several days to run it and I guess we'd just need to keep repeating it and just see if the problem no longer occurs.
Let me know your thoughts. I appreciate all your replies.
Best Wishes
Geoff (GP)

Port channel configuration with VMware

Hi everyone, I have dual 6120 interconnects, each of which have two uplink ports. I also have two Catalyst 4900M switches to uplink to. So I plan to configure both 802.1q and 802.3ad on each of the 6120 uplink pairs. My question relates to the physical cabling, bearing in mind ESX will be running on the blades.
Would you cable both the uplink ports on interconnect 1 to switch 1? Or would you cross-connect them to both switch 1 and switch 2?
As per this article I see ESX does not support splitting a port channel across two switches, but I am unsure how the presence of the 6120s affects this. Can anyone suggest the best way of doing the cabling based on the kit I have? Thanks.
http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1001938&sliceId=1&docTypeID=DT_KB_1_1&dialogID=14912551&stateId=1%200%2014916516

Hey Simon, let's address this is two parts because there are two layers: server-bound (ESX-6120) and north-bound (6120-Cat4900).
At the ESX end, use the default srcPort in the vSwitch / port group with both 10GbE uplink ports (vmnic0 and vmnic1) set to active (not active/passive). There are no loops in this configuration. On the VNIC (in UCSM) you select trunk port and allow all the VLANs that your vSwitch port groups needs. If you don't use a VLAN for the Service Console/ESXi Management, then make sure you set Native to the correct VLAN in the VNIC to allow untagged traffic down the right path.
At the 6120 you can't explicitly configure a trunk for border ports, they are already set so and when you add VLANs they are added to every border port trunk configuration. You, of course, need to make sure the Cat4900 ports at the other end of the cable have the same trunkport VLAN configuration.
So in summary - set VLANs in vSwitch port groups, VNIC in UCSM and northbound switch.
Now when it comes to port channels, you can only configure two or more border ports as a port channel if they are cabled to the same Cat4900. If you had Nexus 5k/7k northbound then you could use vPC on them to allow "mesh" cabling (ie. one 6120 connects to both Nexus switches). But as you aren't using Nexus you will end up with a configuration as Jeremy explained:
ESX --> vSwitch0 --> srcPort load balancing --> 2 active uplinks --> many port groups
6120-a --> Cat4900-a
6120-b --> Cat4900-b
However, I would still recommend using a couple of border ports in a port channel on each fabric to each Cat4900 because, if you pull out a cable/lose a port, then when that port is re-enabled the existing live traffic is redistributed whereas without the port channel only new traffic will be spread across both links.
Cheers
Steve
Cisco UCS Team

Measurement Computing USB-SSR24 error 42 Digital Port not configured correctly for requested operation

Using LV 2012 and ULx 2.02 LV driver:
LV is throwing an error 42 (Digital Port not configured correctly for requested operation) from the ULx write VI but only on PortCH. All my configurations are correct on the hardware and Instacal tests the ports OK. I've reinstalled everything and still see the same issue.
Since PortA is configured identical to PortCH, and PortA is functioning fine, I'm stumped. This is occuring on two different SSR24 DAQs so I don't think it's the hardware, plus I've already mentioned that the Instacal isn't having a problem with it.
I've attached my VI I'm using for debug.
Jeff
Attachments:
test of Wilmington.vi ‏19 KB

I worked with Measurement Computing and they agreed that there is a bug with certain DI/DO configurations. There are a possible 16 different DI/DO configurations with the hardware and apparently mine (PortA - DO, PortB- DI, PortCL-DI, and PortCH-DO will throw this error for PortCH. I'm currently using .net calls to work around the issue until the ULx driver is updated. I'll post that when I see it. Attached are the .net VI's that I'm using for simple static IO.
Attachments:
USB SSR DOT NET Write Bit.vi ‏20 KB
USB SSR DOT NET Read Bit.vi ‏21 KB

What is the recommenden access port QoS configuration for 8900/9900 video enabled phones

Hi all,
we are currently starting to roll out some video enabled 9900 and 8900 phones in our network. In the past we did not use video and configured the access ports on our Catalyst 2960 switches with "auto qos voip ciscp-phone". This however creates a policy which does not include a class-map to correctly handle the AF41 video traffic coming from those phones. I have thougth about extending the autoqos policy with a AF41 class-map but am not sure if this is the right way to do it.
That's what I have in mind:
class-map match-all AUTOQOS_VIDEO_DATA_CLASS
match ip dscp af41
class-map match-all AUTOQOS_VOIP_DATA_CLASS
match ip dscp ef
class-map match-all AUTOQOS_DEFAULT_CLASS
match access-group name AUTOQOS-ACL-DEFAULT
class-map match-all AUTOQOS_VOIP_SIGNAL_CLASS
match ip dscp cs3
policy-map AUTOQOS-SRND4-CISCOPHONE-POLICY
class AUTOQOS_VOIP_DATA_CLASS
   set dscp ef
police 128000 8000 exceed-action policed-dscp-transmit
class AUTOQOS_VIDEO_DATA_CLASS
   set dscp af41
police 1500000 8000 exceed-action policed-dscp-transmit
class AUTOQOS_VOIP_SIGNAL_CLASS
   set dscp cs3
police 32000 8000 exceed-action policed-dscp-transmit
class AUTOQOS_DEFAULT_CLASS
   set dscp default
police 10000000 8000 exceed-action policed-dscp-transmit
How do you guys do it ? Is there some documentation for this ?
Thank you for your kind help
best regards
Andreas

Hi
You have to keep this table on your mind. Your configuration is fine if your configuration for SD video , but if for HD video , it is not ok you have to change video bandwidth at least 5M.
Traffic Type
Layer 2 CoS
Layer 3 IP Precedence
Layer 3 DSCP
Voice RTP1
5
5
EF
Voice control
3
3
AF31
Video conference
4
4
AF41
Streaming video (IP/TV)
1
1
AF13
Data
0-2
0-2
0-AF23
*Interactive Video "AF41"- Sensitive but can tolerate packet loss of about 1% and latency almost same as voice.
*Streaming Video "AF13" - Less sensitive - can tolerate about 4-5% packet loss and latency of about 4-5 seconds.
*HD video conference will require between 5M to 16M , but SD video conference will use 384K to 1 M
Note:-Video QOS , if you will assume that your video conference will use around 384K , you have to add 20% because video conference include voice so the total bandwidth 460K.
Kindly check the below link
http://www.sdcug.com/wp-content/uploads/2011/04/Campus-QoS-for-Voice-and-Video.pdf
Thanks
please rate all useful information

ASA 5512-X - vlan bandwidth configuration advice.

I have an ASA5512-X and need configuration advice.
I have a WAN connection coming in with 50mb of bandwidth and need to throttle the bandwidth usage for each vlan.
VLAN1 allocated 192,168.1.x restricted to 25mb of bandwidth
VLAN2 allocated 192.168.2.x restricted to 15mb of bandwidth
VLAN3 allocated 192.168.3.x restricted to 7mb of bandwidth
VLAN4 allocated 192.168.4.x restricted to 3mb of bandwidth
Can someone advise of the commands?

Any thoughts?

Dot1x port authentication configuration

Hello Friends,
I am working on dot1x configuration deployment project and wanted to clear one confusion, I am having simple setup in which after authentication, workstation should go to vlan decided by ACS and after failed authenticatio, workstation should go to Guest or auth-fail any one is fine since I will keep both same.
So I can understand that basic config should be as follows considering old IOS.
int fas0/1
dot1x port-control auto
switchport mode access
switchport guest-vlan 10
switchport auth-fail valn 10
Now I had see many configuration examples and found that many have defined vlan's in switchport mode access [5]
Why is this command needed since vlan will be assigned from ACS, Could somone tell me why few configuration have defind ports in some vlans already ?
Also what can be best practice in case ACS server goes down, since in that scenario all workstation will fail into auth-fail or Guest vlan's.
Is there any Best practices for such scenario's ?????
Thanks
Ajay

i found the answer this morning :
"IEEE 802.1X Authentication with Wake on LAN
The IEEE 802.1X authentication with wake on LAN (WoL) feature allows dormant PCs to be powered when the switch receives a specific Ethernet frame, known as the “magic packet.” You can use this feature in environments where administrators need to connect to systems that have been powered off.
When a host that uses WoL is attached through an 802.1X port and the host powers off, the 802.1X port becomes unauthorized. The port can only receive and send EAPOL packets, and WoL magic packets cannot reach the host. When the PC is powered off, it is not authorized, and the switch port is not opened.
When the switch uses 802.1X authentication with WoL, the switch forwards traffic to unauthorized 802.1x ports, including magic packets. While the port is unauthorized, the switch continues to block ingress traffic other than EAPOL packets. The host can receive packets but cannot send packets to other devices in the network."
describes exactly the problem i have, and i cant fix it because if i remove the "authentication port-control auto" the computer does not authenticate anymore :/

What is the local port when configuring IPASCII?

We are trying to configure the IPASCII object and one of the things
that it asks for is the "local port".
Attachments:
IPASCII.doc ‏29 KB

Whit,
The "local port" parameter of the IPASCII object is an optional
parameter and does not need to be configured for the IPASCII object to
work correctly. As the definition from the Lookout Helps, the IPASCII
object is the "Local Ethernet I/O port the object uses for
communicating to the external device".
The Port paramerter under the "Ethernet Settings" section may be more
important, assuming that your remote device has been configured to
communicate on a specific ethernet port. If your device has stated a
port, enter it into this location.
I hope that this helps,
Patrick R.

Clearing port channel configurations

In one of my 6509s I've got a lot of old port channel configs listed that I can't remove. How do I remove them short of clearing the config entirely?
Here's an example...
set port channel 3/41-42 64
set port channel 3/43-44 65
set port channel 6/47-48 67
set port channel 3/13-14 68
set port channel 9/5-6 86
set port channel 9/9-11 87
set port channel 2/2 93
set port channel 7/1-4 100
set port channel 7/25-28 106
set port channel 7/37-40 109
set port channel 7/41-44 110
set port channel 7/45-48 111
set port channel 4/5-8 112
set port lacp-channel 5/22,5/45 126
set port channel 6/29-30 127
set port channel 9/13-14 128
set port channel 9/12 129
set port channel 9/15-16 161
set port channel 4/41 537
set port channel 6/31-32 538
set port channel 8/1-4 661
set port channel 9/1-4 665
set port channel 1/1,2/1 719
set port channel 8/11-12 720
set port channel 8/13-16 721
set port channel 8/9-10 722
set port channel 8/7-8 723
set port channel 8/5-6 725
set port channel 4/9-12 726
set port channel 3/5-8 731
set port channel 3/1-4 732
set port channel 4/1-4 733
set port channel 9/7-8 734
set port channel 3/15-16 828
I can't do a "clear port channel" or anything like that.

Hi Friend,
I don't think you can remove this commands from configuration till the time you reuse this ports with etherchannel configuration.
The best idea will be copy the configuration from switch and paste it on a notepad and delete these lines and copy from notepad again and paste it on switch and I think this will take care of your issue.
HTH, if yes please rate the post.
Ankur

Air Port Express Configuration

Hi I am sure that this is a dumb question but hopefully someone will be able to assist me.
At my home I have three Air Port Express adaptors - one as a base station, the others as repeaters to extend the range of the signal. These have been configured to use the IP range 10.0.0.x and have been working OK. The base station adaptor is both connected via a ethernet cable to my ADSL router, and is set to manage DHCP.
Over the weekend I have occasion to look at the settings for my ADSL router, I am about to repace it and wanted to get all the settings for the new router.
I noticed that I have, as expected a dedicated IP address from my ISP, but that the internal IP range of the ADSL router was set to 192.168.0.x range.
Surely this is wrong, and it should be set to the same range as my Air Port Express units shouldn't it, and if so I am not quite sure how the network has worked all this time.
Many thanks for any assistance
A

I noticed that I have, as expected a dedicated IP address from my ISP, but that the internal IP range of the ADSL router was set to 192.168.0.x range.
Surely this is wrong, and it should be set to the same range as my Air Port Express units shouldn't it, and if so I am not quite sure how the network has worked all this time.
In your current network configuration, you have two routers in series, each with their DHCP server service enabled. Most non-Apple routers typically provide DHCP clients with IP addresses in the 192.168.n.n range and is exactly what your current ADSL router is doing.
Since you have the first AirPort Express Base Station (AX) directly connected to this ADSL router, it will receive an IP address on its WAN port in this 192.1689.n.n range, but since it too has DHCP server service active, any wireless clients connected to it would receive IP address in the 10.0.n.n range.
You would also have a "double NAT" condition. In itself this is not necessarily a bad thing, but does tend to introduce other issues, especially if you wish to share resources between clients connected to either router. In most cases, where you have routers in series, you would want to reconfigure the downstream router as a bridge.

ASA5550 port channel configuration ERROR: nameif not allowed on empty etherchannel interface

Hi All,
I am having problem when configure port channel on asa5550
IOS ver asa914-k8.bin also in ver 9.02   and 8.47.
Please let me know how can I solve this problem.
UK-LON-FW(config)# int port-channel 3
UK-LON-FW(config-if)# vlan 245
                       ^
ERROR: % Invalid input detected at '^' marker.
UK-LON-FW(config-if)# nameif secure
ERROR: nameif not allowed on empty etherchannel interface.
UK-LON-FW(config-if)#
here is my interfaces configuration:
interface GigabitEthernet0/0
description fw1:G0/0 to uk-lon-gw1:e1/8 fw2:G0/0 to uk-lon-gw2:e1/9 outside zone
channel-group 1 mode on
no nameif
no security-level
no ip address
interface GigabitEthernet0/1
description fw1:G0/1 to uk-lon-gw2:e1/8 fw2:G0/1 to uk-lon-gw1:e1/9 outside zone
channel-group 1 mode on
no nameif
no security-level
no ip address
interface GigabitEthernet0/2
description fw1:G0/2 to uk-lon-sw1a:1 fw2:G0/2 to uk-lon-sw1a:2 dmz
channel-group 2 mode on
no nameif
no security-level
no ip address
interface GigabitEthernet0/3
description fw1:G0/3 to uk-lon-sw1b: fw2:G0/3 to uk-lon-sw1b:2 dmz
channel-group 2 mode on
no nameif
no security-level
no ip address
interface Management0/0
management-only
nameif management
security-level 0
ip address 10.10.51.18 255.255.254.0
interface GigabitEthernet1/0
description fw1:G1/0 to uk-lon-sw1a:3 fw2:G1/0 to uk-lon-sw1a:4 secure zone
no nameif
no security-level
no ip address
interface GigabitEthernet1/1
description fw1:G1/1 to uk-lon-sw1b:3 fw2:G1/1 to uk-lon-sw1b:4 secure zone
no nameif
no security-level
no ip address
interface GigabitEthernet1/2
description LAN Failover Interface
no nameif
no security-level
no ip address
interface GigabitEthernet1/3
description STATE Failover Interface
no nameif
no security-level
no ip address
interface Port-channel1
description outside zone
no nameif
no security-level
no ip address
interface Port-channel1.5
description outside zone Bundle FW:G0/0-G0/1 connect to GW1:e1/8-GW2:e1/8
vlan 5
nameif outside
security-level 0
ip address 216.239.105.5 255.255.255.128 standby 216.239.105.6
interface Port-channel2
description dmz Bunlde uk-lon-fw:G0/2-3 to sw1a:1-2 sw1b:1-2
no nameif
no security-level
no ip address
interface Port-channel2.105
description dmz
vlan 105
nameif dmz
security-level 50
ip address 216.239.105.193 255.255.255.192 standby 216.239.105.194
interface Port-channel3
description secure zone Bunlde uk-lon-fw:G1/0-1 to sw1a:3-3 sw1b:3-4
no nameif
security-level 100
ip address 10.254.105.1 255.255.255.0 standby 10.254.105.2
UK-LON-FW(config-if)#

Hi Marvin,
Thank you for your answer. I did everything but it did not work. Turn out it is a bug ver 8.45 will let you created the sub logical interface but actually it did not work right. Verson 9.x doesn't let you create more than 2 port channel (limitation of ASA5550 hardware).
https://tools.cisco.com/bugsearch/bug/CSCtq62715/?reffering_site=dumpcr
Also, you can see the 8.4 release notes were you can see that it is not supported:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/release/notes/asarn84.html#pgfId-522232
Interface Features
EtherChannel support (ASA 5510 and higher)
You can configure up to 48 802.3ad EtherChannels of eight active interfaces each.
Note You cannot use interfaces on the 4GE SSM, including the integrated 4GE SSM in slot 1 on the ASA 5550, as part of an EtherChannel.
We introduced the following commands: channel-group , lacp port-priority , interface port-channel , lacp max-bundle , port-channel min-bundle , port-channel load-balance , lacp system-priority , clear lacp counters , show lacp , show port-channel .

Catalyst 3750G and WLC 440x - Port Channel - Configuration - Best Pactice

What is the best practice to use when configuring port channel between Catalystr 3750G switch stack and WLC 4402 / 4404 Wireless Lan Controllers:
a) Negotiate to LACP
b) Negotiate to PAgP
or
c) Hard-code to Port Channel without any negotiation.
Any pointers to any useful links - much appreciated and configuration example as well.

Answer is 'C'... channel-mode on
Configuring Neighbor Devices to Support LAG
The controller's neighbor devices must also be properly configured to support LAG.
â¢Each neighbor port to which the controller is connected should be configured as follows:
interface GigabitEthernet
switchport
channel-group mode on
no shutdown
â¢The port channel on the neighbor switch should be configured as follows:
interface port-channel
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan
switchport trunk allowed vlan
switchport mode trunk
no shutdown
Here is a link that explains it. Hope this answers your question:
http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42mint.html#wp1116136
Here is a Best Practice doc:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a0080810880.shtml

RV042G port/bandwidth configuration

Similar Messages

Maybe you are looking for