QOS and ISA550W

Similar Questions

• Differences of router QoS and ASA

  Hi, I recently tested the QoS on an aid and 876 IPSEC tunnel and managed to limit participation effective and output rates using QoS on the router between two hosts.

  This made me think to try it on a SAA. I tried this on a SAA without success, but he also says in aid, it cannot be applied to the 'exit '. Is there a difference in the implementation of QoS between a router and ASA?

  Update - I had it at work but only when I use it all the traffic everything. If I select say 192.168.55.20-> all IT does rate limit.

  outside_mpc list extended access permit ip host 192.168.55.20 all

  class-map ROB_QOS (does not work)

  corresponds to the outside_mpc access list

  Class-map ROB_QOS (works)

  match any

  class-map inspection_default

  match default-inspection-traffic

  type of policy-card inspect dns preset_dns_map

  parameters

  message-length maximum 512

  Policy-map global_policy

  class inspection_default

  inspect the preset_dns_map dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the rsh

  inspect the rtsp

  inspect esmtp

  inspect sqlnet

  inspect the skinny

  inspect sunrpc

  inspect xdmcp

  inspect the sip

  inspect the netbios

  inspect the tftp

  Policy-map Rob_Policy

  class ROB_QOS

  Police output fall in line-action 2000-100000

  global service-policy global_policy

  Rob_Policy service-policy inside interface

  Rob_Policy service-policy to the outside interface

  Maybe its not working now because you have NAT on this 192.168.55.0 IP range? You use any NAT for this subnet?

  Concerning

  Farrukh

• VPN between RV120W and ISA550W

  Hi guys,.

  Wonder if you can shed some light on my problem until I loose all my hair!

  I'm trying to create a VPN between a RV120W at a remote site and our ISA500W in our offices... I can't it connect!

  I'll put up an IPsec tunnel between the sites, but it does not want to connect.

  Remote site - RV120W

  The IKE policy table

  Management / time type

  Main mode Exchange

  3DES encryption

  AUTH - SHA-1

  DH group 2

  Pre-Shared Key AUTH

  HIS life 28800

  Xauth no

  VPN

  Type Auto policy

  IP of remote endpoint address

  Local IP subnet

  Remote IP subnet

  Auto policy settings

  Life 3600 seconds

  Encryption algorithm 3DES

  SHA-1 integrity algorithm

  Key Enable PFS group

  DH-group 2 (1024 bits)

  Headquarters - ISA550W

  IPsec policy

  Static IP address of remote Type

  AUTH Type pre-shared Key

  Local ID (empty)

  Remote ID (empty)

  IKE

  SHA1 hash

  Pre-shared Key

  D0H group group 2 (1024 bits)

  Lifetime 8 hours

  Transform

  integrity ESP_MD5_HMAC

  Encryption ESP_3DES

  Errors, I'm getting in the newspapers

  Remote RV120W (note! I changed the external IP to protect the innocent!)

  2013-10-29 14:39:20: [rv120w] [IKE] INFO: respond to the negotiation of the new phase 2: 69.193.0.0 [0]<=>80.4.0.0 [0]

  2013-10-29 14:39:20: [rv120w] [IKE] INFO: configuration using IPsec SA: 192.168.3.0/24<->192.168.1.0/24

  2013-10-29 14:39:20: [rv120w] [IKE] INFO: setting encmode 3 (3)-> Tunnel peer (1)

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: proposal of the peer:

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: (proto_id = spisize ESP = 4 spi = spi_p 8846693d = encmode = 00000000 Tunnel reqid = 0:0)

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: (trns_id = 3DES encklen = 0 authtype = hmac-md5)

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: Local proposal:

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: (proto_id = spisize ESP = 4 spi = 00000000 spi_p 00000000 encmode = Tunnel reqid = 5:5 =)

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: (trns_id = 3DES encklen = 0 authtype = hmac-sha)

  2013-10-29 14:39:20: [rv120w] [IKE] WARNING: proposal for Phase 2 of 80.4.0.0 [0] does not.

  2013-10-29 14:39:20: [rv120w] [IKE] ERROR: no adequate policy not found for 80.4.0.0 [0]

  2013-10-29 14:39:20: [rv120w] [IKE] INFO: sending of information Exchange: Notify payload [NON-PROPOSITION-SELECTED]

  2013-10-29 14:39:20: [rv120w] [IKE] INFO: purged-with proto_id = ISAKMP and spi = c8d68f74af9dfa9a:b4137fd6e0666914 ISAKMP Security Association.

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: accept a request to establish IKE - SA: 80.4.0.0

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: Configuration found for 80.4.0.0

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: opening new phase 1 negotiation: 69.193.0.0 [500]<=>80.4.0.0 [500]

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: Start Identity Protection mode.

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: [ident_i1send:180]: XXX: NUMNATTVENDORIDS: 3

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: [ident_i1send:184]: XXX: definition of vendorid: 4

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: [ident_i1send:184]: XXX: definition of vendorid: 8

  2013-10-29 14:39:29: [rv120w] [IKE] INFO: [ident_i1send:184]: XXX: definition of vendorid: 9

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: received unknown Vendor ID

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: received Vendor ID: DPD

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: received Vendor ID: RFC 3947

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: for 80.4.0.0 [500], version selected NAT - T: RFC 3947

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: payload NAT - D corresponds to 69.193.0.0 [500]

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: NAT - D payload does not match for 80.4.0.0 [500]

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: NAT detected: PEER

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: for debugging: change ports2013-10-29 14:39:30: [rv120w] [IKE] INFO: change port!

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: received unknown Vendor ID

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: ISAKMP Security Association established for 69.193.0.0 [4500] - 80.4.0.0 [4500] with spi: 740e6a59f02eca3a:820460c448a5b74b

  2013-10-29 14:39:30: [rv120w] [IKE] INFO: sending of information Exchange: prevent the load [INITIAL CONTACT]

  2013-10-29 14:39:31: [rv120w] [IKE] INFO: new phase 2 negotiation: 69.193.0.0 [500]<=>80.4.0.0 [0]

  2013-10-29 14:39:31: [rv120w] [IKE] INFO: setting encryption mode to use UDP encapsulation

  2013-10-29 14:39:31: [rv120w] [IKE] ERROR: Unknown notify message from the 80.4.0.0 [4500]. No found handful of phase2.

  2013-10-29 14:39:41: [rv120w] [IKE] ERROR: Unknown notify message from the 80.4.0.0 [4500]. No found handful of phase2.

  2013-10-29 14:39:51: [rv120w] [IKE] ERROR: Unknown notify message from the 80.4.0.0 [4500]. No found handful of phase2.

  2013-10-29 14:40:01: [rv120w] [IKE] ERROR: Unknown notify message from the 80.4.0.0 [4500]. No found handful of phase2.

  2013-10-29 14:40:02: [rv120w] [IKE] ERROR: Phase 2 negotiation failed due to upward. c8d68f74af9dfa9a:b4137fd6e0666914:f6cdeead

  2013-10-29 14:40:02: [rv120w] [IKE] INFO: a calendar of undead has been removed: "quick_i1prep".

  Head Office ISA550

  2013-10-29 15:25:29 - WARNING - IPsec VPN: msg = "PixelNY" #4765: quick mode attempt fails, please check if IKE/transformation/PFS local are the same as remote site; (pluto)

  2013-10-29 15:25:29 - WARNING - IPsec VPN: msg = "PixelNY" #4765: max number of retransmissions (2) reached STATE_MAIN_I1.  No answer (or no acceptable answer) to our first post IKE. (pluto)

  2013-10-29 15:22:38 - WARNING - IPsec VPN: msg = "PixelNY" #4763: quick mode attempt fails, please check if IKE/transformation/PFS local are the same as remote site; (pluto)

  2013-10-29 15:22:38 - WARNING - IPsec VPN: msg = "PixelNY" #4763: max number of retransmissions (2) reached STATE_MAIN_I1.  No answer (or no acceptable answer) to our first post IKE. (pluto)

  2013-10-29 15:20:28 - WARNING - IPsec VPN: msg = "PixelNY" #4761: quick mode attempt fails, please check if IKE/transformation/PFS local are the same as remote site; (pluto)

  2013-10-29 15:20:28 - WARNING - IPsec VPN: msg = "PixelNY" #4761: max number of retransmissions (2) reached STATE_MAIN_I1.  No answer (or no acceptable answer) to our first post IKE. (pluto)

  2013-10-29 15:20:12 - WARNING - Firewall: type = ACL

  If someone could shed some light it would be fantastic!

  Configuration items you listed, it's what I see.  Transformations do not match between the AIS and the change integrity RV RV MD5 or change the game to transform ISA SHA1.  I would recommend changing the ISA in well SHA1As, you don't mention what is IKE ISA policy encryption, but there's 3DES in the RV, so you'll need to ensure its 3DES in ISA.  Also note that you are life spans SA do not match.  Technically, this should be ok, but it's really best to match as well.  The ISA is 8 hours and the RV is 1 hour (3600 seconds)

  Shawn Eftink
  CCNA/CCDA

  Please note all useful messages and mark the correct answers to help others looking for solutions in the community.

• QOS and Movi

  Hey there everyone!

  A customer asked us on QOS for Movi settings, and while I know there is no parameters in Movi, you can define for QOS, I was wondering if the application has been marking of packages with some default settings.

  All other Movi-QOS available data would also be greatly appreciated.

  Thank you!

  QOS for Movi data is not defined.  Here is a screenshot of the packages showing the stream Movi has on Best Effort QOS 000 000.

  

  -AA

• QoS and routing VPN IPSEC protocols

  Hello world

  You must confirm if the QOS is usable on IPSEC Site to site VPN?

  IPSEC VPN it can also participate in routing protocols.

  Example of

  An address 192.168.10.1 site source

  B Source 192.168.10.2 site address

  Now for Site A to Site B IPSEC to join a way is that we can use our ISP as static IP address

  Site has

  192.168.10.2 255.255.255.0 address 10.x.x.x ISP

  Using routing protocols

  Is it possible to use OSPF between two sites and advertise routes in OSPF?

  Will they see each other as ospf neis?

  Thank you

  MAhesh

  Hello Manu,

  Yes, we can do,

  Let me provide you with the following information:

  On the quality of service

  http://www.Cisco.com/en/us/products/ps6120/products_configuration_example09186a008080dfa7.shtml

  On OSPF

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2030/products_configuration_example09186a00804acfea.shtm

• File QoS and IPSec

  Trying to create previously classify QoS policy that will give a certain priority of traffic/subnet network during other crypto-traffic interesting ACL... something like that.

  Crypto ACL:

  access-list 101 permit ip 128.0.0.0 127.255.255.255 host 1.1.1.1

  access-list 101 permit ip 128.0.0.0 127.255.255.255 host 2.2.2.2

  traffic/ACLs that must have priority:

  access-list 102 permit ip 128.0.0.0 127.255.255.255 host 2.2.2.2

  '101' interesting ACL Cryptography of traffic will be attributed to politics of crypto card.

  102 ACL priority will be assigned a class card, then a map policy?

  class-map correspondence-any voip - vlan

  game group-access 102

  Policy-map voip

  class voip - vlan

  bandwidth 200

  Police cir 5000000

  It will work, or am I missing something?

  Thank you, kevin

  Hello

  The policy must be attributed to the overall policy of service or a service-policy interface.

  Federico.

• Setup of QoS for Whatsapp and VOIP application

  Hello guys,.

  I have a modem WAG320N. I have wasnted to configure the QoS priority for 2 applications 'Whatsapp' and a VOIP application that allows me to call from a computer to a mobile phone. I use torrent applications and that they take all the bandwidth. That's why I was looking for to configure QoS for these two applications.

   

  I went to the page of QoS and they are wondering about the details of the application as the range of ports etc.. I don't know what value to be filled. I posted a screenshot below of his request. Can someone help me fill out these details for both applications.

  Thanks in advance

  Image: http://i40.tinypic.com/2qi02z5.jpg

  You can add essentially Viber on QoS. Under the games and Applications, QoS, click on enable priority access Internet. On the category, find the Applications > add a new Application. You can enter the name of the Application. You can now add the port numbers. And since it is a specific port and no beach, do you this way;

  5242 - 5242 TCP (for Protocol)
  4244 4244 TCP
  5243 5243 UDP
  9785 9785 UDP

  I hope this helps.

• Limit my bandwidth downloading the applications using the API to control traffic and QoS

  I used QoS and Traffic Control API as TcAddFlow and TcAddFilter to control my bandwidth usage download applications.

  We manipulate TC_GEN_FLOW, to send and receive FLOWSPEC parameters.

  Now, I want to set the exact limit to 5 Mbps, what are the value that I need to set for TokenBucketSize and TokenRate to limit bandwidth to 5 Mbps FLOWSPEC structure?

  Code snippet:

  newFlow-> ReceivingFlowspec.DelayVariation = QOS_NOT_SPECIFIED;
  newFlow-> ReceivingFlowspec.Latency = QOS_NOT_SPECIFIED;
  newFlow-> ReceivingFlowspec.MaxSduSize = QOS_NOT_SPECIFIED;
  newFlow-> ReceivingFlowspec.MinimumPolicedSize = QOS_NOT_SPECIFIED;
  newFlow-> ReceivingFlowspec.PeakBandwidth = POSITIVE_INFINITY_RATE;
  newFlow-> ReceivingFlowspec.ServiceType = SERVICETYPE_NETWORK_CONTROL;
  newFlow-> ReceivingFlowspec.TokenBucketSize = ?;
  newFlow-> ReceivingFlowspec.TokenRate =?;

  newFlow-> SendingFlowspec.DelayVariation = QOS_NOT_SPECIFIED;
  newFlow-> SendingFlowspec.Latency = QOS_NOT_SPECIFIED;
  newFlow-> SendingFlowspec.MaxSduSize = QOS_NOT_SPECIFIED;
  newFlow-> SendingFlowspec.MinimumPolicedSize = QOS_NOT_SPECIFIED;
  newFlow-> SendingFlowspec.PeakBandwidth = POSITIVE_INFINITY_RATE;
  newFlow-> SendingFlowspec.ServiceType = SERVICETYPE_NETWORK_CONTROL;
  newFlow-> SendingFlowspec.TokenBucketSize =?;
  newFlow-> SendingFlowspec.TokenRate =?;

  Thank you & best regards

  This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
  http://social.technet.Microsoft.com/forums/en-us/home s/fr-U.S./Accueil
  http://social.msdn.Microsoft.com/Forum
  
  
  If you give us a link to the new thread we can point to some resources it

• Implementation of VLAN and QoS for VOIP on SG200-18

  We recently purchased the smart switch SG200-18 to replace a Netgear switch. We are moving our phone service to VOIP through our local ISP as well.

  I currently have the VOIP phone plugged into Port 17 on SG200-18 (it is a Grandstream Cordless VOIP phone).

  I want to put the VOIP phone on one VLAN separate from the rest of the network and optimize QoS parameters so that the VOIP phone has exceptional audio quality even during network traffic.

  Here are my questions:

  1. do I need to set anything on the type of port to Port 17 (because it resembles a shape any Combo port)?

  2. How can I do to isolate VOIP telephone it's own VLAN (I see the parameters VLANS and VLAN voice, not sure that one to use;) I've tried to set a VLAN and broke the Internet connectivity on the phone until I went and removed)?

  3. do I need to adjust the QoS settings to switch to better optimize the VOIP phone?

  Some additional questions about the GS200-18 in general:

  1. do I need to adjust the parameters of the system on the switch time? I am in the Central time.

  2. do I need to adjust the Green Ethernet/Energy Saving parameters or should I stay with the default settings?

  In addition, a couple of "getting started" questions for Cisco:

  1. I registered an account My Cisco. What should I do to register my switch with Cisco and associate with my My Cisco account?

  2. What are the benefits of purchasing a contract of Cisco Small Business support, and how much would it cost the SG200-18 (I ordered it from Provantage)? I'm curious to see if it's worth the money.

  Here's my 'features ':

  Switch: SG200-18

  VOIP phone: Grandstream DP715 and 710 handsets

  Plugged in: Port 17 on SG200-18

  Services: Internet Local (Direclynx)

  Type of connection: 3 m down / 500 k up DSL move to a future wireless connection that will give us higher speeds

  Backend VOIP provider: VOIP Innovations

  Router: Apple Airport Extreme AC model (all Macs and iOS devices and the OS X Server on the network, so I use the Apple router facilitates installation, because is not QoS, trying to QoS and VLAN in the switch)

  Thank you all!

  Hello

  I'll just go to the list again:

  1. sounds good in the port from the drop-down list. So can I just connect the VOIP phone and go with it, correct?

  Yes, just plug in ethernet combo port and it will work.

  2. is not an issue, but I agree, Apple likely isn't compatible QoS or VLAN.

  3. thanks for the info on time/NTP settings. If I wanted to go there and try to configure NTP, how much is it and what I have to do? I want to I can give it a quick try.

  To Setup NTP on the switch is quite simple.  Go to Administration > Time Settings > time system and check the boxes to activate the main clock Source (SNTP)

  Then go to the settings of the SNTP page and add a new entry with the IP address of an NTP server.  There is a list of available NTP servers here:

  http://www.pool.ntp.org/en/

  You must also ensure that the switches Administrative default gateway is set correctly (it must be set the to the default gateway, probably the most convenient airport) so the switch can contact the NTP server.  That option is set under Administration > Interface Management > Interface IPv4.  Change the user-defined default gateway and enter the IP address of your airport (or whatever your default gateway for your network)

  4 sounds good on the Green Ethernet settings. I'll leave it as default value.

  Yes, better to just let those unless you have weird problems with ports disconnect, who can sometimes be caused by Green Ethernet, but if there's nothing like leave it on and save a few watts.

  5 sounds good on does not need to attach my passage to my Cisco account. Should I fill out a form any registration of the product with Cisco before calling support?

  It is not a record for support.  The only thing we need you to do is to create a Cisco account, but you have already done this, so if/when you call in support, you just need your ID for Cisco (also called a CCOID sometimes) and the serial number of your switch.

  6. thanks for the info on the Service contract. Is it something that I would need to order directly from Cisco or I who would get my Cisco partner (Provantage)? After the three years is up, treat yourself to renewal or it just falls? Is there a certain amount of time I have to buy the Service Contract forward make me ineligible?

  Support contracts are purchased through a partner Cisco, or you can get them online for the CDW or Newegg for example.  Basically, you have until the expiry of your current aid for the purchase of a new contract.  For example, right now your switch comes with 1 year of technical support.  You can only buy a contract while it is still active.  Once your three-year contract is about to run out, you're in the same situation.  You can renew it before it expires, however if you leave is up, you will not be able to put a contract on it.  Contracts are not my specialty, however, so you can check with your partner for complete details.

  7. sounds good to how data use VOIP calls. His dislikes too. :-)

  I agree, a voice call is not much traffic.  What you have described you probably don't have problems, although of course I can't guarantee that.

  8. because it is from your provider and they specifically mentioned the VOIP, I would say that you'll be fine here.

  You had also placed on your airport using access point behind a router in small businesses.  I would like to say that it is possible, a large number of wireless routers have an option to put access point only mode or something like that, but you should check with Apple on how to do it.

  Insofar as a Small Business router if you decide to upgrade for the options VLAN or QoS, I would recommend the RV180, or perhaps the RV320.  Two of these models are available with or without wire depending on what you decide to do with the airport.

  I think I got all the questions, but if not just let me know,

  Christopher Ebert - Network Support Engineer

  Cisco Small Business Support Center

  * Please note the useful messages *.

• WRT110 and VoIP quality

  I have Vonage Linksys (PAP2) adapter attached to a WRT110 RangePlus Wireless Router. Firmware on the router upgraded to 1.0.05 build 3.  Incoming voice quality is clean and clear.  Outgoing voice quality is jerky. Nothing other than on the local network VoIP.  Tested late package with and without the router online.  Without router, round-trip delay (100 pings to Vonage external server on the Internet) on average less 90ms.  With WRT110 online, around tripping delay 200 ms on average.   The > 200ms delay is after you disable the SPI firewall and QoS and setting DMZ destination with the MAC address of the adapter Linksys of Vonage.

  I also tried the AT & T_Cisco MicroCell connected to router Linksys WRT110 RangePlus.  Same router, same problem.  Quality of VoIP CMF (phone Moble to MicroCell of Linksys WRT110) outgoing is choppy.

  Any suggestions?

  Try reducing the MTU value to 1300 on the configuration page of the router and the router power cycle... Now, check.

• Ask for advice on configuring QoS on WAG160N

  I just bought a WAG160N and trying to Setup QoS in the effort to allow the game smoothly to my favorite game even when my roommate decides that it will download a load of shit porn.

  I tried using the auto and setting my game port bandwidth functioin (7777) to the "absolute priority" and it works fine for me and play my game, but absolutely kills bandwidth for other applications on the local network, I think that's the issue, as described in http://forums.linksysbycisco.com/linksys/board/message?board.id=DSL&message.id=6055&query.id=55801#M... who While in doesn't bother me the least of the world presents a foreseeable problems (mainly his sneak in and murder me in my sleep). In order to save my life and probably save some jail time could offer if some adivce please on what settings do I enter so I can have the game smoothly and it can download its dwarf weird porn/stuff.

  My internet connection is (please don't laugh) ADSL 1. with a connection of 1536 kbps down and 256 Kbps upwards. In the linked thread the person said it took its bandwidth to 1000 Kbps above his actual connection speed, but in my case, it would be almost double what I really have.

  Thanks for any help.

  Kris

  If you have configured automatically under Internet bandwidth, then the QoS service uses the highest level of the bandwidth of this application or Port. To make QoS and other computer work, instituted smoothly bandwidth Internet manually and the size 900 Kbps. Your internet download speed is 1536 kbps, so you can set the size to 900 Kbps.

  I think with these settings your game and the other computer will be able to go online and can download files from the internet smoothly.

• QoS EA4500

  I bought the EA45500 specifically to configure QoS on specific devices by MAC address.  I would like to give preference to the PS3 for online games.  The first time I went to the QoS to the interface of the browser tab, I could start to put in the settings, then after the second or third recorded, the QoS tab has nothing of my settings and accept all the entries or save the settings (see image inserted here)

  

  I now notice that as soon as I put on the EA4500, he had the v2.0.36.126507 firmware.  During the installation (before the QoS setting), I tried (without success) load new firmware that has been identified.  Today, I see that the new firmware is loaded v2.0.37.131047.

  Anyone can shed some light on this?  Can I restore the firmware manually? If Yes, where can I find it?

  

  Thank you hiptechboy.  Factory setting reset indeed QoS page, so it was functional, however, I learned a little more I started to restore the configuration.  Given that I had saved configuration settings at various times during the initial installation, I restored it with the last save point which included the 'bad' QoS and the QoS page was in fact still bad. So everything he does gets saved to the backup / restore configuration file.

  As I said, I had several backups, so I took one earlier (before the adjustment of QoS page).  This restoration has a functional QoS page after restoring the configuration. So, I added my first priority QoS settings on QoS page and saved a backup of the configuration.  I added the second priority QoS, recorded on the page of the QoS parameters and save a configuration to the top.  When I added the third QoS parameter and registered on the page of QoS, all my settings have disappeared and the page was more functional.  I must have got the third entry of the QoS the other night, when he 'stop working '.

  This time, I have simply restored from the last save point and again had a functional QoS page.

  

  So I guess that the quality of service is limited to 2 items.  Add a third and once settings makes this useless page and as I said, it is recorded like this in the configuration backup.  I would like to put the iPod Touch, iPhone and iPad on a lower priority for streaming video is not interfering with the online game of the PS3 (i.e. CoD MW3).

• QoS distressed WRT160N

  I got this router WRT160N 2 weeks ago and it worked fine. I have 4 computers connected wirelessly and also a voice of Vonage device. During times of heavy computers download the phone quality would sometimes fade. Therefore, I decided to use QoS and set QoS for the device of loud and the medium and normal computers.

  After those changes my phone through the voice device hardly worked, cut in and out, and also computers had difficulty maintaining an internet connection.

  Then I disabled QoS again, the phone works again, but the internet connection for computers really is now unstable and unable to maintain a continuous information.

  Is it possible to reflash the router back to factory settings — just disable QoS doesn't seem to work.

  Connect to www.linksys.com/downloads and try to update the firmware of the router.

  Follow these steps to upgrade the firmware of the device:-open
  a page of Internet Explorer browser. In the address bar type - 192.168.1.1
  Let the empty user name & password use admin
  Click on the tab - then 'Administration' on
  the 'Firmware Upgrade' void tab-here, click on 'Browse' to select the
  compressed extract/No .bin or .img file and click on "Upgrade"-waiting for seconds... ".
  It shows that "Upgrade successful" after
  update firmware, click on "Reboot" and you will be returned back
  on the same page OR it will say 'cannot display the Page.
  Reset the router for a few seconds...
  Reconfigure...

• Cisco ASA failover KeepAlive - classification and prioritization

  Hello

  I have a busy layer two link between data centers and must ensure that traffic keepalive failover between ASA firewalls at each data center goes through.

  I want to implement layer 2 quality of service on the route. Can you classify and prioritize ASA failover keep alive the traffic? If so what ports should I use or it is already ranked by the ASA?

  Thank you

  Hello

  If you want to apply the QoS on switching between ASA link, you need to do:

  -Mark traffic on switches facing interface failover ASA

  -All intermediate switches must approve the value of QoS and applye your QoS policy (reservation of bandwidth based on qos value chosen before).

  Assume that your main unit failover ip is 192.168.100.1 and 192.168.100.2 for the secondary unit.

  The acl to classify the traffic is:

  Of with the ASA2 ASA1

  HA - ASA extended IP access list

  permit ip host 192.168.100.1 192.168.100.2

  Of ASA2 to ASA1:

  HA - ASA extended IP access list

  ip licensing 192.168.100.2 host 192.168.100.1

  Hope that answers your question.

  Thank you.

  PS: If this solved your problem, please do not forget to note and mark it as correct.

• Recommendation of HW and advice on optimal configuration

  I have two requierments:

  1. Security
  2. Failover/redundancy

  Related information:

  1. 6 external links:
     1. 4 dsl to 4 different ISP (2 Mbit/s up/down)
     2. two point-to-point microwave links (up/down 15 Mbps)
  2. Public services:
     1. WebService, must be set to switch between 4 DSL
     2. X service, must be set to failover between two microwave links. (will consume 10 Mbps up/down)
  3. LAN related services:
     1. AD
     2. DNS
     3. etc...

  First impressions:

  1. SLA for the ISP trackign satisfy failovers
  2. HW failover between two devices from cisco for failures of hw.
  3. three different DMZ:
     1. WebService associated servers
     2. Service X associated servers
     3. Associate LAN servers
  4. Any ideas what so ever when it comes to security (ips, ids, etc...)

  Any recommendation or advice would be appreciated.

  You could probably accomplish what you want by using two devices.

  1. Security
     • Series ISA500
       • http://www.Cisco.com/Cisco/Web/solutions/Small_Business/products/security/ISA500/index.html
     • Size and capacity requirements will be determined based on the number of users/services behind the ISA and whether or not wireless is necessary.
     • With the total combined speed of approximately 38Mb, you should be well under the throughput Firewall 200 MB of the ISA550 and ISA550W max.
  2. Failover/redundancy for 6 links
     • RV016 - supports up to 7 links load balancing
       • http://www.Cisco.com/en/us/prod/collateral/routers/ps9923/ps9924/data_sheet_c78-501223.html
     • With the total combined speed of approximately 38Mb, you should be well under 200 MB NAT max flow.

  Basically set 6 connections on the RV016 and then attach the RV016 to ISA WAN1.  I would recommend to manage all your NAT/PAT on the ISA in this configuration.

  Shawn Eftink
  CCNA/CCDA

  Please note all useful messages and mark the correct answers to help others looking for solutions in the community.