Routing protocols.

Similar Questions

• 15.1 TMS does not respect the preferred routing protocol

  TMS 15.1

  C series: TC7.2.1, TC7.3.4

  SX20 and 80: TC7.3.4 and EC8.01

  All the saved settings to VCS with addresses both H.323 and SIP.

  Conference TMS-settings of parameters / advanced: shares of routing protocol: H.323

  By default the Protocol of appeal located on all the evaluation criteria: H.323

  When creating new conferences, connection parameter is defined as "SIP" despite the preference above, this to H.323 does not change the connection string to [email protected] / * / the alias preferred without any suffix.

  I do not see anything either in the TMS open and resolved the issues list, then, until I opened a case with TAC, has anyone already opened a file, or found a way to solve this problem? (Couldn't see this issue in TMS 14.4.x)

  Thank you/Bravo

  /Jens

  Hi Jens,

  I can't reproduce your problem here.  I have two end points recorded on my VCSes, and when their scheduling in TMS 15.1.0 it is showing that H.323 in connection settings.

  If I click on "Settings" under the Action on the far right of the display of connection settings in MSD, I can change it to "IP - SIP" and used addresses change to SIP, and if I change it back to "IP - H.323", it changes again in the H.323 addresses.

  Wayne

• IPSEC and routing protocols

  Hello world

  I read that IPSEC does not support routing with VPN's Site to the other protocols because both are Layer4.

  This means that if Site A must reach the B Site over a WAN link, we use static IP on the Site A and Site B router?

  In my lab at home I config Site to Site VPN systems and they work correctly using OSPF does that mean that IPSEC supports the routing protocol?

  IF someone can explain this please?

  Thank you

  Mahesh

  There is no problem with the routing on IPsec protocol, there are limits to some implmentations.

  Our old (strives, but still popular) crypto maps where such implemtation.

  What you need to remember, is that to make routing protocols (more) on IPsec, you must ensure that multicast is allowed through, i.e. your traffic selectors should be postponed. Another thing is that some of these protocols do a check if Hellos were recived leave a subnet connected etc etc. Of course, this isn't a problem with BGP (or most of the problems can be overcome easily).

  New implementations - side Cisco using protections of tunnel - we can run protcols routing on IPsec with very few restrictions.

  M.

• Cannot create the routing protocol ospf

  Hello experts,

  I had a problem to activate OSPF routing IPv6 using Cisco 3845R with IOS ver: (C3845-ENTSERVICES-M), Version 12.4 (24) T. I am able to configure IPv6 on the interfaces and etc but not able to use OSPFv3.

  No idea why? Is this due to the IOS itself?

  Kindly illuminate.

  Kind regards

  Alex

  The version you use supports IPv6 support but not OSPFv3. You can check by looking in the browser functionality.

  http://Tools.Cisco.com/ITDIT/CFN

  I hope this helps.

• in pix 6.3 ios routing protocols (3)

  6.3 (3) support also TEAR apart from ospf, otherwise how is among the warnings is RIPv2 mcast updates are sent through an interface that does not have any rip has helped this topic.

  Hello

  PIX 6.3 code supports the two RIP (v1 and v2) and OSPF. The disadvantage is that you cannot configure the RIP and OSPF on the same PIX. You must choose the one that you want to use. I hope this helps.

  Scott

• routing on IPSEC protocols

  Why you can not run an IPSEC tunnel mode routing protocol? Why must you ACCORD to run a routing protocol?

  Most dynamic routing protocols use address multicast or broadcast address for the destination address. IPSec processes the unicast IP traffic. That is why we traditionally used ACCORD which can easily pass multicast and traffic in the tunnel of dissemination as how to run over IPSec tunnels routing protocols. With the GRE, the traffic of multicast routing protocol is encapsulated in a GRE packet which has a unicast source and destination address.

  HTH

  Rick

• IPSEC tunnel and Routing Support protocols

  Hello world

  I read that IPSEC does not support routing with VPN's Site to the other protocols because both are Layer4.

  This means that if Site A must reach the B Site over a WAN link, we use static IP on the Site A and Site B router?

  In my lab at home I config Site to Site VPN systems and they work correctly using OSPF does that mean that IPSEC supports the routing protocol?

  IF someone can explain this please?

  OSPF config one side

  router ospf 1

  3.4.4.4 router ID

  Log-adjacency-changes

  area 10-link virtual 10.4.4.1

  passive-interface Vlan10

  passive-interface Vlan20

  3.4.4.4 to network 0.0.0.0 area 0

  network 192.168.4.0 0.0.0.255 area 10

  network 192.168.5.0 0.0.0.255 area 0

  network 192.168.10.0 0.0.0.255 area 0

  network 192.168.20.0 0.0.0.255 area 0

  network 192.168.30.0 0.0.0.255 area 0

  network 192.168.98.0 0.0.0.255 area 0

  network 192.168.99.0 0.0.0.255 area 0

  3550SMIA #sh ip route

  Code: C - connected, S - static, mobile R - RIP, M-, B - BGP

  D - EIGRP, OSPF, IA - external EIGRP, O - EX - OSPF inter zone

  N1 - type external OSPF NSSA 1, N2 - type external OSPF NSSA 2

  E1 - OSPF external type 1, E2 - external OSPF of type 2

  i - IS - Su - summary IS, L1 - IS - IS level 1, L2 - IS level - 2

  -IS inter area, * - candidate failure, U - static route by user

  o - ODR, P - periodic downloaded route static

  Gateway of last resort is 192.168.5.3 to network 0.0.0.0

  192.168.12.0/24 [13/110] through 192.168.5.3, 3d17h, FastEthernet0/11

  100.0.0.0/32 is divided into subnets, subnets 1

  O 100.100.100.100 [110/3] through 192.168.5.3, 3d17h, FastEthernet0/11

  3.0.0.0/8 is variably divided into subnets, 2 subnets, 2 masks

  O 3.3.3.3/32 [110/2] via 192.168.5.3, 3d17h, FastEthernet0/11

  C 3.4.4.0/24 is directly connected, Loopback0

  C 192.168.30.0/24 is directly connected, Vlan30

  64.0.0.0/32 is divided into subnets, subnets 1

  O E2 64.59.135.150 [110/300] through 192.168.5.3, 1d09h, FastEthernet0/11

  4.0.0.0/32 is divided into subnets, subnets 1

  O 4.4.4.4 [110/2] via 192.168.5.3, 3d17h, FastEthernet0/11

  C 192.168.10.0/24 is directly connected, Vlan10

  172.31.0.0/24 is divided into subnets, 4 subnets

  O E2 172.31.3.0 [110/300] through 192.168.5.3, 3d17h, FastEthernet0/11

  O E2 172.31.2.0 [110/300] through 192.168.5.3, 3d17h, FastEthernet0/11

  O E2 172.31.1.0 [110/300] through 192.168.5.3, 3d17h, FastEthernet0/11

  O E2 172.31.0.0 [110/300] through 192.168.5.3, 3d17h, FastEthernet0/11

  O 192.168.11.0/24 [110/3] through 192.168.5.3, 3d17h, FastEthernet0/11

  O 192.168.98.0/24 [110/2] via 192.168.99.1, 3d17h, FastEthernet0/8

  C 192.168.99.0/24 is directly connected, FastEthernet0/8

  192.168.20.0/24 C is directly connected, Vlan20

  192.168.5.0/31 is divided into subnets, subnets 1

  C 192.168.5.2 is directly connected, FastEthernet0/11

  C 10.0.0.0/8 is directly connected, Tunnel0

  192.168.6.0/31 is divided into subnets, subnets 1

  O 192.168.6.2 [110/2] via 192.168.5.3, 3d17h, FastEthernet0/11

  192.168.1.0/24 [13/110] through 192.168.5.3, 3d17h, FastEthernet0/11

  O * E2 0.0.0.0/0 [110/1] via 192.168.5.3, 1d09h, FastEthernet0/11

  B side Config

  Side A

  router ospf 1

  Log-adjacency-changes

  network 192.168.97.0 0.0.0.255 area 0

  network 192.168.98.0 0.0.0.255 area 0

  network 192.168.99.0 0.0.0.255 area 0

  1811w # sh ip route

  Code: C - connected, S - static, mobile R - RIP, M-, B - BGP

  D - EIGRP, OSPF, IA - external EIGRP, O - EX - OSPF inter zone

  N1 - type external OSPF NSSA 1, N2 - type external OSPF NSSA 2

  E1 - OSPF external type 1, E2 - external OSPF of type 2

  i - IS - Su - summary IS, L1 - IS - IS level 1, L2 - IS level - 2

  -IS inter area, * - candidate failure, U - static route by user

  o - ODR, P - periodic downloaded route static

  Gateway of last resort is 192.168.99.2 to network 0.0.0.0

  192.168.12.0/24 [110/14] through 192.168.99.2, 3d17h, FastEthernet0

  100.0.0.0/32 is divided into subnets, subnets 1

  O 100.100.100.100 [110/4] through 192.168.99.2, 3d17h, FastEthernet0

  3.0.0.0/32 is divided into subnets, 2 subnets

  O 3.3.3.3 [110/3] through 192.168.99.2, 3d17h, FastEthernet0

  O 3.4.4.4 [110/2] via 192.168.99.2, 3d17h, FastEthernet0

  O 192.168.30.0/24 [110/2] via 192.168.99.2, 3d17h, FastEthernet0

  64.0.0.0/32 is divided into subnets, subnets 1

  O E2 64.59.135.150 [110/300] through 192.168.99.2, 1d09h, FastEthernet0

  4.0.0.0/32 is divided into subnets, subnets 1

  O 4.4.4.4 [110/3] through 192.168.99.2, 3d17h, FastEthernet0

  O 192.168.10.0/24 [110/2] via 192.168.99.2, 3d17h, FastEthernet0

  172.31.0.0/24 is divided into subnets, 4 subnets

  O E2 172.31.3.0 [110/300] through 192.168.99.2, 3d17h, FastEthernet0

  O E2 172.31.2.0 [110/300] through 192.168.99.2, 3d17h, FastEthernet0

  O E2 172.31.1.0 [110/300] through 192.168.99.2, 3d17h, FastEthernet0

  O E2 172.31.0.0 [110/300] through 192.168.99.2, 3d17h, FastEthernet0

  O 192.168.11.0/24 [110/4] through 192.168.99.2, 3d17h, FastEthernet0

  C 192.168.98.0/24 is directly connected, BVI98

  C 192.168.99.0/24 is directly connected, FastEthernet0

  O 192.168.20.0/24 [110/2] via 192.168.99.2, 3d17h, FastEthernet0

  192.168.5.0/31 is divided into subnets, subnets 1

  O 192.168.5.2 [110/2] via 192.168.99.2, 3d17h, FastEthernet0

  192.168.6.0/31 is divided into subnets, subnets 1

  O 192.168.6.2 [110/3] through 192.168.99.2, 3d17h, FastEthernet0

  192.168.1.0/24 [110/14] through 192.168.99.2, 3d17h, FastEthernet0

  O * E2 0.0.0.0/0 [110/1] via 192.168.99.2, 1d09h, FastEthernet0

  Thank you

  Mahesh

  Mahesh.

  Indeed, solution based purely crypto-card are not compatible with a routing protocol.  Crypto card however is the legacy config we support on IOS. The best practice is to use the protection of tunnel. Any routing protocol would work then.

  for example

  https://learningnetwork.Cisco.com/docs/doc-2457

  It's the best solution we currenty have

• QoS and routing VPN IPSEC protocols

  Hello world

  You must confirm if the QOS is usable on IPSEC Site to site VPN?

  IPSEC VPN it can also participate in routing protocols.

  Example of

  An address 192.168.10.1 site source

  B Source 192.168.10.2 site address

  Now for Site A to Site B IPSEC to join a way is that we can use our ISP as static IP address

  Site has

  192.168.10.2 255.255.255.0 address 10.x.x.x ISP

  Using routing protocols

  Is it possible to use OSPF between two sites and advertise routes in OSPF?

  Will they see each other as ospf neis?

  Thank you

  MAhesh

  Hello Manu,

  Yes, we can do,

  Let me provide you with the following information:

  On the quality of service

  http://www.Cisco.com/en/us/products/ps6120/products_configuration_example09186a008080dfa7.shtml

  On OSPF

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2030/products_configuration_example09186a00804acfea.shtm

• Problem WCCP or routing

  Hello

  We have two centres of data logical LAN even.

  Two routers ISP and two WAE 674 and the help of WCCP "evacuation-method negotiated return of interception-method wccp.

  See the attached file.

  The problem is when one of the interface WAN 'line' falls down, some of the network is not accessible from the side LAN and some.

  We use BGP as routing protocol in the ISP routers.

  Any suggestion for the problem?

  Jan

  

  Hi Jan,

  What is suspect here is the WCCP.

  When you configure, it allocates buckets if you use hash assignment. If you use a mask, it calculates the mask according to your destination / source ip address.

  Now, what I understand is - if WAN fails, some networks is not accessible.

  When LAN goes down, WCCP breaks down and starts running smooth.

  A few questions:

  1. what happens if LAN drops but WAN remains upward? WCCP remains active state / usable?

  2 when WAN breaks down and the remains of the LAN upward, your WCCP is still in PLACE and so it continues to transmit packets of same WAN interface but because this interface is down, the packages ultimately die / gets blackholed.

  3 another speculation is: asymmetric routing. When WAN is down but LAN is in place, you transfer a portion of the traffic off LAN but as WAN falls down, return packets can arrive on a different interface and creates an asymmetric routing.

  To reduce this problem, please enter interface in three stages:

  1 WAN - LAN - UP, down, is accessible from router ID?

  2. IN WAN, LAN - down, is accessible router ID?

  3. WAN downwards, towards the low LAN, is the accessible router ID?

  CLI to capture logs:

  2. show ip wccp
  3 view the details of interface ip wccp
  4 show ip wccp service
  5 show ip wccp details
  6. specify ip wccp internal (*)
  7 show running-config
  8 show ip wccp hash<61 62="">
  9 sh wccp mask tcp-promised
  10 HS tech

  In addition, as you use GRE encapsulation for redirection of WCCP, the router uses the router address IP ID as its IP source address. The router ID IP address is the loopback address higher on the router, or if the loopback interface is not configured, the router ID IP address is the highest address of the physical interfaces. The router address IP ID is used as the source address for redirected packets from the router to the Cisco WAE and accordingly, it is also used as a destination address for the Cisco WAE to the router traffic, therefore, you must be sure that a route is defined between the router Cisco WAE. This is done by configuring a static route on the Cisco WAE to address IP router ID. The router ID can be identified with wccp routers see command on the Cisco WAE.

  As in your case, you have multiple routers, a static route must be added to each router IDs. These router command to configure static routes is:

  WAE (config) # ip route
  Can you please try above and let us know if it works?
  Kind regards.

• There is a security risk to plug the internet router management on the LAN port?

  I have to install an ASR1001 on the internet for my business.  I noticed that the ASR1001 has a dedicated management port and I was wondering if it's a security risk to have this mangment port directly connected to my local network, so that I can mange it from my office.

  I want to only run the ASR of this port and I will no management through its public IP address.  Is it possible for a malicious user to compromise the router then have access to the network but this management port?

  I'd say it's a reasonable risk.  If you intend not to allow future management of the public side sessions you are a good start, implementation of protection against attacks.  Combine that with a few basic hardening, for example to disable source routing, directed broadcast, ip proxy arp, finger, as well as an ACL on the management interface so that all traffic from an untrusted interface on the router would be unable to receive return traffic.  In addition, the management vlan must be a dedicated vlan.  I would not fall in the same vlan in that your office is located.  Better design would be to fall into a dmz (acl on the router's management interface would be redundant in this case) and to apply the rules of the firewall.  However, if this is not possible, order access to routing on the ASR as well by including only a 32 road to your management station via the management VLAN interface.  Also, remove any redisribution or advertising of this management interface in your routing protocol.

• Enabling QoS on the router

  Hello
  I am pretty raw on qos in layer 3 and let me know if Miss me something, or one that is most simple/better way to do this. I have a standard c881 cisco on my provider MPLS network and I'm trying to do the router on location1 qos in the router on guest place.2.
  I'm tagging 3 types of traffic to give priority and bandwidth reserved for some and shape the other, I mark with access-list, voip, 1 based on the ports, important traffic traffic traffic 2 based on ports. I haved create the group class cards matched access those access the lists, then the political cards on these classes and that's where it's a blur.

  AS FAR AS I KNOW:
  (1) I must apply the marking map policy on the entry of my local lan and the law enforcement out of my output interface?
  (2) QoS applies when theres is congestion on the network?
  (3) display all types of qos are, you have to choose, or you can mix them I'm confuse between DSCP and IP which is the best priority
  (4) after all this don't I have still have to control the interface as fair-queue or simply by the interface of police am good?

  * I have no control over the provider's on the MPLS router and I do not have a managed switch

  Thank you for everything I want to know if I'm in the right direction.

  OK quite a general question, you asked, but I'll try my best to answer them for you. Yes, you must mark your packages, you can do this entering the LAN interface that works perfectly. Mark using IP (0-7) prec or DSCP (https://www.tucny.com/Home/dscp-tos). This link will give you the numbers for both the DSCP or IP prec markings in decimal form and by class name. Personally if you are a beginner to QoS I think fair use IP prec sound much simpler.

  Prev IP you can skip classes 6 & 7 are for control, and routing protocols that are (dependent on platform of course) marked by the router automatically must be preferred. Class 5 is usually used for voice traffic, 4 for video, 1-3 for data traffic according to its importance and 0 for traffic best effort.

  So the first step is to decide what you want mark to what levels. Create ACLs or similar to match the traffic you want to match, then mark this traffic to the previous IP.

  Then on the outbound queue to the provider you want to prioritize. So if you have the voice traffic and you marked it IP prec 5 (exp its often called) so usually you would setup a queue to low latency to ensure that traffic is always priority over all others and sent immediately - reason being to reduce jitter causing major problems to voice packets. Do you this by using the priority order. Be careful with this command as the bandwidth that you put in after the declaration of priority is also a policeman to that number. Then in the other class-maps you match other numbers of IP precedence and use 'bandwidth' instructions to give them specific levels of bandwidth - are not controllers but package corresponding to these statements is less preferred than those corresponding to the queue of "priority".

  As below:

  http://www.Cisco.com/c/en/us/support/docs/quality-of-service-QoS/QoS-PAC...

  This part is more complex and may not be necessary depending on what you do, but you can do a few child-parent, formatted at this time as well. Some people will create a parent policy map called the previous policy card in it and the EIF of the circuit you have forms of PSI. This helps avoid maxing out the link congestion and better deals in gusts only one traffic profiles policeman. Or you can just put controllers in your class cards rather than statements of "bandwidth" If you know what each class requires.

  Finally and probably the forest hardest as it might involve talking to your access provider, make sure that they carry your brands through their base to your other sites. If they are, you should be able to create a political map on your other sites entering the WAN corresponding to different brands of IP precedence. You can then send the test traffic and you should see the stats of policy-plan of traffic on the corresponding end if the ISP realizes your markings. Most do so.

  Hope that covers everything you need, please rate answer.

• No network on computer - 2 routers, 1 no CISCO router.

  Hi guys!

  I hope someone can help me with that.
  First some information about what material I got.
  I got a Cisco 860VAE router, I didn't get no cable from the console (so I'm connected to telnet), I got a home router also (got it from my ISP).

  I use my router I have of my TV service provider, so I can't remove it just... boring...
  I was getting the Cisco router because I am a Cisco CCNA student at my school (first year) and I thought it might be cool to NetFlow

  The router I got from my ISP is quite advanced so not a lot of options here. In any case, it uses the 10.0.0.0/8 range IP
  Then my CISCO router uses the ip range 192.168.1.0/24

  The problem is that I can't connect to the internet from my computer (I know...)

  Let me show you my config(remember I'm NEW) race:

  Current configuration: 2500 bytes
  !
  ! Last configuration change at 18:04:48 UTC Wednesday, January 15, 2014, by admin
  version 15.2
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  router host name
  !
  boot-start-marker
  boot-end-marker
  !
  !
  no set record in buffered memory
  activate tnhtc92DsfdXBhelxjLWJy3243i4ntXrpb4RdfFmfqY secret 4
  !
  No aaa new-model
  WAN ethernet mode
  !
  !
  !
  IP dhcp pool ccp_pool
  import all
  network 192.168.1.0 255.255.255.0
  Server DNS 8.8.8.8 8.8.4.4
  !
  !
  !
  !
  IP flow-cache timeout active 1
  8.8.8.8 IP name-server
  IP-server names 8.8.4.4
  IP cef
  No ipv6 cef
  !
  !
  !
  !
  !
  username admin privilege 15 secret 4 lUgFIkgcrt4SYXMq7jZtxq52lwdfgkj238
  !
  !
  VDSL controller 0
  Shutdown
  !
  !
  !
  !
  !
  interface Loopback0
  IP 11.0.0.1 255.255.255.0
  penetration of the IP stream
  stream IP output
  !
  interface Loopback1
  no ip address
  !
  ATM0 interface
  no ip address
  Shutdown
  No atm ilmi-keepalive
  !
  interface Ethernet0
  no ip address
  penetration of the IP stream
  stream IP output
  Shutdown
  !
  interface FastEthernet0
  no ip address
  !
  interface FastEthernet1
  no ip address
  !
  interface FastEthernet2
  no ip address
  !
  interface FastEthernet3
  switchport access vlan 2
  no ip address
  spanning tree portfast
  !
  interface GigabitEthernet0
  Description $ETH - WAN$
  the IP 10.0.0.1 255.0.0.0
  penetration of the IP stream
  stream IP output
  automatic duplex
  automatic speed
  !
  interface Vlan1
  IP 192.168.1.1 255.255.255.0
  penetration of the IP stream
  stream IP output
  !
  interface Vlan2
  no ip address
  penetration of the IP stream
  stream IP output
  !
  interface Dialer0
  no ip address
  penetration of the IP stream
  stream IP output
  !
  router RIP
  version 2
  10.0.0.0 network
  network 192.168.1.0
  No Auto-resume
  !
  by default-gateway IP 10.0.0.100
  IP forward-Protocol ND
  IP http server
  local IP http authentication
  no ip http secure server
  capture IP stream vlan id
  IP flow-export Vlan1 source
  IP flow-export version 9
  192.168.1.3 IP flow-export destination 9991
  !
  IP route 0.0.0.0 0.0.0.0 10.0.0.100
  IP route 10.0.0.0 255.0.0.0 GigabitEthernet0
  IP route 192.168.1.0 255.255.255.0 Vlan1
  !
  MAC-address-table-aging time 15
  !
  public RW SNMP-server community
  RO SNMP-Server Community public
  Server SNMP ifindex persist
  config SNMP-server enable traps
  public version 2 c SNMP-server host 10.0.0.3
  !
  control plan
  !
  connection of the banner ^ C * CISCO * ^ C
  !
  Line con 0
  no activation of the modem
  line to 0
  line vty 0 4
  exec-timeout 60 0
  Cisco password
  Synchronous recording
  local connection
  transport telnet entry
  !
  Scheduler allocate 1000-60000
  !
  end

  I haven't CHANGED anything!
  Some of it was just conjecture...

  When I try Googles PING DNS(IP: 8.8.8.8) of the router I get
  Send 5, echoes ICMP 100 bytes to 8.8.8.8, time-out is 2 seconds:
  !!!!!
  Success rate is 100 per cent (5/5), round-trip min/avg/max = 36/39/40 ms

  When I try to PING my own computer DNS googles, I get
  Request timed out.
  Request timed out.
  Request timed out.

  My CISCO router ip: 192.168.1.1 (vlan1) 10.0.0.1(gigabitethernet/WAN)
  My ip from the ISP router: 10.0.0.100
  My computer ip: 192.168.1.3 gateway: 192.168.1.1

  Try to do a topology of MY ISP text-> router ISP-> Switch-> CISCO router-> workstation

  It's not like I can configure RIP on my ISP router if... ? And BTW, my cisco router only support RIP as the routing protocol
  Then what should I do?

  You need to configure nat on the Cisco. I'm assuming that the ISP router connects to G0 on the Cisco. The ISP router probably does not know on your subnet 192.168.1.0/24 and you can't nat several subnets in their router anyway. You need to with the Cisco nat address 10.0.0.0/8 on Cisco.

  access-list 100 permit ip 192.168.1.0 0.0.0.255 any

  IP nat inside source list 100 interface g0 overload

  int g0

  NAT outside IP

  int vlan 1

  IP nat inside

  Get rid of these:

  IP route 10.0.0.0 255.0.0.0 GigabitEthernet0

  IP route 192.168.1.0 255.255.255.0 Vlan1

  You don't need them because these two subnets will be seen as connected routes.
  

  
  

  You will also need to add a default router in your dhcp pool:

  IP dhcp pool ccp_pool

  default router 192.168.1.1

  And you can get rid of this line as well:

  by default-gateway IP 10.0.0.100

  
  

  HTH,
  John

  Please note all useful messages *.

• show ip route / routing table

  Hi all

  I have a question about the output of the command "show ip route":

  C 192.168.30.0/24 is directly connected, Ethernet0

  172.16.0.0/24 is divided into subnets, subnets 1

  S 172.16.1.0 is directly connected, Ethernet0

  192.168.38.0/24 is variably divided into subnets, 2 subnets, 2 masks

  S 192.168.38.0/24 is directly connected, Ethernet0

  192.168.38.0/25 S [1/0] via 192.168.30.40

  10.0.0.0/32 is divided into subnets, subnets 1

  C 10.1.1.1 is directly connected, Loopback1

  I understand why the lines 4, 5 and 6 are present. Its cause, the 192.168.38.0 network is supposed to have a 24 mask but it is also a network with a 25 mask and so he said that this network is variably subnet.

  But why it only shows the same for lines 2 and 3? -It should not say 172.16.0.0/16 is divided into subnets? I understand why is doesn't show "variably subnet" given that the subnet, but why not 172.16.0.0/16?

  And the same for the last two lines. Why not 10.0.0.0/8 but 32? Even if it is a loopback interface always the 10.0.0.0 network is supposed to have an 8 mask by nature.

  And maybe this is a stupid question but a static router always has a metric of 0? I think Yes, because they do not have to compete with other roads, right?

  I mean a static route will always all right in the table routing and the metric is actually just for reasons of comparison within a routing protocol to see what is the best route that should be proposed to be written to the routing table.

  I also tried to put static routes permanently in the with the "standing" order routing table, but always when I detach the corresponding interface cable routes get kicked of the RT. Y at - it a tip or something I should be aware of?

  Thanks for any help!

  I'll take the easiest part of the first question. One of the fundamental principles of the IOS is that it will put routes in the routing table is the corresponding interface is in a high State. And IOS will withdraw a route in the routing table are the corresponding interface is in the low state. So, when you log out of the interface, then the road using this interface is removed.

  The most complex part of the issue is the appearance of the measures with static routes. My explanation here would start from the point that the reason that we use measures so that we can compare the routes recorded in a Protocol and determine whether one is better than the other. This has meaning for the RIP, it is logical for OSPF, and it makes sense for EIGRP. But it makes no sense for static routes. To try to make it a little more clear: If the RIP or OSPF or EIGRP to discover a route to a subnet that goes through FastEther0/0 and also learn a route to that subnet that goes via FastEther0/1 and then we compare the roads and if you have a more attractive metric, is the one who gets put in the routing table. But with static routes if there is a static route to a subnet that requires a static route for this subnet that goes via FastEther0/1 FastEther0/0 and also, so there is no comparison and both routes are placed in the routing table. Since we do not comparisons with static routes, so there is no concept of metrics associated with the static route and IOS puts a default value in the field of a static route metric.

  HTH

  Rick

• The router configuration VPN VTI adding a third site/router

  Hello

  I currently have two cisco routers configured with a connection to a primary WAN interface and a connection to an Internet interface. I have a VPN configured using a VTI interface as a secondary path if the primary circuit WAN fails. IM also using OSPF as a dynamic routing protocol. Failover works and itineraries are exchanged. The question I have is that if I want to put a third-party router in this configuration I just add another interface tunnel with the tunnel proper Public source and destination IP and new IP addresses for a new tunnel network.
  The current configuration of the VTI is below:

  Any guidance would be appreciated.

  Thank you

  Andy

  Router1_Configurtation_VTI

  crypto ISAKMP policy 1

  BA 3des

  preshared authentication

  Group 2

  ISAKMP crypto key Cisco12345 address 0.0.0.0 0.0.0.0

  Crypto IPsec transform-set esp-3des esp-sha-hmac T1

  Crypto IPsec profile P1

  game of transformation-T1

  !

  interface Tunnel0

  IP 10.0.1.1 255.255.255.0

  IP ospf mtu - ignore

  load-interval 30

  tunnel source 1.1.1.1 Internet Source * Public

  2.2.2.1 tunnel * Public Destination Internet destination

  ipv4 IPsec tunnel mode

  profile P1 IPsec tunnel protection

  !

  Router2_Configuration_VTI

  crypto ISAKMP policy 1

  BA 3des

  preshared authentication

  Group 2

  ISAKMP crypto key Cisco12345 address 0.0.0.0 0.0.0.0

  Crypto IPsec transform-set esp-3des esp-sha-hmac T1

  Crypto IPsec profile P1

  game of transformation-T1

  !

  interface Tunnel0

  10.0.1.2 IP address 255.255.255.0

  IP ospf mtu - ignore

  load-interval 30

  2.2.2.1 tunnel source * Source public Internet

  1.1.1.1 tunnel * Public Destination Internet destination

  ipv4 IPsec tunnel mode

  profile P1 IPsec tunnel protection

  Since this config is configuration of keys ISAKMP using address 0.0.0.0 0.0.0.0 is not required for a new encryption key isakmp with the new address of the site. Simply configure the VTI on the new router and one or both of the existing routers.

  One of the aspects of this application that should consider the original poster, that's how they want data to flow when the third-party router is implemented. With both routers, you have just a simple point-to-point connection. When you introduce the third-party router do you want one of the routers to use hub? In this case, the hub router has tunnels each remote Ray. Each remote RADIUS has a tunnel to the hub. Talk about communication talk is possible but will have to go to the hub and then out to the other remote. The other option is a mesh configuration where each router has VTI tunnel to the other router.

  HTH

  Rick

• My small business SF 302-08 Switch will not let me apply the command "Routing".

  Hi everyone, my switch cisco small business SF 302-08 has the latest firmware and I want to activate the command routing, but it doesn't let me do that.

  I've read the reference guide for orders, do all this procedure: IP Routing Protocol independent commands starting at page 629, but nothing happens. I need this because I want a routing between VLANs

  Kind regards.

  Hi Felipe

  Look forward to hearing how you go.

  If you reset the factory default switch and the switch is NOT connected to a server, the switch restarts with a default IP 192.168.1.245 address according to the Quick start guide .  If your PC has a static address 192.168.1.2, you should be able to access the graphical interface of the switch.

  http://www.Cisco.com/en/us/docs/switches/LAN/CSBMs/sf30x_sg30x/Quick_Start/78-19252-01.PDF

  If the switch is connected to a DHCP server, the switch Gets an IP via DHCP.

  I've had problems using hyperterminal on my Windows 7 box, that I have overcome by restarting my PC in order to free the COM port.  Settings of the console are;

  • 115200 bits per second
  • 8 data bits
  • no parity
  • 1 stop bit
  • no flow control

  If you really have problems, and you think that the switch is faulty, you have the possibility to use the services of small business Support Center (HWC) in order to identify if the switch is good or bad.

  The URL that watch phone numbers are lower;

  www.Cisco.com/go/SBSC

  Best regards, Dave