UCCX 8.5 ANI based routing

Similar Questions

• Policy Based Routing Configurations 6500 and 4948 Switches

  Hello!

  I'm looking for good examples of the strategy for the 6509 and 4948-based routing Configuration.

  I have installation of base ACB, but can not find good IPSLA configurations to pair with them.

  The 4948 has IPSLA, but doesn't seem to have orders to attach it to the ACB roadmap.

  I'm not find effective IPSLA configurations for the 6500 as well.

  My hope is that someone has config IPSLA I can use, or direct me to an example of configuration is complete.

  This is for the redirection of a WAN accelerator to monitor.

  What I have so far for the 4948:

  interface GigabitEthernet1/11
  Description to_dis_pri:g2/0/11
  No switchport
  IP 11.11.11.10 255.255.255.252
  political ownership intellectual-card route Silverpeak
  Speed 1000
  full duplex

  SilverpeakACL extended IP access list
  IP enable any 12.12.12.0 0.0.0.255

  ALS IP 99
  ICMP echo - 14.14.14.14
  Timeout 2000
  frequency 10
  Annex IP SLA 99 life never start-time now

  Silverpeak allowed 10 route map
  corresponds to the IP SilverpeakACL
  IP 14.14.14.14 jump according to the value

  I don't see how this will stop Policy Based Routing in the event where the WAN Accelerator dies.

  If you know where I can get the config, or give it here, I would be very happy!

   Hi Ganesh, It did take that command, and this is the output:: #sho track 99 Track 99 IP SLA 99 reachability Reachability is Up 1 change, last change 00:00:16 Latest operation return code: OK Latest RTT (millisecs) 1 Will this tie it all together? Also, will this be the same config for the 6509?

  Hello

  I think that you apply IP SLA on edge device where you want automatic failover, if she applies then the 6509.

  Once this output is ok then apply the command track with map of the route according to the first post.

  It could be that useful...

  -GI

  Rate if this can help...

• ALS IP Cisco 2901 and POLITICS with dual gateways LAN-based ROUTING

  Hello

  I am configuring a failover solution combined with the ACB using two bridges already configured. See the attached diagram.

  I currently have two ASA 5505 and a 2901.

  According to the example: http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/861-c... I've set up the following in the 2901:

  Interface Port - channel1.1
  encapsulation dot1Q 1 native
  IP 192.168.200.100 255.255.255.0
  intellectual property policy map RM-Comcast-traffic route

  IP route 0.0.0.0 0.0.0.0 192.168.200.200 track 1
  IP route 0.0.0.0 0.0.0.0 192.168.200.150 track 2
  Route IP 10.10.10.1 255.255.255.252 192.168.200.150

  IP extended ACL-Comcast-traffic access list
  object-group permit COMCAST_Routed 192.168.200.0 0.0.0.255 any

  RM-Comcast-traffic route map permit 1
  corresponds to the IP ACL-Comcast-traffic
  set ip next-hop check availability 10.10.10.2 1 excerpt 2

  object-group service COMCAST_Routed
  Eq ftp TCP
  TCP eq www
  TCP eq ftp - data

  ALS IP 1
  ICMP echo - 192.168.200.200
  threshold 2
  timeout of 1000
  frequency 30
  IP SLA annex 1 point of life to always start-time now

  ALS IP 2
  10.10.10.2 ICMP echo
  threshold 2
  timeout of 1000
  frequency 30
  IP SLA annex 2 to always start-time life now

  track 1 accessibility of als 1 ip
  Track 2 accessibility of ALS 2 ip

  I did some tests and the part of failover seems to work but the configuration of the ACB does not work as expected. Only thing missing track 1 each time delivering properly and trak 2 is declining.

  Any help clarifying the feasibility and practicality of this configuration is greatly appreciated.

  Dan

  Adding a value of AD won't fix ACB (sorry if I gave that impression).

  On the client that you are testing with can you look it's the example routing table ' netstat - nr ' example and see what it shows in terms of gateways.

  It can be that you want to debug your routing policy to see what is happening on the router.

  Jon

• Human workflow - rules based routing with Ad-Hoc routing and information request

  If business rules routing database ("Advanced Routing") is used for participant assignment to a human mission, how business rules are affected by actions requires information and Ad-Hoc routing of the participants?
  
  Ignore the rules during these special actions, or is there a way to access these special types participating in the RuleSet and react accordingly?

  Hello

  When "Advance routing" is used for the assignment of the task; the task service says the folllowing fact types: task, PreviousOutcome, and TaskAction to the rules engine. These facts give all the information required on the job (as a result of the participant, the task step.. etc)

  Now in the basis of rules defined; We have rules according to our condition that can extract information from types in fact invoked and entrust to the participant required/next.

  Also note that we write the rules in advance only in exceptional cases.

  For example; Let's say that all participants have 2 possible results [COMPLETE, recheck]. We have defined the ideal as task routing workflow:
  Participant A-> Participant B-> c Participant. This is the throughput when all participants selects "COMPLETE."

  Suppose now selects B result as "Double CHECK" then the task should return to. So for this case, we need to write a rule in advance.

  Pls refer to the code example in the: http://download.oracle.com/technology/sample_code/hwf/workflow-106-IterativeDesign.zip

  Dev also guide: refer to the section 28.3.7.2 http://download.oracle.com/docs/cd/E14571_01/integration.1111/e10224/bp_hwfmodel.htm#BABBFEJJ

  Thank you

  Published by: Kania on May 19, 2010 02:41

• Routing based on the source in PIX

  Hello

  I am trying to find a way to make a routing based on the PIX source to get the same functionality of the 'road-map' command in Cisco routers; is there an equivalent command for this PIX 7.x version? I remember that it was not available in previous versions and I couldn't discover version 7.x, also, but I wanted to confirm with you double.

  Thanking in advance.

  Kind regards

  Haitham

  Haitham,

  Your interpretation is correct, Policy Based Routing is not supported on the Pix Firewall.

  Also, don't you confused when you see the command option 'road-map' Pix 6.3 and higher. This command is applicable only when redistributing routes into OSPF.

  6.3 Pix command reference:

  http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/PIX/pix_sw/v_63/cmdref/Mr.htm#wp1017196

  Command reference 7.2 pix

  http://www.Cisco.com/univercd/CC/TD/doc/product/multisec/asa_sw/v_7_2/cmd_ref/qr_711.htm#wp1648744

  Let me know if it helps.

  Kind regards

  Arul

• IOS router with several groups of VPN

  Similar to a discussion, I read with a PIX firewall, I need to set up multiple VPN groups on IOS-based router to support different levels of security. For example, a VPN "GUESTS" group would only have access to 1 server, while the VPN "ADMIN" group would have access to the entire network.

  With a PIX firewall, you can simply specify additional group names (for example "group1 vpngroup',"vpngroup group2"and so on). However, I have not been able to find how do with IOS-based router (Cisco 831 12.3 (4) T) running.

  For example, I have these dynamic groups of VPN:

  the crypto isakmp client configuration group of GUESTS

  password1 keys

  DNS 10.1.1.1

  swimming POOL1-IP pool

  Configuration group customer crypto isakmp ADMIN

  key password2

  DNS 10.1.1.1

  POOL2-IP pool

  ! - Users get authenticated to a RADIUS server

  list of card crypto CRYPTOMAP customer VPN-USER authentication

  ! - The problem is that line taken out. "I can only specify an allow list (a group name) for this encryption card!)

  card crypto CRYPTOMAP ADMIN isakmp authorization list

  I did research on this site, Google, usenet and ORC and have not found what I'm looking for. Any ideas?

  Thank you.

  Command 'isakmp authorization list' you do it reference does not refer to the VPN group, it refers to a whitelist of AAA name which States that the groups are configured locally. Change to the following:

  AAA authorization groupauthor LAN

  card crypto isakmp authorization list groupauthor CRYPTOMAP

  The "groupauthor" is just a label that matches the encryption to the aaa command. Your clients VPN will be accompanied to a specific group depends on what group name, they set up in their VPN client.

  See http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080095106.shtml for details, it's a HW 3002 client to a router but the router config is exactly the same thing.

• ASA 5512 different route by VPN Group (VRF as feature?)

  Hello

  Here's what I'm trying to do.  I have a Nexus 7000 with several of the VRF, simplicity lets call it A VRF, VRF B, VRF C. VRF A simulates a network of management and VRF B and C are customer environments.  VRF B and C VRF will be overlap of intellectual property.  I have a 5512 ASA I use VPN in the environment, it also provides internet access for applications that run in A VRF, (VRF B and C do not require internet access).  What I want to do is to implement three different access VPN on the SAA even, where some users will have VPN 1 group policy and have access to the VRF has, but should not have access to the VRF B or C, same VPN 2 should have access to the VRF B and 3 C VRF VPN.

  My original intent was to configure the ASA with 0/0 to internet Gig, Gig 0/1 A VRF and then Gig 0/2 sub interfaced so 0/2.10 is 10.10.10.1 in VLAN 101 that connects VRF B, 0/2.11 concert would be 10.10.10.1 in 102 VLAN that connects to VRF C.  However, better than I can tell ASA 5512 is not aware of VRF (or is it just a separate license, I would need?) and as such, it is not possible.

  Next similar reflection, but instad configure as 0/2.10 is 10.10.10.1 in VLAN 101 that connects VRF B, 0/2.11 concert would be 10.10.11.1 in 102 VLAN that connects to VRF C. However, I throw it here, issues as the VPN 2 and 3 need access to devices with the same IP address, which is even better I can tell, the ASA is not able to make Policy based routing.

  Is there another way to do this? Is there something that I am on?
  I need to make sure that the 2A VPN users can access services available in the VRF B, they should not have the ability to access (intentionally or not) services on VRF A or C, nor the users VPN 1 or 3.

  I have also a 5585 ASA w / context multi license, I can then creates a context by VRF (that I have), I then interfaces in each correct the VRF-related context.  However, I do not think that I can terminate VPN here, best I can tell when in multi-contexte mode you can not have VPN license.

  Your research led you to conclude correctly that the ASA is neither compatible with VRF nor can it be based on routing strategies. Also, you cannot terminate remote access VPN on an ASA multi-contexte.

  Doing what you ask a single AAS is a bit problematic. If you had a unique internal addresses, the subinterfaces would work fine.

  Because it looks like you have a virtualization infrastructure, have you considered using the low cost ASAv? You could run multiple instances, one per VRF. Everyone knows only the public address space and its respective assocated VRF.

• Cisco WSA: Is it possible to use the web proxy in transparent mode without WCCP router?

  Hello!

  I would like to use Cisco WSA as a web proxy in a transparent manner (without any configuration of client web browsers), but I do not have a WCCP router. So, is it possible?

  If so, how?

  Thank you

  Stephane Walker

  Hi, Stéphane

  The only alternative to WCCP is ACB (the policy-based routing). With a simple configuration on the router, you can redirect traffic defined also interesting by the WSA access list. On the ASO you must configure transparent mode (security-> Web Proxy Services-> the settings of-> Mode Proxy: Transparent). You should also make sure proxy listens on port 80 and HTTPS proxy is enabled (on port 443) If you want to redirect HTTPS traffic as well.

  Cisco router configuration example

  !
  access-list 110 permit tcp any any eq www
  !
  proxy-redirect allowed route map 10
  corresponds to the IP 110
  set ip next-hop xxx.xxx.xxx.xxx
  !
  interface ethernet0/1
  proxy-redirect IP policy route map
  !

  xxx.xxx.xxx.xxx is the IP address of the proxy in such a case and access-list 110 sets web traffic (HTTP-TCP/80) also interesting.

  The biggest drawback of this solution is the lack of troubleshooting. If the proxy will go down because some reason router will keep redirecting traffic causing the cutoff of internet access.

  Cisco routers out material should also have an option to configure policy routing based.

  / Artur

  PS. It is not possible to place the WSA online between the clients and the internet.

• The IPSec VPN and routing

  Hello

  I was polishing my PSAB on since I am currently in a job where I can't touch a lot of this stuff.  By a laboratory set up a site to IPSec VPN between two routers IOS.

  For example:

  https://www.Cisco.com/en/us/products/ps9422/products_configuration_example09186a0080ba1d0a.shtml

  The routers must specify how to route to the protected network.  Although I guess they could just use a default route to 172.17.1.2 as well.

  for example IP road 10.10.10.0 255.255.255.0 172.17.1.2

  172.17.1.2 won't have the slightest clue as to how to route for 10.10.10.0

  Even in an example with a tunnel between the ASA and the router IOS ASA failed to indicate a direct route to the subnet protected from 10.20.10.0, but it must still have a default route configuration. (https://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080a9a7a3.shtml#CLI)

  So it is basically saying, to reach the protected subnet to resolve the next hop on a device that has no idea where this subnet is anyway.  Shouldn't all the peer IP-based routing, and not on a subnet that routers between the two should have no idea they exist?

  The main hypothesis that I have here is that the protected subnets are not accessible unless the VPN tunnel is up.  Most of my experience of the VPN site-to-site is with PIX / ASA, and I've never had to specify a route towards the protected subnet (for example 172.16.228.0).  I guess he just used his default gateway that has an Internet IP belonging to the ISP.  However the ISP has no idea where is 172.16.228.0.

  Edit: I found a thread, do not report with Cisco but IPSec in general, this seems to be the question in case I don't have a lot of sense:

  http://comments.Gmane.org/Gmane.OS.OpenBSD.misc/192986

  He still does not seem logical to me.  If I have a tunnel linking the two class C networks by internet, the only routers having knowledge of these networks are the two counterparts.  Why a course should be (static, dynamic, default etc,) which seems to send traffic to a device that do not know where is the class C networks?  Although I have to take in my example with the 172.17.228.0 my ASA was not actually sends out packets to my ISP gateway with 172.17.228.0 in them.

  The purpose of the trail is * not * to send traffic to your next jump. You are right that the next hop router has no idea what to do with this package. This way is important for the local operation. The router must find the interface of output for the package. 'S done it with the road to the next-hop-router. If you remember that the road to your peer IPSec, your router must do a recursive search routing. After the outging interface is found, traffic is sent to this interface, the card encryption on this interface jumps and protects your traffic that is routed to your IPSec peer.

  --
  Don't stop once you have upgraded your network! Improve the world by lending money to low-income workers:
  http://www.Kiva.org/invitedBy/karsteni

• vCell Setup with two IP addresses and routing

  Hello

  My networking team suggested the following configuration:

  VLAN-Public: first card network load balancing

  VLAN-squatting: second nic load balancer

  VLAN-front: first and second nic vCloud Cell01 and even for vCloud Cell02

  VLAN-Back: vCenter / ESXi / vShieldMgr / SQL / etc.

  Traffic / routing between VLAN-front and back - VLANS are possible.

  Now, I installed vCell01 with two network cards, each one IP address: 192.168.1.1 and 192.168.1.11.

  vCell02 with two network cards, each one IP address: 192.168.1.2 and 192.168.1.12.

  Installation was no problem, connect to SQL went smooth.

  But then I noticed that I could not reach 192.168.1.11 since the vCenter Server. Which makes sense, now that I think of it, given that traffic from the vCenter for 192.168.1.11 lights eth1, but due to the default gateway will leave on eth0. And vCenter probably won't like that.

  My questions:

  -Can I solve this through routing changes to the routing of the vCells table?

  -Should I do a complete change in my configuration / network design?

  -Should I continue and do not worry vCenter being unable to reach 192.168.1.11.

  Advice welcome

  PS: Using CentOS 6.5

  Concerning

  Gabrié

  I ran into a similar problem with asymmetric routing when I first set up my vCloud multi-homed cells.  In my case, the IP address for each interface was on a different subnet, but the approach is the same for your scenario.  You must add that some policy based routing using iproute2 commands rules.

  Here's a great article that describes the problem and the solution: http://www.linuxjournal.com/article/7291

  For your question, you probably want something like this:

  Cell01:

  / sbin/IP flush table 1 road

  / sbin/IP flush table 2 road

  / sbin/IP route add default via dev eth0 table 1

  / sbin/IP route add default via dev eth1 table 2

  / sbin/IP rule add from 192.168.1.1/32 table priority 1 500

  / sbin/IP rule add the priority of 192.168.1.11/32 table 2 600

  Cell02:

  / sbin/IP flush table 1 road

  / sbin/IP flush table 2 road

  / sbin/IP route add default via dev eth0 table 1

  / sbin/IP route add default via dev eth1 table 2

  / sbin/IP rule add from 192.168.1.2/32 table priority 1 500

  / sbin/IP rule add the priority of 192.168.1.12/32 table 2 600

  Good luck!

• Types of routing

  Hello
  
  If someone could explain the differences between content, routing function, context based routing and dynamic routing
  
  Thank you
  Barros.

  Hi Baro,

  Content based routing - content-based routing is intended to route messages, not by a specified destination, but by the actual content of the message itself. In a typical application, a message is routed by opening upwards and by applying a set of rules for its content in order to determine the parties interested in its content.

  Context based routing - routing based on the source of the message (for example, IP)

  Dynamic routing - in dynamic routing, a message is analyzed by using controls conditional in the statements of conditional branches, to retrieve the value of a data element or multiple data elements that determine the routing logic. Destinations service different cases are assigned to the different crossings as a result of this conditional control. The message is dynamically routed to one of multiple business services destination based on the value of the data item. Transformations can be applied to the response message goes to one or more of these destinations according to the needs of business.

  Kind regards
  Anuj

• Get the website to reset the connection

  I hardly need this often, but I have never managed to solve the problem I have. The WRT120N router works fine. However, the procedure to tell him that I should connect to Web site the router first with no login and "admin" as password, to set up a new connection in placec of the obvious "admin" and a new password. I have never been able to reset the login for the admin, but I put a password, and then when I tried to log in, the page does not accept the admin and the password.

  I've reconfigured the router from scratch, so to speak, more than once and continued to have this problem. Here again, it seems that I can set a password but never in the right place to change the user name of the obvious administrator.

  Help appreciated gratefully.

  Very well. On a Linksys router, you will encounter two types of passwords. The router password is used to access the page browser-based router. While the wireless password is used to connect your computers wireless or peripheral to the wireless network.

  Now, if you want to access page browser-based router, you'll quickly with the user name and password. By default, the name of the user-password is admin-admin or leave the username blank and type admin in the password box. On a Linksys router, you can change the password and the user name will always be using the default administrator or leave blank. If you access a page of browser-based router and you encounter an error saying that the router requires the user name and password, you must type admin in the user name and the password can be (default) admin or the password that you set on the router.

  To reset changes to the password because you cannot access the page browser-based, you will need to do a factory reset on the router by pressing the reset for 15 seconds (the red button under the router) button. After the reset of the router, you will be able to access the page based on a browser using the value default admin-admin or leaving the vacuum-admin username.

• Command not accepted on switch 3750 WCCP

  Hello

  I'm trying to configure the redirection of WCCP using L2 forwarding on a stack of 3750, but the 'ip wccp web cache' command is not accepted.

  Can you please help?

   Stack_3750X(config)#ip wccp                        ^ % Invalid input detected at '^' marker.

  Using the version 15.0

   Stack_3750X#sh ver Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.0(2)SE6, RELEASE SOFTWARE (fc2)

  SDM prefer routing active.

   Stack_3750X#sh sdm prefer The current template is "desktop routing" template. The selected template optimizes the resources in the switch to support this level of features for 8 routed interfaces and 1024 VLANs. number of unicast mac addresses: 3K number of IPv4 IGMP groups + multicast routes: 1K number of IPv4 unicast routes: 10.875k number of directly-connected IPv4 hosts: 3K number of indirect IPv4 routes: 7.875k number of IPv6 multicast groups: 64 number of IPv6 unicast routes: 32 number of directly-connected IPv6 addresses: 0 number of indirect IPv6 unicast routes: 32 number of IPv4 policy based routing aces: 0.5K number of IPv4/MAC qos aces: 0.375k number of IPv4/MAC security aces: 0.875k number of IPv6 policy based routing aces: 0 number of IPv6 qos aces: 0 number of IPv6 security aces: 58

  Here is the license:

   Stack_3750X#sh license Index 1 Feature: ipservices Period left: Life time License Type: PermanentRightToUse License State: Active, Not in Use, EULA not accepted License Priority: None License Count: Non-Counted Index 2 Feature: ipbase Period left: Life time License Type: Permanent License State: Active, In Use License Priority: Medium License Count: Non-Counted Index 3 Feature: lanbase Period left: 0 minute 0 second

  Hi ipbase can't stand the wccp you need ipservices or license advanced

  http://www.Cisco.com/c/en/us/support/docs/Security/Web-security-appliance/118006-configure-WCCP-00.html

  Mark

• Several VLANs with multiple gateways

  Hello.

  Got a SF500 in Layer 3 mode, 5 VLANS air conditioned and have their own subnet.

  VLAN 10 = 192.168.10.0/24

  VLAN 100 = 192.168.100.0/24

  VLAN 200 = 192.168.200.0/24

  VLAN 201 = 192.168.201.0/24

  VLAN 202 = 192.168.202.0/24

  We have a gateway on Vlan 10 (192.168.10.1), which all VLANS can see & access (because of intervlan routing), and this currently allows for vlan 10 for access to the internet.

  I want to vlan 100 to be able to access the internet through this gateway, although other VLAN (200,201,202), uses a different gateway located on the vlan 200 subnet.

  Of course, the gateway must be in the subnet.  I can't assign the default gateway of a machine on vlan 100, the gateway ip address on vlan 10.

  If I point the virtual interface default gateway in its subnet (for example, 192.168.100.254), he also does not know how to get to the internet, even if she can see the entry door (I can access a web page it hosts).

  So the question is this:

  Traffic 100 VLANs can be routed on the SF500 to use the gateway on the vlan 10? (outside the default gateway of the switch).

  If this is not possible with the SF500, what do I need to make it work?

  Thank you very much.

  Hi André,.

  I understand what you want to achieve, so in your case, we need a switch with PBR (policy based routing) capacity that allow to match the IP source address and action hope then the IP address of the gateway.

  This feature is not implemented in SMB product, but for devices of the company, we have this feature as Catalyst 3750

  Please note or marked as replied to help other customers of Cisco

  Greetings

  Mehdi

• Confusion on the CRS and the IPCC

  Hello

  Can someone tell me what the difference is when between CRS and IPCC express. I think they're both packages of programs. IPCC express includes CTI ACD IVR but CRS includes IPCC IQM IVR. is this correct.? CRS includes a version of the full IPCC?

  CRS = IPCC Express.

  Cisco crossed a few names of marketing before arriving at the IPCC Express.

  IPCC Express has 3 levels of functionality controlled by licensing:

  Standard - full IVR/ACD... call base and collect.

  Enhanced - Std more skills based routing and much more

  Premium - integration Std, Enchd, as well as DB for self-service applications (think Bank on the type of phone apps).

  -Jon