Tag Info

New answers tagged

0

One-to-One Nat is needed... so, you'll need to make sure that you create: ip nat inside source static 172.16.0.30 2.2.1.2 You'll also want to remove your PAT translation ip nat inside source static tcp 172.16.0.30 25 2.2.1.2 25 extendable ip nat inside source static tcp 172.16.0.30 80 2.2.1.2 80 extendable ip nat inside source static tcp 172.16.0.30 443 ...


1

Translate a whole network range is possible by using static NAT (aka Net Static). Anyway the problem here is that old network is a /8, while the new can be 172.16.0.0/12 at most (you forgot to specify this). So, unless you want to specify the translation of each IP needed, a good idea could be to select a subnet of 10.0.0.0/8 with the same size of your new ...


0

Depending by the exact version of the 3750 and of the IOS in your devices, BGP could run on them. A basic BGP config is not rocket science, but of course you need to understand the design you want to deploy first. It seems that your switches are already routing between VLANs, but this is almost by default, do you have a static default routing only or any ...


0

Notwithstanding your point about security, the more I think about it, the more convinced I am you can't wait until later. The risk, if you do, is that someone will brick your router with the latest zero-day. Add to your list: Change the router password before you plug it in to the network. Use as long a password as the router will take. Check the CVE ...


0

Since I know that VMware strips VLAN assignments unless configured properly I would start there. If you have the new switch using VLAN and the old switch using direct ports then this would be the problem. In VMware you need to set the virtual switch to use all VLAN ports. Since you are only having problems with VMware I would pay close attention to the ...


0

I reply as new answer because I can't comment up there. Well after two days working on that issue I see the problem is using # character for banner. If you switch to ., it works. This is because the hash character # is used as root, so RANCID believes is already logged on (No password to access) Sharing knowledge :)


0

I had a similar issue and it was caused by multiple VMs being configured with the same MAC-address. Just generating a new one solved the issue.


0

I created a static route to the public IP Address on interface fa0/0. When I do a show ip int brief on the cisco router, I get a 192.168.1.254 IP address. I connected a laptop to interface fa0/1 received a 10.1.1.1.11 as IP address from DHCP on the CISCO router and I'm able to get out on the internet. So look like its working.


0

Regardless of where the ISP routing function is situated, in local or remote equipment, it cannot function as a router without an L3 address space to contain other nodes in addition to itself. Bridging (aka L2) just places the L3 routing function farther away, but the L3 space must still be congruent with both the router and your gateway node. So, if the ...


0

I'd second RANCID. You can run it on a variety of free OS's. The Ubuntu documentation for it is fairly succinct and easy to follow, and points you to the other packages needed to make it work as expected, so I'd just use Ubuntu for it. In addition to getting automatic config backups, RANCID will alert you to changes you might not have been aware of. It ...


0

Since you apply the route-map to a vlan interface you should not have to match on ip addresses in the route-map. I haven't tested this but if you have IOS 15.4(3)M or later you could try with "match track " in your route-maps to only set the next-hop if the track object returns status ok. So if you have a default route configured it will fall back on that ...


0

Would help to see full configuration of router and switches or atleast interface configuration of connected ports. With that said it's unclear if port Fa0/7 on IDF1-SW is configured as a trunk port since you say that port 1 and 24 are trunks. Verify that there is a trunk link that's up between the switches and between the switch and router and that vlan ...


1

EIGRP falls under the category of distance vector routing protocols which means that it "routes by rumor". So the topology table does only contain information which it has received from its neighbors which is not necessarily all information about the network since distance vector protocols only tell their neighbors about the best routes as opposed to link ...


0

Might be that I've misunderstood your problem but it sounds like you can't even ping destinations on the Internet from your Cisco router which then would be the main problem and not NAT. Since you can see translations with "show ip NAT translations" it sounds like that part of the config is fixed. Try to ping destinations on the Internet from a source ...


1

Without knowing if you have other switches and which switch is the root bridge I can't give you a specific answer. with spanning-tree vlan 2-400 priority 8192 you lower the priority for Sw1 for vlan 2-400 which means it will become the root bridge unless there exists a switch with lower priority (lowest priority becomes root bridge). So if Sw1 was not ...


0

I am not sure that there is a way to force spanning tree to pick a specific link, since it is supposed to be a self managing protocol. This document here provides some information regarding the VSS breakdown dual active scenario that you describe and the issues it causes. ...


1

Im guessing the AT&T has a LAN side IP address, in which case you need to create a default route on the cisco router that sends all traffic with a destination of unknown networks to the lan side interface on the AT&T box. ip route 0.0.0.0 0.0.0.0 IPOFAT&TLANINTERFACE This means the next hop of any 'unknown network' traffic such as traffic to ...


1

I would assume that the problem is in your routing table. E.g., ip route 10.1.1.0 255.255.255.0 FastEthernet0/0 ip route 10.1.1.0 255.255.255.0 192.168.1.0 According to these commands, all IP packets to 10.1.1.0 network will be redirected either to FastEthernet0/0 (which means back to 192.168.1.111) or to 192.168.1.0 (which probably means nowhere, since ...


0

Have you enabled directed-broadcast on the incoming interface? http://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/91672-catl3-wol-vlans.html#WOL


0

Okay, so here's what I was able to find wrong with the configuration file above: 1) the configuration of interface fa0/0 was missing a mask and therefore not setting up properly 2) setting of of fa0/1/0-3 was missing a 'no shut' command and therefore they weren't coming up. 3) Vlan1 was missing a no shut command 4) I'm considering switching the default ...


0

You have two options here. A. Trunk a VLAN for your public IP range straight to the Proxmox hosts which will allow you to connect a vNIC on your VM's directly to the public network with the IP's you have. B. Use SNAT on your ASA (If the license supports it) to 1:1 map your public addresses to the LAN addresses of your VM's.


0

I tend to tcpdump the bejesus out of anything I can get my hands on; that usually ties the problem down to either a firewall or a network link. I don't run devices I can't run tcpdump on, though, so if that Cisco turns out to be involved, you might be in trouble there. If it's a network link that's the problem, I usually just start swapping out components ...


1

First, I know this is old'ish but want to clear the record for posterity. You are right to be VERY concerned however neither Cisco nor any other vender seems that interested in fixing the issues you identified. When using RADIUS (or TACACS+) for authentication your password is encrypted using the shared key you configured. Note that the shared key is ...


1

If it is OK for you to change the default gateway of your clients to fail-over, you just need to configure 192.168.10.236/24 on your VDSL router's LAN interface and connect it to your switch (note that if your are using DHCP, you should probably also disable the DHCP server in the VDSL router so you don't have two DHCP servers in the network).


1

I have been using this perl script for about a year now. it's an evolution of several snippets of perl scripts i have found on various forums plus a bit of trial and error but it works well. You will need to install the module Time::HiRes for the usleep, but i found that it helps with execution of commands on remote switches and routers where the response ...


7

Cisco 2960 switches pull in cool air from the sides and exhaust to the rear. Depth-wise they are 1/3 to 1/2 rack-depth (depending on exact model switch and rack). This leaves you very few options. If you mount them unmodified backside of the rack just about the entire switch is in the hot zone. That will only be OK if you have cold airflow running on the ...



Top 50 recent answers are included