<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Cisco forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/equip,cis</link>
<description>Cisco forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Mon, 23 Nov 2009 12:02:54 EDT</pubDate>
<lastBuildDate>Mon, 23 Nov 2009 12:02:54 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>Vlan Assignments issues on ASA5505-SEC-BUN-K9</title>
<link>http://www.dslreports.com/forum/remark,23375506</link>
<description><![CDATA[I'm trying to setup a new ASA5505-SEC-BUN-K9 but seem to be having issues assigning VLANs to ethernet ports 1-7

Using the command line you can assign port-0 (outside) to VLAN2. Ports 1-7 are on the inside are to take up VLAN1.Even though the virtual VLAN1 interface is created and ports 1-7 are assigned to it via switchport-access-vlan1 command, the show-run indicates that the ports are still not assigned.

I've also used the SDM and even though the web-interface shows VLAN are assigned the sh-run output from SDM indicates this is not so. Is this an IOS bug ?

ASA Version 8.2(1) 
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0 
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 41.x.x.x 255.255.255.248 
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
route inside 0.0.0.0 0.0.0.0 41.x.x.x 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 192.168.1.5-192.168.1.254 inside]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23375506</guid>
<pubDate>2009-11-21 15:11:57</pubDate>
</item>

<item>
<title>Building Lab Ideas</title>
<link>http://www.dslreports.com/forum/remark,23360709</link>
<description><![CDATA[3x 3550 EMI/SMI
2x 3550XL EN PWR

4x 3620

4x 2621XM
2x 2650
4x 2621

and a few more to spare..

Just trying to figure out how I want to set it up.  Gives me some real options to setup some nice scenarios.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23360709</guid>
<pubDate>2009-11-18 16:31:50</pubDate>
</item>

<item>
<title>[H/W] Weird ASA 5505 DHCP Relay &#x22;Bug&#x22;?</title>
<link>http://www.dslreports.com/forum/remark,23382770</link>
<description><![CDATA[Wondering if anyone has ever seen this behavior.  I am running a 5505 w/ security + license.  I have a few vlans that I am doing dhcp relay for.  It has been rock solid for a couple of years, however, I have noticed on a new vlan that I have recently added, issues with the relay.  Specifically, the dhcp requests going to the outside interface instead of the inside.  This has been confirmed with packet captures, and it happens intermittently (will work properly for days, then all of the sudden, starts creating flows to the outside).  I am running 8.0.4(32).  I did find this bug report CSCsq87533 - DHCP Client not receiving DHCP ACK during addr renewal with DHCP relay.  It says that the bug was fixed in 8.0.5.  I was having the issue on Friday night, so I installed 8.0.5, and experienced the same thing.  Then I went to 8.2.1 and still no luck.  After that, I went back to 8.0.4(32) since it is otherwise stable, and it started working again.  No change in configuration during any of the software changes.  This has happened twice now.  The first time, multiple reboots of the ASA fixed it.  It is my home firewall, so I don't have smartnet on it, I was just wondering if anyone has seen this before.  It isn't a huge deal, as the vlan it is acting up on is my voice network and I can just run dhcp on my CME box if I have to.  My dhcp relay config couldn't be more straightforward:

dhcprelay server 172.16.252.20 INSIDE
dhcprelay enable VOICE
dhcprelay enable BNET
dhcprelay enable WIRELESS
dhcprelay timeout 30

Thanks in advance.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23382770</guid>
<pubDate>2009-11-23 10:56:43</pubDate>
</item>

<item>
<title>No More Messing Around...I&#x27;m Doing It (BCMSN)</title>
<link>http://www.dslreports.com/forum/remark,23360588</link>
<description><![CDATA[Okay, I've pissed around for the better part of 6 months preparing "on and off" for the BCMSN.  I "punked out" and got Network+ and Server+ in the interim, but I'm serious now.

I've been using  a site called http://www.how2pass.com and it's quite a good prep site.  There's one or two questions that have thrown me and I wonder if anyone can push some clarification my way.  :)

Much appreciated if y'all have the time...

Jay]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23360588</guid>
<pubDate>2009-11-18 16:04:55</pubDate>
</item>

<item>
<title>Debugging PPPoE session establishement</title>
<link>http://www.dslreports.com/forum/remark,23378053</link>
<description><![CDATA[This is on a 871w router.  Version 12.4(15)T9, RELEASE SOFTWARE (fc5)

While my ISP seemed to be experiencing problems/maintenance or the monkeys in the routers decided to take a break: (akaL: PPPoE link unable to be established)

I tried the following:
router2#show debug
PPPoE:
  PPPoE protocol events debugging is on
  PPPoE elog debugging is on
PPP:
  PPP authentication debugging is on
  PPP protocol negotiation debugging is on

However, the information being produced lacked some information such as the name of the BAS/BRAS at the other end of the DSL line. It does show its ethernet address though.

Also, once the session has been established:

router2#show pppoe session all
Total PPPoE sessions 1

session id: 7425
local MAC address: 0026.0b6b.7e4d, remote MAC address: 0090.1aa0.a25b
virtual access interface: Vi1, outgoing interface: Fa4
    38060819 packets sent, 40504811 received
    23822114668 bytes sent, 36994062836 received

Again, it doesn't give me the name of the BAS/BRAS to which I am pasing through, only its ethernet address. (0090 is a juniper box which Bell Canada uses as BAS/BRAS).

When a link is having difficulty being established, what are the recommended commands to log the effort with more detail ? 

I tried the debug pppoe packets, but it only shows the first few bytes of packets, so I guess the name of the BAS/BRAS gets snipped out instead of being printed. Is there some command to get those debug commands to format the full packets ?

Or is the Cisco debugging just not good enough and once has to use wireshark to sniff packlets between the router and the adsl modem to get an idea of what is really going on ?

(note my old el-cheapo Netgear RT314 was able to get me the BAS name when I enabled tracing).]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23378053</guid>
<pubDate>2009-11-22 05:11:55</pubDate>
</item>

<item>
<title>[HELP] Cisco 1721 question regarding WIC</title>
<link>http://www.dslreports.com/forum/remark,23374479</link>
<description><![CDATA[Hi everyone,

I bought mini lab setup on Ebay, it consists of the following hardware: 1721 router, 2924 XL EN switch.

I also have a ZyXEL DSL modem/router/switch from my ISP.

The Router has the following WIC on WIC0: WIC-1B-S/T.

The setup I want is:

DSL(modem/router/switch) -> 1721 router -> 2924 switch -> laptop/computers

After some research on the Internet, I found out that I will need a WIC-1ADSL or a WIC-1ENET. If the modem that I have can be set to solely perform modem function, I would be able to use the WIC-1ADSL as the dialer. Is this true? Or do I need a WIC-1ENET to act as a WAN port? The WIC-1B-S/T, I think I have no use for it, or I don't know what to use it for. If someone can tell me how to use this WIC would also be nice.

Can someone shed some light on this for me?

Hope for your support. :) Thanks!

Gideon]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23374479</guid>
<pubDate>2009-11-21 09:13:04</pubDate>
</item>

<item>
<title>corp -&#x3E; internet -&#x3E; 1751 -&#x3E; 7965 phone</title>
<link>http://www.dslreports.com/forum/remark,23372998</link>
<description><![CDATA[Hey guys,

I've got a 1751-v with two WIC-1ENET modules. 
IOS = c1700-k9o3sy7-mz.124-11.t.bin

I recently relocated from my corporate office to a home-based office and ended up bringing my cisco 7965 phone with me, with power-supply -- I'd really like to make use of the phone as I'm getting tired of using my soft-phone.  

My goal is to use the second ethernet interface for sort of a "hard VPN" line into my corporate office, eliminating the need to fire up my cisco vpn client on my computer.  Is there a way for me to have the router negotiate with our corporate network as the client software normally would on my pc?  
  
I have okay (at best) experience with Cisco routers.. limited VPN exposure, but was wondering if this was even possible.

Thanks!

Dan]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23372998</guid>
<pubDate>2009-11-20 20:57:47</pubDate>
</item>

<item>
<title>[Config] Using tunnel to join vlans (Xconnet / pseudowire</title>
<link>http://www.dslreports.com/forum/remark,23365445</link>
<description><![CDATA[Hi Everyone,
A brief description of what I am trying to do - We have a network (Lets call it public network, vlan 100) which is not on our inside network (it's behind a router + ISA firewall). For disaster recovery purposes, we want to install servers on this network, at another site (Lets call this inside network, vlan 20). We don't want to do this via bringing the Vlan across, due to security implications, and also that the Public network is behind an ISA.

I have been trying to setup a tunnel to bridge the 2. My idea, is, setup vlan 100 on the inside network, with an ip on that network. I will have a Cisco 2800 series router hanging off the switch, on vlan 100 on one port, vlan 20 the other, with a routable loopback interface.

I Will then have another Cisco 2800 series router hanging off the Public network, with 1 interface on vlan 100, and the other interface on a seperate network (inside network, different vlan), again with loopback interface. This was done as the ISA wasn't playing ball, blocking traffic, and we have got desperate, so are bypassing the ISA. We will only route tunnel traffic through this back door, everything else is routed the normal way through the ISA.

Tunnel seems to be up, but I can't work out how to route tunnel traffic through the tunnel! Any chance anyone has any ideas?

Cheers!

Definitions:
192.168.1.1 (Loopback int of router 1)
192.168.2.1 (Loopback int of router 2)
Vlan 100 (This is the Vlan that I want to tunnel to different network)
Vlan 20 (This is local vlan of site where i want server
192.168.100.132  (This is IP of the server I want to install)

ROUTER 1:

l2tp-class vlantunnel1
 authentication
 password passwordexample
 cookie size 8

pseudowire-class vlantunnel1
 encapsulation l2tpv3
 protocol l2tpv3 vlantunnel1
 ip local interface Loopback0

bridge irb
!
!
!
interface Loopback0
 ip address 192.168.1.1 255.255.255.255
!
interface FastEthernet0/0
 ip address bb.bb.bb.bb (used to talk to Public Net Router)
 duplex full
 speed 10
!
interface FastEthernet0/0.100
 encapsulation dot1Q 100
 no cdp enable
 xconnect 192.168.2.1 1 pw-class vlantunnel1

interface FastEthernet0/1
 ip address aa.aa.aa.aa (inside network ip address used to talk bypass isa)
 duplex auto
 speed auto
!
ip default-gateway 192.168.100.254  (gateway of vlan 100)
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 aa.aa.aa.aa  (This is the gateway of fa0/0 address' network)
ip route 192.168.100.0 255.255.255.0 bb.bb.bb.bb
ip route 192.168.100.132 255.255.255.255 192.168.2.1  (This is the server I want off site - this route is what I don't think is right)

bridge 1 protocol ieee

ROUTER 2:

l2tp-class vlantunnel1
 authentication
 password passwordexample
 cookie size 8

pseudowire-class vlantunnel1
 encapsulation l2tpv3
 protocol l2tpv3 vlantunnel1
 ip local interface Loopback0

interface Loopback0
 ip address 192.168.2.1 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/0.100
 encapsulation dot1Q 100
 no cdp enable
 xconnect 192.168.1.1 1 pw-class vlantunnel1
!
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/1.20
 encapsulation dot1Q 20
 ip address cc.cc.cc.cc (IP of local LAN, routable, and talking to network)
!
ip default-gateway dd.dd.dd.dd (IP of vlan 20's default gateway)
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 dd.dd.dd.dd

bridge 1 protocol ieee]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23365445</guid>
<pubDate>2009-11-19 13:58:34</pubDate>
</item>

<item>
<title>please If you are cisco engineer I need help it is urgent</title>
<link>http://www.dslreports.com/forum/remark,23353303</link>
<description><![CDATA[This is the plan. and if you can help in this you are the best.

Main Office
My plan is to use a Cisco 2811 router with 3 Ethernet interfaces. 1st Ethernet port connects to Layer 3 Cisco 3560 switch that it has 2 VLANs . VLAN2(172.20.0.0),VLAN3 (172.10.0.0) and 2nd Ethernet connects to WAN via CPE router(10.4.1.0) and then have the 3rd interface connect to my cable modem ISP (77.42.246.0). Simple right, that what I thought first.
I wanted clients on VLAN 2 to be able to go on the internet and be able to talk to clients on the other VLANs. And VLAN 3 should only have access to the internet.
Branch office
Router is 2621, with 3 FE interfaces LAN, WAN , DSL. VLAN 2 can access main office and internet , VLAN 3 can only access the internet
In each site currently I have the following:

Branch Office

172.21.1.0 &172.11.1.0
LAN &#150;L2 Cisco switch 2960========== VLAN 2, VLAN 3
^
|
|Trunk
|
|
E0/1 (172.21.1.X)
Router Cisco2811 (Branch office) E0/3 (77.42.244.17)- -- - - -244.18 DSL---Internet
E0/0(WAN-10.4.2.2)
|
|
|
|
|CPE 10.4.2.1
| WAN CLOUD all static IP (10.4.0.0)
|CPE 10.4.1.1
|
|
|
|
| MAIN Office
|
E0/0 (10.4.1.2)
Router Cisco2811 (MAIN office)-E0/3-(77.42.246.17) - - - - - 246.18 DSL-------Internet
E0/1 (192.168.100.1)
|
|
|
| outside E0 192.168.100.2)
Firewall ASA5505
| inside interface1(172.20.1.254)
|
|
|
LAN L3 Cisco switch 3650 = VLAN 2 172.20.1.0, VLAN 3 172.10.1.0

Note:
&#149; Each location will have its own DSL to connect to the internet
&#149; VLAN 2 can talk to WAN, MAIN office servers and internet
&#149; VLAN 3 can only talk to internet cannot talk to WAN or VLAN 2

Please what is the best way to configure this anyone have configuration idea or help me in configuration of the router switch and Firewall. do i need routing statement on the DSL router to be able to access the internet since we using static everywhere.

How the ASA 5505 should be setup to have traffic from all VLAN access the internet (NAT, Access list.. )

Your help in this matter is highly appreciated.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23353303</guid>
<pubDate>2009-11-17 10:40:46</pubDate>
</item>

<item>
<title>[Config] is it possible: 2 goups of LAN go to 2 internet connect</title>
<link>http://www.dslreports.com/forum/remark,23346295</link>
<description><![CDATA[is it possible for 2 groups of LAN accessing to 2 internet connections with ASA5510 ? 
I have 2 groups: for group 1 I want them to use internet connection1 . and the group 2 I want them to use internet connection2. 
is it possible and how to config? 
please suggest
Thank you]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23346295</guid>
<pubDate>2009-11-15 22:01:48</pubDate>
</item>

</channel>
</rss>
