Hey Ciscotech,
I configure atm IMA circuits every week or so. Here is a cookie cutter config.
network-clock-participate wic 0
network-clock-participate wic 1
network-clock-select 1 T1 0/0
network-clock-select 2 T1 0/1
network-clock-select 3 T1 0/2
no aaa new-model
ip subnet-zero
ip cef
!
...
Novell 5.0 supports TCP/IP right? If then you should not have a problem with it. Please upload your config on the router and we will trouble shoot it together. I have numerous routers that I can play with the config to make it work. Also make sure that you are using the latest version oc Cisco...
Yes it is. If you have modem hanging off of it. Check this out:
http://www.cisco.com/warp/public/701/6.pdf
http://www.vayner.net/Docs/Cisco/Console%20Modem/Configuring%20a%20Modem%20on%20the%20AUX%20Port%20for%20EXEC%20Dialin%20Connectivity.pdf
This would would be helpful to war dialers...
BKIRLIN,
Can you post the results from a SHOW IP INTERFACES and SHOW INTERFACES commands?
Also make sure the the interfaces network connection are connected to the correct ip subnets.
CiscoGod
Here is more helpful information:
Current configuration:
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname goss-e4-3660
!
!--- Required for Xauth
aaa new-model
AAA authentication login default line
!--- Defines list for...
Rainman,
Please post your entire config. I do not see a "match address" under your crypto map. That tells the router what traffic to encrypt. All this information is located under the link I gave you. If you can post your config I can create a testbed real quick and give you a...
Check this link out, it contains examples of what you are trying to do.
http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Technologies:IPSec&s=Implementation_and_Configuration
Towards the bottem look for a title :
IPSec on Router to Cisco Secure VPN Client
Hope this helps.
CiscoGod
I think the root cause of this issue is due to a viruses running rampant within your network. I found this clever method to avoid NACHI type viruses and to diagnose if this is in fact what is going on.
Credit: http://www.farrokhi.net/blog/archives/2003_08.html
Paste from above archive:
Say...
Hello,
There are two issues that I notice here:
1) You have "ip access-group 1 in and out" on almost all of your interfaces. This filter permits all data packets. Is there a reason why you put this on? This is causing your router to evaluate ALL data packets that traverse this...
Hello, can you post your config online and make sure that you clear any important information first. I have configured PPPoE for SBCGlobal internet PPP DSL connections hopefully this sample config will help you get your router configured for PPPoE.
version 12.2
no service pad
service...
MWTLOKE,
Okay I see a few problems already, you are not authenticating the group in your aaa authorization, which is causing your issue. Put these commands in your config:
1)
aaa authorization network groupauthor local
2) Delete: crypto isakmp policy 30
You arleady have a isakmp policy in...
Can you please upload your config, so I can take a look at it, please strip out any internal and external private info first. I have a 1720 on my desktop configured for the exact setup working flawlesly.
Cisco_God
You need an IOS that supports VPN pass-thru when using NAT. This is not available to all IOS's, if you do a:
show debug ip nat
You see a NAT failure everytime a IPSEC packet tries to make it pass the router.
You can look for an IOS that supports this thru their IOS search online tool...
The problem is that Cisco's CBAC firewall does not support ESMTP and it tagging the sessions as bad smtp commands. CBAC only supports SMTP and it's valid 7 commands. Just take out the SMTP in your "My Firewall" CBAC config and you should be able to get out okay with no problem. Cisco...
By Win2K vpn what do you mean? Need more info. DO you have the Cisco vpn client installed on the Win2k client to terminate to the C1700 (best choice).
Let me, I can help you out with any of your VPN issues.
CiscoGod
Good job, the problem is rather simple. You have a routing problem here. You are giving out a range of 192.19.21.191 thru 192.9.201.199 which is already used for interface FastEthernet0. I you change that your "ip local pool ippool 192.19.21.191 192.9.201.199" to "ip local pool...
You can but it will probably be overkill on the 1721 and 1751 would be better equipped to handle your intended duties. You will also need a IOS that has the IPsec DES or 3DES feature set but more importantly the ability to type this command:
crypto crypto isakmp client configuration group...
Sound's very much like a memory leak issue or a memmory buffer issue on the serial interface. What will really nail it shut,is to do a cisco command:
show memory summary
show memory buffers
show process cpu
Capture the output and run it thru Cisco Output Interpreter for a quick diagnosis of...
Try setting your baud from the lowest to the highest and see if you can get that to work. This is most likely stemming from a misconfigured config register setting which should be set at ox2142 or ox2102 as soon as you get it back up.
Hello,
I have the same predicament, although I cannot get the tape copy to work at all. After further research, I think what we are looking for is the Replication Option which lets us do data staging. Seems simple enough right? Just that I cannot select this option in the Replication tab...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.