<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Cisco forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/equip,cis</link>
<description>Cisco forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Tue, 21 May 2013 08:05:20 EDT</pubDate>
<lastBuildDate>Tue, 21 May 2013 08:05:20 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>6509 Upgrade</title>
<link>http://www.dslreports.com/forum/remark,28296523</link>
<description><![CDATA[Hi All, 

We are purchasing a second core switch and want to have them in a VSS cluster. Both 6509. However- the old 6509 has an older sup and we are upgrading the sup as well to the sup2t. Can we upgrade to sup2t without restating the 6509?

To minimize downtime as much as possible. This is what I had in mind and would appreciate any input. 

1.Setup new switch with hsrp and vss. 
2.Ensure root bridge is still the old 6509, and using rspt.
3. Connect switches together
4. Remove old switch, should fail over to new switch
5.Upgrade old switch
6. Turn off hsrp on new switch
7.Turn off hsrp on old switch
8. Enable vss on second switch
9. Connect old switch back in

Any advise or comments or pitfalls I need to watch out for?

Thanks in advance. ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28296523</guid>
<pubDate>2013-05-16 13:20:07</pubDate>
</item>

<item>
<title>hsrp question</title>
<link>http://www.dslreports.com/forum/remark,28289830</link>
<description><![CDATA[current setup 100mbps data line ip nw 1.1.1.1/27 ( for argument sake) very simple cisco 1800 provided by ISP

Scenario: i'm getting a another 100mbps line for fail-over/ HA . the ISP is giving me 2.2.2.2/30 & 3.3.3.3/29

Problem/Question: If i do this i will have to get two cisco 2900's and manage myself. I have over 100 ipsec tunnels setup using main mode static. Will i be able to setup HSRP/GLBP and always ensure ip 1.1.1.x is always be active and show as the public IP even if one of my 2900's go down? I don't think that's possible, but just asking? I can setup bgp4 with two subnets but can i ensure the 1.1.1.x ip will be the active one at all times. I'm not even sure HSRP and handle two separate subnets let alone GLBP.

MY IDEA: Have the ISP run the new like but use extra ip's from the 1.1.1.1/27 nw and setup HSRP/GLBP this way i knnow for sure i can use a ip on 1. nw and it will always be active even if i loose one of my routers ( of course depending on how HSRP or GLBP is set up)

YOUR ADVISE WOULD BE VERY HELPFUL!
THANKS]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28289830</guid>
<pubDate>2013-05-14 13:51:47</pubDate>
</item>

<item>
<title>Cisco CCNA certification</title>
<link>http://www.dslreports.com/forum/remark,28295477</link>
<description><![CDATA[I am interested in network field and i am preparing for CCNA certification. Does it need any working experience if i want to write this CCNA certification test?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28295477</guid>
<pubDate>2013-05-16 05:12:01</pubDate>
</item>

<item>
<title>Local DNS server on router, which is closed to outside. Help</title>
<link>http://www.dslreports.com/forum/remark,28304936</link>
<description><![CDATA[Hi Guys,

I have configured DNS on my router, but port 53 is open to outside.

What I am trying to achieve:

1) I would like to translate all external IPs to my internal network + internal to internal;
(So my router will act as primary DNS server for internal network)

2) I would like to restrict external lookups on my DNS service (basically just lock it down).

I have managed accomplish similar scenario for NTP service, but I am struggling with DNS.

For example for NTP I have something:

ntp logging
ntp source Dialer0
ntp access-group peer 10 ! My lan1
ntp access-group peer 20 ! My lan2
ntp access-group peer 30 ! My lan3
ntp server 130.88.203.12 prefer
ntp server 130.88.200.4
ntp server 96.47.67.105
ntp server 64.250.229.100
ntp server 69.25.96.13

I have checked and found few samples by enabling ACLs, but I would like to know more clever example if that exist.

As with ACL you can block 53 port, but I would like to block only DNS requests (I am not sure if I am expressed myself correctly)

Many thanks]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28304936</guid>
<pubDate>2013-05-19 18:30:14</pubDate>
</item>

<item>
<title>Cisco 877 losing NTP servers after &#x26;amp;quot;reload&#x26;amp;quot; IOS 12.4</title>
<link>http://www.dslreports.com/forum/remark,28304401</link>
<description><![CDATA[Hi Cisco Gurus,

Anybody had similar problems like this?

I have configured Cisco as NTP server on local vLANs and as NTP client - to retrieve time from time servers. But after "reload" it is losing all configured time server even they are recorded in startup-config.

My startup-config below:

!
ntp logging
ntp access-group peer 10
ntp access-group peer 20
ntp access-group peer 30
ntp server time.nist.gov
ntp server 0.pool.ntp.org
ntp server 1.pool.ntp.org
ntp server 2.pool.ntp.org
!

If I am adding to running-config it works, but after reload - disappears (even if startup-config contains these servers)

See below:

#sh running config

.....
line aux 0
line vty 0 4
 login local
 transport input ssh
 transport output ssh
!
scheduler max-task-time 5000
ntp logging
ntp access-group peer 30
ntp access-group peer 20
ntp access-group peer 10
end

#sh startup-config

...
line aux 0
line vty 0 4
 login local
 transport input ssh
 transport output ssh
!
scheduler max-task-time 5000
ntp logging
ntp access-group peer 10
ntp access-group peer 20
ntp access-group peer 30
ntp server time.nist.gov
ntp server 0.pool.ntp.org
ntp server 1.pool.ntp.org
ntp server 2.pool.ntp.org
end

Any ideas why this is happening? Is this IOS bug or something?

I also have in my config paramters:

"ntp max-associations 20"

but this shouldn't cause any issues.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28304401</guid>
<pubDate>2013-05-19 13:08:58</pubDate>
</item>

<item>
<title>ASA DHCPv6 Client</title>
<link>http://www.dslreports.com/forum/remark,28300974</link>
<description><![CDATA[Curious as to if anyone knows if any asa (non X series) has support for the dhcpv6 client and note just stateless autoconfig. Having a difficult time finding relevant and useful information on this and im running 9.1(1) on mine but it only supports stateless and manual.

Thoughts?

Ryan
--
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so. -Douglas Adams]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28300974</guid>
<pubDate>2013-05-17 19:56:13</pubDate>
</item>

<item>
<title>Cisco TMS</title>
<link>http://www.dslreports.com/forum/remark,28101422</link>
<description><![CDATA[Any Cisco TMS / Video people out there? I'm a CUCM / voice guy that is now being thrown into the video realm. I have the following pieces to a puzzle but I'm a bit confused at how they fit together.

Cisco TMS 14
Cisco VCS Control
Cisco VCS Expressway - In the next 6 months
Old Tandberg MCU
Old Tandberg Gateway - With 1 ISDN Line
Old MXP 880 endpoints

My thought is the following. Build up the new install of TMS, I'll add the VCS control to it and then registered endpoints to the VCS control. When I get the VCS Expressway add it to the mix and use it to handle external to internal IP calls.

Where I'm horribly confused is what are these ISDN / IP zones in TMS. I keep thinking of them like regions / locations in CUCM but they don't seem to really have any knobs for BW / codec etc so I'm a bit at a loss.

I have 14 locations with endpoints all IP high BW connected. Is there any reason not to assign all my endpoints into the same IP zone?

Right now all the endpoints are configured H323 I was thinking of changing them to SIP when we switch over to the new infrastructure gear.

Longer term I guess I would build up another CUCM cluster running 9.1+ and then register everything to it. Is my understanding correct that really all TMS does is scheduling of meetings and maintenance of the endpoints (SW upgrades, reporting etc)?

Thanks.
--
http://tripplehelix.net]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28101422</guid>
<pubDate>2013-03-14 11:24:59</pubDate>
</item>

<item>
<title>[Config] Help with restritcting a Vlan</title>
<link>http://www.dslreports.com/forum/remark,28293881</link>
<description><![CDATA[We have a few vlans on our network.
Vlan100 give internet access
vlan10 is our internal network 192.168.1.x
vlan20 is our phone network   192.168.20.x
vlan30 is for guests 192.168.30.x

What I am trying to do is configure an ACL for vlan30 that would block access to the internal network, yet still allow internet access..

Here is vlan30
interface Vlan30
 description GUEST
 ip address 192.168.30.1 255.255.255.0
 ip helper-address 192.168.1.1 -dhcp server
 ip helper-address 192.168.1.4 -dhcp server

ACL GUEST
ip access-list extended GUEST
 deny   ip any 0.0.0.0 255.255.255.0
 permit ip any any

I've tried adding the following to GUEST
 deny ip any 192.168.1.0 0.0.0.255 

but that didn't work.  I'm just a little unclear on this and was hoping someone could guide/push/shove me in the right direction.  

Also, my other concern would be that if I cut off all access to 192.168.1.x then I wouldn't be able to reach dchp server.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28293881</guid>
<pubDate>2013-05-15 16:37:50</pubDate>
</item>

<item>
<title>PIX DNS Access From DMZ For Edge Transport Server</title>
<link>http://www.dslreports.com/forum/remark,28287148</link>
<description><![CDATA[I see this is an old question however I have exhausted every thing I can think of.

I need to access my internal DNS servers from my DMZ. I have a Cisco Pix 535 with 8.0(4) - This is the first config I've ever written all suggestions are welcome.

This config works great so far  as I can see:

1 - access to the internet from internal users and internal exchange 2003
2 - DMZ has access to the internet
3 - can ping from inside to DMZ
4 - My primary ISP fails to my secondary ISP and returns when the primary is reconnected
5 - RDP to DMZ - have not verified yet

PIX Version 8.0(4)
!
hostname TEST
domain-name domainname.com
enable password xx
passwd xx
names
name 50.xx.xx.xx OUTSIDE
name 192.168.1.1 INSIDE
name 172.16.1.1 DMZ
name 172.16.1.10 DMZ_HOST
name 63.xx.xx.xx BACKUP
!
! interface GigabitEthernet0
 ! nameif INSIDE
 ! security-level 100
 ! ip address INSIDE 255.255.255.0
 ! no shut
!
interface GigabitEthernet1
 nameif DMZ
 security-level 50
 ip address DMZ 255.255.255.0
 no shut
!
interface Ethernet0
 speed 100
 duplex full
 nameif OUTSIDE
 security-level 0
 ip address OUTSIDE 255.255.255.248
 no shut
!
interface Ethernet1
 speed 100
 duplex full
 nameif BACKUP
 security-level 0
 ip address BACKUP 255.255.255.248
 no shut
!
interface Ethernet2
 speed 100
 duplex full
 nameif INSIDE
 security-level 100
 ip address INSIDE 255.255.255.0
 no shut
!
Fixup protocol dns maximum-length 4096
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring
dns domain-lookup INSIDE
dns server-group DefaultDNS
 domain-name capinrealty.com
object-group protocol TCPUDP
 protocol-object udp
 protocol-object tcp
object-group service RDP tcp-udp
 description Remote Desktop Protocol 20000
 port-object eq 20000
object-group network INSIDE
 network-object 192.168.1.0 255.255.255.0
object-group network DMZ
 network-object 172.16.1.0 255.255.255.0
object-group icmp-type ICMP_INBOUND
 icmp-object echo-reply
 icmp-object unreachable
 icmp-object time-exceeded
 icmp-object echo
object-group network OUTSIDE_HOSTS
 network-object host OUTSIDE
object-group service WEB tcp
 port-object eq www
 port-object eq https
object-group service DNS udp
 port-object eq domain
access-list inside_access_in extended permit tcp any any eq pop3
access-list nonat_INSIDE-DMZ remark No NAT Needed
access-list nonat_INSIDE-DMZ extended permit ip object-group INSIDE object-group DMZ
access-list outside remark Permitted Inbound Traffic
access-list outside extended permit tcp any object-group OUTSIDE_HOSTS object-group WEB
access-list outside remark Remote Desktop
access-list outside extended permit object-group TCPUDP any object-group OUTSIDE_HOSTS object-group RDP
access-list outside remark ICMP Permitted Traffic
access-list outside extended permit icmp any object-group OUTSIDE_HOSTS object-group ICMP_INBOUND
access-list nat_DMZ-OUTSIDE remark NAT Needed
access-list nat_DMZ-OUTSIDE extended permit ip object-group DMZ any
!
pager lines 24
logging enable
logging asdm informational
mtu INSIDE 1500
mtu DMZ 1500
mtu OUTSIDE 1500
mtu BACKUP 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image flash:/asdm-61557.bin
no asdm history enable
arp timeout 14400
global (OUTSIDE) 1 interface
global (BACKUP) 1 interface
nat (INSIDE) 0 access-list nonat_INSIDE-DMZ
nat (INSIDE) 1 0.0.0.0 0.0.0.0
nat (DMZ) 1 access-list nat_DMZ-OUTSIDE
static (DMZ,OUTSIDE) tcp interface www DMZ_HOST www netmask 255.255.255.255
static (DMZ,OUTSIDE) tcp interface https DMZ_HOST https netmask 255.255.255.255
static (DMZ,OUTSIDE) tcp interface 20000 DMZ_HOST 20000 netmask 255.255.255.255
static (DMZ,OUTSIDE) udp interface 20000 DMZ_HOST 20000 netmask 255.255.255.255
access-group outside in interface OUTSIDE
route OUTSIDE 0.0.0.0 0.0.0.0 50.xx.xx.xx 1 track 1
route BACKUP 0.0.0.0 0.0.0.0 63.xx.xx.xx 254
! route INSIDE 172.16.1.0 255.255.255.0 INSIDE 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
!
username xx password xx privilege 15
username xx password xx privilege 15
!
dynamic-access-policy-record DfltAccessPolicy
aaa authentication enable console LOCAL
aaa authentication ssh console LOCAL
http server enable
http 0.0.0.0 0.0.0.0 INSIDE
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
sla monitor 123
 type echo protocol ipIcmpEcho 50.xx.xx.xx interface OUTSIDE
 num-packets 3
 frequency 10
sla monitor schedule 123 life forever start-time now
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
!
track 1 rtr 123 reachability
telnet 192.168.1.0 255.255.255.0 INSIDE
telnet timeout 30
ssh 172.16.1.0 255.255.255.0 INSIDE
ssh timeout 10
console timeout 0
management-access INSIDE
dhcpd address 192.168.1.51-192.168.1.175 INSIDE
dhcpd dns 4.2.2.1 192.168.1.17 interface INSIDE
dhcpd enable INSIDE
!
threat-detection basic-threat
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
tftp-server INSIDE 192.168.1.51 /535_config
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
  inspect icmp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:1a7409e2c16bc38b77917ffadde566bc
: end

I just need to have my new edge transport server be able to contact my new exchange 2010 Hub server.
I can't even DNS to work in the DMZ from a workstation or server. External DNS eg. 8.8.8.8 works great but not to my internal DNS servers 192.168.1.17 & 192.168.1.18.

Thank you for all comments and any help]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28287148</guid>
<pubDate>2013-05-13 16:48:36</pubDate>
</item>

<item>
<title>[HELP] Cisco RV/SA router,  site-to-site vpn behind NAT on 1 sid</title>
<link>http://www.dslreports.com/forum/remark,28299079</link>
<description><![CDATA[We are connecting to a partner in South America by a Site-to-site VPN using a 2 linksys routers: RVS4000 and a RV082.  The partner side has constant issues with their modem/router resetting so the bridge configuration is lost and until it is reconfigured, we can't connect our VPNs (RVS4000 won't do site-to-site vpn if it is behind a NAT) .
I solved that issue with a Sonicwall TZ100 on another partner. The TZ has a setting that allows me to configure it behind a NAT, but the TZs wireless is terrible.
I'd like to try a Cisco SA or one of the latest RVs, but only if I can configure the VPN behind the NAT.

Does anyone knows if it will work on a Cisco?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28299079</guid>
<pubDate>2013-05-17 10:25:10</pubDate>
</item>

<item>
<title>ASA 8.4 IOS BUG? or a feature?</title>
<link>http://www.dslreports.com/forum/remark,28297063</link>
<description><![CDATA[Hello, 

I came up accross a weird situation when I was trying to apply a self signed cert to my SSL_VPN group as a test.

Here is what I came accross...

the command that I needed to use was "trust-point self" under my SSL_VPN group.

..tunnel-group SSL_VPN ipsec-attributes&#012;trust-point self&#012;
As always its my habit to use the "?" to see my options. Once I got into the "tunnel-group SSL_VPN ipsec-attributes" and did the ? to see my options here is what I got...

..ASA1(config)# tunnel-group SSL_VPN ipsec-attributes &#012;ASA1(config-tunnel-ipsec)# ?&#012; &#012;tunnel-group configuration commands:&#012;  authorization-required  Require users to authorize successfully in order to&#012;                          connect (DEPRECATED)&#012;  chain                   Enable sending certificate chain&#012;  exit                    Exit from tunnel-group IPSec attribute configuration&#012;                          mode&#012;  help                    Help for tunnel group configuration commands&#012;  ikev1                   Configure IKEv1&#012;  isakmp                  Configure ISAKMP policy&#012;  no                      Remove an attribute value pair&#012;  peer-id-validate        Validate identity of the peer using the peer's&#012;                          certificate&#012;  radius-with-expiry      Enable negotiation of password update during RADIUS&#012;                          authentication (DEPRECATED)&#012;ASA1(config-tunnel-ipsec)# &#012;
I do not see an option for 

..trust-point self&#012;
however when I tried to type it out and hit enter it took the command 

..ASA1(config-tunnel-ipsec)# trust-point self&#012;ASA1(config-tunnel-ipsec)# &#012;
I am not too familiar with the 8.4 code, so I dont know if this is something to worry about or just let it go. 

Thanks
]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28297063</guid>
<pubDate>2013-05-16 16:11:00</pubDate>
</item>

<item>
<title>[HELP] Need help with Cisco 877w config to get connected to BT L</title>
<link>http://www.dslreports.com/forum/remark,28287287</link>
<description><![CDATA[Hello Cisco Gurus, I am trying connect to BT, but cannot for some reason, anybody would be able to help me with that?

Current sanitized config:

!
interface ATM0
 no ip address
 shutdown
 no atm ilmi-keepalive
 pvc 0/38
  encapsulation aal5mux ppp dialer
 !
!
interface FastEthernet0
 switchport access vlan 10
!
interface FastEthernet1
 switchport access vlan 10
!
interface FastEthernet2
 switchport access vlan 20
!
interface FastEthernet3
 switchport access vlan 20
!
interface Dot11Radio0
 no ip address
 !
 encryption vlan 30 mode ciphers aes-ccm
 !
 ssid wifi-box
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
!
interface Dot11Radio0.30
 encapsulation dot1Q 30
 ip address 10.10.30.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 zone-member security ZONE_VLAN30
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan10
 ip address 10.10.10.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 zone-member security ZONE_VLAN10
!
interface Vlan20
 ip address 10.10.20.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 zone-member security ZONE_VLAN20
!
!
interface Dialer1
 mtu 1492
 ip address negotiated
 no ip unreachables
 ip nat outside
 ip virtual-reassembly
 zone-member security out-zone
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp chap hostname BT@HOSTNAME
 ppp chap password 0 MyPass
 ppp ipcp route default
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list ACL_LAN_RANGE interface Dialer1 overload
ip nat inside source static tcp 10.10.10.150 80 interface Dialer1 80
!]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28287287</guid>
<pubDate>2013-05-13 17:28:18</pubDate>
</item>

<item>
<title>Cisco USB console cables...</title>
<link>http://www.dslreports.com/forum/remark,28281598</link>
<description><![CDATA[Having left my favourite (only) USB to serial converter in Italy it would seem time to embrace the new USB consoles on my kit.
I have the correct 5 pin USB cable.
I have Windows 7 64 Bit Pro.
I have Tera Term (my fave), puTTy (eeww) and Hyperterminal (meh).
I have USB driver install errors in Device Manager.
I have no functioning connectivity to defaulted gear. 
I have no idea why this is so difficult.
I am waiting patiently for Amazon to deliver a new USB to serial converter.
I am starting to hear voices...
--
Binary is as easy as 01 10 11]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28281598</guid>
<pubDate>2013-05-11 11:51:20</pubDate>
</item>

<item>
<title>ASA 5520 8.4 IPsec tunnel</title>
<link>http://www.dslreports.com/forum/remark,28280043</link>
<description><![CDATA[Hello All,

I have just upgraded the IOS code from 8.2 to 8.4 and I have seen some changes to the NAT and IPsec. I was wondering when setting up a Site to Site VPN if it was posible to set it up using  Ikev2 and ikev1 together. I see that as an opition on the ASA but doesnt make sence why I would be setting up both... ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28280043</guid>
<pubDate>2013-05-10 18:26:08</pubDate>
</item>

<item>
<title>loop to CSU</title>
<link>http://www.dslreports.com/forum/remark,28290110</link>
<description><![CDATA[can ISP loop the CSU if the port status is Up down.

if yes can any1 explain how?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28290110</guid>
<pubDate>2013-05-14 15:11:33</pubDate>
</item>

<item>
<title>[HELP] Cisco 2600 Ip Routing no internet on inside network..Help</title>
<link>http://www.dslreports.com/forum/remark,28269819</link>
<description><![CDATA[I have a Cisco 2600 router connected to ATT Uverse with 8 (5 usable) static ip address 107.219.166.17 to .21
subnet is 255.255.255.248 Gateway is 107.219.166.22

CIDR 107.219.166.16/29

I can ping sites on the internet from the router and i can also ping my internal network

Here is the Ip Routing
Gateway of last resort is 107.219.166.22 to network 0.0.0.0

C    192.168.0.0/24 is directly connected, FastEthernet0/0
     107.0.0.0/29 is subnetted, 1 subnets
C       107.219.166.16 is directly connected, FastEthernet1/0
S*   0.0.0.0/0 [1/0] via 107.219.166.22

The gateway and box have same ip

Interface 1/0 is fixed ip to the att box 107.219.166.17

I know the problem is in the routing I just know it is I am missing something

Here is the routing config 
ip classless
ip forward-protocol nd
ip route profile
ip route 0.0.0.0 0.0.0.0 107.219.166.22 permanent
!
no ip http server
ip http access-class 1
ip http secure-server
ip nat inside source list 1 interface FastEthernet1/0 overload

Well there it is ....thanks ahead of time]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28269819</guid>
<pubDate>2013-05-07 15:10:09</pubDate>
</item>

<item>
<title>[H/W] T1 cabling</title>
<link>http://www.dslreports.com/forum/remark,28278884</link>
<description><![CDATA[I'm not really sure if this is the right place to ask but anyway

a T1 uses 1, 2, 4, and 5 right?
From this
http://www.juniper.net/techpubs/hardware/m40/m40-hwguide/html/pinout4.html

it looks like 1 and 4 are ring, so in the cable shouldn't they share a twisted pair idealy to prevent crosstalk?
then 2 and 5 also?

or would that cause cross talk?

I know a normal ethernet cable will work but I'm trying to be sure we have the most ideal cable.
--
http://www.change.org/petitions/create-a-100-offline-single-player-mode-in-simcity-2013-remove-the-origin-requirement-from-it-and-bring-back-popular-features-from-simcity-4]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28278884</guid>
<pubDate>2013-05-10 11:58:44</pubDate>
</item>

<item>
<title>[HELP] Routing or Switching with EHWIC-4ESG?</title>
<link>http://www.dslreports.com/forum/remark,28278063</link>
<description><![CDATA[Assume I have a modern router with an EHWIC-4ESG and a simplified config like the one below. Will traffic between 192.168.2/24 and 192.168.3/24 be switched on the EHWIC-4ESG or do the packets move off the HWIC and get routed by the router?

..interface GigabitEthernet0/1/2&#012; switchport access vlan 2&#012;!&#012;interface GigabitEthernet0/1/3&#012;  switchport access vlan 3&#012;!&#012;interface Vlan2&#012; no ip address&#012; bridge-group 2&#012;!&#012;interface Vlan3&#012; no ip address&#012; bridge-group 3&#012;!&#012;interface BVI2&#012; ip address 192.168.2.1 255.255.255.0&#012;!&#012;interface BVI3&#012; ip address 192.168.3.1 255.255.255.0&#012;!&#012; &#012;bridge 2 protocol ieee&#012;bridge 2 route ip&#012;bridge 3 protocol ieee&#012;bridge 3 route ip&#012;
--
~leb]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28278063</guid>
<pubDate>2013-05-10 05:44:23</pubDate>
</item>

<item>
<title>[SOLVED] Port forwarding /bridge mode Cisco DPC 3008</title>
<link>http://www.dslreports.com/forum/remark,28279117</link>
<description><![CDATA[My ISP gave me the user name and password for my modem but will not help me configure it to get around it's firewall. Anyone know were I can get some documentation on configuring this DPC 3008.

Charter says they allow the change but do not support it, so it up to me to figure out how to dot after I get logged in.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28279117</guid>
<pubDate>2013-05-10 13:06:18</pubDate>
</item>

<item>
<title>SOLVED - Wireless VLAN  conundrum.</title>
<link>http://www.dslreports.com/forum/remark,28280153</link>
<description><![CDATA[Evening all. Got a WLC issue I'm hoping is simply finger trouble on my end, but lets see...
Here's the layout:

1 x 2960S with L3 static routing enabled. The switch is also the DHCP server for three VLAN's, 10, 20 and 30. VLAN 10 is the native VLAN. IP ranges / scopes are 192.168.10.0/24, 192.168.20.0/24 and 192.168.30.0/24. SVI's are 192.168.10.2, 192.168.20.2 and 192.168.30.2 and they show as directly attached in the routing table.

1 x 2504 WLC feeding 7 x 2602 lightweight AP's.
When I connect to the native VLAN SSID I get the response I expect from the DHCP server. However when I connect to either VLAN 20 or VLAN 30 I still get DHCP addresses from VLAN 10.
Virtual interfaces are correctly configured with appropriate VLAN ID's/SSID's and IP addresses in the correct subnet and pointing to the appropriate SVI on the switch. There is a single physical link from the switch (trunk mode and allow VLAN 1,10,20,30) to Port 1 on the WLC.

I have an identical set up on another site with 4 VLANS. Two of them work correctly, 2 of them get incorrect IP addresses from the DHCP server despite all virtual interfaces being configured identically save for the correct VLAN ID and SSID's. 

Anyone got any ideas before my head explodes!!!
--
Binary is as easy as 01 10 11]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,28280153</guid>
<pubDate>2013-05-10 19:07:19</pubDate>
</item>

</channel>
</rss>
