getXML1('Technologies for Small and Medium Businesses218 PlanNetMeetingsNov 16, 2009, 1:53pm PSTMy company is looking at purchasing the UC540 system for our offices- is this the best option for 15 users, with the possiblility of 1 or 2 remote users, ability to use mobility and presence and room to grow with other features in the future? Also, can anyone recommend a Cisco Partner in the Arlington, VA area who is experienced in the UC500 series systems? cornevermaak@mweb.co.zaNov 12, 2009, 4:58am PSTHi<br /><br />I am new to the CISCO forums and could not find info where I searched, so of someone can point me in the right direction it will be much appreciated.<br /><br />We want to roll out Voice over Wireless LAN networks for a company, I need to investigate specific considerations for doing this over the 802.11n wireless network. Found technical papers on doing it for .11a and g, but nothing on .11n . Would rather work with detailed info on .11n networks, than using legacy specs.<br /><br />Info will be highly appreciated 30 leolaohooNov 15, 2009, 6:22pm PSTCisco Unified Wireless IP Phone 7925G<br />Deployment Guide<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/deployment/guide/7925dply.pdf')">www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/deployment/guide/7925dply.pdf</A><br /><br />Cisco Unified Wireless IP Phone 7921G Deployment Guide<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/6_0/english/deployment/guide/7921dply.pdf')">www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/6_0/english/deployment/guide/7921dply.pdf</A> leolaohooNov 15, 2009, 6:23pm PSTFor now, Cisco has 2 WoVoIP: 7921 and 7925. Both do not support 802.11n standard. <br /><br />Hope this helps. cornevermaak@mweb.co.zaNov 16, 2009, 1:18am PSTThanks for the reply leolaohoo. Found info on these phones and their deployment already; I also found the CISCO deployment guidelines for 802.11b and 802.11g.<br />I want to know what to do differently for .11n, e.g. the bandwidth increase and MIMO technology (for example) result in a different deployment, like more clients per AP, and AP location considerations (more channels) etc? leolaohooNov 15, 2009, 6:26pm PSTCisco 802.11n Design and Deployment Guidelines<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns767/white_paper_80211n_design_and_deployment_guidelines.html')">http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns767/white_paper_80211n_design_and_deployment_guidelines.html</A>cornevermaak@mweb.co.zaNov 16, 2009, 1:19am PSTThanks, I think this is going to answer a lot of my questions.spyglass99Nov 12, 2009, 5:18am PSTI have a client that is building a new network and I would like recommendations for a router and switch for a single server, 40 workstation LAN. They will be providing VPN access for home users and have a VPN connection to another site overseas. I am a bit confused over which Cisco router would be the cheapest, most efficient solution.<br /><br />Thanks! 30 collin_clarkNov 12, 2009, 8:51am PSTWith knowing just the generals, I would say the 1841 will work well for this situation. The 800 series has some VPN limitations and that's why I would lean towards the 1800 series.<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/products/ps5853/index.html')">http://www.cisco.com/en/US/products/ps5853/index.html</A><br /><br />Hope it helps. leolaohooNov 15, 2009, 6:29pm PSTCisco 1900 Series Integrated Services Routers Data Sheet<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/routers/ps10538/data_sheet_c78_556319.html')">http://www.cisco.com/en/US/prod/collateral/routers/ps10538/data_sheet_c78_556319.html</A><br /><br />Network Security Features for Cisco Integrated Services Routers Generation 2 Platform<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/routers/ps10538/data_sheet_c78-556151.html')">http://www.cisco.com/en/US/prod/collateral/routers/ps10538/data_sheet_c78-556151.html</A><br /><br />Cisco Services Ready Engine Data Sheet<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/modules/ps10598/data_sheet_c78-553913_ps10538_Products_Data_Sheet.html')">http://www.cisco.com/en/US/prod/collateral/modules/ps10598/data_sheet_c78-553913_ps10538_Products_Data_Sheet.html</A><br /><br />I don't know about "cheapest" but in the WAN/LAN/WLAN arena, I firmly believe in the old addage "you get what you paid for". <br /><br />Note that the information provided by me and Collin are just for the routers. You didn't specify if you need switches. Both the 1800 ISR and 1900 ISR2 routers will not support switch modules. If you want to have a router and a 8, 16, 24 or 48 port switch module built-in to the router, you need to look at the next model up, the 2800 ISR or the 2900 ISR2. <br /><br />Hope this helps.rhenarie2Oct 13, 2009, 7:11pm PSTI need a VPN solution for multiple situatjions. Background: Simple LAN with unmanaged switches with single server 2008 running inventory application with about 20 users. I need to get a VPN solution to allow 2 things:<br />1) Allow telecommuters to connect and operate as on LAN.<br />2) A rented warehouse needs to connect on a "permanent" connection to access inventory.<br /><br />I will need this to be scalable for growth as we are growing fast.<br /><br />Any suggestions? 30 collin_clarkOct 14, 2009, 6:04am PSTI would take a look at the ASA5505. It will support both of your requirements and you can license it, to increase users, as you grow.<br /><br />Here's a datasheet for the ASA line-<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html')">http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html</A><br />rhenarie2Oct 14, 2009, 3:43pm PST(I am so confused! - So many choices! - So many questions!!) What about the Cisco871-W-G-A-K9? What makes one better than the other? <br /><br />Would you recommend the 5505 over the 5510 for my situation?<br /><br />If I go with the 5505, is there a particular configuration or are there some upgrades that you would recommend (or are there any)?<br /><br />Is there a device that I should use in conjunction with either of these (5505/5510) for the warehouse?<br /> collin_clarkOct 15, 2009, 5:44am PSTThe 871 will work too. Since it's a lower end router, the VPN will consume more resources. The ASA is a dedicated firewall and VPN device. The router does have come features that the ASA doesn't. <br /><br />if you go with the 5505, there are a couple of licensing options; a 10 user license, and 50 user license, and an unlimited user license. You can also purchase the Security Plus license which will give you a couple of more features.<br /><br />The warehouse can have an 5505 or an 871. I personally would keep them the same for the reasons in the first paragraph.<br /><br />I'm sure all I did was create more questions for you. I'm happy to answer them, but it may be more beneficial for you to contact your local Cisco office. They have dedicated people to come and talk to you, learn your environment and the variables, and then come up with a design and product selection (for free).rhenarie2Oct 19, 2009, 5:55pm PSTSorry it took so long to reply, I went out of town. Anyhow... Yes, you did create more questions, but not too bad. If you are talking no more that 10-15 people, and on a semi-tight budget, would the 871 be a better selection? Which is more of a "Turn Key" solution and easier to maintain/administer? collin_clarkOct 20, 2009, 5:18am PSTI took a look at the list pricing for each with maintenance and they are close enough to each other that the pricing should not be a factor. IMO the ASA5505 will be easier for you to manage since it has a GUI. The router does have one but it is not as evolved as the one for the ASA (called ASDM and comes free with the ASA).rhenarie2Oct 20, 2009, 6:38pm PSTOkay - Maybe one last question then - On the ASA, what would the part number for a VPN with Firewall solution? I see so many different options/configurations/part#'s that, if I spend too much time - I get a hangover. I have looked at the "Small Business Product Guide" and see a few choices, but don't want to over/under purchase. If I need +/- 10 users to connect either IPSec or SSL and would like the Anti-Virus and Firewall options, what would be the part number - or is this configuration not available? collin_clarkOct 21, 2009, 5:49am PSTThe data sheets are a bit misleading. There really is one firewall, they just call them different additions (because of licensing). Introducing the AV option requires the ASA5510. <br /><br />Here's the part number for the physical firewall and the Content Services module:<br /><b>ASA5510-CSC10-K9</b><br />ASA 5510 Appl w/ CSC10, SW, 50 Usr AV/Spy, 1 YR Subscript<br /><br />Maintenance on the ASA:<br /><b>CON-SNT-AS1C10K9</b><br />SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp<br /><br />SSLVPN User Licensing (comes with 2 free):<br /><b>ASA5500-SSL-10=</b><br />ASA 5500 SSL VPN 10 Premium User License<br /><b>ASA5500-SSL-25</b><br />ASA 5500 SSL VPN 25 Premium User License<br /><br />You'll need to decide what features you want at the remote site. If they are the same, then x2 the above.<br /> rob.huffmanOct 25, 2009, 5:48am PSTHi Collin,<br /><br />Really great help here! +5 points for your superb follow-up and excellent info.<br /><br />Cheers!<br />Rob collin_clarkOct 26, 2009, 12:10pm PSTHey thanks Rob, I appreciate it!rhenarie2Nov 14, 2009, 8:40pm PSTCollin,<br /><br />Thanks for your patience and help. I am going to try the 5505. I will let you know how it works for me.ted.koskiNov 3, 2009, 6:45pm PST- mperreault@compugen.comNov 5, 2009, 10:10am PSTI'm working with a customer that is using various ISRs (881, 1861 and 28xx) with the following services: DMVPN, ZBFW, QoS and Voice. The max throughput we've seen on the 1861s is 8mbps and on the 2801s it's less than 20mbps. Is this normal and acceptable? 30 leolaohooNov 5, 2009, 10:23pm PSTYes they are. <br /><br />Understand that the speed is quoted as half duplex. If you want to look at the full duplex rate, then you half the figure. <br /><br />Have you seen the new ISR Gen 2?patrick091Oct 1, 2009, 11:24am PSTHi,<br />Many universities and colleges around the country use Cisco Clean Access Agent and require that all students log in to their network using it. Macs are the most popular "campus computers" these days and with many new Freshman students buying their first laptop now, they come pre-installed with mac OSX 10.6.1 aka snow leopard. Currently, the clean access agent doesn't recognize osx10.6.1 as a valid OS. The fix is simple, to just change Clean Access Agent to recognize snow leopard as a valid OS. However, Cisco has done nothing to fix this, even though they had access to snow leopard before it was even released. Many college students can't get on the network or internet because of this issue, and it should be fixed ASAP. If anyone knows a work around for this, or knows when a new version of Clean Access Agent that fixes this is being released, please let me know. Thanks 30 leolaohooOct 1, 2009, 4:42pm PSTCisco Network Admission Control:Interim Workaround for Windows 7 and Mac OS X 10.6 (Snow Leopard) Operating Systems<br /><A HREF="javascript:newWin('https://www.cisco.com/en/US/prod/collateral/vpndevc/ps5707/ps8418/ps6128/presentation_NAC_Solution_Workaround_for_Win.pdf')">https://www.cisco.com/en/US/prod/collateral/vpndevc/ps5707/ps8418/ps6128/presentation_NAC_Solution_Workaround_for_Win.pdf</A><br /><br />Hope this helps. <b><i>Please rate when this is helpful or applicable. </b></i> d.rickard@bcuc.ac.ukNov 2, 2009, 11:01am PSTShame I can't use the fat client in W7 yet. It just bombs out with an Error 1067, which is a bit vague!<br /><br />But this is useful info! satanovskylNov 1, 2009, 1:15pm PSTGreetings! We are going to buy 2 of the SGE2000, but there are some unresolved questions regarding it. Please, post here if anyone knows the answers.<br /><br />Q: (The question has being answered at <A HREF="javascript:newWin('http://www.myciscocommunity.com')">http://www.myciscocommunity.com</A> , just wanted to put it in the checklist for somebody to confirm it one more time (it is the most important question for us)) Layer 3 redundancy: is it offered with the SGE2000 stacking technology? In other words, will two or more SGE2000 work together in a stack in Layer 3 mode and act as a "big" router?<br /><br />Q: Is there any limit on the number of "IP interfaces" one can setup for the SGE2000?...<br /><br />Q: Are issues with working with the web interface from firefox web browser completely resolved in the latest firmware? (so that we will not be forced to use IE software to configure the sw)?<br /><br />Q: I've read that if one has some stackable gigabit switches, the link between them should be at least 10Gpps... but the model has only 1Gbit interconnection between nodes? May this bring any performance issues with the stack?<br /><br />Q: Does it have a "dedicated stacking bandwidth"? greenpagesauJan 26, 2009, 10:41pm PSThi,<br /><br />ive just started at a new company and we have a Linksys SR2024 Switch.<br /><br />unfortunately no one call tell me what the IP Address of the switch is.<br /><br />ive done a port scan on our network with no luck.<br /><br />is there any other way of finding the IP address of the switch?<br /><br />once i have found the IP - how do i connect to the Web GUI? 30 bbrownciscoJan 27, 2009, 9:45am PSTWhat makes you think the switch has an IP address?greenpagesauJan 27, 2009, 2:25pm PSTi assume there is some sort of web gui interface for administration - which would need an IP address to connect to.<br /><br />judging by your reply, i guess there isnt a gui - its just an unmanaged switch? jasonwiegelFeb 1, 2009, 5:15pm PST<p>This switch is umanaged; there is not any gui or IP address.</p>greenpagesauFeb 1, 2009, 5:18pm PST<p>thanks for your help</p><br /><p>&nbsp;</p><br /><p>cheers</p><br /><p>&nbsp;</p><br /><p>chris</p>ninhjoatlewisOct 29, 2009, 8:48am PSTI believe the sr2024 is a unmanaged switch. No ip address should be assigned to it. satanovskylOct 19, 2009, 2:06pm PST<br />Hi all!<br />We have bought 3 of Linksys SRW248G4 sw.<br />But web interface is NOT working with IE8 (though it is said in Release notes, it works with IE5.5+)<br />Please, help anyone!.. we can't set up our sw!!! 30 satanovskylOct 20, 2009, 1:42am PSTHi all!<br /><br /> <br /><br />We have bought 3 of Linksys SRW248G4 sw.<br /><br /> <br /><br />But web interface is NOT working with IE8 (though it is said in Release notes, it works with IE5.5+). It works with IE5.5 to IE7 (though there are stilllsome bugs revealling, see below), but not with IE8. If the software gets updated at all the hosts in our LAN, we will not be able to configure the sw...<br /><br /> <br /><br />When I get to the "home.htm" page, the javascript engine tells me that<br />-------------------------------<br />Line: 40<br />Error: Object expected<br />-------------------------------<br /><br />Msxml is installed (and is of the latest version). We have tested it with Windows server 2003 and IE8, with Windows XP and IE8... nothing helps (we have also disabled all the restrictions on active x). It just does not work.<br /><br /> <br /><br />The sw is completely unconfigurable in UNIX-only environment... as it relies at the M$ client side "technology"...<br /><br /> <br /><br />CLI functionality is very poor as it allows one to configure only some basic parameters (IP address, local users for auth). It does NOT allow to setup VLANs,*STP,any Security features, etc.<br /><br /> <br /><br />When trying to configure the sw using IE6-7, there is a bug showing up when we try to add one port to many VLANs ("VLAN to Ports" page) and press "Save". The port seems to be added to VLANs but the error message is instantly showing up which says that some error appeared, but it doesn't know the error ID or the reason. This is really annoying. =) :<br /><br /> <br /><br />----------------------------<br /><br /> Line No. Error Type Value Diagnostic <br /> <br /> 1 null Unknown value Might be missing parameters (join1) in page. <br /><br />----------------------------<br /><br /> <br /><br /> <br /><br />We like the sw, but it is so hard to work with it, not mentioning that we have to install M$ Windows to manage it... We'd like to see it working with IE8+ and Firefox (all 3Com and Allied Telesyn sw do!), and we'd like to see more functionality in CLI interface.<br /><br /> <br /><br />Please, help!stefan@sidiblume.deOct 20, 2009, 6:31am PSTHello there,<br /><br />bought a SLM2048 with a similar problem, I can only configure it on a WinXP machine with IE7 and MSXML, this is kind of annoying since I can configure all my other devices using Firefox. C'mon Is it really so hard for a company like LinksysCisco to make a web interface which is usable with most web browsers? Using IE7 with MSXML is almost like having to use a special config sw :-(<br /><br />Thanks satanovskylOct 20, 2009, 8:20am PST=) <br />think, they are going to correct the software: <br /><A HREF="javascript:newWin('http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Small%20and%20Medium%20Business&topic=Technologies%20for%20Small%20and%20Medium%20Businesses&topicID=.1ddbf5a7&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40')">http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Small%20and%20Medium%20Business&topic=Technologies%20for%20Small%20and%20Medium%20Businesses&topicID=.1ddbf5a7&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40</A>^1%40%40.2cd4b0c1/19#selected_message<br /><br />and...<br /><br /><A HREF="javascript:newWin('https://www.myciscocommunity.com/message/20320#20320')">https://www.myciscocommunity.com/message/20320#20320</A><br /><br /><br />------------------------<br />We'll see, we'll see...chipps_chipiwoOct 15, 2009, 4:55am PSTi did not save the new username and password on the new router now i cant access it 30 leolaohooOct 19, 2009, 9:12pm PSTWhat error message did you get? Did you configure vty access?<br /><br />Password Recovery Procedures<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_tech_note09186a00801746e6.shtml')">http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_tech_note09186a00801746e6.shtml</A> lesterccnaOct 8, 2009, 1:31am PSTHi Engineers<br /><br />I having difficulties in configuring the PPTP, and IPSEC Vpn.<br /><br />1. when configuring the PPTP using the Quick VPN Client, It always go to this way, Connecting>Activating Policy>verifying Network-from this state takes some time, and finally tell you" the remote gateway is not responding. you will now be disconnected.please try it again later" my status in system tray is green and upon checking the VPN status in the router, i am connected.<br /><br />I even try the MIcrosoft PPTP or L2TP client i got an error of 678 or 800, but im sure my username and password is correct.<br /><br />2. Using the IPSEC, im using the GreenBow VPN Client, in the first place it works, after some time it will get disconnected and cannot open a tunnel again unless you try to upload a firmware again, sometimes it will work again after rebooting the router.<br /><br />Im using the latest firm 1.0.39<br /><br />Please advice and thanks in advance.<br /><br />Lester 30hadbouOct 15, 2009, 10:22am PSTError 678 is usually pretty "early in the game". It tends to indicate not even basic initial connectivity. You just verified Internet access, and although the Windows firewall may come into play, not likely at this point. Since you know your VPN works at the server end I would verify there are no typo's in the the VPN client. The 678 would tend to indicate it cannot find the VPN access point. Does your client configuration uses the server site's IP or a domain name. If using a domain name try the IP as a test, or make sure the name is being resolved correctly by running at a command line lesterccnaOct 15, 2009, 10:12pm PSTThanks for your email,<br /><br />in WRV200 VPN router, im using static ip and i even used the dynamic dns for testing purposes, <br /><br />I verified that there is no typos, still got the same problem.<br /><br />Thanks,<br />lester polofalltradesOct 1, 2009, 7:47pm PSTI'm a bit confused about this honestly. I have a client who has 120+ hosts/users on their network.<br /><br />I thought that the 800 series would suffice since they don't really require other network services.<br /><br />They just want a internet router that won't die down on their 120+ users because their Linksys WRT54G2 crashes during production every now and then.<br /><br />Now I looked at some cisco 800 series router data sheet and I found out that they only recommend 20 users for cisco 871, which I believe is suited for small - to - medium businesses. LINK: <A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/routers/ps380/ps6200/product_data_sheet0900aecd8028a976.html')">http://www.cisco.com/en/US/prod/collateral/routers/ps380/ps6200/product_data_sheet0900aecd8028a976.html</A><br /><br />Now, how does cisco classify their client's business environment? For example, how many hosts do cisco classify for example, a SOHO environment? How many users is a SOHO environment?<br /><br />It kind of looks like this:<br /><br />SOHO = # of users<br />Small Business = # of users<br />Medium Business = # of users<br />Large Business = # of users<br />Enterprise = # of users<br /><br />Help would be much appreciated because I don't believe that 800 series are only recommended for 20 users. And as a sidenote, could anybody recommend me a pretty powerful router with failover options suitable for 120+ users/hosts? Thanks alot! Help would really be much appreciated 30 leolaohooOct 1, 2009, 10:06pm PSTThe 890 is the top-of-the-line router for the 800 series and the recommended number of users is pegged at 50. <br /><br />Without further information from you, I'd say that you're looking at the 2800 series, particularly the 2821 router. <br /><br />Cisco 2800 Series Integrated Services Routers Data Sheet<br /><A HREF="javascript:newWin('https://www.cisco.com/en/US/prod/collateral/routers/ps5854/ps5882/product_data_sheet0900aecd8016fa68_ps5854_Products_Data_Sheet.html')">https://www.cisco.com/en/US/prod/collateral/routers/ps5854/ps5882/product_data_sheet0900aecd8016fa68_ps5854_Products_Data_Sheet.html</A><br /><br />If you need Voice/Fax ... <br /><br />Cisco High Density Analog and Digital Extension Module for Voice and Fax<br /><A HREF="javascript:newWin('https://www.cisco.com/en/US/prod/collateral/modules/ps3115/product_data_sheet0900aecd8016c1c6_ps5854_Products_Data_Sheet.html')">https://www.cisco.com/en/US/prod/collateral/modules/ps3115/product_data_sheet0900aecd8016c1c6_ps5854_Products_Data_Sheet.html</A><br /><br />This NME is supported by the 2821 (and higher).<br /><br />Hope this helps. polofalltradesOct 1, 2009, 10:30pm PSTThanks for your reply leo, but don't you think 2800 is a bit overkill for a network which doesn't require too much services aside from the internet? They aren't even using VPN, Voice. They aren't looking for those features. What they need is a pretty simple router for their internet, which is by the way a 3mb subscription, which won't die on them like the linksys that I mentioned in my previous post. It's a pretty simple network setup as you see. Do you figure an 1800 working for this setup? leolaohooOct 2, 2009, 5:59am PSTDepends on the design of the network. In my experience I always recommend use the next-model-up because sometimes the client don't want to tell me anything. If I believe every word clients tell me, I'd be in deep trouble. <br /><br />3Mb, internet ... Hmmm ... 850, 860, 870 will be sufficient if they don't want anything fancy. <br /><br />Have a look here ... <br /><br /><A HREF="javascript:newWin('http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf')">http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf</A><br /><br />If you go for the 850 or the 870, I recommend you look into getting additional Flash and DRAM memory. collin_clarkOct 2, 2009, 6:29am PSTIn the CCDP track they cover the sizes of business for their models.<br /><br />1-4999 is Small Business<br />5000-10000 is Medium Business<br />>10,000 is Large Business<br /><br />An 800 might be on the light side for a 3MB circuit. You will have services on it (NAT, stateful inspection, ACLs) so you need to take that into account. My 2 cents is look at an ASA5505 or the 1800 series router. nsn-amagruderOct 3, 2009, 1:50pm PSTThe 1841 has two slot's for T-1 cards or you can use the 2MFT Card. Add a second 1841 running GLBP for redundancy/load sharing. Assuming the T-1's aren't bonded. polofalltradesOct 5, 2009, 11:02pm PSTThanks for all the help guys. I guess, I'll try to take another look at it. Leo, thanks for the router performance chart that you gave me there. I should've checked your post as the answer to my question. But hey, anyways, thanks man. And also, many thanks to those who contributed to the question. leolaohooOct 6, 2009, 3:02pm PSTNo worries. Glad to be of assistance. shridhar_sdlSep 21, 2009, 3:35am PSTDear Friends ,<br /><br />I have two cisco 1841 router , but for one router searil port is gone only two interface FE are working , and we have One L3 and 10 L2 switches and one ASA 5510 firewall we have , can any one suggest me with these how i can build secure network , both isp's link should work as active. 30 naveen_b81Sep 24, 2009, 1:38am PSTThe requirements mentioned are not clear. I am assuming quite a few things here ;). you can ask one isp to provide an ethernet link and connect one link per router. and then connect both these router to the ASA and then use the L3 and L2 switches in the LAN. If you want multiple VLAN, use the L3 switch as the VLAN gateway and route to ASA. ASA can check if the links are up and route based on the same. You will need to configure tracking on ASA to achieve this. venuunlimitedSep 9, 2009, 5:52am PSTCan any one help me with the procedures involved in upgrading from Sup 1, 1A to sup 720. <br />What are the challenges involved etc.. 30 naveen_b81Sep 24, 2009, 1:35am PST1. SUP 720 will need to be palce in either slot5/6. So you need to consider cabling if the currnet slot 5/6 is occupied.<br />2. Take backup and verify the config as some commands might not have been applied.<br />3. Check if the existing power supplies and fan trays meet requirements.<br />4. Sup720 supports only IOS mode, so if your current sup1,1A is in hybrid or CATos mode, there is a whole lot of steps you should perform to convert the configuration.larrycollinsSep 16, 2009, 10:44am PSTI have 10 people who need the ability to dial up a remote modem to connect to a Cisco router (as out-of-band). What device can I place on our LAN that they could telnet/ssh to then dial out? I don't want to run a analog line to each work station - I would like to share resources. Is there some type of Access Server (?) or maybe a card that I install into a router/switch that would allow this.<br /><br />Thanks 30 bbuffinSep 22, 2009, 11:54am PSTThere are several solutions to accomplish this. Do a web search for "modem pooling".<br /><br />Hope this helps.<br /><br />Brandonjpleslie01Aug 31, 2009, 9:17am PSTI'm trying to install QuickVPN 1.3.0.3 on an HP laptop running Vista Home Premium SP2. I had previouly installed 1.2.11 with no problem though I uninstalled it some time ago.<br />Now when trying to install 1.3.0.3, the install starts but only gets as far as the InstallShield Wizard "Preparing Setup" window with the green progress bar halfway across. And there it stops. I've waited over 1/2 hour and watched the Task Manager but there is no cpu activity for the setup.exe process and nothing else happens. I have to kill the process in TM.<br />I've tried re-downloading the software but I get the same result.<br />Anyone have an idea why I'm having this problem? It is supposed to run on Vista as did 1.2.11.<br /><br />Jonathan 30ivillegasSep 4, 2009, 6:12am PSTYou may need to upgrade your router firmware with the latest version.<br />Installing the QuickVPN Software for Windows Vista":<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/products/ps9923/products_qanda_item09186a0080a365ba.shtml')">http://www.cisco.com/en/US/products/ps9923/products_qanda_item09186a0080a365ba.shtml</A> <br />jpleslie01Sep 4, 2009, 6:31am PSTHow would my router's firmware have anything to do with installing the QuickVPN software on the PC?<br /><br />I've installed the new software on an XP PC, replacing the older version, and had no problem at all.<br /><br />So the problem is somehow located in the Vista PC that does not want to let this new version of the QuickVPN software install, though I was able to install the older version several months ago.<br /><br />BTW, my router is a D-Link and has the latest firmware. Also, having a Vista PC behind a router won't let you use the QuickVPN software, it's in the docs. I'm trying to install it for when I have my laptop elsewhere connected to the internet without a router.jpleslie01Sep 8, 2009, 3:05pm PSTProblem solved! I ran CCleaner on the PC and found remnants of the old VPN install. I cleaned those out and the new installed went without a hitch.<br /><br />The bonus is that this new version appears to have fixed the problem where you couldn't connect on Vista if you were behind a router. drroswoldSep 7, 2009, 4:26am PSTI just installed a new RVS4000 router (firmware V1.3.0.5), configured it to my LAN, saved the setting and created a configuration backup. 4 times now in less than a week I lost access to the internet only to find the router reset to factory defaults.<br />I can restore from the backup, but a day or 2 later and it resets again.<br />Any suggestions - or do you think it's a hardware problem and I should return it for replacement?<br /> bradley.mooreSep 2, 2009, 1:07pm PSTRecently, a couple of our help desk people were asking for access to some of our branch network equipment so that they can look at interface counters, etc. for troubleshooting without escalating to the engineers. I agreed that it would be okay to give access to commands such as, “show ip interface brief”, “show interface”, and “clear counters”. I want to deny commands such as “show running-config” and “configure”.<br /><br />I have setup shell command authorization in every possible way (user level, group level, creating shell command authorization sets, per NDG etc.) and I cannot get them to work. I have read through many docs on Cisco’s website and I’m still unable to get this to work. I suspect there may be some AAA settings on the devices that may be overriding the ACS settings, but I’m not sure. I’m relatively new at configuring ACS and I’ve run out of ideas. Any suggestions?<br /> 30 leolaohooSep 2, 2009, 3:13pm PSTSomething more simpler.<br /><br />Configuring Security with Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_sec_4cli_ps6017_TSD_Products_Configuration_Guide_Chapter.html#wp1170533')">http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_sec_4cli_ps6017_TSD_Products_Configuration_Guide_Chapter.html#wp1170533</A> nsn-amagruderSep 2, 2009, 6:29pm PSTLook at the authentication/authorization logs in the ACS and it will give you a better idea of what the issues is. You are definently on the right track. Per Group Level is the best idea. Not sure if you are mapping back to an AD Group or using seperate ID's on the ACS.<br /><br />The other option is to give them access to a network management system that will show them the current status of the device, errors in the last 5 minutes through the last x days,months, years, events, snmp traps etc.<br /><br />Solarwinds is a good product for this.<br /><br />Let us know what the ACS logs show, what shell commands you have set, NDG, Shared Resources and group settings you have set.<br /><br />Aaron Magruder<br />NonStop Networks, LLC<br /><A HREF="javascript:newWin('http://www.nonstopnetworks.net')">http://www.nonstopnetworks.net</A>bradley.mooreSep 3, 2009, 4:26am PSTThe TACACS+ Accounting log shows me the date & time my test account authenticated, what group it belongs to, from what IP, the session starting & stopping, & the elapsed time. The TACACS+ Administration log show what commands were issued. What other logs do you suggest I look at?<br /><br />They do have access to solarwinds for monitoring and this does provide a wealth of information. <br /><br />I am going to start from scratch - new router with a blank config, new ACS group and test user. <br /><br />Thanks for your help! nsn-amagruderSep 3, 2009, 4:37am PSTI'm not sure if the login or commands were failing at the network device. May it fail, then check the failed attempts log. This log usually points directly to the issue.bradley.mooreSep 3, 2009, 5:12am PSTThanks! The problem is I am unable to restrict specific commands using the shell command authorization. The test account can authenticate, enter privileged mode and run all commands. No matter how I setup shell command authorization, I cannot get it to deny any commands. nsn-amagruderSep 3, 2009, 5:43am PSTGotcha...Under the Group, what shell privilege level is check or entered under the shell section? I believe you can also set the shell command sets in this section. Set the privelege level to 1. I don't have access to one at the moment, but I believe their is a drop down menue and a place to check a box privilege level and type 1.<br /><br />In the passed authentication log, are the users getting mapped to the group you are setting the rights on?<br /><br />Try setting the command authorization to none just to verify that the group can no longer do anything.<br /><br />To prevent the application of any shell command-authorization set, select (or accept the default of) the None option. <br /><br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.0/user/guide/g.html#wp480029')">http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.0/user/guide/g.html#wp480029</A><br /><br />command sets<br /><br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/SPC.html#wp697557')">http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/SPC.html#wp697557</A>bradley.mooreSep 3, 2009, 12:01pm PSTprivilege is 1<br />I've checked the authentication logs, and my test user is getting mapped to the correct group.<br /><br />I changed the shell command authorization to "none" and it still allowed me to issue commands. There has to be something else that is over riding this. I just can't find it yet.awhitemadisonAug 26, 2009, 9:33pm PSTHow do I configure wireless security for a WRV54G router? 30 bbuffinAug 27, 2009, 6:53am PSTTake a look at the user guide. There is a section on wireless security.<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/customer/products/ps9923/products_user_guide_list.html')">http://www.cisco.com/en/US/customer/products/ps9923/products_user_guide_list.html</A><br /><br />Hope this helps.<br /><br />Brandonkar.bibhuAug 18, 2009, 2:02am PSTIn my 6509 switch IOS stored in Sup-bootflash:. I can check it by giving command dir sup-bootflash. But in config there is no boot sequence command. Can some one pls advice which command should i enter to reflect the same in running config? 30 leolaohooAug 18, 2009, 2:12pm PSTIn enable mode, try <b><br /><br />sh bootvar</b><br /><br /><i><b>Please rate if the post is helpful and/or applicable. Thanks. </b></i>bliemsAug 10, 2009, 12:43pm PSTHello, I was configuring a BRI on a 1841 & it appears that Layer 1 & 2 are up, but I still do not get any layer 3 active calls. I performed a "debug isdn q931 & one of the statements showed: <br /><br />Aug 10 18:09:14.835: ISDN BR0/1/0 Q931: TX -> SETUP pd = 8 callref = 0x20<br /> Bearer Capability i = 0x8890218F<br /> Standard = CCITT<br /> Transfer Capability = Unrestricted Digital<br /> Transfer Mode = Circuit<br /> Transfer Rate = 64 kbit/s<br /> Channel ID i = 0x83<br /> Keypad Facility i = '18007931089'<br />*Aug 10 18:09:15.747: ISDN BR0/1/0 Q931: RX <- CALL_PROC pd = 8 callref = 0xA0<br /> Channel ID i = 0x89.<br />*Aug 10 18:09:16.787: ISDN BR0/1/0 Q931: RX <- PROGRESS pd = 8 callref = 0xA0<br /> Progress Ind i = 0x8A81 - Call not end-to-end ISDN, may have in-band info<br /> Signal i = 0x01 - Ring back tone on ....<br /><br />we are using 56k off of the BRI interface like the customers other sites, which are working:<br /><br />interface BRI0/1/0<br /> description backup<br /> ip address negotiated<br /> ip directed-broadcast<br /> encapsulation ppp<br /> no ip route-cache cef<br /> no ip route-cache<br /> no ip mroute-cache<br /> dialer idle-timeout 300<br /> dialer string 18007931089 class 56k<br /> dialer load-threshold 1 either<br /> dialer-group 1<br /> isdn switch-type basic-ni<br /> isdn spid1 21224226310101<br /> isdn spid2 21224226320101<br /> no peer default ip address<br /> no fair-queue<br /> no cdp enable<br /> ppp authentication pap callin<br /> ppp chap password 7 xxxxxx<br /> ppp pap sent-username storeowd password 7 xxxxx<br /> ppp multilink<br />ip route 0.0.0.0 0.0.0.0 BRI0/1/0 250<br />ip route 1.1.1.1 255.255.255.255 BRI0/1/0access-list 101 permit ip any host 1.1.1.1 log<br />access-list 101 permit tcp any any gt 1 log<br />access-list 110 remark Traffic from ATA<br />access-list 110 permit ip 10.193.249.11 0.0.0.4 any<br />access-list 111 remark Traffic destine to ATA<br />access-list 111 permit ip any 10.193.249.11 0.0.0.4<br />dialer-list 1 protocol ip list 101<br /><br /><br />It appears that the config should work. Would this be an issue on the service provide side with their setup?<br /><br /> 30 a-vazquezAug 14, 2009, 11:36am PSTBefore using a router with an ISDN basic rate interface (BRI) interface, you must order a correctly configured ISDN BRI line from your local telecommunications service provider. <br /><br />The ordering process varies from provider to provider and from country to country. However, some general guidelines apply: <br /><br />•Ask for two channels to be called by one number. <br /><br />•Ask for delivery of calling line identification, also known as Caller ID or automated number identification (ANI). <br /><br />•If the router will be the only device attached to the ISDN BRI line, ask for point-to-point service and a data-only line. <br /><br />•If you plan to connect another ISDN device (such as an ISDN telephone) to the ISDN BRI line through the router, ask for point-to-multipoint service (subaddressing is required) and a voice-and-data line. <br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/routers/access/1800/1841/software/configuration/guide/b_setup.html#wp53871')">http://www.cisco.com/en/US/docs/routers/access/1800/1841/software/configuration/guide/b_setup.html#wp53871</A>bliemsAug 17, 2009, 8:52am PSTThanks. I will check that out!megee33333Aug 3, 2009, 12:09pm PSTHi,<br />I work in a small firm with just a switched network in a workgroup style.<br />How can I monitor the switch?<br />What can i hope to monitor?<br />Thanks 30 collin_clarkAug 3, 2009, 12:21pm PSTIt depends on the model, but you can monitor quite a bit. CPU/Memory, interfaces, environmentals, etc. If you have the web image on the switch you can enable HTTP on it and get a nice GUI to look at. joukJul 20, 2009, 2:41am PSTSIP_PHONE-1<--->Cisco<--->SIP_PHONE-2<br /><br />I have IOS c2800nm-ipvoice-mz.124-15.T1. How I can to transparently transmit a SIP connection through this cisco, without of changing of SIP_PHONE-1 address to the adress of Cisco ? 30ldardonJul 28, 2009, 2:24pm PST• Session Initiation Protocol (SIP) v2 (RFC 3261, 3262, 3263, 3264)<br />• SIP proxy redundancy - dynamic via DNS SRV, A records deregistration with primary SIP proxy server<br />• SIP support in network address translation (NAT) networks (including Serial Tunnel [STUN])<br />• Highly secure (encrypted) calling via prestandard implementation of Secure RTP<br />• Codec name assignment<br />BondocAFSJul 18, 2009, 7:15pm PSTHi everyone, we are tasked to setup a network solution for a 5-story building with 300 employees. Since we are new to the networking industry we need suggestions from you guys about the right hardware devices that will fit our needs. Thanks.<br /><br />Here are some of our requirements:<br />-it must be scalable<br />-must be hierarchical<br />-must have VPN support<br />-secure enough against attacks<br />-it is a stub network that will connect to the ISP<br /> 30 collin_clarkJul 20, 2009, 12:21pm PSTYour best option would be to contact your local Cisco office and work with one of their SE's. They can help you design and use best practices. <br /><br />Hope that helps. lavramovJul 23, 2009, 10:40pm PSTlook at 2800 serie, 3800 router serie.<br /> leolaohooJul 24, 2009, 6:38pm PSTCisco's Interactive Product Advisor<br /><A HREF="javascript:newWin('http://www.ciscowebtools.com/ProductAdvisor/')">http://www.ciscowebtools.com/ProductAdvisor/</A> amarmn1975Jul 20, 2009, 11:24pm PSTHii<br /><br />How can i restore the dc directory for CCO 4.1 30 bbuffinJul 22, 2009, 12:55pm PSTA BARS restore also restores the DC Directory.<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/bars/4_0_12/restore1.html')">http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/bars/4_0_12/restore1.html</A><br /><br />Hope this helps.<br /><br />Brandon amarmn1975Jul 22, 2009, 7:53pm PSTHii,,<br /><br />Thanks, but i want to restore The DC password not data.<br /><br />Thanks.. bbuffinJul 23, 2009, 4:06am PSTSee the following link.<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a008064f6c2.shtml#Solution2')">http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a008064f6c2.shtml#Solution2</A><br /><br />Hope this helps.<br /><br />Brandon rob.huffmanJul 23, 2009, 6:41am PSTHey Brandon,<br /><br />Very helpful info! +5 points for this, I don't remember ever seeing this excellent doc.<br /><br />Cheers!<br />Rob antonello.monetaJul 10, 2009, 1:43am PSTHello, <br />Till now I work only with router 1800 and 2800. <br />I would like to know if some of you have some experience in configuring a router 520. What I want to know if with this router can I realize this scenario:<br />- 3 Vlan: vlan1, vlan2, vlan3.<br />- 3 Lan: 10.x.1.0/24, 10.x.2.0/24, 10.x.3.0/24(each lan correspond a vlan)<br />And I have to management some access and security issue using acl, for example, vlan1 cannnot access to internet, and only vlan2 can access to vlan1. <br />I know how to realize this, but reading data-sheet and user guide of cisco 520, I am not sure 100%, if can do what I neet.<br />Thank you really much. 30 wong34539@yahoo.comJul 16, 2009, 3:10pm PSTVLANs in Cisco 520 Router Series:<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/routers/access/500/520/software/configuration/guide/520scg_dhcp_vlan.html#wp1019824')">http://www.cisco.com/en/US/docs/routers/access/500/520/software/configuration/guide/520scg_dhcp_vlan.html#wp1019824</A>fmartic26Jul 15, 2009, 10:03am PSTI am trying to backup LMS 2.6 but every time i get backup.lock file generated. I am making remote migration to LMS 3.1 30fmartic26Jul 15, 2009, 10:33am PSTI forgot to attache dbbackup.log<br /><br /><b>Attachment Keywords : </b> <br />1) dbbackup.rar<br />dbbackup.rar118495application/octet-streamexe1589807/15/2014noant_hickeyJul 9, 2009, 4:19am PSTHi all,<br /><br />We are having some issues with setting the WLAN override function in a situation where we have two 6504's with WiSM cards. When we test failover from one to the other we are finding that we are losing some of the SSID's. Both WiSM's are set up the same with the same SSID's available.<br /><br />Obviously this is an issue as in a failure situation we are going to lose connectivity on some of our SSID's.<br /><br />Has anyone come across the problem before?<br /><br />Thanks,<br /><br />Anthony 30htarraJul 15, 2009, 7:32am PSTTo get around this is to define all your SSIDs in all of your controllers so that the APs never lose their configs. liam@catholicsteward.comJul 9, 2009, 12:43pm PSTAnyone have thoughts on how I can monitor and trend how much bandwidth and latency my office is using/encountering? At a much larger company I used Concord's EHealth, but at a small business that can't afford EHealth, any thoughts? 30 ceclark@wpsic.comJul 9, 2009, 1:04pm PSTCheck out PRTG- It's cheap and pretty flexible with SNMP and Netflow.<br /><br /><A HREF="javascript:newWin('http://www.paessler.com/prtg6')">http://www.paessler.com/prtg6</A><br /><br />There are a ton of open source as well, but for basic monitoring PRTG is hard to beat.<br /><br />Hope that helps. leolaohooJul 9, 2009, 9:15pm PSTSolarwind's Engineer Toolset')