Re: Ciscon ISDN router-reduced dial out? (2023 Update)

Dear All,

Has anyone configured a Cisco Catalyst 2950 that is connected over LAN to an ISP with two subnet? For example, my current configuration has an IP Address of 211.58.141.XXX 255.255.255.224 and another IP Address of 201.32.48.XXX 255.255.255.224 but we are already connected over a CAT 5 using VLAN1 in my configuration and having a ip default-gateway of 211.58.141.1. The problem is that the Cisco Catalyst 2950 can only have one ip default-gateway, how can I setup the Cisco Catalyst 2950 to use both of the IP Address to the same ISP? Many thanks!

Regards, Kengie

You will need a router between the 2950 layer 2 switch and your ISP.

You should also have some form of firewall between your network and the ISP

see Cisco doc:

I know this may not be for you, but who do you know that would be interested in earning healthy commission checks for simply locating companies with excess/surplus Cisco equipment.

We provide the capital and handle everything, you simply make the calls and find the companies.

If you are interested in learning more, please contact me.

NOTE: If you are reading this and you have some Used Cisco equipment that you'd like to turn into cash, email me and we will provide you with an offer.

Regards,

snipped-for-privacy@teksavers.com

Dear mexiace,

Fortunately, reputable Cisco Asset Recovery Specialists are already listed for the convenience of Cisco Equipment owners:

Ruben Staalenburg of TekSavers, Inc. is a member in good standing of this 1,300+ dealer network.

Unfortunately, have never heard of you.

Please keep in mind that the "cherry picking" of ONLY a "select" few items among a Surplus Cisco Equipment List happens to be an "occupational hazard" among those in the Cisco Asset Recovery business.

Sincerely,

Brad Reese BradReese.Com Cisco Repair Worldwide United Kingdom: 44-20-70784294 U.S. Toll Free: 877-549-2680 International: 828-277-7272 Fax: 775-254-3558 Website:

hi,

I'm getting weird graphics on mrtg when monitoring gigabit interface on cisco 2950 catalyst and another noname switch... as I read in the google.groups I added to the Target :::::2, but i still get :

SNMP Error: no response received SNMPv2c_Session (remote host: "x.x.x.x" [x.x.x.x].161) community: "public" request ID: -54145676 PDU bufsize: 8000 bytes timeout: 2s retries: 5 backoff: 1) at /usr/bin/../lib/mrtg2/SNMP_util.pm line 458 SNMPGET Problem for ifHCInOctets.25 ifHCOutOctets.25 on snipped-for-privacy@x.x.x.x:::::2 at /usr/bin/mrtg line 1607 WARNING: skipping because at least the query for ifHCInOctets.25 on x.x.x.x did not succeed SNMP Error: no response received SNMPv2c_Session (remote host: "x.x.x.x" [x.x.x.x].161) community: "public" request ID: -54145675 PDU bufsize: 8000 bytes timeout: 2s retries: 5 backoff: 1) at /usr/bin/../lib/mrtg2/SNMP_util.pm line 458 SNMPGET Problem for ifHCInOctets.26 ifHCOutOctets.26 on snipped-for-privacy@x.x.x.x:::::2 at /usr/bin/mrtg line 1607 WARNING: skipping because at least the query for ifHCInOctets.26 on x.x.x.x did not succeed ERROR: Target[x.x.x.x_25][_IN_] ' $$target[3]{$mode} ' did not eval into defined data ERROR: Target[x.x.x.x_25][_OUT_] ' $$target[3]{$mode} ' did not eval into defined data ERROR: Target[x.x.x.x_26][_IN_] ' $$target[4]{$mode} ' did not eval into defined data ERROR: Target[x.x.x.x_26][_OUT_] ' $$target[4]{$mode} ' did not eval into defined data

any idea how to solve this...

hi, bought a cisco 837 2 months ago and still cant connect the bastard, i need config for pppoe (country pt) and to let 2 pc´s acess. dont need for firewall and nothing much, just the basic to have all services available in the pc´s http ftp p2p ... if somebody got the config and want to share it will be great TIA

Hi,

The catalyst 2950 is a switch. Switches normally only have an ip address configured for maintenance reasons, not for routing! Are you sure you'd like to have two ip-addresses/subnets defined on the switch? For what purpose?

Erik

Hi,

The catalyst 2950 is a switch. Switches normally only have an ip address configured for maintenance reasons, not for routing! Are you sure you'd like to have two ip-addresses/subnets defined on the switch? For what purpose?

Erik

You don't need more than one default-gateway in your 2950 switch. Its only used for maintenance access, as the 2950 doesn't route.

Hi David,

Win98 could be sending a WINS request (unicast) to the DNS, this may be why the router dials out.

It may help to set a filter in the router to filter out any WINS to DNS request.

Sincerely,

Brad Reese BradReese.Com Cisco Repair Worldwide United Kingdom: 44-20-70784294 U.S. Toll Free: 877-549-2680 International: 828-277-7272 Fax: 775-254-3558 Website:

Hi,

i've problems building up an vpn tunnel from a notebook to my soho 91. I'm newbee, sorry for that, but here i post my config and it will be fine, if someone can check it.

Thanks Chris

------------------------ cisco(config)#do sh conf Using 2639 out of 131072 bytes ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname cisco ! boot-start-marker boot-end-marker ! enable secret 5 XXX ! username XXX password 0 XXX username CRWS_Giri privilege 15 password 0 XXX aaa new-model ! ! aaa authorization network hw-client-groupname local aaa session-id common ip subnet-zero no ip source-route ip dhcp excluded-address 192.168.0.1 ip dhcp excluded-address 192.168.0.1 192.168.0.49 ip dhcp excluded-address 192.168.0.100 192.168.0.254 ! ip dhcp pool CLIENT import all network 192.168.0.0 255.255.255.0 default-router 192.168.0.1 lease 0 2 ! ! ip name-server 195.158.xxx.xxx ip name-server 195.158.xxx.xxx ! ! ! ! ! crypto isakmp policy 1 encr 3des authentication pre-share group 2 crypto isakmp client configuration address-pool local dynpool ! crypto isakmp client configuration group USERID1 key PASSWORD dns 192.168.0.1 pool dynpool acl 199 ! crypto isakmp client configuration group USERID2 key PASSWORD dns 192.168.0.1 pool dynpool acl 199 ! ! crypto ipsec transform-set transform-1 esp-3des esp-sha-hmac ! crypto dynamic-map dynmap 1 set transform-set transform-1 reverse-route ! ! crypto map dynmap isakmp authorization list hw-client-groupname crypto map dynmap client configuration address respond crypto map dynmap 1 ipsec-isakmp dynamic dynmap ! ! ! interface Ethernet0 ip address 192.168.0.1 255.255.255.0 ip nat inside ip tcp adjust-mss 1452 ! interface Ethernet1 no ip address duplex auto pppoe enable pppoe-client dial-pool-number 1 crypto map dynmap ! interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 dialer-group 1 ppp authentication chap pap callin ppp chap hostname *** ppp chap password 0 *** ppp pap sent-username *** password 0 **** ppp ipcp dns request ppp ipcp wins request ! ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 ip http server no ip http secure-server ! ip nat inside source list 102 interface Dialer1 overload ! ! access-list 102 permit ip 192.168.0.0 0.0.0.255 any access-list 199 permit ip 192.168.0.0 0.0.0.255 any dialer-list 1 protocol ip permit ! control-plane ! ! line con 0 no modem enable transport preferred all transport output all line aux 0 transport preferred all transport output all line vty 0 4 exec-timeout 120 0 length 0 transport preferred all transport input all transport output all ! scheduler max-task-time 5000 end

In article , mexiace wrote: :I know this may not be for you, but who do you know that would be interested in earning healthy commission checks for simply locating companies with excess/surplus Cisco equipment.

How many envelopes would I have to stuff; how many people would be above me in my "upline"; and do I have to pay my own postage when I send the people above me on the list $5 each?

The problem is that Cisco paid for this as far as I can tell. I wonder if Juniper SEs were on site to tweak? I didn't read it thoroughly but I'm thinking Cisco had an army there to assist.

It's hard to take vendor-paid-for testing too seriously. For example, would they have let Miercom publish it if it showed that Junipers won?

Anyone have any advice to reduce the number (and cost) of dial out from an ISDN Cisco router? I have advised the user to get broadband but in the short term it's not possible. The main problems seem to be:

- router ISDN channel is activated too easily (by Win98 pcs I suspect) and dials for no apparent reason (ie.due to broadcast)

- calls are shorter in time than the minimum charge level

Monthly call charges are astronomical so I have been asked to try to reduce it until broadband is approved.

Advice appreciated....

from (amazingly enough) cisco's site:

SysAdm

ps. if the line keeps staying up after the addition of the ACL, run a "debug dialer packet" to determine what exactly the interesting traffic (traffic that brings the link up) is.

David,

Presuming you have an access-list for your dialer (which is set to permit ip any any???) you havegot two options.

1. figure out via debug dialer ??? what is causing the dialouts you dont want, and deny it in the acl.
2. only allow to dial for the exact thing you want to trigger.

H> Anyone have any advice to reduce the number (and cost) of dial out from an

on cisco site it i written :

The following Cisco devices implement 64-bit SNMP counters: Catalyst 2950 and 3550 - support begins in 12.1(11)EA1 since CSCdx67611 and CSCdw52807

i'm with version : 12.1(13)EA1 but still get : snmpwalk -c public -v 2c x.x.x.x .1.3.6.1.2.1.31.1.1.1.6 IF-MIB::ifHCInOctets.28 = Counter64: 0 IF-MIB::ifHCInOctets.29 = Counter64: 14350162363

i.e. no .25 and .26 which are the GB interfaces.. but : IF-MIB::ifHCInOctets.25 = No Such Instance currently exists at this OID

I'm getting this : IF-MIB::ifDescr.24 = STRING: FastEthernet0/24

IF-MIB::ifDescr.25 = STRING: GigabitEthernet0/1 IF-MIB::ifDescr.26 = STRING: GigabitEthernet0/2

IF-MIB::ifDescr.27 = STRING: Null0 IF-MIB::ifDescr.28 = STRING: Vlan10 IF-MIB::ifDescr.29 = STRING: Vlan11