NAT and PAT on single IP

1. LAN will access the internet same WAN IP
2. Server will access outside  same WAN IP with static PAT server use port tcp / udp 9000

Router Config

interface FastEthernet0/0
 description WAN
 ip address 89.41.134.112 255.255.255.252
 ip nat outside.

interface FastEthernet0/1
 description LAN
 ip address 192.168.2.1 255.255.255.0
 ip nat inside

 ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.2.5 9000 interface FastEthernet1 9000
ip nat inside source static udp 192.168.2.5 9000 interface FastEthernet1 9000

!


access-list 100 deny   ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 100 deny   ip 192.168.0.0 0.0.255.255 10.0.0.0 0.255.255.255
access-list 100 permit ip 192.168.0.0 0.0.255.255 any

 Router#sh ip nat translations
Pro Inside global                  Inside local                Outside local        Outside global
tcp  89.41.134.112 :9000    192.168.2.5 :9000    101.57.166.85:50942  101.57.166.85:50942

Top 10 high utilization traffic on cisco router

TOP  10 high traffic utilization results.
top talker result on cisco router
Top 10 high utilization traffic on cisco router
-----------------------------------------------------------
interface FastEthernet0/0
 description *** WAN Link ***
 bandwidth 3072
 ip address 79.51.100.X 255.255.255.252
 ip flow ingress
 ip flow egress
 speed 100
 full-duplex


!
ip flow-top-talkers
 top 10
 sort-by bytes


-------------------------------------------------------




Router-R1#sh ip flow top-talkers


SrcIf         SrcIPaddress    DstIf            DstIPaddress           Pr SrcP DstP            Bytes
Fa0/0         12.181.72.2     Fa0/1            69.71.200.186        32 749F 255A          3914K
Fa0/1         69.71.200.186   Fa0/0*        12.181.72.2            32 163C 4ECC        1087K
Fa0/0         69.71.202.118   Local          79.51.100.X           06 D88F 0017          936
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.10      06 05F6 4261           152
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.153    06 089B 2329           144
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.154    06 08BD 2329          144
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.151    06 09EB 2329           144
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.151    06 05B3 2329           144
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.151    06 09EB 2329           144
Fa0/1         69.71.200.186   Fa0/0*        192.168.100.151    06 05B3 2329            144
10 of 10 top talkers shown. 29 flows processed.
85_SanDiego#

Cisco UCS with Nexus VPC

Note:
1. Cisco UCS Mini 5108 with Fabric interconnect 6324
2. Cisco  Nexus 3000k pair.
3. Cross connection topology .
4. Only VPC configuration display
5. Only UCS link configuration shown.

------------------------------------------------------------------------------

------------------------------------Nexus Switch-1----------------------------------------------------------
CORW-NX-SW1#  sh run


feature lacp
feature vpc
feature lldp
feature vtp


interface mgmt0
  ip address 10.10.10.1/24

vrf context management
  ip route 10.10.10.0/24 10.10.10.2

vpc domain 1
  peer-keepalive destination 10.10.10.2
  peer-gateway

!
interface port-channel50
  switchport mode trunk
  spanning-tree port type network
  speed 10000
  vpc peer-link

interface port-channel101
  description ** VPC link to UCS-F1 **
  switchport mode trunk
  speed 10000
  vpc 101

interface port-channel102
  description ** VPC link to UCS-F2 **
  switchport mode trunk
  speed 10000
  vpc 102

interface Ethernet1/1
  description ** UCS-F1-1 **
  switchport mode trunk
  channel-group 101 mode active



interface Ethernet1/2
  description ** UCS-F2-1 **
  switchport mode trunk
  channel-group 102 mode active



interface Ethernet1/46
  description ** NEXUS-SW2 VPC link **
  switchport mode trunk
  channel-group 50 mode active


interface Ethernet1/47
  description ** NEXUS-SW2 VPC link **
  switchport mode trunk
  channel-group 50 mode active






-----------------------------Nexus Switch-2 -------------------------------------
CORE-NX-SW2# sh run

 feature lacp
feature vpc
feature lldp
feature vtp


vrf context management
  ip route 10.10.10.0/24 10.10.10.1


vpc domain 1
  peer-keepalive destination 10.10.10.1


interface mgmt0
  ip address 10.10.10.2/24

!
interface port-channel50
  switchport mode trunk
  spanning-tree port type network
  speed 10000
  vpc peer-link

interface port-channel101
  description ** VPC link to UCS-F1 **
  switchport mode trunk
  speed 10000
  vpc 101

interface port-channel102
  description ** VPC link to UCS-F2 **
  switchport mode trunk
  speed 10000
  vpc 102

interface Ethernet1/1
  description ** UCS-F2-P1 **
  switchport mode trunk
  channel-group 101 mode active



interface Ethernet1/46
  description ** NEXUS-SW1 VPC link **
  switchport mode trunk
  channel-group 50 mode active


interface Ethernet1/47
  description ** NEXUS-SW1 VPC link **
  switchport mode trunk
  channel-group 50 mode active



----------------------------------UCS Configuration-------------------------------------------

Configure Ports on UCS Steps

1. Select the ports individually and right click on the port.
2. Select Configure as Uplink Port.

 

Fabric -1
 . Port-1
 . Port-2

Fabric -2
 . Port-1
 . Port-2

---------------------------------------------------------------------------------- ----------

Configure Port Channel on UCS

1. Go to LAN Tab
2. Go to Fabric -A
3. Right Click on Port Channels 
4. Click on Create Port Channel 

5. Select and add ports.

 6. Finish.
7. Now select Fabric-B and apply steps (2 to 6)


Your all connect Ports should look green.

-----------------------------------------------------------------------------------------


Troubleshoot commands.

Show vpc

-CORW-NX-SW1# sh vpc consistency-parameters vpc 102

Testing on both Nexus switch and the result should be Up and success.




vPC status
----------------------------------------------------------------------------
id     Port        Status Consistency Reason                     Active vlans
------ ----------- ------ ----------- -------------------------- -----------
101    Po101       up     success     success                    1,10-14
102    Po102       up     success     success                    1,10-14

Remote Client VPN on Cisco 800 Router

Cisco Router 891 , Cisco Remote VPN Client


!
interface GigabitEthernet0
 description ** WAN Internet Link ***
 ip address 38.93.235.182 255.255.255.128
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
 crypto map EXT_MAP
!

interface Vlan1
 ip address 192.168.110.10 255.255.255.0
 ip nat inside
 ip virtual-reassembly in


ip local pool VPN_CLIENT_POOL 192.168.200.20 192.168.200.100
ip forward-protocol nd
!
!
ip http server
no ip http secure-server
ip nat inside source route-map NAT_INT interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 38.93.235.254
!
a
access-list 101 deny   ip 192.168.110.0 0.0.0.255 192.168.200.0 0.0.0.255
access-list 101 permit ip 192.168.110.0 0.0.0.255 any
access-list 101 permit ip 192.168.111.0 0.0.0.255 any
access-list 101 permit ip 192.168.112.0 0.0.0.255 any
access-list 101 permit ip 192.168.113.0 0.0.0.255 any
access-list 101 deny   ip any any
access-list 110 permit ip 192.168.110.0 0.0.0.255 192.168.200.0 0.0.0.255
!
!
!
!
route-map NAT_INT permit 1
 match ip address 101
!
!

aaa new-model
!
!
aaa authentication login ciscocp_vpn_xauth_ml_1 local
aaa authorization exec default local
aaa authorization network ciscocp_vpn_group_ml_1 local
!
!
!
!
username admin privilege 15 password 0 admin2015
username vpnuser secret 5 XXXXXXXX

!
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2
 lifetime 3600
!
crypto isakmp client configuration group vpnuser
 key admin@2015
 dns 8.8.8.8
 domain turbo.com
 pool VPN_CLIENT_POOL
 acl 110
!

!
crypto ipsec transform-set TRANS_3DES_SHA esp-3des esp-sha-hmac
!
crypto dynamic-map EXT_DYNAMIC_MAP 10
 set transform-set TRANS_3DES_SHA
!
!
crypto map EXT_MAP client authentication list ciscocp_vpn_xauth_ml_1
crypto map EXT_MAP isakmp authorization list ciscocp_vpn_group_ml_1
crypto map EXT_MAP client configuration address respond
crypto map EXT_MAP 10 ipsec-isakmp dynamic EXT_DYNAMIC_MAP
!
!
!

Cisco CUE 8.6 General Delivery Mailbox (GDM)

Cisco CUE 8.6 General   Delivery Mailbox (GDM)

Note:

1. CME 10.5 and CUE 8.6 IOS version

2.  User are configure in CUE and CME.

3. Only add member and owner in GDM

4. Using one PSTN direct line number. E.164 number  4083994000

5. My 202 and 203 extension already configure in CME and CUE.

6. 202 and 203 are the member and owner in GDM.

7. CME and CUE basic config already there. showing only step to creating GDM

8. Extension 301 is my hunt group.

9. for basic config check this link

 http://cisconetlabs.blogspot.in/2015/08/cme-call-forward-to-mobile-phone.html

--------------------------------Steps -Picture ---------------------------------------

1. Login to yours CUE via web access

2. Create Group.

3. After create the Voicemail group shown in the Voice mail --> mailboxes

4. Go to the Group and add your Primary extension number and E.164 number

 5. Add user in this group. member and owner

6. Check mailbox setting

7. Configure mail box setting . some are default.

8. check greeting

9. Check caller input

10. Refresh MWI message waiting indication.

 11. Check the VM configuration