Cisco 1841 IP SLA

[NeghVar]

Here's my project. To setup a Cisco 1841 as a dedicated IP SAL unit between our switch and the Watchguard.

Presently:
LAN-->Switch-->Watchguard-->Cisco 2801-->T1
Goal:
LAN-->Switch-->Cisco 1841(IP SLA)-->Watchguard-->Cisco 2801-->T1

The 1841 will basicly act like a proxy specificly designed for IP SLA. No subnet change.
Initially, I need to set it up to allow pass-through (like a 2-port switch) for the LAN to reach the internet. IP SLA will be configured after.

 

[xphil3]

Here's my project. To setup a Cisco 1841 as a dedicated IP SAL unit between our switch and the Watchguard.

Presently:
LAN-->Switch-->Watchguard-->Cisco 2801-->T1
Goal:
LAN-->Switch-->Cisco 1841(IP SLA)-->Watchguard-->Cisco 2801-->T1

The 1841 will basicly act like a proxy specificly designed for IP SLA. No subnet change.
Initially, I need to set it up to allow pass-through (like a 2-port switch) for the LAN to reach the internet. IP SLA will be configured after.

What features within SLA are you using?

 

[NeghVar]

we plan to monitor application bandwidth usage as well as prioritize which apps get more bandwidth
We are also planning to use Solarwinds Orion NPM

 

[xphil3]

we plan to monitor application bandwidth usage as well as prioritize which apps get more bandwidth
We are also planning to use Solarwinds Orion NPM

http://www.cisco.com/en/US/docs/ios/ipsla/configuration/guide/12_4t/sla_12_4t_book.html
You may want to take a look at IP SLA a bit more indepth. What you want to do is not possible with SLA. SLA is a synthetic traffic generation tool, what's you're looking for will be in a hardware form(monitoring bandwidth and generating reports)... the NAM is a good choice.

You're also going to want to do queueing closest to the edge, perhaps at your watchguard if it supports it. If not, generate some QoS policies on that 1841 and go from there.

 

[NeghVar]

more detailed info.
netflow to be used on the router we intend to stick between the Firebox and the switch. Which we will then use Solarwinds NPM and NTA. Solarwinds provides free tools to help configure the router automaticly, but it still need to know how to make the two ethernet ports function as a pass-through while Netflow analyzes the data as it passes through.

Firebox(192.168.3.1)-->Cisco 1841(f0/0 192.168.3.249 f0/1 192.168.3.248)
I have already assigned the IPs to each interface. I just need to know if there are more configurations or if it does this automaticly.

We also looked into if Watchguard provides a feature like netflow. presently they don't. The closest we can get with Watchguard's firebox is SMNP v2 with RMON-MIB (v2). Watchguard is waiting til IPFIX is deployed then they'll implement it on there Fireware XMT

 

[xphil3]

more detailed info.
netflow to be used on the router we intend to stick between the Firebox and the switch. Which we will then use Solarwinds NPM and NTA. Solarwinds provides free tools to help configure the router automaticly, but it still need to know how to make the two ethernet ports function as a pass-through while Netflow analyzes the data as it passes through.

Firebox(192.168.3.1)-->Cisco 1841(f0/0 192.168.3.249 f0/1 192.168.3.248)
I have already assigned the IPs to each interface. I just need to know if there are more configurations or if it does this automaticly.

We also looked into if Watchguard provides a feature like netflow. presently they don't. The closest we can get with Watchguard's firebox is SMNP v2 with RMON-MIB (v2). Watchguard is waiting til IPFIX is deployed then they'll implement it on there Fireware XMT

hmmm...... you're using solarwinds to configure your routers? Maybe you should call in a consultant? Basic static routing is all you need to have this setup working.

If you plan to run netflow, I would also run this closest to the edge though it really doesn't make a difference. You may also want to look into flexible netflow as you can drill down specifically what you want to see in your records. If you had a chance to check out the NAM everything is done locally there, and obviously uses netflow.

 

[NeghVar]

hmmm...... you're using solarwinds to configure your routers? Maybe you should call in a consultant? .

just the netflow features. Not the whole router.
We setup the snmp for it manually.