I have just purchased an IP Wireless/Wired camera for home cctv use, i can connect it through my dad's virgin media super hub with an ethernet cable and everything is fine, but every time i try and use it without the ethernet cable and via the WIFI antenna on the camera - i cant access the IP site at all - am i doing something wrong or does it sound like a faulty antenna on the camera.
View 5 Repliescisco products and am struggling getting a VPN going between an ASA 5505 and 5510. I have a VPN created (using the VPN wizward on both) and it shows the VPN is up, but I can't ping the remote site (from either side).
View 11 Replies View RelatedI have plugged my computer into the modem by way of a Ethernet cable and I immediately got a Local Area Network 2 icon that said a network cable is unplugged. Ive checked the cable with this PC, and it works. i tried this:1.) Shut dowm your PC.2.) Unplug the power cord. 3.) If you have a laptop, remove the battery as well. 4.) Walk away from the problem for at least 30 minutes. 5.) When you return, reconnect battery and power cord.5.) Start as usual.6.) If this solves the problem, take 20 minutes and post this to all of those message boards that you didn't find the solution to.
And This:Try a Simple Power Cycle ( as it is called so in Tech Terms )i,e Switch of the Computer/S , Router, Modem of your ISP Wait for 4 to 5 mins Switch on the Modem -- Wait untill all the lights come up and then again wait for 2 mins Switch on the Router -- Wait for 3 mins Switch on all other computers that are working, then check conectivity Switch on this computer that has a problem, then Try browsing.
This resolves most issues ( Basically it is the static in the unused ports that gets discharged )It that does not happen, delete all existing Lan Connection, Uninstall your network Driver, Reinstall the Drivers, then reconfigure you net connection then try It still that does not work out and you still get the " Network Cable Unplugged " Msg Then Unplug the Cable Then go to Start > Run > type regedit Navigate to HKEY_CLASSES_ROOTCLSIDThen Delete the key below {7007ACCF-3202-11D1-AAD2-00805FC1270E} Then Restart the comp and reconnect the cable and then tryand this:Using windows xp, the quick fix for this is to reinstall the drivers for your NIC
I have a desktop running windows XP Professional x32 SP3 and my network adapter is a Realtek PCIe GBE Family Controller. The desktop is connected to the network with an ethernet cable.Up until yesterday the internet connectivity just stopped working. I am seeing a very low number of received packets as opposed to the high number when it was working. It is showing that it is connected to the network but I still can't access the internet. Also I should mention that the desktop is at work and it is connected to a DHCP server that assigns IP addresses. I have updated all the drivers and I have used Winsock Fix and Netsh but it still isn't working. However the weird thing is that if assign a static IP address to it...it works. But I can't do this because I am not suppose to hook it up to the ports assigned to the switch for static IP's. It has to be connected to the DHCP switch. Why does it work when assigned a static but not if it gets an IP assigned by the DHCP server or switch. Also even if I try to reset, renew or release the IP...when I connect again it still gives me the same IP. It wont change.
View 1 Replies View RelatedI've got a Cisco 5520, to which is a Cisco 5505 is connected via a Site to Site tunnel.The tunnel works just dandy, with traffic happily being passed to and from my Inside interface.
The issue comes with users connected to the 5505 access our DMZ, it simply refuses to work. I've read many posts about the changes made in 8.3 (which I'm running on the 5520) when it comes to NAT exemptions which I believe is the issue I'm having but I'm not able to implement any configuration to allow my site to site VPNs to connect to hosts within the DMZ.
An old copy of the configuration below (I tried many things after this point, but this is one of the cleaner copies!), [code]
I have a requirement to create a site to site vpn tunnel on ASA 5510 from a remote site to my HO, ihave already other site-to-site tunnels are up and running on the ASA.The issue is my remote site has got the network address which falls in one of the subnet used in HO(192.168.10.0/24).My requirement is only My remote site need to accees couple of my servers in HO which is in 192.168.200.0/24 subnet.
View 2 Replies View RelatedToday I purchased a Motorola SURFboard extreme Cable Modem DOCSIS 3.0 in order to replace my old modem which is out of date and has been very slow as of late. I connected the coaxial cable, Ethernet cable(to Linksys wireless router), and power expecting it to simply work. All four lights came on green (power, downstream, upstream, connectivity). The downstream light turned blue which indicates a bonded connection.The device light was blinking on the modem. I connected to my wireless router, but no internet access. I then tried connecting my laptop to the modem directly via Ethernet cable, still no access. I think that rules out the router being the problem. I also ruled out my laptop being the problem as the same thing is occurring with my other laptop and desktop. I called my ISP (Cox Cable) and had them re-establish connection with my modem, this did nothing. I thought for sure this meant I had purchased a faulty modem; I hooked up my old modem and the results were the same, the modem connected fully with no problem (all four lights were green) but I have no internet access.
View 3 Replies View RelatedI configurated Ipsec vpn at asa 5510. my inside ip 192.168.10.156my public ip: 85.x.x.xmy peer ip : 62.x.x.x
the project is that:
the remote site want the interesting traffic like that:
source ip 172.16.1.104 can access destination ip 10.0.154.27
My inside ip is 192.168.10.0/0 and i can not to change it 172.16.1.0/24 and i can not to add this ip at my network.
Our Headquarter (asa 5510) is running a site to site vpn connection with a Branch office (router 2811). All remote users are accesing the internet through the VPN and also accesing headquarter file servers.I want to know if there is a way for some remote users to be able to use the vpn for accesing the file servers but to access the internet through the branch office. The rest of the remote users will be still accessing the internet through VPN.
View 2 Replies View RelatedI've setup a site to site vpn on an ASA 5510 using ASDM (as I have many times before) and the tunnel appears to be up but I am not able to pass traffic. When I run the packet tracer from my inside network to the remote destination network, it shows that it is blocked by the implicit deny ip any any rule on my inside incoming access list.
View 5 Replies View Relatedwe have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly.Site/Subnet A: 192.160.0.0 - local (8.4(4)) Site/Subnet B: 192.260.0.0 - remote (8.2(5)) VPN Users: 192.160.40.0 - assigned by ASA When you VPN into the network, all traffic hits Site A, and everything on subnet A is accessible.
Site B however, is completely inaccessible for VPN users. All machines on subnet B, the firewall itself, etc... is not reachable by ping or otherwise.There are also some weird NAT rules that I am not happy with that were created after I upgraded Site A ASA to 8.4
Site A internal: 192.160.x.x External: 55.55.555.201(main)/202(mail)
Site B (over site-to-site) is 192.260.x.x External: 66.66.666.54(all)
I pretty much just have the basic NAT rules for VPN, Email, Internet and the site-to-site.What do I need to add for the VPN to be able to access the site-to-site network?
Here is my NAT config:
nat (inside,Outside) source static DOMAIN_LOCAL DOMAIN_LOCAL destination static VPN_Network VPN_Network no-proxy-arp route-lookup
nat (inside,Outside) source static DOMAIN_LOCAL DOMAIN_LOCAL destination static DOMAIN_REMOTE DOMAIN_REMOTE no-proxy-arp route-lookup
!
object network DMZ_Network
nat (DMZ,Outside) dynamic interface
object network DOMAIN_LOCAL
[code]....
ASA = 8.2(1)
ASDM = 6.2(1)
Recently I used the wizard to create an IPsec site-to-site connection, which went very smoothly; however, I now noticed that when I connect via Anyconnect 2.5.0217 I cannot get to local and subnatted resources on the network.
I rolled back to saved config file, which was taken before the site-to-site vpn was created, but that did not work as well.What should I check to see why I can no longer get to different subnets after the site-to-site vpn connection.
I am try to configure ASA 5510 with 8.3 IOS version.My internal users are 192.168.2.0/24 and i configured dynamic PAT and are all internet .
i want configure identity NAT for remote access VPN.Remote users IP pool is 10.10.10.0 to 10.10.10.10
i know to configure NAT exemption in IOS 7.2 version. But here IOS 8.3 version. configure NAT exemption for 192.168.2.0/24 to my remote pool( 10.10.10.0 to 10.10.10.10).
We have a client that has a Cisco 1801W Firewall that is setup as a site to site VPN terminating to a Cisco ASA 5505. The tunnel is up and established, I can ping from both sides of the tunnel.
The problem is the clients behind the Cisco ASA (192.168.2.x) cannot reach certain ports behind the Router (192.168.1.x). The main thing we're trying to do is browse via UNC path (ex: \192.168.1.120 from a 192.168.2.x machine).
I got 3389 working after I changed the - ip nat inside source static tcp 192.168.1.120 3389 y.y.x.x 3389 route-map DM_RMAP_1 extendable Modified the command to include the public IP instead of interface FastEthernet0
I believe it has something to do with the way NAT and route-maps are setup currently but I'm not familar enough with them to make the changes. I worked with Cisco to ensure the VPN tunnel was fine and it's something security related on the Router.
Here is the configuration (removed a few lines not necessary. y.y.x.x = WAN IP of Router x.x.y.y = WAN IP of ASA).
Building configuration...
Current configuration : 23648 bytes
!
version 12.4
no service pad
[Code].....
I have a ASA 5510 that has multiple site to site VPNs. I need to create an additiona site to site VPN but only allow 1 host to access and traverse the tunnel. The network is on a 192.168.5.x but the host that will need to access this tunnel needs to be on a 172.16.33.x network. I dont want any other traffic allowed to access or traverse the VPN tunnel for this host. How can I set this up?
View 33 Replies View RelatedI have a Cisco 2911 router configured with a couple of VPN tunnels . The issue that I am having is that I cannot access the servers (WEB,EMIL) thru the tunnel . After looking around found out that adding a route-map to my static NAT rule will fix the issue . Once I do that I am able to access the serves thru the VPN but my local machines lose internet access .So I have to delete the access list The issue seems to be with the Access list 110 permit ip [code]
View 5 Replies View RelatedHow can I NAT the same set of four hosts and give them access to two different networks across an IPSEC site-to-site VPN tunnel? I'm using an ASA5520 running 8.04.
I have four hosts say: 10.240.1.1-10.240.1.4
They need access to two different networks:
205.100.150.0
140.175.200.0
I woud like to NAT them as something like:
7.5.210.1
7.5.210.2
7.5.210.3
7.5.210.4
I have a cisco ASA 5510 at the branch here. It terminates about 8 vpn tunnels and also it supports remote access clients. I just have a quick question. Can my remote sub-net group access the other remote access site-site VPN subnet group. If yes then how should i configure it.
View 6 Replies View RelatedCan I use a single Public IP address for both Internet access and site to site vpn access?If not, can I configure the RV220W as a bridge and still use it via another gateway configured for vpn passthrough as a VPN appliance/server on the LAN?
View 3 Replies View RelatedI am attempting to configure Radius authentication accross a site-to-site VPN for my ASA 5510-01 for remote access.
ASA5510-1 currently has a live site to site to ASA5510-2.
ASA 5510-1 - 10.192.0.253
ASA 5510-2 - 172.16.102.1
DC - 172.16.102.10
ASA5510-01 can ping the DC and vica versa but is unable to authticate when i perform a test. ASA5510-01 can authenticate to a DC on it;s own LAN but not on the remote LAN that DC sits on.
I have double checked the 'Server Secret Key' and ports as well as various users which all work locallly. ASA5510-02 authenticates to DC with no problems.
Have asa 5520 ver 8.0(4) I have vpn client access created and working I have l2l vpn created and working with another set of asa The issue at hand VPN client from internet connects and authenticates, this client can access Site A's networks with no problems. However vpn client on Site A ASA can not access Networks through l2l tunnel located at Site B.
View 2 Replies View Relatedwe set up a site-to-site-vpn between a 5505 and a 5510 (both asa8.3.1). We configured both sides using the VPN-Wizard in the ASDM. When we try to ping from the network behind the 5505 (192.168.45.0/24) to any host behind the 5510 (192.168.0.0/24) the tunnel gets established but the ping doesn't get trough. After that we tried to connect via RDP to any host behind the 5510 and it worked well (same with ssh, telnet,vnc etc.). Now we want to map a network-share on a 2008-Server behind the 5510 but it's not working. In the ASDM-Log I see some "denied by inside-access in"-messages for the ports 139 and 445. Isn't it right that the whole traffic in the vpn-tunnel bypasses the acl? Even if we open both ports we can't connect to the network-share?
View 1 Replies View RelatedI'm attempting to configure an for both site-to-site and remote access VPNs. The site-to-site is working fine, however when I connect using the Cisco client, after initial connection and password prompt I get a "not connected" status. The log states that a policy map match could not be found. I have successfully set the unit up for remote access with no site-to-site and ran into another host of issues when adding the site-to-site to the working remote access config, so I started over setting up site-to-site first. I've attempted this through ADSM (hate it) - the current configuration is via CLI. I'm certain I'm just missing a piece or two.
View 2 Replies View RelatedI am considering to buy two RV180Ws and place them on two separate locations. But before buying I would like to make sure that the units meets my requirements. Lets call the locations A and B. I would like to connect location A with full network access to location B. But at the same time I would like to have that location B also gets full access to the network at location A.Besides this I would like to be able to connect to one of the networks from remote with my laptop.Preferably all connections should be made using IPSEC and not PPTP.I would like to know if it is possible to make such a configuration, and eventually if there is a smarter way to do e.g. only letting clients connect to location A or B and granting them access to all ressources at both location A and B from there.
View 1 Replies View RelatedI am trying to configure my network so that VPN traffic is only routed to a single physical port on the RV180 or to a certain subset of devices on a network.
I have a site-to-site vpn setup in a home office and am connecting to the corporate network. The user has a couple of devices running on the home network that need access to the corporate network.
We are hoping to leave his PC accessible to his home network as well as the corporate network, but restrict other devices from accessing the vpn.
I beleive I could do it by playing with the subnet but I can't get my head around it.
We have a Cisco ASA 5510 at our main office that makes connection with a 5505 at our other office using site to site VPN. (works)
Now for the question,
we want to access our other office from the main office but we wont want them to have access to our servers etc. so basically we want to control them but they shouldn't have the rights to control us.
Is this possible with a site to site VPN? and how to do it.
Our HQ office has an ASA 5510 with full access to internal and external IP's. We have a small group of remote users that are working from a shared office suite and they only have Internet access by way of internal default gateway. Using a VPN client is not desirable due to many other devices requiring access to HQ. Is there a way to create a site-to-site VPN from this remote office space back to HQ (ASA 5510) if they have no access to the public IP address on their end?
View 2 Replies View RelatedI have recently upgraded from a Cisco Pix 515E to a Cisco ASA 5512-X.
I am obviously having trouble considering the changes implemented in 8.2. I have set up the wan and lans appropriately, as well as the VPN's. Everything is working at my location, and the VPN's are established as well.
I would like to be able to have full access in between all three VPN's and my location considering our web, email, DVR, and database servers are here.
I can't seem to ping or access my off site routers GUI pages the way I can with the PIX.
When I establish the mirrored rules on the firewall, I am able to do these things, but I lose internet at my current location.
I have problem with accessing servers through site-to-site vpn from ASA which makes this site-to-site vpn and has enablerd Clientless VPN.Reason why I need it / What I need to do:ASA 5510 has enabled Clientless VPN and on this portal is allowed users to go to URL of internal servers through bookmars. We are using it when somebody could not access IPSec VPN or is in internet cafe. So this user logs into clientless vpn and click on bookmark to access mail server for exmaple. But there is problem, asa cannot access this server through site-to-site VPN.
Network:Here is quick design of my network.I don't have problem access server in VLAN 159 from VLAN 10 or 100. But I need to be able access servers in Vlan 159 from ASA 5510 which has IP address 192.168.1.4.I have this subnet which ASA belongs in BEFORE-NAT object in same place as VLAN 10, 100 are and in Site-to-Site vpn profile.
I have two sites connected using ASA5510 version 6.4(5)
site A site B
10.8.0.0/20 -- ASA -------internet ------------ASA -- 10.6.0.0/24
From site A, i can vnc, rdp, telenet and ssh to site B, however from site B am not able to rdp, vnc telnet or ssh to site A (i can ping site A devices) guess am missing something in the policy but not sure if its in site A or Site B
can I configure Site-To-Site VPN and Remote Access VPN at the same time in one ASA 5510?
View 8 Replies View RelatedI'm going to confess limited knowledge up front, so forgive me if I sound like an idiot. The company I work for has recently started hosting our application for some of our clients; to do this, we are leasing rack space, connections, and hardware in a data center. We need to send data from our application to an application in our client's data center. They have an ASA 5505.
Our data center will support site-to-site VPN and nothing else. Our client finds this unacceptable, citing security and the inability to restrict access to only the small number of servers our application needs to access. I need to be able to discuss this intelligently and with facts (and, preferably, configuration examples on hand) with their CIO and network staff in the next day or so.
Can the ASA 5505 be configured for a site-to-site VPM with our data center that restricts our application server to accessing a limited set of IP addresses within their network? If so, can this be accomplished reasonably easily?
I’m relatively new to ASA & issue I’m having with a site-to-site VPN connection between two ASA 5505.I’ve configured the ASA with ASDM and we only need it for site-to-site VPN.
The issue is that the tunnel is up and both sites can ping and traceroute each other and I can access the internal web interface of the two ASA from both sites but other communication is failing like RDP (giving me 0x1104 protocol error) or any other form of network access such as network shares is failing.shouldn’t the tunnel allow all traffic to pass-through ?
So what possibly I’m doing wrong..., I know that this might be beyond the tunnel but what do you recommend me to do ? the HQ has network 192.168.10.0 and Branch has network 192.168.11.0 and we have Win server 2003 and ISA 2004 on HQ site and traffic going to 192.168.11.0 from HQ is routed to ASA by the default gateway (Win 2k3 SBS) and both networks are configured as local on Server, but even after eliminating server and isa by making ASA the default gateway of the network I’m getting the same resul [code]