we have a 1310 connecting two buildings networks.inside each building we have a wireless network (Intermec access points).we are implementing WEP on the Intermec AP's.will the cisco 1310 allow the wep traffic without interference? or would i need to modify the 1310 somehow?
View 2 RepliesI am trying to setup a wireless link between two locations, and be able to pass VLANs through the Wireless link.Currently I have two 1310 bridges.I followed the information at url..., but it is only passing VLAN 1 across the link. I cannot figure what the problem is.Both Bridges are running c1310-k9w7-mx.123-8.JEA3. [code]
View 4 Replies View RelatedIs it possible to make a bridge using a 1242 and a 1310? I have been able to get them to associate together and it appears it will function as a bridge. I have the 12(4) 253 JA IOS for both devices. I would like to use the g antenna on the 1242 for the bridge and the a antenna for wireless clients. The configuration on the web management appears to support bridge root and non root for both devices.
View 2 Replies View RelatedI have cisco 1310 bridge with IOS version Version 12.3(7)JA5. Sometimes bridges are disconnecting by showing the following error message.
*Mar 1 01:22:21.856: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 003a.99eb.cc00 Reason: Previous authentication no longer valid
*Mar 1 01:22:22.115: %DOT11-4-MAXRETRIES: Packet to client 003a.99eb.cc00 reached max retries, removing the client
[Code]....
Once it is deassossiated, ihave to manually restart the bridges. How can avoid manual restarting so it would automatically associate after some time.
In bridged network environment. We have a pair of Cisco 1310 bridges configued betweeen 2 buildings the config on each is simple one as a root bridge the other as non root no spanning tree is running and source route learning is turned off. We had both on in the past. One side of the network has a link out to the internet. About 3 -4 times a day the IP address on the default gateway becomes unreachable i.e cant be pinged. Only a reboot of one or other of the bridges corrects the issue. This happens only during the day when the netwrok is in use. When this happens everything inside the network works fine and everybody can see everybody else. The ISP can see intot eh network and can ping our devices but we cannot see out of the network.
View 0 Replies View RelatedWe have a failed power injector on a 1310 series bridge. Will the "Power Injector LR" from a 1410 series bridge work on the 1310?
View 1 Replies View RelatedI have installed 2 Cisco 1310's, connecting two buildings that are about 1000 yards apart. One access point is connected to an existing 3560 24 port switch, the other access point has a new 3560 24 port switch connected to it. Also installed 4 1240 access point in the newly connected building to the new switch. Issue is my router and existing switches can not ping any devices on the other side of the bridge. They can ping both access points that make the bridge. I consoled the new switch and could ping the existing switches and router, after doing that the other switches and router are now able to ping the new switch. Now my main issue is I have a user using a 7921 phone connected to one of the new 1242's, when he makes a call to a person in the first building they can hear him, however he can not hear them. Our call manager is in another state were I am located. I can call him and vise versa, and we can hear each other. I have went over my configs server times, and doubled check my IOS versions to make sure they are up to date. I will be glad to provide configs upon request.
View 1 Replies View RelatedThe RG-59 coax cables that come with the 1310 bridge are only 1 foot long. where I could get longer cables as the power injector is quite a distance away because there are no close power sockets. Instead of installing new power sockets near to the bridge, we wanted to simply run longer coax cables.
View 3 Replies View RelatedCan I associate the non-root bridge model 1310 to the root bridge model 1400? Is there any problems on the configuration I need to be aware of?
View 7 Replies View RelatedI'm trying to build a project where I utilize a Cisco 877 as a dumb modem by briding the ATM interface together with an Ethernet interface (VLAN) in this case due L2 switchports.The online documentation for RFC 2684 bridging states that I should be using AAL5SNAP as the encapsulation mechanism however, my ISP requires that I use the AAL5MUX encapsulation as part of the DSL settings. [code]
View 5 Replies View RelatedI have requirement to enable the AES encryption on the management VLAN traffic between connected root and non root bridges .below is the network setup .
Router<---->SW1 ( main office)--> Root-bridge < ---------->non root-bride------SW2 ( remote end site)
Apart from the specific configuration on the wireless bridge is any extra configuration required on the Switch interfaces?
I have a pair of Aironet 1310's I am needing to bridge. I have used the CLI to configure the BVI1 with the ip address and verified it. I then tried to access the GUI to configure the device via Internet Explorer and it would not provide access. I read that it had to be older versions of IE but my OS will not support older versions. I then downloaded Netsace Navigator 7.01 as indicated, but still did not get access.
Then I thought maybe if I can access the GUIvia the IPSU tool but I have Googled the Cisco IPSU and cannot find a downloadable link.
I'm supposed to configure this 1721 for bridged mode, taking a Level 3 T1 into the serial 0 side and passing it out the f/e 0 side. So, basically that's a T1 to ethernet conversion. I guess this customer is buying a T1 from us but they have to use a different make/model router due to the large hospital requiring that of doctors offices.Encapsulation from Level 3 is ppp static ip address, no password or anything like that.
View 3 Replies View RelatedWe are experiencing a high amount of retries in one direction between two 1310 bridges with external yagi antennas. What would this indicate? Here is a copy of the linktest:
POOR (102% retries) Time Strength(dBm) SNR SNR Retries
msec In Out In Out In Out
Sent :5000, Avg 5 - 66 - 64 31 45 Tot: 56 10149
[Code]....
I am new to cisco ASA. I need to configure ASA 5520 in transparent bridge mode. [code] I need to place the new asa firewall in transparent mode. How to configure the firewall in transparent bridgmode.
View 5 Replies View RelatedI want to set up FWSM 4.1 on Cat6509 with multiple bridge groups in one transparent context. (as the manual says it can support up to 8 bridge-groups and the intent is to save security contexts) For a host in VLAN21 (b1_inside) to talk to a host in VLAN41 (b2_inside), traffic needs to be go out to MSFC which routed back the traffic through the FWSM. My question is how can I define a default route per bridge-group, I would assume FWSM should take the following two default routes per bridge-group interface but it won't;
route b1_outside 0.0.0.0 0.0.0.0 10.11.75.1 1
route b2_outside 0.0.0.0 0.0.0.0 10.11.76.1 1
seems like it allows only one default route per the context and gives me an error - "ERROR: Cannot add route entry, possible conflict with existing route"
How can I achieve outside per individual bridge-group?
FWSM context config:
Interface VLAN11
nameif b1_outside
bridge-group 1
security-level 0
!
Interface VLAN21
nameif b1_inside
[code]...
I've setup my Cisco ASA 5505 in transparent mode. I have a Cisco 1841 connecting to the ISP (DHCP client) and F0/0 for inside. The 1841 is the DHCP server. I have my ASA 5505 behind the 1841 in transparent mode (Vlan 1 for Outside and Vlan 1 for inside). The router config is good as when you connect a computer straight to the inside interface I get DHCP and can go to internet, no problems what so ever. But When you're trying to go through ASA isn't not working. if I add a ip any any statement to the access list it will work but having an "ip any any" in a access list is like having no firewall at all.
ciscoasa(config)# sh run
: Saved
:
ASA Version 8.2(4)
!
firewall transparent
hostname ciscoasa
enable password zmQ6OnxvsOOEDNAy encrypted
[code]....
We are currently looking at design models for a Multi-Tenancy solution.The firewall layer will be 2 X ASA's running 9.X to take advantage of VPN's in multiple context mode and mixed L3 and L2 contexts.
We will be delivering services through multiple L3 contexts (between 2 and 5 L3 contexts for services) and 1 transparent context for customers infrastructure who will then have virtual firewalls for NAT's and VPN's etc withing their own environment.
I am not very experienced with IPS so my query is; if we were to get an IPS license for both ASA's how would the IPS fit in, can we use it to inspect traffic for all the L3 contexts and the transparent context?
As I am planning to deploy FWSM Module in 6513 chassis and need your valuable comments regarding the strategy that I create for this deployment.Initially (Without FWSM Deployment) all internal traffic moves in this manner.
7613(G9/5) --> 6513(G10/4) --> ISA (Internal Int.) [NATing] (ISA External Int.) -->
6513(G9/45){This is L2 port in VLAN 164} --> VLAN 164(SVI Int,IP:192.168.40.20) -->
(G9/44){This is L2 port in VLAN 164}--> ASR 1002 -->Router -->Internet.
As you can see from the Image that I am planning to deploy FWSM in transparent mode in between VLAN 164(SVI Int,IP:192.168.40.20) -[FWSM here]->(G9/44){This is L2 port in VLAN 120}By putting Inside interface of FWSM in VLAN 164 and create a new VLAN on 6513 i.e VLAN 120 and put G9/44 in it.know will this configuration will work regarding the passing of traffic through FWSM ? what improvement I have to made in this design. You can check the attached diagram.
We have a small cisco 1800 series workgroup router that seperates our network from the outside world. The data coming into our network goes into the router on interface fa0/1 and comes out on interface fa0/0. fa0/0 is split into 2 sub-interfaces (fa0/0.2 and 0/0.3). These sub-interfaces correspond to a desktop and server vlan on our network. The workgroup router is connected to a 3560G trunk port (we'll call it switch 1) and switch 1 connects to another 3560G (we'll call it switch 2). Recently I was asked to add another layer of security to our network by installing an ASA 5510 firewall and forcing certain types of traffic to authenticate using their domain credentials for our network. The firewall was set up between the router and switch 1 in transparent, multi-context mode. There are 2 security contexts, 1 for the desktop vlan and 1 for the server. Both have the same security settings applied to them since we want the same behavior regardless of whether they are trying to access the servers or the workstations.
View 2 Replies View Relatedasa 5505 do not pass traffic as a patch cord, how to make it pass traffic? [code]
View 2 Replies View Relatedhow is the 1130 point-to-point bridge work in lighteight mode ?
Is this supported on 5508 and on new 2500 series controllers?
How does the WCS manage the point-to-point link?
I am aware that there is Lightweight software for the 1300 series bridges but never used one so far
Configure 1310 point-to-point bridge (AIR-BRI1310G-A-K9-R)
View 3 Replies View RelatedWhat is replacing the 1310 AP's in order to create a wireless bridge between sites?
View 3 Replies View RelatedI'm setting up a Wireless Bridge 1310 with two APs. The Root Bridge is working fine, but the Non-root Bridge is not working, the radio 0 is not UP (It is in reset mode), bellow the settings of APs and logs Non-root Bridge.
AP Root Bridge
dot11 ssid BRIDGE-INTERSITE
authentication open
[Code].....
I am working on a task of redirecting any unmatched http traffic to Symantec public transparent proxy through Cisco ASA. For the definition of uncatched http traffic, we have inbound squid servers for deploying IE proxy pac and redirect the http traffic to Symantec public transpraent proxy, however we can't deploy IE proxy pac to mobile device and non-support web browers.Since we have some application using IE proxy setting for direct http communication with external domains, the current symantec policy addes those domains in the exception list so that they are not redirect to Symantec public transparent proxy server.
-For the platform - Cisco ASA 5510 ASA 8.4(4)1
-For the solution, I have the following two nat rules
I am trying to set up a wifi hotspot with my wireless adaptor. The connection between my ipod and the wireless adaptor in my computer seems to be working fine, but it doesn't connect further to the local area connection (ethernet).I tried to bridge the two networks but it doesn't work I get the error message "An unexpected error occurred while configuring the network bridge"[CODE]
View 4 Replies View RelatedI have a Cisco controller WLAN solution where I want to bridge traffic locally on a remote site, when using Cisco 1140 LWAPP.Is the only way H-REAP ?
View 3 Replies View Relatedcheck the traffic produced by different hosts in a local network. In other words: which hosts uses how much of the bitrate.For example: We have a wifi network with four computers connected to. Lets say one is running skype, one is surfing in the internet and both left are just in idle mode. Is there a way to monitor the use of our bitrate such that I could see:"Ahh IP 10 is using 80%, IP 11 is using 10% and IP 12 and 13 are using 5% each on average!"
View 3 Replies View RelatedI have on my ethernet linux box, that is responsible for IPv6. This box is configured as IPv6 gateway from my network and it also sends RA to the network. All devices on ethernet network can work on IPv6 without problem. Clients, that are connected to WiFi, they just receive the RA from this box -> this packet is sended over WRVS4400N to the wifi network. But all other traffic do not pass the WRVS4400N, so the wifi client is not able to ping the IPv6 gateway. There is no problem on IPv4, there the wifi client is able to communicate with any ethernet device.I have tested WRVS4400N setting "ipv4 only". If I switch on "ipv4 and ipv6", than all devices will get some additional IPv6 adresses and the communication from WiFi client to IPv6 router is not working again. How to configure the WRVS4400N to bridge all IPv6 traffic between WiFi and ethernet?
View 2 Replies View RelatedWe have a remote office with a Cisco 3750-X switch with the IP-Services feature set connected via dark-fiber to a 6509-E at the corporate office. We plan on migrating the remote office to a new network (new acquisition) to subnet 10.10.10.0 on VLAN 20 which has an existing subnet of 192.168.100.0 and we would like to run both in parallel using their existing switches (Dell) and the new 3750-X.
I’m curious as to the best way to keep the traffic local between the two subnets using the 3750-X and if necessary put the 192.168.100.0 network on a VLAN. I thought about routing between the two networks via IP routing on the 3750-X but the new workstations default gateway is the 6509-E and existing workstations is a SonicWALL within the remote office. The default gateway for the new workstations can be moved from the 6509-E as a last resort.
I have, what I believe to be, a simple issue - I must be missing something. Site to Site VPN with Cisco ASA's. VPN is up, and remote hosts can ping the inside int of ASA (10.51.253.209). There is a PC (10.51.253.210) plugged into e0/1.
I know the PC is configured correctly with Windows firewall tuned off. The PC cannot get to the ouside world, and the ASA cannot ping 10.51.253.210.
I have seen this before, and I deleted VLAN 1, recreated it, and I could ping the local host without issue. Basically, the VPN is up and running but PC 10.51.253.210 cannot get out
ASA Version 7.2(4)
!
hostname *****
domain-name *****
enable password N7FecZuSHJlVZC2P encrypted
[Code]...
We are using several Cisco ASA 5505 with the 8.05 OS on it. The problem is that the SMTP traffic of my ISP(Telenet) isn't passtrough the ASA, I'm using outlook 2010. Before there was also a problem with our local exchange server but I solved this by disabling ESMTP checking in the policies, but it didn't worked for my local ISP.
View 4 Replies View Related