Cisco :: 876 Remote Management - Connecting To WAN IP?
Dec 5, 2011Any possibility remotely manage cisco 876? Remotelly I mean by connecting to WAN IP (DSL interface) from outside. It could be via CCP, telnet or ssh doesn't matter.
View 4 RepliesAny possibility remotely manage cisco 876? Remotelly I mean by connecting to WAN IP (DSL interface) from outside. It could be via CCP, telnet or ssh doesn't matter.
View 4 RepliesWe have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
-------------------------------------------------------------------------------------------------------------------------
WORKING CONNECTION
-------------------------------------------------------------------------------------------------------------------------
%ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device
NAT-Traversal auto-detected NAT.
%ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user
%ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
[code]...
I have multiple remote sites connected back into my infrastructure via satellite. I'm building a GRE tunnel accross this satellite infrustructure to my user's routers. I'm using EIGRP through these tunnels and everything is working great as far as connectivity to my users is concerned. However, with each of these packages, I would like to be able to remotely manage the satellite modem. My problem is that these modems all have the same web management IP address (192.168.1.1:80) and I can't change them. I thought to myself, "too easy, this sounds like an excellant case for NAT!" Either I'm tackling this thing all wrong or something because I can't seem to get it to work. Here is what I've so far (IPs modified and extra info cut[CODE]
View 3 Replies View Relatedhow to setup remote management...
View 4 Replies View RelatedI do have problems with remote management of a Wireless Accespoint WAP200.The WAP200 is connected to a router RVS4000 and works well..There are several nodes in the LAN, all static IP, all forwarded in the RVS4000..All nodes can be managed in the LAN as well as from outside..Exept the WAP200, from inside in LAN no problem, but from outside gives a 404 return.I build other similar LAN's, but the same, no connection.
View 8 Replies View Relatedunresponsive / lockups with Cisco ASA 5505 remote management ?
I think it happens like this:
1) With ASDM (Java Web Start), add new crypto map (it could be anything, just happens to be what i added the last time this happened)
2) Click apply
3) ASDM hangs (at this point the Java client becomes entirely unresponsive)
4) ASDM.jnlp refuses to connect and eventually timeout dialog appears. However, VPN connections are still accepted.
5) After a few hours (over night), the ASA refuses all incoming traffic including VPN connections.
I'm attempting to configure remote management (and, sometime soon, SNMP) for a newly-deployed WRVS4400N v.2.At the Basic Settings page, I enabled Remote Management, and left the port # at the default. Remotely I entered the public (static) IP for the router in the address bar of IE8 similar to this: 67.203.???.??:8080. IE8's response is, "The webpage cannot be displayed." I'm using a public wi-fi access point, and don't know how the local router is configured, so it's possible that the local router has a blocking rule in the firewall.I'll try again using another remote router that I manage.
View 3 Replies View RelatedI'm have serveral issues with my router.First, using port 8090, I'm unagle to get remote management of the router.Port 8090 is forwarded to the router 192.168.1.10 I have other issues too, I think the router is blocking my FTP conenction to my NDAS drives.I wish the router would show the UPnP port that are autoamtically added t othe system.Port 80 works well going to my NDAS drives.Firewall, DoS Blocking WAN are all turned off.
View 4 Replies View RelatedI have a remote ASA5505 running 8.4(3) with a working site 2 site VPN tunnel to my main office. (The main office is running an ASA 5510 with OS 8.4.3 as well). The encryption domain is all private IP on main site vs. 172.16.10.0/23 on remote site.
Relevant config of the remote ASA:
interface Vlan1
nameif inside
security-level 100
[Code].....
I can manage the ASA on the outside interface (outside of the site 2 site VPN) using the TACACS credentials I can also ping my management station from the ASA using the inside interface, but as stated, the other way around does not work. I have not yet tested if management from the local 172.16.10.0/23 subnet works, but I will try this next.
I have a brand new RV042 v3 that I just updated to the latest firmware (v4.2.1.02) and have stumbled across an anomaly... I can only access the router from the WAN port using port 80. I happen to have it set to port 8080, but that doesn't work; I have to use standard port 80.
I have two other RV042 units running older firmware and they work as expected and follow the port that is filled in. This one has me puzzled and wondering if this is a bug in the firmware.
I can access the admin pages from inside the network.I can access the admin pages remotely from my iphone (safari).If I try and access them from my PC at work (IE6 or Google Chrome), I can access the router, give the password and get the status screen. But if I try and go to any other page on the router, it asks for the password again and takes me back to the status screen.I have Hardware B1 and firmware 2.0 (not upgraded it yet).
View 1 Replies View RelatedI am having trouble accessing my DIR-655 remote management screen via ip to my network.To make sure i didnt have any odd settings, i did a hard reset on my router first.I then enabled remote management, and left the default port 8080 I try to access viw the ip address on my status page suffixed by the port 8080 [URL] page cannot be found.I then enabled https and tried to access via:[URL]page cannot be found.I then setup a entry in the virtual server to redirect http requests to my workstation hosting IIS7, if i connect to localhost, the iis welcome screen appears, but if i browse to my ip, i get nothing.I am using Cox residential service, i called them and they informed me that they do not filter or block requests in any way.
View 12 Replies View RelatedI have a RV082.I need to disable the firewall, since firewalling is done better elsewhere.However disabling firewall Remote management on wan ip is forcefully enabled.I don't need Remote management, keeping it enabled is a security risk for my setup.I don't understand the rationale behind the choice to forcefully enable remote management if firewall is disabled.Is there a way to disable both firewall and remote management?Or at least a workaround?
I'm on firmware 2.0.0.19-tm on a probably v2 hardware. (Cannot find this info in the web configuration).This is not the newest even for v2 hw but I cannot afford to break it trying to upgrade the firmware.Moreover no release notes for firmware releases refers to a correction of firewall/remote management behavior.Is this behavior also in newer firmware releases?
I have a small issue with Remote Management on my E4200v2.I have enabled it , select https and set Allowed Remote IP Address to any on the default port ( 8080 ).After all of this, I cannot connect to my router from my office or any other place. I'm using DDNS and all its ok ( updated at time ). I've tried also connecting to my direct ip address ( dynamic ) but with no result.P.S. no incoming log from port 443 using https.
View 3 Replies View Relatedi was connected to my rv042 via remote management / browser, and tried to add vpn clients. i generated a new certificate and then i clicked on export for clients. by doing this, the remote management disconnected and i cannot access the router anymore.
how can i get the new .pem file from remote? do i have to make somebody turn off and on the unit to get back remote access??
p.s.: after turning off an on i tried the same steps again: everytime i click on "export for admin" or "export for client", this kills the remote management and the unit must be hardreset. now: how do i get the newly created client certificate off that unit ?? otherwise i will have to drive 350 km just to grep that file ?!?!
I have a 6 month old RV042 with the newest firmware (v4.2.1.02). Over the weekend I configured the DMZ which after a lot of trial and error, was able to get working. Prior to configuring DMZ, I was able to log in with remote management. However now remote management no longer works. I've tried:
- Rebooting the router
- Turning the firewall off/on
- Turning remote management off/on
- Changing the remote management port
The only step I haven't taken is resetting the router back to factory defaults and trying to reconfigure it all again. This router is so finicky I have no faith I'd be able to get my current functionality back again.
I have running a Wireless LAN Controller Cisco 2006.Today my management IP its public with Internet access. I am thinking in use a private IP without internet access. I have certains Access-Points in other building, that connect to AP Manager interface using Internet . When i see the tcp connections, i look that the access-point not only have TCP connections to AP Manager interfaces, it have TCP connections to Management interface too!!!.If i shutdown the connection between Management interface and Access-Points (mantaining the connection between Access-Point and AP Manager interfaces)?
View 1 Replies View RelatedI want to be able to login to a router remotely and foward a port on the router. I thought i saw a spot for remote management but don't know how to use it. I have a dyn account and can create a dns for it.
i setup security dvrs on the internet so clients can see cameras from outside their homes. I would like to be able to login to a router if i need to foward a port or something similar.
I just purchased 5 RV220W to act as internet/wireless router at a remote site. There is no VPN, just LAN and Wireless routing to the internet.I have setup remote management and it works fine when I am directly connected to the internet. However, everytime I try to connect through our HTTP/HTTPs proxy farm, it usually fails. Specificially, I get the log-in page and can log in. It starts to render the landing page but redirects to a page stating "Your session has been terminated." On rare instances the first page will appear, however within a few clicks I end up with the same terminated page.
As a test, I bypassed the farm and forced my browser to use one proxy exclusively. At that point I could access the HTTPS interface with no issue. I have not had any issues with other SSL sites with the proxy configuration in use.Is there some sort of MITM prevention I could be running into? If so, can it be turned off.I am new to the RV-series of routers. Is there any logging I could turn on that would provide insight on why the session may be getting terminated?
I have 25 of these routers installed behind various providers and transport (DSL, Cable, UVerse). At sites where I have static IP, I can't reach any service inside, and in fact can't even reach the router for Remote Management. At all times the users indoes can do whtever they like, the have Internet access.
At sites where we draw a dynamic IP or use PPPoE, I can reach services and manage the router until a known issue stops the inbound traffic.
My first try at configuring my RV042 has had unexpected results. I set a WAN and LAN address, but did not enable remote managment and did not configure any port forwarding. I expected to be able to connect to the router on the LAN and I could. The surprise came when I put in my web address. I got a router login page. How do I suppress than on the WAN side. I have a static address with my ISP.
View 1 Replies View Relatedi have router 2911
pub ip: 121.97.65.61-74
interface gigabitethernet 0/1
ip address 121.97.65.61/28
[Code].....
and other ip will drop/kick/disconnected automatically
how to implement this on access list
Region : Malaysia
Model : TD-W8968
Hardware Version : V1
Firmware Version : 0.6.0 1.1 v0005.0 Build 120926 Rel.27100n
ISP : TM
The Remote Management Port is not working correctly. For whatever port I set, it will uses port 80 to access.
I am looking to permanently reset the default remote management port of the MODEM DPC3825 to something other than 8080. how to PERMANENTLY change the port from 8080? In the web interface under administration I have several times set it to something else other than the defaulted 8080 but when the modem is rebooted or reset, it goes back to the default 8080.
View 4 Replies View RelatedThe downloadable PDF manual for the WAG160N shows the remote management address as "https://...", while the online support article shows WAG320N screenshots and uses "http://...". The downloadable manuals for the WAG120N & WAG320N don't show either (it's a pretty flimsy manual).point me to, a definitive list of model/firmware combos which do support SSL for remote management?
View 3 Replies View RelatedMy University has free Internet at student homes, but we need to login by PPTP to get an official, public IPv4 and be able to reach the outside world. The network people at the University says that when the PPTP is up, everything should be open (no firewall of any kind).
have my WRT160NL that gets a 10.10.73.0/23 address from DHCP on WAN port. Currently I have 10.10.74.21. My internal network uses 172.17.17.0/24.My PPTP-server is located at 10.192.1.1 and when I connect, I usually get an IP in the 158.37.73.0/24-range. Currently I have 158.37.73.28. I use DynDNS to make sure I always know the public IP by the host binders.dyndns.info ...
So, I have Remote management enabled with HTTP and HTTPS, any IP and default port 8080. But no response from the outside world seems to go through.If I turn of the "filter ICMP" but keep the SPI Firewall on, I get ping reply from external sources towards my router, but still no HTTP or HTTPS response.I also have a Torrent I try to port forward to to be active, this is 23277, and this is the only thing that keeps coming up in the incoming log on my router.
It's not possible to connect to the routers management over the PPTP-tunnel?And why can't I get the port forward to work .. Same reason? PPTP 158.37.73.28 -> 172.17.17.100 (LAN) won't work?
How to get HTTPS to work for local or remote management? Selecting HTTPS for either local or remote doesn't enable HTTPS for me. It still use HTTP.
View 2 Replies View RelatedWe have a RV042. remote management is set to DISABLE - but even after restarting the router i can access the interface remotely over the internet.even when i enable it and change the port to say 5555 i can connect to the web interface using either port 5555 but ALSO on port 80.what's wrong here?the only way to stop that was to create a rule that blocks port 80 on the WAN interface. (btw. could this rule affect LAN users when browsing the web?)
View 7 Replies View RelatedI have a similar problem, I'm able to connect via VPN client and ping only one host on the remote lan and nothing else. I'm using both split-tunnel and non-split-tunnel, but none has worked. My main objective is to make the remote user connect to office lan (remote lan for him) and office Internet connection.
View 6 Replies View RelatedMy problem is when i try and connect a printer from windows 7 that is connected to a local pc via usb onto a remote desktop it doesnt connect but when i try and connect from wins xp it does. On the remote desktop i click to add a printer and then i select network printer. Then i type\ip-address-of-pcprinter share name. It says it cannot connect to printer but when i try this method on an xp computer it accepts it.
View 6 Replies View RelatedI have two ASA5510 with a peer to peer VPN configuration which is working pretty well.I'm trying to connect to my remote ASA (ASA2) with ASDM on my PC through the VPN on the local ASA (ASA1)I already connected the ASDM to ASA1 through the inside interface but I cant connect to the ASA2 the same way (over the VPN).
When I ping the ASA2 inside interface from my computer, I get the following events:
ASA1:
192.168.1.36(My PC) | 512 | 192.168.2.1 | 0 | Built outbound icmp connection
192.168.2.1(ASA2 inside interface) | 0 | 192.168.1.36 | 512 | Teardown icmp connection
ASA2
192.168.1.36(My PC) | 512 | 192.168.2.1 | 0 | Built local-host Corporativo(outside):192.168.1.36
192.168.2.1(ASA2 inside interface) | 0 | 192.168.1.36 | 512 | Built local-host identity:192.168.2.1
192.168.1.36(My PC) | 512 | 192.168.2.1 | 0 | Built inbound icmp connection
192.168.1.36(My PC) | 512 | 192.168.2.1 | 0 | Teardown icmp connection
This is my config in ASA2
ASA Version 8.0(5)!hostname ciscosnqdomain-name chaco.com.boenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednamesname 192.168.2.10 SNQ-Servername 192.168.1.21 Srvplxaname 10.30.30.30 e-Servername 192.168.1.0 Experion-networkdns-guard!interface Ethernet0/0 nameif Corporativo security-level 0 ip address 10.64.12.6 255.255.0.0!interface Ethernet0/1 nameif ExP_LS security-level 90 ip address 192.168.2.1 255.255.255.0!interface Ethernet0/2 shutdown no nameif no security-level no ip address!interface Ethernet0/3 shutdown no nameif no security-level no ip address!interface Management0/0 nameif management security-level 100 ip address 192.168.0.2 255.255.255.0!boot system
[code]....
I have several locations with time clocks (a Kronos application) on a small home network with outgoing traffic wide open.I have a server in my office behind an ASA5505 router/firewall, also with outging traffic wide open. I have tried taking the device off of the remote network and giving the it a public, static ip address so it is actually on the internet, yet the server cannot see the device, but it can ping it. I was advised to put the device on the remote private network and set up a virtual server using port 8080 at the remote location. The server is still unable to see the device. I also set up a virtual server for VNC. When I am on my server on my work network behind the ASA5505, I can start my VNC viewer and attach to the device at the remote site using the IP of the router (apparently the device has a build in VNC server).
I have also tried to NAT my server to a public IP, I have set up incoming and outgoing rules on the firewalls at both ends.this should be a fairly straight forward connection.
Actually i was having an windows 2003 server with an public ip at my office... i had hosted a new site into that server ( iis ) in order to open the site it needs a vpn connection to read database remotely! now the problem here is after giving vpn connection i was unable to connect to the server through remote desktop from my home! if i need to connect to the server i need to setup the vpn connection at home also.. so is there any solution on how to connect to remote desktop even if vpn is connected.!
View 1 Replies View Related