Using ACS 5.2, under Network Resources>Network Devices and AAA Clients>, I can only filter by:
Name
NDG:Location
NDG:Device Type
Description
How can I find a device by its IP Address? or how can I enable this option?
On this link:[URL] I read the following: ''Network Device Filters—Based on the AAA client that processes the request. A network device can be identified by its IP address, by the device name that is defined in the network device repository, or by the NDG'.....
I am using an ASA 5510 firewall in routed mode.How can I filter incoming traffic by mac address on the AS 5510 ? I have already setup a static access rule for rdp users on the outside to access a terminal server on the inside.Now, i would like to further limit access from specific computers only.
Im using my upstairs neighbors wifi with permission. It has no protection whatsoever but recently i havent been able to use it anymore, and they both just went on vacation yesterday. Their dad was there for a day or two before they all left, my assumption is he thought i didnt have permission and did something to prevent me from connecting without mentioning it before they left.Its full bars (its directly above me) but the router almost instantly doesn't respond when i try to connect. Did he mac filter my wireless adapters adress? I tried changing my mac address on my wireless adapter (aka, desktop, as it doesn't have a nic) but Tmac cant change it successfully. Tmac is able to change my laptops mac though, but even after doing so i still cant connect to the network.
Other issue - right now im using a crappy 2 bar connection called ddrtvap on my laptop. The laptop sitting right where my wireless adapter for the desktop would be and it connects fine, but my desktop cant connect to this network (it connects to the network, but no internet) while the laptop does just fine. Windows repair is super usefull as it tells me something is wrong with my adapters settings but gives no clue as to what.
Is it possible to configure cisco router like C3800 or catalyst switches like C4500 or C2960 to filter traffic based on allowable mac addresses only? I would like only to allow those devices that belongs to the domain, meaning if a user connects a computer or any devices that concerns network which I have not allowed the mac addresses, it will be denied access to the network. However, any of the allowable devices could able to use any port of the switch, meaning I dont want to associate an allowable Mac Address to a physical port on the switch.
We have a wifi router RV220W and we need to filter the mac address. The problem is that the number of the "allowed" devices is around 50 (not all connected at the same time), but the maximum number of mac address which can be listed in this router for each VLAN is 20, so for the moment we set 3 VLAN, each one with a different mac adderss list. This is very awkward because the area to be covered by the wifi network is large and we need repeaters, but having 3 VLAN we should put 3 repeaters for each point. Is there any way to configure this router in order to have a single VLAN but with a mac address filter list of 3 x 20 mac address?
i need to add a lot of mac addresses in mac addr filter table. many routers do not allow me to add a note for each mac address. that makes management a bit difficult.
eg.
field 1, field 2, enable xx:xx:xx:xx:xx:xx , peter pc, y xx:xx:xx:xx:xx:xx, mary pc, n
I installed the 2.06NA on my DIR-655 router and now I'm having problems adding mac addresses to the network filter. The message is "Invalid MAC address". Of course, it doesn't tell me which entry is invalid and I have a number of them. After further checking.. I noticed that one of the MAC addresses is indeed invalid and when I remove it I still get the error message?
I had no problem running both 2.4 and 5.0 Bandwidth. With WiFi password and without. It does it's job. The 2.4Ghz Range Plus works. I have set up the router on the 2nd floor at the highest it can go. And everyone get's full bars all over the house. I even get 4-5 bars outside in my car on my phone.
The only issue I have with this thing is a damn new netbook I got for Christmas with a Mac Address starting with 0C-EE-E6-XX-XX-XX. The Router finds the Mac Address invalid. In which I can come to understand cause seeing a Mac Address starting like that is completely new to me. Every Mac Address I have, started with 00 except the netbook. So now, I spent days trying to find firmware updates, patches, anything! I even attempted to spoof the Mac Address on the netbook but Microsoft has a bug on Windows 7. (I have the Starter Edition that came with the netbook)
Windows 7 Mac Spoofing works with WIRED Connection. But it does not work with WIRELESS Connection. I used 3rd Party Tools: SMAC and etc... I attempted Registry Edits, I changed even the value key to the "Orginal Mac Address" and it just wont change [New Strings/Network Address Edits included]. I have been banging my head about this for a week now. The Internets has many answers but they did not work. So Spoofing the Mac Address is out of the question. Until Microsoft fixes this bug.
Anyway: Did D-Link release any sort of beta update/driver/firmware or anything to resolve this at all? Is there a modded firmware to force the Router to take this stupid paradox of a Mac Address?
Currently: I have the Router's WiFi Password-ed with Default Factory Settings {Hardware Version: B1 Firmware Version: 2.02NA}.
The wireless client can't get the DHCP address when I enable the On-MAC-Filter-failure, MAC Filtering and Web Auth. Client can get the DHCP address when I only enable the Web Auth in the same WLAN SSID. The WiSM verion is v7.0.235.0. [code]
I tried to configure my wifi router recently to secure my internet connection. I wanted to add a MAC adress filter, but I had to leave before I could enter them all. I thought that I wouldn't have to enter my own MAC adress since I'm directly connected to the router with a wire, but it looks like I should have entered my MAC adress, because now I can't get access to my router by typing the IP adress, as usual. I tried to reset it, but it doesn't work.
I have a Linksys WRT54G router.I am trying to set up my internet connection so only my approved MAC Addresses can connect.I set everything up. I purposely excluded my laptop from the list to see if I did it right and I guess I didn't because my laptop is still able to connect to my network.
I want to add more than 40 mac address filter into my WRT54GL with firm version V4.30.7 but the form to enter the mac address list just limited to 40 mac address register. How do I can add more than 40 mac address list in my WRT54GL ? perhaps we can add the list into WRT54GL like XML file or somehow that can make me add more than 40 mac address register list.
Using Cisco ASA5510 Security Plus (Post May 2010) with 8.2(1)
I was trying to limit the number of internet IP Address that can initiate Remote Access VPN connection to the firewall. I have plan to only allow internet IP Address from few ISPs for control.
However, blocking AHP, ESP, ISAKMP, NON500-ISAKMP, and IPSec Over TCP Port Assigned in the firewall outside interface doesn't work. But it works by putting the ACL in the router before the firewall. It seems that the firewall have a "hidden" process VPN first before user entered ACL (or explicit rule), similar to Checkpoint FW's implied rule. How to get around it?
We want to filter IP traffic by MAC address on Catalyst 4500. Since we are using bonding (active-backup mode) we need those mac addresses appear on different ports. Below are solutions that we have tried: ACL but it does not work since mac acls only match non ip traffic (We CAN NOT use ip acl). Use a static mac address-table entry to ALLOW specific mac addresses. It does not work either since the same MAC address needs to be seen on a different port. Catalyst 4500 does not support auto-learn option (as e.g. Nexus 5000).
Am I wrong but the only way to filter external routes - type 5 - is with a stub area, and area 0 can't be a stub? As far as I know OSPF can't filter on the route tag, so should I be filtering with a route-map?
My main goal i want to filter certain sites including facebook not to be accessible within the network and block all torrets including maliciuos site. I was advised to get Cisco ASA 5505 which i already got a quote. But now i want to know if is the ASA 5505 good enough for this purpose, is there anything additional required to succesfully overcome my main goal?
Most of our VPN connections are done with our Cisco 3030 and the internet goes out the ASA. We are able to filter all web traffic by doing a a span port for web traffic.
When we move VPN connections to the ASA we will loose the ability to span web traffic becuase its coming in and going out the same interface on the ASA. We will loose the ability to filter web traffic when this happens.
How we can filter web traffic on VPN connections on the ASA. We are using websense. I know there is some integration that can be done with the ASA and websense but it doesn't have all the capabilities as doing a span port for websense to monitor.
is there any way to apply hostname or object network in the syntax? The command gives the option to use hostname or A.B.C.D but doesn't accept the hostname PIX1(config)# filter url except 0.0.0.0 0.0.0.0 ?configure mode commands/options: Hostname or A.B.C.D The address of foreign/external host which is destination for connections requiring filtering Can an FQDN be used as a foreign/external host?
I've got a PIX running 7.2(4) with its outside interface on the Internet. The only thing this PIX is doing is acting as the endpoint for an IPSEC LAN-to-LAN tunnel with an Internet-connected ASA on another network.
I'd like to filter inbound Internet traffic to this PIX so that only the designated ASA can attempt to establish an IPSEC connection -- in other words, I want to prevent any other device on the Internet from even being able to attempt to establish an IPSEC connection to the PIX. As far as I know (and have seen), this can't be done with an access-list on the outside interface, since that access-list doesn't apply to traffic to the PIX itself.
I am working on a Perl script to be ran on our different subnets to see what hosts are down (and make the assumption that if the host is down the IP address is free to be used). This is not being ran on a Linux system, so I can't use grep to filter out everything except down hosts. I know there are modules for Nmap that would make this task easier, but my plan is to install Nmap to our network monitoring server, compile the script for Windows, and have it create the report for what addresses are down. I don't want each person running the script to have to have all the modules installed, etc. Or can you compile the script with the modules in it?
I work at a boarding high school at nights and as such I have a lot of free time. However the internet here is very restricted due to obvious concerns about children and unrestricted access. I have private internet at my room on campus but its too far away to connect to. I was wondering if it would be possible to setup my laptop/tablet to connect to my home computer and access the internet through them without restriction. And if so how would I go about doing that?
We have our aggregation layer here composed of two N7K with vPC between them. Every access switch is a N5K. Security policies state that we have to filter unnecessary vlans going through the trunk between N5K and N7K. So we use the 'switchport trunk allowed vlan 10,20,30' command. My question is: Do I have to include the native vlan id on this command?
We are currently installing RV-042 V3 Dual WAN VPN Routers for a Customer with an HQ Office & 3 Branch Offices. The Customer recently requested to use the WEB Filter feature available in the RV-042 V3 Router to do the followng : - " Block all the HTTP Traffic Except for the company Website " We tried all the Combinations between " Access Rules " & " Content Filtering " available under the " Firewall " but we always reach the result that either to Allow ALL HTTP Tarffic to All Websites or to Block ALL HTTP Traffic.
how to Block all HTTP Traffic except for certain URL ( Using the URL Name NOT the IP Address ).
We have Cisco ASA 5520 with csc ssm 10 (product ver. Trend Micro InterScan for Cisco CSC SSM 6.6.1125.0)in Web>Global settings> URL filtering > Rules > Communications and Search> Social Networking category is set to block during work time and allow during leisure time(see the attachement), but rule for this category won't work. I mean social networking sites are always remain allowed.
We have a corporate site with a Cisco ASA 5580 (8.1), a remote office with a Cisco ASA 5510 (8.2) with a L2L VPN to corporate. A vendor has a L2L VPN to the corporate ASA with access to the remote office across the VPNs (hairpinning). The corporate office accesses an application at the vendor on port 23. Everything is working with regards to the vendor accessing resources to the remote office and the corporate office accessing the application at the vendor. Our goal now is to restrict the vendor to port 23 from the corporate network and port 9100 to the remote office. On the corporate ASA I setup a VPN filter and applied to the vendor's L2L vpn but when I apply the filter (see below) all traffic stops to the vendor such as telnet.
I need some clarification on the differences between a VPN-Filter v an Interface filter.I am using an ipsec crypto tunnel between our site using ASA 5525 and a remote client who are using a Palo Alto Firewall. I have applied a vpn-filter on the tunnel for these sites but I am being told that an interface filter would have been more simplier.
I have two Cisco 1260 autonomous access point setup with WPA2-PSK. They are up and running. In that configuration it is Personal security since the security is only provided by the shared key. I'd like to add MAC filtering so in my open authentification I just scroll down to "with MAC filtering" and save. Doing that crash everything and switch to Enterprise security which need to have a Radius server (the shared key is not saved anymore and by using a device I now see 802.1x security).
