In my LAN, I have always been used an Aironet 1250 for internal use and always work fine. Now, I added a 3com AP but both AP are not correct. When I turned off the AIRONET 1250, the 3COM AP settings works fine. When both are turn on, the 3COM AP loses connectivity all the time.I have heard about the overlapping channels in 802.11b/g networks.
I can no longer open a http or https connection to the AP. I do have ssh access and I can log in with full privileges.
I was using the Web interface a few days ago and it did something strange during an update. The display of the web page became corrupted and no longer responded to my input.
I restarted it from an ssh session and I have also power cycled it via the power injector. Neither method has worked.
What should I do next or what additional info can I provide from an ssh shell?
Physical access is very difficult. It requires a 30' ladder after 10 p.m. So, I would like to avoid that if possible.
upgraded my home AP from Autonomous to Lwapp. I was an Idiot and thought i was getting an IOS upgrade. I need to revert it back to autonomous and a simple "mode" button reset doesnt work. I read that I need to Reload original IOS software, but It appears I cant get it without a support contract. I cant afford servicenet and need to obtain old ios to revert to factory default 12.4(10b)JA1. Do I need a contract to roll back? Is there an archive (backup image) of the old IOS that could be still stored on the device. I didnt back it up and need to obtain the image.
I have an Aironet 1250 AIR-LAP1252AG-A-K9 I am having issues with, and I am hoping for some direction on how to resolve them. I understand this question has been posted many times many different ways, but i have no luck unfortunately. Here is where I am: I can terminal into the AP, which has been set to factory default, with the username and password and enable password of Cisco. Once I am in the enable mode, I get lost.
Usually there would be an option to go to config. t, and work from there, but this AP does not have that option, Actually if I do a ? at the enable prompt, the commands list only starts with the letter C; but none are config.
I also cannot get into the web interface of the AP. The AP gets a DHCP IP from my DHCP server, (192.1681.128/24) but I cannot get into the web interface using the IP it gets from DHCP. The page never comes up. To add to the confusion, I cannot turn off the CLI event logging, although I enter the command "no debug all". Maybe I am off on what to put in. Nonetheless, it drives me crazy with messages every two seconds as I am trying to type while attempting to figure things out.
Overall, from reading the forums and doing Google searches, I am going on the assumption that the AP is now in lightweight mode, as opposed to autonomous mode, which is where I want it to be. I have tried the method of updating the firmware to the autonomous firmware from Jan 2013 for the AP. I use the TFTP method as I have found here on the forums a few times; I hold the mode button down while applying power to the AP, let the system LED turn red and release the button so the TFTP process can go through, but nothing changes.
I have the AP powered from a gigabit POE switch. The computer I am using for the TFTP is on the same sub net as the AP. I have tried using 10.0.0.6/24 for the computer with the TFTP on it, made sure the view all file extensions option was checked, and renamed the firmware to the .default extension-still nothing updates.
I also noticed that once I hold the mode button down for 20-30 seconds then let it go, the CLI output says the AP it is on the 10.0.0.x sub net, but I cannot ping the computer with the TFTP program on it. If i try to, it get a "Command not supported" message. So I will go on the idea that this is most likely why I cannot do a TFTP update.
About 30 seconds after I release the mode button and the AP boots, it will say it has a 10.0.0.x IP address, then it starts going crazy with messages that it cannot find a DHCP server.
My internet connection goes up and down. After further investigation, I've noticed that as soon as i receive a certain # of packets, the internet connection goes down. It may be a process or application that is taking away these packets.
Having just received a new Dell XPS8500 running on Windows 7 and I have the following problem: My wifi connection is turning off and the name of my network is no longer displaying in the list of available networks. This means that I am unable to access the internet or emails rendering the computer unusable as I am not on broadband (using access from another router close by). It is absolutely critical that the wifi connection is always on.
ATTACHED: My current running config with sensitive info taken out.
I have a Cisco 881 Router connected to cable modem. The router is running IOS 15.1.
I have it configured exactly the same way as an 877 router running IOS 12.1 which does not exhibit the problem. Just a standard LAN/WAN config with basic routing/firewall.
When the internet connection is lost for any reason and then re-established the router will no longer pass internet traffic unless I reboot the router.
I used Cisco Configuration Professional to configure the router. The key setting seems to be the Router Static Route. We have a static IP and I set static route with the "make this the default route" checked. Then I set forward (next hop) to the IP my ISP gave me as their gateway.
This is exactly the same way I set the 877 router using the same ISP but in a different office.
Every so often the internet is lost due to power outage or the ISP doing something on their end and every time that happens we have to reboot the router which is quite annoying.
I did not have the "permanent route" check mark checked but I do not have it checked on the router that does not have the problem either so I don't think that's it.
When I set the static route to "interface" then added the static IP of the next hop it will continue to work for incoming connections but not outgoing.
This is my network topology. Sometimes it just suddenly loses conenctivity or traffic for unknown reasons, like the internet hangs for much time or maybe some routers just stop responding, even restarting ! Do you think there should be a Multi-WAN router that could take 4 WAN lines and give one LAN to plug at a switch for a better performance ?I know that my setup is wrong, give me your opinion about it and how to fix it .
I have Cyber cafe, And i'm having a problem with My 24 port Dlink "DES 1024d" switch, which has been misbehaving for few months, it looses connectivity to a pcsometimes.....when i reboot the pc, then it works again, But it keep losing connectivity to the other pc's, not at the same time, every time loses connectivity to a different pc.
I have a client who has 4 computers in the house all running wireless. 2 desktops and 2 laptops. One of the laptops is running XP and after 5-10 minutes of surfing, the internet stops working while all the other computers retain a good internet connection. Repairing the connection via the taskbar icon fixes it temporarily until the issue reoccurs.
Major symptom: Maddeningly intermittent wireless issues with Asus laptop after repair. Unable to connect to network after sleep or reboot on upper floors of house.
History:
1) Laptop wireless was working fine but power jack and case were damaged.
2) Sent away to Asus for free repair (pulled the HD first).
3) Got it back and seemed fine, but...
Problem:Wireless starting dropping after sleep. It's my wife's laptop and she usually uses it on the 2nd floor of the house.Routers are on the first floor. It failed the same way on both my G and N routers. Played with all sorts of settings, disabled IPv6, reinstalled drivers, checked for BIOS update. No luck . Eventually saw some event log entries that might have been associated with a bad wifi card. Ordered a new Intel 100 N (OEM model) and replaced card, same issues. Swapped card with a Broadcom 1510 from an old Dell I had. Same problem.
Tried more settings, static IP, flushing DNS, etc. Same problem.At this point the event log has nothing notable in it, no error logs anywhere the wireless card will just report no connectivity.when I work on this laptop I take it down into my office, which is on the 1st floor by my router. The laptop works flawlessly there (10 feet from the router). So my theory at this point is that Asus damaged or otherwise messed up the laptop antenna while repairing the laptop. most of the time on the 2nd floor the windows wifi icon reports a perfectly good signal, and if I boot the laptop on the first floor and walk upstairs, the laptop works fine(as long as I don't reboot or let it go to sleep).
My primary home machine loses network connectivity for a very brief moment once or twice a day. Here's what I've observed over the past few months:
Seems to happen every 12 hours after a restart Disconnect is very, very brief. Putty sessions, online games, or other applications that require a consistent connection disconnect but it's rare that I can see a ping fail when everything else disconnects.Does not coincide with network problems on other machines (Xbox/media PC/wife's PC).
Other details about my system and home network:
Windows 7
Asus motherboard (couple generations old) with onboard ethernet
Ethernet > wired hub > wireless router > cable modem (wife's PC is connected to the same hub and does not have the problem, at least not on the same schedule)
Things I've tried (and will probably now try again just in case)
Restore network card driver (I'm in the process of finding a specific one for my motherboard)
Tinkered with power saving settings in the ethernet card drivers.
Fully up-to-date Windows install.
Static IP address reserved by the wireless router running DHCP
I'm not 100% sure, but I think this problem persisted across Windows OS upgrades (from Vista to Windows 7 a few months back)
By far the weirdest part is that it seems to happen every 12 hours. Like clockwork, I can predict that I'm going to disconnect from any persistent online connection if I know the last time I restarted my machine.
Solved:I caused my own problem long ago when trying to set static IP addresses in my home. I have a Netgear Router (WGR614v9) and I played with the Address Reservation feature. In addition, I manually set the IP address I wanted to have on my machine using the normal network card properties. Setting the IP address manually is what seems to have caused the conflict.
Finally looked in the Windows Event Viewer and the culprit was quickly identified. At time of restart and every 12 hours later, the following error appeared:
The IP address lease 192.168.1.20 for the Network Card with network address XXXXXXXXXX has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
I accidentally fixed it for all affected machines by changing the start address of the DHCP server on the router (increased it from 20 to 30). That seemed to kick all the manual entries out and set them back to automatic obtain mode.
Region : Others Model : TL-WR740N Hardware Version : V4 Firmware Version : 120320 ISP : Local PPPoE
I'm using this router for connecting 2 PCs, one lap top and few mobiles.The LAN network is always stable and never loses connection, but I'm having problems with the wireless connection. My lap top runs on wireless, and 3 Android mobiles, an xperia mini pro (problematic), xperia Tipo and Alcatel OT-908F. Almost always when I login to facebook on any of the mobiles, pictures won't show, and also youtube videos thumbnails won't show. On the xperia mini pro after 2-3 minutes of surfing, or doing anything else the connection drops, and then the mobiles can't see the wireless connection. My lap top can see it, but it cannot connect. After restarting the router everything is back to normal.
I'm currently implementing Microsoft System Center 2012 Operations Manager, the curent stage of the project is to add the network devices to SCOM via SNMP in order to monitor them, I am able to add them all and monitor; however, my ASA 5510, although SCOM discovers the ASA via SNMP and adds it to the network monitoring list, it loses SNMP connectivy every 30 minutes, and 15 later it reconnect with SCOM, then after another 15 minutes it loses the connection again, and so on and so for.
Internet connectivity on my laptop is lost shortly after beginning to upload/download files over the internet to my cloud storage provider. I also lose connectivity when transferring files to or from the laptop within my LAN to a desktop computer connected via wireless router as part of a workgroup. Connectivity is only restored once I restart the laptop or uninstall, then reinstall drivers for my wireless network card. The issue then reoccurs once file transfers begin again.The laptop is running Windows 7 Home Premium SP1. The driver for my Intel Wireless WiFi Link 4965AGN internal network adapter are up to date. I have a Linksys WRT610N ver.2 router, and an HP Pavilion dv6500 laptop.
I have a new EA3500 router that's working great for a variety of devices* except a Windows7 laptop. 24 hours after establishing a connection, the laptop loses connectivity and it's very difficult to re-establish a connection. Usually I have to reboot the router, but 24 hours later the problem returns and Windows is unable to connect.
My router settings include DHCP client lease time set to 1440 minutes (24 hours), so I thought the problem might have something to do with DHCP lease renewal. To test this theory, on Saturday night I did ipconfig/release and ipconfig/renew and established connectivity from the laptop.
Sunday morning I spoke with Linksys support and changed several settings per their recommendation:Network mode mixed (I had it on N-only for some reason)Assigned different SSIDs to the 2.4GHz band and 5 GHz band2.4 GHz band channel is 20MHz only, using channel 95 GHz band channel is 40 MHz only, using channel 161I also power cycled the router. Everything worked fine until Sunday night, 24 hours after the release/renew, when I lost connectivity. I am not sure what to try next and whether the problem lies with the router or the laptop.
Aironet 1142, two units, using WPA Radius to IAS on Windows 2003. I have a problem with Macs beginning to surface. One laptop, OSX 10.6, ran fine for a couple of weeks. A problem started occurring, while using the network, communication will stop. The Mac still shows connected on the laptop, and it shows associated in the interface on the Airnonet. However, there is no data transfer. I open a terminal and ping, there is no response. After sitting for awhile trying to ping, it will start again and communicate. After letting the laptop sit for awhile, the same things happens. The connection can be disconnected and reconnected on the laptop to restore connectivity. I did a round of things on the Mac to eliminate problems in configuration there. The same thing happens with both Aironets. Today, the when the problem occured, a user with an iPhone experienced the same thing. This was a first for that iPhone. Another Mac laptop, a newer model, did not experience the problem.
As I am writing this, a user with an iPad now just emailed that he is having trouble connecting. We just recently upgraded this customer to Aironets and disconnected a conglomerate of other products. The last one to be disconnected was a low cost Trendnet, that this iPad user was previously connecting to with no problem. The other device he would have been using in a different area was a Mac Airport WAP.
On the Aironets, I have CCX turned off, have set speed settings to default.
how to make NAT work for some future projects (remote offices with overlapping networks, L2L VPN with overlapping networks, etc). Using this as a guide [URL] I was able to get it to work using an ASA and a router (initial configuration below). I'm able to ping from host1 to 40.40.40.2 (host 2) and it works, as does pinging from host 2 to 50.50.50.2 (host 1). The issue I'm having now is that I've replaced that router with another ASA (second configuration below). Once I've done that, I can no longer reach the end device with the NAT'd IP address. If I take out ASA1 and swap in a router (basically reversing the router/ASA in the initial configuration) it works fine as well. I'm only seeing issues when using two ASAs. I've verified that ICMP and telnet are permited inbound on the ASAs as well. I even tried seperating the final host with another router (third configuration).
I have 10.10.10.10 in 2 VRFs (lite) on 2 different VLANs What i would like to achieve:- if i connect to 172.16.7.125 in the global VRF then translate it to VRF1 10.10.10.10 destination address.- if i connect to 172.16.3.162 in the global VRF then translate it to VRF2 10.10.10.10 destination address IMHO the solution is quite simple:ip nat outside source static 10.10.10.10 172.16.7.125 vrf VRF1 ip nat outside source static 10.10.10.10 176.16.3.162 vrf VRF2 However the router thinks something else:
IMHO this configuration should be valid. The global VRF has two IPs (172.16.7.125 and 172.16.3.162) while the 2 other VRFs work happily with the two identical 10.10.10.10 destinations as they should. The two translations should be easily distinguished as these are from two different VRFs.Either i am missing something or it is a problem in IOS.
Our IPS has given us a second range of IPs as we were running out. Unfortunately, they can only give us two non overlapping range. I am running two ASA 5520 in fail over to handle our traffic but I don't know the best way to use both external ranges. This is not a failover scenario -- and I need outward facing servers on both ranges. It is adventageous to us to keep the two external subnets separating two of our operations so we don't want to bring everything into one subnet (long story).I have one NIC designated outside that will need to cater for both wans. As there are two subnet there are two gateways. How do I keep the traffic on track?
I'm trying to connect two operlapping networks via IPsec.
Details:Site_A use ASA 5510 with software version 8.0(4)32. Site_A use 10.100.0.0/24, 10.100.1.0/24 and 10.100.2.0/24 inside networks. 10.100.0.0/24 is directly connected to ASA (as vlan10), 10.100.1.0/24 and 10.100.2.0/24 are routed.Site_B use Linux box and networks 10.100.1.0/24, 10.100.2.0/24, 10.100.3.0/24 and so on (basically 10.100.x.0/24). I didn't set up this ASA, we took over this infrastructure without any documentation whatsoever.
According to link posted above I should use dual NAT. Site_B will see networks in Site_A as 10.26.0.0/22, and Site_A will see networks in Site_B as 10.25.0.0/24. Site_A is allowed to access only 10.100.1.0/24 in Site_B, and Site_B is allowed to access all 10.100.x.0/24 networks in Site_A - hence /22 mask in 10.26.0.0/22. I'd like to, for example, ssh from host in Site_B to host in Site_A using 10.26.1.222 as destination ip address (and it should be translated to 10.100.1.222 on the Site_A side). I'm looking for something like ip nat type match-host in Cisco routers - I want to translate only network part of the address an leave the host part intact. Anyway, following the steps from the link posted above everything is ok till the command:
I have a new customer that needs to send data to us occasionally, we normally install the Cisco VPN Client on their PC, but this customer has the same private network we do.
I know this could be done with NAT Policy on my ASA 5510 with a site-to-site VPN, but the customer does not want to change the network hardware or addressing. They have cable router with no VPN capability, and they don't want to spend any more money on this project.
Can this work if their are no duplication of IP addresses?
I have an ASA5510, and site-to-site VPN with several remote clients. I have to add another client but their network range overlaps an existing tunnel. Both are using 172.16.0.0/16. I would like to 1-to-1 NAT them as 172.17.0.0/16.
Is it possible to perform the NAT on my device, post-decryption, or is it necessary that I have them perform the NAT at their end?
I am trying to connect two overlaping IP address sites ( see attached diagram). Site A LAN address will dynamic NAT to 10.1.1.0/24 at ASA5520.All the users from site A need to get services from site B ( DHCP, DNS, Mailbox,Print Servers, AD loggin etc). All the connections will be initiating from site A to B.
1-will all these services will run over NATed address.( dynamic) or I have to change to static NAT?
2- Any sample config for ASA 5520 for this type of network?
I wanted to move to the cisco arena, and having a bugger of a time figuring out simple nat/pat rules combined with access lists. I've been reading Richard Deal's Cisco ASA configuration book, googling the heck out of this simple problem and can't see what I'm missing.
I have an ASA 5505 unlimited security plus license running 8.2(3) and a simple network, 192.168.0.x internal, 192.168.3.x dmz (not even touching that yet!) and outside I have a /29 subnet of addresses, 25 is the gateway, and 26-30 are my addresses.
I have simple dynamic nat set up on the .26 address to nat to 192.168.0.x. All I'm trying to do is port forward a simple tcp port I set for my linux server (192.168.0.2) on the inside, for arguement's sake, it's 2222 (it's not really). My outside vlan 50 is X.X.X.226 255.255.255.248 , can I make a static nat (inside,outside) x.x.x.226 192.168.0.2 netmask 255.255.255.255 ?
I tried using (inside,outside) x.x.x.230 192.168.0.2 netmask 255.255.255.255 and that didn't work either. Is it not possible to use two external addresses to hit the entire /24 range AND a single server?
My access rule for this nat is permit tcp any 192.168.0.2 eq 2222 (where I'm using 2222 for my ssh port). then I apply that access list to the access group interface "outside".
I thought the outside interface would do a proxy arp (since I do not have the sysopt noproxyarp command) for my 227,228,229, and 230 addresses where .226 is my internal nat for all my internal machines i.e. 192.168.0.1 -> x.x.x.226 . I had this working like a charm before with my fortinet, so I know I have systems listening.
I have run into a very strange problem while doing pre-deployment vPC/STP testing in the lab with a pair of Nexus 7000s.
The basic configuration is as follows:
2x Nexus 7000 VDCs (ver 6.0(4)) are configured as vPC peers and connected with a vPC peer-link (redundant on different 10G blades) and a vPC peer-keepalive link. The switches also act as HSRP and EIGRP routers. The N7K-A switch is nominally configured as STP root and HSRP prime for all VLANs, N7K-B switch is STP backup root and HSRP secondary. STP version is PV-RSTP+. As it stands now STP root and vPC prime are on different switches, STP root is on N7K-A and vPC prime is on N7K-B.
3x Layer-2 access switches (3750-1, 3750-2, 3560-1) are configured as access switches and connected to the Nexus 7Ks with a 1G uplinks in V-pattern.
3750-1 and 3560-1 are configured for vPC as Port-Channel10 and Port-Channel12 respectively. 3750-2 is configured for STP. Vlan 35 is shared between all three switches and is enabled on the vPC peer-link (overlapping vPC and STP domains). The downlink port to the STP-only 3750-2 on N7Ks is configured as "vpc orphan suspend".
Everything seems to work fine and pings on VLAN 35 between access switches (that have mgmt interfaces in VLAN35) recover rapidly after failures. However, if I break the vpc peer-link the ping between the two vPC switches 3750-1 and 3560-1 stops. Moreover, this appears to be sporadic in nature with some vpc peer-link failure attempts recreating the problem and some not. Sometimes the problem manifests itself when the peer-link is brought back up rather than taken down.
After doing a bit of troubleshooting, I have isolated the problem to MAC address blackholing. Basically when the peer link is taken down, MAC Address table on the vPC primary switch, N7K-B, (I believe during vPC convergence) forces the traffic destined from 3750-1 to 3560-1 through the STP only switch 3750-2, which apparently goes through the RSTP convergence and enables its alternate link to N7K-B before vPC has finished its convergence. After vPC convergence is finished the path through the STP-only access layer switch 3750-2 no longer exists, as vPC will take down all vPC ports and suspend orphan ports on the vPC secondary switch (N7K-A). However the MAC Address table on N7K-B still points through the 3750-2 access layer switch instead of directly through Port-Channel 12 on N7K-B and thus creates a traffic blackhole. Issuing a ping or bouncing SVI interfaces on N7K-B fixes the problem.
I have an Aironet 1250 Access Point. I was asked to upgrade the software on the access point so I downloaded c1250-k9w8-tar.124-23c.JA5.tar and tried to upgrade it from IE9 browser window. I allowed the upgrade to run overnight. It ran for 900+ minutes before I unplugged the router. I know it said not to interrupt the upgrade, but it seemed like something was wrong.So, I have the access point conntected to my computer with a blue cable and it is also connected to the network. I tried running Hyperterminal hoping that I could set the ip address or otherwise connect to it.
The Hyperterminal printout gives me this:
APc89c.1dfd.189a#*Aug 22 20:10:03.523: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.Not in Bound state.*Aug 22 20:10:12.027: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 2 combination.*Aug 22 20:10:12.095: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0 assigned DHCP address 159.169.59.114, mask 255.255.255.0, hostname APc89c.1dfd.189a Translating "CISCO-CAPWAP-CONTROLLER"...domain server (159.169.59.39) (159.169.59.25) Translating "CISCO-LWAPP-CONTROLLER"...domain server (159.169.59.39) (159.169.59.25)
Is it possible to get this access point working again? How would I get it working again?