Cisco :: Can ASA 5510 Be Configured As Bridge Mode And Still Send Netflow Info To Collector
Dec 4, 2012
Can ASA 5510 be configured as bridge mode and still send Netflow info to a collector?We have a PIX connect internal network to internet. Because PIX does not support NetFlow, as a temporary solution, we were thinking of putting an ASA 5510 between the PIX and internet gateway, and configure it as a bridge so that there will be no routing issues, and the ASA can still send Netflow info to a collector.
View 1 Replies
ADVERTISEMENT
Dec 4, 2012
Can ASA 5510 be configured as bridge mode and still send Netflow info to a collector?ie have a PIX connect internal network to internet. Because PIX does not support NetFlow, as a temporary solution, we were thinking of putting an ASA 5510 between the PIX and internet gateway, and configure it as a bridge so that there will be no routing issues, and the ASA can still send Netflow info to a collector.
View 2 Replies
View Related
Dec 5, 2012
Can ASA 5510 be configured as bridge mode and still send Netflow info to a collector?We have a PIX connect internal network to internet. Because PIX does not support NetFlow, as a temporary solution, we were thinking of putting an ASA 5510 between the PIX and internet gateway, and configure it as a bridge so that there will be no routing issues, and the ASA can still send Netflow info to a collector.
View 13 Replies
View Related
Dec 4, 2012
Can ASA 5510 be configured as bridge mode and still send Netflow info to a collector? We have a PIX connect internal network to internet. Because PIX does not support NetFlow, as a temporary solution, we were thinking of putting an ASA 5510 between the PIX and internet gateway, and configure it as a bridge so that there will be no routing issues, and the ASA can still send Netflow info to a collector.
View 1 Replies
View Related
Sep 20, 2012
I have two ACE working on active-standby mode, I have one context configured on bridge mode, with two vlans, the client (vlan 100) and server (vlan 101) sides.I need to balance another service for two servers (different from the ones on the first context ) on the vlan 101, so as the documentation says i can't configure the same vlan on another context because it is already configured on the 1st context as bridge.so my question is the only way i could balance this service is to configure it on the same context??. or there is another way?.These are the design limitations that i have to do this:
1.- I can't change the servers IP address.
2.- The VIP which will answer the clients request is on the same IP network segment as the servers, for example: server1: 192.168.100.125, server2: 192. 168. 100.126, VIP: 192.168.100.124
View 1 Replies
View Related
Feb 17, 2004
Using Netflow on Cat 6500s with the NAM-2 as the collector?
View 7 Replies
View Related
Mar 21, 2013
I have three ASA5505, two firewalls connected to central VPN hub. the central inside network is 192.168.0.0/24,Network A is 192.168.1.0/24,Network B is 192.168.2.0/24,In one of this site (central), I have server with NetFlow collector.,I will collect the traffic information from all ASA at the my one serverCan I configure source IP address (or source interface - inside) for NetFlow packet, originate from ASA? (for example from site A)If it is not possible I think, I can rewrite my access lists and permit udp traffic from outside interface to server IP like this:access-list VPNACL permit udp host <Outside IP site A> host <Inside IP the Server> eq 9996,But I do not understand, what port I must be use in access list on Central site ASA. ,access-list VPNACL_A permit udp host <Inside IP the Server> host <Outside IP site A> eq 9996 ? or, in this place, must be source port in the udp netflow packet?
View 2 Replies
View Related
Aug 17, 2011
Cisco 2951 w/ HWIC-4ESW
IOS 15.0(1)M5
#sh ip flow int
Vlan533
ip flow ingress
ip flow egress
#
The SVI sends the flow data just fine, however I also continue to receive flow data from most other interfaces.
I have attached a screenshot of one of our netflow collectors indicating that many of the interfaces are sending flow data even though not configured to do so. We have two different netflow collectors, from different vendors and both confirm the same interfaces sending flow data.
Normally I wouldn't care and ignore it, however one of them uses a license limit by interface and is a bit problematic.
View 2 Replies
View Related
Nov 9, 2011
On my new 942l, after 5 days of usage and tinkering with various settings, I cannot get the camera to obey the trigger=motion when configured to send snapshots over email. It does work when configured to send snapshots over email with trigger=always.Interesting enough the trigger=motion works just fine to upload snapshots to FTP. Yes, it uploads the pictures correcty on FTP detecting correctly movements, but it would not send those over email. To me it looks like a bug in the firmware that I have now a 100% repro.Are there any logs you want me to send to you for debugging?And : Is there a known workaround I can apply (reboot, resetup etc)?
Detailed description of the problem:I have setup the camera to upload snapshots to FTP AND send them over email for trigger=motion.This is what works : the snapshots are nicely uploaded on FTP , but not sent over email.Interesting : if I set trigger=always, snapshots will both be uploaded to FTP and sent over email. The moment I switch back to trigger=motion they go only to FTP and not over email.Even more interesting : the video clips work correctly with either email or FTP for trigger=motion.
What could cause this?The email (account, port, password) and FTP settings are definitely not a problem since I see pictures/videos in email or FTP with trigger=always.The motion settings are not a problem either since snapshots upload correctly on FTP when movements are detected.What it apears to be is the software is not reading or obeying correctly a certain combination of settings.I'm wondering if it has to do with the fact that for video clips the "email" and "ftp" are exclusive, but for snapshots they are allowed simultaneously. And somehow the logics get mixed up causing certain combinations of settings to now act out?
What else I tried?I tried many reboots, unplug followed by plug back in and so on.I tried saving and restoring the settings to/from a file hoping that will "reset" something.And I tried many combinations of settings, including changing the order I set and unset hoping a different code path that works will be hit.I did not try a restore to factory defaults since I installed the camera in a hard to reach place and if I restore to factory defaults i need to take it down connect it to a cable in order to redo the wifi settings.
View 7 Replies
View Related
Mar 20, 2013
I have to upgrade to an ASA 5510 CSC, and the new license is generated, the file you sent me licensing, only seen this:Activation Code not required for this renewal. Please go to "Administration> Product License" in the CSC SSM console and click "Check Status Online" to get the latest expiration date (BASE: 09/04/2014, PLUS: 09/04/2014).This means that what I have not make any upgrades or license charge in the ASA? Does the automatic update is made?
View 1 Replies
View Related
Oct 4, 2012
i want to Use Cisco AP 1142 in my network. Also new to the enterprise edition AP.I have configured AP WEB mode the SSID and able to connect without the Security Key. Also want to enable MAC Address filter on the AP. Any configuration details on web and CLI Mode.
View 1 Replies
View Related
Jan 4, 2012
If I have two Linksys wireless routers in my house, ( 1 Wireless-G as the Gateway attached to the DSL line, and attached to the main computer, and 1 Wireless-b model BEFW11S4v4 that I want to use as a bridge or as a repeater to send the wireless signal around the attic (2 floors away) and I have connected them via Ethernet, and then connected to the attic computer (not the main one) via Ethernet to Wireless-B, why can I not get connectivity on the attic computer?
If I forgo the Wireless-B router, and connect the ethernet to the attic computer everything is fine, but there is no wireless signal in the attic. (only downstairs where the Wireless-G is.) I believe I can access the Wireless-G and tell it to be a bridge or a repeter (?? I think) but as far as I can tell the Wireless-B is giving itself the same IP address as the Gateway Wireless-G is using, and I don't have an connectivity, so I can't change it! Im confused.
View 1 Replies
View Related
Aug 9, 2011
I am having an ASA 5510 and have configured Clientless SSL VPN in it. Now I need to allow my SSL VPN user to access on a particular application(like mspaint.exe for example).When the user login to the SSL VPN, he should see only the particular aplication or must be able to access on the particular application.
View 2 Replies
View Related
Sep 2, 2012
we have a local Netflow collector working fine. We also have a centralised collector that we’d like to use to send the same Netflow data, but it is not being received. We need to send the data via an IPSEC VPN.
When I do a 'show flow-export counters' I can see the packets sent increasing. The local collector is receive netflow data. I am using the below config,
access-list global_mpc extended permit ip any any
!
!IP far end of VPN
[Code].....
View 3 Replies
View Related
Nov 29, 2012
we have a Cisco ASA 5510 8.4, this device is reachable through a lan to lan IPsec vpn. We are able to activate the netflow export (we see flow export counters incrementing), but the flow is not passing through the vpn. Our netflow collector is on the other side of the IPsec tunnel so we define it linked to the internet interface.Is the export possible through the vpn? I read in a Solarwinds forum that it should not be possible.What ip address is choosen as source interface by ASA? Is there a way to force a source interface?
View 5 Replies
View Related
Dec 16, 2011
I'm configuring up aa ASA-5510, and I have several interfaces, some of which include:
interface Ethernet0/0.200
vlan 200
nameif SITECORP
security-level 90
ip address 10.1.4.1 255.255.254.0
!
[code]....
This definitely confuses me, because SITECORP has an inbound access-list of permit ip any any.
View 5 Replies
View Related
Nov 1, 2012
We have a 3560 switch behind a ASA 5510 at a site that we are trying to access via telnet over the internet, we find out the switch does not have a default gateway configured. So I configure the following rule on the 5510: [code] Try accessing the switch, and all is good. One of our change control steps is to identify any others are connected to the device via: [code] I see the connection and show users command return 172.16.30.15, as expected. How is it possible that address can connect to that switch.
View 7 Replies
View Related
Mar 14, 2011
I configured a remote-access vpn on an ASA 5510 version 8.3. This is the configuration [code]The vpn goes up and I get an ip address, but it's impossible to reach the internal network. [code]
View 9 Replies
View Related
May 4, 2011
Configured ASA 5510 with CSC module and working fine.Here i likes to configure, Whenever any users from outside accessing my firewall (like VPN users) that logging information i need to send one particular mail ID.Simply, i likes to enable my fireawall to send logging information to one particular mail id.
View 10 Replies
View Related
Oct 9, 2011
below is my sanitized ASA 5510 config. got an IPv6 T1 from at&t and im unable to pass any traffic from my LAN clients out.
:
ASA Version 8.2(2)
!
enable password PoBmYYxuAzCciKRA encrypted
[Code].....
View 6 Replies
View Related
May 31, 2011
Configured ASA 5510 with CSC module and working fine.Whenever any users from outside accessing my firewall (like VPN users) that logging information i need to send one particular mail ID.
Simply, i likes to enable my fireawall to send logging information to one particular mail id.
View 1 Replies
View Related
Jan 17, 2012
We are upgrading from a Pix 515e to a ASA 5510 with CSC SSM. We cannot send outbound email or receive any email from the outside world. I have placed a call with Cisco Support with no luck. [code]
View 1 Replies
View Related
Apr 12, 2011
I have a Cisco asa 5510. I am doing attack a my firewall, using n map. I am seeing in the log the attack but i like that firewall send only alarm of attack by email . I have active email with warning and i received very much email.
I observed that graph show attack, but not ip of attacker, is possible that Cisco asa show the ip too ? The log show scanning with n map but not shunning IP and not send alarm. How i can send alarm ? The graph no show ip, it's possible show it.
View 10 Replies
View Related
Feb 6, 2012
I have 2 Cisco 877 routers and I need one set to bridge mode and one is gateway internet? How do I do?
(LAN)
ADSL <---------------->877 <----------------> 877 Gateway <-----------> Clients
View 3 Replies
View Related
Mar 13, 2012
Any major difrrence between Netflow v/s Netflow-Lite?
I am trying to understand if Cisco 4948E can do the same job as Cisco 4500E or not and difference between Netflow v/s Netflow-Lite will work for me to select correct product.
View 2 Replies
View Related
Aug 25, 2012
In the LAN side configured one Interface VLAN and Configure IP address on that and add the AP’s to the VLAN .. and on the WAN ADSL its p2p with Qtel bridge mode ..
from the Access Point I am able to reach 172.31.30.30 which is the router far interface . BUT still not able to reach the ISP side 172.31.30.29 .
Router Config
no ip routing
bridge irb
bridge 1 protocol ieee
bridge 1 route ip(code)
View 4 Replies
View Related
Feb 6, 2012
How to set the WNR2000v3 into Bridge Mode. I can not find instructions on it in the user manual or the NetGear website. And Google.com has turned up not valuable results either.
I have the WRN2000v3 plugged into another router via Ethernet. I basically want to "dumb down' the WNR2000v3 into a basic Ethernet switch.
View 5 Replies
View Related
Jan 2, 2011
how use wrt54g v3 bridge mode
View 2 Replies
View Related
Mar 20, 2011
Is it possible to put the SRP 527 into Bridge mode to use it just as a modem?
View 6 Replies
View Related
Apr 22, 2012
I have a Westell 6100 modem. After my old router, a DIR-655, got zapped by some electric charge from a nearby thunderstorm, I bought a Netgear WNDR3800 router. But I have not been able to get the Netgear router to connect to the Westell 6100 modem reliably [URL]
A friend had given me a Netopia 3347NWG router/modem some time ago but I had never attempted to use it. I was able to get into the web setup screens of the 3347NWG and, without attempting to connect the Netgear router to it, I was able to connect to the Internet via the setup screen. But every attempt to actually go to a web address would fail with a timeout, and efforts to ping always failed with a timeout. Yet the 3347NWG setup said I was connected.
Does anybody know how to setup the 3347NWG so it actually can connect to the Internet correctly so that I am able to surf to a web page or ping an address successfully ?
Does anybody know how to setup the 3347NWG in Bridge mode so that I can use it strictly as a ADSL modem and try to use it with my Netgear WNDR3800 router ?
If I can not use the 3347NWG with my Netgear router I had planned to send the Netgear router back for a replacement since it is not connecting relaibly to my Westell 6100 modem. But if I can get the 3347NWG to work as a modem and reliably connect my Netgear router to it, I will not have to send back the Netgear router for another one.
View 1 Replies
View Related
Dec 14, 2010
I have a TWC wideband modem and service. I know that they will enable bridge mode if I ask them. My questions are. After they enable it whats my setup? Do I just run a cable from their modem into a new router that I then set up on my own? Is it that simple?
View 2 Replies
View Related
Aug 1, 2011
Is it possible to configure bridge mode in asa 5505 if it is can u provide me a config.
View 1 Replies
View Related
Nov 18, 2012
Client has a building that is located 300Ft apart and would like to provide IP communications for 3-4 IP hadsets back to an IP PBX. They do not want to dig up the parking lot so we proposed using a wireless bridge. I noticed that Cisco discontinue the 1300 and 1400 Wireless Bridge. Can I use a 1262 with external antenna in Workgroup Bridge mode to perform this functions? I will put a Layer 3 switch on both ends to route traffic (3560C-8). Should I use the Yagi antenna's for outdoor use?
View 1 Replies
View Related
