I have a customer who wants to disable cdp on all switches for securtity reasons. The same customer has also LMS 4.0 installed.
When disabling cdp, does it affect the topology services on LMS? Can you still see the topology tab on device manager or the topology map of the entire network?
Im running 8.3 on a 5505. We've got a few ssh tunnels originating from inside to some place on the internet. It seems these tunnels are closed every n minutes. I've seen two recommendations for altering the timeout values, and what I am interested in is infinite timeout (0) for these SSH tunnels.
Suggestion 1, alter timeout "conn". Default is 30 minutes, but I suspect this might have a negative impact because no inactive connections would be closed, ever. If it however is recommended to alter, how to set it to "0" (off/unlimited)? timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Suggestion 2, enable a ssh class map which explicitely set the timeout for the ssh connection. Is this recommended? How would I achieve unlimited time? And what about random-sequence-number disabled as seen below, is that really recommended?
class CLASS_MAP_SSH
set connection random-sequence-number disable
set connection timeout idle 48:00:00 reset
set connection decrement-ttl
I currently have 3 pcs - one desktop ethernet - one desktop wireless adapter and one laptop wireless. I unplugged the desktop wireless a few nights ago - I have since been on the ethernet desktop fine but when I tried to log on with the laptop wireless - no deal. So I replugged the wireless desktop and then the laptop was o.k. to connect. This doesn't seem normal but I don't know. One unplugged pc on the network shouldn't affect the others should it?
View 3 Replies View RelatedI recently switched over to a new cable modem/wireless router, which is the Zoom DOCSIS 3.0 (Model: 5350-00-03). Me and my brothers have set up a second router, a Netgear N300 (Model: WNR2000v2), on the other side of the house. After the switch, our data usage has been increasing. I just want to know if having two routers affect more data usage.
View 3 Replies View RelatedI notice that SPI is disabled by default on the DIR-600 (in firmware 2.10 and 2.11 as well).Port forwarding still works with SPI on (use it for BitTorrent).So why is it off by default?Does it slow down things?
View 1 Replies View RelatedI'm in the throes of configuring my 5520 to supply different group policies based on LDAP group membership. I'm finding that no matter what I do only the default group is applied. I'm sure it'll be a simple fix - but I just can't see it. [code]
View 4 Replies View RelatedI am planning the upgrade of an ASA 5550 Active/Passive cluster from 8.0 to 8.2 according to the "zero downtime upgrade" documentation available in the web.
I do not have another cluster for comprehensive testing, but I executed a simple migration procedure on a tiny 5505 and neither licensing features nor the configuration (the command sintax) were affected by this process. I know this is something to care about if you go to 8.3, but this is not my case.I browsed the release notes of 8.2(5) and no special disclaimer was found by me with respect to this release. So everything should work just fine, but I would like to double check for input with respect to these two subjects:
1.Will the licensed features (vpn, concurrent connections, etc) be preserved?
2. Will the configuration be preserved ?
to what extent gigabit lan port affect speed of internet?
View 1 Replies View RelatedCan i connect about 12 devices (laptops and mobile phones) to a 8 mbps or 16 mbps wifi router?
View 1 Replies View RelatedI work at technical support and I heard a story about a customer that lost his internet connection when there was a high tide. I do not know the details but is it possible that high tide can affect wireless internet signals?
View 2 Replies View RelatedI have had my DIR-655 for a few years now and it has been running fine up until a few months ago.
I haven't changed any features or done some major changes but it started cutting out all network traffic. WiFi drops internet connection but is still connected and both my NAS and my wired computer are also cut off from the network but shows as connected.
The router GUI is not accessible when this happens. The routers leds are lit but for some reason all network activity is dropped. Restarting the router resets everything.
This is rather sporadic but happens at least 2 times a day.
I have disconnected the internet connection and left the "internal" network be up and running and then too I get the network "cut-off" after some time so it is not dependent on my ISP.
I have Hardware Version A2 and am running Firmware Version 1.32NA. I tried to install the 1.35NA and it goes and does something but when it comes back it is still on 1.32NA so the FW upgrade doesn't kick in. Is my hardware too old for it possibly?
I'm planning to upgrade Cisco ASA 8.2 to an anyconnect essentials and mobile license. Are there any concerns with some users continuing to utilize the cisco vpn IPSEC client while others migrate to the Anyconnect? I just want to make sure when I upgrade the license that there will not be an immediate requirment to have all users switch to Anyconnect immediately.
View 2 Replies View RelatedWill a Wi-Fi range extender affect (i.e., reduce) the signal of the router? How does the throughput signal compare between where it originates and where it ends?
View 2 Replies View RelatedCan the quality of my phone line affect the ability of web pages to load? Some times web pages load flawlessly at other times browser says web page found but it refuses to load. I assume that things could get slow if I am downloading various updates in the background. What could be my problem? My phone line is on poles-underground-been spliced and on the end of the line. Seems like when I need to connect I can't.
View 1 Replies View RelatedAm running LMS 4.0 on windows 2003 server, i would like to disable or remove notifications with the EventName 'ExceededMaximumUptime' and 'BackupActivated' on the device fault summary view. How do i achieve this? This will be useful in only monitoring fewer notifications.
View 3 Replies View RelatedI have a friend who is in need of a laptop or netbook only for word processing.
The device cannot have any possibility of connecting to the internet, and also cannot have a webcam. I may be able to find one without a webcam, but I think the possibility of finding one without a NIC wouldn't be easy, if at all possible.
I can only think that disabling the network adapter in registry edit will be something she won't be able to undo (she's not majorly tech savvy).
I've not purchased the laptop/netbook yet, but I would like to know if it's possible and/or how to do it before I buy it.
Are the users' download speeds depend on the hosting company's owner's internet speed? Let say if I was running my own server with my internet speed 1mb and LAN 100mbps, are my clients' download speeds restricted to maximum 1mb of any content from my server?
View 3 Replies View RelatedI have a modem connected to my pc, and the ethernet can be removed and connected to a laptop to access internet. How do I prevent access to other laptops and computers?
View 4 Replies View RelatedRIPv2 And Disabling / re-enabling Interface
View 5 Replies View RelatedWe inherited a lot of the equipment from another team of network administrators and every now and then, we run into a switch with some old code or configuration that was left behind and missed by us. Today, I discovered that CPP was enabled on 3 of our access-layer switches in one of the buildings we support.
View 3 Replies View RelatedWe just recently upgraded a 5540 ASA running 8.2 to a 5555 running 8.6. I have a question concerning disabling proxy ARP with static nat rules in place. We have several instance where devices in a dmz have a static nat entry to the outside and a static nat entry to the inside using the same IP. My question is if we disable proxy arp on the inside interface would that cause device on the inside not to be able to reach the device in the dmz? From what I have seen you don't want to disable it on the outside interface due to all the static nat translations. But we have some that are have nat translation going to the inside as well. How does proxy arp come into play there? Below is a diagram of an example of the setup I a referring to. This is on the new 5555 running 8.6
View 1 Replies View Relatedmy company has used Split Tunneling for all of our VPN uses, however we recently purchased 2 ASA5505s for use at various jobsites, and have been running into problems with Local Network Administrators blocking certain traffic that we need to operate. They allow full VPN connectivity to traverse their networks, so we are able to use our LAN Resources over the split tunnel no problem.
We have it set up as a Dynamic L2L Connection, and this ASA is operating flawlessly minus the traffic being blocked upstream by the network admin. Our VPN topolgy is Hub & Spoke. Below is excerpts from our config on how the VPN is set up: [code]
What we'd like to achieve is being able to pass ALL traffic (LAN & Internet) through the VPN tunnel, then be processed by the Hub ASA (192.168.9.1) on the other end. I am guessing crypto map + routing would have to be changed?
access-list to_hq extended permit ip 192.168.101.0 255.255.255.0 0.0.0.0 0.0.0.0route inside 0.0.0.0 0.0.0.0 192.168.9.1Disable NAT on Spoke. Is this how I would go about doing this??? We need ip address dhcp setroute so our ASA can find the other end and form the VPN tunnel, and I am not sure how this would affect things. [code]
Any way to disable the usb console port on a 2900 series router?
View 2 Replies View RelatedI currently own a Lenovo Thinkpad x201 Tablet Laptop.The issue is that I randomly lose internet access after usage for some time. I've determined [but not limited it to] that the computer heating is causing the computer to automatically disable the connections. I've looked at the Drivers and have found that one of the Drivers disables itself and will not re-enable when I try to enable it again. When I try to reboot, it stalls on the Shutting Down screen indefinitely [I must force restart].
INTEL(R) 82577LM Gigabit Network Connection
INTEL(R) Centrino Advanced-N 6200 AGN
I've checked the BIOS, but I haven't found much of anything. After tampering for a while with it, I received a BSOD. After trying to boot it back up, I got the "a disk read error has occurred" screen and had to send it in... at which point they reinstalled the OS, wiped my hard drive, and sent it back.
I have the Motorola SURFboard SG6580 cable modem/wireless router combo. However, I'm only using my Linksys WRT54GL for the wireless functions. It's been my old standard for years, not to mentioned I have my entire wireless encrypted network setup via this device.
So, recently I've been trying to set up Port Forwarding and I've been having trouble getting sites like canyouseeme.org to see the port. After speaking with Tech Support at my ISP, they had me disable some of the settings in my SURFboard modem in order to deactivate the router side of things to get it act only as a cable modem. However, my port forwarding is still not working.
Here is a screen shot of all the pertinent screens of my SG6580 properties, and what they had me set. if I have properly configured the modem to not interfere with my other wireless setup so I can at least rule this out as what's blocking my port forwarding?
I am a teacher in a computer Classroom. We are on a school network and certain students abuse the internet privalages. Is there a way for me to restrict the internet for a certain computer in the network besides unplugging an ethernet cord?
View 2 Replies View Relatedi have an issue with the lms 4.2 Topology Data Collection. After installation the Topology Data Collection was running normaly, but since first server reload the Topo Data Collect under Inventory > Dashboards > Device Status > Collection Summary is "frozen".Is there any option to stop this process elsewhere? I cannot find anything under jobs in running state or so. Clicking on Schedule only give me the option to start data collection, but lms always returns that the process is running.
View 9 Replies View Related1)i have problem in LMS 4.2 , he shows most devices not connected to topology sitting lonly even though the have cdp enable , how to force these to join the topology
2)why some devices are shown unreachable , even though i can ping them from lms server and gets reply, also they have community and cdp configured
On a LMS 4.0.1 :I want to know what is the right way to change the telnet program on the campus mgr map (topology services map), when right-clicking a device icon and selecting telnet.I would like to use a tool of mine, and not to launch a telnet command from the IE browser.I changed the default telnet of Windows in the registry, but the program is still launched as a telnet URL in the browser and this is not what I would like to do.
View 2 Replies View RelatedThe regular problem with the LMS topology and WAN Links when you see the branches are disconnected from the HQ BUT in my case the branches are already connected via Layer2 links but unfortunately some intermediate layer2 modem/switch exist in some branches which prevent CDP discovery but you will find both HQ and branch router in the same subnet .
View 1 Replies View Relatedi have only 1 switch 2960 POE at customer enviroment.i did run topology service and checked on the right side POE CAPABLE Devices
it shows me that i have 4 switch POE while actually there is only 1 switch POE in real enviroment.
have ether-channel across 2 switches?i am new in cisco LMS . now i am in client site installing cisco LMS 4.1 in UCS server-rack version. we did it well for the installation, and the LMS working properly until i cannot open topology service.
i attached the error message
What is the impact of disabling xlate in FWSM
We have dynamic NAT configured from inside to outside interface, but still it is showing NAT entry as below.
"NAT from inside:177.26.99.10 to outside:177.26.99.10 flags Ii"
Expected NAT entry should as below :
"NAT from inside:177.26.99.10 to outside:111.111.111.111 flags Ii"
We were considering implementing "ip verify revert-path" .Hence here i am thinking whether xlate-bypass is the issue here and implementing same with "ip verify revert-path" woud be a good idea.