I have a Cisco ASA 5505. This has been previously configured. I am trying to give it a factory reset and I am being able to connect via Putty and Hyper-terminal but I cannot enter anything. I am able to go into ROMMAN mode by using the esc key.
View 6 RepliesI have cisco 2911 router, this router not load putty and hyper terminal. my last command is confreg 0x3242 from rommon mode.
View 1 Replies View RelatedSo I have read about proper procedure involving the connection between a console cable and Hyper-terminal. I have also tried plugging into a network port to obtain an IP Address but nothing seems to work. When powering on the switch I see that it lights up, hear fans spin and assume it has booted properly. I'm using Hyperterminal on Windows Xp Pro SP3 and I've also tried minicom in Fedora.
And just FYI Hyperterminal was set to the proper:
Bits per second: 38400
Data bits: 8
Parity: None
Stop Bits: 1
Flow Control: None
I am able to access the console port via USB to console but i cant type anything in the terminal, i can select echo locally but doesnt rly do anything, i cant submit it. i cant seem to do anything in the actual terminal.
View 4 Replies View RelatedI am trying to set up a SLA statement on an ASA 5505 version 8.2(5). When I enter the command "sla monitor schedule 1 life forever start-time now" I get a message stating "%Entry not configured."
View 1 Replies View RelatedI want to know with an ASA 5505 w/ Security Plus License I get up to 20 VLANS/Named Interfaces.I have a customer that is getting a new subnet of external IP addresses from their service provider and a different default gateway to accomodate re-hosting their datacenter at their main office instead of at a Colo. My question, when building out their new DMZ, can I have multiple route 0.0.0.0 commands?
Example.
Current Default Gateway 1.1.1.X
Internal hosts 192.168.1.0 use and are natted to 1.1.1.X
New Default Gateway for DMZ Servers 2.2.2.x
Internal hosts still use 1.1.1.X, but server hosts in 192.168.1.3 should use 2.2.2.X -- there are also a bunch of pre-existing static NAT rules for these servers such as 2.2.2.30 translates to 192.168.1.30.
I think I would accomplish this by using the following:
route inside 0.0.0.0 0.0.0.0 1.1.1.X
route DMZ 0.0.0.0 0.0.0.0 2.2.2.x
Would this be correct?
I have a problem for config switch sge2000. I can not console mode to get the prompt to type commands
View 1 Replies View RelatedI am running ASA 5505 release 8.2(4) using a clientless SSL vpn to connect my assessors to the server via RDP to a Terminal server. Everything was working fine until last week when we had a Internet outage. During the outage some of the assessors claimed to have accepted a Cisco add-on to get into the site. once the internet came backup they could not connect to the terminal servers - what would happen is they would click on the link - say OK to connect the clipboard and the screen would pause for a few seconds then right back to the select options page.
they can get to other servers (non-terminal servers) but not to the ones they need. I can recreate the issue by waiting a REALLY long time before replying to a prompt to install an cisco add-on. I have users that can connect and others than can not. Also this only seems to affect Internet Explorer 8 and 9 does not affect Firefox
Any link to the commands in the Roman asa 55xx ? Did not find on Cisco's documents.
My small ASA 5505 crashed and comes up in Roman. Like to try get SW and Config back if possible.
We have an ASA with 8.4(5) version. we had detected that few ip's were getting shunned ,to overcome the problem no shun was used and the traffic normalised.But, the same problem re-occured a few days after that with logs showing traffic being shunned.
is there any fixed way to get rid of this. what commands can i use to verify related configuration on the firewall.
I am having two issues:
1. my email going out is working along with internal, but inbound email is not working. My barracuda email filter is 192.168.1.107 and my exchange 2007 is 192.168.1.222 along with this OWA does not work.
2. Terminal Services does not work when I try from the home pc in I get server not available or disconnected
Below is my congig
ASA Version 8.3(1)!hostname wsigatewaydomain-name wsystems.comenable password yVSkMxWRc/S396FB encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface Ethernet0/0 nameif outside security-level 0 ip address 64.XXX.XXX.XXX 255.XXX.XXX.XXXinterface Ethernet0/1 nameif inside security-level 100 ip address 192.168.1.1 255.255.0.0!interface Ethernet0/2 shutdown no nameif no security-level no ip address!interface Ethernet0/3 [Code]....
I've set up this router in the office, and I can access it via PPTP without any problems from home (via windows VPN), Router is sat in DMZ with full access to the internet.
Q1,I've created a 2 phase ipsec vpn with an IKE & preshared key (AES/MD5/1), but I can't find out how to get my encrypted hash for it?also, I can't access the IOS via telnet/ putty, I found an article online explaining how to enable it via url string, but it didn't work,
Q2,I've setup the cisco client on my laptop, and working on the pcf file, without much luck.. Everytime I try to connect it get " error 412. the remote peer is no longer responding. "
With wireshark, I can see the requests been made to the router.. ( from the office )
Within my PCF file i have ...
[main]
Description=MYNAME
Host=<external IP>
AuthType=1
GroupName=vpnname
GroupPwd=<myUnEncryptedKey>
[code]....
I have verizon wireless router to connect to the internet via FIOS. The public IP on the wireless router is DHCP assigned. I have my home lab with cisco 2511 and octal cables. I would like to be able to access the terminal server remotely via the internet when I'm not in. I'm concerned cause the wireless router is DHCP assigned IP. Even if I have a static IP on the ethernet port of the 2511 connected to the wireless router, I'm not sure if the NAT will work so it can be accessible from the internet.
View 2 Replies View RelatedI try to get a ASA with the new software 8.4.2 running. On an old pix we had the nat command: static (inside,outside) tcp interface www 192.168.15.252 www netmask 255.255.255.255 0 0,In all the new documents about 8.4.2 I can find that it should work with something like:
object network web_host nat (inside,outside) static interface service tcp www www
I want to forward http traffic from the outside interface to this host. In the log I just get entries about blocking ACL - but both is allowed on the outside access-list - traffic to the inside IP and also to the outside interface IP.
I also tried it with "Public Server" - but when I try to use the Interface address I just get the message: Address x.x.x.x overlaps with outside interface address.
Is it still possible to do port forwarding on the outside interface?
I have just received 4 static ip's from my isp, i want to be able to point these ip's at different services on my internal servers, for example: [code]. The firewall I have is Cisco PIX 515, how to set the NATing up or commands?
View 1 Replies View RelatedWhy do my cli commands just scroll all the content rather than having to press space to show more? It is hard to type sh run and the entire config flays past rather than being to inspect it page by page.
View 3 Replies View RelatedI can't connect with putty to E4200.I tried different ways - telnet, ssh, etc.
View 1 Replies View RelatedI have some LSA type 5, I want to change it from type 5 to type 3 before send to another Area, How can i do it?
View 1 Replies View RelatedCurrently have an ASA 5545. What I want to do is allow our support team to perform ALL show commands (up to and including show run) but not enable them to perform ANY configuration changes on the devices (not get into config t). This is to allow them to check ARP tables, routing protocol status, etc
i don't have access to the ASA at the moment and haven't been able to figure it out in IOS, i'm assuming its not too hard.
How to view the commands that someone changed the configurations in ASA 5520?
View 1 Replies View RelatedI have a Cisco 2811 router and i want to experiment on the IOS firewall.The thing is, none of the commands that are proposed in online guides - like ip inspect, ip audit, etc. - seem to be working. I just get "unrecognized command" on a router that is supposed to support such features. I'm wondering if it has something to do with the IOS image.
My show version output is this:
Cisco IOS Software, 2800 Software (C2800NM-SPSERVICESK9-M), Version 12.3(11)T9, RELEASE SOFTWARE (fc3)
Technical Support: [URL]
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Tue 13-Dec-05 08:24 by ccai
[code]....
We want to use ASA5520 but both Firewall have different CPU. One has CPU Pentium 4 2400 MHz and another has Pentium 4 Celeron 2000 MHz. Can it be configured for replica / failover?
View 5 Replies View RelatedIt seemed that show vpn-sessiondb ra-ikev1-ipsec will not provide the client type of the remote vpn user as show vpn-sessiondb remote did before.
Is there a way to find it out on ASA running 8.3?
I already know there's an easier way of doing this; DHCP, TFTP and CCBoot.But this is not what I want.I have Hyper-V installed on a Windows Server 2008 R2 with a Windows 7 VM installed on it.What I wanna do is take this image of Windows 7 and boot it on another PC on the same network. The client PC doesn't have a hard disk so I want to boot it using a USB stick.I've already installed and configured Remote Desktop Roles and was able to access the Hyper-v VM using a browser locally.So what can I do next? I can't take the .vhd image and put it on a usb stick because it's too large (30GB) and converting it to .vdi would still be large.
View 3 Replies View RelatedI like to set up a pix and router for this network for a small buss, but I need to know what type of cable do I need to set this connection to work straight through or a cross over cable? also I need a subgestion if a nat would work better on the pix or leave it on the router?
View 4 Replies View RelatedI have created Different extended access-list which allow/block some specific services like IP,TCP,UDP ,ICMP etc for certain source and destination . But now I have to allow/Block all/any type of services to a certain host from a extended access-list . How can I do it ?
View 4 Replies View RelatedI have a capture set up of type "asp-drop all", and I am capturing certain packets with no indicated ASP drop reason. See output below (ASA 5510 with 8.0(5)23 code):asa5510-8.0# show capture, capture ASP type asp-drop all buffer 15000 circular-buffer [Capturing - 14912 bytes]
View 2 Replies View RelatedI have need to test async communications through a pair of CGR 2010's..This emulates some particular serial-talking-only devices at either end that want to communicate with eachother. I've done stuff like this before but with modems attached to the PC's.
View 1 Replies View RelatedDoes LMS 4.2 support Intel Xeon X7560 processor in Hyper-V environment?
View 1 Replies View RelatedI'm trying to set up VLANs in my network.So the first device after the internet cloud is my ISP modem/router. I don't really use the router part. The second device is my Linksys WRT54G router with DD-WRT firmware on it.Between the two, there is a subnet just for them. After the DD-WRT router, there is a subnet for my LAN.The third device is my netgear GS108T switch (with vlan support) to which almost all my computers are hooked up. One of those computers is my server that is domain controller and has the roles as shown in the image. What I would like to do is to create several virtual machines in Hyper-V. The trick is that I want to isolate them from the rest of my network. They should be able to access (and be accessed) from the internet but not the rest of my network. So my whole network should be in the same VLAN but each VM should be individually in separate VLANs.
1) I've allready created the VLANs on my Netgear Switch. I know my DD-WRT also has VLAN support. Do I need to create the same VLANs on that also?
2) How to configure the VLAN part of the Hyper-V server? (by the way, my server OS is Windows Server 2008 R2 with the hyper-v role, it's not the bare-metal hyper-v)Should my Virtual Switch be in VLAN 10 and my VMs in the other VLANs?Should the port (on the netgear switch) in which my server is connected, be in VLAN 10 (so that my server is accessible from every other computer in the network)?
I am switching a switch connecting to the ASA5550 tomorrow. My current switch is using fiber connecting to the ASA. The new one only support copper. If I switch between fiber to copper on the ASA (change media-type command on interface) will it cause a down time? I have VPN tunnel on the ASA and don't want the session to reset.
View 2 Replies View RelatedWhen I create a virtual switch on hyper v, i lose network connectivity and the default gateway is missing I have to manually put the default gateway in and disable and re enable the network adaptor each time the server restarts in order to get network connectivity. I am running windows server 2012 Hyper V Virtual Ethernet Adapter loses default gateway server 2012
View 9 Replies View RelatedHow I can actively monitor the interfaces and overall status of 2 x ASA 5500s in an Active/Standby configuration?
I can setup monitoring of the interfaces on the Active member but I'm not sure how to manage the Standby member?