Just want to know if there is a way to configure secondary IP address on the outside/public interface of ASA/PIX.One of our clients have used most of their IP on the subnet given by their ISP. They use those IP's for staticallymapping to Servers inside their local LAN. Thus, they requested another block/subnet from their ISP. They will also use this for static mapping/port forwarding to other servers in their network. The current UTM they are using is allowing this but they would like to use ASA/PIX as their main Firewall. Is this even possible or is there a workaround for this kind of scenario?
My customer has a 5510 with the inside interface connected to a routed port on a Cat3560G.When I look at the arp cache on the 5510 all inside IPs have the MAC of the 3560's routed port. [code]
Recently, I've been having significant problems with denial of service on our ASA-5510. Two IP addresses in particular attack my ASA regularly. What kind of rule do I need to create to deny these IP's access to my firewall?
we have two Cisco ASA 5510 in failover configuration.We tried to change the public IP address on the Outside interface of the primary device but it didn't works. The new IP is not reachable from Internet nor pingable from device on the same LAN.The new IP address is in the same subnet of the old IP.
From the switch on which the ASA is connected and from another Cisco PIX we can see the ARP entry. In the analysis, on the old public IP address there was a VPN site-to-site and Webvpn defined.We tried also to shut/no shut the interface and reboot the device.
The old syntax that I am much more familiar with has been deprecated. On older IOS it would have been something like static (inside,outside) tcp 209.114.146.122 14033 192.168.30.69 1433 netmask 255.255.255.255 Plus an extended ACL to allow the traffic.I am trying to create a Static PAT to allow a host address to access our Network through an ASA. I have external address 209.114.146.122 that I want to hit the external interface on an obscure port (say 14033) and translate that traffic to an internal host address on port 1433.
I'm using CCP to configure my Cisco 881, I need to assign my IP address range to the WAN interface (176.35.224.112/29), however everytime i enter the IP Address with a /29 subnet mask or indeed one of the usable addresses with a /32 I'm told I need to "Enter a valid IP address".I have also attempted to set the interfaces IP address via IOS directly and was also told the address was incorrect.
I have a 2003 server that is doing something wrong. When I show the mac address table I can see that the server is assigning a bad mac address to several IPS. The server assign a non-existent mac address to some IPS for this reason the server stobut I would like to solve the problem
I had no trouble getting connected to the internet a couple of months ago. Then the signal got weak. I have a better antenna now and the network shows 5 bars but I cannot connect. It is an open, unencrypted connection. Wi-Fi Inspector gives this info[CODE]
I was using an IP address at one of client side and i got an IP address conflicted error and i changed the ip, Hence when i am searching that where does it consume on other systems i don't get the location & i need to use the conflicted one IP address so how can i know that which system does it using, i manually checked all systems i did not get, the ip address is gets ping but unable to get its location.
I know DHCP can assign more than just address, mask, and gateway. It can also assign a hostname, and DNS. Does anybody know if it can also be used to assign an SNMP address?
I understand you can't assign an IPv4 Address to a "port". But here's my issue. I have two network cables attached to a managed switch, the location of the two cables are very important. Two computers attached to the said cables.I would like to communicate with one of the computers on PORT 1 and PORT 2, regardless of what computer is plugged into them. They get there IP's via DHCP, and a static IP wont work - as the computer plugged into PORT 1 or 2 may be different.So. I have two ports on the switch that I always want to communicate with the computer on the other end. But I don't (will not) always know the IP address of the computer(s) connected.
I have a public IP and I want to be able to view my three systems connected to a linksys router from the internet. How can configure the router to see three systems with just one Public IP address whenever I am on the internet?
I have just purchased a SG300-28P switch I am using a GUI to do my config. I cant create VLANs just fine on this but I can not assign IP address to the VLANs.
I just want to have a Data and Voice VLAN on this I am planning on leaving data on VLAn 1 but I can't seem to find an option to assign an IP address to my voice vlan.
For some odd reason I cant access this switch using a console port.
I have what I feel is sort of a strange issue. When I have systems on my home network get their IP from DHCP, they can get to the internet just fine. But it seems that when I assign a static address, they have local network access only, and will not get a connection to the internet. My windows 2008 server is the big problem with this one.
There are 6 computers in our home network. It happens every few months or so that router would not assign valid IP address to one of the computers. So, most of the time everything works well, but there comes a moment when one of the computers (but not others) can't get valid IP address.We try turning off and then on the router and it solves the problem most of the time. But, there are cases when turning off and on the router won't solve the problem.
I am trying to assign a static IP address for network adaptor as i am going to be using it to install Active Directory on VMWare Worksation. I was told that if i went into Device Manager within my worksation then Advance > Locall Administered Address and set a static IP, when i install AD and it asks to whether set a static or dynamic IP it would continue the install process. However, after setting a static ip it did not, can somebody tell me how i can set the correct IP address for me to continue instaling AD.
I have an HP 510 laptop running windows xp. Wherever i go, i am able to connect through wifi with a password except for where i live. I have had no problems connecting anywhere else. All other laptops and pc's connect through the network i cant access. I get a 'limited or no connectivity' message with details displaying either 'network did not assign a network address to the computer', 'cannot connect to the internet' or 'cannot renew ip address. I reviewed a few older posts and have tried ipconfig/release, ipconfig/renew, ipconfig/all to no avail. i also tried netsh ip reset reset.log and netsh windows catalog(or something along those lines) from the earlier post i read, still nothing. I do notice that when i go to properties the wep password always reverts to one i did not enter, and once in a great while when i re-enter it the icon will show 'connected to network, excellent signal strength' but Internet Explorer says not able to connect. I cant seem to figure out why i connect fine everywhere else, and why every other 'guest' computer connects to this network.
i connect using Intel(R) PRO/wireless 2200BG under properties>general under properties>wireless networks>association use windows to config is checked under properties>network>properties the network authentication is 'open' and data encryption is set to 'wep' while the network key reverts to something i did not enter. key provided is not checked under properties>wireless networks>authentication 'enable ieee 802.1x authentication for this network is not checked
I've been using the Dir-655 for 2 or 3 years with my old Xbox 360 and an external G wireless adapter. Everything was working perfectly until I got the dreaded Red Rings Of Death the other day. I replaced the Xbox with a new Slim version with built in N capable network adapter.
After more than 10 hours of trying a variety of "fixes" I found from MS and in this forum, I am still at square 1.
Hardware Version : A3 Firmware Version : 1.32NA (this is listed as Live compatible by Microsoft) 802.11 Mode : Tried N only, G only and mixed 802.11n and 802.11g Enable Auto Channel Scan : Checked Transmission Rate : Best (automatic) Channel Width : Auto 20/40 Visibility Status : Visible Security Mode : WPA-Personal Also tried WEP WPA Mode : Auto (WPA or WPA2) Also tried WEP Cipher Type : TKOP and AES
I tried assigning an IP manually from the Xbox. But, no matter what I do, the router will not accept it. It is especially frustrating that the Xbox is visible to the unit. It simply will not assign an IP to it under any circumstance.
If you read the sales hype promoting the Dir-655, you will see a lot of nonsense about it being great for gaming. Given that, you'd think a simple solution would have been found and posted for this issue by now. Surely, end users shouldn't be trying 100 different possible "fixes", none of which work, at this late stage of the firmware upgrades. If I sound a tad fed up, it's because I am. After the expense of the new Xbox, it appears I now have to junk my router too.
Here is the status screen taken when it was in mixed mode. Changing it to 'G Only' didn't make any difference:
I have a cisco 878 router and I can’t assign ip address to it’s fast Ethernet interface. When I assign ip address give me this message: “you can not assign ip address to layer 2 interface”.
But I can not understand why give me this alert when I use a layer3 device?!
I have a RVS4000 router with DHCP enabled and in router mode.
The LAN is 192.168.2.x. The RVS4000 static IP address is 192.168.2.8
The router is not the RVS4000 and is at 192.168.2.1
The RVS4000 dhcp is assigning it's clients a default gateway of 192.168.2.8 instead of what I want 192.168.2.1. How can I get the RVS4000's DHCP server to assign another IP address other than its own as the default gateway to its DHCP clients?
I have a n150 and it only allows private ip addresses for the lan setup. Is there anyway to assign a public address? I need to have the DHCP use a public range and I can't do that unless I can set the router to a public ip.
I am trying to assign static ip address on vlan 1 interface , the model no of switch is SG300 & the firmware version is 1.1.2.0 .But whenever I type the IP address & press enter , a question is popped up asking for confirmation (switch0d851f(config-if)#ip address 1.1.1.1 255.0.0.0.
Please ensure that the port through which the device is managed has the proper settings and is a member of the new management interface.Would you like to apply this new configuration? (Y/N)[N] N )
Actually I have a lab with ACS 5.3 running with 802.1x, but when when the user is successfully authenticated, it's assigned and IP address from the DHCP server, is there a way to assign a static IP address depending of login username??
I recently switched cable companies and was given a Linksys E1200 wireless router to connect to the internet. The router works fine with all of my laptops but not with my desktop. The desktop has a WMP11 wireless PCI card. I have had trouble using this card in the past but have always managed to solve connectivity issues. This time, I am unable to connect to the internet. Although I can detect the network signal, the network will not assign my computer an IP address. Also, when I first switched routers, I got a message saying I did not have the proper certificate to connect to the network
On my EA4500 i've given my Sony Google TV Box (connected by wifi N) a static ip address under "DHCP Reservations". However is there any way to add a DNS server address to this reserved IP so that only the Google Box is affected by the DNS, all the other connected devices remain unaffected? Presently i enter the required DNS address in the google box but i would prefer to do it on the EA4500. I'm using the latest Cisco Cloud fw on my router.
DHCP enabled with default settings. Dynamic IP range from 192.168.0.100 - 192.168.0.199.Router shows laptop with 192.168.0.199 however when I check the IP on laptop I have 192.168.100.10 and both laptops are connected on my SSID with 90% signal strenght.