I am trying to use the apple finder/application to view all my apple mac-mini computers. I do have two asdm-5505 connected via a vpn tunnel.
At this point I can view only the computers on the local subnets. I called AppleCare and they gave some possible ports that can be opened in the firewall to allow the Bonjour protocol to pass through the ASDM:ports 5297/tcp, 5298/tcp-udp, 5353/udp, and 5354/tcp
I am trying to use the apple finder/application to view all my apple mac-mini computers. I do have two asdm-5505 connected via a vpn tunnel.At this point I can view only the computers on the local subnets. I called AppleCare and they gave some possible ports that can be opened in the firewall to allow the Bonjour protocol to pass through the ASDM:ports 5297/tcp, 5298/tcp-udp, 5353/udp, and 5354/tcp.Bonjour is the equivalent of Microsoft Netbeui used in Windows to browse the local subnet computers using Network Place desktop icon.
View 2 Replies View RelatedA customer of ours has the following access points and wireless lan controllers on site. They want to use the Apple Bonjour service with Apple TV's and iPads. I have enabled multicast feature of the 5508 globally and one the SSID.The Apple TV has an ethernet connection and the iPads connect over the wifi. The Apple tv is on the same subnet as the iPad's - the Bonjour features do work for approx 5/10 minutes then it stops working for some reason. The Access Points plug into a Cisco 2960 Layer 2 switch, the 5508 controllers plug are in LAG mode and plug into a Nortel Layer 3 stack which I have enabled IGMP snooping.I've read that the Apple Bonjour service isnt designed to work on a multi subnet network - but both the Apple TV and iPad are connected on the same subnet. Sounds like some kind of timeout but not too sure.
View 5 Replies View RelatedI have a brand new DIR-655 Rev B, Firmware 2.0NA.I just realized that none of my Apple device can discover each other using Bonjour, which is very essential for local connectivity for gaming and remote control and iTunes music streaming.
View 11 Replies View RelatedI have followed the details here as closely as I can:URL
I've upgraded to 7.4. I've enabled IGMP snooping, increased the time out, decreased the query/hello interval, went into Controller> menu and set AP Multicast Mode to Multicast with the Bonjour multicast range of 224.0.0.251.
Went into my WLAN and enabled Multicast VLAN Feature, and enabled my Multicast Interface as the same VLAN as the WLAN range.
The Lantronix Bonjour device is on the same VLAN as the WLAN (13). Accessing the Lantronix device shows it polling printers on our wired VLAN. However, no iDevice that joins the WLAN/SSID can find these printers.
I am using an Aironet 1142 standalone AP and want to use Apples Bonjour Service between iOS devices e.g. iPad and Apple TV.I have found here some posts that suggest to disable igmp snopping but this didn't worked for me.All devices are in the same vlan/subnet. Do I need to configure something special?
View 3 Replies View RelatedCan the WRT110 forward Bonjour packets? I have one WRT110 running my home wifi network with firmware version 1.0.07. I've spent hours trying to get my iPad to print to a wireless printer (HP D110a). I can print and scan from several wireless PC's on the same network but cannot see the HP printer. I started with the WEP 128-bit and then switched to WPA for a while but no luck so I switched back to WEP. I've read that other's have had similar problems with this and other Linksys routers.
From the iPad point of view I have iOS version 4.3.3. When I try to Airprint, for example through the Safari web browser, I see no printers available. I've tried many apps all with the same problem.
im working on a small project on a asa 5505 and beacuse i do most of the work from the outsidei want to open up asdm without vpn.
i have it working on another asa and the only difference is the rom version.the one not working is 8.0(5) - 6.2(3) and the one working is 8.0(4) - 6.1(5) did they do some changes?
We have a PIX with 3 interfaces. Inside, Outside,DMZ.
On my DMZ we have some clients that come in and remotely connect back to there office via MSPPTP. I setup the ASA with this to get rid of the error message: regular translation creation failed for protocol 47 src
policy-map global-policy
inspection_default
inspect pptp
Now when the dmz client tries to connect back to there PPTP server I get the following error.
172.31.10.204 0 24.172.85.162 37624 Teardown dynamic GRE translation from dmz:172.31.10.204/0 to outside:24.172.85.162/37624 duration 0:01:30
172.31.10.204 1069 173.188.74.155 1723 Deny TCP (no connection) from 172.31.10.204/1069 to 173.188.74.155/1723 flags PSH ACK on interface dmz
172.31.10.204 173.188.74.155 63767 Teardown GRE connection 8393958 from dmz:172.31.10.204 to outside:173.188.74.155/63767 duration 0:01:08 bytes [ code]...
I have been browsing the forum and the support notes for a couple of hours and haven't found a definitive answer to my question. Our ASA is on the subject versions. I watched a video on YouTube stating that upgrading the ASA is easiest if you upgrade ASDM, then the ASA. Problem is, I don't think I can upgrade ASDM first because I don't see a version that is compatible with ASA 7.2.x and 8.0.x.
View 3 Replies View RelatedI want to kown if is posible install IOS 8.3(2) and asdm 6.3(1) in firewall 5505 wich has 512MB of RAM and 128MB of flash. I installed it but according to the cisco page it can´t. maybe could work bad ?
View 1 Replies View RelatedI have a firewall Cisco ASA 5505, and currently it is a command line firewall. I want to configure ASDM so that i can use it as a GUI Web Base interface.I really don't know what to do. How can I configure ASDM on my firewall.
View 7 Replies View RelatedI have a standard ASA 5505 with inside, dmz and outside with the default security levels, 100/50/0. we have an email server inside which has been NATed and is working fine. However users accessing the wireless on the dmz are unable to access their emails on https (443). How do I allow SSL access ONLY to users on the dmz using ASA 8.4 commands or ADSM 6.4?
View 10 Replies View RelatedI am trying to configure a site to site ipsec vpn with 2 cisco 5505 ASA's. Unfortunately when i open up the ASDM there is no vpn wizard to start the configuration.The version of ASDM i am using from flash is 645-206.bin and the firmware on the ASA's is 842-k8.bin so should be ok. Why the VPN wizard doesnt appear?
View 7 Replies View Relatedrecently, ater successfully connecting the VPN to the ASA 5505, I am unable to then launch the ASDM client meaning that I can only SSH in to the unit.
I found an old post from 2008 and replied. It refers to an article talking about it is not possible to enable https server and webvpn on the same interface.
Well I am running ASA 8.0(4) so this restriction does not apply.
I have successifuly upgraded ASA and ASDM image. My question is how to make it to boot it as default when you do a factory reset of the device. For the ASA image I found out that it will boot the first image it founds on the flash, so I left only the latest bin file and if I do factory reset it boot the latest. But for ASDM it still boots the old one, because there is no "asdm image disk0:/asdm-645.bin" command in the config. I`m not sure how, because I only left the new ASDM bin image. Is there any variable or something that still points to old asdm image?
My ASA version is 8.4(2) and ASDM 6.4(5). The old one was ASA 8.2 and ASDM 6.3.
I've have an ASA 5505 with a inside network vlan1 (192.168.0.0/24) - i've configured an IPsec VPN profile and a VPN network of 192.168.0.50/24. I can through my VPN tunnel access inside hosts on vlan1 - but not ASDM on the ASA (192.168.0.1). Under management i've added the VPN network of 192.168.50.0/24 to have access to ASDM, but still does not work.
View 1 Replies View RelatedWe have a new installation of a ASA 5505 and are trying to get some NAT issues straightened out. On our internal network, we have two servers running Filemaker Server, a relational database server that clients connect with using port 5003. Our goal is to be able to allow users from the outside to access either of these servers as needed. I know how to set up a simple static NAT rule and matching Access rule in ASDM which would be fine for a case in which only one server using a given port is running on a network, but for simple static rules I seem to be blocked from entering a different translated port number from the orginal port number, which becomes a problem when two servers we need to access from the outside are running software using the same port number.
What is the simplest way to address this need? I am guessing that I need to set up a scenario like this, where port 5004 (or any arbitrarily choosen unused port, can be used to access the second server: [code]
How do I enable remote access to ASDM from outside of the network on the ASA 5505? This would be used for remote access to the firewall at a site that is not utilizing VPN.
View 5 Replies View RelatedRemote LAN pool is configured as inside. Route is proper. I am able to open 443 port from the remote LAN pool on the ASA. That means, the port is open from the remote pool. No response if I try https on the browser.
View 11 Replies View RelatedI have a Cisco ASA 5505 V10. I've upgraded it to use asa825-K8 & asdm-649.103. Before the upgrade I was able to get to the ASDM via https://192.168.1.1. However after the upgrade I just get a page cannot be displayed. I have rebooted the ASA.
View 4 Replies View RelatedMy macbook pro recently upgraded to the last version of java and now I can open the ASDM for my Cisco ASA 5505, when I try open, only show me the window of Java 7 ..., and don't load the ASDM.
View 15 Replies View RelatedToday I upgraded my Cisco ASA 5505 ASDM from version 6.34 to 6.41 cause of some problems on old version with NetFlow. But now when I switch to dashboard i can not see "Top Usage" tab. That was quite usefull for me. It simply disappeared.
Can i somehow configure which tabs are displayed on dashboard ? I really need that one and I do not want to downgrade :/
We have an ASA 5505 and are changing ISPs so we'll be getting a new static IP address. How do I change the external IP address using ASDM? (I haven't done it in 5 years so I'm rusty and just want ot make sure.) The ASA and ASDM are up to date.Am i correct in that I only need to change the external address in the configuration under Interfaces, then under Routing - Static Routes - Gateway IP I just need to enter the new WAN gateway address?
View 2 Replies View Related I am trying to open up 3 TCP ports in Cisco ASDM Launcher:
16000
16001
8098
And have a Cisco ASA 5505 Router. I need these ports open in order for a software that I have installed on the server to communicate with my local client computers for my business, The software is installed on Windows 2008 Server Standard Edition and was installed with MicrosoftSQL 2005. The software and Microsft SQL 2005 is pretty much installed and just requires this last step in order for the server to be connected to the local computers. In order to resolve this, I have gone to.
I have an ASA-5505 which I have been managing using ASDM from a PC and a Mac.I just happens that the Mac has not been used in a little while and when I tried to use ASDM on it, it fails.I've had a trawl through various posts and release notes (after updating various components in the process, incl Java with all the diabling/security updates of late) but am still having the problem and this is where I'm at:
- the ASA runs v8.4(2) and ASDM 7.1(1)52
- release notes state that ASDM 7.1 should work on Java 7 on Windows 7 and MacOS 10.7
- ASDM starts fine on my Windows 7 PC running Java 1.7.0_13
- I am also running Java 1.7.0_13 on MacOS 10.7.5
- on MacOS, ASDM starts, asks for credentials, download/refreshes the cached app... and then crashes with the following exception message:
The root cause of the issue seems to be that a Java class called apple.laf.AquaTableHeaderUI is not found..Now, I don't know much about Java, but that seems to be an Apple UI related class - I presume that it would be good to use this to give ASDM a more native look and feel, but why on earth is there no fallback? or am I missing something?
I've been trying to configure this Cisco ASA 5505 for days now. I used to be able to use the ASDM gui application, but i've since transitioned into using the CLI. Trying to go back to ASDM, it won't let me get back in, and when i try show asdm image, it says Device Manager image file not set. I have no CD for this device and I need that image file for the ASDM. How can I locate the file and install it on the router so I can use it?
View 2 Replies View RelatedI was checking out the config on my ASA and noticed a bunch of static routes configured when I did a show route. With the exception of two that I expect to be there, the remainder point traffic destined for specific internal hosts to the outside interface, i.e.
S private_ip 255.255.255.255 [1/0] via public_ip, outside
I verified that I cannot ping those hosts from the firewall. I logged in to the ASDM. When I check the Configuration>Device Setup>Routing>Static Routes it only shows two static routes, the ones I expect to see. If I look under Monitoring>Routing>Routes, I see the same output as I did on the CLI. I looked around to see if I was missing a key location for this information, and I was able to see the same static routes output in Monitoring>Routing>Routes. Since this is under monitoring though there's no way to delete these routes, and I still don't know where they were configured originally. Then I happened to check under Monitoring>VPN>VPN Statistics>Sessions, and I see several of the private IPs used in the static routes being used by VPN users, including my own! I know I didn't assign myself a static IP for VPN use or anything like that. So, what are these static IP routes? Why do I see them in the CLI and not under the Configuration tab? I mean, I know I can delete them from the CLI but I'm trying to figure out why the info is not synced. Am I seeing dynamically created content based on the VPN connections?
I have a server that I need to open up some ports on to allow access to the new internal Sharepoint server we're setting up. I've been having some issues getting the ports open like once I put the commands in and save them that server suddenly stops allowing outbound traffic. After looking at a few things I noticed while I was looking at the config file that the ASDM location is showing 2 IP's, both are the same as the server I'm trying to open ports for one being the private IP and the other is the public IP I'm trying to use. Is this the reason I'm having problems when I try to open those ports to my server? Do I need to use both a different private and public IP for this server so I can get my ports to work? The programmers selected these IP's so if I need to change them I'll let them know in case they need to make changes for the Sharepoint setup. This is on an ASA 5505.
View 12 Replies View RelatedI completed the PIX 515 to ASA 5505 migration today with no problems - ok one problem with the logon for ASDM. I'm trying no username and password - then using username and password from the 515 Pix with no success. How to reset the username and password for the ASDM GUI website.
View 3 Replies View RelatedDoes my device not support enough encryption to get ASDM/SSL/HTTP working?
First time I've ever seen this...:
%ASA-7-609001: Built local-host inside:192.168.1.10 %ASA-7-609001: Built local-host identity:192.168.1.1 %ASA-6-302013: Built inbound TCP connection 13 for inside:192.168.1.10/61194 (192.168.1.10/61194) to identity:192.168.1.1/443 (192.168.1.1/443) %ASA-6-725001: Starting SSL handshake with client inside:192.168.1.10/61194 for TLSv1 session. %ASA-7-725010: Device supports the following 1 cipher(s). %ASA-7-725011: Cipher[1] : DES-CBC-SHA %ASA-7-725008: SSL client inside:192.168.1.10/61194 proposes the following 11 cipher(s). %ASA-7-725011: Cipher[1] : DHE-DSS-AES256-SHA %ASA-7-725011: Cipher[2] : AES256-SHA %ASA-7-725011: Cipher[3] : DHE-RSA-AES256-SHA %ASA-7-725011: Cipher[4] : DHE-RSA-AES128-SHA %ASA-7-725011: Cipher[5] : DHE-DSS-AES128-SHA %ASA-7-725011: Cipher[6] : RC4-MD5 %ASA-7-725011: Cipher[7] : RC4-SHA %ASA-7-725011: Cipher[8] : AES128-SHA %ASA-7-725011: Cipher[9] : EDH-RSA-DES-CBC3-SHA %ASA-7-725011: Cipher[10] : EDH-DSS-DES-CBC3-SHA %ASA-7-725011: Cipher[11] : DES-CBC3-SHA %ASA-7-725014: SSL lib error. Function: SSL3_GET_CLIENT_HELLO Reason: no shared cipher %ASA-6-302014: Teardown TCP connection 13 for inside:192.168.1.10/61194 to identity:192.168.1.1/443 duration 0:00:00 bytes 7 TCP Reset by appliance %ASA-7-609002: Teardown local-host inside:192.168.1.10 duration 0:00:00 %ASA-7-609002: Teardown local-host identity:192.168.1.1 duration 0:00:00
I used ASDM to upgrade a 5505 tonight and now I get the error message attached. How/where do I find out which versions are compatible?
View 2 Replies View Relatednat global entry not showing up in ASDM but it does via CLI see blow, it's a policy NAT.
nat (inside) 5 access-list inside_nat_outbound_4
global (outside) 5 ************-OUTSIDE netmask 255.0.0.0
Global 5 doesnt show in ASDM 6.1 (5) the globals only go up to 3