Cisco Firewall :: Does ASA5505 Allow MAC Address Cloning
Sep 1, 2011I would like to clone the MAC address of my ISP-supplied router to an ASA 5505 firewall to be used in router mode.
View 3 Replies
ADVERTISEMENT
DSL-320B No IP Address Given To Router Until After Cloning MAC Address From Another Computer
Jun 1, 2012We have an ADSL connection and use a D-Link DSL-320B modem. We have a D-Link DIR-120 router connected to this modem. This has worked perfectly fine up until today when we disconnected the router and connected a computer (call it A) directly to the modem because it was getting an unusable connection through the router for some reason. We later also performed a factory reset on the DIR-120 router.
Unfortunately, after the above steps the router did not receive any IP address (through DHCP) from the ADSL connection anymore. During my attempts to debug this I noticed that my laptop (call it B) didn't get any IP address either (when connected directly to the modem). I noticed the following syslog entries repeating over and over while trying to connect: [code]
At this point computer A could still get a connection just fine tho (when connected directly to the modem).
I then tried to change the MAC address of the router to an arbitrary one (a copy of computer B's MAC address but with the last digit increased by one). The router still did not get assigned any IP address. Finally I tried making the router clone the MAC address of a third computer (call it C). C has never been connected directly to the modem. Doing this worked. After cloning the MAC address of computer C the router is immediately assigned an IP address and the internet connection works as it did prior to all this.
Now, my question is, why would computer B and the original MAC address of the router not be able to get an IP address while two other computers worked just fine? Why would changing to an arbitrary MAC address not work while cloning the MAC address of another computer did? Could the router's MAC address have been blocked by the ISP for some reason (and what could cause this)?
but my situation seems more like a blacklisting of some MAC addresses rather then allowing just a single MAC address.
Cloning Comcast Mac Address
Dec 15, 2012We can not get our PS3 to stay connected to the internet. We have Comcast and a Belkin router. We were told to clone Comcast's Mac Address to our router.
View 1 Replies View RelatedD-Link DIR-655 :: Mac Address Cloning?
Jan 12, 2011I am trying to clone my mac address for the dlink router, DIR-655. I go to 192.168.0.1 and do not know my password. I have tried admin and no password, but it doesnt work. User name is admin, so it must be something standard.
View 1 Replies View RelatedLinksys Wireless Router :: E1200 Cloning MAC Address But Not PC's
Mar 23, 2013My ISP requires MAC authentication on the router for internet access. They provide the router, and register that router to their access list.I'm not very happy with the router they provided, so I'm planning to buy a E1200 and clone my current router's MAC address. But when I checked the interface of this router, the mac cloning page has a button saying "Clone my PC's MAC". And in the FAQ page of E1200 it says that the router can automatically capture the MAC address of the PC. Which is not what I want to do.I want to manually input my older router's MAC address into this router to clone it.
View 1 Replies View RelatedTP-Link 150Mbps Wireless :: TL-WR720N Cloning Of MAC Address Of Router
Feb 20, 2013Region : Romania
Model : TL-WR720N
Hardware Version : V1
Firmware Version :
I have to clone my MAC address of the router to share my internet. To do that i have to visit htt://192.168.1.1 , but that address doesn't work for me..
Linksys Wireless Router :: EA6500 Configuration Panel To Proceed With Cloning MAC Address
Jan 13, 2013I am going to replace my Netgear DGND3700v2 router with Linksys EA6500. I hope that the signal strength of this router will be better, particularly for 5GHz.The problem is that I have a cable connection to Internet and my line has MAC address of Netgear assigned by my ISP. I would like to clone this address to EA6500 to test the power of the signal, before making the final decision to replace Netgear.My question is how to do this in off-line mode. I cannot have Internet before cloning.I've been using Internet Explorer with various addresses - 192.168.0.1; 192.168.1.1; myrouter.local; even 192.168.2.1 and some others but couldn't get connected to EA6500. Of course, the original CD suppied with the router does not work, either.Is there any other way to get to router configuration panel to proceed with cloning the MAC address?
View 1 Replies View RelatedCisco Firewall :: ASA5505 How To Convert 3 Group Mac Address To 6
Apr 16, 2013Recently i bought asa 5505 to practice for my exams and i failed to connect to internet since my internet provider binds IP and mac for every users and supports only 6 group mac address (xx-xx-xx-xx-xx-xx) format. because asa 5505 has 3 groups (xxx-xxx-xxx) mac address they are unable to provide me the connection.So my question is how can i assign 6 group mac address to asa5505.
View 2 Replies View RelatedCisco Firewall :: ASA5505 / Error / Network IP Address / Mask 10.10.2.65 / 255.255.255.0 Doesn't Pair
Feb 27, 2013I need to create a vpn connection between two ASA firewalls and when trying to create this AI get an error message below, The config I was to use is -
object net-local
Subnet 10.51.212.1 255.255.255.0
object network net-remote
subnet 10.10.2.65 255.255.255.0
ERROR: network IP address/mask <10.10.2.65/255.255.255.0> doesn't pair
Cisco VPN :: Public IP Address For ASA5505?
Sep 7, 2011I have a ASA5505 that I need to allow IPSEC and SSL VPNs through. The ASA is connecting to a BT Business ADSL router, what address should I be using on the ASA outside interface that will allow the ASA to be reachable from the Internet?
View 1 Replies View RelatedCisco WAN :: Remote Change Outside IP Address For ASA5505
May 23, 2011How to remotely changing ip address for my ASA5505.
View 1 Replies View RelatedCisco :: ASA5505 Change SIP Internal Address To External One
Sep 15, 2011The problem is that the PABX is sending out an internal address in it's INVITE messages and the ASA5505 isn't changing the internal address to the external address.We need> From: Calling Number <SIP: SIP Username@Public IP Address>However our PABX sends out> From: Calling Number <SIP: SIP Username@Private IP Address>. How to translate the internal IP address to the external IP address on an ASA 5505?
View 1 Replies View RelatedCisco VPN :: ASA5505 Use One Crypto Map / Add Second Set Peer And Match Address
Aug 24, 2012We have an HQ site with a 2811 (w/ADVSECURITYK9-M) acting as the firewall. We currently have 1 ASA5505 that has an established ipsec l2l VPN. I'm trying to connect a 2nd ASA, but I've noticed I can only add 1 cryptomap to the outside interface. A show ver shows 1 Virtual Private Network Module... Surely that doesn't mean only 1 VPN?Do I use one crypto map, and add a second 'set peer' & 'match address' inside the crypto map itself?
View 10 Replies View RelatedD-Link DAP-1522 :: Wireless MAC Cloning In Bridge Mode?
May 16, 2011I'm running the 1522 as a bridge with v1.21 firmware. I have 2 devices wired to it. I have Wireless MAC cloning disabled (not checked). If I scan my network using a tool such as ipscanner (http:url.....) the devices attached to the bridge are being listed with the 1522's MAC address - not their own.
The connected devices should be showing up with their own MAC addresses. The 1522's address should only be displayed IF MAC cloning is enabled and IF the cloning mode is set to Auto - is my understanding of this feature incorrect or is my 1522 not performing as spec'd?
Cisco Firewall :: Users Behind ASA5505 Firewall Are Unable To Access Internet
Feb 24, 2011I have a normal setup of ASA5505 (without security license) connected behind an internet router. From the ASA5505 console I can ping the Internet. However, users behind the Firewall on the internal LAN, cannot ping the Internet even though NATing is configured. The users can ping the Inside interface of the Firewall so there is no internal reachability problem. In addition, I noticed that the NAT inside access list is not having any hit counts at all when users are trying to reach the internet.
When i replace the ASA5505 with a router with NAT overload configuration on it, the setup works normally and users are able to browse the internet.
The ASA5505 configuration is shown below.
hostname Firewall
interface Ethernet0/0
description Connected To Internet Router
switchport access vlan 10
[Code].....
Cisco Firewall :: ASA5505 Lose Configuration If Upgrade Firewall
May 17, 2011i have asa 5505 with the asdm v5.2 (4), and the asa v7.2(4). This platform has a base license. if i upgrade adsm and asa on v6.2(1) and v8.2(2) if I lose my license and that you need to activate them? i configured site to site vpn (this firewall and the another) that i lose my configuration if i upgrade my firewall.
View 2 Replies View RelatedCisco Firewall :: ASA5505 Can't Ping New Firewall On Inside Interface
Jul 14, 2011I've recently upgraded my old firewall from a PIX to an ASA5505 and have been trying to match up the configuration settings to no avail. I have is that I can't ping the new firewall on it's inside interface, despite having "icmp permit any inside" in the running config. Secondly, the server I have on there ("Sar") can't connect out to the internet.I've included the ASA's running config incase anybody can see if something stands out. I have a feeling it's either not letting anything onto the inside interface, or there is no nat going on. Lastly (and possibly relevant), the firewall is actually going at the end of a vlan, which is different to the firewall's inside vlan number. I don't know if this is actually the problem because the server can't connect out even if connected directly into the firewall.
View 32 Replies View RelatedCisco Firewall :: Unable To Ping Internet IPs From ASA5505 Firewall
Jan 9, 2013Internet ISP -> Juniper SRX 210 Ge-0/0/0
Juniper fe0/0/2 -> Cisco ASA 5505
Cisco ASA 5505 - >Inernal LAN switch.
1. Internet is connected to Juniper Ge0/0/0 via /30 IP.
2. Juniper fe0/0/2 port is configured as inet port and configured the Internal public LAN pool provided by the ISP. And this port is directly connected to Cisco ASA 5505 E0/0. Its a /28 pool IP address. This interface is configured as outside and security level set to 0.
From Juniper SRX, am able to ping public Internet IPs (8.8.8.8).
Issue:
1. From ASA am unable to ping public ip configured on Juniper G0/0/0 port.(/30)
2. From ASA no other Public internet IP is pinging.
Troubleshooting Done so far.
1, Configured icmp inspection on ASA.
2. Used the packet tracer in ASA, it shows the packet is flowing outside without a drop.
3. Allowed all services in untrust zone in bound traffic in Juniper SRX.
4. Viewed the logs when I was trying the ping 8.8.8.8 in ASA. It says "Tear down ICMP connection for faddrr **** gaddr **
Cisco Firewall :: ASA5505 Firewall Rule Not Blocking
Apr 1, 2013I'm trying to troubleshoot an ASA5505.
The original goal was to block "Mumble/Murmur" (a voip app) traffic, which runs on TCP/UDP 64738, both inbound and outbound, except to a certain host (63.223.117.170).
However, when nothing I tried seemed to make a difference, just to troubleshoot, I decided to try blocking all inbound traffic. I first disconnected ethernet port 0/0 to ensure that it was cabled correctly and the outside interface went down when I did. That worked as expected, so I confirmed I had the right interface and it was cabled correctly.
I then applied a "any any deny ip" rule as the first element in the outside interface access_list, as you can see below. However, it appears to have had no real effect and the hit count is very low (it should be astronomical).
show ver
Cisco Adaptive Security Appliance Software Version 9.0(2)
Device Manager Version 7.1(2)
Compiled on Thu 21-Feb-13 13:10 by builders
System image file is "disk0:/asa902-k8.bin"
[Code].....
Cisco Firewall :: ASA 5505 To Have Internal Address That Wish To Forward From External Address
Jul 8, 2012I have an old ASA 5505, and I'm having some trouble with Nat Hairpinning. I've done this with other firewalls before and I am having no luck now. I have an internal address that I wish to forward from an external address- so if someone goes to 123.456.789.012:3456 then it will forward to 192.168.1.244:92 (All numbers are arbitrary here- only for illustration). I have and Access Rule and NAT and PAT set up so that I can get in if I originate from outside the LAN. What I am trying to do is to have this work from inside the LAN as well- so that if I am at my desk, and I connect a device and type in 123.456.789.012:3456, it will deliver the content at 192.168.1.244:92. The problem I am having is that it just isn't working, and I cannot figure out why- When I started here, there was an address configured to work this way, and it still works- I just cannot find what is different between what I am doing and what the person who configured it did.
View 7 Replies View RelatedCisco VPN :: ASA5505 - IP Address Pool In IPSec Client And Site-to-site VPN
Jul 10, 2012We have a scenario where the Cisco ASA 5505 will be one end of a site-to-site VPN. The same ASA 5505 also allows Client VPN connection. The question is around IP pooling. If I assign a pool of IP's (192.168.1.20 - 192.168.1.30) for Client VPN connections - do I need to be sure that those same IP's are not used on the other side of site-to-site VPN ?
There could be PC's/Servers running 192.168.1.0/24 on the other side of site-to-site VPN. Would this cause an address conflict ?
Cisco Firewall :: Using IP Aliases On ASA5505
Nov 29, 2011Is it possible to use IP "aliases" on an ASA5505 to use as static NAT public IPs to private IPs? For example, I have int e0/0 connected to my ISP using a /30 subnet and I have my private LAN connected to e0/1 with a /24 subnet. At the moment I can use the one usable IP from the /30 to NAT to the private LAN. The ISP is also routing a /28 subnet to the one public IP of the ASA. I would like to use some of the /28 IPs for NAT also. Can it be as easy as just adding the NAT commands? I figure I would have to add that subnet to the ASA somehow, no? In other devices (including the SA520) they use a concept called IP aliases whereby you define what additional IPs the device can use in its NAT config. Does the ASA support aliases? Maybe I have to do something with VLANs?
View 2 Replies View RelatedCisco Firewall :: Use 1 / 2 Gb Memory With ASA5505 Only 512 Mb
Jun 15, 2011it is possible use 1 or 2 Gb memory with ASA 5505 or only 512 Mb ?
View 3 Replies View RelatedCisco Firewall :: Routing Using ASA5505 And Pix 501?
Jun 16, 2011I have 1 network that I'm trying to make secure, and it needs to access 2 seperate networks. I tried using an ASA5505 that I had on the shelf to accomplish this but discovered that I had the basic license and that was prohibiting me from getting my connection to my 3rd network. I scrapped that idea and grabbed an old pix 501 off the shelf to bring my connectivity to my 3rd network online since the 3rd network is only passing ip traffic to a small group of servers on the outside I figure the 501 should be just fine.
So, here's the problem I am running into:My internal network is 10.10.16.0/16, I have a new domain controller with DHCP on it handing out addresses in the 10.10.16.0/24 range.External Network 1 is 192.168.16.0/24. The services I need from that network are primarily in 192.168.0.0 range, however there is a comcast router 75.123.123.123 (Changed of course) that provides high speed internet I need for my www traffic.External Network 2 is 10.1.1.0/16 I have about 4 servers I need to access on this network and that's it. This network has it's own domain and DHCP controller and I've been given a range of ip's to use on this network of 10.1.3.180-10.1.3.189 My switch is just a plane jane 3com switch with minimal management so I am attempting to use my ASA5505 to handle my layer 3 routing.
So here's my issue:ASA5505 (IN:10.10.16.1, OUT: 192.168.16.6): Passes traffic to External Network 1 and to the comcast router, no problem. All my computers on my 10.10.16.0/16 network have access to everything on 192.168.0.0/24 as well as getting full name resolution and www traffic across the comcast router. Can NOT access 10.1.1.0/16 no matter what. From inside the ASA or from on the inside LAN ports. It CAN ping the PIX 501 PIX 501 (IN:10.10.16.3, OUT: 10.1.3.180) Can ping EVERYTHING. Can ping 192.168.0.0/24, can ping 10.10.16.0/16 and can ping 10.1.1.0/16. Set to globally assign the other IP's in my range as addresses for outgoing traffic.Workstations (IN: 10.10.16.XXX DHCP, using 10.10.16.1 as gateway) Can only access everything on External Network 1. ZERO access to External Network 2. ATM I have both INSIDE and OUTSIDE ACL's wide open for both firewalls just to get connectivity going. I will be tightening it up after it is operational.Attached find a log file (Sensetive data removed of course) that contains the sh run and sh ver for both the ASA5505 and the PIX 501.
Cisco Firewall :: Asa5505 Do We Need Ios Update
Mar 14, 2013I just got an ASA 5505 with Cisco Adaptive Security Appliance Software Version 8.0(4) alredy loaded on it. Should I update/upgrade it to the newest IOS release, or is the 8.0(4) good and stable?
View 3 Replies View RelatedCisco Firewall :: Setup DMZ Using ASA5505?
May 3, 2012I'd like to setup a DMZ network with the ASA5505. Do I need the "Security Plus Bundle"?
View 1 Replies View RelatedCisco Firewall :: ASA5505 With WRVS4400N On COX?
Apr 25, 2012I've been trying to get my WRVS4400N connected to my ASA5505 on the internet through a Cox connection, but it isn't working. I cannot get the ASA to be the DHCP server for the wireless router. I've configured the wireless router as a gateway and pointed the DHCP server to the ASA but no addresses are being passed through to the wireless router. I've included a copy of my config.
ciscoasa# sh run
: Saved
:
ASA Version 8.4(2)
[Code].....
Cisco Firewall :: ASA5505 With Multiple WAN IPs?
Jul 24, 2012We are trying to utilize a 5 ip block of addresses provided by our ISP. What we have assigned from them is like this: 10.10.10.46 - 10.10.10.50 is our ip range. 10.10.10.45 is the gateway. Subnet is 255.255.255.248. If we assign 10.10.10.46 to the outside interface how do we accept inbound traffic from the other addresses?
View 6 Replies View RelatedCisco Firewall :: Can't Ping Or RDP ASA5505
Sep 4, 2012I have Vlan 100 (inside) and Vlan 65 (Outside)I'm trying to configure RDP and ping traffic from Vlan 100 to Vlan 65 One way.If I connect 2 PCs on E0/0 and E0/1 they can happily ping the their own VLAN ip add 192.168.100.3 and 172.16.65.1I've copied my config,
ASA Version 8.4(4)1
!
names
!
object-group network A_Network
network-object 172.16.65.0 255.255.255.0
[code]....
Cisco Firewall :: Configure Dmz On ASA5505
Dec 20, 2011I have a asa 5505 Sec plus with 3vlan, inside, outside and dmz.
On the outside i have 5 ip's for my use, and in the dmz i have a webserver that need to communicate with one sql server on the inside.
The "sql" also needs to be accessible from outside and thus has a static nat with a dynamic nat so it replies from same ip as on nat ie 72.72.72.5 webserver is natted with 72.72.72.6
sql inside ip is 192.168.1.2, gw 192.168.1.1
webserver ip is 192.168.2.100 gw 192.168.2.1
sec lvl on inside is 100 and on dmz 50
with a dynamic policy running inside-net/24 to dmz-network/24 translagt to dmz 192.168.2.2 i can get it to ping 1 way from inside to dmz, but not the other way around...
All i need is to open 1 port ie 6677 both ways for this communication to work.
I'm not very familiar with the CLI and do most stuf in GUI (know i should learn CLI, but time doesnt let me)...
on access rules i have just added everything from any to any using , ip, icmp, tcp and udp just to be sure... :-)
Cisco Firewall :: DNS Redirect On ASA5505?
Feb 29, 2012I want to make it so if a user tries to use a different DNS server the request will be redirected to the one they should be using.I thought this might work but the ASA doesn't do PB routing
ip access-list extended transparent_dns
permit udp any any eq 53
route-map redirect_dns permit 10
match ip address transparent_dns
set ip next-hop ip.of.your.server
route-map redirect_dns permit 20
[code]....
The DNS server is windows 2003?Would policy based NAT or WCCP work for this? If so how would I go about it?
Cisco Firewall :: ASA5505 As LAN Router?
Nov 22, 2011I would like to use an ASA5505 as a simple LAN-to-LAN ethernet router. My plan is to configure two interfaces with the same security level and then use the command that allows interfaces with the same security level to communicate with each other. I can get this to work without having to setup and ACLs or NAT stuff.
View 5 Replies View RelatedCisco Firewall :: Use Dual ISP's With ASA5505?
Oct 1, 2010for the purpose of a redundency, incase the primary ISP goes down the backup kicks in.Can this be done with the basic license (max 3 vlans) or you need to have the security plus license. (20 vlans) Currently not using the 3rd vlan (dmz)
View 5 Replies View Related