Cisco Firewall :: FTP And HTTP Access Using PPPoE On ASA 5505

Feb 23, 2011

configure my ASA 5505. It is setup using PPPoE. What I want to do is this:
 
I have one of my IP addresses (99.23.119.78) setup for ftp using the ftp protocol to our internal IP address 192.168.1.3. What I need is to also allow for HTTP access but not just that, I need it to forward the http port to port 9000 because the web interface requires port 9000 for customer access. Previously on our old firewall customers were able to access the web interface by browsing to [URL]. I would like to not have to not require the port in the URL.
 
In addition, I would like to be able to setup a different IP address in our range (99.23.119.73) to be setup for http access using the standard port 80 for the same internal IP address (192.168.1.3). This URL will allow us to access the administration web interface for the FTP server.
 
Here is my current config:

Result of the command: "show running-config"
: Saved:ASA Version 8.2(1) !hostname ciscoasaenable password qVQaNBP31RadYDLM encryptedpasswd 2KFQnbNIdI.2KYOU

[Code].....

View 4 Replies


ADVERTISEMENT

Cisco Firewall :: ASA 5505 - Http Inspection Dropping All Http Traffic

May 9, 2012

I am testing out some inspection options on an ASA 5505, and I am running into a situation in which applying a http inspection is dropping all outbound http traffic. I get a "protocol violation" error in the logs.
 
Here is the setup: I'm not sure why the web traffic is getting dropped.
 
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto

[Code].....

View 2 Replies View Related

Cisco Firewall :: ASA 5505 Timeouts PPPOE?

Mar 1, 2012

I am tyring to remotely diagnose a troublesome ASA5505
 
It is connecting via PPPOE and the original suscpicion was that the PPPOE was going down during heavy loads during the day, i.e 9am and lunchtime. I suspected MTU and have verified the MTU outside is set to 1492
 
However further troubleshooting doing a remote ping to the PPPOE address indicates that this does not drop at all.
 
When remoteley connected to the ASA my session dies and any outbound internet fails, then in a few minutes it comes back.
 
all the time the PPPOE line stays up?
 
One thought is that although the line does not go down it is being crippled with traffic and just getting so unresponsive it appears it has died.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 PPPoE No Internet?

Jun 18, 2012

We currently use a linux software based firewall called IPCop that sits between our network and router (This is in bridged mode) IPCop conects over PPPoE and everything works fine.
 
However the system is not reliable and I fear not that secure so have purchased an ASA5505 now I have added the PPPoE info to the device using the ADSM software however although it picks up my external static IP I'm unable to access the internet. On IPCop I only had to enter the broadband credentials and it worked however I feel like I may have to add more to the Cisco, for example do I have to specify DNS servers and do I have to set a static route?
 
Here is my config file so far (Note I think I have turned on the ability to ping from internal to external). My config I have done through the ADSM as opposed to the CLI
 
: Saved:ASA Version 8.4(3) !hostname ciscoasaenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface

[Code].....

View 17 Replies View Related

Cisco Firewall :: HTTP Inspection On ASA 5505

May 3, 2011

let me know how to enable HTTP inspection in ASA 5505 through ASDM.

View 1 Replies View Related

Cisco WAN :: 5505 PPPOE Access Via VDSL Bridge Modem?

Apr 25, 2013

I just bought a 5505 to learn from and am trying to attach my VDSL modem as a transparent bridge.It goes....

Laptop   >>> (VLAN1) Cisco 5505 (VLAN2)  >>> VDSL modem >>> internet
X.X.X.10 >>> (X.X.X.254) ------ (Y.Y.Y.254)    >>> Y.Y.Y.10        >>> A.B.C.D.
  
I'm using the ASDM, if I configure VLAN2 with the IP address of the VDSL interface I can ping the modem from the console session via Putty. If I take that off and configure up the PPPOE client I can't ping the VDSL modem, I'd expect that. If I then add in an IP address to the PPPOE client config like I assigned to VLAN2 it doesn't ping either.If I can't ping the VDSL modem I don't expect it would work but it seems I can only either give it a static address which pings but has no pppoe or give it a PPPOE config which means I can't ping the VDSL. why I can't ping the VDSL modem when the interface is set as PPPOE with an IP address?Presumably if I'm on the ASA console doing pings from there to the modem then I'm ruling out problems with the routing from the laptop (trying to isolate where the issue is)

View 3 Replies View Related

Cisco Firewall :: 5505 - PPPOE Client Vpdn Group

Mar 3, 2013

I need to use a Cisco ASA 5505 on a BT Openreach connection, The configs that I have ben using are below -
 
interface vlan2
nameif outside
security-level 0

[Code]....

View 1 Replies View Related

Cisco Firewall :: ASA 5505 PPPOE Traffic Statistic Doubled Between Inside And Outside

Mar 12, 2013

I've an ASA 5505  connecting to a vdsl modem. The ASA is doing the PPPoE encapsulation. I've noticed the traffic amount on the outside interface is always twice the bandwidth it receives on its inside interface. I can't believe the PPP encapsulation is taking that much. Only two interfaces (inside and outside)

View 4 Replies View Related

Cisco Firewall :: ASA 5505 - Redirecting Http And Https Traffic To Proxy Server

Aug 5, 2008

I have an ASA 5505 that I am using to connect my contractors to via an inside interface, the outside interface is my private LAN. I have setup on our corporate Proxy server to allow traffic from my outside interface of my  ASA to go to the internet without credentials BUT log internet activity. The question is I want to know if the ASA can send that http & https traffic to my proxy server and all other traffic to my default route? I want to be able to send all internet traffic to my proxy server. This will avoid me asking the contractors to place proxy credentials in their browsers.

View 6 Replies View Related

Cisco Routers :: RV082 PPPoE Connection Connected But HTTP Not Working

Oct 24, 2012

We have an RV082 (firmware 2.0.2.01-tm),with an ADSL connection over PPPoE. It connects fine, and I can ping anything, and I can also access websites with HTTPS, but when trying to access any website with HTTP, it doesn't work.There's no load balancing going on, and it's the same whether we have the Firewall turned on or off, and everything else is pretty much as default.

View 4 Replies View Related

Cisco Firewall :: Configuration ASA 8.2 With HTTP Access Outdoor?

Aug 5, 2012

I have problem i want to access to my http server in my local network from outside
 
192.168.2.42 : it my server http 

195.X.X.X  its my internet IP but it was connected in eth 0/4
 
 static (DMZ,Orange) 195.X.X.X 192.168.2.42 netmask  255.255.255.255
  
access-list outside-acl permit tcp any host 195.X.X.X eq 80
 
access-group outside-acl in int orange
 
 but its not good why

View 15 Replies View Related

Cisco Firewall :: 5585 Can't Access ASA HTTP Server

Jun 20, 2011

I just upgraded my ASA 5585 cluster from 8.2 to 8.4. I also upgraded the asdm .bin from 6.35 to 6.43. after rebooter the cluster, I try to access it with ASDM installed on my computer but it blocked at 17%.I tried to access [URL] but I just an error (with IE & FF) [code] What did I miss in the ocnfiguration ? I precise that I never used the http page, I already had the ASDM installed from another ASA.

View 4 Replies View Related

Cisco WAN :: ASA 5505 - PPPoE Error

Apr 27, 2011

I am using ASA 5505 with firmware 8.2(2). My ISP uses PPPoE as a WAN connection protocol. There is a problem with getting PPPoE session started on my ASA 5505. The debug output says that after negotiation of PPP-authentication protocol ASA receives a PADT packet from ISP’s concentrator. To get more information I captured all packets on outside interface with WireShark. Packet-dumps (in .pcap format) are attached in this post. I have tried all possible combinations of PAP/CHAP/MSCHAP values in “vpdn group MYGROUP ppp authentication” command. If you take a look at the packet-dumps you can see, that in case of “PAP” – ISP’s concentrator rejects negotiation (PAP is not supported by my ISP). In case of CHAP/MSCHAP (that ARE supported by my ISP) – ASA acknowledges the using of MSCHAP v.2 PPP-auth protocol, which is actually not supported by it…

Judging by MAC-addresses of ISP’s concentrators it is visible that Cisco’s equipment also is used.
 
The questions is: Why ASA acknowledges using of unsupported ppp-auth protocol during negotiation and what I need to do to resolve this issue? (ISP’s support says, that they cannot change PPP-auth protocol negotiation order. Also they says that I need to contact with manufacturer of my equipment).

View 3 Replies View Related

Cisco :: HTTP Inspection URL Filtering On An ASA 5505?

Jan 12, 2011

Im trying to configure HTTP Inpsection with regex matching on a ASA 5505 (8.2) so that I can deny all websites apart from google and yahoo. And also enclude host 192.168.1.2 from this inspection. I have been through a number of examples and the syntax below appears correct but appears not to work. The logs report only that traffic has been dropped by the inspection policy.

View 11 Replies View Related

Cisco WAN :: ASA 5505 - DSL PPPoE / DHCP Lease Drops

Jan 25, 2011

I've been having this issue for about 3 months now, off and on, never seemed to be predictable but started happening more and more, which prompted me to look into it.
 
Currently, the DSL Modem is configured in bridge mode with the ASA handling PPPoE. The WAN address is being assigned via DHCP. The ASA is running 8.2(1). The WAN interface will drop it's DHCP lease and will not renew it without power cycling the DSL modem. I did a little bit of googling and found mention of setting "dhcp-client client-id interface outside", specifically this was an issue pre 7.2(22), but doesn't seem to affect my situation. Originally, I had the MTU on the outside interface configured as 1500, changing it to 1492 has not resolved my issue either.
 
I've enabled PPPoE and DHCPC debugging and posted the results below when the event occurs, I'm thinking this is moreso a PPPoE issue than it is a DHCP/DHCP Lease issue as I am not seeing any debug messages from DHCPC.
 
Code...

View 1 Replies View Related

Cisco WAN :: ASA 5505 - Forwarding All Incoming Traffic To Two Internal HTTP Server

Oct 2, 2011

We have Cisco ASA 5505, 90.x.y.2/29 IP is assigned to outside interface. We have one internal HTTP server so that I use static (inside,outside) tcp interface [URL] to forward all incoming HTTP traffic to internal HTTP server 1. Now we need to add new physical HTTP server 2 so that I would like to forward

HTTP traffic to e.g. 90.x.y.3/29 to 172.16.0.11.
 
How can I do that? See scenario image (scenario.png) if needed.

View 6 Replies View Related

Cisco Firewall :: Can't Access ASA 5505 Via SSH

Apr 23, 2010

I can't access our ASA 5505 via SSH from the outside. I've configured this through the ASDM to allow SSH (Device Management > Management Access > ASDM/HTTPS/Telnet/SSH). I added a rule that allows SSH on the outside interface from 0.0.0.0 0.0.0.0. When I try to ssh in with putty, it says "server unexpectedly closed network connection" When I watch the logs on the ASA, it shows a Built inbound TCP connection on port 22, but then immediately a Teardown TCP connection. It doesn't show it's being blocked by any rule. Is there something I'm missing on enabling SSH?

View 13 Replies View Related

Cisco Firewall :: Cannot Access Outside From Dmz - ASA 5505

Aug 7, 2012

I am not able to get to the internet from my DMZ ip address.

Here is my config.
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2(code)

View 4 Replies View Related

Cisco Firewall :: Access From Outside Of 5505?

Mar 8, 2013

I have a web server behind my 5505 that I'd like to access from the outside of the 5505 (still within my home network though). Its running on port 3000. I made the changes but I have been unable to access my server from the outside.

I do have an Airport Extreme in from of the 5505 and the 5505 is getting its address via dhcp from the airport. So I'm trying to hit 192.168.2.57:3000 from my wireless airport network.

[code]...

View 8 Replies View Related

Cisco Firewall :: ASA 5505 - VPN Access

Sep 22, 2011

if log on to the firewall with the enable_15 account remotely via a Cisco IPSec VPN client? Similarly, how do you restrict access to the ADSM to the local LAN for the enable_15 account? Is there a way to tell when a user last logged on via an IPSec VPN?

View 4 Replies View Related

Cisco Firewall :: ASA 5505 And Access Point In DMZ?

Jan 11, 2013

I have question about license for ASA 5505. I have to put public access point behind ASA into DMZ. Do I need to hava the unlimited license? Does Securipty Plus license include unlimited users option and 50 VLAN or I will need different type of license.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 / Can't Access Web Server

Jul 9, 2012

We have a Cisco ASA 5505. As of yesterday we could no longer access our web server (the web server is hosted off-site). Pinging the DNS address and direct IP (from the firewall and a PC) both return no response. Pinging the IP from the T1 router responds properly, meaning the router can access the web server, but the firewall cannot. Accessing the web server has never been a problem, and no configuration changes have been made to the network/firewall. Other locations can access the web server just fine.

View 1 Replies View Related

Cisco Firewall :: ASA 5505 Cannot Access 192.168.1.1 Admin New From Box

Mar 11, 2013

No connection via IE of any flavour

Chrome shows Error 113 (net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH): Unknown error
 
I have 30 machines here, none of which have a serial port.

View 1 Replies View Related

Cisco Firewall :: Cannot Access To DMZ From Vpn Clients ASA 5505 V 9.1(1)

Dec 31, 2012

ASA Version 9.1(1)
!
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6

[Code]....

View 9 Replies View Related

Cisco Firewall :: ASA 5505 For SMTP Access?

Oct 29, 2012

I need to move the email traffic to a backup circuit.  Below is my config.  I have tried for email access but to no avail. 

asa5505# sho run
: Saved
:
ASA Version 8.2(2)
!
hostname asa5505

[code]........

View 9 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Access Anything On Pix Network

Nov 29, 2012

Cisco ASA 5505
Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)
 
I have and vpn tunnel between a pix network (192.168.200.0/24) and an asa network (192.168.100.0/24); it's been running fine for awhile now but this morning i've come in an i can not access anything on the pix network, (mail, file & web servers). Each attempt to access results in a SYN timeout.
 
6 Nov 30 2012 14:24:01 302014 192.168.200.9 192.168.100.115  Teardown TCP connection 6014 for outside:192.168.200.9/135 to inside:192.168.100.115/51240 duration 0:00:30 bytes 0 SYN Timeout

View 10 Replies View Related

Cisco Firewall :: ASA 5505 - Having No Access To Webpages?

May 3, 2013

I'm currently facing a problem with a ASA5505. I've set it up from factory defaults... From the CLI, I can ping an the outside interface, the GW and an outside IP (ex:8.8.8.8).So I believe that there's no connectivity issue and the configuration is correct.
 
However, for a reason that I don't know, users can't have access to web pages.The product license allow me to have 50 host connected. Currently I've only got one host connected...
 
When I enable syslog, I can see the following messages :Deny traffic for protocol 17 src inside: 192.168.1.20/64429 dot ouside:8.8.4.4/53, licensed host limit of 0 exceeded.Where this limitation can come from ?

View 16 Replies View Related

Cisco Firewall :: To Enable Access To Use RealVNC On ASA 5505

Feb 27, 2011

I am trying to enable access to use RealVNC on our Cisco ASA 5505 without using VPN. RealVNC uses port 5900. Users should be able to vnc to 99.23.119.78 and reach our internal server 192.168.1.4. So far they are receiving connection refused.

View 5 Replies View Related

Cisco Firewall :: Remote Management Access Through VPN On ASA 5505

May 21, 2012

I have a remote ASA5505 running 8.4(3) with a working site 2 site VPN tunnel to my main office. (The main office is running an ASA 5510 with OS 8.4.3 as well). The encryption domain is all private IP on main site vs. 172.16.10.0/23 on remote site.
 
Relevant config of the remote ASA:
 
interface Vlan1
nameif inside
security-level 100

[Code].....
 
I can manage the ASA on the outside interface (outside of the site 2 site VPN) using the TACACS credentials I can also ping my management station from the ASA using the inside interface, but as stated, the other way around does not work. I have not yet tested if management from the local 172.16.10.0/23 subnet works, but I will try this next.

View 5 Replies View Related

Cisco Firewall :: Unable To Access Internet With ASA 5505

Sep 27, 2012

I have config ASA 5505 and it is conencted to layer 3 switch that connects to cable  Modem.
 
ASA is config with DHCP option and PC is able to get the IP from ASA. But from PC i am unable to access the internet. From ASA  itself i am able to ping the Websites fine.
 
ASA has config with DHCP for inside and also it is doing NAT.
 
When i connect the ASA  directly to Cable modem then pc is able to access the internet.

View 4 Replies View Related

Cisco Firewall :: ASA 5505 Version 8.2 (5) - Can't Access ASDM From VPN

Jan 20, 2013

I've have an ASA 5505 with a inside network vlan1 (192.168.0.0/24) - i've configured an IPsec VPN profile and a VPN network of 192.168.0.50/24. I can through my VPN tunnel access inside hosts on vlan1 - but not ASDM on the ASA (192.168.0.1). Under management i've added the VPN network of 192.168.50.0/24 to have access to ASDM, but still does not work.

View 1 Replies View Related

Cisco Firewall :: Restrict Internet Access With ASA 5505?

Jul 5, 2011

I would like to restrict Internet traffic (HTTP & HTTPS) for Inside Users with an ASA 5505. I would like to setup a proxy-like system where a User/Password must be entered before the User can actually browse the web.
 
I know that this can be done with an additional RADIUS/TACACS+ Server. Is this also possible without any external AAA Server, so with User/PW stored on the ASA locally only?

View 1 Replies View Related

Cisco Firewall :: ASA 5505 InterVLan ADSM / SSH Access

Jun 29, 2012

I am running into a issue that I cannot seem to figure out. I have a asa 5505 with the Security Plus license. I setup a native vlan where all of my network devices sit on. ie my Wireless Access point has an ip of 192.168.3.2, my switch .3. I have no issues managing these devices from any vlan I am on (permitting firewall access rules). When I try to access my ASA via ASDM/SSH. I have to use the gateway of the vlan I am on. For instance. If I am on vlan 10 I have to use 192.168.10.1 for access, if I am on vlan 20 I type 20.1...etc...etc If I type in 192.168.3.1 I get an error in the ASDM logs that states TCP reset by appliance. This is for any gateway I type except for the gateway of the vlan that I am connected to. I am posting a sanitized config. How can I configure the ASA to permit access via any gateway.

View 3 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved