I am trying to set up my router to grant http traffic a minimum bandwidth of - for example - 5,000 kBit (if there is any http traffic).
So I set http min. rate to 5,000 while I set nntp min. rate to 1 However, when I run nntp downloads on several connections (e.g. 10) my single http download never goes above 1,000 kBit. Without any other connections I reach 8,000 kBit.
I am using a single 12 MBit line.
I am trying to limit HTTP access to my server on the local network to a specific IP address. I create an Access Rule in the firewall section, however that doesn't work. The only way it works is if I add the internal IP address of the server to the Forwarding section where I create a new HTTP forwarding rule.However, that is not good because that allows ALL HTTP traffic to that server instead of just by the single IP address.
View 2 Replies View RelatedSince I've bought my RV042 CISCO (v3 hardware, firmware v4.1.1.01-sp Dec 6 2011 20:03:18) i wasn't able to let it work properly with my two DSL network lines. I explain. I got 2 DSL network:
1- PPPoE with authentication (MTU setted as auto) with upstream speed 4Mbit/S and downstream speed 5Mbit/s
2- Direct line with static IP with upstream speed 7Mbit/S and downstream speed 1Mbit/s
I was never able to SUM the two WAN using the LOAD BALANCE set. I tried all combinations:
DSL 1 in WAN 1 or in WAN 2
DSL 2 in WAN 2 or in WAN 1
I've tested all type of speeds in WAN SPEED in Web Management
it seems that for some kind of reason it takes the upstream speed i can set in web management as the default value on which it decides to use the other WAN. When i set low upstream bandwidth for DSL 2 it's able to sum the down streams of both WANs but not the up streams.
I wasn't ever able to sum the up streams? How does it work?
Can it limit streaming websites? example "youtube" and torrent downloads? and dont affect other websites/ gaming speeds currently has 50 units connected with 2 ADSL connections both with maximum down of upto 4.5mbps.
View 2 Replies View RelatedI am testing out some inspection options on an ASA 5505, and I am running into a situation in which applying a http inspection is dropping all outbound http traffic. I get a "protocol violation" error in the logs.
Here is the setup: I'm not sure why the web traffic is getting dropped.
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
[Code].....
We connected to locations to the RV042 by setting up 2 Gateway - to - Gateway VPNs - both locations can communicate with the RV042 and devices within the local LAN of the RV042 - however at the moment it is not possible to send traffic from 1st VPN Location to the 2nd VPN location
View 1 Replies View Relatedi am using RV042 router, i have configured DMZ in this, DMZ is not passing the traffic, i am able to ping the DMZ ip from the server. but the server is not getting the Internet.
View 1 Replies View RelatedWe have a managed service provider voip network that requires us to use our own router for the data network. We wanted to use the RV042 for it's easy vpn setup. After installing it worked great for about 10 min. then the WAN port stopped passing traffic. 3 min. later it started working again. We tested the RV042 on a different network and it works fine. We tested an older Pix on the managed network and that works fine. But the RV042 will not work on the managed service provider voip network. The service provider says that on their end it shows our WAN port going up and down.
View 1 Replies View RelatedI'm having some problems blocking IP blocks. I have several blocks of IP's that I want blocked.I want to block 77.0.0.0/8 from communicating with a server on my lan.So I make a rule in the RV042 to deny all traffic from 77.0.0.0 to 77.255.255.255, source wan1, destination lan, my server's ip,As soon as I move that rule above the traffic forwarding rules I have created, no traffic moves in or out via the wan interface. It seems to just cut off all traffic.
View 2 Replies View RelatedReplaced an older RV042 that had damage from lightning. The new RV042 is V03 with firmware 4.0.0.7. This router supports 7 branch offices using site-to-site VPN to other RV042 routers. After connecting the new RV042 at the main office, three of the branch offices had very slow response over the VPN tunnel. I disabled the firewall on the new RV042 and the problem resolved. The three branches with the problem have Windows 7 systems and the other 4 have Windows XP. I confirmed that the Windows firewall was disabled on the Windows 7 systems.I did try leaving the firewall enabled and disabling SPI, but that didn't work. Have to have firewall disabled to resolve the problem. I would not expect the firewall on the main office RV042 to affect VPN tunnel traffic, but apparently it does. Do we need specific access rules to fix the issue. It works fine with firewall disbaled, but I'd be more comfortable with it enabled.
View 2 Replies View RelatedI have an RV042 router and I'm looking to monitor the total upstream and downstream traffic from within the router.
I know there is tons of software that I can put on a network computer to monitor traffic, but is there any software that I can put on the router itself that will monitor the traffic from within the router?
We have offices in USA and Venezuela.In our USA office we have a RV042 router and in Venezuela we have a RV082 router.We have connected a VPN tunnel (gateway-to-gateway) between both offices.
The point is:How could we redirect the internet traffic from our Venezuela office (RV082) to the USA Office (RV042) to navigate using USA public IP's?
The reason for this is that we need to use online streaming services which are only available for IP's from USA and we can't use them from the Venezuelan IP's.
We can not use the PPTP option since the equipment which will use the streaming services (like hulu, crackle, etc.) in Venezuela is a Google TV device which doesn't allow the configuration of proxy navegation or PPTP VPN connections itself. That's the reason why we need to do that through the routers.
We have a VOIP system from AT&T with T1 internet access. I have a RV042 setup as the default gateway for the network and the router randomly (usually over the weekend loses the internet). I have updated to the latest firmware and have check all logs on the server. When the internet access goes down we can still access the internal network. I have been power-cycling the router and then everything works fine. Is there a known issue with this router radomly blocking internet access in or out? This device should remain working at all times so that our remote users can access the company network.
View 0 Replies View RelatedI have an RV042. I understand and have created the services I need. The documentation is just not clear on how to direct traffic for these services to a specific wan port.
Can this even be done with this router? If so, the how? Use rate control or priority? Does checking a wan port mean that it will only go through that port?
I have a RV042 (firmware 1.3.13.02-tm). Is it possible to configure so traffic from a specific domain (incl. its sub-domains) is directed exclusively to one WAN port?
View 10 Replies View RelatedI wonder if I can have a RV042 VPN Tunnel to a RV082, and in the RV082 block all traffic to the internet that comes form the PCs that are behind the RV042.
Remote PC -> RV042 -> VPN -> RV082 -> RV082 Firewall (block internet traffice, allow intranet traffic)
I am trying to setup the following. We have an RV042 Router and are using it as our gateway at the office. In the office we are using a Windows Domain abc.lan with DHCP of 10.0.0 - 10.0.0.254. The Router/Gateway is setup with a Static IP of 10.0.0.100.A couple of our office employees would like to work from home via VPN using their laptops. With the many options available for this router, I am not clear as to which options and what settings I should set.
View 2 Replies View RelatedI need DHCP Option 66 to be enabled my small business RV042 router, so the IP phones could know where is the TFTP server.
View 1 Replies View RelatedWe are currently running Windows 2003 Domain in our network with DHCP turned on the Server. We have turned off the DHCP on the Router. We are using RV042 as out Gateway to the internet and everything is working fine. We would like to allow a couple of our users to be able to VPN into the network so that they can use Outlook and be able to access their files on the Shared Folder. The users would be using their laptops from their homes to connect via VPN using the standard Windows 7 VPN connection.
In the RV042 Interface there are many options and I am not sure I understand which setting would allow them to connect successfully to the network, be authenicated as a domain user.
I am trying to set up my rv042 to use the ddns service. The rv042 is directly connected to the ISP provided modem on WAN port 1. The problem is that instead of seeing the internet IP the rv042 is using the ISP sub net assigned IP.
LAN IP : 192.168.1.1 WAN1 IP : 192.168.12.9 WAN2 IP : 0.0.0.0 Mode : Gateway DNS (WAN1) :DNS (WAN2) : 192.168.12.1 DDNS(WAN1 | WAN2) : Off | Off DMZ Host : Disabled
I configured ASA5520 and RV042 for site-to-site IPSec VPN tunnel.Tunnel get connected, but no ping, no traffic between both end network.
Network:
=======
192.168.113.0/24----------192.168.113.6 -ASA--------public, static IP address------Cisco 2821--------Internet
192.168.10.0/24-----------192.168.10.1 -RV042-----public, static IP address------Cisco 2821--------Internet
ASA5520 config:
----------------------
name 192.168.10.0 VPN
!
interface GigabitEthernet0/1
nameif NET
security-level 100
ip address 192.168.113.6 255.255.255.0
[code]....
I am trying to setup a VPN using an RV042 (fw ver: 1.3.12.6) to access a VISTA computer over the internet using a laptop using QVPN's latest version. I finally got it to connect but then hang's with error " Gateway is not responding, do you want to wait?". If I say yes it go through the login again and hangs. If I say no, it hangsup. I've tried a couple different ideas using tunnelling and static IPs in the router but nothing. All I want is to be able to access one computer through the RV042 over the internet from any other computer using the QVPN.
View 6 Replies View RelatedI have 2 VLANs set up and I know they are set as default to not allow one to communicate to the other. Is there a way to set a rule to allow that? I'd like VLAN1 to be able to access VLAN2, but not the other way around.
View 1 Replies View Relatedi'm using an rv220W and i whant to know if is it possible to assign vpn traffic to a vlan when i setup an ipsec tunnel?
example:
Im using different vlans on my rv220W.
Vlan 10: engineers (ex: 192.168.1.0/27) no intervlan routing
Vlan20: sales (ex: 10.0.123.0/24) no intervlan routing
This is what i need: - An engineer is on the road and when he makes a ipsec vpn connection => assignd to the vlan "engineers" so he can access the server/pc's in that vlan.and when someone from the sales group starts a vpn connection he needs to be in the vlan "sales" so he can access his pc/data,...
We have some ASR WAN routers which have a dedicated 400M interface to a remote site.
Servers on our Local network source the data through some firewalls via 10G interfaces, which connects to 4500X WAN switches then to the Routers on 1G links.
The sources are rate limiting the traffic but the routers are periodically dropping packets which I think is mostly due to burstiness in the traffic between as it traverses through from 10G links to 1G then to 400M.
How to setup traffic shaping on the 4500X outbound port to our WAN routers.I'd like to see if we could buffer and smoothe out the traffic as it exits the 4500X WAN switch 1G port to the WAN Routers.
I have a RV042 with a DSL (static IP) and a cable connection (Dynamic). How do I get the extra bandwidth from the cable and still keep the static IP of the DSL. When I have the router set on WAN1 (DSL), I get buffering. When I set the router on WAN2, I lose the static IP and therefore, the stream. When I have the router set on Load Balance, it switches the IP back and forth between the static DSL and the Dynamic cable.
View 1 Replies View RelatedI'm using a Cisco 2821 router to provide temporary Internet access for a private network of about 300 users for a conference at a hotel. The hotel has provided me a public IP address for the WAN side. On the LAN side I have a 10.x.x.x /8 subnet with the router providing DHCP and NATing (overload) across the WAN interface.
Users can pick up an IP address and access the web. Light web pages such as Google tend to load without issue, however if a user does something that takes more time, such as streaming a Youtube trailer or opening an RDP session, the connection will freeze.
It doesn't appear to be related to bandwidth availability. Pings return on average 10-15 ms. However, I will get a request time out about every 10th continual ping. Steaming video will load about 4-6 seconds worth of data, then will appear to freeze without dropping. Doing something like speedtest.net will send a large amount of data then will hang, without ever ending the conversation.
This doesn't happen when I plug a laptop directly into the hotel public Internet line. They also don't have issues with their network similar to this.
I do not have any ACLs, etc. loaded. The router is basically wide open as far as I can tell. I don't see the router resources getting used much at all.
i have the following scenario :
ISP1-------ASA 5510----------ISP2
|
|
|
LAN
i would like to use ISP2 for all http/https/ftp traffic.how could I force my ASA to set a different gateway for http/https/ftp traffic ?i have tried several solutions such as nat/pat rules, nothing seems to work.
Never seen a Cisco, or any other L3 switch before. Nor an Lx router. Any step by step,or class room or web based training, or a partner or Cisco helper to get us up to speed on this.Goal is to limit http and https traffic in favor of telnet to an AIX server and RDP to a Windows TS. Printing would be ahead of http/s and below the others.
Interstingly, the web site promises 9 videos, but there are only 8. The demo guide says about OoS: "Coming Soon".Where to go? Who(m) to call?
I have Site(s) Ani....i=1,..10 sites which communicate with site B to access a website/application. That's simple enough. However, the traffic is http well we primarily don't need https on ipsec tunnel right?. But since attacks related to eavesdropping of traffic come a real reality once it gets terminated by the ipsec device on both side.I have two options either to purchase a third-party ssl certificate to encrypt the traffic between two nodes or use a custom made one.I don't want to use a custom made one because this make the browser prompt an ugly untrusted certificate message; its ugly not from security perspective but for clients inconvenience and assuring users confidence in our systems is a critical issue for us. ?
a) How its possible to remove ugly certifcate message from user screen? Does the company need to register its certificate to some kind of CA body? or what ...
b) Due to some tcp acceleration issues, ssl traffic slows down the traffic between the nodes so we only require the encryption to stand just during the initial handshake when the username and password are being validated ; after that we want to revert back to http?
On a Catalyst 6509 switch I have configured wccp protocol in order to redirect the Http traffic to a Bluecoat SG8100. It was working fine until a new L3 interface implementation.Thereafter I was unable to redirect the http traffic due to an error reported from the Cat6509: [code] After some checks I supposed that the problem should be the UDP 2048 port connection between the Switch and the Bluecoat while the switch L3 port and the bluecoat are on the same Lan. A deep analysis found that the WCCP protocol seems to be as follow:
-Proxy address 10.64.28.240 to Switch Port 10.64.28.250 Here I Am
-Switch Port 10.64.28.250 to Proxy address 10.64.28.240 I See You
-Switch Port 10.66.0.251 to Proxy address 10.64.28.240 UDP 2048 packet (dropped by firewall)
It's strange to me that the first dialog is correctly handled by the correct Cat6509 interface while the UDP packets are flowing from another Vlan interface not configured with the WCCP and apparently not involved on the protocol.Last of all the WCCP is now disabled and unusable?
Can the ACE appliance behave as a reverse proxy for http and ssl traffic? I would assume it can given how it does SLB but SLB is not a requirement at this time.
View 2 Replies View RelatedI am trying to mark http packets from a web server with DSCP ef, but when I am doing a traffic capture all http packets have tos 0x0.I am able to mark UDP and ICMP packets originated from this server, but not any TCP traffic.The web server is in VLAN 20This is my config mls qos ip access-list extended MARK-HTTP-ACL permit tcp host 10.10.10.10 eq www. [code]
View 4 Replies View Related