Cisco Routers :: SA520W Bridging Between To Private Lans
Jun 28, 2012
connecting to separate private lans:
A) 192.168.1.x
B) 192.168.0.x
A is behind a Watchguard XTM25 11.5.3
B is behind a CISCO SA520W
Both have static public facing IP's.
B only has a IP based PBX system attached to it over a SIP ALG. (originally it was hooked up to the watchguard but they didn't play nice, but works great with the Cisco. Problem is the Cisco don't have all the features of the Watchguard)
A has all my users workstations attached. The issue is that computers on A need to talk to server on B for a desktop application to work. Since they are on separate subnets, it isn't working. The app itself still doesn't work by port forward/sNats, etc.
A & B are right next to each other, so cabling between them is not an issue.
Currently, I have a cable between the watchguard and the Cisco. The watchguard end is configured with a static private ip on the subnet A (the cisco side), and plugged into the lan on the cisco side. I have a policies to let all traffic flow freeley, and from the logs on the Watchguard, all A subnet traffic is correctly going to the Cisco via said cable.
But, nothing is coming back from the Cisco. So my question is, how can I get the Cisco to play nice with the other subnet and send traffic back to the B subnet?
just wanted to know if the SA520W can wirelessly bridge (Workgroup bridge, WDS, etc -don't care which) to either an AP541N or AP1252... using WPA2-PSK
the 2 seperate examples would be
Internet --->SA520W --(Wireless 30 feet) --->AP541N -->ESW-540-24P-K9 internet --->Sa520W --(Wireless 30 feet)----> AP1252 -->ESW-540-24P-K9 internet --->AP1252 ---(Wireless 30 feet) ---->SA520W-->ESW-540-24P-K9
in other words do you just go into the config of the SA520W ... enter in an existing SSID name and the WPA2-PSK password and it joins that wireless network. lastly does the SA520W support POE to the switch above or only the AP541N
We are using a SA520W as our primary router and have a fiber connection attached to the default WAN interface. We would like to improve our uptime using a secondary internet connection on the optional WAN interface.
We have bought a dovado tiny 4g router for this other connection. It acts as a dhcp server but the Cisco router does not get an IP from the dovado router. The router works as expected when connected to a normal computer. But somehow the cisco router doesnt get an IP.
I have also tried to set a static IP for the Cisco router but that didn't work either. The dovado router is setup do deliver ip in the range 192.168.0.2-254
I have a problem to configure a IPSEC VPN on the SA520W ( 1.0.39) with Cisco VPN Client (5.0.05.290). In the logs are following error:
ERROR: Could not find configuration for x.x.x.xERROR: Could not find configuration for x.x.x.xERROR: Could not find configuration for x.x.x.xERROR: Could not find configuration for x.x.x.x
I have two LANs 192.168.0.* and 192.168.1.* (main)
I'd like to facilitate port forwarding on the sub-LAN - is there a way to configure the device to do so? The "main" LANs fowarding works just fine, however I have specific ports that need to go to the sub-LAN.
A new Windows 8 computer can't access the SSLVPN corporate connection.
When we try to access the SSLVPN website to download the launcher (you have to download the VPN launcher everytime for our configuration), you can log in and that's fine, and then you can click on the VPN Tunnel link, a popup shows up but it doesn't actually download the launcher. Solutions we've tried so far:
1) Reinstalling C++ Redistirbutable 2) Adding the site to trusted sites and allowing unsigned ActiveX controls 3) Removing all internet objects through internet options.
I have two locations in the same city and I want to connect them together so I can share files and printers. Each of the LANs has a router and is a simple workgroup. LAN A uses 192.168.1.1 255.255.255.0; LAN B is 192.168.2.1 255.255.255.0. What is the best way to connect these two networks together so I can share printers on both sides? Should I replace the network routers, they are older and definitely could use an upgrade
Our company just recently bought a CISCO SA520W Security Appliance from a distributor here in the Philippines. Unfortunately, after a month of use, the LAN ports on the appliance started losing power. We reported this to the distributor and they sent a CISCO engineers to check on the unit. The engineers found the unit to be defective and need to be replaced.
Three weeks after the distributor pulled-out the unit, I have followed-up the status with them. They told me that they got no definite ETA from CISCO for the replacement unit. I followed-up with them again after a week. This time, they told me that the device is already in transit and it is coming from CISCO USA but they still don't have an expected time of arrival to give me.Does it really take more than a month for CISCO to replace a brand new defective unit? The serial number of our appliance is DNI1610G0G7.
I am trying to use f5d7230-4 v6000 to connect my TV and Playstation to my home WLAN, but cannot set up the router to receive the signal from the base station (FRITZ!Box). Is it possible at all to use f5d7230-4 v6000 for such function?
I'm tryig to put a computer into the DMZ and then access it from computers on the LAN using a local IP address. My reason for doing this is that I'd like my DMZ computer to be a locked down web server (just ports 80 and 443 open to the outside), but I need to be able to have more access to it from inside my LAN (e.g. I want to be able to SSH into it from the LAN).
Thus far I've been able to get a computer set up in the DMZ and can access the Internet from the DMZ computer. And I can access the DMZ computer from the LAN computers using the public address for the DMZ computer. But I can't access the DMZ computer from the LAN computers using a private address for the DMZ computer. see the attached file for a diagram of our current settings. A few descriptions:
- Verizon provides us with a number of static IP addresses, i.e. 71.123.123.10-12 (note these aren't actually the addresses, but representative).
-- In the RV042, I have the following configurations made: - Setup > Network > LAN Setting - Device IP Address = 10.4.20.1
I'm looking to update our office network and replace our old wireless box.I've been looking at the RV110w after a google search and need to find out some things before suggesting anything.
Currently our network is running a public IP address for each piece of equipment which we'd like to keep, mainly for ease. We have a wireless access point running in invisible mode for wireless client access to the entire network, and also a Netscreen firewall.
What I'd like to do is the following: 1. Keep public ip addresses for wired clients, complete with existing network/local server access/RDP. 2. Set up two VLans on private ip addresses - one to have full access as per the wired clients and the other only for guest Internet access.
Is this something the RV110w is able to do? If so how would I go about setting it up?
I have two private networks and want/need to route traffic between them. I also have an ISP connection and want/need to provide internet to at least one of the private networks. Providing internet access to both is not required or desired.
Can this be accomplished with an RV042? If so, how?
P.s. The problem space, once again, in a non-narrative form with some addresses thrown in:
Private Network A: 192.168.200.0/24 Private Network B: 10.50.3.96/27 ISP Network C: 192.168.0.0/24 192.168.0.1GW 192.168.0.2 is WAN1 address on RV042
I just moved into an apartment where the internet is being provided to me via wifi (open). The landlord doesn't have a private network, he is with me. What I'm was curious about is if it is possible for me to use a second router to create a secured network for all my devices? My thought would look like this: ISP>Landlords Router>wireless>MyRouter. I know you can have private and public wifi but the two routers have to be connected. I haven't talked to him about the fact that he needs to secure his router mainly because we never cross paths.
I have RV110W connected in private network 192.168.5.0/24, I have redirected pptp port from adsl modem to the RV110W and VPN works OK. DDNS on the adsl modem is not available.I need to use Dynamic DNS functionality on my RV110W. The device supports several DDNS services (TZO.com, Dyn DNS.com, 3322.org and noip.com). For all but TZO the public "Internet IP Address" shows as 192.168.5.110, which also gets auto registered with the DDNS service.I have tested this with free noip.com account and this is obviously undesired behavior. I need the router to register my real public IP.For TZO it shows the proper public IP, but TZO service is no longer available on TZO.com.
I live in a two family residential house and we share a common fibre connection to the internet. In the basement we have a modem/router(zyxel) which is in "bridge mode". Therefore not acting as DHCP. Behind this zyxel we have a Cisco RVS4000 router. Ports 1 and 2 go to family A, and Ports 3 and 4 go to family B. Family A and B have separate routers which are both set to "access point mode". Family A has an ASUS RT-N66U router while family B has a dlink DIR-615. The asus has an "access point mode" while the dlink needs to be set up manually to achieve this. The dlink must also have a static IP adress. The asus can receive ip adress.
What I have unsuccessfully tried to achieve and am currently trying to separate the networks so that both families can access internett, but at the same time it must be impossible to access VLAN1(Family A) from VLAN2(Family B) vice versa. Meaning no communication between the two families through the local network.
I have tried different options but I am not sure how to deal with trunk, tagged, untagged etc. etc. etc. It seems every time I manage to create two different networks there is still accessability/communication between the two VLANs and everytime I manage to give out different IP adresses to different ports i.e. 192.168.10.xx and 192.168.2.xx it is still possible to communicate. What also usually happens is that the internetconnection is severed at the same time.
my RV042 is not able to propperly update my ddns. If you try to resolve my dyndns subnet kitus-network.dyndns.org you will get 192.168.0.2. How can I make the router update my ddns with the real public ip rather than the private ip it "sees" on the WAN interface?
My plan is to use VLAN1 for the internal private network and VLAN2 for free public wifi. My question is can I use a PC on VLAN1 to configure/manage my access points? There are no dedicated PCs on VLAN2.
I'm planning to set up a network with two routers and one cable connection. One router will be for public wifi at my business and the other will be for my Point of sale system and private use. I think I have it figured out but want to double check the set up. Someone tell me if this isn't correct or if there's a better way of doing it.Cable modem --> connect via ethernet to Router #1 WAN port. Router #1 Lan port 1: connect via ethernet to router #2 WAN. Now, router 1 and 2 will have two different subnets; 192.168.1.x and 192.168.2.x respectively. Router #2 is the one that I should use for my private network and for the POS system since it can't be accessed by users from router #1 correct? I have DD-WRT installed on both routers but I plan on putting Tomato firmware for router #1 to limit bandwidth for public wifi and keep DD-WRT installed for router #2.
I'm going to move offices into a shared situation with 3 companies. Each company will want its own private network so there's no snooping between companies. I am planning on using VOIP for the phone system (Nextiva cloud based). Is it possible to set up the system so that each company has access to the VOIP system but yet remains sequestered in the their own network for everything else. I was hoping to do this with one data port at each workstation using Cisco SPA-303 phones. The way I understand this, is that the phone plugs in to the data port and you daisy chain the workstation off from each phone. Is this possible to do this while having the system I described? Another wrinkle is that I'd also like all the networks to be access shared printers.
I would replace an old Levelone Router with a Linksys E2500.I have 3 different routed private networks (e.g. 192.168.1.0/24 , 192.168.101.0/24 and 10.0. 0.0/24)How can I forward different ports to this 3 different private networks with an E2500.In the "Games&Applications" Menu are the first 3 octets of the "to IP-address" are fix and corresponds with the LAN ip address.
Can the N150 be set up so that it just runs a private network - not connect to the internet? The auto-setup doesn't seem to work without a modem attached to it and I don't want it to be hooked up to the outside world, just a few computers and a NAS device on a private net.
Need to boost signal coverage on an SA520W (even though it is very good, building floor is too clutterd and too darn big.Even using a 2nd unit to extend things may not get it all done; However, searching the site tells me there is an external aerial (one of...) in the SMB range, and it uses "N" style connectors. Looking at the specs on the SA520W, it makes no mention of what sort of connectors those are (Happy to admit I am not a cable guy... well not co-ax anynore at least!).
I purchased a SA520W for my company, and i have some probles for configuring firewall. I want to deny access to facebook, youtube and twitter but not for 4 hosts which needs this websites for work. I tried to configure content filtering > blocking URLs but with this solution, I deny acces for all users, So, I tried to make IP v4 rules :
The 4 hosts who may access to these websites are 192.168.50.124 to 127
Example : FROM Zone : LAN TO : WAN Service : Any Action: block always Source hosts : 192.168.50.32 to 192.168.50.123 destination hosts : 66.220.158.11 (one of the facebook's ip)
but it does not work. So, I am looking for an other solution, or maybe my rule is not correctly configured ?
We've got an SA520W that's performing nicely, but we need to extend our wireless coverage to a new area of the building (we can get a network cable there). What would be our best option? Just a second SA520W, or are there are APs we should look at?
I have an SA520W firewall, and am implementing a new AP541N. On the SA I am using port 4 to connect the AP. Trunking is on with Vlan 1 and 25. Connecting the AP I am able to use VLAN1, however when I assign a new VAP using Vlan 25, I only receive IP addresses for VLAN1.
I am trying to get the Cisco 1921 to route between 2 LANs. I can ping from the router itself, but cannot ping across either, is there something I am doing wrong here:
version 15.1 ! no aaa new-model ! no ipv6 cef ip source-route ip cef
How to connect to LANs from one Computer Answer of : How to connect to two different LANs from one Computer with two LAN Cards :with 16 Port Switch in My Computer lab.
I have two complete and separate "networks", each with their own internet connections. One is for home use, one is for business use.
(1) Home network has a D-Link cable-modem/router to the ISP. Variable public IP address. NAT'd.This router is configured "as provided" by the ISP (except for a few port-forwards). DHCP serving is enabled, etc. If possible, I do not wish to change any major router settings.LAN IP Range: 192.168.0.0/255.255.255.0
(2) Business network has a 2-Wire ADSL-modem/router to a different ISP. Static public IP address. NAT'd.DHCP serving is handled by a Windows 2003 Server. I am happy to change any router and server settings.LAN IP Range:192.168.254.0/255.255. 255.0
I have a network printer. It is currently connected to the Home Network (1) and has a static IP address 192.168.0.8, but I wish it to be accessible by PC's on both networks.My first thought is to simply connect both routers LAN-side via an ethernet cable. However, I can't find a way to add a LAN-LAN static route on the Business Network router (it only has options for WAN-LAN static routes). Do I really need to internetwork the routers via the internet?!?
Any AP that would be able to wrielessly repeat traffic to my SA520W (so that the AP has no ehternet wiring at all). First off, there is no WDS option anywhere in the SA520W, so there is no method for which to simply create a WDS link between the two devices. Yet the Factory Default Settings table in the SA520W Admin guide indicates there should be (search on WDS in the PDF to find this). both at the lack of integration of these Small Business Pro devices, and moreso at the fact that I was told that these two would be compatible for wireless-only repeating. I've been messing around for hours trying to get something to happen. Maybe I'm just missing something obvious as this is my first time trying to get an AP to talk wireless-only to a wireless capable internet gateway device (the SA520W).
I have a problems with one SA520W.The LAN port don't work correctly. If i connect PC directly via ethernet cable (i try 2 different cable and 2 different PC) the DHCP don't assign an IP. If i reset to factory default and manual insert IP (192.168.75.1) don't work.
I have setup an SA520W and configured SSL-VPN for our small business. Everything seemed to go smoothly and I tested SSL VPN by logging in and playing around a bit which seemed to be fine. However, shortly after deployment I started getting complaints about it being much slower than our old VPN through the consumer grade router I just replaced. I investigated and tested with IE8 and Chrome on Windows XP 32-bit with several different machines, and in all instances it did seem very slow indeed. While looking around I noticed that the Task Manager under the Networking tab shows the SSL VPN connection as VirutalPassage at 64 Kbps. Going into Network Connections shows VirtualPassage under the Dial-up heading with device name Virtual Passage SSLDrv Adapter. Additional properties describe it as an ISDN channel. I have attached an image of the Task Manager pane.The router is running the latest firmware of 2.1.51. It is connected via a static IP that does not require a login, to our dedicated 5 Mbit / 5 Mbit ethernet over copper link to our ISP. We get great speeds and low latency through everything but SSL VPN connections. I haven't done anything fancy so the router certificate is the factory default. Currently we are using the existing 2 SSL VPN licenses that come with the router until we need more access, at which point I want to upgrade to the 25 user bundle. However, I don't feel comfortable upgrading until I get this resolved, because 64kbps simply cannot work for us for a VPN solution.how to configure the SSL VPN to not limit at 64kbps? My engineers are making fun of me for bringing us back to dialup, and I have to agree with them!
