I need to know it the adsl router SRP547w or SRP546 permits to set class B subnetting ( or class A) on the Lan interface. I read the model SRP527 has a limitation to set ip address on the lan interface but I did not find any information about 547 or 546.
View 0 RepliesWe have a deployment of 400 store. Each of those have 2 GRE tunnels running over MPLS & 2 GRE Tunnels running over Internet leading to our 2 data-centers. At each Data-Center, we have 1 ASR-1002 connecting both MPLS & Internet MPLS tunnels (800 total per router).
I saw in the documentation that OER & PfR cannot support more than 20 external interface (in our case GRE tunnels) per MC. Does it means that we need to have 20 routers acting as MC to be able to use PfR for our Internet GRE tunnels ?
Is there any more scalable solution for this ? How big company address this issue when they have a lot of interface to run PfR ?
Trying to configure an SRP527 to work in conjunction with a 3560G switch.My local subnet on the 3560 is 172.23.x.x.The subnet on SRP527 is 192.168.x.x Every thing can ping each other, except I just cannot get any internet access from 172.x through 192.x and out..? Does the SRP527 support this?
View 5 Replies View RelatedI would like my SRP527 router to manage 2 VLAN. 1 for my whole LAN and employees WIFI connections, another one for external clients to access Internet by guest WIFI SSID.
- I have this Cisco SRP527W router acting as a gateway between my LAN and Internet.
- I have a second router used for VPN connections between my LAN and 2 external agencies.
- My LAN is using 192.168.0.0 / 255.255.255.0 network
- External Agence 1 is using 192.168.1.0 / 255.255.255.0 network
- External Agence 2 is using 192.168.3.0 / 255.255.255.0 network
The Cisco Router is using 2 VLAN :
-VLAN 1 (LAN port 4 and SSID 1) -> 192.168.0.254 / 255.255.255.0
-VLAN 3 (SSID 2) -> 10.33.0.254 / 255.255.255.0
The Cisco router is using 2 static routes :
- Agence 1 : 192.168.1.0 / 255.255.255.0 -> Gateway 192.168.0.249
- Agence 2 : 192.168.3.0 / 255.255.255.0 -> Gateway 192.168.0.249
The VPN router for external agencies is using 192.168.0.249 / 255.255.255.0.
When the SRP527W router has intervlan routing enabled, everything is working. I can ping my external agencies. However, external clients using guest WIFI can also ping my internal LAN. Disabling intervlan routing separate VLAN 1 and VLAN 3 properly, but i can't ping my external agencies anymore and i don't know why ?
Behind my Cisco router :
- 1 HP Gigabit switch (servers, VPN router are connected to it)
- 2 Switches (HP and Accton) both linked to the gigabit switch and where all my clients are connected.
No trunk link and vlan are defined on my switches.
I have noticed that I have to reset the power on my srp527 more and more often, at first I thought it may be a glitch with my service provider but this is now happening more and more regularly. The internet just goes off, the network still exists and all the lights remain on (both adsl lights stay on) all the computers on the network (3 computers) cannot access anything on the net. A simple power off/on of the router restores everything but surely you do not need to do this everyday?
Firmware version. 1.01.09 (001) Apr7 2010
Can any provide me with the SKU's and pricing of the Broadband Access Center 4.2 Is this the correct version to use with the SRP527?
View 1 Replies View RelatedWhat are the SNMP port descriptions relate to on the SRP527? There is nothing in the administration guide and some of the ones that appear up don't make sense.
I think I have worked out a few by elimination but I wanted to confirm a few ...
I'm trying to move from a faulty SRP527 to SRP 547 - I tried a Restore from Backup, but it doesn't work.So start from fresh, and I'm having an issue trying to add a 2nd SSID to a VLAN...
I keep getting the error:
"FAILED! SSID 2 has joined another VLAN"
Except it hasn't... its not assigned to any VLAN...
i have few questions about MAC adress limitation. We have in our network cisco RV042 router, SLM2048 switch and WAP4410n AP.
My 1. question: is it possible to disable internet connection for concrete mac adress based on scheduling?
For example: between 23:00 - 5:00 this mac adress will not connect to internet.
If yes how i could do that?
My 2. question: is it possible that if this "mac adress" is connected for 5 hours than disconnect it for 6 hours?
I want to use a subnet mask of 255.255.254.0. The setup window doesn't allow me to type in that mask, rather it only allows me to choose from options on a drop down menu (which doesn't include that mask). Is there a way to do this?
View 2 Replies View RelatedFor the past week, I have tried to setup the PPTP VPN server on the RV180. The setup was straight forward, but I could not log-on no matter what I tried. I decided to call Cisco small business support, and as I was talking to the engineer, it mysteriously started to work. I was puzzled and somewhat embarrassed because I'd hate to admit it was an id10t problem on my part. As I tried a few different configurations, I began to realize there might be a limitation in the RV180 PPTP VPN server with the current firmware (1.0.1.9).
In short, the RV180 PPTP only works with 192.168.xxx.xxx/24 subnet. My setup has 3 vlans: vlan1 in 172.xxx.xxx.xxx/24 subnet, vlan2 192.168.0.xxx/24, and vlan3 10.xxx.xxx.xxx/24. My originally plan was to keep vlan3 isolated by disabling inter-vlan routing, but I needed a way to manage a couple of devices on vlan3 remotely, thus I wanted to setup a VPN in the 10.xxx.xxx.xxx/24 subnet. This turned out to be the reason why it never worked before. Today when I called Cisco support, I assigned the PPTP VPN server a 192.168.0.xxx ip range, and it worked. Later, I tried assigning 172.xxx or 10.xxx ip addresses to the PPTP VPN server, and they both failed to work. I created another test vlan4 with 192.168.2.xxx/24 subnet, and assigned the PPTP VPN server to that vlan, and it worked again.
I'd like to mention that I already configured the 10.xxx.xxx.xxx/24 subnet with a few devices before I replaced my router with RV180, and I don't want to have to change and test the setup of all the devices. Another reason I want to have my VPN server outside the 192.168.xxx.xxx range is that it's way too commonly used by wifi hotspots that it increases the chance of wifi and vpn in the same subnet.
I can test a few more configurations, but I think the results will be the same. Perhaps Cisco should test the RV180 in the lab to confirm what I found.
Why does My N750 F1103 (f/w 1.10.16) MAS filter only allow 20, my old Belkin router allowed far more
View 3 Replies View RelatedI am trying to setup VPN monitoring for a srp527w Cisco.This is my first attempt at this so "easy to understand" instructions would be a great, i have done some searching and its difficult to decipher relevant and irrelevant information based on my limited exposure to this technology.
View 1 Replies View RelatedWe have a Cisco ASA and recently purchased a cisco small business srp527 router. It is connected to our ADSL2 connection and is working fine. I have configured the device with an ipsec tunnel using an ike profile and the tunnel is created successfully with packets traversing the tunnel. However packets are being dropped intermittently, with no cause. The link is currently not being utilised, there is no load on the network however when I ping Google and any address subject to the rules of the tunnel i notice that a single packet is dropped every now and then.
View 0 Replies View RelatedI have recently managed to configure a setup where I have 2 srp527's one at office one at home.Have 1 fixed IP at the office and 1 fixed ip at home.I have configured the srp at work to be a vpn server and have configured the group and 2 user profiles. This allows me to have 2 concurrent sessions over the vpn to my office from desktop and laptop at the same time. Connections fire up perfectly no problems.From the desktop, I connect using vpn client with user profile 1 Once connected, I then connect to my workstation machine at the office using remote desktop.This gets me super fast access to office files and large spreadsheets without downloading the whole file over the vpn and is working perfectly.
If I then additionally connect from the laptop using the vpn client with user profile 2 the remote desktop connection drops.Disconnect the laptop connection, remote desktop comes back.Have isolated this to being 2 connections arriving at the srp at the office from the same external ip. If I connect my laptop to my phone as a hotspot rather than using my home LAN, both connections are made and remote desktop has no interruptions. Is there a way I can overcome this through re-configuration of the srp at the office or is this a limitation with the srp?
I have a Cisco 876 router, I need to connect ethernet WAN link, While configuring IP address am getting below error.
yourname(config)#int f0yourname(config-if)#ip addres 172.30.1.0 1. 255.255.255.0
% IP addresses may not be configured on L2 links.
We have two ASA5510's, running IOS ver. 8.2(4). We setup Load Balancing on two ASA's. Will there be any problems if we change the IP address of the outside interface on one of the ASA's?
View 0 Replies View Relatedconfigure my cisco 892 router want a static ip address assigned to the interface because and I have no more internet on the router because am working on my network academy for CCENT?
View 28 Replies View RelatedI am currently working with a vendor to get my ASA5520 setup to handle IPsec VPN connections for my clients and we are stumped with how to get the outside interface to respond to connections/requests.
I work for a state agency and our network connectivity is provided to us by another agency/department. The firewall I want to use for VPN connectivity has an outside address of 10.0.8.162 which is not routable outside the state's network. I have been assigned a set of public IP addresses for servers in my DMZ and I am wondering if it is possible to configure the ASA to utilize one of those public IP addresses for VPN communication. My DMZ network is setup as a local 192.168.10.0 network and the ASA is performing NAT translations to the corresponding public IP addresses.
Putting in a NAT rule to translate one of the public IP addresses to the 10.0.8.162 outside interface, but I wasn't sure if that would work.
Why layer 2 switches need its mac address, even it does not have any interface ? (does not have stp and etc)
View 8 Replies View RelatedI was given a linksys SRW224G4 switch .. It seems to work fine on some ports and others dont,I am tring to log into it to see what the current config is . I cant seem to find what ip address its pulling to be able to log into the web interface. I have tried the blue cable , and using hypertermail but with no luck .. I dont have com 1 or 2 as an option on my latop just com 3. how I can log into this switch and rest it back to factory specs so then I can go though and setup how i want.
View 4 Replies View RelatedRecently, I've been having significant problems with denial of service on our ASA-5510. Two IP addresses in particular attack my ASA regularly. What kind of rule do I need to create to deny these IP's access to my firewall?
View 4 Replies View Relatedconfigure a secondary ip address (over the same address range) in a vlan interface on the SGE2000?For example, I want Interface Vlan 10 on mw switch has 172.16.10.1/24 and 172.16.10.2/24. Is that possible? If I try I get an error message with a duplicate IP address error. On Catalyst switches it can be done, but on Small Business?
View 1 Replies View RelatedI want to configure a MAC address on my asa 5520 interface.I ask you if exist a private MAC address range?
View 5 Replies View RelatedI have got a 3502 setup and functioning in Office Extend mode. I have found one issue though. I have to set the checkbox on the my Management Interface to Enable NAT Address and put the external address in the box. Once this occurs no internal APs can join the controller.
Need setting this up with a single controller behind a router and not having to set the NAT Address for the Management interface? Should I setup a second interface on the controller to be for external management?
I'm trying to get started on setting up my first Transparent ASA.I understand an ASA in Transparent Mode can now have an ip address with Bridge Groups or some such mechanism. I'm looking for examples of how to set that up and other information below. Is the ip address associated with the device or is it interface specific? Will I be able to SSH with that ip address setup? Can I use ASDM if the Transparent ASA has an ip address? This 5512X has an IPS. Any one who has setup an IPS on this platform knows it has some very particular requirments in order to communicate with the outside world. I need examples of how to do that with a Transparent ASA.How is NAT setup differently (if at all) on a Transparent ASA?Are ACLs done any differently?
View 3 Replies View RelatedI have a cisco 878 router and I can’t assign ip address to it’s fast Ethernet interface. When I assign ip address give me this message: “you can not assign ip address to layer 2 interface”.
But I can not understand why give me this alert when I use a layer3 device?!
I have a Catalyst 3750 Metro running 12.2(25)EY4.Every time I add or remove an ipv4 address from a tunnel interface I have the following log:
Jan 4 10:42:19.088: %PLATFORM_HCEF-3-ADJ: Insane handle in add LT7
-Traceback= 25222C A81C70 A7B28C B08958 B28940 B2A2E0 B2A684 B9EFA4 B9F004 B9F684 B9F814 B9F99C B8E3BC BA1BD8 3DFA94 39BA3C
We have an ASA 5510 and we also have two separate address pools which have been provided by our ISP. The addresses are not contiguous. Is there a way to configure an interface on the ASA to handle both sets of public address pools? If the outside interface is set up on eth0/0 would I create two subinterfaces (eth0/0.1, eth0/0.2) and assign each subinterface an address pool? Then just NAT/PAT to my heart's content? At that point I would want both to route to our inside network. So it's basically two inbound sets of IP addresses comming into one interface and then comming into the network... Right now the outside interface is configured with our first set of IP addresses. We wanted additional addresses and when we called our ISP they told us we already had them - just a different pool. Hence the question. I'm guessing that I wouldn't put anything specific on the outside interface and I would put the specifics on the subinterfaces?
View 4 Replies View RelatedI have a Cisco 2811 with fa 0/0 as my bearer, and a switch module for internal clients.
I have an issue with my fa 0/0 flapping, I want to move that ip configuration to fa 0/1
as this is a branch office I am reliant on the bearer port to give me coms so changing the IP addresses is difficult.
Has any one tried this with a TCL script?
I have an 8.3(2) ASA with a single outside IP. Dynamic PAT translates inside addresses to the outside interface address. I would like to use static NAT with port translation to access an inside syslog server. I got an error when I tried using the outside interface address. Can I use both dynamic PAT and Port Translation with the same outside address?This is what I would like to use but I receive an error saying there is an overlap using the outside interface address.(192.168.1.0 is my inside network. 10.10.1.10 is the outside interface IP.)
object network inside-net
subnet 192.168.1.0 255.255.255.0
nat (inside, outside) dynamic interface
object network SYSLOG_SERVER
host 192.168.1.50
nat (inside,outside) static 10.10.1.10 service tcp ssh ssh
we have two Cisco ASA 5510 in failover configuration.We tried to change the public IP address on the Outside interface of the primary device but it didn't works. The new IP is not reachable from Internet nor pingable from device on the same LAN.The new IP address is in the same subnet of the old IP.
From the switch on which the ASA is connected and from another Cisco PIX we can see the ARP entry. In the analysis, on the old public IP address there was a VPN site-to-site and Webvpn defined.We tried also to shut/no shut the interface and reboot the device.
We've had issues with our Exchange 2010 server (running on ESXi 4.1) since its default gateway was changed to our new ASA 5510. They manifested as frequent Outlook client connection dropouts or as IP address conflicts whenever Exchange was rebooted. The temporary fix was to disable the Exchange server NIC, bounce the ASA and enable the server's NIC again. We saw poor performance from Exchange after a while again, but after some research and testing I realised that disabling proxyarp on the inside interface fixed the problem permanently.
However I've now realised that the client VPN no longer routes properly because proxyarp is disabled on the inside interface, so I still have a problem.