Cisco Routers :: Setup 2 Separate VLAN Assigned To Different Ports On RV180-K9-NA
Feb 4, 2013
I have a Cisco RV180-K9-NA router. I would like to set up 2 separate VLAN assigned to different ports on the router. I will be using LAN port #1 to communicate with the router. The NIC connecting the PC to the router has multiple IP addresses assigned to it so that I can communicate with the separate VPNs (192.168.1.x for the router; 172.16.10.x for VLAN #1 on port 2; and 182.16.10.x for VLAN #2 on port 3). I also need to be able to have the router provide both IPv4 and IPv6 DHCP services for devices on each subnet.
View 3 Replies
ADVERTISEMENT
Jul 11, 2012
I have an rv180 and I'm trying to setup a custom service that contains both multiple disjoint ports (some UDP some TCP), as well as a TCP port range. This has lead me to a couple of questions.1) Is it even possible to have a single custom service with disjoint ports? Is it just going to be necessary to define multiple partial services for this?2) Is it possible to forward a range of ports? It's clear how to define a service with a port range, but the port forwarding table interface only allows me to select one LAN-side port for any service. Is there a secret notation that I need to do here that will just forward to the same LAN-side port as the WAN-side port---effectively one-to-one NAT forwarding, but just for the selected service?
View 8 Replies
View Related
Jan 12, 2013
How do I submit an RFE (Request For Enhancement) to the Cisco SBR team to encourage them to implement the missing support for VLAN to VLAN firewall rules that was available in the RVS4000 (See [URL]) and that was supposedly added to a beta release of the RV220W firmware (See [URL])?
View 1 Replies
View Related
May 7, 2013
I have RV180 configured with two VLANs. First VLAN is untagged and second VLAN is tagged. The purpose is two have two subnets, with the second subnet used for guest access. Both VLANs have DHCP server enabled. First VLAN is 192.168.1.0/24 and the second VLAN is 192.168.2.0/24, When I connect a computer with untagged Ethernet interface, it gets an IP address from DHCP server on the first subnet i.e. 192.168.1.100 and it can successfully access Internet. When I connect a computer with tagged Ethernet interface (I am using VLAN ID 10), it gets an IP address from DHCP server on the second VLAN i.e. 192.168.2.100. So far so good. I can successfully ping hosts on the Internet i.e. ping www.google.com. But I cannot access Internet from the web browser. I captured Wireshark trace and here is what I see...
1. TCP SYN. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10)
2. TCP SYN ACK. Source IP A.B.C.D, destination IP 192.168.2.100. Ethernet frame has VLAN tag (VLAN ID 10)
3. TCP ACK. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10)
4. TCP Data. Source IP 192.168.2.100, destination IP A.B.C.D. Ethernet frame has VLAN tag (VLAN ID 10)
5. TCP Data. Source IP A.B.C.D, destination IP 192.168.2.100. Frame is untagged
The problem is at #5. Packet came back from the Web Server. RV180 properly NATed it to the local IP address. But it did not add VLAN tag.
View 8 Replies
View Related
Feb 14, 2013
I have five static IPs that I would like to fully utilize, by NAT'ing them to internal VLAN subnets.I read that the RV180 can do this, but I am having difficulty in finding a working recipe.I have assigned xxx.xxx.xxx.2 to the RV180 WAN interface.
I have created four additional VLANs 2-5 and assigned to ports 1-4 with subnet interfaces 192.168.2.254, 192.168.3.254, 192.168.4.254. and 192.168.5.254,I have set the default VLAN to untagged on all ports. VLANs 2-5 are set to tagged for their respective port (1-4) and exclude for other ports.I have set DHCP relays to 192.168.1.202 which is my DHCP, DNS, AD services.
I read some months ago that when the first static IP address is assigned to the WAN port, that the VLAN ports will accept tagged packets on their ports and NAT them to the respective successive static IP (sounds a bit like magic to me). Regardless, I read that the RV180 can provide VLAN subnet NAT to up to 5 static IP address. I am not looking for 1 to 1 NAT, not the same. I want to perform NAT on the four additional VLANs in the similar manner that VLAN 1 (default DMZ) IPs are NAT'd to the static WAN address. As in everything outbound on 192.168.1.0 is NAT'd to xxx.xxx.xxx.2
Additionally I would like all DHCP assigned by my DHCP server which I believe is accomplished with the DHCP relay setting on all five VLAN subnets, which point to the DHCP server 192.168.1.202
Lastly, I am trying to configure VPN connectivity into my DMZ network. I have configured a few accounts, enabled for PPTP. I have configured PPTP and am issuing 192.168.1.70-80. The VPN connection seems to work great without the use of Cisco quick VPN. I can see the remote picking up the 192.168.1.71 IP address as the VPN connection is made. From the remote I can ping IP addresses on the DMZ subnet 192.168.1.X How can I configurer the Cisco RV180 PPTP server to provide the DMZ DNS ipaddresses? These addresses need to be 192.168.1.201 and 192.168.1.202
I feel I am almost there, in working out the VLAN subnet to Static NAT. I suspect it will be some routing configurations. The ISP business gateway on the WAN side that I point my router to which is owned by Verizon, is xxx.xxx.xxx.1 I have a /29 making IPs xxx.xxx.xxx.2-6 available to me.
View 4 Replies
View Related
Apr 20, 2013
I have been banging at this now for two days and just cannot get Inter-VLAN routing working to work on this router.
Upgraded to latest Cisco firmware (1.0.1.9).Starting with factory default settings, I added 2 VLANS as follows: [code]
BUT....PC2 cannot ping PC3 - NOT WORKINGPC3 cannot ping PC2 - NOT WORKING [code]
View 8 Replies
View Related
Mar 29, 2013
I want to setup a simple VPN to allow users to access the office via the iOS (iPad/iPhone) devices. I assume I do this through:
VPN>IPsec>Basic VPN Setup
BUT, what do I enter for the "Endpoint Information" and "Secure Connection Remote Accessibility"?
View 1 Replies
View Related
Aug 18, 2012
I bought 2 RV180 to setup a VPN tunnel between a remote site and central office.The VPN tunnel is established, I can ping from central office to remote site but browsing on that server fails. [code]
Seems the routing is not really working through the VPN Tunnel.
View 4 Replies
View Related
Aug 13, 2012
I'm new to managed networking. So I'm having trouble understanding how to set up my switches properly. I have a closed network with about 20 switches and 2 IDF's. No router, and no internet. I have a SLM 2024 in want to have 4 ports set up with a VLAN. I have another SLM2024 I want to be on the same VLAN some where else. Switch 1 uses port 24 GBIC as and up link port to one of the IDF's. Switch 2 uses ports 12 and 24 copper(LACP) to make a hop from another switch(ports 1 and 13 LACP)which inturn is connected to the same IDF on port 24 GBIC. How do I set up switch 1 ports 7,8,19,20? Also, how do I set up switch 2 ports 7,8,19,20? VLAN 11
View 1 Replies
View Related
Jan 16, 2013
My fiance recently signed up for the Screen-wise Panel for Google research. Basically they monitor your TV usage and your internet usage. As part of the program they installed a Cisco WIFI router. I've got no issue with them logging the sites visited etc but I'm a little worried about them possible collecting private information (banking / work related stuff) that I don't want going out there. According to what I've read what's supposed to happen is they replace your router with the new Cisco router.The "technician" who came in and installed the router was actually a builder and not an IT technician and rather than replace our router he connected the Cisco router into port 4 of our router... I wasn't in at the time.
What I was looking to do is separate Port 4 of my router into a separate VLAN that can access the internet, but not access anything on ports 1-3, or the wireless. However, I want to be able to see everything on port 4 from the other side (in other words I want to see "into" the port 4 VLAN, but don't want them to see out). I also wanted DHCP to assign IP addresses correctly depending on where you were plugged in. In this example the first VLAN (your current router ip address) is going to be on 192.168.1.1, and the second VLAN (the new on we create on port 4) is going to be on 192.168.2.1.This is exactly what I'm looking to do, I could then connect the kids machines / tablets / ipods to the Cisco router and have the main machine and my work laptop on the main router... but I don't have a clue how to do it. </quote> Is this something that I am able to do with the Netgear router I own and is it hard to set up?
View 1 Replies
View Related
Aug 7, 2011
ASA 5505 and DMZ and Base License,"For example, you have one VLAN assigned to the outside for Internet access, one VLAN assigned to an inside business network, and a third VLAN assigned to your home network. The home network does not need to access the business network, so you can use the no forward interface command on the home VLAN; the business network can access the home network, but the home network cannot access the business network." Page 6-17.
This is exactly what I need. Mail server in DMZ, full access from internet to DMZ, and from inside network to DMZ, no access from DZM to inside network. If I good understand, this is possible with base license.
I successfully configure, internet Access for DZM and inside network, Mail server can be accessed from internet, as well as RDP on inside network. But I have problem to configure communication from inside network to DMZ. [code]
View 13 Replies
View Related
Apr 3, 2013
I have a Cisco RV016 router, with some ports configured in "Setup --> UPnP". Currently I have problems to configure new ports. I can create the service in "Service Management", but when I add this service to the list, I press "Save" and the router close the session. I need to re-login the router, and it don't save the changes.
However, if I add a service that was already exists before having this problems, the router save the changes (But the router close the session too).
The router has the last version of firmware since the first run.
View 4 Replies
View Related
Jul 6, 2011
how to setup and connect two RV082 routers together with a crossover cable between their WAN ports.This is to connect two separate LANS together via an ethernet connection. For staging we are setting everything up with a crossover cable in our shop. Ultimately the crossover cable will be replaced by a microwave link between the two LANS several miles apart. There will be no internet connection.
View 5 Replies
View Related
Apr 24, 2012
I have a RVS4000 and I am going to configure vlan in the near future. Among all other configurations sent by the internet provider company is this one :
Firewall NAT :
from x.x.2.0/24 to 0.0.0.0/24 should be NAT
from x.x.2.0/24 to x.x.0.0/21 should not be NAT
From all the other configurations, this one is not clear to me. Can this configuration be done on a RVS4000 and where can it be done.
View 1 Replies
View Related
Nov 19, 2012
I am using an SRP541W router and i am trying to configure 2 vlans, each one to use its own Wan:Here are the dhcprules and vlans:As can be seen, each one has its own wan interface.
Vlans:As can be seen, each vlan is using its own ports and dhcp rule, so, now they should be separate.
Both Wans are connected: So now (at least as i see things) the two vlans are separate and using different Wan. But the reality is different, everything is going out using Wan1.Also in the Interface Info you can see that the 2 vlans are listed under the Wan1.
The rest of router setting are default.
View 17 Replies
View Related
Jul 25, 2012
I have a dell powerconnect 2848 switch and setting up a vlan 3 an make port 1 mngt, port 48 uplink to layer 3 switch and tag vlan 1 and 3 to port 48 with cli commands for this setup. and also to untag ports 2-10 for computers
View 1 Replies
View Related
Nov 7, 2011
I have a Dell switch setup with 2 Vlan's. Vlan 1 is to the network. Vlan 20 is going to be for wireless access to the internet. How do I configure the switch/router so that Vlan 20 only connects to the internet and not the network? I will later want to have a 2nd SSID that I want to connect to both the internet and network.
View 5 Replies
View Related
Feb 17, 2011
I am setting up a 1921 with two ethernet WAN ports going to two seperate ADSL ISP's (via bridged modems) and one connecting to the internal LAN. There is a single e-mail / web server behind the router.
I have been reading the following which is exactly what we want to do, but I have questions. Maybe failover would be better because Load Balancing seems a little too quirky without BGP. url...
How do we define public static IP's, the example seems to show DHCP?In order to detect if a line is down, it has to ping an IP address that is specific to the connection - correct? So could I use the gateway for the ISP? The issue I have with this is the gateway might be up, but the Internet down. Next, we need to make sure that when someone visits one of our public IP addresses, the return data is sent through the connection requested. What we don't want is a situation where incoming connections are not working.From experience, load-balancing causes certain websites and SaaS applications to break because requests are coming from two different ISP's. Is this the case with OER? Finally, any links, config or something to advise how a fail over only configuration would work given we have internal servers (PAT/NAT inbound would need to translate properly with the failover IP)? Basically if ISP 1 goes down, I.E. router cannot ping 8.8.4.4 then it switches to ISP 2, until ISP 1 comes back online and switches back? This would need to change the NAT rules for inbound as described.
View 4 Replies
View Related
May 22, 2012
Our VMware guys want to use shared networking infrastructure to create a DMZ on a network.
[ASA (subif;VLAN 4)] <-trunk-> [DMZ Switch] <-trunk-> [LAN Core Switch] <-trunk-> [ESX vSwitch] <-VLAN 4-> [VM]
The DMZ Switch does not participate in VTP with the LAN but will have a VLAN ID created (same VLAN ID used from VM to ASA) No vlan interface will be created for the vlan
Is this a bad idea from a security or otherwise point of view? i.e. Best practices that should be followed here? Should I configure the link between the LAN Core Switch and DMZ switch as access ports so the port on each switch is forced to be on one specific vlan? I was going to use allowed vlans command to limit the vlans that can pass on it and possibly vtp pruning for all vlans.
View 2 Replies
View Related
Apr 7, 2012
i'm using an rv220W and i whant to know if is it possible to assign vpn traffic to a vlan when i setup an ipsec tunnel?
example:
Im using different vlans on my rv220W.
Vlan 10: engineers (ex: 192.168.1.0/27) no intervlan routing
Vlan20: sales (ex: 10.0.123.0/24) no intervlan routing
This is what i need: - An engineer is on the road and when he makes a ipsec vpn connection => assignd to the vlan "engineers" so he can access the server/pc's in that vlan.and when someone from the sales group starts a vpn connection he needs to be in the vlan "sales" so he can access his pc/data,...
View 15 Replies
View Related
Oct 3, 2012
I'm new at this stuff and very stumped. I have one WAP with multiple SSIDs that support VLAN ID (for a private and guest wireless network) and a managed switch that supports tag or port based VLAN ID. How do I set up the switch so that the networks are separate, but can still reach their own routers to get on the Internet? In case details are necessary, the WAP is a Cisco Aironet 1130AG and the switch is a Netgear FS750T2
View 14 Replies
View Related
Feb 2, 2012
I have to configure failover Active/Standby on my ASA 5510.I am wondering how i could do for the outside interface, i mean, actually the ASA1 outside interface is linked directly to our Internet router.So now if i have to add ASA2 connecting to that router i will need a switch between them.I have already a switch for DMZ & LAN.The thing is that i will have to allow 3 switchs ports to communicate with each others.
- 1 for ASA1--outside
- 1 for ASA2--outside
- 1 for Internet router
How could i isolate these 3 ports to make them communicate alone ? Should i use VLAN for that ?And if i use VLAN, will this require to make any change of configuration on my firewalls (ASA1 & ASA2) outside interface ?I am a bit lost with this, if i am correct i will not have to do some "vlan tagging" on the firewall itself ?
View 1 Replies
View Related
Mar 20, 2012
in my network i got a switch with 4 vlan's configured
-vlan 10
-vlan 20
-vlan 30
-vlan 40
in vlan 40 i have my domain controller for my existing domain.i have read that seperate vlan's can't have contact without a lollipop router ( router on a stick, inter vlan routing)i want that users in vlan 10, vlan 20 and vlan 30 can have access to my domain controller in vlan 40
but they can't have access to each other.
View 11 Replies
View Related
Aug 8, 2012
My problem, in a nutshell, is that clients do not get an IP from an external DHCP server when connected to a guest VLAN.
My current setup is:
Native VLAN 1 (192.168.2.x)
2008 DHCP Servers
2504 WLC
[Code].....
The guest WLAN just uses WPA and a PSK and is set to interface vlan101 There rest of the 2504 config is default.
The ports that the WLC and APs are connected to are tagged on the correct VLANs. (is that even necessary for the AP now?)
Ive changed the interface config around a hundred times now with no luck. No matter what a client will not get an IP.
Could this be due to the 2504 and ASA both acting as DHCP relays? Ive tried setting the IP of the DHCP on the dynamic interface to many different things with no luck.
View 10 Replies
View Related
Aug 10, 2011
I have a WRVS4400N that broadcasts two different SSIDs. One is a public network and the second is a private network. Right now, both SSIDs are pulling from the same DHCP server, but I would like to separate the public from the private. How can I separate these SSIDs by vlans? I can't seem to get the vlans to route to separate ports.
This is my vlan settings. I have two DHCP servers right now. One is in an isolated network plugged into Port 3 of the WRVS4400N. The other is on the production network, plugged into port 1 of the WRVS4400N. For some reason, whenever I connect to SSID Public, it won't pull an IP from the DHCP on port 1, it only pulls it from the one on port 2.
I know there is three SSIDs here, the Static one is going to be the same network as the EMS one.
View 4 Replies
View Related
May 21, 2012
i am first time to trying to make Vlans. I managed to do 2 vlans to SA520 to ports 1 and 2. But when i try to separatethem to SG300 with web management it doesnt work. Vlan 1 works fine, i untagged wanted ports and forbid vlan 2 ports.In Vlan 2 there vice versa, is this right way to do? Both Vlans has their own DHCP range as i do them to SA520.
View 2 Replies
View Related
May 12, 2013
I'm having trouble setting up a second IPSec VPN tunnel on my Cisco ASA 5505 to another office. I was able to setup the first one with no problem through the ASDM, but have not been able to get the second one up.The IPSec tunnel is connecting to a WRVS4400N router at the other office. I tried debugging crypto isakmp, and crypto ipsec, but I'm getting nothing. Below is the config. Does something look wrong on my end? I also attached a screenshot of the parameters setup on the remote router.
View 7 Replies
View Related
Apr 18, 2013
I have a Cisco 5508 setup an running with Cisco 3502 AP. with same SSID
however i need segment the network using 3-Diff VLANS:
1. vlan 1-----students
2. vlan2----- Visitors
3.vlan3------ Staff
the students and visitor are not ment to login to the corporate network, however the staff are to be login using their Active Directory User name and Password how to i achieve this ?
View 4 Replies
View Related
Oct 22, 2012
I have a RV110W which is am using as a router (not gateway), because it is connected to the DSL modem (not planning to bridge it) through its WAN port. The DSL modem forwards all PPTP traffic to the RV110W.The only pupose of the RV110W for me is to use it as a VPN router.
Info:
Firmware version: 1.1.0.9
Below are the settings I have:
WAN:
LAN:N.B. The modem runs a DHCP server, so I am relaying the requets to it
VPN:N.B. Also tried with 192.168.0.0 and 12.168.2.0 networks; same thing.
Routing Settings:
Routing Table:NB: 192.168.1.11 and 10 are VPN clients (created automatically).
Firewall:Users are being able to successfully connect to the VPN; however, there are couple of problems:
1. They are not assigned a gateway; hence, not internet connectivty (i want them to use the remote gateway)
2. They are not able to access the 192.168.0.0 network; hence unable to reach their DNS server and other hosts (run a tracert; they couldn't go beyond the RV110W VPN server IP). For this, i tried to turnoff the firewall on the RV110W, and also tried to create and Access Rule to allow all outboud and inbound traffic between LAN and WAN, but no success.
View 1 Replies
View Related
Jul 6, 2012
My ip address of my WRVS4400N changes every so often. when i use the ip assigned to connect remotely, it works until the ip is re-assigned through dhcp. I know there is a way around this bu ysing a name or something. I just don't know how to set that up.
View 1 Replies
View Related
Dec 11, 2012
how to setup a separate SSID for guests (without a password).
Basically, we have one SSID now called Mnet which has a WPA2 password. For guests coming in i want Mnet Guests where people can connect without needing a password. They should be able to use internet but not connect to LAN devices, how to accomplish this with this WAP321?
View 7 Replies
View Related
Nov 27, 2012
I am trying to set up a Vlan on an SF-302-08 small business switch. I would like two Vlans both with internet access but the two cannot communicate with each other. I am not really sure how to go about setting this up as its all fairly new to me. I have successfully set up the Vlans and the ports on each VLAN cannot communicate with each other however the internet access will only work when plugged into either VLAN but wont work on both together
View 1 Replies
View Related
May 7, 2012
I am using a WLC 5508 and its internal DHCP server. I cant find anywhere I can setup option 43. However, the access points are connected in just fine. Do I need to worry about setting up a seperate DHCP server to get option 43 setup properly?
View 7 Replies
View Related
