Cisco Switching/Routing :: 1841 - Connecting To Hosted Websites
Jan 10, 2013
Here's my setup:
- Cisco 1841 connected to the internet on fa0/1
- LAN connected to fa0/0/1 (switch port, connected to Vlan1)
On my LAN I have a web server that houses different websites. Those websites have DNS records that point to my public IP address, located on fa0/1. From the outside I can reach the websites perfectly, but I can't reach them from the inside. So it looks like I can't seem to connect from my local LAN address to the public ip address on the Cisco (who then should NAT it to the correct server)
Here is a snippet from my config:
--NAT--
ip nat inside source static tcp 192.168.0.3 80 interface FastEthernet0/1 80
ip nat inside source route-map Internet interface FastEthernet0/1 overload
--OUTSIDE INTERFACE--
interface FastEthernet0/1
description WAN
ip address dhcp
ip access-group WAN-IN in
[ code]...
--INSIDE INTERFACE--
interface Vlan1
description LAN
ip address 192.168.0.254 255.255.255.0
ip access-group LAN-IN in
[Code]....
View 3 Replies
ADVERTISEMENT
May 4, 2013
I have a Cisco ASA 5505 in my home office which has a few PCs behind it with a linux web server running some websites. I can access the websites from outside no problem (i.e. on my iPhone using a 3G connection). However, I struggle to access the websites from within the network. The ASA gives me this error: [code]
View 3 Replies
View Related
Mar 11, 2010
We have 2mbps leased line and have Cisco 1841 which is managed by our ISP. I have hooked up another 1841 (please find basic config below, it will get more complex lateron) Now when I connect my laptop I am able to browse Internet. But when I conect VOIP phone, it is not able to contact it's Hosted Server on Internet.
VOIP phone is Polycom SoundPoint 550 and I get URL call disabed message. If I try netgear Firewall everything seems to work.that the voip provider needs following ports UDP Range 16384 - 32766, TCP 5060 & UDP 5060. But in my config all outbound traffic is allowed. [code]
View 6 Replies
View Related
Feb 12, 2012
I'm trying to configure an IPSEC VPN + tunnel for multicast data. When the default gateway is set on the router (1841) it works fine but if I only set a route to the IPSEC peer via our gateway then the tunnel fails to come up. The end point is to a 3rd party. [code]
I found that if I add a static route for the tunnel destination via fa0/0, the public facing interface, the tunnel comes up..ip route 10.23.4.2 255. 255. 255. 255 FastEthernet0/0
and I can then ping the tunnel IP at the far end - 10.23.0.5.Why would that be? Is there a better way to do this without using a default route??
View 4 Replies
View Related
Oct 22, 2012
While I managed to connect to each router individually, I decided it was time to connect the routers together via serial; as I don't have any serial cables and need to buy some, what serial cables I need, as well as to ask whether I have the right cards in my router(s) that will allow me to do so.
I bought 3 1841 routers, and all have a 1 port serial WAN Interface Card (WIC 1-T); one router has 2 of these, and one router has a WIC-1B-S/T .. My question is, can I connect the routers with a serial cable via WIC 1-T, or do I need a 2-T
View 1 Replies
View Related
Jan 12, 2011
I need to allow only a few Internet websites from Cisco 1841 Router for my LAN users. What Access-List should be used for this.
View 4 Replies
View Related
Feb 1, 2011
Can I configure a cisco router 1841 to block specific sites?
View 4 Replies
View Related
Feb 18, 2011
just configured a 1841 router and im trying to figure out why some websites work and others dont - when i put in a small TP-LINK everything works fine so its not my ISP
my config:
Building configuration...
Current configuration : 3057 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname RT1841!boot-start-markerboot-end-marker!logging message-
[Code]....
View 6 Replies
View Related
Jan 25, 2011
Is there an easy way to allow specific websites access in cisco router 1841? I am trying to allow a website through access list 102 but not working. I am using access-list 102 permit ip host 192.168.21.20 host www.website.comIf i allow all websites then it works fine.
View 1 Replies
View Related
Apr 5, 2011
I have got a PC at work (Windows XP Pro SP3) that is on two networks with the IPs 10.20.30.167, subnet 255.255.255.0 (internet enabled) and 10.0.0.20, subnet 255.255.255.0 (no internet). On the 10.0.0.X network there is a gateway with the IP 10.0.0.200 allowing access to another network; 192.168.60.X, subnet 255.255.255.0 (no internet). I have added the route on my work PC to access the 192.168.60.X network via this gateway and I can access all PCs on all three networks from this PC.Now, I am using LogMeIn Hamachi so that I can access the networks at work from home. The PC at work is the 'gateway' PC on the Hamachi network. When installing Hamachi it created a new network connection and bridged this connection with my 10.20.30.167 network adapter to allow access to the 10.20.30.X network from an external PC when connected using the Hamachi VPN connection. I have manually configured my Hamachi connection on my PC at home to the IP 10.20.30.169, subnet 255.255.255.0, with the default gateway set to 10.20.30.167. I can ping all computers on the 10.20.30.X network from my PC at home.
I then added a route on my PC at home for 10.0.0.X to go via 10.20.30.167 (the 'gateway' on the Hamachi network). I also enabled IP forwarding on the 'gateway' PC (my PC at work). I can not ping any PC on the 10.0.0.X network from my PC at home apart from 10.0.0.20 (the other NIC in the Hamachi gateway PC) and 10.0.0.30 (another PC on the 10.20.30.X network that is also on the 10.0.0.X network).Now, with IP forwarding enabled on the Hamachi gateway PC I would assume after adding the route on my PC at home for 10.0.0.X traffic to go via 10.20.30.167 that I would be able to ping all PCs on the 10.0.0.X network...I also tried adding a route on my home PC to send all traffic for the 192.168.60.X network via 10.20.30.167 which has a route via 10.0.0.200 to the 192.168.60.X network, but this also did not work.I then tried adding the 10.0.0.20 network adapter into the network bridge that the Hamachi connection made, also keeping both IPs (10.20.30.167 and 10.0.0.20) on this network bridge by adding them into the 'IP Settings' in the 'Advanced TCI/IP Settings'. I also added the 10.0.0.200 gateway for good measure. I still cannot ping any PC on the 10.0.0.X or 192.168.60.X networks from my PC at home.
I have also added the route to the 10.20.30.X network on a PC on the 10.0.0.X network to go via 10.0.0.20 and tried pinging a PC on the 10.20.30.X network but this also has not worked. Also setting the default gateway on a PC on the 10.0.0.X network to 10.0.0.20 does not allow this...Surely bridging the networks 10.20.30.167 and 10.0.0.20 on my work PC would allow another PC on the 10.0.0.X network to access the 10.20.30.X network after adding the route or setting 10.0.0.20 as the default gateway?
View 2 Replies
View Related
Dec 26, 2011
How can i create an top 10 list of the most popular website that users connect to through the ASA Firewall.
i have enabled HTTP inspect, and setup an Syslog server (S plunk), that collects all HTTP entries in the log, but i don't know how, to create an top list in s plunk.(don't if it is possible)
is there a better way to do this ? e.g. URL filter with web scene or IPS
View 1 Replies
View Related
Nov 10, 2011
I can only connect to the development server when I am logged into the VPN (Cisco VPN)I do most of my work on my desktop, which is running XP sp3. While logged into the vpn there, I can reach the SVN and FTP servers fine, but I cannot connect to the development website to view anything.I also have a laptop that is running windows 7. When I connect to VPN on that, I can connect to the website just fine. It is all from within my house so using the same router / cable modem / internet service. Both have installed the latest Cisco VPN softare, and use the same profile to connect.The differences are, windows 7 vs Windows XP. Windows 7 is running Microsoft Security Essentials and XP is running Comodo.
However, even when I turn off Comodo on XP I still can't connect to the website. (Just FYI, I also have XP as dual boot on the laptop and tried connecting from it but no go). I am getting absolutely no assistance from the company I am working on, so really can't ask them anything, I guess it is something I have to figure out myself.But it is frustrating me. I prefer to work on my desktop and it is set up in with all my development tools etc in a nice environment, where the laptop is noisy and slow and not a preferred work place.
View 11 Replies
View Related
Feb 6, 2012
I'm just getting started with cisco kit so you will have to bare with me.I have a cisco 1841.i have a very wierd issue of routing...i cannot ping and browse through this.
View 3 Replies
View Related
May 31, 2013
I have a problem accessing my wireless router through VLAN sub-interface on my Cisco 1841 router. My hardware:
Cisco Catalyst 2960 switch (192.168.100.4 /24)
Cisco Catalyst 3550 switch (192.168.100.6 /24)
Cisco 1841 router (192.168.100.7 /24)
Asus RT N66U wireless router (192.168.100.2 /24)
Here's my network topology:
I have two VLANs - 10 and 20. 2 DHCP pools are configured on 2 1841's interfaces - 192.168.1.0 /25 and 192.168.1.128/26 with default router sitting on 192.168.1.1 and 192.168.1.129 respectively. No issues with obtaining IP address from any of those pools.Laptop connects to L3 3550 switch (switchport access vlan 10), which, in turn, connects to 1841 router through trunk (with VLANs 10 and 20 allowed).3550 is connected to 2960 through trunk with VLANs 10 and 20 allowed.Wireless router is connected to 2960.I can successfully ping my wireless router and outside world from 1841 from fa0/1 interface, but not from fa0/1.10 or fa0/1.20 sub-interfaces - all packets got dropped. My laptop can obtain IP from both pools (depending on port I connect it to), but can't ping my wireless router and anything beyond it.
I attach my configs:Cisco Catalyst 3550:interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk switchport port-security mac-address sticky speed 100!interface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/3 switchport access vlan 10 switchport mode access!interface FastEthernet0/4 switchport access vlan 20 switchport mode access!Cisco 1841:
ip dhcp pool Vlan10DHCP network 192.168.1.0 255.255.255.128 default-router 192.168.1.1 dns-server 208.67.220.220 domain-name home.local
!ip dhcp pool Vlan20DHCP network 192.168.1.128 255.255.255.192 default-router 192.168.1.129 dns-server 208.67.220.220 lease 0 12
interface FastEthernet0/1 ip address 192.168.100.7 255.255.255.0 duplex auto speed auto!interface FastEthernet0/1.10 description VLAN10 Sub Interface encapsulation dot1Q 10 ip address 192.168.1.1 255.255.255.128!interface FastEthernet0/1.20 description VLAN20 Sub Interface encapsulation dot1Q 20 ip address 192.168.1.129 255.255.255.192!
Routing table on 1841:
[code]....
View 19 Replies
View Related
Jan 12, 2013
I've been having a really annoying issue with my computer not connecting to the internet wirelessly I start the computer, and a connection is there via my router for about 30secs-2mins. After this, I can't access any websites. The full five bars remain white and the router is still seen by the computer, but there is a small yellow exclamation sign in front of it, and a mouse-over says "no internet access". I can still access when wired to the router through a cable, so I thought it might be an issue with my wireless card, but wireless USB adapters don't make a difference, even when I've disabled the wireless card. My drivers are all up to date, and I've even tried a full reformat and reinstall of Windows 7, to no avail. Other devices (a couple of computers and phones) can connect to the router fine, and the network even tried a new router, with no success. I have experienced this immediately after the reinstall, before either firewall (I use ZoneAlarm Free) or AV (I use Avast! Free) were installed, and I'm completely stuck.
View 19 Replies
View Related
Sep 2, 2012
I have a Cisco 1841 router at home with version 12.4(13r)T advanced ip services. The setup is extremely simple:
1) PPPOE dialer to my service provider over ADSL
2) Nat overload on the dialer interface.
3) 2 V LAN s one for home network (wired) and one for wireless both v LAN's are connected through interface v LAN s respectively.
My problem is when I configure static NAT to map RDP or any other protocol to inside hosts this does n`t work.
"
ip nat source static tcp 192.168.20.3 2222 interface Dialer1 2222
ip nat source static tcp 192.168.20.3 3389 xx.xx.xx.xx 3389 extendable
ip nat inside source list 20 interface Dialer1 overload
"
When I open wire shark and sniff the traffic on home computer which is the one I`m trying to reach I can't see any traffic. And While performing Nat debugging I am also not able to see traffic going to that port (for example 3389).
View 7 Replies
View Related
Nov 16, 2011
I've got an 1841 router and am using NAT to expose certain IPs and ports to the outside world so that external users can see internal resources (namely, web sites). However, I can't seem to get it running such that I can visit the external IP address from inside the network and get the router to turn the request around so that it is redirected back inside the network. Shouldn't this be possible? Our previous router (a non-Cisco) was able to do this, but I can't seem to get the new one to do it.
A couple of key config lines:
interface FastEthernet0/0
ip address a.b.c.178 255.255.255.240
[Code].....
View 1 Replies
View Related
Apr 9, 2013
I tried to connect a 1841 to a Linksys with a static route. I am able to ping from a computer in the 1841 to a computer in the linksys network, but I can't ping from a computer in the Linksys network to a computer in the 1841 network?
View 7 Replies
View Related
Jan 5, 2013
I guess i am just getting old and forgot how this works, or i have an IOS load with an undocumented feature in it.A customer of ours wishes to have their exchange server appear to the outside world on a seperate IP address as their public pool address is.in the past this has not been an issue, however in the current configuration we are unable to get the source address to appear per the NAT statement it always sources on the overloaded IP. below is the relevant NAT config, am i missing something, or have i hit a IOS feature? [code] There is a 45% chance i have forgotten everything i learned on the NOC desk and a 50% chance that it is somethine really stupid and 5% IOS is broken
View 5 Replies
View Related
May 2, 2012
I want to SSH into a Cisco 1841 router and depending on the suffix added to the SSH (i.e ssh myrouter.myroute.com 2002), would like it to forward this request to a terminal server.Can this be done? If so, how does one accomplish this? I have done something similar with RDP but I was not sure about SSH.
View 3 Replies
View Related
Oct 28, 2012
What is the command to shutdown a cisco 1841 (say, to add a module)? I know how to reload / reboot, but does not seem to find any command with an obvious name.
View 1 Replies
View Related
Jan 19, 2013
I have an 1841 running Advanced Enterprise Services 12.4(22)T3 that is functioning as a DHCP server and DNS server. What I am trying to figure out how to do is have the DNS service respond to queries about the clients of the dhcp service. I have successfully enabled it as a caching server for other requests, like "google.com" and "cisco.com", but what about the hosts on the local LAN?
As an example, let's say a Windows computer connects to the network with the hostname "computer" and receives an IP address from the 1841 with the domain name "test.net". I would like the 1841 to serve DNS queries for "computer.test.net" with the IP address that it assigned.
View 7 Replies
View Related
Mar 7, 2012
We have a Cisco 1841 router that requires 2 levels of access, at the moment we have network admins logging in with a single username via SSH and with privilege 15 but we also need our helpdesk to login to run certain commands but not chaneg anything
View 4 Replies
View Related
Jan 3, 2013
we've to configure our router 1841 to use both 2 interface Fe for two different vlan (also the second has to go on internet).
Actually we have int Fe0/0 configured with an ip address 192.168.1.1 for lan1 192.168.1.0/24 and we will use the second int Fe0/1 with another ip address like 192.168.2.1 for lan2 192.168.2.0/24.
see below configuration:
[code]...
View 5 Replies
View Related
Oct 7, 2012
I've never had a router's CPU suddenly hit 99% and just stay like it for hours even after a reboot. This router really does nothing with regards to CPU, I'm looking at it's CPU history (via SolarWinds Orion NPM software that we use) and it is arounf 1-3% all the time for the past 2 years.
I did a show debugigng and it seems no debugging is running
View 9 Replies
View Related
Sep 12, 2012
We upgrade our Internet service in our India office which required a new router. The local vendor suggested an 1841, so that is what we have. It has two fastethernet ports on it.
The ISP (Airtel) provided the following IP address information:
Public WAN IP : 122.181.23.200/30
WAN IP : 122.181.23.202SUBNET MASK : 255.255.255.252GATEWAY : 122.181.23.201Pri DNS : 125.22.47.125Sec DNS : 202.56.250.5
[Code]......
View 5 Replies
View Related
Dec 28, 2011
what is the latest firmware for cisco 1841 ? is firmware and router IOS image are same ?
View 1 Replies
View Related
Jun 5, 2012
We currently have a Cisco 1841 router with version 12.4(1c) of IOS using image c1841-ipbase-mz.124-1c.bin. Our goal is to make it so our router can fully support IPv6. The current IOS version cannot. I've seen a site that seems to indicate 12.4T does support with IP Base image but recently had Cisco tell me with the latest IOS release 15.1.4.M4 that I have to use either the "Advanced Enterprise Services" or "Advanced IP Services" image. Did Cisco just remove IPv6 from IPBase in later IOS releases?
Also I've seen conflicting specs on the max amount of Flash and DRAM the router can support. The following link shows that 384MB is the max for DRAM and 128MB max for flash. We're looking to upgrade ours from 128MB and 32MB respectively but as mentioned I've seen it where higher amounts are supported. In fact we bought a backup 1841 to have and it has a 256MB Flash card in it.URL
Last but not least. Where can I find a straightforward documention of this situation where we may have to upgrade our Flash and DRAM and then upgrading the IOS?
View 3 Replies
View Related
Jan 18, 2012
I have a cisco 1841 running on a 10Mbps Metro-E connection. I recently signed an agreement for a 100Mbps Metro-E. I am wondering if I will need to purchase a new router to support this new connection or will my 1841 be able to handle the traffic.
View 5 Replies
View Related
May 2, 2013
I am trying to config the following setup in the Cisco 1841. Able to ping the IPs of Vlan1(FE0/0/1), Vlan2 (FE0/0/1) and FE0/1 IPs from corresponding networks. But packets are not flowing to other side.
View 3 Replies
View Related
Jan 9, 2012
we are trying to configure 1841 with dual Internet connection with failover using track.
View 4 Replies
View Related
Jul 2, 2012
I decided recently to switch out our border router (1841 12.4 advsecurity) with a shiny new 1941 (15.2 SEC/K9) as the CPU upgrade was needed.The core below acts as a VPN end point to various other remote offices we have, all of which have a similar network design at each end (and all entirely managed by me). All of these are still running 1841's with 12.4 advsecurity on them as well. These are all GRE tunnels with ipsec procection on them (not crypto maps). [code]
Everything else works fine (NAT, route-maps etc), it's just these IPSEC/isakmp tunnels that are not playing ballIt's definitely not an ARP issue (all arps were cleared) and ICMP appears to work fine (ie, I can ping the remote tunnel's public IP endpoint from the core using the loopback for that tunnel as the source). I am suspecting it's something strange with the stateful firewall config, but I did try and apply ipsec and isakmp-msft to the ip inspect list, with no success.
View 1 Replies
View Related
Dec 26, 2011
I have 3725 router with internal CF and external slot for CF. I tried upgrading and ended up deleting the iOS version on the internal flash, and can not now put the iOS back!! I turned it off.... so there was no active iOS..
I have tried formatting the CF card on an 1841 but the 3725 won't read it. It is obviously stuck at ROMMON
What is the correct way to format a CF card so my 3725 will read it and I can get an iOS back on it!!
View 1 Replies
View Related
