I have a cisco 1841 and I am hooking up some cameras onto my network. My global IP is 64.190.170.2 and my internal IP which is going to my cameras DVR is 192.168.1.15. I need to be able to forward port 8080 from my global IP to my local IP so i can view my DVR remotely. What is the command i need to put in my Cisco 1841 to forward this port?
View 2 RepliesI'm trying to develop and test a website from my iPad. I have my laptop and iPad on same local network, 192.168.1.xThey can see each other over network and I can access the page:192.168.1.105:80 (my laptops local web server) from both iPad and laptop. However the application server runs on port 8080 and I cannot access this from either device/machine. the router's firewall is playing a role, and I have no software firewall running on laptop that I'm aware of (turned off windows 7 firewall).localhost:8080/myWebSite or 127.0.0.1 also works on port 8080.The only combo that does not work is 192.168.1.105 with port 8080. I need this so the iPad can hit the site so I can test locally while developing.
View 4 Replies View RelatedI need to forward port 2875 from any public address to an internal address 192.168.20.103. I am not getting something right because it will not work. Below is my config.
Current configuration : 11012 bytes
!
! Last configuration change at 23:30:24 UTC Fri Apr 12 2002 by cisco
!
[Code]....
I need getting access to my http server. I have a host name that I configured to point to my IPS IP address. Port 80 is enabled on my server, but I can't seem to get access it from my web address [code]
View 5 Replies View RelatedI want to SSH into a Cisco 1841 router and depending on the suffix added to the SSH (i.e ssh myrouter.myroute.com 2002), would like it to forward this request to a terminal server.Can this be done? If so, how does one accomplish this? I have done something similar with RDP but I was not sure about SSH.
View 3 Replies View RelatedI have got a Cisco router connected to a LAN and to the internet.I was wondering if I could nat https traffic from inside to internet to a local server (Proxy) on a given port for example tcp 8080.
int tunnel0
ip address 192.168.0.1 255.255.255.0
ip nat inside
int fa0/1
des internet connexion
ip address 41.x.x.x.x 255.255.255.248
ip nat outside
ip access-list extended Proxy_Redirect
permit tcp 192.168.0.0 0.0.0.255 any eq 443
I am facing authentication issue with ACS 5.2. Below is AAA flow (EAP-TLS),
- Wireless Users >> Cisco WLC >> ADs <-- everything OK
- Wireless Users >> Cisco WLC >> ACS 5.2 >> ADs <-- problem
Last time I tested with ACS, it worked but didn't do migration as there'll be changes from ADs. Now my customer wants ACS migration by creating new Group in AD, I also update ACS config. For the user from the old group, authentication is ok.For the user from the new group, authentication fails. With subject not found error, showing the user is from the old group.
Seems like ACS is querying from old records (own cache or database). Already restared the ACS but still the same error.
Note: My customer can only access their local ADs (trusted by Global ADs). Local ADs & ACS are in the same network, ACS should go to local AD first.How can we check or make sure it?
I have a 1841 with 12.4(16) IOS.In my configuration I have to interfaces for internet access, without vrf:
interface ATM0/0/0
dsl operating-mode auto
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
[code]....
This two interfaces are in the global route table because there is no vrf indication. These are for internet access (a simple adsl connection) Then, I have this interface in VRF named "lan123"
interface FastEthernet0/1.23
encapsulation dot1Q 123
ip vrf forwarding lan123
ip address 192.168.143.254 255.255.255.0
ip nat enable
Now the issue.If I write:
ip route vrf lan123 0.0.0.0 0.0.0.0 Dialer0
this works and, with nat, internet works. The question is why this works without the "global" keyword? I'm going from the vrf named "lan123" routing table to global table without the using of "global" keyword.
If I try to use:
ip route vrf lan123 0.0.0.0 0.0.0.0 Dialer0 global
there is an error indication.
how do I block / unblock ports in ASA Firewall 5500 series?
View 2 Replies View Relatedshow cdp neighbors command shows two devices connected through the same local port?I have a Cisco 3560 that when I issue the "show cdp neighbors" command I get the following results: [code]
the question is why is this showing that Gig0/3 is being used twice to connect to two different devices. I have verified there is no hub connected to this port and in fact Switch3 is not connected to Switch1 at all yet it still shows up in the CDP table.
I have cleared the CDP table on every device at this location and still get the same results.
wondering if redirection or conversion port 8080 into port 80 is possible? if so how and what cisco equipment can do that?
View 11 Replies View RelatedI need to redirect all http and https traffic from one source in a dmz network, to port tcp/8080 on a proxy server on the inside network.
The source device doesn't handle proxying very well, so i've been advised to redirect the tcp/80 and tcp/443 ports to tcp/8080 as it passes through the firewall.
Scenario is thus:
PIX 515E 6.3 (5)
DMZ server: 172.31.255.250 (Real IP), 10.44.181.236 (NAT IP)
Inside Proxy server: 10.44.132.28 (Real IP), 172.31.255.110 (NAT IP)
I've configured a static NAT redirect using the following command: static (inside,dmz) tcp 172.31.255.110 www 10.44.132.28 8080 netmask 255.255.255.255 0 0
When I try to add the next command of: static (inside,dmz) tcp 172.31.255.110 443 10.44.132.28 8080 netmask 255.255.255.255 0 0
I get the following error: ERROR: duplicate of existing static
Is there a work around for this at all or am I stuck with the limitations of the software?
I am trying to scan a directv device that is connected on my lan it uses port 8080. My hardwired machine returns the expected data, any call from a device connected via my wireless network returns a page can not be displayed. It appears as if the router is blocking ports 8080 over wifi only.
View 4 Replies View Related I am facing problem about dot1ad global configuration command and my topology is here;
Notebook >> (access vlan 100) SW2960 (trunk)>> (trunk) C6500
First time I have create SVI interface on C6500 and enable trunk on interface that connected to SW2960 and SW2960 assigned access vlan 100 on port connected to Notebook. Then I tried to ping from Notebook to C6500 on SVI100 which work fine.
Second time I tried to enable MST on C6500 and after that everything still working and I can ping from Notebook to SVI100 on C6500.
Third time I tried on turn on dot1ad in global configuration mode and from now I can't ping from Notebook to C6500.
Forth time I tried to disable dot1ad from global configuration by "no dot1ad" command and then I can ping.
My intention is I would like to do EVC which require dot1ad in global configuration but I stuck in third step and don't know what's does it mean for this command and how I can resolve this issue?
Information on C6500
IOS Software (s2t54-ADVENTERPRISEK9-M), Version 15.0(1)SY1
Processor SUP-2T
Linecard WS-X6824-SFP
Unable to enter global QoS commands on the 4500E chassis? We're using 12.2(53)SG. If I go to 'conf t', there is no 'qos' command. In the configuration manuals I've seen for the 4500, the following commands seem to be supported:
qos
qos trust dscp
qos dbl
qos dbl exceed-action ecn
qos map dscp 0 to tx-queue 2
qos map dscp 8 10 12 14 to tx-queue 1
qos map dscp 16 18 20 22 to tx-queue 4
qos map dscp 24 26 28 30 to tx-queue 4
qos map dscp 34 36 38 to tx-queue 4
[Code] .....
ES20+ QoS. As I understand for these cards QoS is MQC; i.e. similar to that of normal WAN cards
1- If i have 7600 with ES+ card only then I dont need to configure global command "mls qos" and the concept of trust boundries "mls qos trust dscp" will not exist , correct ?
2- For below output, why "show mls qos queuing" is giving an O/P similar to that of WS-X6xxx LAN modules.Also why it is WRR when scheduling is not configured.I expected that command will not work with this module as it is similar to WAN modules.
So I need to forward certain ports to play/log-in game:
TCP: 80, 443, 2099, 5222, 5223, 8393-8400
UDP: 5000:5500
I did forward them in my router and checked them with PFPortChecker, every port seems to open except 2099, I don't understand why.Note that I disabled Windows Firewall, Router's Firewall, and I'm using Kaspersky Internet Security which I disable while checking ports/logging to game
I own an E4200 and my wife and I use Goodreader on our ipads at home. To add docs to goodreader we need to connect to the ipads ip on port 8080 but the E4200 is blocking all traffic for it. How can I open port 8080 for our 2 ipads?
View 1 Replies View RelatedWhy the IOS on 4500 doesn't support globally, although am running the IOS 12.2,need for logging event link-status global.
View 3 Replies View RelatedI'm trying to forward ports for game connections. For this particular game, I'm trying to forward port 7777My ports aren't forwarding according to: Open Port Check Tool - Test Port Forwarding on Your Router and Open Port Check Tool[CODE]
View 13 Replies View Relatedi want to open portforward to utorrent in arouter but i cant open the addres of the router lookand when i go to local area connection status /status/detailsi found number of ip but there is no gateway i take whole ip and put them in browser and its dont open but the last friday i wake up in 3am run cmd and put ipconfigi found the gateway 192.168.2.45put it it in browser its open want username and pass i know them but i see lets doit next day going to bed next day the gate way reverse to the stupid gateway in in the pic i cant use aprogram to open port as i cant knowing my router mode
View 1 Replies View RelatedI came across an interesting issue and thought I would see if anyone else has encountered it before contacting TAC.I have two Cisco Catalyst WS-4510R-E switches with a single Supervisor V module in each chassis. Both Sup cards are now running 12.2(54) SG1; ipbasek9 firmware; yes, I plan to move both switches to 15 code but that's another story. Anyways, prior to the upgrade the one switch was running 12.2 (33) code; I suspect the code was never upgraded; running ipbase non - K9 code. The other switch was running 12.2(44) with K9 prior to upgrade to 12.2(54).
View 2 Replies View RelatedI have two Cisco Catalyst WS-4510R-E switches with a single Supervisor V module in each chassis. Both Sup cards are now running 12.2(54) SG1; ipbasek9 firmware; yes, I plan to move both switches to 15 code but that's another story. Anyways, prior to the upgrade the one switch was running 12.2 (33) code; I suspect the code was never upgraded; running ipbase non - K9 code. The other switch was running 12.2(44) with K9 prior to upgrade to 12.2(54). With the background set, one switch reports the following:SwitchA (config)#r?radius-server redundancy regexp represourc rmon route-map router.
View 4 Replies View RelatedI have one server 172.16.0.100 and i nat this server to a public ip X.X.X.5 and i open RDP for this public ip.Now when i access Remote desktop on this public ip x.x.x.5 it open perfectly.Now my senario is that i want to open a http url on port 5555,server ADMIN open port 80 for this URL on LOCAL lan(http://172.16.0.100:80)So how can i map port 5555 to port 80 on ASA 5520.so when i hit URL [URL]
View 5 Replies View RelatedRegion : Italy
Model : TD-W8968
Hardware Version : V1
Firmwae Version : latest
ISP : telecom italia business on ipatm
How to Forward an external wan port like 49150 to lan ip on port 22?In the control pannel I can set only one port , and this port will be the same where the connection will be router to the lan ip ,therefore If I set the port 22 , the connection will be natted to the 22, but how to set a different external port to a specified different lan ip port?
I have a server that I lease that is hosted at a datacenter. Our company is going to lease a half rack and put our own equipment in it as well as a disaster recovery site. The problem is that the one server I mentioned has SQL on it and we have applications that were devloped in house ages ago that hit that SQL instance. Those applications are hard coded to the IP address of that server. We could just change it in the code, but the source code for one of the applications have disappeared over time. Now that you know my situation, my question is this. Can I make a NAT rule or something that says when traffic is destined for xxx.xxx.xxx.123, to re-routes it to xxx.xxx.xxx.321? Currently our endpoint device here is a Cisco UC520. The other end we have no control over.
View 2 Replies View RelatedI have a server that I lease that is hosted at a datacenter. Our company is going to lease a half rack and put our own equipment in it as well as a disaster recovery site. The problem is that the one server I mentioned has SQL on it and we have applications that were devloped in house ages ago that hit that SQL instance. Those applications are hard coded to the IP address of that server. We could just change it in the code, but the source code for one of the applications have disappeared over time. Now that you know my situation, my question is this. Can I make a NAT rule or something that says when traffic is destined for xxx.xxx.xxx.123, to re-routes it to xxx.xxx.xxx.321? Currently our endpoint device here is a Cisco UC520. The other end we have no control over.
View 2 Replies View RelatedIs it possible to create a service which will forward public port 9010 to an internal IP address with port 23?First of all, I do not like to open the public Telnet port to the inside so I would use another public port and second my ISP does not allow some public ports beneath port 80?
View 1 Replies View RelatedI'm trying to forward ports for SQL and VNC using these commands in the CLI:
ip nat inside source static tcp 192.168.1.150 5900 interface GigabitEthernet0 5900
ip nat inside source static tcp 192.168.1.150 5800 interface GigabitEthernet0 5800
ip nat inside source static tcp 192.168.1.150 1433 interface GigabitEthernet0 1433
where 192.168.1.150 is my server (that hosts SQL server and that I want to be able to connect to remotely using VNC) and GigabitEthernet0 is my configured WAN interface.
When I try to connect from an external client I get the error: "Failed to connect to server..." Is this a firewall issue? How do I get round it? The 819 is the only router/firewall in my network.
I am trying to enter this command in Cisco 2960 but the device is not accepting it. Is this because of IOS or this command is not available for 2960?
View 1 Replies View RelatedI have only recently noticed a HUGE decrease in my Utorrent speeds, so i thought i would have a gander and lo and behold.apparently the port Utorrent uses wasn't open. Now, i have tried about 10 different port numbers, made sure Utorrent is being accepted by Norton 360 Firewall,followed complicated directions to (i think) foward ports, and also follow directions to open a specific port.Nothing has worked so far, Utorrent still comes back with a port closed error.
View 1 Replies View Relatedwe have a 2800 series router functioning as our internet router and it will only forward packets to addresses with host entries in the routing table even if the network is directly connected.
View 18 Replies View RelatedI have some questions about how to configure my Cisco 1941 with a routed subnet from my ISP to forward them to 1 or more servers in my LAN.1 Routed subnet /29 from my ISP (over a fiber connection).In my LAN I have (at the moment) 3 servers, and about 15 clients.I would like to use the first ip address from the routed subnet for internet traffic from all the clients in the LAN.I would like to use the second ip address from the routed subnet for server1 so that server1 accept some allowed connections and that server1 connects to the internet with the second ip address from the routed subnet
I would like to use the thirth ip address from the routed subnet for server2 so that server2 accept some allowed connections and that server2 connects to the internet with the thirth ip address from the routed subnet.I would like to use the fourth ip address from the routed subnet for server3 so that server3 accept some allowed connections and that server3 connects to the internet with the fourth ip address from the routed subnet.[code]