Cisco Switching/Routing :: How To Add SSL VPN To 891 IS Router
Jun 26, 2012
I have an 891 router setup to support 4 VLANS with 4 DHCP pools. The router is in place at a charity HQ and I have been asked to setup remote access for around 8 users who will need to be able to connect to a NAS drive via IP on one of the VLANS. I have had some experience with SonicWall devices that use SSL VPN's and would like to do similar here.Can someone start me on the right track to get this working.
- Presumably I need an SSL-VPN license for the router.
- What sort of client will my Windows and Mac based clients need? (with sonicwall it was a proprietary cilent called NetExtender)
- Any other pointers or comments?
I'm not a Cisco engineer, but did manage to set the network up thus far. Everything about this charity is non-profit / cost including the support staff like myself
View 0 Replies
ADVERTISEMENT
Oct 7, 2012
I configure HSRP on Router 2951 as a primary router, and Router 2811 as backup router. But when I am switching off my Primary router the backup router is taking 2 mins to take over form primary router.
[code]....
View 4 Replies
View Related
Feb 16, 2012
Any "best practices" or recommendations on how to migrate from a fixed router (3745) to vlan routing on Catalyst 4507 switches in order to minimize the disruption to the network.
View 4 Replies
View Related
Nov 7, 2012
I have an ASA 5510, with Ethernet0 connected to Internet via a T1 line, Ethernet1 connected to LAN1, and Ethernet2 connected to LAN2. LAN1 & LAN2 are independant, but share the Internet connection, via the T1 line. On LAN2, I have another router that connects to the Internet, via a Comcast line. I wish to route some of the traffic on LAN2 (10.38.77.0) to the other Router, on LAN2 (10.38.77.12) (connected to the Comcast line). I have entered the following lines:
route inside2 10.11.0.0 255.255.0.0 10.38.77.12 1
route inside2 10.252.0.0 255.255.0.0 10.38.77.12 1
route inside2 172.22.6.0 255.255.255.0 10.38.77.12 1
I can trace the routes from the ASA 5510 (1st hop is to 10.38.77.12), but not from anything else on LAN2.
View 7 Replies
View Related
Mar 6, 2012
When mutiple Policy based routing configured on 7600 routers, did the router performace degraded with the number of policy based routing rules?Also, did 7600 running 12.x use per-flow based routing or per packet based routing?
View 1 Replies
View Related
May 8, 2012
I have an environment of 3 X 3560G of which I have 1st switch-CORE(f0/10) connecting to the VPN router(CE) interface-f0/0. Remaining 2 Cisco 3560's(Access) are connected to Gi0/1 and Gi0/2 on the 1st switch-CORE via gi0/1 . On all three switches I have created multiple VLANs and assigned ports to these VLAN. The switch to switch connection is trunk allowing all VLANs created on all these 3 switches. Now the issue is how I am going to have all these VLANs routed through single interface on the routeri-e f0/0, as all these subnets will communicating to remote site over VPN. What should be default gateway on the 2 Access switches and the CORE switch, also what static route should be on router to reach all subnets(VLANs) created on these 3 switches.
I have read inter-VLAN routing i-e creating sub interfaces on router but dont want to proceed with that and looking for any other way to have my VLANs talk on all three switches and then are accessible to remote site ove VPN?
View 9 Replies
View Related
Dec 9, 2012
I have an 1811 with several subnets connected to it.I recently installed a 3750x plant and want to bring my interior routing back to it.
All the routing is handled by the 1811 via secondary interfaces on vlan1?
I have 192 ports, and subnets show up on almost all of them. None of the ports are assigned to any specific vlans. Most ports have several subnets on them.
What is the best approach to getting the 3750x to handle the routing?
View 18 Replies
View Related
Nov 14, 2012
We have small which I'm looking to implement and have built this on GNS3.
We have:
Router A in site 1
Router B in site 2
Router C in site 3
Router A and B are connection via a point to point 100M link and from Router C we have a 2 point to point one of which is 5Mpbs and going to Router A and Router B.
For Router C to reach Router A network it will go via Router B and these are 100M connection. When the link between Router A and B goes down. Router C should update and start using the 5m route.
For some reson, the routes are not updating. I have to do 'clea ip eigrp ne' for the routes to update and if I reload the routers all works well, it seems the problem is intermittent.
View 13 Replies
View Related
Feb 21, 2013
I’ve been trying a few days now to implement multicast routing on my home network in order to make airplay work between subnets. Specifically between an iphone and a hifi separated by different vlans. Failed, as I have no experience in multicast routing. we have a clean configuration and simple network which consists of two SVIs
Vlan 10: 192.168.1.0 255.255.255.0
Vlan 20: 192.168.2.0 255.255.255.0
ios platform cisco 887
View 5 Replies
View Related
Jul 27, 2009
I m having 2500 series router. when i boot router automatically get into router(boot)> . how to solve?
View 6 Replies
View Related
Oct 25, 2011
I have an 881 router here in house and am attempting to enable the gui interface on the router.
I have tried the steps to enable http but have not had any success. Below is the IOS Version and the portion of the show config that reflects the http allow:
ROM: System Bootstrap, Version 12.4(15r)XZ2, RELEASE SOFTWARE (fc1)
Cisco 881 (MPC8300) processor (revision 0x100) with 249856K/12288K bytes of memory.
Processor board ID FTX1249Y16Q
[Code].....
View 4 Replies
View Related
Jun 19, 2012
I am a service provider, with the task of installing a systech device at a site, and was told all I needed was DHCP enabled and dynamic IP for the internet. The site just put in broadband and their router has a single port. I picked up a linksys dsl router to use as a router/switch to enable more ports for the internet. If I hook the broadband router into the internet port of the linksys, I can not get internet access on my laptop through it. If I hook the broadband to port 1 and my laptop to port 2, I have internet access. If I hook the systech device to port 3, the support team says they cannot see the device. But, if I hook the broadband directly to the systech box, they can find the mac address and download to it. I have set the linksys to default settings, but will not work.
View 2 Replies
View Related
Nov 15, 2011
I've got working PAT, but absolutely not sure how to perform additional task.
ip cef
no ip bootp server
no ipv6 cef
interface FastEthernet8
ip address 192.168.1.141 255.255.255.0
duplex auto
speed auto
[Code] ........
View 22 Replies
View Related
Nov 30, 2012
It doesn't seem like I can set up trunking (dot1q) on this device. Isn't it supported on this device? Can I still set up VLANs with the router-on-a-stick concept working internal in the device, i.e no external interfaces/subinterfaces being configured? If so, can I then connect VLANs to other switches? I have:
-876 ISR
-Catalyst 2960
-SLM2008
I know the small biz switch supports VLANs and I think trunking as well--obviously the 2960 supports it. Is there a way with these devices to configure one VLAN for servers/net devices and another for regular end-user computers so that they still talk to one another, or do I need a different router in the mix?
View 3 Replies
View Related
May 3, 2013
I need 891 SEC router. I think this comes with advanced IP services.What I have is 1921, with IP Base.Can I upgrade 1921, so it will become alternative to 891 SEC ?
View 1 Replies
View Related
Dec 13, 2012
The problem is that that the routers are not reachable form the corporate LAN after some time. Pinging the routers IP is not working anymore. When the network cable is unplugged and plugged in again the routers are responding again. The same applies when I connect my Laptop to the router. The interface is responsive right after I connect the cable. Also other devices on the network can ping the router. But after a few hours or sometimes 1,5 day the router is unreachable form the corporate network.
The problem first started a few weeks ago. The configuration did not change. The router 878 was not responsing and after changing all the cables and conncting it to another swith the problem remained. So I suspected a hardware failure and bought a replacement 888. After configuring the 888 it showed the same behaviour as the 878 router. The DSL connection is working all the time. I can even set up a vpn connection to the router and start a telnet session. than I can ping the internap IP of the router but pinging another device is not working.
What I noticed after the command sh int vlan1 is that the last input counter keeps increasing.whats causing this or how to debug?
View 1 Replies
View Related
Dec 26, 2012
I do not understand where in the CCP I can configure PAT for communication back 7960G VoIP phone with SIP firmware Maybe I'm wrong on the concept of communication pass back to the Voice VLAN.
View 1 Replies
View Related
Jan 28, 2012
I have a cisco 877-k9 router whit 12.<15>T5 system, dram 128MB and 24MB. I want upgrade this correctly. Where is ios correttly supported?
View 4 Replies
View Related
May 12, 2013
I am a newbie to Cisco. I am trying to setup NAT with DHCP in our office on CISCO 819 router. I am having a problem with DHCP not assigning an IP on vlan1. I cannot figure out what i'm doing wrong. Below is my config and debug from DHCP.
router#sh config
Using 4328 out of 262136 bytes
!
! Last configuration change at 05:56:39 UTC Mon May 13 2013 by cisco
! NVRAM config last updated at 05:57:16 UTC Mon May 13 2013 by cisco
[Code]....
View 3 Replies
View Related
Apr 23, 2012
I am trying to connect a cisco 800 series router using adsl to a bt router/hub. This didn't work at all - so the cisco router is now connected to the bt router using a switch and the adsl cable. When I connect my pc to the cisco router, it doesn't go on the subnet it's supposed to be on. it's set to the gateway on the cisco router and the pc is set to 192.168.3.252. The bt router is on 192.168.1.x. When I connect a pc to the cisco router, and assign an ip address e.g. 192.168.3.123 it doesn't have any internet connectivity, but when I set it to get the ip automatically, it gets the ip address.
View 0 Replies
View Related
Nov 18, 2012
I want to ask about cisco 7600 model is it a switch or router or layer3 switch or Multilayer switch ?
here is the sh version :
===================================
Gateway7600#sh version
Cisco IOS Software, c7600s3223_rp Software (c7600s3223_rp-ADVENTERPRISEK9-M), Version 15.2(1)S, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sun 27-Nov-11 15:27 by prod_rel_team
[code]....
View 2 Replies
View Related
Mar 27, 2013
I have a SM-ES3G-16-P in a 2951. Is there any way that the service module interfaces can be transparent to the host router. Essentially I want the SM to act like an HWIC-1GE .. only with more ports!
View 4 Replies
View Related
Feb 4, 2013
I've tried to upgrade IOS on C1841 router (Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3); System image file is "flash:c1841-ipbase-mz.124-15.T7.bin". using CCP2.5 and couldn't do it as CCP was coming with errors for any IOS. I can't install the latest 15.1 or 15.2 as there is not enough space on flash, it has 192M/64M. So I tried 12.4(24)T8 such as c1841-advipservicesk9-mz.124-24.T8.bin; c1841-advsecurityk9-mz.124-24.T8.bin; c1841-adventerprisek9-mz.124-24.T8.bin but CCP was showing loading errors.So I copied c1841-advipservicesk9-mz.124-24.T8.bin software to flash manually and reloaded the router, now it shows this IOS, but when I start CCP it shows these errors:
-License feature cannot be discovered. This and associated features may not function correctly.
-Static Route feature cannot be discovered. This and associated features may not function correctly.
-Switch Port feature cannot be discovered. This and associated features may not function correctly.
I'm not sure now if that new IOS installed correctly or there is a bug in CCP.I suppose that CCP shouln't show any errors regarding IOS upgrade and after that.Is there a matrix or some kind of pattern for that router IOS upgrade?Should I use a series of upgrades and I can't jump to any IOS?
View 4 Replies
View Related
Mar 12, 2012
I am having an issue accessing the internet from a PC on the LAN. I have configured the PC with the gateway of the router infront of the ISP to test. I can ping from the router to google or any other internet IP. From the PC I can ping to the GIG0/1 (Inside LAN IP) and the GIG0/0 (Outside WAN IP going to ISP) but I can't ping the Next Hop IP of the ISP or anything past that. If I do a trace route from the PC to the google IP address it hits the GIG0/1 Inside LAN IP Address but fails from there. Here is a cut down snap shot of the router configure
[code]....
View 6 Replies
View Related
Apr 29, 2012
on-plus see the device and allows CPE( imbedded) to start then never opens,,,tried genera connection and used that address supplied to open CCP no discovery.also seems onplus doesn't see a service contract or firmware, etc
View 1 Replies
View Related
Jan 22, 2012
I'm fairly new to Cisco configuration and I am looking at a problem for a client that involves the use of a Cisco 887 (wired only) as the main router/gateway. The problem I am investigating involves the allocatoni of DHCP addresses from the device to a product we have designed that connects to the router. I am attempting to set the 880 up on the bench with no ADSL connection and just use the DHCP feature of the box for the 4 switch ports on the back. I have tried all kinds of configurations from default. Whatever I do I can't get the router to assign an IP address to anything that is plugged in (Windows or Linux machines). What could I be doing wrong ? It can't be that difficult to get the system to just act as a DHCP server.
View 2 Replies
View Related
Jun 13, 2012
about to install first UC320w and wanted some sample 800 series router configurations showing required port fowarding, ACL entries and QoS examples.
View 5 Replies
View Related
Jun 5, 2012
I have an FTP server that sits behind a cisco 1801 router.But now i want to add in FTP ports 21 and 20. I have added them in but i cant get it working via ftp.If i plug into the LAN and give my laptop an ip address on the same range as the server (192.168.2.100) then FTP works fine -
[code]...
View 3 Replies
View Related
Feb 16, 2013
I would like to ask if there are dual WAN router models on ISR G2. The client doesn't want the RV042G. Any model from the 890 series up to the 2900 series ISR G2 routers? The connection from the ISP is via Ethernet. If a serial connection would be used then we can just add an HWIC-2T for this matter.
View 10 Replies
View Related
Mar 7, 2012
We have a Cisco 1841 router that requires 2 levels of access, at the moment we have network admins logging in with a single username via SSH and with privilege 15 but we also need our helpdesk to login to run certain commands but not chaneg anything
View 4 Replies
View Related
Sep 6, 2012
im having trouble setting up a vpn for a 1941 router this is what I have setup
crypto isakmp policy 10
encr aes 256
authentication pre-share
crypto isakmp key ########## address 63.247.48.50
[code]....
my whole problem comes about when i need to Nat 192.168.1.0 to 10.12.14.0/24 before it goes through the tunnel.
View 1 Replies
View Related
Jan 22, 2013
After formatting the CF, the router is able to see the flash without a problem. I copied files to the flash - still able to see the contents okay. The problem ia that if i restart the router with the new flash, i get this error:
Jan 22 17:44:12.454 MSK: %SYS-5-CONFIG_I: Configured from console by bt_admin on
vty0 (10.10.10.44)
Jan 22 17:45:41.847 MSK: %SYS-5-RELOAD: Reload requested by bt_admin on vty0 (1
0.10.10.44). Reload Reason: Reload Command.
System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: [URL]
[code].....
View 1 Replies
View Related
Mar 27, 2012
I have recently configured a cisco 1921 router for internal routing on my network. Here is what i am trying to accomplish:
Main network 10.65.1.0 mask 255.255.255.0- all office devies and computers.
Second network 10.65.2.0 mask 255.255.255.0 - All plant equipment machinery and production lines
i have configure gig 0/0 for my company network and gig 0/1 for my plant network. I can ping the router from both networks but am unable to route traffic betwenn them. what am i missing?
View 8 Replies
View Related
