Cisco Switching/Routing :: Filtering Ip From Accessing Router 2911 For Remote Management

May 16, 2013

i have router 2911
pub ip:
interface gigabitethernet 0/1
ip address

and other ip will drop/kick/disconnected automatically
how to implement this on access list

View 6 Replies


Cisco Switching / Routing :: 3560 - Accessing Management Interface Using Layer 3 Link

Apr 9, 2012

I am setting up a link between buildings that uses wireless links. I'm using Layer 3 routed ports on 2 3560 switches to handle the routing between sites. Normally I would just put these in a /30 and then the switches handle the rest. However, the wireless access points have a web interface for managing them that I want to be able to access, but it's only available on the single NIC that also carries traffic. What would be the best way of making this work? Should I make the link a /29 and give the access points an IP in the same range? If this is the case what do I use for the default gateway for the access points?
I have included a diagram to try to explain the issue clearer. The IP addresses in black are what I would do if this were a standard cable (and indeed this will work, but I wont be able to access the admin interface of the wireless AP) and the red ip addresses are the alternative if I use a /29 (but as I said, I'm not sure what to use for the default gateways).

View 1 Replies View Related

Cisco Switching/Routing :: 2911/ 2921 Management Port

Oct 25, 2012

I can not find any information about management port of Cisco ISR 2911, 2921 and so on. There is management port in specification of 2911 and 2921 and I do not know if this port can be as a simple Ethernet port – forward traffic in/out on L3.

View 2 Replies View Related

Cisco Switching/Routing :: 3600 Accessing Wireless Access Point From Remote Subnet

Mar 28, 2013

I recently installed a couple of Cisco Aironet 3600 Series Wireless Access Points at a remote site. While I was at the site everything seemed OK, The clients were able to get connected to the access points, the guest network worked fine, I could SSH into the access points, and I could ping them. The problem is when I went back to my home site I tried to SSH into the access points through an ASA IPSec VPN Tunnel and it couldn’t find it. When I try to ping the access points they “time out”. I can ping and connect all other addresses (via RDP, HTTP, etc..) on the same subnet which should rule out an access list problem. A couple of notes to be aware of:
The WAP’s have the Autonomous IOS installed (Version 15.2(2)JB) The WAP’s are connected to Dell PowerConnect 5724 (Not by choice.. We are a Cisco shop, these were already there and have plans this year to replace) 

I can ping and SSH with Putty to the WAP’s from the local subnet I cannot ping or SSH from a remote subnet to the WAP’s. I can access all other IP’s and Computers from a remote subnet.

View 12 Replies View Related

Cisco Switching/Routing :: 2911 Configuring Device To Allow Remote Desktops Connections

Nov 2, 2011

I have a 2911 router where I was configuring the device to allow remote desktops connections. Everything is working properly, but for some reason my ACL has disappeared.

View 5 Replies View Related

Cisco Switching/Routing :: Accessing GNS3 Router From Different PC

Sep 17, 2012

I've attached the file which shows the issue which im facing in reachability between a PC to GNS3 router.
Home Broadband ->LAN ( ---- Win 7 ( -->Loopback Adaptor(>GNS3(cloud-->Router (
Win XP (192.168.15)


View 6 Replies View Related

Cisco Firewall :: 2911 - IOS Content Filtering Using Trend Micro

Apr 26, 2012

I have IOS content filtering using the Trend Micro subscription service working on a 2911 running 15.1.(3)T3 with the security license option and a 30 day demo Trend subscription. Once I figured out that the content filtering for Trend appears to be completely broken in 15.2 (even using docs for 15.2) I went back to 15.1 and it works great.
Everything seems great so far except I would like to have a more 'fancy' or custom blocked page where a user can have a couple links to either go to the trend micro reporting page [URL] or some other page, and maybe some branding so they know the page is coming from our network and is not some fake security thing or phishing attempt or whatever.
I know I can use the 'parameter-map type urlf policy trend ' section to do a tiny bit of customization of the text that appears on the default blocked page display and there is an option for it to go to a simple redirect instead ('block-page redirect -url') but how to do more with either the built in page or the redirect- url to keep the information of what page the user was trying to access and why it was blocked (category etc.) while adding more features.
Oh, one last thing, this doesn't support any kind of 'user override' or anything like that does it? So that a network can have a filter applied but an admin could override the filtering to allow temporary access to something?

View 1 Replies View Related

Cisco Switching/Routing :: USB Console Into 2911 Router

May 19, 2013

I have installed a cisco 2911 router and the cisco usb console drivers on my pc, win 7 64 bit.however when I use putty and open the com port assigned it just goes blank, I am using the usb port on my laptop to connect and using the cisco usb console cable provided

View 1 Replies View Related

Cisco Application :: Accessing ACE30 Through Https For Management

Jun 11, 2012

I am new to the ACE30. I a basic configuration from the CLI and I am trying to use the device manger. I am able to get to the web informational page rather then accessing the login page.    I have rest the password for both the admin and www and still no go. my question is how to go into enabling the GUI access.

View 1 Replies View Related

Cisco Switches :: Accessing SG300-28P Via Management Interface?

Dec 21, 2012

I have a new SG300-28P, and have had occasional issues with being unable to connect to it via anything other than the serial port.  I have connectivity between my machine and the switch (tested with ping each way), and in fact, have the same problem if I take a laptop to the switch and connect them directly.What happens is that though the switch is operating normally, http, https, ssh and telnet attempts to access all fail in one way or another.  Ssh and telnet either yields no response or a refused connection (even though those services are enabled).  For http and https, I'll occasionally get enough of the web page to be able to tell what it is ... but attempts to log in just don't work.While this is happening, the CPU and packet load on the switch is very, very low.Rebooting didn't work entirely, though it may have made it better.  Resetting to factory defaults and then reconfiguring makes it work.This is using the latest firmware:

View 3 Replies View Related

Cisco Switching/Routing :: 2911 Router With Base And Security

Feb 12, 2013

We have purchased a number of 2911 routers.We got Base & security license as we wanted to enable encryption. However we probably wont use the security.We are replacing 2811 routers.Unfortunately the 2811 routers have FXS ports with 2 - 4 POTS handsets - I completely forgot about these ports when I was ordering.Now I have VIC3-FXS cards which are ok in the 2911 but unfortunately I cant get them to work.I am missing PVDMs (well adapters anyway), and even if I got them the router wont take any commands relating to voice due to the license.Is is possible to 'rehost' the security and turn it into a UC ?I am new to these 2911 and Licensing.

View 1 Replies View Related

Cisco Switching/Routing :: Replacing 2801 With 2911 Router

May 7, 2013

I have a 2801 router that I am replacing with a 2911. I know the ports on the 2911 are Gigabits and the 2801 are Fe. I read where the IOS would not support backup and restore on each other . I am attaching a show ver on both routers. I need to know if backup and restore would work and or what other changes would need to get done.

View 1 Replies View Related

Cisco Switching/Routing :: Unable To Configure VPN On 2911 Router

Jan 29, 2012

I have a Cisco 2911 router that I will like to use it for setting up a site to site VPN but the router does not support VPN commands. When I issue crypto isakmp command, it says command no recognized. When I issue ipsec transform-set command, it says command not recognized. The IOS running on my router is c2900-universalk9-mz.SPA.151-2.T1.bin. Also see the output of my show licences features command: [code]
what can be done on this router to enable use it for setting up a VPN connection.

View 6 Replies View Related

Cisco Switching/Routing :: Activate Sna Feature On 2911 Router

Jan 7, 2013

I have a 2911 router with 15.1(4) Ios Version. I need to enable the evaluation sna feature but when I try to enter the command "license feature snasw" but I get an error, the command "License feature" does not exist.

View 3 Replies View Related

Cisco Switching/Routing :: 2911 Router Guest Login?

Oct 8, 2012

I am planning on having a contractor in to configure some new routers and would like for him to login using the local account on the routers while company personal continues to use radius is this possible.                  

View 6 Replies View Related

Cisco Switching/Routing :: Can't Get Into Enable Mode On 2911 Router

Oct 31, 2012

My engineer onsite can't get into enable mode on his 2911 router. I've seen this before but I can't find out how I fixed it.
He gets an error saying : no password set
Here is the config:
Router#sh run
Building configuration...
Current configuration : 1784 bytes


View 3 Replies View Related

Cisco VPN :: Remote Access With 2 WAN Link In 2911-SEC-k9 Router

Mar 4, 2012

I am having cisco 2911-sec-k9 router.
And I got 2 internet connections from isp one is static ip leased line and the other one i dsl dynamic ip one.
What I want is i need to configure internet load balance between these 2 internet and also i need to use static ip for remote access vpna and for my exchange port forwarding.
My dsl line in 100 mps and my leased line 2mb dedicated.
I configured the router as with some example config i got on internet my internet is fine but load balancing not happening and i configured the REMOTE ACCESS VPN  . I am able to connect the remote access vpn but no communication through remote access . i cannot reach any device through remote access.
Note: if load balancing is not possible how i can configure for internet traffic use dsl line and for remote access vpn and live exchange port forwarding through leased line.
I am attaching my configuration and also debug crypto isakmp status

View 1 Replies View Related

Cisco Routers :: RVS4000 Router With No Remote Management?

Jun 30, 2011

I'm have serveral issues with my router.First, using port 8090, I'm unagle to get remote management of the router.Port 8090 is forwarded to the router I have other issues too, I think the router is blocking my FTP conenction to my NDAS drives.I wish the router would show the UPnP  port that are autoamtically added t othe system.Port 80 works well going to my NDAS drives.Firewall, DoS Blocking WAN are all turned off.

View 4 Replies View Related

Cisco Switching/Routing :: Can't Connect Network Assistant To 2911 Router

Dec 30, 2012

I am trying to connect  my Cisco 2911 router to my community in CNA.  I can see the routers on the topology map, but when I try to add to community I get an error message stating that the router is unreachable (Unable to connect).  I can ping device from ame client. I can view Device Properties for map (Device type: CISCO2911/K9). Telenet attempt to connect but we only use SSH for connectivity (the same as all of my switches that are connected to community).  2911 is listed as a supported router on Cisco site.

View 3 Replies View Related

Cisco Switching/Routing :: Can 2911 Router Work On IOS Other Than Universal Image

Jun 10, 2012

whether a Cisco Router 2911 would work on images other than universal image. This is the question raised by one of our customer. He has 2811 Router where-in he has configured T1/E1 configuration, terminated to Zyxel Modem and working fine. Now he wants to replace this 2811 router with 2911 router. Since the universal image in 2911 router is not working with the present configuration in 2811 router, he wants to know, what options are there for him to configure this in 2911.

View 2 Replies View Related

Cisco Switching/Routing :: Router 2911 Blocking Single IP Address

Jan 29, 2013

We have a Cisco 2911 router in our company. I didn't set it up myself nor I was involved. I only started working here recently, bit over 3 months ago. I have been given ongoing task which other IT Technicians been struggling for almost a year with a idea that maybe because I'm fresh person in the company I will find a original idea why could this thing not work.
Our router have a problem with blocking a single IP address, but not completely  It's hard to explain but I will try my best. Company is hosting their website externally and accessing the host and FTP on the host on daily bases. It is important for the website to work on the internal network in company. It does work sometimes, but from time-to-time the website showing time-out error 118 on any point before Cisco router using both http and https, have tried putting just the IP address( doesn't matter is it on the general network or last ISA server on DMZ ). I am able to connect to the website using any of proxy gates but not directly to the website. I have also tested the connection past the router and I was able to connect to the website without any problems. I am also able to ping the host's address from the router and internal network.

I have eliminated the possibility of not correctly setup proxy or firewall on the network as problem also occur on the DMZ. I have also checked access-lists on the router and firewall rules for Any possibilities and I can't really see a way why would the router do this.

View 2 Replies View Related

Cisco Switching/Routing :: 2911 Router Running With C2900 Software

Mar 19, 2013

I am having 2911 router running with C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M5, RELEASE SOFTWARE (fc1)IOS and i have configured the following commands for eigrp
-router eigrp 100
-no auto-summary
It takes all 3 commands but when i check through show run command i am not seeing no auto-summary command.

View 5 Replies View Related

Cisco Switching/Routing :: How Switch Module Works In 2911 Router

Sep 4, 2012

how this switch module works in 2911 router? I have two 2911 routers in HSRP configuration for redundancy with crossover cable between switch modules. OSPF running on routers.If active router loses its power and then comes back again, it boots first, its internal link to switch module comes up and it starts to forward packets to switch module. The switch module starts to boot only after router is ready. So I have outage of about 3-4 minutes. For our real-time applications it is way too long.

any way to start booting of the switch module before router gets ready?I understand I can boot it manually, but it is only after router is ready. Only way to get around it I found is to disable internal link and use router interface to connect to the switch module.

View 1 Replies View Related

Linksys Wireless Router :: Way To Get E4200v2 Remote Management

Mar 30, 2012

I have a small issue with Remote  Management on my E4200v2.I have enabled it , select https and set Allowed Remote IP Address to any on the default port ( 8080 ).After all of this,  I cannot connect to my router from my office or any other place. I'm using DDNS and all its ok ( updated at time ). I've tried also connecting to my direct ip address ( dynamic ) but with no result.P.S. no incoming log from port 443 using https.

View 3 Replies View Related

Cisco Switching/Routing :: Telnet Can't Login 2911 Router With Private Address

Jan 7, 2013

We have a cisco 2911 router configured with password for telnet login, but I always failed to login use telnet, does any one know any place need to be modify?

View 6 Replies View Related

Linksys Wireless Router :: How To Setup Remote Management On A E1200

Aug 25, 2012

I want to be able to login to a router remotely and foward a port on the router. I thought i saw a spot for remote management but don't know how to use it. I have a dyn account and can create a dns for it. 
i setup security dvrs on the internet so clients can see cameras from outside their homes. I would like to be able to login to a router if i need to foward a port or something similar. 

View 1 Replies View Related

Linksys Wireless Router :: WRT160NL Unable To Use Remote Management Over PPTP IP

Nov 20, 2011

My University has free Internet at student homes, but we need to login by PPTP to get an official, public IPv4 and be able to reach the outside world. The network people at the University says that when the PPTP is up, everything should be open (no firewall of any kind).
have my WRT160NL that gets a address from DHCP on WAN port. Currently I have My internal network uses PPTP-server is located at and when I connect, I usually get an IP in the Currently I have I use DynDNS to make sure I always know the public IP by the host ...
So, I have Remote management enabled with HTTP and HTTPS, any IP and default port 8080. But no response from the outside world seems to go through.If I turn of the "filter ICMP" but keep the SPI Firewall on, I get ping reply from external sources towards my router, but still no HTTP or HTTPS response.I also have a Torrent I try to port forward to to be active, this is 23277, and this is the only thing that keeps coming up in the incoming log on my router.
It's not possible to connect to the routers management over the PPTP-tunnel?And why can't I get the port forward to work .. Same reason? PPTP -> (LAN) won't work?

View 1 Replies View Related

Linksys Wireless Router :: EA4500 And HTTPS To Work For Local Or Remote Management

May 6, 2012

How to get HTTPS to work for local or remote management? Selecting HTTPS for either local or remote doesn't enable HTTPS for me. It still use HTTP.

View 2 Replies View Related

Linksys Wired Router :: RV042 - Remote Management Disabled But Interface Remotely Accessible

Feb 2, 2007

We have a RV042. remote management is set to DISABLE - but even after restarting the router i can access the interface remotely over the internet.even when i enable it and change the port to say 5555 i can connect to the web interface using either port 5555 but ALSO on port 80.what's wrong here?the only way to stop that was to create a rule that blocks port 80 on the WAN interface. (btw. could this rule affect LAN users when browsing the web?)

View 7 Replies View Related

Cisco Switching/Routing :: 2800 Route Filtering

Apr 3, 2012

I have a router with two interfaces what i need to filter the HTTP traffic from one interface and the rest of the traffic through the other on my cisco router 2800.

View 3 Replies View Related

Cisco Switching/Routing :: Multicast Filtering Between VLANS (217 / 64 / 80)

Mar 18, 2013

I have the need to filter multicast between vlans as described below. PIM Sparse-Mode is being utilized for this multicast network and changing any Vlan to PIM Dense mode is not an option.
- Vlan 217 and Vlan 4 should not be communicating on mcast with any other vlan, including eachother (each vlan isolated).

-Vlan 64 and Vlan 80 are able to communicate witch each other on mcast but not with any other vlans (isolated vlan group).

-All other vlans can communicate mcast freely.
What I've created thus far is below. It does not appear to be the most elegant solution and would be difficult for the administrators to adjust as new requirements come along. Yes, I will be adding the appropriate link-local multicast addresses so as to not break routing and other dependent technologies.

ip access-list ext ANY_CONN
permit ip any any
ip access-list ext MCAST_INTRA_217
permit ip
permit ip
ip access-list ext MCAST_ISOLATE


View 1 Replies View Related

Cisco Switching/Routing :: 4510 Enable MAC Address Filtering

Oct 27, 2010

I am planning to enable MAC address filtering (one port on 4510 & another 3560). I want to allow only that MAC address to communicate via that port with the rest of the network and internet.
4510 has PC connected and 3560 had polycom connected. [code]

View 5 Replies View Related

Cisco Switching/Routing :: 3560 - Inter-VLAN Filtering

Apr 19, 2012

Probably an easy fix but something's weird in my config. I am setting up a new network, so this is not production, Routed environment, down to the access layer using 3560-x l3 switches.
vlan 10: data
vlan 20: wifi
vlan 30: wifi guests
vlan 40: voip
My objective is to allow all traffic OUTBOUND to certain subnets (,, and block any other networks. By doing it this way, after blocking all other internal traffic, I allow everything else to ensure internet traffic can go out.

Extended IP access list VLAN10_TRAFFIC_FLOW    10 permit ip any    20 permit ip any    30 permit ip any    40 permit ip any    50 deny ip any (5 matches)    60 deny ip any    70 permit ip any any!interface Vlan10description DATAip address access-group VLAN10_TRAFFIC_FLOW outendThe problem is, from the above info, when I ping from a workstation in VLAN 10, it should match rule 10, but instead if matches rule 50 (as shown by the 5 matches)

View 13 Replies View Related

Copyrights 2005-15, All rights reserved