Cisco VPN :: 1921 - Specific Way To Bring Up Tunnel?

Aug 2, 2011

I am trying to configure an IPSEC tunnel on a 1921 router.  What I hope to accomplish is that using a IP SLA that the IPSEC tunnel will only be brought up  IF the normal WAN connection is not responding.  My thoughts were to route the traffic that needed to come back to corporate through a loopback interface but I havent found a way to do that.

View 1 Replies


Cisco :: Bring Up A Tunnel Up-and-up Without Any Layer 3 Address?

Apr 24, 2012

I know I can bring up a tunnel up-and-up without any layer 3 address, without any ipv4 or ipv6 address (apart from tunnel source/destination of course). And I don't have to use "ip unnumbered <interface>" either. But what good is a tunnel interface with no address? Can you bridge them or something?

View 5 Replies View Related

Cisco Routers :: FV042 VPN To Automatically Bring Up The Vpn Tunnel

Mar 4, 2012

How do I get one of these to automatically bring up the VPN tunnel without the end user having to login and click connect?  I got the VPN working Dynamic to ASA static, but it doesnt come up on its own when I try to access something over VPN.

View 7 Replies View Related

Cisco VPN :: ASA 5520 / Define Specific IKE Proposal For Specific L2L Tunnel?

May 24, 2011

ASA 5520 running 8.0.4
ASDM v.6.1
Need assistance understanding how in ASDM/Configuration/Site-to-Site VPN/Connection Profiles/ "Any Entry" I can specify that I only want to offer an IKE Proposal of pre-share-aes-256-sha?
The IKE Proposal field has a number of possible options including: pre-share-aes-256-md5, pre-share-3des-md5, pre-share-aes-256-sha, pre-share-aes-192-sha, pre-share-3des-md5, pre-share-aes-sha and pre-share-3des-sha.
I am able to pick a specific IPSec Proposal w/o issue but when I attempt to do the same for the IKE Proposal, and click OK the choice does not "stick" but rather returns to the entire list as defined above.

View 2 Replies View Related

Cisco Switching/Routing :: 1921 - Deny Specific Port From / To IP

Oct 7, 2012

I have a network with 3 segments and a 2921 router.v172.16.5.0/24, and             .
I want to block all 135 TCP traffic from/to IP to any host in other segment, but only TCP port 135 and only to the specified IP.

View 2 Replies View Related

Cisco VPN :: 1921 - Internet Access Via VPN Client Tunnel

Jun 5, 2011

we use the Cisco VPN-Client to connect to our CISCO1921 Router and want to go out again on the same interface to the internet. We configured the connection with the IOS scurity package, have no split tunneling - so the client is forced with it's default gateway to our router - we also have pushed our local dns-server to the client and he gets dns results. Now I think we have to got out with some kind of NAT, because our client has a private IP from the IPSec Client pool. At the moment we have no NAT inside/outside, bacause we only use official IP addres in- and ouside (data-room usage).
- Is it possible to get the NAT function going in and out on the same interface with crypto_map IPSec user comming in and going out to the internet ?
- Is it more secure to configure this with vrf ?
- Has some a link to example configurations for this ?

View 4 Replies View Related

Cisco WAN :: 1921 Provide IPSEC Tunnel Back To Central Office

May 5, 2011

Equipment Cisco1921, HWIC-1ADSL, 2 x GB Ethernet interfaces (Only one used for local LAN) Software IOS Version 15.1(1)T2..I have been asked to configure this router to provide an IPSEC tunnel back to our central office.We have been provided with an ADSL business class 7MB service from Telecom Italia, they have presented the circuit to our office with no terminating equipment (wires only). Telecom Italia have provided us with some IP addressing information as follows (I will not disclose the entire IP address) [code]

I can see that the packet count is increasing both inbound and outbound on the ATM interface. I have read many documents and tried many different way to try and get this resolved, I even logged a call with Cisco but no dice.

View 5 Replies View Related

ASA5505 - Tunnel A Specific Traffic Via VPN

May 20, 2012

I have a number of sites in China, they have decent inter-country connectivity but poor connectivity when going overseas.

We have a single site in China witha dedicated 1:1 leased line that has good conectivity both inside and outside of China.

All the sites in China have ASA5505 firewalls

One of our Citrix farms is hosted in the UK and although the main site with the leased line is fine accessing the farm the other sites are not. I would like to try and tunnel just the citrix connectivity via a VPN to the China head office then use their connection to get out to the farm.

how to tunnel all traffic but not just specific traffic over the VPN.

View 3 Replies View Related

Cisco VPN :: Specific Tunnel-group With User On ASA 5510?

May 13, 2011

I would like to ask some question about VPN clinet and SSL VPN, on my ASA 5510 i have many tunnel-group it have around 5 tunnel-group and i have one SSL VPN,i also have user 20 user. let me show you that:
1- tunnel-group Staff-VPN remote-access
2- tunnel-group Manager-VPN remote-access
3- tunnel-group normalstaff-VPN remote-access
4- tunnel-group guest-VPN remote-access
5- tunnel-group other-VPN remote-access
and tunnel-group sslgroup type remote-access
and i have user around 20 user and i want to specific user to tunnel-groups like this
1- tunnel-group Staff-VPN remote-access
username AAA password AAA
username AAA01 password AA01
2- tunnel-group Manager-VPN remote-access
username BBB password BBB
username BBB01 password BBB01
3- tunnel-group normalstaff-VPN remote-access
username CCC password CCC
username CCC01 password CCC01
5- tunnel-group other-VPN remote-access
username DDD password DDD
username DDD01  password DDD01
So, How can i manag tunel-groups with user?

View 3 Replies View Related

Cisco VPN :: 5510 - IPsec Tunnel Going Down At Specific Times

Dec 5, 2011

i have a Ipsec tunnel between a ASA 5510 (Uk) & a router (France) that seems to be going down a specific times during the day. I have attached the sys log as well.
I cannot seem to copy & paste the config onto here for some reason so i have attched the configs, Ipsec details & syslog details from the asa.

View 3 Replies View Related

Cisco Firewall :: ASA5540 - Disabling Anti-Replay For Specific Tunnel

Sep 23, 2012

We need Solution for disabling Anti-Replay on the Firewall for a specific tunnel. ASA 8.4(2) ) does not support disabling Anti-Replay on specific Ipsec tunnel , is it true , then if we want to disable Anti-replay , what we have  to do in ASA5540 .

View 4 Replies View Related

Linux - Split Tunnel Routing Specific Port Over OpenVPN On Ubuntu Server 12.04

Jun 10, 2013

(Setup routing and iptables for new VPN connection to redirect **only** ports 80 and 443) Only my goal is a bit different. I am running a headless gui-less install of Ubuntu Server 12.04 that is being used for a variety of different purposes... I would like all traffic to travel un-prohibited through my ISP except for my transmission traffic. I have a VPN i subscribe to that allows me access for which I only want to direct a single port's traffic to. I am currently using a modified version of the code from the above link. My current code is below:

sleep 200


View 1 Replies View Related

Cisco VPN :: Site-to-Site VPN Tunnel With 2 1921 Routers

Feb 21, 2012

I've create many s2s vpn tunnels before, but this one I just can't seem to get going. It's just a simple Site to Site VPN tunnel using preshared keys. Below is the running config for both routers. [Code] ..........

View 7 Replies View Related

Cisco Switching/Routing :: IP SLA Support On 1921/K9 Or 1921-SEC/K9?

Oct 5, 2012

We want to puchase new Cisco ISR 1921/K9 .   i want to know does it support the following sample IP-SLA commands
ip sla 2icmp-echo 500frequency 1ip sla schedule 2 life forever start-time now
track 10 rtr 1 reachability
delay down 1 up 1
track 20 rtr 2 reachability
delay down 1 up 1 
ip route track 10ip route track 20
Im asking above question because we will need to enable ip-sla  on  the mentioned router.   as i read on the cisco webside, it says Cisco-ISR-1921/K9-IP Base  support only  IP-SLA RESPONDER  feature nothing else. If  Cisco-921/K9  does not support the above commands , should i go for ordering Cisco-1921-SEC/K9 ? 

View 4 Replies View Related

Cisco Routers :: RV082 - Route Specific Ip Address To Specific WAN Port

Oct 25, 2011

I use a router RV082 with load balancing. My problem is when I try to access a specific site, I get the error message that my IP address changes and I can not use 2 ip address. I want to specify an ip range to always use the same WAN port.

View 2 Replies View Related

Cisco 877 Won't Bring Up VPN

Sep 29, 2011

Im trying to setup a site to site VPN using a Cisco 877, problem is we have no ADSL presentation, we've just been given an Ethernet line to use from another client in the building, If i plug my laptop into the port and use the External IP information given i can use the internet and ping the other VPN just fine, if i place my blank config 877 into the port and set up VLAN 10 to use the same IP information, it cant even ping the local gateway? The port on the router is in VLAN 10 like it should be and the interfaces are all up, the router can ping its local VLAN 10 ip address.

View 5 Replies View Related

Routers / Switches :: Rate Limit On Specific Port From Specific Range?

Jul 1, 2012

Is it possible to enable an absolute value rate limit using QOS on a HP ProCurve 5406 switch for a particular IP range on a specific port? Is there a way to configure our HP 5406 with an absolute rate limit on "WAN" port for that server's IP range? I would like to limit it to only being capable of sending 1Mbps worth of traffic over the head end at once.Everything in the documentation points towards priority queues, which as far as I can tell, isn't really what I want.Baring accomplishing this goal using rate limiting is there a better way to prevent our services from accidentally saturating this connection?i thimkong about somthing like that:

class ipv4 rate-limit-port-A1
match ip any
policy qos port-a1-ratelimit
class servers-to-be-slowed action rate-limit kbps 1000
interface A1 service-policy port-a1-ratelimit inI'm not sure about this.

View 4 Replies View Related

Cisco WAN :: 2801 / Assign Specific IP To Specific Host By MAC

Dec 18, 2012

I have a Router 2801 with the run conf :
no ip dhcp use vrf connected
ip dhcp excluded-address
ip dhcp excluded-address

I want to assign a specific IP to a specifig host by MAC .. for example i want the ip to be assign to the host "client1" by mac.I've been creating a new dhcp pool static:
ip dhcp pool static
hardware-address xxxx.xxxx.xxxx
client-name client1
but the "client1" is still taking other ip.

View 10 Replies View Related

Cisco VPN :: Can't Bring The VPN Up By Pinging From ASA 7.2

Jan 5, 2012

I've attached my ASA's config. I can't bring the VPN up by pinging from the ASA but the VPN will come up when someone pings from behind the ISA server. So the problem seems to be routing/NAT on my ASA because my pings aren't being directed out the tunnel. The VPN in question has 64.106.x.x as the peer and AES 256/SHA for phase 1 and 2.

View 2 Replies View Related

Cisco WAN :: ASR 1006 Not Being Able To Bring Interface Up

Jun 11, 2012

I have 2 ASR 1006 with ASR-1000-ESP40, ASR-1000-SIP40, ASR-1000-RP2 , and with SPA-1X10GE-L-V2 that should hold an XFP-10G-MM-SR.
i am in the proceed of an implementation and configuration, but i am facing a problem on the interfaces, where i am not able to bring the interfaces up/up and always  down/down.
i check the fiber patch cords and the other SFP on the switch WS-C3560E-12D and it is working fine. i also reverse the fibers pins and nothing works
i need only to get the interface to be up/up. i also checked all the hardware compatibility matrix, IOS XE, the SPA are all online (show platforms).... where all seems to be ok and compatible.
all what is needed is to give the interface ,for example, tengig0/0/0 and ip address and no shut and it should go up/up.
One more thing, the XFP is not giving a red light laser, and in the show interface tengig0/0/0 give media type is unknown.

View 1 Replies View Related

Cisco WAN :: 3845 / 3725 - Unable To Bring Up T1

Jun 27, 2011

I'm trying to bring up two t1 and bundle them into a multilink on a 3845 on one end and a 3725 on the other end.  On the 3845 I have installed two VWIC-2MFT-T1-DI and on the 3725 I have installed two VWIC-2MFT-T1 and a 1DSU/CSU-T1-V2.
For some reason I'm able to bring up the T1's on the DSU/CSU WIC.  When I try to connect the T1 on the other WICs, on the 3845 I see SLIPs and Interface Resets however on the 3725 there is no errors however I still see UP DOWN.
CONFIG 3845 
controller T1 2/0/0
framing esf
linecode b8zs
cablelength short 133
channel-group 0 timeslots 1-24 speed 64


View 2 Replies View Related

To Bring Sleep Mode Without Turning Off

May 7, 2012

Have already checked in the Device Manager if the �Allow this device to wake the computer� is unchecked.What do I do to bring the sleep mode back without turning off the file sharing (if file sharing caused the problem)?

View 1 Replies View Related

Cisco Wireless :: AP1261N Bridge To Bring LAN To Single PC

Apr 23, 2013

I've to bring vlan 2 access to a remote site through 2 AP1261N configured as bridges. Here it is the network diagram 

One AP1261N is configured as root bridge. Its ethernet interface is connected to a switch with vlan 1 native and vlan 2 tagged. Vlan 1 is for APs and switches management. Vlan 2 is for users access.  The other AP1261N is configured as non-root bridge and one PC is directly connected to the AP's ethernet interface. I've successfully managed to create i wireless link between the 2 APs and so I can reach the vlan 1 IP address of the non-root AP. My problem is that I can't reach the PC connected to the non-root AP.
Here are the conf of the 2 APs:
root AP
version 15.2
no service pad


View 8 Replies View Related

Cisco Firewall :: Bring ASA5550 To Factory Default?

Feb 2, 2012

getting step by step procedure to bring an ASA5550 to factory default setting, so that I can configure it from scratch via ASDM

View 3 Replies View Related

Cisco :: 4402 WLC - Possible To Bring Up 3rd Controller Running Old Code

Apr 3, 2012

I have 2 4402 WLC running 7.x.x.x code. I also have some 1510 Mesh- L WAPs that require an old version of code. I need for those. Is it possible to bring up a 3rd controller running this old code with the other 2 4402's running modern code? What will break? I know that anchoring and mobility might get messed up. What are the other caveats?

View 2 Replies View Related

Cisco Switches :: Bring Two Router Connections Into A SG200-50?

Apr 24, 2013

We have two Comcast 100MB routers. Can I plug these both into the SG200-50? How do I configure the ports?
I have an Apple Extreme Wireless Router that 30 Laptops use. I also have 25 VOIP phones and 10 Desktops that are on an unmanaged switch which I want to convert to the new SG200-50.

View 4 Replies View Related

D-Link DIR-825 :: Slow To Bring Up Settings Pages

Dec 26, 2011

I'm using a Dell computer CPU i7 8 gig of ram. It is wired in to the router. Why does it take so long to log into the router and bring up the different pages in the settings. I have never seen a router take so long. I have not updated the firmware version 2.02NA. I have not upgraded it yet. oh I have a cable connection. When I surf the web the pages come-up fast.

View 13 Replies View Related

D-Link DIR-655 :: How To Update Firmware And Bring Up All Necessary Tools

Sep 1, 2012

Today i has tryed to update the firmware of my DIR-655 router, but in the screen under the administrative tools menu there is nothing to use.

how do I update the firmware and bring up all the necessary tools?Dir-655 works because they are connected to the internet and manages the wireless network.

View 2 Replies View Related

Cisco Switching/Routing :: 4503-E Cannot Bring SFP Fiber Interfaces Up

Sep 2, 2012

I am trying to connect a 6509 switch to a 4503-E switch using single mode dark fiber over a distance of less than half a mile. Although a routine task, it does not work..We have a care 6509 switch where we concentrate all of our dark fiber connections for our remote sites. The 6509 switch already has 30 remote sites, most of them with 4503-E switches, connected in this way therefore it is a tested scenario. For the connections we use the GLC-LH-SM SFPs on both switches. Out of these 30 sites we had a similar problem with two of them, which we solved with the use of CWDM SFPs. With the CWDMs the fiber came up right away. However, I cannot keep using this solution because it is way too expensive! I had the losses of the fiber measured end-to-end and they are negligible (>0.5 dB).
In this latest case, like I said, we could not bring the connection up between the core 6509 switch and the 4503-E switch using the GLC-LH-SM SFPs. I then replaced the 4503-E switch with a 3560 and the link came up! Then I tried using a CWDM-SFP in the 4503-E, while keeping the GLC-LH-SM SFP in the 6509 and the link came alive again! Of course we already tried replacing the fiber patch cords with no luck. [code] I find it very weird for the link to work with the 3560 or with a CWDM in the 4503 but NOT with the SFP in the 4503!

View 6 Replies View Related

Cisco WAN :: 3825 Bring Up Dialer If ISP Interface On Mated Router Goes Down?

Dec 6, 2012

I have two 3825's. Each has it's own ISP connection. Nat is configued for both. They have an ethernet connection between them and I'm running OSPF between the two so the routes propogate. I have qty 11 Dialer interfaces configured on each router (each router has an exact copy of the other routers dialer interface). However, I only want the Dialers up if the ISP connection on the mated router goes down. Much like HSRP I need one to preempt and be active if both ISP connections are up. When one goes down the other Dialers must come up. Each dialer sends a Dynamic DNS host name and IP address pair to So I cannot have both up otherwise the DNS names will bounce between ISP#1's IP address and ISP#2's IP address (back and forth). Let me know if any option exists to make this happen. As an aside the ISP's are providing me DHCP addresses so I cannot work off of an IP, it has to be the physical interface (i.e. Gi0/0).

View 1 Replies View Related

Wireless :: How To Bring Wifi Inside A Steel Building

Apr 11, 2011

I need WIFI inside a giant steel Quanset hut. There is a good signal right outside. Is there a way to do this with one device? I was wondering if I could put one of the antennas of a WRT54G through a hole to the outside and then set it in repeater mode. Theory being it would use the outside antenna to pickup the signal and the inside antenna to broadcast.

View 2 Replies View Related

Routers / Switches :: Linksys Won't Bring Up Configuration Page

Feb 15, 2012

Linksys tried multiple WRT54g routers and access point, can't open the router config page.

View 5 Replies View Related

Linksys Wireless Router :: Slow To Bring Firmware Updates E3000?

Aug 4, 2011

Will this router ever see a firmware update so that we can have some additional functionality? The version of Twonky Media server that was bundled with this router was old to begin with, and now we are stuck with it? I tried the E4200 but it just kept spinning my drive that's parked in a ThermalTake BlackX, at least the 3000 doesn't do that, but when can we expect some new firmware, it's been 8 months. I used to love Linksys, but with this kind of support I may have to move to a different brand, and I bet I am not alone. it doesn't break the E3000 like you broke the 4200.

View 1 Replies View Related

Copyrights 2005-15, All rights reserved