Cisco VPN :: 3030 - Connectivity Between L2Ls
May 10, 2012
I am writing to be given some support related to a issue that I am having. The fact is that I am trying to give connectivity between two companies that are connected to mine through the same Cisco VPN 3030 device (I know that it would be better that they access directly between them and not through my Concentrator, but due to some security reasons it is not possible).
The problem that I found is how to route the destination network through one specific L2L, because the static routes can only be configured to IP addresses or Interfaces (in my case just Internal-LAN and External-Internet).
View 1 Replies
ADVERTISEMENT
May 29, 2013
Most of our VPN connections are done with our Cisco 3030 and the internet goes out the ASA. We are able to filter all web traffic by doing a a span port for web traffic.
When we move VPN connections to the ASA we will loose the ability to span web traffic becuase its coming in and going out the same interface on the ASA. We will loose the ability to filter web traffic when this happens.
How we can filter web traffic on VPN connections on the ASA. We are using websense. I know there is some integration that can be done with the ASA and websense but it doesn't have all the capabilities as doing a span port for websense to monitor.
View 1 Replies
View Related
Jun 13, 2007
Is there any way to auto migrate my 3030 VPN configuration to an ASA platform?
View 3 Replies
View Related
Apr 30, 2013
how we can clear the username in the Anyconnect Connection Profile on a users laptop? Currently it defaults to the last username used but our security group would like that cleared so that the field comes up blank every time. This feature was available in the old Cisco 3030's but I can't find it in the ASA.
View 3 Replies
View Related
Nov 21, 2012
I know the Catalyst 3030 is EOL/EOS and I am probably SOL.
Cisco IOS Software, CBS30X0 Software (CBS30X0-LANBASE-M), Version 12.2(25)SEE2, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Fri 28-Jul-06 11:05 by yenanh
Image text-base: 0x00003000, data-base: 0x00AB4EB8
[code]....
I would like to put the below into the "stack trace" tool, but all links appear to be dead.
%PLATFORM-1-CRASHED: Program Exception (0x0700)!
%PLATFORM-1-CRASHED: SRR0 = 0xFEA10EC0 SRR1 = 0x00029210 SRR2 = 0x0043CD70 SRR3 = 0x00021200
%PLATFORM-1-CRASHED: ESR = 0x08000000 DEAR = 0x00000000 TSR = 0x8C000000 DBSR = 0x00000000
%PLATFORM-1-CRASHED:
[code]....
View 3 Replies
View Related
Apr 30, 2012
show logging
May 1 16:00:30: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/12, changed state to down
May 1 16:00:39: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/12, changed state to up
May 1 16:17:28: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/12, changed state to down
May 1 16:17:36: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/12, changed state to up
May 1 16:25:28: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/11, changed state to down
May 1 16:25:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/11, changed state to up
May 1 17:19:25: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/11, changed state to down
Configuration as below:
macro name vmware
switchport trunk encapsulation dot1q
switchport mode trunk
no switchport access vlan
[code].....
Note:Both active blade switch and standby one are connecting to same aggregate switch 3750. Yet the active one, with same config as standby one, has not occurred this issue.
View 2 Replies
View Related
Feb 17, 2013
We have configured a site to site tunnel from our ASA to another organizations Cisco 3030. It appears to have just one way initiation. We can do a ping to a device on the remote site and it will ping just fine. however, when the tunnel needs to be initiated from the remote site, it will not work until we have initiated the tunnel and then everything works.
I continue to see Error processing payload: Payload ID: 1 errors on the ASDM logs.It appears that all the configuration is in place because we can in fact establish the IPSec tunnel unidirectional. And once established, traffic can flow bidirectional.
View 1 Replies
View Related
Feb 16, 2012
We relocated several servers to our DMZ and, without a domain controller in the DMZ (we plan to put a RODC in the DMZ later when we mvoe to Windows Server 2008), i punch through the standard recommended TCP ports. ports 88,135, 389, 53, etc.) to the internal network located DC. I am double hopping to the DC (I hope thast doesn't matter) as the DMZ located web server communicates to another IP address in the same DMZ network and then I NAT that address to the internal IP address of the DC. Everything seems to be working for the servers we moved to the DMZ but i think i don't have all the necessary TCP/UDP ports punched through because we have found that logging into the DMZ servers is taking an extended amount of time, sitting on the “applying settings” screen. For 2-34 minutes. Also, we noticed that our applciations fols have to now add the fully qualified domain names when making calls to servers that just needed the domain name. When i open the access-list up completely without opening specific TCP/UDP ports, the issue is resolved.
View 4 Replies
View Related
Feb 3, 2011
I am currently configuring an ISR 892 without wifi. I got the start-up config working and am now stuck with zone-based firewalling. I configured four zones: private, dmz and internet-static and internet-dial. The private zone is configured for Vlan1 witch covers one ethernet switch port connected to the LAN. The dmz zone is currently not configured. The internet-static zone is configured for GigabitEthernet0 which connects us to our ISP providing a static IP. Internet-dial is configured for FastEthernet8 and connects to another ISP using a dial-up ADSL line, which is currently not connected. So, in short: I try to connect the private zone to internet-static and get traffic flowing, but can't get this working. The private zone can talk to the router and the router can talk to the internet. I suppose I forgot some basic configuration for the router itself because the zone configuration was done with this config guide: [URL]
This is my current running config:
Current configuration : 6076 bytes
!! Last configuration change at 08:26:03 UTC Thu Feb 3 2011 by admin!version 15.1service timestamps debug datetime msecservice timestamps log datetime
[Code].....
View 5 Replies
View Related
Feb 6, 2013
I have created a management vlan on my network of 2950 and 3750 switches. One 3750 has a trunk to each of the 2950 switches which includes the management VLAN. On that 3750 the vlan and line protocol are both up even though there is no specific port assigned to the vlan; I believe the trunk connections allow the vlan line protocol to come up. On another 3750 stack I have my VLAN defined with no ports designated or trunks; the VLAN is up however the line protocol is down.
View 12 Replies
View Related
Jan 1, 2012
Physical devices are a Cisco 2901 (CISCO2901/K9) with GE0/0 configured as 192.168.1.1
Connected through a D-Link DGS-1210-24 configured as 192.168.1.202
Running on a domain with an HP domain server as 192.168.1.2
The 2901 was an EHWIC (VA-DSL-A oPoTS) on EHWIC 0/0/0
GE 0/0 on the 2901 is physically connected to the DGS-1210 which is physically connected to the server.
VDSL 0/0/0 is physically connected to the DSL jack.
So far the configuration reports all is connected, and I can ping the gateway of our ISP (using CLI or Cisco CP); however the server reports no internet connection and no workstations can access the 'net.
Once connected; I'd also like to allow ports through for use on the network (25, 80, 110, 443, 987, 1723) - but not sure on how to do that just yet!
Our IP is 202.27.19x.19x
Our Gateway is 202.27.217.5
[Code] ......
View 11 Replies
View Related
Jun 12, 2011
i found that cisco small business SF302 PoE managed switch connect with the end device (RFID component) would causing packet drop issue.how should i isolate the issue and proper troubleshooting? would it cause by the PoE issue, or the 10/100 base etc.
View 5 Replies
View Related
Oct 1, 2012
We have a fixed IP address 3G data SIM which we intend to use as backup for our ADSL connectivity using a CISCO887VAG+7-K9 router. (We have previously implemented similar using the older CISCO887G-K9 router without any issues)
The problem is, we don't seem to be able to establish 3G connectivity with this new router. Our service provider assures us that the SIM card is active (although they have seen no connection attempts from us on their RADIUS server)
The router is running IOS version 15.1(4)M4 and the following is the relevant config we have used:
!
cellular 0 gsm profile create 1 $apn chap $user $pass ipv4
!
chat-script INTERNET "" "AT!SCACT=1,1" TIMEOUT 60 "OK"
!
[Code].....
View 18 Replies
View Related
Mar 29, 2010
I have a 2921 series router w 15.1M series IOS. The platform has HWIC-2SHDSL module installed, which is used for point-to-point G.SHDSL connectivity. When I apply a service-policy on atm pvc, after 10 to 20 minutes I lose IP connectivity on ATM interface and tunnel interface also goes to down state. If I remove the service policy on ATM PVC IP connectivty returns back.
Interestingly I use exactly the same config on 2821 platform (w. WIC-1SHDSL installed) and I do not live such an issue on that platform.I tried to carry the Qos config on to Tunnel interface with shaping enabled and "no qos-preclassify" command issued, but the result is the same.
policy-map MetroDSL-llq
class sna-dsl
bandwidth percent 10
class netbios-dsl
bandwidth percent 10
[code]....
View 3 Replies
View Related
Jun 5, 2011
I'm trying to configure ACS 5.2 so that should it loose connectivity to Active Directory it chooses the local authentication, however I can't seem to make this work.Within ACS 5.2, Access-Policies, Access Services, Default Device Admin, Identity,
I have a single rule configured for any device that matches tacacs to use the identity source of Active Directory,
If authentication failed: Reject
If user not found: Reject
If process failed: Drop
The ACS can not access Active Directory, when I debug TACACS authentication on any 65k or 2921 device I get "Received Authen status error".
View 2 Replies
View Related
Oct 31, 2011
I purchased a RSV4000 for my home network and I was setting it up when I ran into a bit of an issue. My WAN is set for DHCP so it received an IP and DNS information from the cable modem. From the router I am able to ping my providers DNS servers as well as tracert to google.com. From inside my network I can log in to my admin page and see my other devices so internal DNS is working fine as well as DHCP. I can ping my router internally and I can also ping the WAN IP address of my router internally but that is as far as I can get.
From a PC on my network I cannot access any web content beyond my router WAN port, which I have verified has connectivity. I have power cycled both my modem and my router numerous times to no avail. I plug my old router back in and it works with no problem. I plug my computer into my modem and it works as well.
I turned off all firewall settings, set it so that it is in router mode and edited the DHCP and LAN IP information on it but that is all. All of the other settings should be default.
I even went so far as to plug the RSV4000 into my old router which was plugged into my modem since I know my old router worked. It did the exact same thing. It received an IP from the old router, was able to ping externally and I was able to ping the WAN port but then after that bupkiss.
View 1 Replies
View Related
Oct 15, 2012
I am having two routers of 1841 series.In router 1 I am connected with my Cloud Network and in router 2 I am connected for internet.
I need both the wan connectivities to be advertise in my network for my LAN which is configured with DHCP in my ROUTER 1
Now should I connect this both routers in one switch but I'm having 2960 switch :-(
what should I configure Policy base routing or static route.
Router 1
int f0/0
ip add 10.x.x.x 255.255.255.0
[Code].....
View 4 Replies
View Related
Oct 20, 2012
I am connected to my internet with
WAN Interface
gig0/0 interface
ip add 62.x.x.x 255.255.255.252
duplex full
speed auto
LAN interface
gig0/1
ip add 10.x.x.x 255.255.255.0
duplex full
speed 100 ( i am keeping the speed 100 because it is connected in switch port f0/48,made the switch port as speed 100)
but after some time my connection to the internet goes off and i just shut and no shut the WAN interface and it comes back.
View 5 Replies
View Related
Dec 20, 2011
I have an ASA 5505 and i recently for some reason cannot connect to the VPN using anyconnect.Usually users would connect using the Anyconnect URL with the configured port number: https://publicipaddress:8443
Right now we are getting "page cannot be displayed" since it doesn't connect to the Anyconnect URL page.
I haven't done any recent configuration for this to have failed. I have checked the and both ports 443, and 8443 are allowed in the firewall. NAT is also allowing an exemption for the VPN Pool.
View 2 Replies
View Related
Jul 23, 2012
I have been having some gripes with the above problem for the past few days, connecting several PCs in my office into a network. To cut a long story short, it's a bunch of XP SP2 and SP3 machines with only some of them having these issues. The network consists of two switches and one router with integrated modem and wireless. Internet access is established over that router/ ADSL modem.I have drawn out all the cabling and made all the connections myself, I don't doubt network related hardware one bit. Basically, I had the problem on two PCs, I tested connectivity on that cable with a laptop which didn't have any problems connecting to the network. All the cables are brand new, "straight" connectedC
View 14 Replies
View Related
Mar 17, 2011
i did this and the sign of unable to connect went away, restarted back to it, did it again and it goes away but still no connection. TCP/IP stack repair options for use with Windows XP with SP2.
View 8 Replies
View Related
Sep 3, 2011
my internet is not working on my PC (XP) however the wifi in my house is still on (i can use laptop with functioning internet). The internet status say's "limited or no connectivity" and shows a yellow triangle with an exclamation point in the middle.
View 19 Replies
View Related
Sep 9, 2011
I manage a small office network IP's are generated via a rooter. I need to add a new pc to the network and here is where the problem starts.I have a cable from a HUB in that office which has a splitter 1 way goes to a PC the other is empty. At first i tried connecting the other PC from that splitter but i get the Limited or no Connectivity message on both PCs. If i connect only one of them to the splitter the connection works fine.Now i tried with a HUB, made a Crossover cable from the splitter to the HUB in the WAN port, same deal both PCs get Limited ot no Connectivity. THe strange thing is that if i connect only one via the HUB the same thing happens.I am really out of ideas, my only option left is to connect the PC from the main HUB which means allot of cable posing.
View 3 Replies
View Related
Oct 3, 2011
When using an Ethernet cord, I have no problems connecting to the internet. Also, my iPhone and my Wii have no problems connecting (wirelessly). However, I can't get any laptops to connect to my wireless. I have tried three different laptops and get the same problem, that it can connect to the network but limited or no connectivity.
View 1 Replies
View Related
Aug 28, 2012
I have a spare computer I build. Its a FX-60 on some old asus 939 motherboard. I installed xp in it because I don't have any wireless network adapters that work with linux or Windows 7.I am using an old Linksys WUSB11 Ver 2.6. USB adapter.The computer does have connectivity if I plug in an ethernet cord from the router. Worked fine, fast, was able to install Sp3, etc.I can't get the wireless to work. I get excellent connection strength, but can't actually do anything with it.Since this is XP and I haven't messed around with XP network settings for years, I think I got a bit rusty and spoiled with Windows 7.
View 6 Replies
View Related
Jan 29, 2012
i want to know the physical connectivity of the two pc's
View 6 Replies
View Related
Nov 22, 2011
Currently have a Westell DSL router running to a Rosewill 8 way switch, the problem I am encountering is that 1 Ethernet port will give me connectivity but the others will not. I've noticed when trying to have connectivity on 2 PCs, only one will work. I'm not sure whats going on?
View 2 Replies
View Related
Jul 30, 2010
The problem I have run into is that I am not getting any connectivity between my two gigabit ports on the 1941. I have ge0/0 setup as my internal network and is running dhcp, ge0/1 is the connection to the modem. I can't figure out how to configure the connections so my internal traffic on ge0/0 routes out through ge0/1.
Here is my config:
Using 4312 out of 262136 bytes
!
[Code].....
View 8 Replies
View Related
Apr 24, 2011
I am facing a strange problem in my WLAN Setup. none of my wireless clients are able to associate with Wireless LAN but when I delete and create a new wireless profile in WLC 4404 clients starts associating with WLAN. every 2-3 days I had to delete and create wlan profile. Is it related to IOS bug or any other problem? My Wireless LAN Controller image is AIR-WLC4400-K9-5-1-151-0.aes.
View 4 Replies
View Related
May 25, 2011
I have a AS2511 device connected to the console ports of two switches console. I needed to have a LAN connectivity to these switches from the AS2511 device. Can we use the RJ45 serial ports in the AS2511 to achieve this?
View 1 Replies
View Related
Oct 19, 2011
I want internet for the clients behind the ASA. When i made an entry like:
object network as-us-db11_internet
nat (inside,outside) dynamic nat_usa_pool_72
access-group inside_access_in in interface inside
access-group outside_access_in in interface outside
then have the computer internet but the Client vpn connection wont work. i can not connect to the computer over vpn. but vpn connection worked.
View 1 Replies
View Related
Jun 2, 2011
I have basically started fresh, from a clean image. We bought these with the expectation that we would be able to configure them using the GUI for what we need, which up till this point doesn’t seem to be the case.I will tell you how I have this setup, I have our ADSL going to a modem acting as a bridge with a static IP supplied by the ISP. If i connect a laptop to that modem and set the static ip on the laptop, I get internet access fine.So I then connect the modem to ethernet0/0 and the laptop to ethernet 0/1 I connect to the ASDM and run the startup wizard with the following:
· Outside ip : 87.87.87.87 255.255.252.0 (this works on the lappy straight to the modem)
· Inside ip : 192.168.10.1 255.255.255.0
· No dmz
[code]......
View 2 Replies
View Related
Jul 8, 2012
I am updating my 8.2(3) code for my new ASA5512 that is running 8.6(1) and am unable to get on the internet with my current configuration from the inside interface.
Information:
Outside: ***.***.33.11
Gateway: ***.***.32.9
Inside: 192.168.215.0 /24
dhcp 215.100 - 150
[Code] .....
View 6 Replies
View Related
