Cisco VPN :: 7301 - Multiple L2L IPSec Sources On One Router

Feb 4, 2012

I'm trying to make a redundantish office/datacentre connection on the cheap. At the datacentre, we've got a 7301 (12.2(24)T5) and at the office we've got a Mikrotik RB1200 (5.12).The office router has two ADSL connections to two different ISPs, the datacentre router a single GigE to a colo provider. I'm trying to build an IPSec encrypted IPIP tunnel over each ADSL service to a separate loopback interface on the datacentre router, so I can run OSPF over the top for route exchange. I need to use two different loopbacks on the datacentre router so the office router can have a static route for each out each ISP ADSL. But I'm running into issues making encryption work on two different source addresses.Using the 'crypto map xxx local-address Loopback12' command, I can specify the outbound interface for one of the tunnels just fine, traffic moves as expected - while the other tunnel fails to encrypt. But is there a way of having two peers use two different local addresses, or applying two crypto maps to a single physical interface?

View 1 Replies


ADVERTISEMENT

Cisco AAA/Identity/Nac :: ACS5.3 - Configuring Multiple Identity Sources

Aug 28, 2012

I have an ACS 5.3 cluster, that is configured to use AD. There are a few wireless devices, and monitoring tools that do not have AD accounts. I would like to configure ACS to first check AD for the user authentication, and if that fails to roll over to the local (Internal Users) identity source where I can define these user accounts.
 
It seems that when the authentication hits the initial Identity Policy rule, it never moves onto the next one if the first fails.
 
Attached are screen shots that show how i'm configured for the test, i have a local user defined and I'm trying to log into the firewalls.
 
- Identity Definition : Screen shot of the main ACS definition for the rule i'm testing that's not working
- Identity Rule 1 : The configuration of rule 1 that if it fails i need it to move onto rule 2.
- Log Output : Screen shot for one of the failed attempts from the ACS View Log server.
 
Reason I need to configure it this way is:

- Wireless users authenticate to wireless using AD user accounts. Some hand held scanners do not support that and will need to authenticate using the MAC address.
- Authentication to Network devices for managment uses AD accounts. We have some monitoring tools that do not have AD accounts, and will need to    be able to log into Network devices to issue some commands (Examples: Cisco Prime LMS and NCS, Infoblox NetMRI).

View 4 Replies View Related

Cisco VPN :: Create Multiple IPsec Tunnels On 837 ADSL Router?

Nov 4, 2011

I need to create multiple ip-sec vpn tunnels on A Cisco 837 ADSL Router. I am able to create one tunnel but the second connection is asking for the outside interface which is atm and already taken by the first tunnel. How can i create more tunnels?
 
Secondly, after creating the first tunnel i am able to access the remote lan network but when i tried tracert "remote lan ip of a pc" from my pc i got "request timed out" after passing my 837 but succeeded to reach the target. Does tracert needs something to be opened in the router?

View 2 Replies View Related

Can Merge Two Sources Of Bandwidth Into One Router

Jan 12, 2011

can i merge two sources of bandwidth into one router ?

View 1 Replies View Related

NAT / PAT And URL Dependant - Cisco 7301

Aug 12, 2012

I need to configure cisco 7301 with list of hostnames/ip's. These need to be forwarded to internal ip's/ports (depending on the hostname)

In the current setup...
www.frog.com, ip 82.45.100.100 nat's to internal 10.0.0.1
go to www.frog.test, firewall allows and nat's to 10.0.0.1 - no problems

But now i have a need to make it so that different URL's go to different tcp ports on server
eg.URL

View 1 Replies View Related

Cisco WAN :: 7301 Hundreds Of Static Routes For IP

Jan 27, 2012

We have a Cisco 7301 concentrator, well two of them in HSRP configuration.  We have multiple VPN's setup on that router (crypto map based).  Recently we noticed the following:
 
- There is one IP address that has hundreds of static routes for some reason

- VPN for this customer is working, but I'm trying to find out why this is happening. 
 
Here is how it looks like: S 0.0.0.0 0xF5FFFF2C [1/0] via "ip-address".There are hundreds of entries for a single IP there.

View 2 Replies View Related

Cisco :: Run Some NetFlow Monitoring On Few Sub Interfaces On 7301?

Mar 18, 2012

I would like to run some NetFlow monitoring on a few sub interfaces on a router. This is a 7301, with an NPE-G1.What I want to know is, does Cisco have a page anywhere (because I can't find one) that lists typical additional CPU and memory loads one can expect when enabling NetFlow on an (sub)-interface; perhaps for a given speed (Mbps) and/or number of flows?I don't want to enable NetFlow and then bring the device to a grinding halt, how can I know what sort of overhead to expect?

View 2 Replies View Related

Cisco WAN :: 1941 - Multiple VRF BGP / GRE / IPsec Failing

May 17, 2011

I'm trying to configure a Cisco 1941 to connect to multiple Amazon VPC instances. Each VPC instance brings up 2 x IPsec over GRE tunnels with BGP in to the EC2 cloud and enables flat extension of the corporate LAN. Basically. you can spin up EC2 instances in a private subnet and route to them across the VPC link from the corporate LAN.
 
The Amazon configuration is templated and not designed to support multiple instances on one customer access gateway - however, I want to overcome this and find a technical solution around bringing up a second physical router. I've got VRF configured and working for the first instance, but when we add a second VRF to the configuration IPsec fails. The second VRF is essentially identical to the first.
 
We're potentially looking at a licensing issue with IOS 15.x, the version we're running is... 

ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Permanent     securityk9
data          None          None          None

[Code]....
 
However, the IPsec configuration is complete and all keychains etc. are in place as they should be.

View 13 Replies View Related

Cisco WAN :: 7301 - Route Reflector Maintenance Without Service Interruption

May 27, 2013

I have question regarding route reflector. In my MPLS core network ,we have two route reflectors. Two route reflectors and each PE routers are belonged to a peer group. Route reflectors are Cisco 7301. IOS 12.3.  I have Hardware maintenace on one Routereflector. How can I do that without interupting the end customer trafic.

View 2 Replies View Related

Cisco VPN :: 5510 - Multiple L2L Ipsec To Same Destination (ip Address)

Jan 23, 2012

im lookin to establish a a multiple L2L ips  tunnels ( one tunnel for each subnet) from my cisco asa 5510 to the same destination. should the cisco asa capable of this ?

View 6 Replies View Related

Cisco Firewall :: Connecting ASA 5505 To Multiple IPSec VPN?

Sep 13, 2012

We currently have 2 different ASA 5505 connect to our ASA5510.  We want to VPN connect the 2 5505's to each other while still mantaining connection to our 5520. I have attached pdf of what we have.  What we want is to connect traffic between the two 5505's so that devices in either location can talk to each other while still mantainig connection to the 5510.

View 13 Replies View Related

Cisco WAN :: Config ASA5510 For Multiple IPsec Tunnels

May 13, 2013

How to configure CISCO ASA 5510 for multiple IPsec tunnels?On other side is CISCO 2801.

View 20 Replies View Related

Cisco Firewall :: Connecting ASA 5505 To Multiple IPSec Vpn

Sep 13, 2012

We currently have 2 different ASA 5505 connect to our ASA5510.  We want to VPN connect the 2 5505's to each other while still mantaining connection to our 5520. I have attached pdf of what we have.  What we want is to connect traffic between the two 5505's so that devices in either location can talk to each other while still mantainig connection to the 5510.

View 1 Replies View Related

Cisco Routers :: RV180W IPSec VPN With Multiple Networks?

Sep 4, 2012

I am setting up a customer site.  One side is RV180W and the other side is Checkpoint 500W.
 
RV180W side
LAN - 192.168.100.0/24
 Checkpoint side
LAN - 172.26.1.0/24
VOIP - 172.26.2.0/24
 
Need to setup an ipsec tunnel between the site.  However, from the RV180W side, I can only ping the VOIP network, but not LAN. I have heard that RV180W only can talk to one remote network via ipsec, correct?  workaround this other than changing out the RV180W? 

View 4 Replies View Related

Cisco Routers :: RVS4000 - Multiple IPSec VPN Tunnel

Aug 29, 2011

I recently purchased a RVS 4000 (firmware V2.0.0.3) and am having some issues creating a second (third...fourth?) IPSec VPN Tunnel. The first one is up and running just fine. On the VPN Summary screen it says [1 Tunnels Used  4 Tunnels Available].

When I go to configure the second tunnel, I select --New--  from the   "Select Tunnel Entry" drop down and proceed to fill in all the connection information. When I click Save, it seems to be processing and after a few seconds just returns me to the same screen, with none of the information I just input and no connection created. No errors given.

I have another RVS4000 to connect at a different location which will require a similar setup, but don't want to do anything with it until I have the one mentioned above working fully.

View 1 Replies View Related

Cisco VPN :: ASA5520 - IPSec VPN Client And Multiple Target Networks

Sep 9, 2012

I am using an ASA 5520 running 8.2(4). My objective is to get a VPN client to access more than one network on the inside of the network, i.e., I need to VPN in with an IPSec client and be able to establish tcp connections to servers at 192.168.210.x and 10.21.9.x and 10.21.3.x, I believe I am close to having this resolved, but seem to have a routing issue.

View 5 Replies View Related

Cisco Routers :: SRP547W Multiple IPSec Policies Through Single IKE Policy

Apr 7, 2012

I am trying to create a VPN between an SRP547W and a Cisco IOS router, in this case a UC540.I am running firmware 1.2.4 (003) Jan 11 2012. Now I can do this with an SRP527W and many other routers successfully. Including other IOS routers 1801, 1941 etc.
 
The issue I have is on the SRP547W I cannot create more than one IPSec Policy through a single IKE policy. I require this to route multiple v lans to our remote site. When I try to add an additional IPSec Policy I am give the error "IKE policy has been used by other IPSec policy"
 
This is possible to do on the SRP527W with latest firmware. I have tried rolling back to earlier firmware but instead I am given an error about overlap. Latest release note for this firmware suggest this issue was already resolved.

View 7 Replies View Related

Cisco :: ASA 5580 - Top 10 Destinations / Sources Have No Data

Mar 1, 2012

In the Firewall Dashboard of my ASA 5580, I get data on every pane, except for the Top 10 Sources and Top 10 Destinations. Why is that, and what do I need to do to get data there?

View 1 Replies View Related

D-Link DIR-825 :: How To Add U-Boot Sources To Provided Archive

Feb 24, 2011

The bootloader used by the device is U-Boot, which is also licensed under the terms of the GPL. Sadly these parts are missing from the source code package provided by D-Link. Therefore I am asking you to add the U-Boot sources to the provided archive or post them here in the forum.

View 12 Replies View Related

Cisco Firewall :: Subinterface On ASA 5520 - Extend Network Sources

Apr 23, 2013

I am having an issue where I can't get to external network sources via my sub interface which is attached to a 192.168.10.X VLAN I created to for Guest wireless traffic. The internal interface is a 10.5.X.X network. I can get out the external interface, but anything that we have A records for such as our mobile iron server that we can hit from the outside via https and an external IP can't be hit from the subinterface at all. Would this be a DNS rewrite issue or inspection problem?

View 3 Replies View Related

Cisco WAN :: How Many Sources Can Be Supported By Monitor Session In Cat4900 (4948)

Feb 23, 2012

For the command "monitor session 1 source" in Cat4900 (e.g. 4948), how many source interfaces can be supported per monitor session?

View 1 Replies View Related

Cisco :: 3750G-48 Good Sources Of Information To Program And Configure This Switch

Dec 24, 2012

I am a very basic user on the Cisco Switch programming. I was given a Cisco 3750G-48 to tinker with in my home office. I was wondering if someone could lead me to some good sources of information to program and configure this switch? I am wanting to create a GB network in the house with the computers that I have and the storage arrays.

View 8 Replies View Related

Cisco :: Change / Remove Gateway Within Of Routing Information Sources In OSPF Protocol

Jul 4, 2012

I want to know could we change or remove the Gateway (highlight) within of Routing Information Sources in OSPF routing protocol? [code]

View 9 Replies View Related

Cisco WAN :: AES-128 IPSEC Site-to-Site VPN Multiple Crypto Maps For One Peer

Jan 28, 2013

With à customer we have à site to site VPN connection. In this tunnel there is one subnet routed with a 3des-sha encryption / hash. Now the want to add a new subnet in this tunnel, but with a AES-128 / MD5 encryption / hash. Is it correct if we make a new crypto map with a higher seq. number?

View 5 Replies View Related

Cisco VPN :: Multiple Site To Site IPSec Tunnels To One ASA5510

Dec 4, 2012

Question on ASA VPN tunnels. I have one ASA 5510 in our corporate office, I have two subnets in our corporate office that are configured in the ASA in a Object group. I have a site to site IPSEC tunnel already up and that has been working. I am trying to set up another site to site IPSEC tunnel to a different location that will need to be setup to access the same two subnets. I'm not sure if this can be setup or not, I think I had a problem with setting up two tunnels that were trying to connect to the same subnet but that was between the same two ASA's. Anyways the new tunnel to a new site is not coming up and I want to make sure it is not the subnet issue. The current working tunnel is between two ASA 5510's, the new tunnel we are trying to build is between the ASA and a Sonicwall firewall.

View 3 Replies View Related

Cisco Routers :: Can RV042G IPSec VPN Support Apple IOS IPSec VPN

Apr 29, 2013

I tried any type of combination and just couldn't make it works.  Only PPTP works well. Whether Apple iOS IPSec VPN is supported or not?

View 11 Replies View Related

Cisco Wireless :: C1131AG - Multiple SSID With Multiple VLANs Configuration On Aironet AP

Oct 21, 2012

how i can configure a second ssid for guest access in our environment. this is our network setup prior to this request: Internet----Firewall (not ASA)---ce520---C1131AG and CME router is also connecting to the ce520 switch. we only have two vlans: one for voice and two for data.
 
Presently, there is no vlan configured on the AP because it on broadcasting ont ssid and wireless users gets IP from a windows DHCP server on the LAN. the configuration on the ce520 switch port for the AP and other switches say access vlan is the DATA vlan which automatically becomes the native vlan for all trunk port connecting the AP and other Stiches to the network.
 
Now with this new requirement, i have made my research and i have configured the AP to broadcast both the production and the guest Vlans. The two vlans are 20-DATA and 60-Guest. I made the DATA vlan on the AP the native vlan since the poe switch is using the DATA vlan as native on the trunk ports. I configured the firewall to serve as DHCP server for the guest ssid and i have added the ip helper-address on the guest vlan interface on all switches while the windows server remains the dhcp server for the production DATA Vlan. I have confirmed that the AP, switches can ping the default gateway of the guest dhcp server which is another interface on the firewall. I can now see and connect to all broadcasted ssids but the problem is I am not getting IP addresses from both the production dhcp server and guest dhcp server when i connected to the ssid one at a time. My AP config is attached below.
 
Do i need to redesign the whole network to have a native vlan other nthan the data vlan? Does the access point need to be aware of the voice vlan? Do the native Vlan on the AP need to be in Bridge-group 1 or can i leave it in bridge-group 20?

View 1 Replies View Related

Cisco Wireless :: Configure Multiple SSID With Multiple VLANs And DHCP Pool WAP4410N

Sep 18, 2012

My question is if I can configure 3 ssid, for 3 different VLAN and add the DHCP address from a WAP4410N AP, when you upgrade to the latest version of IOS I can have this functionality?

View 2 Replies View Related

Cisco Switching/Routing :: 6509 - Configure Multiple Dhcp Pools On Switch For Multiple VLANs

Mar 9, 2010

Is it possible to have multiple dhcp pools for multiple VLANs? The switch is a 6509 and/or 4506 catalyst. I don't want to use server-based products.

View 5 Replies View Related

Cisco Wireless :: WLC 5508 Multiple Interfaces For Multiple SSIDs

May 13, 2013

I am trying to build a new network from scratch, I have the WLC 5508 w/ Aironet 3600e APs connected to my Netgear Smart Switches and a Linksys RV082 router that I'm using as my DHCP server with several VLANs for several stuff on my Switches.
 
I have 2 questions:
 
1. Can I have 5 Interfaces configured on 5 different VLANs, each SSID on each a different Port:
 
Port 1: Controller management only=> 192.168.x.x /24
Port 2: SSID 1: WiFi Internal=> 172.16.x.x/12 (Radius Auth with no sharing)
Port 3: SSID 2: WiFi Internal w/ sharing=> 192.168.x.x/24 (Radius Auth with sharing)
Port 4 :SSID 3: WiFi Guest=> 10.0.x.x/8 (Web Auth)
Port 5: SSID 4: WiFi IT=> 192.168.x.x/24 ( Radius or certificate Auth with access to the controller management interface)
 
2. How can I use the Controller as the DHCP server for all the WiFi traffic, and how should that be configured to work with my other DHCP server?

View 3 Replies View Related

Cisco :: Configuring AP1121G-E-K9 For Multiple SSID With Multiple VLAN?

May 28, 2013

i`m facing a problem configuring the mentioned access point to act as stand alone access point with multiple SSID assigned to differnet VLANs the problem is that

1) i`m not able to broadcast the both SSIDs in the same time from the Access point

2) i need to make the radius server to manage the SSID access for the wireless clients (trying to find a way in which the aceess point sends a log for the radius server containing the VLAN id /IP address of the the SSID) you may find the below info about the IOS ver. & the configuration?
 
i`m running IOS /c1100-k9w7-mx.123-8.JEE/c1100-k9w7-mx.123-8.JEE?

View 2 Replies View Related

Cisco VPN :: IPsec VPN On 871 Router

Sep 27, 2011

I have a cisco 871 router and I have set up an IPsec vpn on it. I can connect to the vpn but once connected I can only ping the router (10.12.0.1) but nothing else on the network. I can access the router via ccp/telnet and from the router I can ping other machines on the network, so I know that they are connected, but I can't access them from the vpn connected machine. Also the vpn connected machine can't access the internet while connected to the VPN. How can I get computers that connect via the vpn to see other machines on the network, and how can they access the internet while connected to the vpn?
 
Here is the running config:

Building configuration...
 Current configuration : 6760 bytes
version 12.4
no service pad
[Code]...

View 2 Replies View Related

Cisco VPN :: 837 Router To ASA5510 IPsec VPN

Mar 19, 2012

I have a 5510 running 8.42 code with multiple site to site tunnels coming into it.  Sites vary from ASA 5505's, 1841 and 1921 routers which all work perfectly.  That being said I think the ASA side is good.  I have an 837 running 12.4 code, Cisco IOS Software, C837 Software (C837-K9O3SY6-M), Version 12.4(5b), I'm trying to configure it for site to site VPN back to the ASA.  When I ping from the E0 interface I get the following debug output and nothing else.  I've made a lot of changes to no avail in getting closer to a successful configuration. [code]

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved