Cisco VPN :: 881 / Only Connect With One User / Other Connection Denied?
Jul 29, 2012
I am currently configuring a Cisco 881 router and am having some vpn connection issues:I can connect with one user (me) and all other connection attempts form other users are denied. When I disconnect, other users can connect - the scenario is that only one user can connect at any given time.
Here is my config:
Building configuration...
Current configuration : 11423 bytes
!
! Last configuration change at 13:11:23 PCTime Fri Jul 27 2012 by zephyr1
! NVRAM config last updated at 13:25:30 PCTime Fri Jul 27 2012 by zephyr1
!
version 15.0
[code]....
View 1 Replies
ADVERTISEMENT
Oct 6, 2011
I configured an ASA 5505 a couple of weeks ago. Every thing is working properly except it sends irritating messages to the syslog server. Her is an example of the message:
%ASA-2-106001: Inbound TCP connection denied from 195.215.221.56/80 to 10.70.13.90/252 flags PSH ACK on interface outside
%ASA-2-106001: Inbound TCP connection denied from 195.215.221.56/80 to 10.70.13.90/2252 flags ACK on interface outside.
View 1 Replies
View Related
Jun 24, 2012
I have 2 cisco routers that resired on the same interface on Cisco ASA. For security reasons, on both of the routers I have configured default gateway to be ASA interface, then static route between them on the ASA, I get the following error when on station comming from first router trying to connect to another station behind secound router (again, on the same interface, maybe this is the issue?).
ASA-3-106001: Inbound TCP connection denied from flags SYN
There is access list allowing traffic between but hit count is 0
View 4 Replies
View Related
Apr 28, 2011
Connection denied due to NAT reverse path failure
View 2 Replies
View Related
Oct 30, 2011
i am loaning my laptop to a friend to use while traveling and I have created a "guest user" account so he doesn't have to go through my home pages and personal files. Well, whenever this account is being used, there is no WiFi connection logo and so it cannot be connected to the internet via WiFi...
View 1 Replies
View Related
Sep 9, 2011
We recently switched from Centennial aircard to Verizon aircard (USB760) for our laptop. We have two user accounts on our windows 7 pc. With Centennial we could switch between user accounts without closing sierra wireless manager but when I switch to another user now, a message comes up saying vzaccess manager running in another account and we cannot use the internet until we have shut it down in the account it is running in - which is a pain. I have tried right clicking vzaccess manager in all programs and it does not have a share option. I also went to properties under vzaccess manager and found a setting to share and set it up but it still will not share
View 2 Replies
View Related
Feb 15, 2012
I was wondering if anyone has seen their VPN User Connection Status Table empty even though you know for sure clients are connected? I connect with my iPhone to the PPTP VPN successfully and it works fine but there's no entry for the connection on the VPN User Connection Status Table. Is that normal? Does the router only collect data about Windows clients?
View 3 Replies
View Related
Apr 22, 2011
On one of my computers one user cannot connect to Internet. The following message appears: �The Proxy Server is refusing connections. Firefox is configured to use a proxy server that is refusing connections. Check your proxy settings to make sure that they are correct.Changing users to another account and there is no problem connecting.This computer currently has an unresponsive keboard. The above changes and connections are accomplished using only the mouse.Runs on Windows XPHave posted the following thread in hardware:The keyboard on one of my computers is totally non responsive. The following message appears: �Windows cannot start this hardware device because its configuration information (in the registry)
View 3 Replies
View Related
Sep 22, 2011
We are running ACS 5.2 patch 6 and want to restrict access for users to be able to add devices to the system.For example, admin person in site A can only add devices into the site A group and cannot see/access other sites groups.
View 1 Replies
View Related
Apr 20, 2009
We are using an ASA 5510 and remote access (SSL VPN) using the AnyConnect client.
Is it possible to display a user message when a user connects using the AnyConnect client, matching a specific dynamic access policy? Can the message be displayed when the action is "Continue" rather than "Terminate"? I can't seem to get this to work and wondered if there was a LUA function to do this.
We have a DAP which gives a restricted ACL when the user's anti-virus is out of date, and I wanted to notify the user to update their anti-virus and reconnect.
View 4 Replies
View Related
Oct 10, 2011
I want to create a local user in my Cisco ASA 5520 to allow the user to use the ASDM in Read-Only mode. I want the user to view the Dashboard only.
View 1 Replies
View Related
Jun 30, 2011
ASA 5510 ASA 8.0 ASDM 6.1 I want some remote users to have split-tunnel connection, others not. I used Cisco Document ID 100936 "Allow Split Tunneling for AnyConnect VPN Client on the ASA Configuration...". I created a new Group Policy with split-tunnel enabled. I created a new Connection Profile and assigned to it the new Group Policy. When I authenticate at the AnyConnect client I get a dropdown of the 2 connecton profiles, to choose the one I want. Each of them works, enabling or disabling split-tunnel. But I want to assign a connection profile to the particular user, not give the user a choice. The problem is I'm using LDAP authentication. The Local Users I set up before LDAP are obsolete, assigning them a Group Policy does nothing. I really don't want to give up LDAP and force people back to another local password. But the LDAP authentication to Active Directory just says yes or no, it won't assign a connection profile. At the AnyConnect Connection Profiles page I have set a switch "Allow user to select connection profile, identified by its alias, on the login page. Otherwise, DefaultWebVPNGroup will be the connection profile". If I clear that switch every user will be assigned the same default profile, which does not work.
View 2 Replies
View Related
Sep 9, 2011
I cant connect to internet but other user can. We use the same laptop but my internet connection was cut off whereas my son's internet connection on the same computer is working fine. I have used cable as well with no success. Obviously there is nothing wrong with the router or cable or wireless but there must be something wrong with my user settings. My son is using the same computer and can connect fine to internet as another user.
View 2 Replies
View Related
Jan 11, 2012
I have a wired adsl connection in location A. i know the user name and password. I want to connect to internet in location B but location B is very far from the location A.is it possible to use the same user name and password to connect to the internet.
View 2 Replies
View Related
Jul 9, 2011
I am unable to connect to the internet using my user ID,but when I login to the guest account I can successfully connect.I am using windows vista and Mozilla Firefox as my browser.
View 2 Replies
View Related
Dec 11, 2011
I configured my ACS 5.1 correctly, but I get an "Access is denied to NCS" at the web login page. In the ACS i see a successful authentication.
View 14 Replies
View Related
Jul 11, 2012
how to debug an ACL I've created on a 4404 WLC, specifically I want to monitor what packets are being denied by the ACL as something that should be working isn't
I've created an explicit deny statement at the end of the ACL and verified that the counter increases each time I try the problem software update.
What I can't work out is how to get the WLC to tell me what packets are being denied by the explicit deny statement, all I can find are 'show acl' commands which just give me the counts.
The equivalent on a router would be debug ip packet acl and adding the log keyword onto an ACE. I suppose I could configure a SPAN session on the WLC uplink to the switch but that seems overkill?
View 2 Replies
View Related
Jan 1, 2012
I consider the NAT mechanism to be quite straight forward, but although the firewall ACLs allow the traffic, it is being denied. The ASDM log and packet-tracer indicate the problem being an ACL.
# the internal resource
object network mabe-mbp
host 10.0.0.36
!
# these are ALL of the rules on the outside/inside interfaces
access-list outside_access_in extended permit tcp host 1.2.3.90 any eq 12380 log disabled
access-list outside_access_out extended permit ip any any log
access-list inside_access_in extended permit ip any any log
access-list inside_access_out extended permit ip any any log (code)
View 2 Replies
View Related
Nov 21, 2012
Is it configurable to allow wifi user to user traffic on WLC 5508?
View 4 Replies
View Related
Jun 24, 2011
I was changing the computer name on a group of networked computers but forgot to go to - Manage - Users - Administrator and set a password. I accessed Computer - System Properties - Clicked the "Change" button for "To rename this computer, click Change" and selected the "Workgroup" as opposed to the "Domain" option. When I restarted the computer the computer will not allow me to enter the administrator password to allow me access the computer.
View 2 Replies
View Related
Apr 2, 2011
NETWORK CONNECTION PROBLEMPOPUP ERROR states"\<name> is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. Access denied."When trying to View the two PCs through My Network Places> View workgroup Computers in MSHOME?I was able to map the shared folder manually.
View 1 Replies
View Related
Jan 3, 2011
I have a computer with windows 2003 server installed on it. There is one shared folder. The computer's name is SERVER. The shared folder's name is OFFICE.Whenever I type \SERVEROFFICE in a windows explorer window, I get a pop up window with a message that says that Windows does not find \SERVEROFFICE.I mean, I should be able to see the folder in this way because this OFFICE folder is shared and I am doing this from the same computer and not from another computer in the LAN.
View 3 Replies
View Related
May 28, 2012
I'm trying to solve a disastrous networking (via workgroup nightmare) and I cannot enable the DNS Client on my Windows 7 PC. I go to cntrl panel, admin services, dns client, and try to change it to automatic and it says "access is denied"
View 1 Replies
View Related
May 14, 2012
Network access denied for a particular folder
View 1 Replies
View Related
Feb 20, 2011
XP desktop hard wired to router. XP and Vista laptops wireless. Vista has SP1 and both XPs are SP3. All computers can see each other. Vista can access the XP drives. The 2 XP computers can access each other. The 2 XP computers cannot access the VISTA. Access is denied. Firewalls are off on all computers. I have tried permissions on both sharing and security tabs with no luck.
View 14 Replies
View Related
Apr 27, 2011
Two Access Switch(2960) are connected to each other and they are connected to Core Switch ( 6509), problem is the user's connected to Access switch cannot access Share drive which are on Servers , this servers are also connected to core on the first module ,,, so the user are not bale to open their share drive , it is opening but taking too much time?
View 4 Replies
View Related
Feb 27, 2011
I have a laptop with 2 user account (one for me - administrator and the other for my eleven year old son). Connection is wireless. Until a few months ago everything was working fine and then the problems started: my son could no longer connect on the internet with Explorer and Google Chrome but I managed to connect it via Firefox. And it worked until yesterday. As of yesterday he can no longer connect to the internet even with Firefox. I tried again as an administrator to reinstall Google Chrome, but the icon is shown only on my user account. I took a completely new browser - Opera, but fails to connect. When I go to Diagnose & Repair connection problems - shows no problems. On my account everything is working properly. OS is Windows Vista Home Premium
View 2 Replies
View Related
Apr 3, 2012
I'm configuring ASA 8.4 for SSLVPN allowing Web Portal access with group-url. I've noticed that if I put certain keywords after slash mark on group-url, client access would be denied by http 404 error.
Here's my configuration:
tunnel-group test type remote-access
tunnel-group test general-attributes
default-group-policy test
[Code].....
View 3 Replies
View Related
Mar 18, 2012
We are trying to add an additional LAN-to-LAN IPsec VPN to our network. We currently have one remote office connected, when we configure the second VPN matching the first the tunnel never begins to establish. There is an ACL that is dening the static IP for our remote office.
The layout is as follows:
Main office = ASA 5520
Remote Office A = ASA (Unknown Model)
Remote Office B = Adtran Router
All devices have static IP addresses.
We used the ASDM VPN wizard to create both VPN's.
We have created a rule allowing all traffic from our remote office IP, and that had no effect on the VPN aside from eliminating the following message from our logging:
4 Mar 19 2012 15:18:01 106023 67.50.19.230 50234 TWT-hq-e 31326 Deny udp src TWT-outside:67.50.19.230/50234 dst inside:TWT-hq-e/31326 by access-group "outside-in" [0x0, 0x0]
We have verified that both sides are configured the same however the VPN never is initiated so as of right now the ASA is simply blocking all attempts from our remote office to connect.
View 1 Replies
View Related
Jan 14, 2013
I'm having problem getting ICMP echo monitoring on outside interface to work. I've set: icmp permit host monitoring_station_adress outside but I still get:
%ASA-3-313001: Denied ICMP type=8, code=0 from monitoring_station_adress on interface outside. I'm trying to directly monitor ip on ASAs interface outside.
I have access-group tied to "in" direction on interface outside. Do I still have to put "permit icmp" rules despite the fact that icmp permit outside command is set?
View 4 Replies
View Related
Feb 19, 2012
I have a website that is hosted by our company, but when the staff goes to the outside address of th website it gets denied by ACL thus page not found.
3Feb 20 201211:25:23192.168.3.5752928our Extrenal IP80TCP access denied by ACL from 192.168.3.57/52928 to inside: our External IP/80,OUr external ip is also the ip of the 5505.
View 1 Replies
View Related
Jun 12, 2011
I have CISCO Aironet access point C1130 , but not able to connect by users, I can see below logs from access point.
Jun 13 17:50:10.686: RADIUS: no sg in radius-timers: ctx 0x10653F8 sg 0x0000
Jun 13 17:50:10.686: RADIUS: Retransmit to (20.33.100.11:1645,1646) for id 1645/247
Jun 13 17:50:15.678: RADIUS: no sg in radius-timers: ctx 0x10653F8 sg 0x0000
Jun 13 17:50:15.678: RADIUS: Retransmit to (20.33.100.11:1645,1646) for id 1645/247
[Code] .....
View 0 Replies
View Related
Mar 13, 2011
i tried all the possibilities... still i'm getting the same error.
View 3 Replies
View Related
