I have a asa 5505 having a ssl vpn which allow me to connect the server using anyconnect and allow me to browse the internet but doesn't allow me to have an access the server what can be the problem ?
View 4 RepliesI write because my Cisco ASA 5505 doesn't start.When I connect power to the device, immediatly "Power" green Led turn on but "Status" Led is orange and not change.There is not data by Console cable.I try by another Power Supply but nothing.
View 1 Replies View RelatedCisco ASA 5505 ver 8.4. Most things work but now I want to setup a vpn connection..I have done this 2 ways, first by using the "VPN Wizard" in ASDM and then 5 hours later removing everything and configuring from cli. And it just doesn't work, client (WinXP & Win7) gets "error 792" and sometimes "error 789" (both indicating problem with phase 1, I'm pretty sure of that) Googling on those gives a few suggestions none works. All I get in the log on Cisco is the "Error processing payload: Payload ID: 1" Google on that only comes up with a few pages telling me this message is caused by an error. (Yeah, I could never have guessed...) For the cli config, I followed this tutorial carefully (3 times actually...) url...I'm using PSK for IPSec, entered same on Cisco and client - checked several times, this is not a password/PSK issue. Ports opened on Cisco: 500, 1701, 4500 (For a try I opened all ports, no change.) And here's the "show run". [code]
View 2 Replies View RelatedA couple of weeks ago, one of our ASA 5505s failed, and Cisco TAC shipped out a replacement. I was on vacation, and my assistant worked with TAC to get our backed-up configuration restored to the new hardware. This backup was just a copy & paste of the "show start," rather than an export done from ASDM. Anyway, since I got back on vacation I was able to iron out all the wrinkles from the configuration restore, except one. The remote access VPN isn't quite working. This VPN is only used in emergencies, when I can't access that branch office's network via our WAN.
What's happening is that clients are getting "authentication failed" messages when connecting. On Windows, it's an error 691. The VPN is set to authentication against RADIUS (Microsoft IAS server). The IAS server reports that the connection and authentication is successful. AAA RADIUS authentication tests on the ASA succeed, as do authentication & authorization LDAP tests. Basically, everything was working fine before we swapped in the new hardware, and I've gone over the configuration with a fine-toothed comb to ensure nothing's changed -- but clearly, I'm missing something. The new ASA is otherwise operating perfectly.
I have asa 5505 with security plus license, I configured dual ISP with two different ISP provider. I followed below cisco document to configure dual ISP [URL] The Configuration works during the testing, while removing the primary ISP cable from firewall. The problem i am facing is my primary ISP is down but the gateway is still up and it not switch over to backup ISP. For SLA which IP should i monitor so once my primary ISP is down it will fallback to Secondary.
View 5 Replies View Relatedmy 5505 running on version 8.2.5 doesn't seem to recogize the simple command "ip address dhcp setroute......"
ciscoasa(config-if)# ip address dhcp
^
ERROR: % Invalid Hostname
ciscoasa(config-if)# ip address ?
configure mode commands/options: Hostname or A.B.C.D Firewall's network interface address
Why when I try to reset Cisco ASA 5505 by pressing the button behind the hardware nothing happen? Just via software I can reset it?
I bought the hardware an year ago and I've never used, the problem that I don't have the blue cable and via software connecting to PC doesn't work.
I just got a Cisco asa 5505 with the next OS and ASDM info ASA 5505 OS 8.4(3) ASDM 6.47 I configured and enter all rules to allow incoming traffic to LAN but it's not working also, I have one host inside that is configured in a second IP and create the rule to allow traffic to it but it doesn't work too.
Problem 1 I have VNC running in port 5900 tcp and I want to connect from Internet using port 6001 and this has to forware the connection to the real VNC port. In the configuration I have a few host with the same configuration but I use different outside port to get it.
Problem 2. I have a second IP with services: SMTP, HTTP, HTTPS and port 444 all TCP forwarding to a server in the LAN.
Facts: SMTP. Every time that I do telnet to the second IP looking for the SMTP port, the firewall doesn't let the incoming connection goes through and the LOGGING screen doesn't how that connection.PORT 6001 (outside)this port is configured to work with the IP in the outside internface and it was to send the incoming connection to a host inside to the real port 5900.Can any one check my configuration if I'm missing anything? for sure I'm but I didn't find it. Bellow is the configuration, I masked the Public IPs just left the last number in the IP, also I left the LAN network to see better the configuration.
CONFIGURATION.
: Saved
:
ASA Version 8.4(3)
!
hostname saturn1
domain-name mydominio.com
enable password SOMEPASS encrypted
[code]....
asa 5505 do not pass traffic as a patch cord, how to make it pass traffic? [code]
View 2 Replies View RelatedWe are using several Cisco ASA 5505 with the 8.05 OS on it. The problem is that the SMTP traffic of my ISP(Telenet) isn't passtrough the ASA, I'm using outlook 2010. Before there was also a problem with our local exchange server but I solved this by disabling ESMTP checking in the policies, but it didn't worked for my local ISP.
View 4 Replies View RelatedI have created remote access vpn in my ASA 5505. The tunnel is established but i am not able to access the internal network.
View 3 Replies View Relatedmy internet doesnt allow access to thepiratebay.org. Why?
View 1 Replies View Relatedcd doesn`t work and can access web for set up
View 1 Replies View RelatedLooking for input on creating a guest VLAN for a client. The goal is to create a guest VLAN that doesn't have access to the corporate network using one DSL modem. They currently have a managed switch (3COM Baseline Switch 2928-SFP Plus). There are no existing VLANs or guest access. Additionally, they are looking for a WAP that supports captive portal.
View 10 Replies View RelatedI started to discover the new CAT3850 switch and it seems to be that I fail with a basic setup: I am not able to terminate the CAPWAP tunnel from an Access Point (3502E) on the CAT3850.The AP is directly connected to the switch. I am using VLAN10 (192.168.1.0/24) and an interface VLAN10 (192.168.1.1) which is the WLAN management interface as well. The CAT3850 provides the IP address via DHCP for the AP. A simple setup ...The strange thing is, that the AP gets an IP address, the CAPWAP conversation starts and ends up with the following message:
*Apr 21 06:24:33.773: %IOSXE-3-PLATFORM: 1 process wcm: *spamReceiveTask: %LWAPP-3-AP_LICENSE_REQUEST_ERR: License request failed for AP b8:be:bf:14:ee:20 - AP License Request timedout, ensure MC link is up, Resettting AP
After that the conversation starts from the scratch. On the CLI of the AP I can see that the AP fails to download the image (it is stucked in the image phase).I am using the 50 AP evalutaion licenese. Therefore, it should not be a problem of having no licenses.
I can not setup a new user, or access wireless networks that show on my laptop had a virus and the shop said they removed it but the network has not worked since it a dell inspiron 1525
View 1 Replies View RelatedI bought a wireless router (TP-Link / TL-WR740N) an install it , it works with my laptop and telephone. no problem.now i connected another desktop computer to the router through a wire (LAN port) because the PC has no wire capability , the problem is that i cant access the net.
View 1 Replies View RelatedI have connected my laptop to many many networks, but this is the first time this happened. I went to my moms today, and triied connecting but it only says limited access and full bars, and sometimes it doesnt even say its limited access...I have restarted modem Deleted network file (or whatever yhou call it, its in manage network. makes it like ive never joined it)Checked if connection switch was off on my laptop (Wasnt)Disconnected and reconnected multiple times Cry a little And restarted computer .What can i do?
View 1 Replies View RelatedLike others I see on this board, we've got middle- and high-school age kids whose access to FB and other sites needs to be controlled/scheduled.
I thought the DIR-655 was great, in that it has features that, on the face of it, would seem to be ideal for blocking domains and restricting access.
My problem: I've never been able to get this to work.
I've set up schedules and created lists of domains that I want to limit access to according to the schedules, but the only constraint I've ever gotten to stick is blocking access completely to the router.
*None* of the schedule-based or website-based access controls have ever worked; I'll put the block in place to my daughter's computer's MAC address so she shouldn't be able to get to youtube or facebook, save, bounce the router, but then I go by her room and she's still busily chatting away online to her FB friends.
Based on similar posts I've seen on this forum, this may not be a unique problem.
So in a nutshell, this is what I want to do:
1) Block certain computers (identifiable by MAC address)
2) from being able to get to particular named domains (and any of their sub-domains)
3) according to a schedule that I can create and modify.
My preference would be to do this in the router, but again, responses I've seen here suggest that may not be possible.
The client currently has DAS solution integrates with cisco ap1200 which has been eos. As per my knowledge DAS mobile access 2000 doesn't support. 802.11n, is this correct? We are planning to separate the dad environment with cisco. Basically positioning new 3600 n indoor AP to replace existing eos 1200. What are the pro and cons of separating two brands and solutions? Other cabling.The client having coverage issue and adding an amplifier and cable loss may add more issues to existing environment.
Also, based on experience 80211n AP are required is higher density vs 1200.What are your thoughts or best design option to separate das from WLAN environment?
I need remote access to certain programs on my home PC but I just cannot get it to work.
Program:- webcamXP
When I set the programs port preferences (i.e. port 8087), I can connect with"127.0.0.1:8087" and webcamXP work fine. But when I replace the localhost with my external IP (lets say 79.149.114.227, so that would be "http://79.149.114.227:8087".I tried port forwarding: I have added the port to my NAT in the router's setting so it should be fine, but it is not (numbers are fictual of course):
external port start 8085,
external port end 8089,
protocol TCP/UDP,
internal port start 8085,
internal port end 8089,
server IP address 192.168.1.215)
I also tried disabling AVG Internet Security 2011's firewall temporarily just to check it it was blocking it, but got the same result.I checked if Windows own firewall was on, but it is off.I cannot find any setting in the router's own configuration screen to disable any build in (router's) firewall (if it has any).
I'm trying to get 'Access Control' working so I can limit Wi-Fi time on my kids iPod touches, but the settings aren't clear and the help file is not clear whatsoever.I've been testing it with my iPhone, I have the MAC added, but none of the options available will even stop my iPhone accessing the internet over my Wi-Fi.
View 1 Replies View Relatedwe have 2 Access point WAP610N. The after some time goes in stand by and we doesn't able to connect to it. We updated at last firmware (1.0.02 build 3, Feb 25, 2011 ) Timeout inactivity 3600 Renewal key 600 Protection WPA2-PERSONAL
View 1 Replies View RelatedI am trying to remove a line in a particular access-list configured in a FWSM module using this command "no access-list <acl> line 19 x x x x" but it doesn't work. See below:
FWSM/xxx03(config)# no access-list ?
configure mode commands/options:
alert-interval Specify the alert interval for generating syslog message
106001 which alerts that the system has reached a deny
[code]...
How can I remove a line from the access-list without clearing the entire access-list?
i have a netgear wndr3400v2 on windows 7 ulitmate and when i go to [URL] and try to find the setup access list option it doesnt show up but they say its suppose too
View 1 Replies View RelatedI reset my WAP54g v3.05 to factory default to allow an older computer access to my network.
Now I've reinstalled it for better security using my newer laptop: no SSID broadcast and encryption set for WPA2-personal. However, when I enable Mac filtering and permit my newer laptop, the WAP54g does not recognize it.
Disable Mac filtering and my laptop is back on the network.
For some reason I can't get Access Control/Webaccess Filters working on my Dir-655 w/ 1.35NA. I've tried it with MAC and IP Address without any success. I've also enabled/disabled/enabled DNS Relay, recreated the rules, recreated the filters, etc. Nothing.
View 14 Replies View RelatedI have applied named access-list in output direction on 1GE interface on GSR12400 (IOS XR 3.4),but there is no matches. Counters doesn't increase although access-list blocks or permits certain packets (access-list works as it should).
View 2 Replies View RelatedWhy is it that my netbook doesn't have internet access on my Private Network? But when I connect it to my Guest Network, it does have an internet access. It's the only device I have that doesn't have internet access on my Private Network. The rest are working. I tried all the possible options to connect a device but still the problem exist.
By the way, I'm using E-1000 v2.1.02
I have a WAP54G v3.1 running firmware version 3.05.01 and a WRT54G v3 running Tomato v1.28. The WAP54G is configured client mode and works perfectly. However, I was not able to get the two to communicate with WPA2 security - maybe, I just didn't try hard enough? Both devices are capable of doing WPA2 with AES but client mode doesn't seem to work with WPA2? I had to drop back to WPA-AES to make it work. Why is this?
View 4 Replies View RelatedI have a Dell Studio 1737 running Windows 7 64 bit. I turned it on today and it automatically connected to my home network as usual and when I hover over the network icon it says there is Internet Access but when I open Firefox it can not connect to any websites. When I run the automatic troubleshooter, it does not detect any problems with the connectivity.
I ran ipconfig /all and this is what came up:
Microsoft Windows [Version 6.1.7601]Copyright (c) 2009 Microsoft Corporation. All rights reserved.C:UsersDanny>ipconfig /allWindows IP Configuration Host Name . . . . . . . . . . . . : Danny-PC Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : NoWireless LAN adapter Wireless Network Connection 2: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter Physical (code)
I reset the wap610N,after establishing connection, my iphone see my network domain but does not connect. I heard of dual band setting,how do i go about that. What must i do to establish connection with the iphone.
View 4 Replies View RelatedI have a 5505 that i setup with a comcast cable modem (1 static address) and i cant seem to get to the internet. Im thinking it is a NAT rule but i don't have enough experience to figure it out.The current setup is E0/0 plugged into the cable modem, and a laptop plugged into E0/7. I have assigned my laptop an address within Vlan 1.[CODE]
View 19 Replies View Related