My company uses an ASA 5520 to authenticate VPN using the Anyconnect client. We would like to deploy a second authentication method such as Host Scan (CSD.) Our ASA is currently running on a "Plus" license. As I understand CSD will only work with "Premium?" If this is correct are there other options for two part authentication? We're also considering using FOBs and have ruled out using the NAC.
View 3 RepliesI have a serious problem with my corporate firewall, witch is an ASA 5520, fv 8.3, with 8 +1 interfaces. It suddenly started to crash every 10/20 minutes and rebooting alone.
First of all I checked system resources witch are in a very low usage state. I also checked interfaces errors, but nothing strange come out o from error counters analysis. I tried disabling logging and all the service policy rules configured, but nothing changed.
Nothing changed and firewall continue restarting by itself.
Last logs I received before crash were:
%ASA-4-711004: Task ran for 35 m sec, Process = Dispatch Unit, PC = 84a619e, Call stack =
%ASA-4-711004: Task ran for 35 m sec, Process = Dispatch Unit, PC = 84a619e, Call stack = 0x084A619E 0x084A6512 0x084A70E1 0x084A7987 0x084A7AAA 0x08558B9B 0x08558E8A 0x083D3518 0x083CA145 0x080659D1 0x089196D9 0x08919790 0x089FF711 0x08A27468
Here the sh crash info command on module 0, after last reboot:
[Code] ......
What the problem that whenever I try to connect to the internet it will forever say "identifying" and never get internet access. It is the same problem with both wireless connections and when I have an Ethernet cable plugged in. I'm sure its not the internet that's the problem because I am using the same connection right now but with a different laptop.
View 4 Replies View RelatedI am the CEO of a small company with 5 divisions, 2 of which are remote. There is also my home office that I wish to be on the company VPN.We can't afford an IT department, so it is up to me to ask for a network diagram (as specific as possible) that lays out all the hardware required.My plan is to eventually have an intranet web server, file server, and database server all for internal use. Our external webserver is hosted by a well-known company. Growth must be considered both in hardware and network.
View 4 Replies View Relatedok so the problem is our old modem/router combo finally died after 6 years of doing good. After that we bought a new router and used an old modem, that seemed to work for about 2 weeks problem free. But after that the internet would just drop when someone would play a online game, stream a big video, or after a random amount of time would drop on its own. The connection icon would loose its globe and have two screens with each screen flashing say identifying. after that we got a new modem and still have the same problem. We have two laptops connected to it and they can connect to the router but not the internet as-well.
View 3 Replies View RelatedI'm at my girlfriend's house and every laptop in the house works beside hers! I tried mine and it connects flawlessly also my itouch and my eee-pc also connect without any trouble but her laptop is stuck on Identifying i tried the whole netsh reset thing and sadly we cannot have access to her router as her dad hates it when we play in his Linux based stuff anyways any simple fix would be welcome, i hope no one will suggest changing routers/reinstalling the whole OS[CODE]
View 5 Replies View RelatedI have cisco's CUCM version System version: 7.1.5.10000-12 when I do a corporate lookup (form my 7970 I hit Directories - 5) Corporate Directory) I see all sort of accounts that have no phone extensions I.E. our windows service accounts, our administrator accounts that have no number associated with them. is there a way for me to hide them?
View 1 Replies View RelatedI need information about the Aironet 600 access point.I got a customer who want to deploy a guest WLAN on branch office with an authentication with a captive portal that is centralized. I would like to use the OfficeExtend functionnality with Aironet 600 Acces point & WLC 5508 or 2504 to centralize the traffic from all access points on the controller.
On those branch offices, there were a few "free access desktops" that need a copper link. I want those devices to be also authenticated by captive portal, so I want to connect them on the four 10/100 port of the access point. But it seems that we can only use one port as "corporate remote LAN", the threee others are just for "home LAN". Is it correct ? Is there any solution to configure the four ports as remote LAN interface ?
I have a Belkin Wireless G Plus MIMO Router and had no problems connecting to corporate in the past until several months ago. I can connect just fine if I bypass the router and connect to the modem. I also have no problem if I go to places like Subway. There is no problem with the wireless internet connection, only a problem when I try to connect to corporate through the VPN.
View 3 Replies View RelatedOut of all the computers in my house there is one computer that does not seem to be able to get an internet connection. Usally I would fire up the computer, then unplug and put back in the wireless device and it would start working but just recently no matter what I try it will not work. When I set the computer up to connect with a static ip, i get a local connection only (or at least thats what networking centre says) and when i rely on dhcp i get 'identifying network' forever. No network settings have been changed and I have tried an ethernet connection as well which also didn't work. I have tested the wireless device on another computer and it works fine.
View 14 Replies View RelatedMy work wireless network is stuck on identifying. It works for ALL other computers in the office. It works when I am wired to the router. I've tried most things that forums tell me to do. Below is the IP config. It is only this network and one other. Both are provided by verizon if that makes any difference.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:UsersShaun>ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
[code]....
I'm a network admin for a medium-sized (500-700 people) multi-site business and I have a simple question. Is there any utility or method I can use to identify the physical path a packet of data takes from a workstation on the LAN to a server on the same LAN?
For example, if I send a tracert command at google.com, I can see every router the packet touches before it gets to Google's router. Is there a method I can use to determine a similar path with switches in my internal network? If I use tracert or pathping, I only get a single hop since the workstations are on the same LAN as the servers even though I know there are two physical switches between them.
Basically, I want to send packets from a group of workstations behind a couple switches to a server and see if the packets are being lost in the switch somewhere to identify if there is a failing switch or something causing network slowdowns. map out the network more accurately so it would be useful to know.
I've been having this problem on my computer for about a month. I've seriously done everything everyone has suggested after searching every inch of every tech forum. The above did not work for me.
View 2 Replies View RelatedRegion : Italy
Model : TL-MR3040
Hardware Version : V1
Firmware Version : TL-MR3040_V1_120822
ISP : Vodafone IT
Basically, the 3g port is absolutely not working in both devices.I've tried with 4 usb 3g adapter (all huawei and listed under compatible), THEN i bought a MA180 (yes, the TP-LINK 3g usb stick) and even this is not working.The MR3040 if i connect the MA180 simply will blink the MR3040 3g led ONCE, after that it simply does nothing.if i go under the status page on 192.168.0.1 it basically says:"3g usb: Identifying.." and it still stops there for even an hour.Same on the MR3020.
Looking for routing with an SA540 router connecting to corporate VPN.We have an odd configuration that is beyond the scope of what I have configured previously with these devices..I am trying to configure the routing to the additional IP addresses listed for the HQ. The VPN tunnel between the .26.120.x and the .17.0.0 networks is built however it does not appear to be routing. The Cisco administrator at the HQ site says that they have "fully configured the routing" from all the listed IP addresses back through the VPN tunnel. The options I am unsure of for configuration of the SA540 router are: GW - I believe that I use the internal IP address of the 17.26.120.x router.Is this logical since the VPN tunnel. We are using NAT for the firewall internally.The existing 3 172.26.x.x VPN tunnels are live and working and fully routing between themselves.
View 2 Replies View RelatedI have some trouble with the setup of an oeap 600 ap. The ap has joined the controller as it should and the remote-lan connection to my corporate network works well, but i can't connect to the corporate wlan.
When i check the event log on the ap it says:
"
*Oct 02 07:36:56.662: (Re)Assoc-Req from 00:1a:73:d2:82:8c forwarded to WLC, wired: no
*Oct 02 07:36:56.665: received assoc-rsp for wireless client, status=0011
*Oct 02 07:37:11.712: DisAssoc-Req/DeAUTH from 00:1a:73:d2:82:8c forwarded to WLC, wired: no
*Oct 02 07:37:11.713: WTP Event: Delete Mobile sent to wlc00:1a:73:d2:82:8c"
and a debug on the controller gives me:
apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Adding mobile
on LWAPP AP ec:c8:82:c2:3a:20(0)
*apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Association received from mobile on AP ec:c8:82:c2:3a:20
*apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Sending Assoc Response to station on BSSID ec:c8:82:c2:3a:20 (s
tatus 17) ApVapId 1 Slot 0
[code]....
erro came with 3722------however after checking date and time i was able to login. AZAD
View 1 Replies View RelatedI've recently been on a kick of acquiring a small collection of the old school stackable Linksys equipment, and in one of my searches I came across a picture of one I'd never seen before.
View 4 Replies View RelatedI am trying to connect to my office wifi which uses a proxy server. Scenario 1: I am using Samsung Bada (wave 1), connected to the internet successfully and also any applications that require an internet connection including Samsung's app store. While, connecting via open networks like home wifi and other friends' wifi also worked without any issue. Scenario 2: Now I also have an android based Galaxy pocket: even after entering all the required proxy setting as mentioned above, I can access websites via browser but cannot access samsung's app store, google's play store, skype, sipdroid etc. I know it is nothing to do with the network administration as I am still accessing via my samsung wave but not via android. Is there anything like a network profile I need to assign for these applications?
View 1 Replies View Relatedi have tried many things i have tried to reset my router with the cmd prompt i have checked my drivers i have tried the simple things and at this point.
View 1 Replies View RelatedA day ago, I was having trouble with my apartment modem, and due to a busy schedule, was only able to do a quick "Unplug and reset" which seemed to work at first, but eventually it stopped working all together. Today, I traveled from my apartment to my "home" home, where the wireless network is set at a "Home" security level. However, my wireless now will not connect at all. It continues to cycle through "Identifying" yet cannot make the connection. It works through a LAN connection however.So far, I've attempted the follow:
- run>ipconfig/all, ipconfig/reset, etc
- winsock reset
- system restore
My computer is a Samsung RC512, running windows 7. Here's the paste from my ipconfig/all:
Windows IP Configuration
Host Name . . . . . . . . . . . . : PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hsd1.pa.comcast.net.
Wireless LAN adapter Wireless Network Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physical Address. . . . . . . . . : DC-A9-71-93-16-52[code]....
I cannot connect my laptop to any of the normal wireless networks I use.It says, it's connected with good signal strength but than it never stops "identifying" and doesn't load any pages.
View 4 Replies View RelatedIt all happened pretty suddenly, from 1 day to the other, suddenly i was unable to connect to my home network. I started to troubleshoot, search forums etc. But no luck. I triedand look for the problem myself and found that thenetwork was enabled but it stayed on "identifying network". By clicking buttons from here and there on thecontrol panel i found something like a network recognition or something like that and a yellow little prompt appeared on the top of the explorer saying something like the network idetification was disabled, so i clicked and selected enable but it prompted again, so i just entered to the advanced network recognition center and noticed that on the public and private tabs netowrk recognition was disabled, so i clicked enable on both and saved changes, but the changes dont save, its like if i wasn't on a administrator account (but i had no error messages, it just wont enable).
View 19 Replies View RelatedWhere I tried to conect to my home wifi or the school's wifi and it just says "identifying" on the network connections and on the list of wifi networks around in the notification area it says "No internet acces" and can't connect to the internet. I stoped trying to look for a solution but I don't have internet at home
[code]....
Yesterday I got one my computer and was on my internet then i closed my browser and 10 minutes later got back on but then it wouldnt let me so I went to my networking and sharing center and its stuck at Identifying..
View 11 Replies View RelatedHow can i to prevent the demonstration of a software in corporate network?
View 2 Replies View RelatedI have a computer that was previously connected on-site (hard wired) to a corporate network. I am now attempting to connect it on-site to my home network. While I have a live Internet connection going into the computer, I cannot connect to the Internet. Is there soem sort of setting adjustment that i need to make?
View 5 Replies View RelatedSo here's a fresh spin (and not in a good way) on the seemingly common port-flapping issue, where a windows vista/7 machine's ethernet port vacillates between "enabling, identifying,network cable unplugged." I've tried the fixes I've seen around, like forcing the speed to 10 or 100Mb duplex,etc. But I think the problem goes deeper than that -or drivers or faulty NICs. Its acting like it's in the cabling. . . but not. Any advice would be welcome.Just switched from one DSL provider (Bell) to another (Teksavvy). Connected via a dry loop. When the Bell tech first set it up a year ago, he did it like this: Patch cord frome the Bell 2Wire modem/router combo to a female coupler. Female coupler attached to cat5 cable running about 25/30 feet along baseboards around the corner to another female coupler. Patch cord from female coupler to NIC in the back of my box. This worked fine. New set up with Tek savvy is as follows: DSL modem via patch cord to (wireless) D-Link router. D-link router connected to computer by same aforementioned setup. This results in the port-flapping named in the title of this message, on the hard line only. Any change in my computer was ruled out by connecting a brand new, never been connected laptop and the same terminal as my computer. Results in port flapping. The same laptop connected to the router by just the patch cord results in a perfect connection. I've tried moving the patch cords around, it doesn't change the results, so they're fine. I have no way of testing this long stretch of installed cable in the middle, with the couplers on it, since I don't have an equal length cable to try out anywhere, but I'd be surprised if that just died after a year's use exactly when I connected new hardware to the other end of it. Running windows 7 with a RealTek NIC on my box. D-Link router (will check the model later, at work at the moment), and TP-Link DSL modem. The system delivers wireless internet flawlessly.
View 2 Replies View RelatedLooking for input on creating a guest VLAN for a client. The goal is to create a guest VLAN that doesn't have access to the corporate network using one DSL modem. They currently have a managed switch (3COM Baseline Switch 2928-SFP Plus). There are no existing VLANs or guest access. Additionally, they are looking for a WAP that supports captive portal.
View 10 Replies View RelatedI have created an IPSEC VPN tunnel using a Cisco ASA5520 (corporate) to a Cisco SRP541W (remote). The corporate subnet is 10.1.0.0/16, and the remote subnet is 192.168.1.0/24. From the remote subnet, I can ping anything on the 10.1.0.0 corporate network, but I cannot ping from the corporate network to the remote subnet. At first I thought this was something obvious, perhaps an incorrect acl or something easy on the corporate firewall. However, we have several other vpn tunnels established, all set up the same, and they work just fine. After looking at it a bit more closely, if I ping the remote subnet I see the hit counter increment by one each time, which leads me to believe that traffic is in fact being routed properly.Now I'm thinking that something in the remote SRP541W that is not allowing icmp traffic, but I can't find it anywhere. To be honest I have never used this type of firewall before, they have all been Cisco PIX501/506e and ASA5500 models.
View 2 Replies View RelatedSo we have multiple ISE Servers with differing personals. I was having an issue with our new ISE setup not identifying AD Group Attributes when using them in Authorization rules. We have 2- 3395 appliances running Admin and Monitoring/Troubleshooting Personas and 2- 3395 appliances running as Policy server personas. We are running v1.1.1.268 with the latest two patches. I was unable to pull Active Directory Group Attributes in any of my Authorization rules. After Resyncing all the boxes with the Primary Administration box I was able to do this. There is no bug listings for this occurrence nor do we have Smartnet to call support for other reasons.
View 3 Replies View RelatedWe need WiFi security on our corporate SSIDs locked down using certificates, we are using wlc cisco 2100 series. We need these on every workstation, laptops etc.
View 6 Replies View RelatedI am having trouble with routing in PIX501.I have one Pix 501 and one Cisco router.Cisco Router is configured for IPSEC VPN ( LAN interface 172.19.194.1) and PIX is configured for access the internet.Default gateway of Pcs in LAN are PIX inside interface ( 172.19.194.2) but people are unable to access to corporate network but can access the internet.If i set default gateway to Cisco router LAN interface ( 172.19.194.1)then i can access to corporate network.Purpose is to pass the internet traffic using PIX 501 and corporate network traffic using Cisco router.
View 6 Replies View Related