Cisco VPN :: ASA192 VPN IPSEC Spoof Detected FTP
Oct 16, 2011
I have created a site to site VPN between two networks. the 192.168.1.0 and the 10.0.0.0.What I want is the 10 to connect via ftp to 192.The VPN is working well, I can ping etc but when the 10 is trying to connect to the 192 it get a connection refused.The same if he tries to telnet to port 21.
It's a passive ftp that uses the ports 20,21 for connection and data and the range from 12000 to 12100 for the passive mode.I have added a rule in the access list for these ports to allow the traffic between those two ip addresses.The 192 can successfully connect via ftp to the 10.
The problem is not on the server config because it has a public interface too and you can succesfully login from there.So the problem must be on the Cisco in front of the 192. For a reason I don't know it blocks the traffic.I did a packet trace on the ASDM and I got an IPSEC spoof detected.
View 1 Replies
ADVERTISEMENT
Jan 17, 2013
we have a cisco ASA 5505 and are trying to get the following working:
vpn client (ip 192.168.75.5) - connected to Cisco ASA 5505
the client gets a specific route for an internet address (79.143.218.35 255.255.255.255 192.168.75.1 192.168.75.5 100) when i try to access the url from the client i get a syn sent with netstat when i try the packet tracer from the ASA i see the following:
<Phase>
<id>1</id>
<type>FLOW-LOOKUP</type>
<subtype></subtype>
<result>ALLOW</result>
[code].....
View 5 Replies
View Related
Apr 18, 2012
Having some issues with a vpn between two of my locations. Both edge devices are ASA's, and the tunnel is an IPSEC tunnel. Both MTU's are set to 1500 both on inside and outside. (provider mtu setting request is 1514, and both ASA's will be changed out soon.) Unfortunately, some exchange/kerberos auth issues are causing me a problem in the remote site. I perform the tests that microsoft recommends using a length of 1472 on packet ping size, and do not fragment flag (1406 is the largest packet I can push across the vpn) . I know part of this is due to the extra overhead that ipsec places on the connection.
I want to refrain from putting the black hole registry workaround on all of the PC's in this remote location.I've also seen some discussion about manually setting the TCPMSS value down to 1300 on most ASA's.
View 1 Replies
View Related
Jun 2, 2013
I'm receiving an error when trying to access a web server behind from one subinterface to another subinterface on an ASA access the public IP. I'm getting the following:
Global Static NAT Deny IP spoof from (61.X.X.X) to 201.X.X.X on interface Outside
Traffic dies at the firewall stating that the traffic is spoofed from the Global address (61.) to the static (201.) address. Both bound to the outside interface. When I create a static NAT on the firewall there is no problem; however when I'm patting against the firewall to the public IP I get the denies.
View 3 Replies
View Related
Jun 17, 2012
I'm trying to attach tacacs server (ACS Version 5.2) in server group on ASA 5520 (Version 8.4). When I test connection in ASDM (Version 6.4) between ASA and ACS it fails. The log message on ASA is:
%ASA-2-106016: Deny IP spoof from (10.8.27.126) to 10.8.48.10 on interface inside.
Packet-tracer from ASA is:
InternetASA# packet-tracer input inside tcp 10.8.27.126 4444 10.8.48.10 49
Phase: 1
Type: CAPTURE
Subtype:
Result: ALLOW
Config:
Additional Information:
MAC Access list
[code]....
What access-list or implicit rule may be the reason of denying these packets?
View 2 Replies
View Related
Aug 11, 2011
I'm looking fot a way to do static URL blocking with ASA and when the URL is blocked present a "Web Page" to the user saying that it's been blocked.
So, i was wondering if i can use the http parameter "spoof server string" to replace the original URL sent by the user for another URL that points to an internal web server holding a basic page saying "Your URL request has been blocked".
The point is to have a way to tell users that the page they are trying to browse is blocked by a policy.
View 1 Replies
View Related
Apr 29, 2013
I tried any type of combination and just couldn't make it works. Only PPTP works well. Whether Apple iOS IPSec VPN is supported or not?
View 11 Replies
View Related
Oct 12, 2011
i have an issue with a belkin ethernet expresscard used on a laptop where the onboard network is a static ip address hooked up to an insurment and the express card is dhcp .i can connect to the network in one location with out issue and on the other location the express card will not connect but the on board card will connect fine when set to dhcp and i dont want to set the express card to a static ip address.i do's not see a lan cable connect but it is.all the simple issue have been ruled tryed differnt lan cable used same lan point on diffrent laptop and connected with out issue .ip relased renew dns flushed winsock reset etc..dhcp servers are the same (both locations)default gate way the same (both locations)this is class A ip address range?
View 1 Replies
View Related
Jun 3, 2012
I have a Beetel 220bx adsl2+ modem which my cousin gave me. He gave me the modem, ethernet cat5 cable, telephone rj11 cable and a usb power cable (or adapter god knows ) SO i attached it to win xp system. only the power and usb/pc lights were on. others didnt switch on. the system didnt detect it. i also installed the drivers and still didnt detect it. i have uploaded the image also.
View 19 Replies
View Related
Jan 16, 2012
I stream movies from my computer to my PS3On my playstation it shows Windows Media Player from two seperate computers on the network but not mine.So it is an issue with my particular computer/setting and not necessarily the router or the PS3 I obviously tried the program I always use (Vuze) which did not work, and then I downloaded PS3 Media Server and that did not work.The programs do not recognize my PS3 and vice versa I use Symantec Endpoint as my Virus Protection and turned it off, so i believe this is not the issue....but im still skeptical of it due to that is the only thing that has changed since it last work (I reinstalled it)
View 2 Replies
View Related
Jan 5, 2012
I got a WVC80N Cisco wireless,Tried to set it up the camera there, no luck. The installation seems to go fine right up to the point where you disconnect the camera and it searches for it on the network, then I get the error message - camera not detected (even though when cabled to to router it is recognized). Tried it over and over, shut down rebooted and eventually forced the camera to reboot and erase all the settings and start over. No luck.Could it be my router is too old ? I thought it might be so I brought a second one in - a Linksys, pretty sure it was type N.
View 4 Replies
View Related
Jul 29, 2010
Any explanation about this warning from the WLC4402 after the software upgrade to 7.0.96. version? this is the message: Warning: WLC has detected its IP add xx.xx.xx.xx being used by a machine with MAC add xx:xx:xx:xx.and the MAC add found is the the mac add of the dynamic interface of the WLC.
View 7 Replies
View Related
Oct 3, 2009
I have cisco 3845 router with 4 HWIC-2FE card none of them is detected the message displayed is [code]
View 7 Replies
View Related
Jul 31, 2012
My friend uninstalled some programmes on his Toshiba laptop and now he can only connect to the router via an ethernet cable. When trying to find wireless networks the message "No wireless networks detected" appears. Other laptops and devices have no problems connecting throughout the house. I've uninstalled and reinstalled the right drivers for the wireless adapter, checked that the TCP/IP settings are on obtain ip address automatically, checked that the NIC is enabled in the BIOS and checked that the WLAN is on automatic in the services utilty and there is no other WZC running.
View 3 Replies
View Related
Apr 9, 2011
I can use my computer just fine right now, but whenever I need to restart it, when it comes back on the internet is no longer detected. I am connected through an ethernet wire directly to the internet, with no intermediate router or network.
After failing to solve the problem on my own, the only way Ive found that has been after to restore the internet connection is using the Windows Restore centre and restoring it to about a month ago; restoring it to only a few days ago does not fix the internet.
However, also when I use the restore function, immediately upon starting my system up again I get an error message saying that the system restore has failed and that nothing was changed. But the internet now works again.
Im not really sure what I should do to check out the problem further, let alone remedy it. I run Windows Vista, 64-bit. I can provide further info if need be.
View 1 Replies
View Related
Apr 29, 2012
I am using Nokia Siemens router. Recently there is an hack on the network. So I changed the security by enabling WPA2-PSK and AES and mac filter enabled. After that two of my roommate machines are not getting connected to WiFi. Even I cant see ssid being detected in thier machines.
how to connect to the machines. I have tried by removing security also but those two machines cant even detect the network being broadcasted by us. But it is detecting other networks(neighbors wifi).
View 1 Replies
View Related
Mar 19, 2013
HP G62-b12SA Notebook PC, WINDOWS 7 (64 BIT). wifi card realtek 8191se.The wired LAN is working fine. but the wi fi is not detecting any wifi network leave alone joining.the laptop was bought in UK being used in India. The wi if was working fine till about one month back.Windows couldn't automatically bind the IP protocol stack to the network adapter.
View 13 Replies
View Related
Apr 29, 2012
I am using Nokia Siemens router. Recently there is an hack on the network. So I changed the security by enabling WPA2-PSK and AES and mac filter enabled. After that two of my roommate machines are not getting connected to WiFi. Even I cant see ssid being detected in thier machines. how to connect to the machines. I have tried by removing security also but those two machines cant even detect the network being broadcasted by us. But it is detecting other networks(neighbors wifi).
View 1 Replies
View Related
Jan 23, 2011
my network connection has not been detected suddenly....[URL]
Windows IP Configuration
Host Name................................:user
Primary Dns Suffix.......................:
Node Type..................................:Mixed
IP Routing Ensbled......................:No
WINS Proxy Enabled.....................:No
[code]....
View 1 Replies
View Related
May 26, 2011
Just recently my internet got slow, and when it got slow nothing worked. I can connect to the internet and get on skype and some websites but when i try downloading something it says No internet Connectivity Detected.
View 2 Replies
View Related
Jan 17, 2012
My onboard adapter wasn't working so I bought a new dlink adapter. Adapter installed and is registering in device manager.. but it says that there is no ethernet cable connected. I have a laptop connected to the same router that is connecting to the internet. I switched out cables with ones that worked with the laptop and on the desktop before. I have cycled the router
View 2 Replies
View Related
Sep 26, 2011
I'm having trouble with my ethernet port. I have a Asus g73jh computer running 64-bit windows 7 and i have an atheros ar8131 pci-e gigabit ethernet controller NDIS 6.20 for my network adaptor, that is fully updated and says is working properly but doesn't recognize when an ethernet cable is plugged in. The cable works on my xbox fine so I know that the cable works fine. I'm pretty sure that there might be something physically wrong with it or I just don't know.
[code]....
View 7 Replies
View Related
Feb 9, 2012
I'm configuring an 1140 and trying to make it invisable to any user that doesnt know the SSID. The SSID is not broadcast, however my clients see "Other Network" in their list of available networks. Short of turning off the AP is there any way through the 1140's configuration to prevent this "Other Network" from showing up in the clients available networks list.
View 2 Replies
View Related
Oct 21, 2004
I have a cisco router 2621 when i install the module cisco NM4T it is not detectetd. following are the outputs.i have tried IOS 12.2.15T15 & 12.3
booting up:
smart init is sizing iomem
ID MEMORY_REQ TYPE
0000A2 0X00103980 C2600 Dual Fast Ethernet
[Code]......
View 4 Replies
View Related
Oct 3, 2011
Looks like I still have an issue with LMS to recognize the IP Phones in UT as IP Phones. SNMP RO on Call Manager is enabled and is green in CM (e.g. topology) - so SNMP get is basically fine. The Phones are recognised as End Devices in UT.
As far as I understand, now if I start a Phone Aquisition, the CUCM is polled by LMS to gather additional information about the phones. So it seems there is a problem with the SNMP polling of the Call manager?
View 5 Replies
View Related
Oct 26, 2011
i am currently trying to configure a four port ISDN BRI interface on a Cisco 2811 router.Upon upgrading to a later version of IOS, c2800nm-advipservicesk9-mz.124-25d.bin, access to the HWIC-4B-S/T module is lost, the router no longer detects it. In fact iI can only get the router to detect the module using the original IOS version c2800nm-advipservicesk9-mz.124-20.YA3.bin.
Is there some special feature needed in the IOS code to support these modules, if so what would be a suitable version/train to upgrade to?I have tried using the Cisco Software advisor tool but it generates an error when searching on a hardware configuration containing this module type.
The reason for upgrading the code is we have a potential bug with the current version which appears to be preventing the BRI interface syncing up with the providers switch (switch type correctly defined and provider confirms isdn line has been provisioned correctly).
The debug error seen is:
GMT: ISDN BR0/0/0 SERROR: L2_Go: at bailout DLCB is NULL
L2: sapi 63 tei 127 ces 0 ev 0x650
My main question though is why the module is not being detected after a code upgrade and if there is a specific code version/train needed to support this module in a 2811?
View 11 Replies
View Related
Aug 2, 2011
We recently upgraded the OS X AnyConnect image on our ASA to 2.5.3051. For most people, including many others using OS X 10.6.8, this is working fine.
However, we have one OS X 10.6.8 client who consistantly sees this error:
Network Access: Unavailable - No Networks Detected
I've only seen that error when I truly did not have network connectivity; but this individual does actually have Internet connectivity, can browse the web, get email etc. The only thing he cannot do is connect to our ASA using the AnyConnect client.
I suspect downgrading the client image to the older version will fix his issue but we truly don't want to do that.
View 6 Replies
View Related
Sep 22, 2012
Hard Drive (Gembird not detected on My PC
View 3 Replies
View Related
Apr 29, 2012
I am using Nokia Siemens router. Recently there is an hack on the network. So I changed the security by enabling WPA2-PSK and AES and mac filter enabled. After that two of my roommate machines are not getting connected to WiFi. Even I cant see ssid being detected in thier machines. How to connect to the machines. I have tried by removing security also but those two machines cant even detect the network being broadcasted by us. But it is detecting other networks (neighbors wifi).
View 1 Replies
View Related
Jul 21, 2012
For starters I have a qwest m1000 modem and a netgear router.this morning there was a rather large thundestorm that caused my power to cut out while I was usin my computer.. once I got it back up and running the ethernet light on my modem wasn't liighting up.I reallly have no idea what to do. Everything but the ethernet is working. I can still get to my routers website but that's it, and I don't what to do there once I'm on it.Is it possible the storm messed up the settings? Or killed part of my pc/modem? On my computer the ethernet light next to the jack on the back is yelllow when its threw my rouuter, but when I plug my modem into it directly it doesn't light up at all.
View 5 Replies
View Related
Jun 30, 2012
I recently did a recovery on my laptop and had to put everything back to factory settings (losing all my music, programs, etc) due to a hard disk issue that I couldn't fix otherwise. After several hours waiting for the process to finish I logged onto my laptop - a toshiba, and realized that my wifi isn't working. The computer says there is an issue with the LAN being disconnected, but my router is communicating fine with other devices. Also, the side switch that turns wifi on and off is lit up (indicating that it is on) despite the fact that Fn + F8 are not responding on my computer. Generally, the laptop cannot detect any wireless devices or routers.I did another system recovery after reading about the issue, and tried turning it on and off, etc, but with no success.
View 1 Replies
View Related
Nov 12, 2011
a spare PC I have will not connect to the network via wireless, it is running XP Pro SP3, and is using a Xycel G-202 wireless adapter. It is seeing my Sky router, and trying to obtain an IP address, but failing every time.
I am using WPA-PSK and the key I am inputting is correct, my phone connects to the network with no problems.
View 4 Replies
View Related
Apr 22, 2013
The issue that I am having is that the network cable I have that going from my router to my desktop computer, seems to be flaky, at least it seems that way...When I try to use the network cable that goes into this desktop, into another computer(one that I know works), the connection status alternates between connecting, and no network cable detected, connecting...and no network cable connected, and so forth.it NEVER connects. When I plug the cable back into the desktop, it does the same thing for maybe a minute, but then eventually connects. However, every other computer, laptop, macbook, another desktop PC, that I have tried connecting using this same cable never connects.
View 5 Replies
View Related
