Cisco VPN :: ASA5505 VPN Ping Works RDP Doesn't?
Mar 23, 2013
I have setup a remote access VPN to an ASA5505
I have a directly connected server behind the ASA and I can ping the server without a problem.
The VPN client reports packets being encrypted and decrypted
However when I try to RDP to the server the encyrpted packets keep incrementing but the decrypted packets do not.
I am also not seeing any RDP traffic hit the server (verified by ethereal)
I have done a packet tracer and it suceeds but ends with an IP spoof which I believe is correct as it is vpn traffic and not actually being encrypted.
This is the debug from the RDP session, I am confused by a Denied ICMP on line 2 as I am able to ping the server?
%ASA-6-302013: Built inbound TCP connection 88193 for external:172.16.24.4/50984 (172.16.24.4/50984) to internal:192.168.100.146/3389 (192.168.100.146/3389) (roger_ssl)
%ASA-4-313004: Denied ICMP type=0, from laddr 172.16.24.4 on interface external to 192.168.100.146: no matching session
[Code].....
The only logical bit to this is flow closed by inspection? Does this mean the server has not responded?
And the decrypt packets not increasing when trying to RDP Does this mean that I have reached the end of my ASA knowledge on this one!
View 6 Replies
ADVERTISEMENT
Aug 22, 2012
I have a ASA5520 with 4 Port channel interfaces and ASA Version 8.4.(2). There are many vlan interfaces but in the DMZ I have one Server who has a Static NAT to all other interfaces.
Why the first ping works and the others doesn´t work?
View 12 Replies
View Related
Sep 21, 2012
I just recently bought a Telewell Wlan AP wireless access point and my problem is that I can't connect to the internet with Lan, hence can't get connection on my desktop. My laptop however works fine with wlan.
There's a wall socket which connects to a bigger student local network, I can connect my desktop to it directly and it works so there seems to be nothing wrong with my computer. I've had 2 routers before this, another Telewell that worked flawlessly and a Buffalo that cut the connection every now and then but didn't have this kind of problem.
I have the router plugged into the wall, set to get a dynamic ip (as it should be) and it does find Wan-side ip-address and dns-servers, as I could connect through wifi. So there doesn't seem to be a problem with that either. But for some reason Lan doesn't work. I can access the router through Lan, dhcp is on and I can see my desktop on the routers client list.
View 2 Replies
View Related
Jan 24, 2012
I am running XP Pro SP2 Ver. 2002 on my laptop.,i use the wifi connection very well. But when i plug the rj45 cable in from the modem,the LAN icon says Little or no connection.
View 14 Replies
View Related
Apr 3, 2011
i have a problem with a cisco 857-K9 router. We can access internet but if we ping a web server, every first ping fail but all others works...
View 15 Replies
View Related
Aug 3, 2011
I'm inclined to think this is a bad router but just wanted to run it by everyone. All of a sudden I can't get into the router interface or ping it, but the internet still works. If I power cycle the router, then I can get back into it.
View 2 Replies
View Related
Jan 15, 2012
hen its wireless, it has no problems with the internet, everything works fine.But when its wired, webpages will still load, but youtube videos wont work, anything that consists of streaming doesn't work, and he cant even useI have connected other laptops to the same cord and there is no problems. so i know its not the cord and i imagine its not the router since everything still works fine with other computers.
View 5 Replies
View Related
Jul 21, 2012
My cable modem and router are in a closet. From there, wires run through the house to multiple locations. One of the locations has had a wireless access point (WAP) installed which has worked flawlessly. I want to put another device at that location that doesn't have wireless capability, so I tried to connect a switch. The switch does not connect. When I disconnect the cable from the WAP and plug it into the switch, the light on the switch port that would indicate a connection does not come on. When I then connect the WAP to another port on the switch, the light on its port does come on but it does not see the router. I've tried multiple cables (I even tried a crossover cable) and I've tried a second switch with the same result. When I plug back into the WAP, it works fine again. The switch works fine at other locations in the house.
One more thing - When I bought the house, the wire to this particular location was unterminated. I had never done any wiring before but I decided to try to do this myself. So, I read up on the process and bought the necessary tools. When I stripped the wires, I found that the twisted pairs were not just twisted (as they were in the patch cable I practiced on) but each pair was in a single strand of insulation (I'm not sure exactly how to describe this but there were four strands of plastic, each with two wires packaged inside.) I didn't know how to separate the two wires that were packaged together so I wired the connectors with all four color - color/white pairs next to each other. I know that's not the standard. But from what I read, as long as I wired both ends of the cable the same way, everything should work. And in fact, it did for connecting the WAP.
View 1 Replies
View Related
May 26, 2012
I didn't install new program or make a lot of change in my computer lately?Anyway here's the ipconfig/all result of my computer
Windows IP Configuration
Host Name . . . . . . . . . . . . : asus-95bdea2abb
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
[code]...
View 3 Replies
View Related
Sep 16, 2012
my internet works normally during daytime but starts to disconnect and reconnect every few minutes at around 11pm. I've tried restarting my modem but to no avail. My home telephone line is not working when my internet starts disconnecting and it starts working during daytime. My modem is connected to the telephone.
View 4 Replies
View Related
Jan 11, 2012
I have recently made some chages to my ASA 5510 (not sure what) I was previously able to ping url... and I am now not able to ping anything on the Internet, but The Internet connectivity work perfectly.
View 7 Replies
View Related
Apr 4, 2013
I have been using my laptop since a year now and yesterday suddenly my internet stopped working. On top of the connectivity bar a yellow sign appeared. Now my internet status is "No internet access" but when i connect my ethernet cable the internet starts working and i can see the "Internet access" status. I have re-installed my wi-fi driver too from the orignal CD that i got with my laptop, but still no luck also i did not install anything in past 1 week and the only anti-virus i have is Avast (tried disabling it too). I plugged out the cables from my router and plugged them again but that dint work too. There are 2 other laptops (running on windows 7 just like mine) on which the wifi connection is working but on mine it is not working.
View 9 Replies
View Related
Jan 19, 2012
am not sure if it is different on the 8.2 or if I am missing something. I can connect to the vpn but cannot get to the inside computers. I can ping them from the ASA but not from the vpn client.
View 17 Replies
View Related
Aug 2, 2012
I have a IPSec tunnel that is working in one direction. Below is the router config from the side that can connect to the other side perfectly. I believe the issue is with this router as while I was waiting on delivery for the ASA I had an SRP527W sitting in it's place and had exactly the same problem.On one side I have a 887VA router and the other an ASA5505.The network behind the 887VA can access the remote site perfectly, backup services are traversing the link as are web interfaces for applications. In the other direction I can ping hosts but cannot connect. What else is interesting is if from the remote site I attempt to connect to a particular device that performs a port redirect the remote site browser gets so far as being redirected to port 5000 but then hangs.
I am seeing some very generic packet drop debug notices on the 887va on the NAT-ACL access list but I think this is as it should be as it is dropping the tunnel traffic from the NAT'ing.The config for the router is here, I will post the ASA config when I get to the other site shortly but I am convinced the issues is on this device, all the crypto configurations match.I have looked at the MTU's on each side, the path MTU on both sides is 1492. The asa does say the media MTU is 1500 but I believe that is the ADSL link so shouldnt matter?I even went so far as installing CCP and testing the VPN. It says the tunnel is up. It did state a failure:A ping with data size of this VPN interface MTU size and 'Do not Fragment' bit set to the other end VPN device is failing. This may happen if there is a lesser MTU network which drops the 'Do not fragment' packets. [code]
View 1 Replies
View Related
Sep 11, 2011
I have the below configurations done on a 2900 router. [code]I would like to know, if the IP address assigned to dialer1 interface "20.1.2.133" would be listed in "show arp" ?, as it failed to list on our router and I want to know if this is an expected behavior ?
Secondly, does self ping 20.1.2.133 (dialer interface IP) work ? [code]
View 2 Replies
View Related
May 15, 2011
I need remote access to certain programs on my home PC but I just cannot get it to work.
Program:- webcamXP
When I set the programs port preferences (i.e. port 8087), I can connect with"127.0.0.1:8087" and webcamXP work fine. But when I replace the localhost with my external IP (lets say 79.149.114.227, so that would be "http://79.149.114.227:8087".I tried port forwarding: I have added the port to my NAT in the router's setting so it should be fine, but it is not (numbers are fictual of course):
external port start 8085,
external port end 8089,
protocol TCP/UDP,
internal port start 8085,
internal port end 8089,
server IP address 192.168.1.215)
I also tried disabling AVG Internet Security 2011's firewall temporarily just to check it it was blocking it, but got the same result.I checked if Windows own firewall was on, but it is off.I cannot find any setting in the router's own configuration screen to disable any build in (router's) firewall (if it has any).
View 6 Replies
View Related
Mar 13, 2013
I try connecting via ethernet cable and it doesn't seem to work until the administrator of the network (my brother) comes home and then turns his computer on and starts using it. However, if i switch to a wireless adapter it sometimes works (like right now) even when my brother is not using the internet. Also, i tried to connect via wifi on my macbook pro to the same server and it used to work flawlessly 100% of the time, now i can only connect once in a while for short periods of times.
View 1 Replies
View Related
Dec 25, 2011
I'm trying to set up a wireless network for my parents. I have a Belkin Play N600 router (model F7D8302) that I'm trying to hook up to an Acer desktop running Vista. The modem is a Siemens Speed stream 4100. I have a cable going from the ethernet port of the modem to the modem port on the router. The pc is connected to one of the other four ports in the router. The wireless works fine, but I can't get the wired connection on the desktop working. The Internet light on the modem is not on, but the modem works fine when connected directly to the pc. I've tried power cycling and resetting everything, but it's still not working.
View 9 Replies
View Related
Nov 17, 2011
I have a Cisco linksys router e1550. My wireless network is working fine, but my wired (PC) is not working?
Removing the router and having the modem connected to my PC works but when I put on my router my wired connection only works for a few seconds to none
So I think the router may be causing it, could it be the settings? Even though there at default.
View 1 Replies
View Related
Nov 28, 2012
I have a win7 desktop upstairs with all of my media on it.I also have a winXP laptop that I would like to use as a media center running xbmc connected to my tv downstairs.I have set up a workgroup so my laptop can access the media stored on my desktop and everything works great when they are both hardwired to my router (Linksys E3000).However, as soon as I unplug my laptop from my router and switch to the wireless connection I can no longer ping my desktop or access the shared folder (internet still works fine on the laptop, it just cant see my desktop anymore).If I plug it back in to the router, everything works again.
The exact error message I get when I try to access the shared folder is "\INFINITYMedia is not accessable. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. [code]
View 14 Replies
View Related
Nov 16, 2011
About 6 months ago I bought a new router (Linksys E1000 v2.1) which worked great right out of the box. A couple months later I tried to setup a home network so that my two laptops could access a shared drive on my wired desktop, but for some reason they didn't show up as being on the same network. All computers involved are running Windows 7 if that matters.
Upon a recommendation from I friend I put DD-WRT on the router and it worked fine. Setup MAC filtering and WPA2 Personal security. This worked fine for about 4 months until today.
When I got home from work today I noticed my laptop wouldn't pull up any web pages, but it said it was connected. Then I noticed my iPhone wasn't connected either. I restarted my laptop and then it wouldn't connect to the wireless either (I could see the wireless, but I would get a Could not Connect error when I tried to connect to it).
I went to my desktop and it is working just fine, it is plugged into the back of the router. I also have an AT&T MicroCell (cell phone booster) that is plugged in to the back of the router and it works fine too.
I removed the encryption and MAC filtering. I then reset to factory (or "factory" DD-WRT) and now the wireless works, but it is MUCH slower than my desktop. I ran a speedtest on my desktop and got 12 Mbps down and 1 Mbps up. On my laptop, I get 0.03 Mbps down and 0.25 Mbps up.
View 4 Replies
View Related
Dec 24, 2012
Region : India
Model : TL-MR3420
Hardware Version : V1
Firmware Version : 3.12.21 Build 120523 Rel.37880n
ISP : Reliance
I've just set up a MR3420. It works fine in "WAN only" mode and provides access via our ADSL modem. It also works fine in "3G only" mode and provides access via a Reliance Netconnect+ USB modem (a Huawei E150 I think). I updated the firmware to the latest version in order to get it to work with the USB modem.
The problem I have is that when I set it to "3G preferred" it doesn't seem to connect over 3G. I can see it tries to connect but then fails and then WAN takes over. The connect and disconnect options are greyed out on the 3G page so I am unable to manually get it to retry. I've tried leaving it for a long time but it doesn't seem to connect over 3G ever. I've tried setting 3G to connect on demand and connect automatically but both behave the same.
View 3 Replies
View Related
Sep 4, 2012
I have Vlan 100 (inside) and Vlan 65 (Outside)I'm trying to configure RDP and ping traffic from Vlan 100 to Vlan 65 One way.If I connect 2 PCs on E0/0 and E0/1 they can happily ping the their own VLAN ip add 192.168.100.3 and 172.16.65.1I've copied my config,
ASA Version 8.4(4)1
!
names
!
object-group network A_Network
network-object 172.16.65.0 255.255.255.0
[code]....
View 9 Replies
View Related
May 13, 2013
One of our ASA5505 can not ping the gateway today. But when I use a notepad , using the same IPs, it can ping the gateway !!!
It is so strange, the ASA5505 was working ok before until today.
Is there anyting I can do to check whether the ASA is ok ?
View 2 Replies
View Related
Apr 23, 2012
I am trying to configure dual ISP on my ASA5505.I have everything configured and working when eth0/0 is connected, but when I disconnect it, it doesn't route any traffic.The static route for the primary isp is removed and the static route to the backup isp shows up, but no traffic goes in or out. I should note that I'm doing this as a proof of concept so eth0/0 is connected to a router and eth0/1 is connected to another router. [code]
View 7 Replies
View Related
Feb 25, 2012
For some reason I cannot ping or FTP on a specific computer on my home network. All other computers work fine and the specific computer works fine on other networks. But the combination of this computer and my home network it doesn't like.
I have disabled both windows firewall and my virus software but nothing seems to work. It seems to be a timeout issue as FTP and ping sometimes does work but FTP is increadibly slow when it works and the ping time is very high 670ms and above. I am running windows 7 and my router is a netgear n150
View 4 Replies
View Related
Jul 28, 2011
I have a ASA 5505.|I configured it for remote access VPN from cisco VPN client.the ASA receives a public ip address on outside interface via PPPoE.I can connect to public ip of outside interface and address 10.1.1.2 is assigned to my Cisco vpn client.the problem is that I Cannot ping or reach ASA internal IP address 172.16.29.1 in any way when I am in VPN from outside,while I Can ping other hosts on 172.16.29.0/24 when connected in VPN.this is a problem brcause when I am connected in VPN to ASA I Cannot configure it..Then I Wanted to ask if it is possible a configuration which gives addresses from network 172.16.29.0/24 (the same as inside network) to VPN clients instead of another network (10.1.1.0/24) [code]
View 1 Replies
View Related
May 22, 2012
I have interited an ASA5505 problem. We're trying to manage the ASA remotely - we can connect to the device remotely via IPSec, we can ping other devices on the LAN network, but cannot ping the inside interface of the ASA - nor can we telnet/ssh/http to it. We can, however, connect to another router that's on the LAN and then SSH into the ASA's inside interface.
My IP via VPN: 10.133.20.8
The ASA interface we're trying to connect to via SSH or ASDM: 10.4.209.254
A router on the LAN we can connect to 10.4.209.250
We can ping other LAN devices such as 10.4.209.75, .90, .150 - so it's not a NAT/Route/Split Tunnel issue.I've attached the ASA config.
hostname ASA5505
enable password XXXXXXXXXXX encrypted
passwd XXXXXXXXXX encrypted
names
name 10.4.209.248 rpm_router
[code]....
View 2 Replies
View Related
Feb 26, 2013
I'm a CIsco ISR, Setting up my first ASA, which seems to be going well.I've setup an IPSEC VPN to a non Cisco device. And have connectivity between devices in each subnet.
-Subnet A - non Cisco - 10.10.13.0/24
-Subnet B - ASA 5505 - 192.168.2.0/24 (ASA is .254)
From Subnet A I can ping every device except the ASA on .254.
Edited Config attached, IP's changed for privacy, passwords removed.Let me know if I've removed too much of the config.
View 3 Replies
View Related
Nov 5, 2012
I've got a 3560-X that passes POST according to console, but there are issues nonetheless...USB console doesn't work. RJ45 works just fine. No status lights turn on at any point (e.g. syst, xps...). 10g network module is installed with a 10g LRM SFP. All lights on the module are amber. However, it passes according to POST. Switch passes traffic, obeys config, etc. Link lights on RJ45 ports work fine. This was brand new out of the box. Thinking about trying IOS reload..
View 6 Replies
View Related
Apr 18, 2013
I have a pair of OLD Cat6500's running CatOS:
WS-C6509 Software, Version NmpSW: 7.6(16)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Dec 22 2005, 16:37:19
System Bootstrap Version: 7.1(1)
System Boot Image File is 'bootflash:cat6000-sup2k8.7-6-16.bin'
System Configuration register is 0x2
I know these are no longer supported, but I have to ready them for migration. Recently a problem began with these switches. What happens is that when I telnet to them, I cannot authenitcate via TACACS. This works fine for all our other IOS equipment, just not for these 2 switches. The error is:" % Error in authentication" and then I get kicked back to the login prompt.
The odd thing is that when I connect to the switch via the console port, I can authenticate fine with TACACS.
CMS> /c 14
[Code].....
View 2 Replies
View Related
May 1, 2013
I have a E4200 v1, connected with a few PCs by ethernet ports and various devices by wifi. Now the wireless devices work perfectly but sometimes the PC via ethernet ports cannot connect to LAN and internet.
View 2 Replies
View Related
Sep 29, 2012
I just try to ping a internal Host but it want to go.
Laptop<===>ASA5505
Connected is the Laptop at Ethernet 0/2 Inside
My running-config is a clear config, only VLAN 1 has a IP and Ethernet 0/2 is up.
But If I try to ping to the Laptop I get the followed:
asa5505# ping 192.168.1.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.100, timeout is 2 seconds:
?????
Success rate is 0 percent (0/5)
asa5505#
From the Laptop to the ASA5505 I can Ping successfully.
View 6 Replies
View Related
