i have configured SSL VPN on Cisco ASA5510 which is working fine .My Users connected the VPN and access the servers remotely. But now i face one challange my users use PPTP VPN of the customer now a days configured at the Customer Network. When they Connect the PPTP VPN unable to Access the servers remotely defined on the SSL VPN Route.
View 1 RepliesUsing a netgear router, windows xp and noontec n5 NAS, I can set up the n5 as a local network drive but, from a friend's house, I canot get to access the n5 remotely using urls such as :ftp://nik@<EIP>.com where nik is the N5 ftp folder name set up and <EIP> is the external ip address detected for the router. The n5 is sold without a user guide and their website has so far not allowed me to download one either
View 3 Replies View RelatedI just switched to the EA4500 Router and I'm now unable to remotely access my camera devices. I have done the port forward. I can access the cameras from my local LAN both when using the local 10. ..and external 99 .. Addresses. When I go off the local connection - Access does not work. Slingbox did its auto configuration and I can access it. I just cant get to camera devices (Panosonic, Foscam, etc.).
View 3 Replies View RelatedI work for a company that has several offices in various parts of the country, my job is to change the name of all the machines on our network to our new naming convention. I need to perform this task without causing a distrubance to the other users.
View 2 Replies View RelatedWe have an ASA5510 and a few days ago we were unable to access some segments from remote access VPN, the problem was not the config. A few hours later the problem was resolved on its own and I suspect we have an IOS bug. This has happened a few times in the past and its becoming an issue. How can this be confirmed and which IOS should we upgrade to? Prefer not 8.3 given the syntax difference
View 1 Replies View Relatedthe way i find mac address remotely is by using this methodarp -a ip addressshould give you a mac address of the following ipsunil pindoria
View 2 Replies View RelatedI have a media server, running Windows Server 2003, it is also acting as my Domain controller, DNS and DHCP Server, I have a website hosted at UKHost4u.com, and I can also access my media server using the name url, I have pointed this subdomain to my external IP address of my router, in the Cpanel of my hosting acount now my problem is that I can not access my main website from my house, it just sends me to the login screen of my Media Server, it is something to do with the DHCP Server running on my server, as I turned it off and turned the one on my router back on and it cleared the problem.
View 3 Replies View RelatedI have been working on figuring out a VPN problem on my companies ASA5510. I was accessing the device via: ASDM, SSH using Putty, and even initially with a console cable (also using Putty) using a computer in the networking closet. All 3 of these access methods worked properly for me.I believe I may have inadvertently changed something as of Friday using ASDM. I am mostly assuming this because, as of yesterday I can no longer connect to the device. I actually cannot even communicate with it (ping the interface I normally use to manage, which I could previously ping). No computer on the same subnet as me is able to ping the interface. The device is still accepting VPN connections, dishing out DHCP addresses and everything else it normally does, but I really need to be able to gain access to it again. I am thinking to reboot the device when there is some downtime, in the hopes that ASDM doesn't save to startup-config and only to running-config.
View 5 Replies View RelatedHave cisco router 1921 and 3 cisco switch 3560G i want to configure the cisco router so as network 192.168.4.0/26,192.168.3.0/26,192.168.2.0/26, all to access internet R1921(config)# ip nat inside source list 102 int G0/0 overloadR1921(config)# access-list 102 permit ip ?
I am right to do this below?
R1921(config)# ip route 192.168.4.0/26 10.10.10.2R1921(config)# ip route 192.168.3.0/26 10.10.10.2R1921(config)# ip route 192.168.2.0/26 10.10.10.2
assist on access-list and ip route?
i m working in a domain environment . for example my domain name is testdomain.com. i create a shared folder on it and give everyone a read control over it. then i create a folder in that shared folder with name of test. i also create a user with name test. i give full control to test user over test folder. now when i access the test folder from network with username test. i can read that folder but when i create the file or folder in the test folder it will show the following error..."unable to create a folder"new folder" access is denied.
View 1 Replies View RelatedI'm using a Cisco Wireless LAN Controller 5508, 14x Access Points 1041 and 6x Access Points 1031 in combination with a NCS 1.0.
Is it possible to broadcast SSID'S only on defined Access Points, e.g. AP 1-3,7-10,18? If yes, what have I to do?
I´m looking for the best configuration to restrict a user to read-only. The restriction should be configured via CLI not TACACS+.
-Hardware: 3750 (probably not interesting for this question)
-Oldest IOS: 12.2(53)SE1
The user should be allowed to: see the running-configurationtrigger all kinds of show-commandsping and traceroute from the device.The user should not be allowed to: upload/delete/rename files on the flash-memoryget into level 15 (not sure if I can avoid this)all other commands despite those from level 1 and those specified above.
I have a issue that i am at a loss as how to solve it. I have an ASA 5505 as my firewall. I have users from other companies who visit from time to time and are unable to use their outlook email to send messages. They can however receive messages without a problem. I also have a situation where users who use windows live to access gmail are unable to send messages.
I have narrowed it down to the fact that these uses are using ssl/tls to send the mails. I did some research and found out about the inspect esmtp setting in the ASA. I have disabled it and i still have to problem. I have also removed all outbound deny statements and still no luck.
Of note is that i can send emails without attachments. They take a long time to go out ( from minutes to hours) but eventually they do. Emails with attachments of even 10k do not go at all.
I was running image 8.2.3 and i downgraded to 8.0.5...still did not work...i upgraded to 8.4.3...still did not work. I am now back at 8.2.3.
My Firewall config is attached. I am at my wits end as to what else to try. The company has not renewed support for the device so i am on my own here!
I've been having a strange intermitent problem with my E1500 wireless router. When we first bought and installed it everything was working well with no known problems. After several months no one using the router was able to access certain websites as well as a game server that we play on. No one had made any changes to the router settings and I assumed at first that it was an ISP problem. After talking with our ISP tech support they finally suggested plugging my PC directly into the modem rather then the router. I did and found that the websites and servers that previously wouldn't connect while using the router were now reachable. Any changes to the router settings since installation.I decided that just in case someone unauthorized had made changes to simply revert the router to factory settings and reinstall the software. After doing this I found that I could again reach the websites and servers that I previously could not. So time went on with no problems until a few months later when the same websites and servers were again unreachable by anyone on our router. I again reset the router to factory settings and changed passwords as a precaution, but this time the websites and servers were unreachable even though I had just reset the router.
View 7 Replies View RelatedI Have exented vlan 120,121 from DC-1 to DC-2,the DC-1 and DC-2 are connected using L2 Trunk over fiber terminated on Cisco 6513 on both site ,the distance around 40 Km ,on the DC-2 i just assigned server-1 TO VLAN 120 while server-2 in vlan 121 ,but these servers unable to communicate neither with DC-1 Servers or betwen them locally on DC-2 ,pls note that the servers at dc-2 rely on DC-1 for routing.
View 7 Replies View RelatedI currently have a site to site VPN running connecting a branch office and the Main office using a ASA5510 and ASA 5505. currently PC's at the branch can access the network in the main office using interface 0/1, but we have added another ip range using interface 0/2 and I can't seem to route the traffic to both interfaces. I currently have 0/1 as inside 192.168.10.1 which works, and have added 0/2 as Inside2 192.168.20.1. I know I am forgetting something, any commands to route incoming VPN traffic so PC's at the branch office can connect to both IP ranges?
View 14 Replies View RelatedWill ASA5510 support default route failover mechanism by giving two different AD value in the route outside command?
View 1 Replies View RelatedJust purchased a Cisco RV110W for our small business. We were told this was easy for us to use and secure enough for our small office and for our travelling sales staff to access our website.
We purchased 2 dedicated IP-addresses, 216.82.5.230 for access to one server, and 216.82.5.231 for access to a second server (these IP-Addresses given are just an example; not real).
These come into the single RV110W WAN port. The two servers are plugged into 2 of the 4 LAN ports.
But the WAN setup page only accepts one WAN IP-Address. So when we put in 216.82.5.230, the outside world can HTTPS into one server, but we don't know how to get them to HTTPS to the second server when the other staff uses 216.82.5.231.
My setup has two firewalls to the internet, one is for all internal users who want to access the internet and the other is an ASA5510 acting as VPN terminaton to remote workers accessing using Anyconnect.Each of the firewalls has a public interface on the same network (ex. 196.160.100.192/26).We have a server with a public interface, and all traffic (internal and external) has to access via the public ip (again in the same network as above) and there are different profiles and access levels on that server depending if you are accessing from an internal IP or a public IP.Well, when users are connected thrugh the VPN, although they have an internal IP address, as they are accessing the server on the public IP, the ASA sends the packets through its external interface (direct connected route) instead of sending it to the default internal gateway that is a "trusted" entry point on the server.Any way to force the ASA to send that traffic to the internal default gateway instead of sending it to the external (direct connected) interface?
PS: I have no access to the server (appliance under warranty) so I can't make any changes to it...
I need to be able to redirect some HTTP traffic to an Ironport WSA (for now) on a DMZ interface, the initial config I'm trying to test is along the lines of the following (don't have access to the ASA at the moment to cut-and-paste):
access-list 101 deny any any neq www
access-list 101 deny tcp host 10.0.2.2 any
access-list 101 permit tcp any any
route-map proxy-redirect permit 101
match ip address 101
set ip next-hop 10.0.2.2
Unfortunately the ASA does not take the "set ip next-hop" command, I get an invalid input error message and if I at the route map config prompt type "?" only the "metric" and "metric-type" commands are listed as available.
This happens both on 8.2 (ASA5510) and 8.4(2) (ASA5505). Since others are able to make this work, I assume there's something else on the ASA that I have to set to enable this command?
Cisco ASA 5510 directly facing the internet on E0/0 (1 Public IP only) with internal LAN on E0/1. Exchange 2010 OWA working fine with ACL and NAT rules configured.Problem:
•1. Cannot publish internal web servers to outside, have tried PAT.
•2. Have multiple web servers to publish with all on one protocol (HTTP) to a single public IP which I don’t know if it’s possible on a ASA.
•3.When SSL VPN is configured with Local user database, connecting from Anyconnect client gives a certificate error. Upon viewing the certificate it points to the internal mail server.
I have gone through the docs in creating a static NAT. I have gone into firewall/NAT Rules and set the internal / external entries, set access rules for the various services. However, I am unable to make a connection remotely. Somewhere along the line, I must be missing a command or something.
ASA ver: 8.4(4)
ASDM ver: 6.4(9)
I would like to ask if its possible to remotely access a WAP54G?
View 3 Replies View RelatedHow does one remotely access a SG300-28P?
View 2 Replies View RelatedIs there any way we can assign or access multiple system with 1 public ip to save public ip's.
View 5 Replies View RelatedI noticed that I cannot remotely check the Topology Services in Ciscoworks LMS 3.2. I have attached a screenshot of the error for reference. When I access Topology Services on the server itself, everything works well.
View 5 Replies View Relatedi am trying to access my 02 router to access my cctv but my router will not allow remote access.
View 2 Replies View RelatedHow to access remotely over the Internet to office PC from my home PC and get files that I need? Office's ADSL modem's model is BeWan iBox V1.0 and it has a built-in firewall. ADSL connection has a dynamic IP, which I assume should be configured as static (but how?) Should I investigate VPN capabilities as well? I'm not very knowledgeable about these things.
View 7 Replies View RelatedI am living in an apartment complex with free wireless Internet and i turned this old pentium 4 computer into a web/media/file server. I want to be able to access my server away from home but i am extremely limited and i can not forward ports and I have no other kind of network privileges. I am a complete idiot when it comes to networking solutions and I am trying to learn. I have a very vague understanding of vpns and dynamic dns services but i do not understand what i need to access my server from a different network. I setup dns services for my home server but still have not been able to resolve hostnames to actual y point to my server or maybe my networks firewall is blocking me.
View 1 Replies View RelatedI have verizon wireless router to connect to the internet via FIOS. The public IP on the wireless router is DHCP assigned. I have my home lab with cisco 2511 and octal cables. I would like to be able to access the terminal server remotely via the internet when I'm not in. I'm concerned cause the wireless router is DHCP assigned IP. Even if I have a static IP on the ethernet port of the 2511 connected to the wireless router, I'm not sure if the NAT will work so it can be accessible from the internet.
View 2 Replies View RelatedI have configured a router WRV210 and I left it enabled in order to access it remotely, but I can not connect to it. I have checked the settings and everything is fine, but if I try to access it from anywhere in the website does not load, either IE or Firefox or Chrome.
View 7 Replies View RelatedWe have an Asus RT-N56U router at home, which is connected directly to a cable modem. I am attempting to remotely access the router's interface, and am having trouble doing so even after configuring it properly. I configured the router's firewall to allow remote access, using port 8080. I also set up DDNS, although I tried connecting using both the IP and the DDNS name.I also set the router to respond to pings, and I am able to successfully ping the router (from a remote location) using both the DDNS name and the public IP. But when attempting to connect using my browser, it doesn't work. I have tried multiple browsers, multiple remote locations, and disabling my computer's firewall, all with no success.
View 7 Replies View RelatedHere's what I need to do. I have a file server at work that I need to be able to allow our employees to access the files when they are traveling. I know the server's ip address and know how to port forward and how to share certain folders thru windows, but this is all new territory for me.
View 2 Replies View Related