Cisco VPN :: Change Gateway Through ASA 5505
May 28, 2011
I have four ASA 5505 devices connected via tunnels. All of the tunnels have a single point of exit to the outside, an AT&T T1 line. Because of issues with bandwidth, I added a secondary line to each site. In this case the secondary line is a comcast high speed internet connection. What I would like to do is set up a route so that any traffic that is going to the internet (browser or email) be directed through the Comcast line and all internal traffic (file transfer, ERP, VOIP) can be directed to the AT&T line. Each has a separate ip address. There is a single default gateway set up on the ASA now.
View 1 Replies
ADVERTISEMENT
Oct 11, 2011
I rdp into our server 2008 via IP. This is a router on ip 0.1, this is forwarded to my server on IP 0.3. This server was setup with DHCP default gateway of 0.1. We added a new outside connection on IP 0.2. I was talked through the changes so that internal DHCP requests went to gateway IP 0.2 but RDP still used 0.1. I plan on getting rid of 0.1.Where is the setting to change the RDP to use default gateway of 0.2?
View 3 Replies
View Related
Aug 2, 2011
how do i change a default gateway? the current gateway 170.130.110.254 needs to be changed to 170.130.110.2 so my two devices at separate locations can communicate with each other
View 1 Replies
View Related
Jun 14, 2012
I just got a wireless router to use with my Hughesnet modem, and it worked fine but my mom turned off the power strip that everything was plugged into and now it won't work. My dad says it's because the Ivip4IP gateway was messed up or something, and I need to change the wireless router's gateway IP to the computer's default.
View 1 Replies
View Related
Jul 4, 2012
I want to know could we change or remove the Gateway (highlight) within of Routing Information Sources in OSPF routing protocol? [code]
View 9 Replies
View Related
Mar 28, 2012
I am trying to get rid of 2 old 2651xm's and 2 2950's from my CCNA days and want to get into the ASA realm. Can I be able to use the ASA, not only as a security appliance / firewall, but also be able to write the access lists, etc, to be able to use this as my router to push packets to and from my internal LAN to the outside world? I guess I should have stated as this being the front end device to my network, just after my DSL Cable modem, that is..and being the only device. I am trying to have this as my main router /firewall solution and then I have an old Linksys router I will pipe off one of the L2 ports to have an AP for my wireless devices? Is this a real solution an ASA can provide?
View 2 Replies
View Related
Feb 27, 2012
A customer got a new VoIP PBX, and now I have to forward port 443 on the ASA to the PBX for remote administration purposes. The LAN-interface of the PBX is in the same subnet as the ASA but has an external VoIP-router as default gateway and not our ASA. Is it even possible to forward the port to the PBX when there is no route of any sort to our ASA on it?
View 2 Replies
View Related
Jun 23, 2011
I have an ASA-5510 in a location that loses connectivity to the wan gateway after anywhere from five to fifteen minutes. At first I thought that the unit might be defective, but I replaced it with an ASA-5505 with similar results. A reload of the ASA-5510 will restore connectivity for the next quarter hour.
Here's the version information on the 5510:
Cisco Adaptive Security Appliance Software Version 8.2(1)
Device Manager Version 6.2(1)
Compiled on Tue 05-May-09 22:45 by builders
[Code].....
View 1 Replies
View Related
Jun 28, 2011
ASA 8.3(2) 5505
I've configured a number of remote access vpns on ASAs, but I don't recall having a default gateway setting assigned after logging in.
Is there a way to disable the assignment of a default gateway upon login?
The value assigned is meaningless. It's just the next available address in the local pool.
View 2 Replies
View Related
Dec 27, 2009
In default mode the ASA 5505 is setup with two Vlan's, one inside and one outside. Vlan1 is the default inside VLan, with IP 192.168.1.1. I would like to change the subnet of Vlan1 tot 192.168.10.1, but when I do, no Ethernet port is assigned to Vlan1 anymore (was 0/1 - 0/7). What I have done is;
#config t
(config)#interface vlan 1
(config)#ip address 192.168.10.1 255.255.255.0
But after that, no Ethernet port is within Vlan1, so I tried the following to assign one (port 0/1);
#config t
(config)#interface 0/1
(config)#switchport access vlan 1
(config)#no shut
But nothing happends when monitoring (#show run) interface 0/1 (no Vlan assigned)
View 6 Replies
View Related
Dec 6, 2010
There is a site I oversee that is moving to a new ISP. The drive is 2 hours round trip and I need to do is change an IP. DHCP is being handed out by the internal Domain Controller and all the workstations point to the server for DNS. Will the following commands inputted over an SSH putty session into the current WAN IP change the IP and allow me to hookup to the new ISP? The plan is to copy and paste the following commands into global config mode. Currently they are using DHCP on the WAN side which I do not approve of and their external route is pointing to the internal IP of 192.168.1.1. Things still work but I want to do away with this. Will these commands get the job done?
interface vlan 2ip address 68.x.x.2 255.255.255.240exitno route outside 0.0.0.0 0.0.0.0 192.168.1.1route outside 0.0.0.0 0.0.0.0 68.x.x.1
View 7 Replies
View Related
May 17, 2011
I need to move the client machines off of the 3750 (and their DHCP dependency on it) to the SGE2010 and absolutely route their internet traffic out through the outside interface on the 5505. They must also be able to communicate back into the internal environment in order to communicate with the production servers.
The clients currently use .254 addressing through a dumb dell switch to the 3750 but I am trying to migrate them over slowly to the .253. I know that the 2010 will not do DHCP, so I am putting a DHCP server on that switch right now. The 5505 won't let me add an additional nameif statement onto one of the other eth0/x interfaces and I'm not sure if that has anything to do with it's capabilities to act as a DHCP server (it's not an option in the ASDM) or it's ability to serve as the internet gateway for the 2010 clients. (Side notes: The 5505 has a base license and is currently also connecting 1 site to site VPN. As is the 5520, so all of it's interfaces are used as well).
I statically assigned a moved client with a .253 address and plugged it into the 2010. I have tried giving the 2010 both a .4 address and a .253 address but neither will allow me to ping any of the addresses on the 5505. The 2010 shows automatic routes to the two subnets and I set it's default route to 253.1. The link between the 2010 and the 3750 works - clients receive a .254 address from the 3750 and can get out to the internet via the 5505 and reach the production servers as well.
Why won't the 2010 see the 5505 as a gateway and allow clients to get to the internet and also traverse the 3750 when they need access to the production network?
The reason why I dont' just connect the two swtiches and call it a day is because I also need the production servers to ALWAYS go out/receive web requests via the 5520 outbound/outside interface. I'm having such a hard time wrapping my head around why i can't get my clients moved over to the new switch, I haven't even grasped how I'm going to do that yet.
View 1 Replies
View Related
Mar 13, 2013
We have an ASA 5505 and are changing ISPs so we'll be getting a new static IP address. How do I change the external IP address using ASDM? (I haven't done it in 5 years so I'm rusty and just want ot make sure.) The ASA and ASDM are up to date.Am i correct in that I only need to change the external address in the configuration under Interfaces, then under Routing - Static Routes - Gateway IP I just need to enter the new WAN gateway address?
View 2 Replies
View Related
Jan 19, 2012
We have a number of 5505 ASAs at remote sites all of which are configured to connect to one of two head-end servers.We need to change the primary head-end IP addresses. At the moment devices are successfully connected to the secondary.If we issue vpnclient server i.j.k.l e.f.g.h then the device drops off the network and won't reconnect until it is power cycled.If we make the changes in ASDM using the GUI to remove the old primary and add in the new primary the ASDM says "No changes made".Devices are running 8.2 and 8.4 code and behaviour is the same.
how to change head-end server IP addresses without the device disconnecting and not coming back up? According to the configuration guide the ASA should cycle through the addresses every 8 seconds until it can connect - but it doesn't seem to do this as it won't connect to the good secondary head-end either!
View 1 Replies
View Related
Jan 16, 2013
I just learned that the licensing structure for the ASAs is changing, but I don't have any details. We have roughly 30 ASAs (from 5505s to 5585s). If there's a licensing change, I need to do an impact assessment and plan accordingly.
View 5 Replies
View Related
Dec 2, 2011
So here is my network.
ASA5505--->Cisco1841--->Cat2960
Code
ASA asa831-k8.bin
Cisco 1841 c1841-adventerprisek9-mz.151-4.M2.bin
Cat 2960 c2960-lanbasek9-mz.122-55.SE1.bin
and here is my dilemma.
I can SSH from the internet to my ASA on default port 22, directly to my public IP. I can SSH from the internet to my Cisco 1841 on port 2001. I can not however, SSH to my Cat 2960. From what i can tell, on the Cat2960 i can't change the default port 22 for SSH to different port, just like i did on the Cisco 1841. I looked to see if I can change the default port for SSH on he ASA, it does not look like this is an option.
The bottom line is that i want to be able to SSH to all three devices from the internet. I only have one public IP. As of now, what i can do is only SSH to the ASA on default port 22 directly to the public IP and Cisco 1841 on port 2001. It appears that changing the default SSH port on Cat 2960 is not an option. It also appears that I can't change the default SSH port on the ASA, if i could, i would and then i should be able to SSH to the Cat 2960 on port 22. No matter what i did on the ASA, it always listens on port 22 for SSH connections.
show asp table socket
TCP 001f549f <<pub IP>>:22 0.0.0.0:* LISTEN
how do i make it listen on different port?
Here is relevent config for SSH for cisco 1841 (port forwarding)
ON ASA
object network ROUTER
host 10.10.1.1
[Code].....
View 28 Replies
View Related
Feb 14, 2013
I've got two RV082's connected. Each has a dynamic IP (changes typically every few weeks). I've configured the tunnels on both ends with a local and remote "Remote/Local Security Gateway Type" of "Dynamic IP + Domain Name(FQDN) Authentication".If I look at the VPN Summary tunnel status, it shows an IP address of "mydomain.dyndns.org 0.0.0.0" under the "Remote Gateway" column heading. The Tunnel Test "Connect" button is N/A.I can resolve both of the mydomain.dyndns.org entries on both sides of each VPN using the Diagnostic DNS lookup tool within each router. If I hardwire a fixed IP address for the Local and Remote Gateway everything works just fine. VPN is good.
I just can't seem to get the "mydomain.dyndns.org" function to work. It appears the router can't resolve the dynamic IP from the domain names on each of the routers.
View 2 Replies
View Related
Aug 30, 2012
I replace our aging rv082 routers with wireless rv220w routers. The gateway to gateway vpn works great, however I am no longer able to manage our print servers port 80 management page. I can ping any host with success, and I can manage hosts that have a port 10000 or 8000 web interface - but no port 80 ones... I had no issues when using the old rv082 routers...
View 0 Replies
View Related
Jul 6, 2012
I picked up a pair of RV220W's and before I spent loads of time at a remote site, I figured I'd go through some VPN testing at home to make sure I could get it setup properly. What this means is I've plugged the Internet uplink into a switch, then from the switch into both routers & configured them (using unique static IP's for each) from there. For what its worth: While I have some IT experience, I don't have strong networking experience.
I setup several VLAN's on the local RV220W, and the end result is to make it so that an asset at the remote site with an IP in any of the ranges (192.168.121.0/24, 192.168.131.0/24, 192.168.141.0/24 and any future VLANs) can communicate with/access resouces at the local site. Likewise, an asset at the local site with an IP in any of the ranges (.121, .131, .141 + any future VLANs) should be able to reach the remote resources (currently just 192.168.181.0/24, but future VLANs as well).
This evening I tried to focus on the relevant VPN pages of the Administration Guide to get the VPN up. Leaving the defaults I got as far as establishing a link between both sites and it seems that things are working right: From the remote site (.181) I can access the local site (.121, .131, .141); and from the local site I can at least ping resources (a laptop) on the remote site. (Yay!)
However, when I physically connected an asset that had a 192.168.121.X, 192.168.131.X and 192.168.141.X IP addresses to the remote RV220W (which is 192.168.181.0/24), I couldn't see it from the remote or local sites.I assume this is expected. But I'm reaching out to the community to see what other possibilities might be available becuase networking is a weak area for me. I figured it might be something like a Static [or Dynamic] Route but I really am not 100% sure.
'TECHNICAL' SPECS
Local Router LAN/WAN Settings:
LAN IP: 192.168.121.1 on default VLAN (1)
VLAN 13 defined 192.168.131.1 with DHCP enabled; Reservations created outside of DHCP scope
VLAN 14 defined 192.168.141.1 with DHCP enabled, Reservations created outside of DHCP scope
Inter VLAN Routing enabled for all VLANs
[URL]
View 7 Replies
View Related
Sep 13, 2012
config setup
protostack=netkey
klipsdebug=none
[Code]....
View 3 Replies
View Related
Oct 17, 2011
Can I have use a Gateway-to-Gateway IPSec tunnel whereby a user can surf the Internet using his local Internet connection and at the same time connect through the IPSec tunnel to a remote subnet using RVS4000 routers?
View 1 Replies
View Related
Apr 11, 2013
I have two Cisco RV042 Routers, they are being used to connect two offices, i have created a standard gateway to gateway connection, fixed public ip addresses on both sides and everything works fine, except when the tunnel gets disconnected, it does not connect back automatically, i have to log into either router console and click the connect button to get the tunnel working again, this is really annoying since it happens once or twice a day at least.
View 2 Replies
View Related
Mar 9, 2012
New hardware here, requesting a bit of your knowledge, We are tryingin to setup a simple gateway to gateway VPN
HomeA Has an RV016 with a public static IP
Local Group Security Gateway type is IP Only with the IP
Local Security Group Type is Subnet, with the local IP class 192.160.0.0
Remote Security Gateway Type: Dynamic + Email
Email address some@emailaddress.com
Remote Security Group Type: Subnet
IP Address 192.168.1.0
IPSec Setup as default with nice password.
HomeB has an RV082 with a dynamic ADSL link
Local Group Security Gateway type is DynamicIP +Email
Email address some@emailaddress.com
Local Security Group Type is Subnet, with the local IP class 192.160.1.0
Remote Security Gateway Type: IP Only
Remote Security Group Type: Subnet
IP Address 192.168.0.0
IPSec Setup as default with nice password.
The idea is for HomeB which has a dynamic IP, to reach HomeA, which has a static IP and connect. But they just wont. I have not clue what's wrong, I followed the instructions, maybe i miss interpreted something. I could share the VPN logs for both., Im getting a lot of errors there.
View 2 Replies
View Related
Feb 11, 2012
I have a pair of RV082 routers and I'd like to configure gateway to gateway VPN tunnel as described in a cookbook, "How to configure a VPN tunnel that routes all traffic to the Remote Gateway," (file name Small_business_router_tunnel_Branch_to_Main.doc). I followed this cookbook and found that my while the Main office has internet connectivity, the branch subnet doesn't have internet connectivity.
Routing does behave as advertised, where all traffic does go to the main office. However, the 192.168.1.0 subnet in the branch office does not get internet connectivity. I've read in other posts that the Main office router will only provide NAT for the local subnet, not the branch office subnet. Is there a way to configure the RV082 router to provide NAT for all subnets?
If not, which Cisco product will provide the VPN Tunnel connectivity as well as the NAT for all subnets? Can the RV082 be used as part of the final solution or are my RV082s a wasted expenditure?
Following is the configuration that I'd implemented, (real IP and IKE keys are bogus).
Gateway To Gateway
Remote Main Office
Add a New Tunnel
Tunnel No. 1 2
Tunnel Name : n1-2122012_n2-1282012 n1-2122012_n2-1282012
Interface : WAN1 WAN1
[code].....
View 2 Replies
View Related
Apr 8, 2012
I have two Cisco RV8082 Routers which I would like to setup a VPN Tunnel with Gateway to Gateway. One location is a static IP Address. The other location is a dynamic IP address.
View 2 Replies
View Related
Jan 29, 2012
Just bought 3 WRVS4400N, I wanted to setup gateway to gateway VPN. I followed the instructions on the WRVS4400N admin guide and VPN does not connect. I also downloaded the VPN setup wizard and that also did get the gateway connected. Everything seems to be correct. Do I have to enable anything else? Firewall setting?
Below is my config.
IPSec VPN Tunnel: Enabled
Tunnel Name: TUN01
Local Security gateway: IP only
WAN1 IP: 192.168.100.1
SUBNET: 255.255.255.0
Local Security type: subnet
LOCAL IP: 10.10.10.1
SUBNET: 255.255.255.0
[code]....
View 1 Replies
View Related
Mar 19, 2013
I am trying to set up a gateway to gateway VPN connection between a RV042G (central site) and a RV110W (newest firmware) which is used for presentation purposes on various customer's sites. The RV042G has a static IP. The RV110W has different IPs, depending on where it is used.
Basic VPN settings are clear to me (we have another VPN between two RV042G with static IPs). I set up the VPN connection on the RV042G wth the following settings for "Remote Group Setup":
Remote Security Gateway Type : IP + Domain Name (FQDN) Authentication IP by DNS resolved: mydomain.no-ip.org Domain Name: router12345
The value "router12345" is what I have configured in the RV110W as "Host name" in the network settings.
This configuration does not work so I am obviously doing something wrong. Do I have to use "router12345.mydomain.local" instead if I configured "mydomain.local" as the domain name in the RV110Ws network settings? For my tests the RV110W has a WAN-IP of 192.168.178.100 because it is located behind a DSL-Router. The external IP of this DSL-router is 178.0.x.x. The resolved IP from mydomain.no-ip-org is 192.168.178.100 but when I look in the RV042G log I see the requests coming withg the external IP (178.0.x.x). Is this the problem? The last message I see in the log is "no connection has been authorized with policy=PSK".
Or can I use "IP + Email Address (USER FQDN) Authentication" instead (where can I enter this email address in the RV110W?). Or do I have to use "Dynamic IP"?
View 1 Replies
View Related
Jan 24, 2012
I recently swapped out an RV082 with a newer model (still RV082 but black and a different interface). I configured the Gateway to Gateway VPN exactly as it was before but none of the three other RV082's will connect. I have tried deleting the connections several times to no avail. I have aggressive mode disabled and have tried with the firewall on and off. Below are the settings (IP's have been X'd out) and the log.
Settings:
IP OnlyIP Address : X0X.X0X.20.31Local Security Group Type : IPSubnetIP RangeIP Address : Subnet Mask : Remote Group Setup
Remote Security Gateway Type : IP OnlyIP AddressIP by DNS Resolved : Remote Security Group Type : IPSubnetIP RangeIP Address : Subnet Mask : AES-192AES-256AES-128 AES-192AES-256 AES-128 IPSec Setup3DES Keying Mode : ManualIKE with Preshared keyPhase 1 DH Group : Group 1 - 768 bitGroup 2 - 1024 bitGroup 5 - 1536 bitPhase 1 Encryption : DES Phase 1 Authentication : MD5SHA1Phase 1 SA Life Time : secondsPerfect Forward Secrecy : Phase 2 DH Group : Group 1 - 768 bitGroup 2 - 1024 bitGroup 5 - 1536 bitPhase 2 Encryption : NULLDES3DES Phase 2 Authentication : NULLMD5SHA1Phase 2 SA Life Time : secondsPreshared Key : Minimum Preshared Key Complexity : EnableLOG:
[code].....
View 1 Replies
View Related
Jul 11, 2012
My two RV042 , one at home and the other one at my working site, constantly lost VPN connection after successfully connected.Both Firmware are identical. [code]
View 1 Replies
View Related
Feb 8, 2011
we do have 2 Rv042, one in my office and one in my house.. in the office we do have static ip and at home none.. question is can i connect the two RV042?
View 1 Replies
View Related
Mar 22, 2011
I have some problems in my network with Gateway to Gateway Vpn Connection using two Rv042 routers.
I cannot ping the computers with static ip configuration.
In local an remote computers who have DHCP ip configuration i can ping each other .
View 1 Replies
View Related
Jul 26, 2012
We have a VPN setup between two Cisco RV082 routers, the VPN status shows as connected however I can't ping the other network. I am unable to ping between routers, let alone ping computers behind those routers.
We have 2 branches, branch 1 is on a static IP and branch 2 is Dynamic. I am able to connect via QuickVPN from Branch 2 to Branch 1 and remote desktop to computers, however have yet to VPN/remote desktop in the opposite direction.
To me it seems like a firewall issue at branch 2, but what's causing this. Also they are currently running 2 differnet firmware version not sure if this would cause a problem.
View 1 Replies
View Related
Apr 6, 2013
i am trying to setup a vpn Gateway To Gateway when i setup the vpn i can ping the 2 rv042 i cant see any computer in the network places when there comect we need to see the computer in the network places so are pos will run?
View 1 Replies
View Related
