One of our company guys always complaining that few inside PC's are frequently loosing internet and reconnecting after some times.The Connectivity is as mentioned below:
Inside: Switch -> Router -> ASA -> Router -> Modem ->Internet ------------VPN-------------------------
I have an ASA 5510 which i've configured for internet access.I can connect to the internet from the ASA box,I can ping public networks from the console of the ASA box,but cannot access public hosts from internal hosts connecting via the ASA box.Find my config below to know what i ahave omitted or committed.
[code]...
I have just started to use an ASA 5510 for my network. I use the DHCP server on it and after i made the change over to ASA hosts started loosing their IP address. This was not a problem before on my old firewall that aso had the roll of DHCP.
Is it possible that something is wrongly sett on the asa? All traffic is flowing normaly when this does not happen.
Information:
Lease length: 172800
address pool: 134 addresses
hosts: around 45 + mobile units 45
I am struggling to get successfull pings beween asa and inside hosts but couldn't succeed. Done packet tracer result is acl-drop
Here is the running config
Prem-ASA(config)# sh run
: Saved
:
[Code].....
DNS resolution works and I can surf the web without fail. But if I try to ping any external hosts (I can ping inside interface of ASA fine) from the LAN I get timeouts. I can ping anything from the ASA without fail.
ASA Version 8.4(1)
!
hostname fw1-nat-ann
domain-name inmd.infoblox.com
enable password anWLNen9CTFp7B/X encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
I am able to reach VPN clients (Anyconnect) only from hosts directly connected to the ASA's inside interface subnet. However, hosts on other internal subnets (177.1.10.0 & 177.1.11.0) are unable to connect to clients on VPN. The ASA is running ver 8.4. [code]
View 8 Replies View RelatedASA is running 8.4.
Internal interface: 172.16.1.1
External interface: 172.16.2.1
Routing to 192.168.0.0 via internal host.I've got some static NATs, e.g:
object network obj-192.168.0.1
nat (inside,outside) static obj-172.16.2.1
object network obj-192.168.0.3
nat (inside,outside) static obj-172.16.2.2
I also want in internal NAT, but only for certain external hosts, so when they connect to any of the above, their source address is changed. I've attempted the following so an external host (172.16.2.254), has it's source changed to 172.16.1.100.
nat (outside,inside) source static obj-172.16.2.254 obj-172.16.1.100
But it's source remains unchanged.What am I missing?
I am able to connect to my Cisco ISR 891 via VPN with the Cisco VPN Client 5.0.07.0440, but once connected I cannot access hosts on the inside. If I ping a host on the inside by name, nothing resolves. If I ping by IP, I get a reply from the public IP of the router. [code]
View 2 Replies View RelatedI'm just new with ASA. I'm just self-studying on it. I was tasked to have an ACL that will allow inside hosts to access a specific network. Is there a way on how to know all the inside hosts on the behind ASA so that I can do a "object-group network" on those inside hosts which I think it will look neat.
View 1 Replies View RelatedThe ASA5505 I am working with has this from the show version:
Licensed features for this platform:Maximum Physical Interfaces : 8VLANs : 3, DMZ Restricted Inside Hosts : 10Failover : Disabled VPN -DES : EnabledVPN-3DES-AES : Enabled VPN Peers : 10WebVPN Peers : 2Dual ISPs : Disabled VLAN Trunk Ports : 0
This platform has a Base license.
Does the Insides Hosts :10 line mean that only 10 devices can be connected to the firewall at one time? I would like to connect an AP to one of the PoE ports and have possibly more than 10 connected. Is this possible with this ASA5505?
I want to upgrade "inside hosts" from 10 to unlimited on a ASA5505-BUN-K9, Do I have to buy Security Plus license ( L-ASA5505-SEC-PL =) ) before activating ASA5505-SW-10-UL ?
View 3 Replies View RelatedI am using ASA 5505 firewall with base-license. I connected my firewall to one cisco 3750 switch where i created 5 vlans. I done NATing for all vlans and they able to get internet and working fine. They able to browse all internet sites like gmail and yahoo mail.
All internal users are configured to use Outlook for their webmail. Here the problem is with outlook they are unable to send and receive the mails.
If they directly connected their system using public ip( Directly from ISP) they able to send and receive mails from outlook.
This is an issue I'm currently exploring with TAC, but I'd like a quick reality check. We have a pair of ASA 5510s in Active/Standby stateful failover mode. In some tests failing over from the active to the standby system breaks SSH connections from hosts on our Inside to hosts on our DMZs.
A specific example is our backup server on Inside which is connecting to our mail server in the DMZ2, and running ssh/rsync/scp for the backups. A running backup job fails with network timeout errors when I trigger the failover. Also, sometimes the mail server loses or hangs on its connection to our LDAP server in DMZ1, although sometimes this connection is fine (DMZ2 is more "inside" than DMZ1, and I assume the LDAP look ups are many short connections, vs the rsync backup being one long connection).
TAC has suggested that open SSH sesions will always fail when the ASAs failover. I believe this is true for management connections to the ASA, but I don't see why it should be the case for an SSH session through the ASA to a server in the DMZ. TAC has suggested that I open some connections to servers in the DMZ and test what happens, and I can do so this Wednesday morning during a maintenance window.But, in general, is this true? That is, given an SSH session from a workstation to a server, should a failover break it? If so, why?
The setup is:
MyWorkStation-INSIDE -> CoreSwitch (vlan 10) -> [ ASA-INSIDE - - (ASA-internal-connection) - - ASA-DMZ ] -> CoreSwitch (vlan 3) -> TargetServer
That is, all our inside VLANs are routed by our core L2/3 switch to a VLAN that connects to the Primary and Secondary ASA's INSIDE ports. There are also seperate VLANS on the core for the ASA's DMZ1 and DMZ2 connections, which go to both ASAs and to any servers in these zones.
The description of the ASA Stateful failover [URL]says: "The state information passed to the standby unit includes these:
· The NAT translation table
· The TCP connection states
· The UDP connection states
· The ARP table
· The Layer 2 bridge table (when it runs in the transparent firewall mode)
· The HTTP connection states (if HTTP replication is enabled)
· The ISAKMP and IPSec SA table
· The GTP PDP connection database
[code]....
I'm not quite sure what the ISAKMP and IPSec SA tables do, but shouldn't an SSH connection through the ASA be just a TCP connection? "For us, SSH from Inside to hosts in the DMZ survives failover," or, "Yah, failover breaks all SSH sessions."
I'm stuck at asa 5505 nat, port forwarding configuration Here is what i need:
host1: 192.168.1.1 service tcp/100 >>>>> public ip 1.1.1.1 service tcp/100
host2: 192.168.1.2 service tcp/200 >>>>> public ip 1.1.1.1 service tcp/200
host3: 192.168.1.3 service tcp/300 >>>>> public ip 1.1.1.1 service tcp/300
So people from remote just need to use 1.1.1.1 public ip to access all the ports on three different inside server.I can do this on my old ASA 5505 with 8.0(4). Looks like there're lots of change from 8.0 to 8.4.
At the end of the day I simply need to upgrade the license on my ASA 5505 v7.2.4 (upgrade will come later as part of a larger project) to allow for >10 Inside Hosts. From what I've read there seems to be a 50 license upgrade out there. Can this be purchased directly? From whom? Will it only affect the Inside Hosts number and not affect any other licenses, configurations, etc. Just being overly cautious since this is way outside of my normal realm. Below is the current activation-key information....
Result of the command: "show activation-key"
Serial Number: xxxxxxxxxxxxxx
Running Activation Key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Licensed features for this platform:
Maximum Physical Interfaces : 8
VLANs : 3, DMZ Restricted
Inside Hosts : 10
Failover : Disabled
VPN-DES : Enabled
VPN-3DES-AES : Enabled
VPN Peers : 10
WebVPN Peers : 2
Dual ISPs : Disabled
VLAN Trunk Ports : 0
This platform has a Base license.
The flash activation key is the SAME as the running key.
We have a wireless router with about 8 devices connecting to it at any one time. For some reason, 1 laptop constantly loses internet service, it's still connected to the network but it's "local only" connection. Restarting the laptop doesn't solve the problem, only restarting the router.Now, I know very little about this kind of stuff, but to me it seems like an issue with IP addresses? It currently happens at least once a day.
View 2 Replies View RelatedI have recently changed my router from Netgear to TalkTalk because of an intermittent signal, no problem with my desktop ethernet or laptop wireless or tablet but I keep loosing connection with my WII internet connection for Netflix.
View 10 Replies View RelatedThis router has to be rebooted every 12-24hrs to re-establish the internet connection.
View 14 Replies View RelatedMy Cisco X3000 keeps loosing the internet connection after 1 day and will only reconnect if the device is rebooted. Pressing the Internet connect button in the Status page does nothing.Even when the Internet connection is lost, the wireless network is working 100% and all the devices on the network stays connected and are accessible.The router has been updated to the latest Firmware available from Cisco v1.0.03 build 001 Jun 11,2012
View 9 Replies View RelatedMy IP provider has upgraded my broadband speed in early Jan. They require ADSL2. It seems to coincide with this date that I keep loosing my internet connection on a regular basis, say every 2 days or so, but not consistent. The cure is to unplug the linksys WAG200G ADSL home gateway. Plug it in again and all is well, until the next time. On the box it says the until is ADSL2/2+ compliant.
View 2 Replies View RelatedF9K1103 v1 (01C) keeps loosing internet connection, the router is wired to a time warner modem and wireless is not enabled.
View 2 Replies View RelatedBought a Dir-600 from challenger, used it for 3 months and started expericing the common problems of loosing internet connection highlighted by many users here and in other forums. Would always have to do a modem / router power cycle to get it going again.Slightly after 3 months... the thing went dead. Can power up but no response. Cannot detect the modem.Got a one-for-one exchange at Funan. Used the 2nd one for less than 2 months. It just went dead on me! Same problem...
View 3 Replies View RelatedI've recently upgraded from a WAG54GS to the WAG320N. It seems to work OK for a period then looses the connetion to the Internet - DSL light on but not the Internet light. Normally I need to re-set the router to re-connect (either through the back switch or through the setup page)
This is my DSL information from [URL] whilst connected OK
--- System Information ---Vendor: LinksysModelName: WAG320NFirmware Version: 1.00.08 , 2009-08-27T19:37:13Boot Version: 1.06Hardware Version: 0.01--- DSL Information ---DSL Driver Version: AnnexA version - A2pB023k.d21dDSL VPI/VCI: 0/38DSL Status: ShowtimeDSL Mode: ADSL2+DSL Channel: DSL Upstream Rate: 1023 KbpsDSL Downstream Rate: 18723 Kbps Down up DSL Noise Margin: 9.1 dB 6.7 dBDSL Attenuation: 22.5 dB 12.0 dBDSL Transmit Power: 19.0 dBm 12.5 dBm--- Wireless Information ---Wireless Driver Version: 5.10.85.0.cpe4.402.4Wireless Status: EnabledWireless Wide Channel: 9Wireless Standard Channel: 11- 2.462GHZWireless SSID: irae_2--- Dynamic Information ---LAN Mac Address: 00:22:6B:F5:6F:A7WAN Mac Address: 00:22:6B:F5:6F:A9Wireless Mac Address: 00:22:6B:F5:6F:A8---
When the modem looses connection to the Internet; the DSL Noise Margin drops way down to 0.0 or 0.5.
My internet disconnects frequently when I'm either gaming or just browsing
View 3 Replies View RelatedI purchased a brand new Acer Aspire 5250-BZ669 that included Windows 7 just two days ago. Everything is working fine on it except for it randomly looses connection to the internet. I have an established network that I have been using for years. The signal strength is always 5 bars and excellent. I also have a compaq connected to the same network, and it never looses connection. However my Acer will randomly drop connection. I have no idea why. Sometimes it will connect again in minutes or sometimes hours. I am using a Linksys G Wireless Router(Model # WRT54G2), Atheros AR5B125 Wireless Network Driver, and a Atheros AR8152 Controller. I have enabled and disabled in addition to uninstalling and installing the driver and controller many times. I have also moved the router and adapter all over the house. I have downloaded the newest versions of every driver from the Acer website. I have googled for hours looking for the answer to no avail. I run the troubleshoot and the answer it gives me is to make sure all the connections to the router is secure, which it is or else my other laptop wouldn't work.
View 19 Replies View RelatedRecently came back from college to a terrible internet connection that frequently disconnects or drops in speed randomly (for all computers on network). This requires me to perform a hard reset to restore connection. This usually happens at least once a day and sometimes several. Current set up is a Motorola Surfboard SB5100 Cable Modem and a Linksys WRT54GS router.
View 2 Replies View RelatedI am having a huge problem since yesterday. I was using my wireless connection like always and it has randomly started to stop working for brief periods of time. It's like a continuous cycle where the internet works smoothly and fast (like always) for 30 secs at a time, then it goes into 15 secs where nothing works.
View 9 Replies View RelatedI have an acer aspire 5536 laptop and it will randomly disconnect from the wireless internet. Everything will be working fine but as soon as I try to load two things at once (or sometimes even one big thing) it will show that little yellow exclamation mark and say no access to internet even though it is still connected to the network. The other computers connected to the wireless work fine with no access issues so I know it is not the router. Also this happened in my previous home where I used wireless but from a different provider so it is definitely something wrong with the computer. Every time it goes to no internet access if I disconnect and then reconnect it works again.
View 5 Replies View RelatedMy laptop gets disconnected frequently from internet although other laptop is working fine means its a issues with my laptop driver.I am not able to access the default gateway 192.168.1.1,Destination host unreachable same message when I tried with 209.183.226.152, not able to ping goggle.com also.
[code
My wireless internet constantly disconnects and then reconnects right away for seemingly no reason. I can't find a pattern, sometimes I have no dropouts for 6 hours, sometimes it happens every 20-30 seconds for a few minutes. I've checked online and i tried to do some research on it but i couldnt find an answer, i remember typing something into the cmd and it said that something was disables, just cant remember what i typed into the cmd. Also, when my ISP raises the network speed, my router or whatever it is can't handle it so i disconnect and have to call them to set it down.
View 12 Replies View RelatedI'm basically experiencing a frequently slow internet connection, but I believe this to be a fault with Virgin Media. Instead, I have a quick question - there are 7 computers in this house (excluding iphones etc), and the speed we pay for is up-to 50MBPS. Am I correct in thinking that this should be more than enough speed for all computers to be active on the internet without issue - including using Skype/Streaming TV etc? How exactly does a router distribute the broadband connection? This one is mainly out of curiosity, but occasionally I will find that the computer next to me has no issues streaming a TV program, but that my own computer won't even load the page.
View 6 Replies View RelatedThe Internet access starts very slowly and then keeps dropping. My Internet connection is 3G and I get good signal strength but the Internet does not connect. I am using Windows 7 Ultimate OS. Ram is 4 GB
View 2 Replies View RelatedI have a Belkin 8236-4 v2 I got from Belkin because they RMA'd a 6 yearold Pre-N that kicked the bucket. I've been having a hassle trying to get my connection stable.At first I thought it was because the DHCP was causing anything connected to the router to conflict, so I set one of the PCs on the network outside the DHCP range with a static IP and gave it the Google DNS, while this worked for my PS3(connected wirelessly) it did not solve the problem with this PC. I've looked around on the internet for the past few days trying to fix it, and tried several things, but no avail. I'm beginning to think I may need to just buy a whole new router from another company, because after reading reviews on this router I got, it seems to be a big problem for a lot of people, while it seems to happen on a number of other brand routers as well, so I don't want to give up on this thing just yet.
View 1 Replies View Related