I'm trying to achieve framed-ip-address/static ip address for some remote access vpn clients and ip allocation from pool dynamically for remaining remote access vpn clients. I've configured my asa [URL].
I'm using local database for user authentication. Remote users can connect and always gets IP address from pool only and never gets the framed-ip I configured for those particular users.
Recently I've installed this particular cisco ASA5510 at a client site (Head office), along with remote access VPN setup. All most 32 branches(one user from each branch) connect to the head office via remote access vpn.
Further I've used the "vpn-framed-ip-address" command along with a dedicated ip address, under each "user attributes", so every time when a user connect, he used to get the same ip address from the VPN pool.
My problem is sometimes this setup works fine, but once in a while the same ip address will be assigned to two different users at the same time, despite of the "vpn-framed-ip-address".
I have a running L2TP/IPsec VPN setup with authentification against a radius server (freeradius2 witch mysql). I would like to have some of my VPN users get a fixed IP address instead of the dynamically assigned IP Pool.
The radius server is returning the correct parameters, I think.
It´s a Cisco 892 Integrated Service Router. Code...
I need to setup a system where my staff can access the internet using the IP address at my buisness. IE. My staff can log into our marketing software (which will only allow access from my buisnesses IP address) from home. My thoughts were to leave the computer on at work all the time and then use a remote access program like logmein to remotley control that computer however I am then limited by only having one person able to do this at a time. I want to be able to use my buisness internet connection as a proxy as such....i think? Computers are running windows 7. Buisnesses internet connection is DSL with wireless modem
View 3 Replies View RelatedI have setup a remote access on our 1841 device, with split tunnel.
now i am able to connect via the vpn tunnel, and even ping and telnet into the cisco device, but when i try to ping any device past the 1841, the ping fails and no traffic is even been encrypted to go over the vpn traffic (looking at the vpn client statistics).
From the ciscos side, pings to the vpn client is failing, yet i see the vpn client in the routing table.
Here is my config:
cisco1841#sh run Building configuration...
Current configuration : 7682 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname cisco1841!boot-start-markerboot-end-marker!logging buffered 51200
[Code].....
Is the following sysntax correct in removing a remote access vpn address pool and inserting a new one on an ASA5510?
(config)# NO ip local pool BWCVPN 192.168.200.1-192.168.200.128
(config)# ip local pool BWCVPN 192.168.300.1-192.168.300.128
(confif)# tunnel-group BWCVPN ciscovpn general-attributes
(config-general)# address-pool BWCVPN
At first I use ACS 4.2 to create static ip address user for remote access VPN,It's easy,just configuration it at user set>Client IP Address Assignment>Assign static IP address,but when I use ACS 5.2 I can't find it.I try to add IPv4 address attribute to user by read "ACS 5.2 user guide" ,it says this: [code] I do this,but it's not work.When I use EasyVPN client to connect ASA 5520,user could through authentication but will not get that static IP address which I configuration on Internal Users.so,what should I do,if anyboby knows how to use ACS 5.2 to create a static ip address user for remote access VPN.
View 2 Replies View RelatedI have noticed a problem recently that our Remote Access VPN will randomly stop working. I will be able to connect and enter my Username+Password and it says Connected, but I cannot ping Remote Resources. If I check VPN Client Statistics, it shows Many Packets Sent/Encrypted, but None Received. It seems this problem affects all devices at once, but leaves the L2L tunnels intact.
It seems to randomly start working for a while, and everything seems fine until it stops working again. I verified that it is not a firewall problem, and it occurs on multiple ISPs and computers.
We also have 2 Static L2L Tunnels, and 1 Dynamic L2L Tunnel all of which operate flawlessly. All sites/remote users use split tunneling.
Below is the config, I just added the keepalives on the RA Tunnel to see if it would work, I haven't noticed any difference yet.
ASA Version 8.0(2)
!
hostname HQ-ASA5505
domain-name xxxxx.local
[Code]....
I've got a Cisco 1941 setup working fine for Cisco Anyconnect. Clients can connect to local resources fine. The issue I have is I need the remote clients to access a third party IP address but to do so they must do it through the VPN. At the moment only local resources are accessed across the vpn and if they need internet they use their own internet connection they are connecting with.I've added the below to make sure traffic going to the IP is going across the VPN.
View 4 Replies View RelatedAt first I use ACS 4.2 to create static ip address user for remote access VPN,It's easy,just configuration it at user set>Client IP Address Assignment>Assign static IP address,but when I use ACS 5.2 I dont't know how to do it.
I try to add IPv4 address attribute to user by read "ACS 5.2 user guide" ,it says this:
Step 1Add a static IP attribute to internal user attribute dictionary:
Step 2Select System Administration > Configuration > Dictionaries > Identity > Internal Users.
Step 3Click Create.
Step 4Add static IP attribute.
Step 5Select Users and Identity Stores > Internal Identity Stores > Users.
Step 6Click Create.
Step 7Edit the static IP attribute of the user.
I just do it,but it's not work.When I use EasyVPN client to connect ASA 5520,user could success to authentication but will not get the static IP address which I configure on Internal Users,so the tunnel set up failed.I try to Configure a IP pool on ASA for ACS users get IP address,and use EasyVPN client to connect ASA , everything is OK,user authenticate successed.but when I kill IP pool coufigurations and use the "add a static IP address to user "configurations,EzVPN are failed. how to use ACS 5.2 to create a static ip address user for remote access VPN?
I'm configuring a Cisco 7206 NPE-G2 as B-RAS for PPPoE over a Gigabit Ethernet interface. Everything is OK but I'm having problems when i try to pass the framed-route attribute from the RADIUS to assign a /29 sub net to a PPPoE client, the 7206 seems to skip it and no route is installed in the routing table.
This is the configuration:
upgrade fpd auto
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
[code]......
I tried also with Cisco-AVpair ip:route with the same results.
I'm running a Winsock server on my machine, and I want to be able to connect a client (on an external/remote) network. I know that there are two IP addresses: The WAN IP which is what your IP address looks like while connecting to the internet. There is also an IP address assigned to you by your router. If both machines are on the same network, then I am able to make the client connect to the server by providing the Router-IP. But when they are on different networks, they do not connect even when i give the WAN IP. How exactly do I specify an address for a remote device ?
View 1 Replies View RelatedHow to remotely changing ip address for my ASA5505.
View 1 Replies View RelatedI have Cisco 1812 connected to ISP's router Cisco 870. Both routers have switch module and when I'm connected with PC to 870 I can connect via VPN to remote location.When I'm connected to 1812 remote VPN doesn't work.Client computers are connected to 1812 and they can surf on internet just fine.
View 4 Replies View RelatedHow can I find the name of a remote unix server if the client can only provide me the ip address which they use to connect?
View 5 Replies View RelatedHow do I do a remote backup to an IP address? I am using NAT.I will be using port forwarding.I am using the windows "Add Network Location" wizard.I typed in my router's IP address, and it doesn't like it.I would like to run a backup by selecting the destination as this network location, if possible.
View 1 Replies View Relatedwhat would a small company need to implement a remote working system for its sales staff? staff would need to check the database for available prices and availability, make travel bookings and complete the sales orders online, working from home.
View 4 Replies View Relatedcan i have 2 pools each with diifferent subnet [code] i wanna put restricution on remote vpn users having address from pool-2,and just give them access to 172.16.10.0/24,is it possible on the asa 5510?
View 7 Replies View RelatedI've been using an ASA 5505 -- ASA 9.1(1) -- with an IPSec Remote Access VPN. Everything works properly, though I recently noticed that when my IPSec session is disconnected, I get the standard message ID 113019, but within that message the Peer IP address is incorrect. In fact, it isn't even close to my actual remote address. [code]
When I first researched the IP, I found it coming from China, which freaked me out. I changed settings, rolled back to 9.0(1), and nothing worked. Finally I rebooted, reconnected the VPN, and the IP changed. This time it was an address from RIPE NIC. I rebooted again, now an address from ARIN in the USA. One more reboot, now a random Comcast residential address.
Within that boot cycle, the peer address always stays the same. I've connected from different devices, different IPs, different ISPs - nothing matters. Additionally, there are no firewall logs for these IP addresses at all.
ASA Remote Access VPN peer addresses in disconnect message are incorrect and change at reboot.
I configured my cisco client with the info from the vpn wizard and get the following error :
error in the cisco vpn client when enabling the log : Invalid SPI size (log) + reason 412 the remote peer is no longer responding (application) message I see via the ASDM-IDM : Built inbound UDP connection for interface WAN
I'll explain briefly what I'm trying to do here :
* Remote vpn with windows users having cisco clients
* Group authentication and in the asa5510 LOCAL authentication
My WAN interface contains a public ip/29 I also defined a LAN interface with security level 100 in 10.0.60.0 255.255.252.0 range the vpn dhcp range I want to attribute to vpn users : 10.0.69.0/24
Basically I want users to initiate the vpn tunnel to the public IP and be able only to access the LAN range with the 10.0.60.0/22 range
ASA Version 8.2(5)
!
hostname xxxx
domain-name xxxx
[Code].....
So i'm trying to set up remote desktop connection for my desktop at (xp pro, sp2).
I've went through all the steps:
- allowed users to connect remotely (system properties)
- added to firewall exceptions
- opened up port 3389
I've disabled firewall and virus protection for now as well to test.
It works fine when I try connecting from my laptop at home by opening up the remote desktop program, and entering the local static ip address that i've configured on the desktop (i.e. 192.168.x.x);
however, when I try to connect outside of this network (on the road or office), I can't seem to connect (yes, I replaced the ip 192.168.x.x with the public ip of the desktop which I got from whatsmyip.org). I also can't ping the public ip of the desktop (can only ping the 192.168.x.x ip of the desktop)
Again, router port is open to port 3389, firewall is turned off on both the desktop and laptop, and virus protection is off.
My computer stopped being able to Remote Desktop to my server on my network. My backup software also doesn't recognize my server. But, I can access its folders using Windows Explorer. Any other PC on the network can remote desktop to the server and connect. What happened to my machine? This message appears when i try to connect: "Remote Desktop can't connect to the remote computer for one of the following reasons:
1) Remote access tot he server is not enabled
2) The remote computer is turned off
3)The remote computer is not available on the network
Make sure the remote computer is turned on and connected to the network, and that remote access is enabled."
My computer is:
AMD: Athlon 64 X2 5200+ 2991 MHz
Mobo: Gigabyte M57SLI-S4 v.2
RAM: 4GB Mushkin DDR2 PC2-6400
OS: Win 7 64bit
VC: Geforce GTX 470
It worked fine with my last router. It just doesn't seem to connect securely. It comes up under my iTunes, but once I go to enter the code, it doesn't show up as completed. Also, a utorrent monitoring app cannot connect to my computer, which is set up right at my computers end, but won't connect at all from my phone over wi-fi.
View 14 Replies View RelatedI have site to site vpn between cisco asa and cisco 2911 router.asa is static ip and cisco 2911 side is dynamic ip. my site to site vpn is working fine. I am just trying to make PAT over the vpn means i want forward one ip in my public pool to one of my local ip in the cisco 2911 side.
View 2 Replies View RelatedI have a RV120W; configured to perform port forwarding. I have Configured a Port Forwarding and Access Rule
* Sample Firewall: Access Rules:
Action | Service | Status | Connection Type | Source IP | Destination IP
[Code]....
Everything works, but in my destination server, i see as remote address the IP for the RV120W. I want it to forward also the originating IP address of the client (the remote address)
Is it possible to configure this?
I have also configured DMZ for my server, but see same behaviour
Firmware: 1.0.3.10
i am just installing my ASA 5510 and i want to configure it for remote access VPN IPSEC client.i use this doc : URl,When i start the connexion, the Client uses the first address of the pool and not the dedicated address ?,i have forget something ?
View 2 Replies View Relatedi am trying to configure static ip on remote client user side , i am using the following doc as an example but i am not getting the ip which i am mentiong in the user .[url]...
View 10 Replies View RelatedWe have a 5508 with 7.4.100.0 vor Internal APs and OEAPs. till now every thing is ok. Now we have to connect an AP (local) in a remote office, connected to the WLC by a VPN Tunnel. The problem is that the AP in the remote office uses the NAT Address to connect to the WLC, so the traffic goes over the Internet, not trough the VPN Tunnel. On the controller I have the following setting:
AP Discovery - NAT IP Only ................. Disabled
On the AP:
AP Link Latency.................................. Disabled
How to force the AP to use the internal IP Address of the WLC?
We have a 5510 ASA that was running 8.0 and were using it for clientless VPN access. Through this, we published bookmarks that linked to an internal Microsoft 2008R2 RemoteApps server, which users logged on to and then launched RemoteApps (basically being RDP sessions to apps on the server).All worked fine until we upgraded to 8.4 over the weekend and we now can't launch the RemoteApps. We can still login through the ASA, still click a bookmark to take us to the RemoteApps server's webpage, still then authenticate against the domain fine and still see the published apps. The problem now is when we launch the apps we get "this computer can't connect to the remote computer" messages and the app fails to launch. Nothing has changed on the RemoteApp server side, only the upgrade to 8.4.
View 2 Replies View RelatedRV220W is at firmware v1.0.2.4 From: Administration / Management Interface / Web Accesss I have configured remote Management: Remote Management [x] EnabledAccess Type: All IP addressesPort Number: 8888Remote SNTP [ ] not enabled
From within the LAN side I can connect to the router and administer via https://192.168.3.97:8888
Status / System Summary reports:WAN (Internet) Information (IP4)
Connection Type: Static
Connection State: Connected
IP Address: 207.180.139.242
NAT: Enabled
But from the WAN side (using the same Win7 computer) I cannot connect via: https://207.180.139.242:8888
This used to work. Also not working: PPTP logins. ISP is RCN via cable modem, fixed IPs.
Have tried power cycling router - no luck. Have tried from PC with AV off and Win7 firewall off
I have DHCP server running in windows 2003. Presently its unable to provide Ip address for VPN clients who connect remotely. What I should do / reconfigure in DHCP, so that the DHCP server provides address for VPN clients.
View 4 Replies View RelatedAttempts to run remote desktop client a laptop on a tower using a CAT 5 Crossover isn't working. After starting the remote desktop on the laptop, I'm asked to identify the other computer, which I do, and a remote desktop window with a black background pops up, as expected. But I expect an opportunity to login will be displayed after a second or so. That never happens. After about a minute this pops up:Remote Desktop Disconnected?Your Remote Desktop session has ended.The connection to the remote computer was lost, possibly due to network connectivity problems. Try connecting to the remote computer again. If the problem continues, contact your network administrator or technical support.
My clients are impressed with my ability to setup their networks, Linksys routers with WIFI. But toss something unfamiliar into the mix, like this situation, and I'm pretty lost, pretty quick.
Environment:
Hospital's WIFI.
Laptop running XP Home with WIFI and Ethernet.
Tower running Win 7 Ultra with Ethernet.
Cat 5 crossover cable.
Goal:Configure laptop to access Hospital's WIFI. This is successful, I'm using it to post this. Configure laptop run a remote desktop with the tower as the server. The tower, running Win 7, has no monitor. I don't have a flat screen monitor, and didn't feel like dragging an 80 pound 24 inch Nokia into the hospital.After reading some sites while trying to figure this out, I gave the laptop the same group name, workgroup, as the tower.In my experience, starting the tower has been, turn it on, and it boots to Win 7. But I can't watch that happen without a monitor. I can't configure the the tower's network connections without a monitor either.I purchased the CAT 5 crossover cable yesterday, for this occasion. The label on the plastic bag it was packaged in had the word "Crossover" on it. I connect the CAT 5 to the laptop's single ethernet connection, and to the tower's Intel pro card. At home the laptop is on WIFI, the tower connects to the router.
I'm trying to use RDC to connect to my home PC from work. I've tested everything on my laptop from another network and the connection works fine but the same settings don't seem to work when I'm at work.
I'm pretty sure I have everything set up correctly. Using the default port forwarded to the desired computer.
