Is it possible to configure Easy VPN on brach side which has 877 series router and ADSL connection for internet such a way that for internet traffic it will use the local ADSL line and for the server in HQ it uses the tunnel.or for internet also it will go thrugth tunnel and uses internet link at the HQ?
View 3 RepliesI have HQ side with ASA 5520 (8.4) & Branch Side with ASA 5505 Design
VPN LAN<------->ASA5520(8.4)----->Thomson Business TG628s----->Internet<--->ADSL Modem------>ASA5505(8.2)
Now on both modems UDP 500 & TCP/UDP 4500 ports are enabled I can ping from internal LAN of HQ to internal LAN of branch but I cant ping from internal LAN of branch to internal LAN of HQ
HQ ASA 5520 Side
ASA Version 8.4(3)
host name aljoaib-fw01
[ code]....
Branch side ASA 5505
ASA Version 8.2(5)
host name GTC- DMM- FIREWALL
domain-name ALJOAIB.COM
enable password 7pgp93AEPfHtDc5N encrypted
[Code]....
Both sides have static ip address.
I'm looking to use 861s at few remote sites connecting to a 881 in the main office using Easy VPN. If I was to get 2 ISPs at the main office, can I configure it in a way that if the primary WAN failsover to the secondary, the VPN tunnels from remote sites will also failover?
Would you recommend an ASA 5505 at main office over the 811?
My E1500 enters a state where the LAN-side (broadcast, etc.) works, but the WAN-side (internet connection) just goes away. If I go unplug and replug the E1500 the internet connectivity comes back.When this happens, the wireless indicator on my desktop (Dell with Intel wifi) says I have an internet connection, but I clearly don't.
View 2 Replies View RelatedI'm am wanting to know how to configure Easy VPN server with downloadable ACLs on a cisco router 2811.
Indeed, I would like to set up a remote access vpn that uses radius for authentication of VPN clients. The radius server is connected to an Active Directory server that contains the log in / password. I would like to on the basis of the user who connects to the VPN, the ACL that define the services or servers to which this user can access is automatically applied on the router and define the rights of the users.
i configured cisco asa 5520 as cisco ezvpn server and cisco 891 as ezvpn client .the configurtion is working fine.i am using client mode on the ezvpn client side.but my quesion is , is it possible to communicate to ezvpn client side internal ip from the ezvpn server side?and one more thing what is the benefit of network extension mode on the client side and how it will work what are possible changes need to do in the server and the client side.
View 4 Replies View RelatedCurrently 2811 series router is configured for site to site VPN, CAN I configure USER VPN on the same box. We want Users to connect to VPN Server using Cisco VPN Client. best authentication method for USER VPN
View 1 Replies View RelatedI'm trying to setup an ASA and a UC540 side by side, to utilize the ASA for data networking and the UC540 for voice. This 'should' work fine, I just seem to be having an issue where the ASA seems to be blocking traffic from the voice network as it passes through.So here is the LAN setup:ASA: 1.1.1.1UC540: 1.1.1.2The UC has a voice vlan 10.1.1.1/24 and a service module at 10.1.10.1/30My PC uses the ASA as its default gateway, 1.1.1.1The ASA then has static routes to the UC networksRoute 10.1.1.1/24 1.1.1.2Route 10.1.10.1/30 1.1.1.2Ping from PC to the UC networks works fine. However, ping from the UC networks to PC fails. ASA logs show traffic being denied due to not having an established connection or something.My guess is that the traffic is being blocked because the egress and ingress paths are different? Traffic from the PC goes to the ASA, then gets routed to the UC and it works. However in the other direction, traffic from the UC is going directly to the PC and bypassing the ASA, because its a directly connected network and doesn't have to route through the ASA to get to the PC. The reply traffic from the PC DOES go through the ASA following its route table, thus the issue of the ASA not seeing the established connection?Same-security inter and intra interface is enabled.So I think I see the issue, I just don't know how to fix it. Is there something I can configure on the ASA to allow for this? My only other option would be to configure a /30 on a new vlan to handle the routing between the UC and ASA or something, but that seems like its going to make this simple setup way too complicated with extra networks, vlans, trunks, etc.I am running ASA version 8.4.5?
View 1 Replies View RelatedHow to configure HSRP in techroutes 2600 series router and aaa authentication
View 2 Replies View RelatedI have a Cisco 881 router running 15.1(4)M4. I am trying to configure SPAN on it to mirror my outside interface (source) to one of my LAN interfaces (dest).
!--- WAN interface
interface FastEthernet4
description Comcast WAN$ETH-WAN$
[Code]......
As you can see from the above output there is a problem with the command on this interface. When I try to set Fa0 as my source it works fine:
rtr(config)#mon session 1 source int fastEthernet 0
rtr(config)#
Is this because fa4 is layer 3 and fa0 is a switchport? If so, is there another way to set fa4 as the source?
Is there a way to configure a 28xx series router with a HWIC-AP card as a wireless client instead of a wireless access point? There isn't a network drop in the location that I need to place a router, but there is an active Access Point that reaches the area.
View 1 Replies View RelatedI have 3 Cisco Routers as following :G.SHDSL Router : Cisco 3845 withISDN and Branch Router : Cisco 2811.How My Network works :Branch Router has two type of connection ( First one : G.SHDSL link work as Main link and the other one ISDN Link work as Backup link )when main link goes down the ISDN link goes up ...( Note : i applied IP SLA with tracking ) ...
My Problem :i want to delete default route from ( G.SHDSL Router )0.0.0.0 0.0.0.0 dialer 3..My network works properly with these configuration but when i delete the default route 0.0.0.0 0.0.0.0 dailer3 , my network goes down ( Failover technique not works)
I have got two 1841 and one 881 cisco router. I can keep any one of this router at HO and remaining at branch office. I have got a static internet IP at HO but dynamic IP at branch office. I want to setup a VPN to connect to HO from branch office through router. The branch connects through a private IP for internet purpose. Which VPN is the most secure and best for this purpose.
View 1 Replies View RelatedHow config dynamic alp inspection for 300 or 500 series ? I find in admin guide it's no simple to do.
View 8 Replies View Relatedhow to configure Qos on Cisco ME 3600X Series switches. As I tried Mls Qos and it wont have these commands.
View 1 Replies View RelatedI have very little practical knowledge of routers, switches and AP's. I recently got a very old Cisco Aironet 1100 series AP which was working fine in one network. I reset it and tried configuring it in new network (uses DHCP to assign public IP) for school use. But not able to access internet.
View 3 Replies View RelatedJust moved out for the first time, I have a modem but it came with a very short cable. That doesn't work. So I wanna know a couple things:
- What's the best to by, and what's safer: cable or wireless router?
- Is it easy to set up a wireless router with my original modem? I have a MacBook Pro early 2012 version.
- What type of router would you recommend for me? I live in a one room apartment, I'm the only one who will be using it, use internet for work, social networks, email, school, youtube...not big stuff.
why I can't use cisco ehwic-3g-hspa-u card in cisco 2800 series and 1841 series router?documentation said that it should work with that devices but when I installed it, it doesn't work even as device i can't see I am using cisco latest ios advance ent. 15.1(4)M4?
View 3 Replies View RelatedI'm looking for Routing Design scenarios to complete our configuration needs for remote branches. We will have two 1921 routers in each location, one with a T1 from our MPLS carrier, the other with a DSL connection from an ISP. The T1 router will have an assigned AS and use BGP to router back to head quarters. The DSL router will have an IPSec tunnel back to an ASA 5510 at head quarters. I envisions a GRE tunnel from the DSL router back to head end routers connecting to MPLS at head quarters. Not sure yet how to manipuate the routing between head quarters and the branches such that the T1 router is the primary route to and from the branches and the DSL router is for failover/backup.
View 1 Replies View RelatedI have not done much with business routers, but we have a 1700 series with a WAN WIC-1ENET card with a RJ45 connection. We had a T1 line and will be moving to ehternet. We are going to be moving to a 20MB line, and i just wanted to make sure I have the right connections before installing. We also have a T1 line in another loaton and would be moving to this same 2811 router there as well.We would also like to copy over the configuration from 1700 series router to the 2811 router. Would it be easier to do it by hyper-terminal? Also if we keep the 1700 routers are they capable of using layer-3?
View 2 Replies View RelatedWe are using cisco ME 3400 E series switch. Which port we can use as CFM port ? We configured CFM in gig port.Is all the ports will act as CFM port or any separate CLI command is there for enable ?
View 0 Replies View RelatedI have 3750 series with GIBICs ports I want to create 10 vlans with its sub-net and enable all vlans to access internet.
View 4 Replies View RelatedTrying to setup a wrt54g wireless router using the secure easy setup but am receiving the error message :"Secure Easy Setup requires that the Wi-Fi system application be installed a current version.
View 4 Replies View RelatedWe have used two Cisco RVS4000 to create the IPSec VPN between the main office and the branch office. The main office has SBS 2008. There is a Windows Server 2008 as the domain controller in the branch office. One branch office user has a laptop which is not in the domain, but his exchange account is set up in the Outlook. When he connects the laptop to the branch office network, he cannot connect to the exchange server and get the emails. Is there any configuration to set up in the router, server or Outlook?
View 1 Replies View RelatedRunning Win7. When trying to connect Lenovo laptop to E2000 with Easy Setup Key, the progress bar hangs at 25%. However, the E2000 will connect to the laptop with an Ethernet cable. Same problem on both of my Lenovo G555 laptops.
View 4 Replies View RelatedAfter clearing my hard drive, I needed to reinstall EasyLink Advisor for my WRT54G wireless router. The first part of the reinstallation is successful, I get to the screen that says Welcome to EasyLink Advisor. I press the Setup button, then the computer searches for several minutes. After the system comes right back to the same starting screen, not completing the setup nor giving an error message from it.
View 2 Replies View RelatedA client of ours has an 881-K9 router that they have configured a VPN on, this was setup and configured prior to my joining the company. This client now needs to add more usernames to the VPN on the router side, and I've both searched here, and googled for how to add users to the VPN on the router, the only thing that comes up is adding clients (from the client end PC), and nothing to show how to create the users on the CLI from ssh on the router itself.
View 1 Replies View RelatedShe has comcast xfinity with a the SMCD3GNV router which if you ever look it up has the worst wireless signal imaginable and I can second that. I was hoping to not have to touch the SMCD3GNV router and just add on to it by attaching a secondary router as a wap.What I plan to do (which I am sure has been exasterbated in forums but just want clarity) was to disable DHCP on the new n router ( cheaper than official wap) and set ip out of SMCD3GNV router DHCP ip range but in same subnet mask so probably 192.168.1.2. Then connect the SMCD3GNV router to the new router via ethernet and dont use wan port. Is this basically all I have to do? Do I need to change the channels on either devices since their next to eachother? or will them being next to eachother and same channel cause interference? I have read I can call comcast and turn the smcd3gnv into a bridge ( plain modem) but I would rather avoid calling them and see if 2 wireless access points next to eachother is okay.Also, I plan on doing this by going to microcenter.com and getting a router for 24.99 or less with a coupon I have. Is there any on their website that you would recommend for this setup? Also if you could check the wap on their website and see if you think its worth it to get one of those instead if under that price as well. I want to utilize wireless n signal . Also, the xfinity service she has is rated for 50mbps download and cannot remember the upload , I have tested this wired and it does actually achieve this or greater.
View 5 Replies View RelatedI want to configure IEEE 802.1x port-based authentication on cisco switches, preferable 2960 series. Which models support this feature?. I have try with some older switches but it doesn't works properly on everyone. I have upgraded them whitout better results, there is namely an issue with TLS handshaking on some switches which produces authentication to fail.
View 1 Replies View RelatedI would like to set the router's dns entries but I don't see how to do that. Basic setup page has DNS setep for the DHCP scope but I don't want to push dns to my pc's. What I am looking to do is to use an alternate dns to what my service provder pushes and still have the abliity to route on my internal network.
View 1 Replies View RelatedSince this router already set up for IPv6 and Dual-Stack traffic, would it be possible to give it the ability to get its IPv6 prefix from the WAN side of the router.
Example:
I have Comcast, and as long as my modem and router support IPv6, with the router also supporting DHCPv6-PD to get the /64 prefix from comcast.
I now have an RV180W so this is not an issue for me, but my father is inheriting the WRVS4400N from me and he is also on Comcast.
Basically I have a win2000 server running as a VM in my computer with a secondary LAN address(Different subnet) which acts as a gateway for the other devices on my network (e.g. my wifi-router has DHCP relay set to my VM's address). The VM uses another network(internal NAT) for accessing the Internet though my computer. So far, I've managed to set up the DHCP and routing. Other devices on my network have access to the internet. But, since my computer has only one NIC, and even though the VM uses a secondary IP address, it's still on the same network as my internet connection. There are computers that belong to other people, who I do not want to give access through my router(even though their computers are picked up by my DHCP). I was given only one IP address for usage on my computer. This is why I wanted to add some kind of an authentication procedure(like some sort of PPPoE login maybe?)so as to prevent unauthorized usage my my connection. The question is, 'What are my options for the authentication procedure, and where do I start?' If my explanation was unclear.
View 6 Replies View RelatedI have a central office and two branch offices, these offices are connected by a private routing service that has no connection to the Internet, the telecommunications operator in each office installs a router with a LAN and a WAN IP and configuration of these devices cannot be changed except the LAN IP. Only the central office network that is 192.168.0.0 have a router that has internet access. Remote offices have no access to the internet, what is needed is that remote offices can access the internet using ADSL router 192.168.0.254 at the central office. There are a small devices in each remote office that must connect to the internet and do not support any configuration except IP, mask and gateway, for example you cannot add a static route. Currently the pc's at remote offices has IP communication with the server from the central office using a static route. put some VPN routers between each LAN and the operator's routers (where RT yellow star appears in the diagram) and put the hosts of the two branch offices same IP range that the central office network? I had thought to use RSV400 routers?
View 6 Replies View Related