We are using the cisco sa540 router and shrew VPN to connect to our buiness network, mostly to connect to the workstations with RDP. Now we wonder if it posible that the connection will disconnect automaticly after an idle time of for example 30 minutes. And if so, how can i configure it?
View 4 RepliesIs it possible to rename the default webauthentication URL from [URL] to something like [URL]. We are running on 7.0.98.0, is it possible to do http for web authentication and https for Mgmt access if we upgrade the controller software?
We configured our guest wireless with no layer 2 authetication so users can associate with an AP and get an ip adress but they can't go anywhere unless they have a valid username and password(web authentication) - does this affect the performance of an AP since there will be many people associated with each AP, is there any setting in the WLC to de associate a client from an AP if its idle for certain time.
I have set up 2 RV110w firewall/vpn/routers at remote locations and an ipsec tunnel between them. Once the tunnel gets established everything works fine until it has been idle for some arbitrary amount of time. (Maybe a half hour or less.) at which point we lose server access and can no longer ping across the tunnel. To fix this I have had to dissconnect and reopen the tunnel again, I even went so far as to install an autopinger on the remote end to keep traffic on the tunnel which seems to work but is not going to be a viable long term solution.
View 2 Replies View RelatedI am looking for the way to define an idle timeout for specific flows on an ASA5580 by using Cisco security manager. For ex I needed to define a specific idle timeout for connections beetween specific devices (Devices in vlan1, Device2 in vlan2).To test it I did following changes by CLI and it works fine. access-list L1 extended permit ip <@IP1> <mask1> host <@IP2> class-map CM1 match access-list L1 policy-map PM1 class CM1 set connection timeout idle 02:00:00
I try do do the same configuration with CSM in order to be able to manage each changes only by using CSM.So I defined Access control list, Traffic flow and then I define timeout in CSM --> PIX/ASA/FWSM Platform --> Service Policy Rules --> IPS, QoS and Connections Rules -> connections settings -> Traffic flow idle time-out. The problem is that each time I deploy the configuration with CSM I loose the timeout config line which is the most important for my application..
One of my 7921 phones disconnect ten time an hour and during conversations. Sometimes, people who call on this phone are redirected to the answer message.This phone is connected through WIFI network and Cisco Callmanager 4.2 manage all phones (we have about 80 phones on the network). I thought it was a problem with the phone but I exchange with another one and it's exactely the same problem. The problem is just for a line in particular. All the 7921g phones in my company are configured from mac address in the call manager. This problem occured after a storm but I'm not really sure that it's related to.
View 2 Replies View RelatedI have tried to establish a VPN-Connection from Ipad (via the Ipad built-in vpn-client) to a SA540.Unfortunately without any results. I get the message "Server is not responding". (A VPN Connection from a normal Software-Client running on W7 works fine).
View 0 Replies View RelatedLAN connection gets disabled by itself on idle. Sometimes BSODs.A few days ago I tried connecting a MBlaze modem to my laptop (Windows 7 Ultimate 32 bit) to access internet. But it resulted in instant BSOD everytime.I deleted the modem software after that & didn't try to connect it again.But now, whenever I connect using my LAN broadband, connection works fine as long as I am continuously browsing something. But as soon as I stop browsing and it goes in idle mode in about 10-15 minutes, the connection gets disconnected. In the adapter properties, it shows that the driver is working properly. If I try to disable or uninstall it it doesn't give a response. The only solution to this is a forced shutdown & restart, after which it works fine untill not idle. I am not able to download anything because of this.I tried many things like reinstalling the network adapter driver, unchecking the power management feature, resetting the connection, etc. but nothing is working.
View 5 Replies View RelatedI recently started having trouble with my VPN clients loosing connection.I can create the conenction, work with it for a while, and then loose connectivity.Timing seems to be dependent on the activity over the connection.More activity, the conenction stops working sooner.
The cleint doesn't disconnect, I just can't access anything from the client.Disconnecting and reconnecting the client fixes the problem, temporarily depending on how much data I'm transferring.This works 90% of the time.The other 10% if I wait 30-45 minutes, and try again.. It works...with the same results...
It was originally isolated to a Win 2003 server that I was using as the client.It is now happening on my Win XP client as well.I'm using the AnyConnect client ver. 2.5.2014 with the VPN service on the UC520.Which I beleive, is similar to the ASA 5500 series VPN device.I am running ver 8.1.0 on the UC 520, and I can't remember if this started after upgrading to the new software.
I have ASA 5510 with 8.2.4 and 8.0.x OS and all seem to have common problem of idle TCP connections not timing out. The host to host connections are coming over VPN tunnels. I have default timeouts on all the firewalls. I have tried changing global timeouts and as well as host specific timeouts using MPF but doesn't work at all ! The problem is when TCP connections are sitting idle in conn table for days and when connection limit of 50,000 conns reach the firewall starts behaving unpredictably dropping packets or unresponsive! I need the unused idle connections to timeout which is NOT happening either by changing global values or MPF.
View 1 Replies View RelatedNot sure where the best place to drop this question. It is a DIR-601 router. I have it configured in the virtual servers list as; internal system ip, public port/private port both 23, protocal tcp with inbound filter, allow all and schedule set to always. I have a second system with a different public port. I can connect to either one but after a short amount of idle time it appears to just drop the connection.
View 4 Replies View RelatedMy macbook keeps loosing it's wireless connection after being idle, when I start up I have to find my router and highlight it and connect and if it's idle it losers it's connection all the time.I tried resetting the router to default and started over I also tried every imaginable way of saving my password and connection but I can't find a way I've been into the routers security,trouble shooting,wireless, what's not holding it's connection to my MACBOOK? my iphone 5, ipad, and roku all hold
View 2 Replies View RelatedIs the WAG320N iPv6 compatable ? ,or could it be with a firmware update ?.Is the X2000 in the same boat in iPv6 terms as th WAG320N ?.Is there a way of retrieving "UPTIME" / "DSL connection time" information from the WAG320N and also line attenuation stats etc.Wouldn't need the above but poor isp needs keeping an eye on.
View 3 Replies View RelatedI've got an aol engineer visiting Thurs.to examine connection loss (since last Weds). But I'm convinced the problem is with the router. But from the tone of the aol tech questions I suspect he's already briefed his engineer to do his best to represent the problem as being either with my computer or positioning of router/filters/condition of wall-sockets - usual getouts.The talktalk router is neww, issued Feb 12, after my original router, speedtouch, started suffering idle timeouts every day.
View 3 Replies View RelatedIs there a software that can be used to disconnect internet connection on selected system on a lan
View 2 Replies View RelatedI have a new notebook Sony Z217GG, I connected WAP 4400N was very smooth, but after connected WAP 4410N, the internet connecting always connect and disconnect, I check the notebook wireless model is intel 6230.
View 1 Replies View RelatedRegion : Singapore
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : 3.13.23 Build 120810 Rel.44064n
ISP : starhub
1) Always auto disconnect (limited access),
2) My smart phone Motorola MB860 (android 4.0.4) Can connect but can access internet.
3)Always connect to 2.4GHz ,never see connect to 5GHz.
4)Wireless connection 15-20 Max Mbps Only ,LAN can up to 50 Mbps .
We have done the site to site VPN between Fortinet and Cisco SA540. Everything is configured at both ends but the tunnel is not establised.
View 4 Replies View RelatedI installed a new SA540 and configured some NAT rules for my Exchange server. Everything worked fine untill I did a firmware upgrade.Now the NAT rules won't work on my dedicated WAN.On the Optional WAN (load balancing) the NAT rules work fine.
View 1 Replies View RelatedWe have a Cisco SA540. It has been an extremely reliable UTM router. Other than SSL VPN not working for Mac OSX, we are very pleased with the unit.We have a 3 year contract for IPS, a 3 year contract for Trend Micro Protectlink Web, and a 3 year contract for Small Business Support Service for the unit.Right now we are trying to setup the VIP functionality but it is not going very well. To sum it up in a few words, we cannot get the SA540 to prompt the SSL VPN users to enter the 6-digit access code.
We setup an account at Verisign and requested a trial for VIP. They promptly setup the trial account. Getting everything setup was a breeze. The Verisign website is very well documented. They even had specific instructions for Cisco SA500 Series routers!!! We were very impressed with Verisign's implemenation. We are able to get our SA540 to talk to Verisign (basically, when we activate or deactivate an SSL VPN VIP user in the SA540 web GUI, you can immediately see it enabling or disabling the user on the Verisign website... it is very cool).Unfortunately no matter what we do, we cannot get the SA540 to prompt the SSL VPN user to enter the one time 6-digit code. In this case, we are using Verisign's iPhone app called 'VIP Access'.
I called into the SBSC and talked to a guy. I felt really bad for him. He used WebEx to log into my desktop and I showed, and explained, to him how all of it worked (setting up VIP in the SA540 web GUI, as well as, and the Verisign website). He had no clue about Verisign, VIP, or the two-factor authentacation concept at all. I told him that he needed to escalate my case to the SA500 Series team, but of course he had to try. He was supposed to call me back yesterday or today. I am sure he is dreading calling me back as he probably still has no clue.
How to use the VIP functionality? Or how it works and set it up? We would like to at least get it to work before our 30-day trial period is up. I have a distinct feeling that the functionality used to work, but Cisco hasn't kept up the firmware with all the latest back-end API calls to Verisign or something similar.
We require UPnP (mainly for an in-house built FTP Server app that uses UPnP to dynamically open/close ports for Passive FTP mode) and have found it's implementation in the SA540 is unreliable. Sometimes UPnP works after a reboot, sometimes it doesn't. When it does work after a reboot it will eventually stop working. Going into the web GUI and turning UPnP off and back on always fixes for a while.
Is this a known issue with the SA500 Series routers? We had an RV220W deployed first, but it's UPnP implementation was even more unreliable. That said, it seems that the latest Beta firmware version for the RV220W has fixed the issue. Could it be that the same fix needs to be applied to the SA540?I was planning on opening a cause with the CSBC at some point like I did with the RV220W, but I'd rather not spent the time doing so if the this is a known issue.
Installing a SSL certificate from DigiCert on a SA540 router? The SSL certificate is a wildcard variant (*.example.com).
View 1 Replies View RelatedI want to build a "hub and spoke" topology for one of my clients. For the "HUB" , I'm planning to use an SA540, with a static public IP provided by a 4Mb SDSL. For the "spokes" (21 at the moment), I'm planning to use RV120. They will be behind a NAT, provided by a "SAGEM LIVEBOX", and a static public IP. The boss will connect to the HUB using Cisco VPN client, or quickVPN, and get access to all the spokes. Some spokes will have to connect to each other, via the HUB. I searched a long time on this forum and reading documentation, but I didn't find at the moment the answer to my question : is this topology suitable with the choosen hardwares ?
View 7 Replies View RelatedWe have just purchased a license L-PL-GW-100MAX-3= Protect Link Gateway: Unlimited Web + 100 Max Email Seats,3YR. I found that it does not include IPS license. I cannot find anywhere where I can purchase an IPS license for SA540 gateway. It seems to be available only as a bundled product when purchasing the hardware.
View 1 Replies View RelatedLooking for routing with an SA540 router connecting to corporate VPN.We have an odd configuration that is beyond the scope of what I have configured previously with these devices..I am trying to configure the routing to the additional IP addresses listed for the HQ. The VPN tunnel between the .26.120.x and the .17.0.0 networks is built however it does not appear to be routing. The Cisco administrator at the HQ site says that they have "fully configured the routing" from all the listed IP addresses back through the VPN tunnel. The options I am unsure of for configuration of the SA540 router are: GW - I believe that I use the internal IP address of the 17.26.120.x router.Is this logical since the VPN tunnel. We are using NAT for the firewall internally.The existing 3 172.26.x.x VPN tunnels are live and working and fully routing between themselves.
View 2 Replies View RelatedI hope an easy question, in the WAN profile of our SA540 I have IP Aliases configured for a block of IP addresses we have. The active 2 IP addresses plugged into the actual RoadRunner modem respond fine to ping, the other three I have programmed to the WAN interface are not responding as I would think they should. Have I overlooked something? The "Block IP on WAN Interface" is disabled and pings back fine.
View 3 Replies View RelatedI went through the install procedure outlined in the ProtectLink Gateway install manual and i activated the ProtectLink Web product through Trend Micro (which shows up through their web site as a registered product to me). It still doesn't show up as installed on the SA540 (under Administration/License Management screen). When I try to activate the product again, it shows as "Already registered". Trend has no idea why it won't work. They said Cisco sold the license, so try their support.
View 1 Replies View RelatedI was very excited to read about the two factor authentication that Cisco and Verisign offer through the VIP and SA500 series routers. I purchased an SA540 a month and a half ago. I have been on the phone with support of both Cisco and Verisign ever since. It appears no one actually knows how to make the product work. Finally I was told that they have only tested it on an SA520. So I bought an SA520; however, it doesn't work either. How to use the Verisign VIP two factor authentication with either an SA520 or SA540? If so, what is the trick? If not, how is Cisco advertising this product if it doesn't actually work?
View 3 Replies View RelatedI'm trying to figure out why recipients of emails from my company show that the mail is coming from our dedicated wan ip instead of the ip alias setup thru the dedicated wan.The external ip address for the sa540, wan1 (no optional interface), is 82.134.79.122.The ip alias is 62.97.213.156 mail. unitec hsubsea. com resolves to 62.97.213.156 for external dns yet it is reporting as the 82.134.79.122 for some recipients.The mail server was never setup with the 82.134.79.122 ip so i don't think this is a dns cache issue.What issue in the SA540 would cause the system to show as mail coming from 82.134.79.122 instead of the ip alias 62.97.213.156?
View 0 Replies View RelatedSetup: SA540 (fw 2.1.71) with pretty basic configuration, no VLANs or QoS. Wireless APs and 3 large Netgear gigabit switches plugged straight into the SA540 LAN ports. Wireless APs are: 1 Aiport Express, 1 Linksys WRT54GL, and 1 Asus RT-N56U.
Problem: network speeds (transferring files) to the servers from wired and wireless workstations is very slow, around 200kBps.
Resoultion: plug the wireless APs into the Netgear switches instead.
Notes: any connection through each of the wireless APs was very slow, but not a signal problem. Even when plugging straight into one of the wireless AP's inbuilt switches, the speed is slow. Only when unplugging these APs from the SA540, and plugging the APs into any of the Netgear switches, does the transfer speed go back to normal even when the traffic still goes through the SA540 to reach the destination.
I don't understand why creating this extra hop between switches would be useful, and why plugging the APs directly into the SA540 is an issue.
We have LMS 4.1 installed. After about 10 min of being idle, the browser becomes frozen, eventually crashing it. We applied this fix for lagging hoping it would fix the issue, however it has not. We have been tracking a problem internally where the Getting Started page hangs on login. The problem is with changes to Cisco.com access. We are actively working to get those fixed, but if this is what you're seeing the workaround is as follows:
a. Open the properties file name “gs.properties” under the path NMSROOT/MDC/tomcat/webapps/cwlms/WEB-INF/classes/com/cisco/nm/gs/ui
b. Update the field IS_DEFAULT_PAGE as “false”
c. Clear the browser cache and login-in(Daemon restart not required)
Is it possible to re-route our Site 2 Site VPN over our Static Route (T1) if the WAN fails?
View 1 Replies View RelatedI'm having trouble with my internet the past few days, I'm connected to the internet via wifi and after browsing some minutes it will tell me unable to connect (using firefox and other explorers). In order to continue browsing I must refresh the page several times and it will load without pictures.I'm using win7 home premium and it's the only computer that presents this issue. I've tried pluging the computer directly to the router, but it gives me the same results. Also, I've scanned the computer for malware with MCafee, but it shows nothing.
View 3 Replies View RelatedWhen my download starts or reaches half way the internet connection stops. How to keep the net connection connected all the time? and specially during downloads?
View 1 Replies View Related