I've got an 1811 router running 15.4 IOS and a cable modem with 5 static IP's attached to Fa0. I would like to dedicate one of those IP's to a dedicated internal subnet (10.0.30.0/24) but I am not sure how to accomplish this?
What would be the best method to accomplish this? Unsure of where to begin..
I have an 1811 as a border router. Initially we had one block from our ISP. We just got a second block of IP's and I'm not sure how to make this work.
Block #1 - Working
209.91.**.129-142 /28
Block #2 - Not Working
209.91.**.146-158 /28
The problem I'm having is block #1's gateway is 209.91.**.129 and block #2's is 209.91.**.145
How do I make it so I can use both blocks in my NAT entries?
I have an ASA 5510 running v8.4(3)9 and have setup a remote user VPN using the Cisco VPN client v5.0.07.0410 which is working appart from the fact that I cannot access resources on a secondary subnet.The setup is as follows:
-ASA inside interface on 192.168.10.240
-VPN clients on 192.168.254.x
I can access reources on the 192.168.10 subnet but not any other subnets internally, I need to specifically allow access to the 192.168.20 subnet,[code]
As this is an ASA 5505, unlimited users, I must use arp alias to allow a secondary network.
Inside network: 10.200.31.0/24.Additional inside network: 10.200.12.0/24
Clients in both networks can reach internet, but they can't communicate with eachother. Hosts on the additional network can ping the ASA inside network IP, but nothing else. I get incomming hitcount for inside interface when 10.200.12.x tries to ping 10.200.31.x. In the error log, I see: [code]
Main Site allows communication from Remote Site via VPN to Windows ServerMain Site also has a secondary subnet that communicates ONLY through internet but NOT to the Windows Server.Sonicwall 192.168.168.x is main siteRemote Site is 192.168.0.x connecting to Main Site to access shared folders on serverSecondary subnet at Main Site is 192.168.0.x using Windows XP PC's. They are accessing a linux server at 192.168.0.215 which Main Site has no access to.VPN remote ip's are 192.168.0.x - they can successfully access the Windows Server at 192.168.168.100 BUT NOT 192.168.0.215.GOAL: Want to connect Remote Site to Secondary subnetWilling to make router changes or whatever is necessary to get Remote Site to access Secondary Subnet with the only exception that the Secondary Subnet REMAINS.VPN DHCP is turned off but willing to turn it on.Willing to make the Linux Server 'discoverable' on the Windows Server. Don't know linux at all but another co-worker set it up and can make changes.
View 4 Replies View RelatedI switched from Time Capsule with AirPort to E2000 and have a problem with configuration.I use the same IPs as in AirPort and E2000 gives me an error:"The WAN IP address cannot be the same subnet as the Guest Network IP address" and I can't save configuration.But in my opinion they are different.I use "Static IP" option and I have IPs from my ISP: [code] So WAN IP is different subnet as LAN and I don't know what to do now. It worked with these settings in AirPort and here I can't proceed.
View 2 Replies View Relatedtrying to fetch the equivalent of the mac-address-table on a 1811 with SNMP. I want a mapping between active MACs to a port ifIndex (not a VLAN interface ifIndex).
- I've snmpwalked every MIBs on this device (including all the proprietary MIBs supported by the IOS)
- I've upgraded to latest IOS from the 12.4(24)T series and also tried latest from 12.4(15)T series
- I am aware of the community index (@ sign in read-only community to split per vlan)
- I've exhausted all my google skills
On 29xx, 35xx, we obtain that information using the BRIDGE-MIB, community indexing and the following OID:
1.3.6.1.2.1.17.4.3.1.2 (dot1dTpFdbPort)
ex:
# snmpwalk -v 2c -c public@1 192.168.1.61 1.3.6.1.2.1.17.4.3.1.2
SNMPv2-SMI::mib-2.17.4.3.1.2.0.23.89.208.164.62 = INTEGER: 24
SNMPv2-SMI::mib-2.17.4.3.1.2.0.23.101.255.67.177 = INTEGER: 12
SNMPv2-SMI::mib-2.17.4.3.1.2.0.24.25.113.78.52 = INTEGER: 11
On a cisco 2821 running 15.1(3)T1 From this cisco DOC, common use of secondary IP addresses on an interface are
•There might not be enough host addresses for a particular network segment. For example, suppose your subnetting allows up to 254 hosts per logical subnet, but on one physical subnet you must have 300 host addresses. Using secondary IP addresses on the routers or access servers allows you to have two logical subnets using one physical subnet.
•Many older networks were built using Level 2 bridges, and were not subnetted. The judicious use of secondary addresses can aid in the transition to a subnetted, router-based network. Routers on an older, bridged segment can easily be made aware that many subnets are on that segment.
•Two subnets of a single network might otherwise be separated by another network. You can create a single network from subnets that are physically separated by another network by using a secondary address. In these instances, the first network is extended, or layered on top of the second network. Note that a subnet cannot appear on more than one active interface of the router at a time.
On the WAN interface I've added two Secondary Public IP's (from the same subnet) to use for NAT to internal hosts. Is this a common scenario or is there a more typical way to acheive this. This assumes, I do not want to put a Public IP on an interface on the internal server.
interface GigabitEthernet0/1
description WAN$ETH-WAN$
ip address x.x.x.1 255.255.255.240
ip address x.x.x.2 255.255.255.240 secondary
ip address x.x.x.3 255.255.255.240 secondary
[code]....
Just want to know if there is a way to configure secondary IP address on the outside/public interface of ASA/PIX.One of our clients have used most of their IP on the subnet given by their ISP. They use those IP's for staticallymapping to Servers inside their local LAN. Thus, they requested another block/subnet from their ISP. They will also use this for static mapping/port forwarding to other servers in their network. The current UTM they are using is allowing this but they would like to use ASA/PIX as their main Firewall. Is this even possible or is there a workaround for this kind of scenario?
View 5 Replies View RelatedIs it possible to setup a Backup GRE Tunnel using a Seconadary IP Address on the WAN interface. The router is a Cisco 871.
View 33 Replies View RelatedI have a few old 2600 routers (2621, different IOS's) which I'm now replacing for new one's from the 2900 series (2901, Version 15.1(4)M4).In my configuration I have two IP addresses in my LAN interface and I have HSRP configured within the secondary IP subnet range. It would be something like this:
interface GigabitEthernet0/1
ip address 172.x.x.x x.x.x.x secondary
ip address 10.z.z.z z.z.z.z
[Code].....
Now, in the new 2900 routers, my interface configuration hasn't changed however I can see that the hello packets are now sent with the source within the respective HSRP IP subnet so I had to edit my acl for that:
permit udp 172.x.x.x x.x.x.x host 224.0.0.2 eq 1985
Is there a way I can force the HSRP to work as it previously did in the old IOS's?
I just purchased an ASA 5555 and started to configure. I was successful in natting all the IPs that are on the same subnet as the ASA eth0. I could not get the nat working for the 2nd address block.
Ex:
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address 192.168.1.33 255.255.255.224
[Code]....
I have recently configured secondary ip address on LAN Interface of Cisco C6509.. We have some application which needs to use broadcast traffic communication to communicate with client... Broadcast is working within subnet & also working from broadcast server to primary subnet. But not working from secondary subnet.. I have checked broadcast within secondary IP range & it's working fine... Secondary not working broadcast with primary and also with broadcast server... broadcast address is different for these subnet but both should be communicate since configured on same interface... When I went through Cisco website found that command "ip directed broadcast" which will pass broadcast to different subnet... But I'm not sure whether any other impact if I enable that command on particular Ethernet interface...
View 6 Replies View RelatedI have just updated a VLAN interface on my router. I have two 6500's with GLBP configured. The particular interface had a primary and secondary IP address. I shutdown the interface on one router and deleted the secondary address then assigned the orignal secondary address to be the be the only address associated with the interface and enabled the interface and it came right back up...all looks good. I proceeded to do the same thing to the other router and once again all looked good. Now, I am able to PING the devices in the subnet from router, but am unable to ping them from any place else. [code]
View 2 Replies View Relatedi want to give my switch a ip address with same subnet as a pc which is for eg having ip address of class a and subnet of 255.255.240.0
View 4 Replies View RelatedHow do you forward a domain to a sub-net address? I know how to forward to my network address, but I have not been able to find any documentation on the internet on how to forward to a LAN address.
View 2 Replies View RelatedI have this details 196.14 230.72/ 30. What is the IP, Subnet and gateway from this details
View 1 Replies View RelatedI am on a University campus and they have provided the following to connect to the internet along with DNS server addresses:
IP Address: 192.168.25.24
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.254.1
When I connect my computer, it gives an error that the IP address and subnet mismatch, but it still connects to the internet just fine. However, if I try to put these settings into the DIR-655 along with my computer's MAC address, it gives me the error "WAN gateway IP address 192.168.25.24 must be within the WAN subnet" and requires I change it.
how to subnet a class B IP address?I have a homework, I don't know how to subnet a class B.
View 2 Replies View Relatedsubnet mask address is illegal cisco linksys?
View 1 Replies View RelatedGiven an IP address range, select the correct subnet mask for the scenario. IP address: 132.250.0.0/16, You need to create 100 networks with a minimum of 500 hosts per network. What is the correct Subnet mask and the 10th subnet address range?
View 1 Replies View Relatedwhat my IP address, my subnet mask, and what my default gateway is. I have tried typing "ipconfig" into CMD but then I only got up 100 boxes saying "Permissionisconnected"
View 12 Replies View RelatedHave a problem with a laptop connecting to a Wireless Router. The laptop was working fine on the last router which was on an ADSL Network.. (not that that matters),When the new router (Virgin Media / Cable) was installed all other laptops where connecting to it without any probs, but not this one.The laptop in question still receives an IP address, Subnet mask and Gateway from the router - Vista says Local only, no internet access. It cannot ping anything else on the network either. When I do ping it comes back destination host unreachable.
View 6 Replies View Relatedpartition the departmental IP network address block to create a staff and a student subnet. Each of these will be identified by its own network address and netmask. It is university policy that you must be economical with the IP addresses. That is, the subnets must be as small as possible, but they must be large enough to accommodate the maximum number of hosts you were given. Also, it is university policy that the respective gateway router to the outside world should always be given the highest possible host IP address in the subnet. The student subnet should have a higher IP network address than the staff subnet. The network must be able to support up to 60 machines on the staff subnet (not counting the router) and up to 120 machines on the student subnet (also not counting the router).
IP address/netmask
University network address127.158.128.0
University network mask255.255.192.0
University internet gateway IP address127.158.191.254
Department network mask255.255.254.0
Department router address127.158.129.254
Suppose that the network address of the departmental network is 127.158.128.0 (calculated by AND between Dep network mask and Dep router address)I know that 60 machines would use 6 bits for the staff subnet.the netmask of staff would be 255.255.255.192.how can I figure out the the IP network address of the staff subnet.I have worked out the range for the staff subnetwork.
127.158.128.0 - 127.158.128.63
127.158.128.1 = Gateway address
127.158.128.63 = Broadcast address
Now how can I calculate the IP network address of the staff subnet?
What I am trying to do is I have one switch with say a 10.1.9.1 sub-net I need to have one of the ports to be trucked with two vlans one for DSL and the other for a local connection with the sub-net of 10.1.5.1 both of the sub-nets are configured in the core as 9 and 5 so I have port 0 set up as a trunk and it is set up as ge-0/0/0.0 vlan_5, vlan_192 on the 10.1.9.1 subnet switch. The DSL is working but the local is not pulling a 10.1.5.1 IP and has no connectivity. Everything looks as if it is configured correctly but still the DSl is working but not the Local connection.
View 2 Replies View RelatedBasically, he has an office he's supporting on a contract basis, they have a cable modem uplink. They move very large (100MB or so) EXCEL files to/from a server "somewhere out there"...The place has 19 users on cable modem (presumably commercial level). They're having "severe latency due to all the users". They're also using VOIP (not sure what product, shouldn't really matter)this doesn't pass the sniff test to me- I have 70+ users on 4 T1s and don't have the problems they claim to be having. Suspect they should be doing some packet sniffing to see who's camping on Youtube, but this is not an option....They're adding in a second cable modem line and want to bind both together. I immediately figured they should do QOS, dedicate the mission-critical traffic to 1 line and let it bleed over onto the other and take precedence if necessary. They have a Cisco 1811 router. I haven't messed with those before, but what I am seeing is they are a "fixed-configuration router". Obviously there has to be SOME config changeable- if for nothing other than IP assignment to interface and such. So what does Cisco mean by "fixed-config"? Is this basically a dumbed-down Linksys router?
View 19 Replies View RelatedI need some help in configuration of Cisco IOS VPN. Basically, we have 2 Cisco 1811 routers in our company. Router 1 - Production router (IP 192.168.x.254)Router 2 - VPN router (IP 192.168.x.251). All machines/servers inside our network has been configured with a default gateway of 192.168.x.254. Hence, all internet traffic will go through the production router.
Now, we want to deploy a new router (i.e. Router 2) which will be solely used for VPN purpose (such as DMVPN, IPsec site to site, VPN client configuration etc). I have configured Router 2 with Cisco VPN client and can connect to this using VPN client application from my home PC. However, once I connect to it, I am not able to ping anything inside this network other than Router 2 IP (192.168.x.251).
Is there anything else that I would need to put into the configuration so that I can ping everything inside the network?
i have cisco router 1811 , i make port forwarding for my mail server , so from outside i can access to the mail server via my mobile but inside lan i cannot because i use my global ip address at my mobile config .
View 12 Replies View RelatedI have some problems with making stable VPN between SRP512W and ISR1811.Configuration:
- IKE policy - 3DES/SHA1 group2(1024bits)
- crypto map on ISR1811
One of the main issues I've noted appears when SRP loose it's IP connectivity to remote router, even if this connectivity interruption lasts for only couple of seconds. When the IP connectivity is restored SRP is unable to re-establish the IPSec session. There is connect/disconnect option in SRP menu (Status -> VPN Status -> Connect/Disconnect) and automatic VPN disable (VPN -> Site-to-Site VPN -> IKE policy -> Enable Dead Peer Detection) yet I couldn't found any option for nor automatic mechanism for VPN reconnection when the IP connectivity is reestablished. This issue lead to interruption of Site-to-Site VPN service when there is some short outages within the ISP network.
Another issue is building GRE tunnels between the same devices. Can you verify my configuration? Belive it or not - I spent more than 4-5 hours and couldn't do it.Should I make some additional settings/configurations ?
i have two branch offices A & B both connected by a vpn. i am planning to add another isp on both the locations and have it just for the vpn. i.e have the second isp do just vpn and all other traffic go through the older ISP.. what are my options ? am not planning to add any extra hardware and also am not planning on acheiving any fail-over or load-balancing because i know ASA 5510 does not do load-balancing.
View 1 Replies View RelatedI got a new 1811 series router. Its sh version output is " flash:c181x-advipservicesk9-mz.124-11.XW6.bin". I need to upgrade to the latest IOS. How can i find a latest one? How can i upgrade to the latest one?
View 1 Replies View RelatedI am a new owner of a Cisco 1811, brand new. So im trying to follow this,
[URL]...
But when i get to this,
it won't continue, if i cancel this and not setup the WAN connection then log back into after it's rebooted i can see both lan's * both disabled * when i enable 0 it wont allow me to click add or do anything else to setup the WAN connection
I am setting up my 2nd 1811 router for NAT and VPN. The 1st 1811 works great, completed a few months ago. On this 2nd 1811, I decided to just copy the working startup-config from the good, 1st router to this 2nd, and then change IPs and from there. I did not do the setup wizard, but just erased the startup-config, reloaded, gave temp IP on local LAN and copied good startup-config from TFTP server.
Question: on this 2nd 1811, I show this:
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip subnet-zero
I do not have this on the 1st, and I cannot get rid of it. Is this due to IOS versions?
On the 1st I have:
Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version 12.4(6)T8, RELEASE SOFTWARE (fc3)
flash:c181x-advipservicesk9-mz.124-6.T8.bin
On the 2nd I have:
Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version 12.4(4)T1, RELEASE SOFTWARE (fc4)
flash:c181x-advipservicesk9-mz.124-4.T1.bin
