Cisco WAN :: 2811 - Configuration Of Multiple NAT / PAT
Oct 13, 2011
I have faced configuration of multiple nat/pat problem.Point is when I paste into router another nat pool or nat with route-map or just static nat they doesn't work I mean only one of them works.So, I have several connection hardware cisco 2811 latest ios 15.1
1. internet
2. Local host that must be translated into global local ip addresses be routed
3. vpn local hosts that must be translated into local global addres
View 4 Replies
ADVERTISEMENT
Oct 21, 2012
how i can configure a second ssid for guest access in our environment. this is our network setup prior to this request: Internet----Firewall (not ASA)---ce520---C1131AG and CME router is also connecting to the ce520 switch. we only have two vlans: one for voice and two for data.
Presently, there is no vlan configured on the AP because it on broadcasting ont ssid and wireless users gets IP from a windows DHCP server on the LAN. the configuration on the ce520 switch port for the AP and other switches say access vlan is the DATA vlan which automatically becomes the native vlan for all trunk port connecting the AP and other Stiches to the network.
Now with this new requirement, i have made my research and i have configured the AP to broadcast both the production and the guest Vlans. The two vlans are 20-DATA and 60-Guest. I made the DATA vlan on the AP the native vlan since the poe switch is using the DATA vlan as native on the trunk ports. I configured the firewall to serve as DHCP server for the guest ssid and i have added the ip helper-address on the guest vlan interface on all switches while the windows server remains the dhcp server for the production DATA Vlan. I have confirmed that the AP, switches can ping the default gateway of the guest dhcp server which is another interface on the firewall. I can now see and connect to all broadcasted ssids but the problem is I am not getting IP addresses from both the production dhcp server and guest dhcp server when i connected to the ssid one at a time. My AP config is attached below.
Do i need to redesign the whole network to have a native vlan other nthan the data vlan? Does the access point need to be aware of the voice vlan? Do the native Vlan on the AP need to be in Bridge-group 1 or can i leave it in bridge-group 20?
View 1 Replies
View Related
Jan 11, 2012
I'm running a IPSec VPN between a 5520 ASA and a 2811 router. The ASA has a static IP and the router has a DHCP interface.The VPN seems to work fine once I get done clearing old SAs, but each new IPSEC SA creates a new ISAKMP SA on the router? There are multiple subnets that need to create multiple IPSEC SAs. Eventually I can clear the older ISAKMP SAs and get all the traffic on one ISAKMP SA, but until I clear older SAs, new associations won't form. Why the router (initiator) would keep creating new ISAKMP SAs and not use an established one? Using PSK, aggressive mode and no PFS. ASA has another dynamic crypto map with lower priority than this one. Using FQDN for identity on the router. ASA version 8.2(5) and IOS is 12.4(20)T1.
Must be something I'm not understanding. The ASA says no established SA and drops the new SA attempt until I clear older ISAKMP SAs out of the router. Interesting, the first few IPSec SAs form when the tunnel initially comes up. I assume the initial requests are getting cached and work immediately after the first ISAKMP SA forms, but subsequent IPSec SA attempts will fail. Once all subnets are talking with 1 ISAKMP SA, rekeys don't cause any problems. Since the router subnets have to instantiate the new IPSec SAs, this is a real pain to go through anytime the WAN/VPN fails.
View 1 Replies
View Related
Nov 8, 2011
I want to configure BGP but i am finding it very difficult to know BGP as I am new to this concept.
What is theoretical and practical approach to configure bgp??
I have to configure my office router 2811 for two ISPs which will be acting as fail-over.
I have to start it from scratch.
View 5 Replies
View Related
May 2, 2013
I have a 2811 router that I need to confirm NAT configurations as expected. I have 2 deviced on the internal LAN that need to access remote resources without PAT. All the other devices are for a guest network with PAT. My interface Fa0/0 is connected to local network (1.1.1.1/23). Fa0/1 is connected to ISP (10.10.10.178/30). Addressable range from ISP of 10.10.10.192/28 (10.10.10.193-10.10.10.206). Internal machine 1.1.1.2 & 1.1.1.3 must connect to a remote server through internet on spacific port numbers.
View 2 Replies
View Related
Nov 20, 2011
I have several Cisco 2811 ISR Routers that are functioning as CallManager MGCP voice gateways. These routers have prtial PRI's attached to them which I realize are not supported by Cisco CallManager using MGCP. The problem is that whenever the router gets rebooted, the configuration under Controller T1 ends up with the improper PRI Timeslots command and I have to go in and manually change it. Solution: I have developed smal text files for each router that contains all of the commends needed to get the chnage accomplished (you have to shut down things and remove lines elsewhere to be able to change the PRI Timeslots) and I just telnet to the router and cut and paste the commands into the router.However, I would like to store those files on the router in such a way that I could telenet to the router and then either somehow display the file and then copy/paste it in or possible have a file that could be run to make the changes. That way I could do the job quickly fram anyplace I could telnet to the router and not have to have the text files on the local machine.
View 1 Replies
View Related
Nov 1, 2011
does cisco 2811 support?if no, can i make it work for BGP?also, i want to know the configuration of bGP for twoo ISPs for link failover.it will be google if u tell me step by step approach for configuring it
View 1 Replies
View Related
Nov 30, 2011
i trying to set up a terminal server, 2811 with an HWIC-16A und two octo cables. [code] connect and sometimes not. It seems the connection is established but i don't get a prompt von the target device.The target devices are cisco 2811 and cisco catalysts 3560.
View 1 Replies
View Related
Jun 6, 2011
have remote routers boot and load a config from the flash card. It seems this is possible if the Flash Class is A, according to the Cisco web site using the
boot config flash:<Config file>
where <Config file> is the file on the flash.
Although this can be applied on 2811 routers, they fail to load the file on the flash card. I've since found that this router type has a Class C flash. So the question is, can either:
Is there a similar process for other classes of Flash cards, specifically Class C?
or
The router flash be set as a Class A to support this functionality,
The preferred resolution for this would be the first as there are many remote routers installed a diverse and difficult locations to visit, should a format/rebuild of the flash fail for some reason.
don't ask to list the output of a show boot or show bootvar, neither of these commands work. The Startup/Running config lists the boot config line.
View 5 Replies
View Related
May 22, 2013
I have a Cisco 2811 Router. I have two VLANS on the router. The first one of course is VLAN 1 and the second one is one that I created from reading everything from this forum.. it is called VLAN 531
On VLAN one I have an IP address of 10.8.1.1 and on VLAN 531 I have an IP Address of 172.16.1.1, now what I can do is this... I can.. from a workstation on the 10.8.0.0 segment, ping 172.16.1.1 and one server on that segment that has an IP address of 172.16.1.50, which is fine, but what I really want to be able to do is ping our email server which is on a 10.21.0.0 segment and I cannot. Any commands on what I would need to do to make this work as I would like the 172.16.0.0 segment to ping any other part of my LAN of my choosing.
View 12 Replies
View Related
Dec 9, 2011
Will 2811 Router with 4 switch port module, How to do dual ISP configuration on this router.
View 10 Replies
View Related
Dec 11, 2012
We have CISCO2811 model with VWIC2-2MFT-T1/E1 module working good over the E1 line. Since it's getting hard to find new model of CISCO2811 we decided to connect new branches with CISCO2911/K9 model (according to migration doc)
My question is can we use 2811's old config file with the 2911 model directly?
View 1 Replies
View Related
May 12, 2013
I have a laptop with a single physical NIC which I have used the advanced management tools to create two virtual NICs (say vlan 10 and vlan 20) and both are on the same subnet (say 192.168.4.x). One NIC is for normal TCP/IP traffic and one is for broadcast/multicast traffic (I have some custom software that requires this to be the case and works fine on an older laptops with built-in physical NIC and PCMCIA XIRCOM NIC). The dual NIC laptop communicates with a dual NIC server via a Cisco 2811 router (which has a 16 port switch module at the back) and has vlans set up so.
What I want is for the single NIC laptop (with two virtual NICs) to be able to also communicate with the server. Basically, one NIC is for normal traffic and one is for multicast/broadcast traffic. All three machines need to be able to talk to each other using the NIC for normal traffic and both laptops must be able to receive broadcasts from the server. What is the best way to configure the router to handle the trunking/tagging? Most configuration documentation I read has two complete subnets for the two virtual NICs. Note that all three machines use static IPs and are part of a workgroup so no DNS and domain servers etc.
View 9 Replies
View Related
Jan 22, 2012
I am having trouble setting up a EHWIC-VA-DSL-A= card on my cisco 2811 running the following the following:c2800nm-adventerprosek9-mz.151-4.M2.bin and C2800NM_RM2.srec.124-13r.T11
My hardware supplier tells me its the right adsl card (have 1 existing working card not the same) but the card will not detect on the system to be configured.is this the right card? am I missing something?
View 2 Replies
View Related
Jan 10, 2012
I am using multiple cisco 2811, 3745 routers and 2950,3550 switches if I need to copy running configuration I have to go to each device and say copy run tftp: <address> Is here any way that automatically by schedule one a week or a month configuration copy from all devices to tftp server?
View 2 Replies
View Related
Apr 3, 2013
I have an SRP541W with two ADSL modems attached to it. Both are running bridged mode with PPPoE connections to two different ISPs, (TPG and Telstra Business Direct). The TPG connection is far cheaper, and has a much higher download limit. Sadly, if I leave the router in "load Balance" mode for the WAN, it "prefers" the Tesltra connection because it's faster. I want downloads for movies/music, Youtube, Internet Radio, etc, to go through the TPG connection. Is it possible to do this in the router, or would I need to set up a proxy server, (or some other external device/application)?
View 5 Replies
View Related
Aug 19, 2012
I have to configure multiple vlans served with a unique DCHP server . As first step, I just will The DHCP server to serve 2 vlans. The following is the hardware and configuration that I implemented :
[code]...
But If I connect the DHCP server on a trunked switch port and adapt the DHCP server gateway 172.16.0.1 to 172.16.0.254, hosts receive ip address properly.I have to connect the DHCP server directly to the router. How can I do that, what is wrong in the configuration?
View 14 Replies
View Related
Jan 4, 2013
I have setup 15 x RV180W's so far for a particular client.They have requested that we add a Corporate Wireless VLAN for their laptop users (not guests) and add a Special Use WiFi VLAN for a particular mobile platform that is being deployed (in this case we need 2 separate WiFi VLANs to ensure compliance).Also, none of the VLANs can talk to eachother and they have their own subnets.I have the Wireless and VLANs setup, no problem... but I am having an issue wiht the VPN settings.I have the wired network's subnet working fine. But I do not know how to add the subnets for both Wireless VLANs to the traffic selection.The IP schemes will not allow me to just select a large subnet... here are some examples:
Wired VLAN: 10.10.x.y
Corporate WiFi VLAN: 10.15.x.y
Special WiFi VLAN: 10.18.x.y
x is the octet that defines the physical unit location (unit 1 = .23, unit 2 = .24, etc...) y is the octet the host.Since they are not in a contiguous block, I cannot just use a larger subnet mask.I can add multiple traffic selection rules to the ASA5515 at HQ, so that side of the tunnel is perfect... I just don't know how to add the three VLANs to the RV180. Is it as simple as using commas or semicolons?
View 1 Replies
View Related
Oct 4, 2012
I want to configure multiple DHCP configuration on ASA 5505. I tried to create sub interface for different IP Pool but it was not configure on ASA 5505. is it possible to create subinterface on ASA 5505?
ASA 5505 IOS version: 8.3(1)
License: Security Plus
View 4 Replies
View Related
Mar 20, 2012
I've got a question concerning the configuration of multiple AP manager interfaces on -for example- a cisco WLC 2504. I've read the configuration guide but I'm not sure whether this is the way the protocol works. Say I want to distribute AP's (and traffic) across various AP Manager interfaces on the WLC. I would configure the following:
Create one management interface (which will automatically also be an AP-Manager interface)Configure 1 (or more) Seperate ap-manager interfaces, assign them to a port number, and select "Enable dynamic AP Management". VLAN ID's will be the same.Create a WLAN and configure it's interface to "management" Is it correct if I state that the LWAPP protocol takes care of the discovery from the Access Point and sends information about the available AP-manager interfaces back to the AP and the AP knows which ap-manager interfaces are available, connecting to the least loaded one?
View 3 Replies
View Related
May 1, 2013
is there a way on a WLC5508 to push the same configuration on multiple APs in 1 shot?I need to change the High Availability settings on most of the APs (not all). And the only solution i find is to do 1 by 1...
View 6 Replies
View Related
Mar 11, 2013
Using Cisco 2960 series switches (Have 8 . 2 stacks of 4) to replace 6 old switches. 4 old switches had IP ranges of 192.168.6.*** and all new switches have 10.1.*.* addresses. Core switch has 10.1. as well as 192.168 ip addresses but i need to configure one vlan (5?) to route to 192.168 address. PC's on 10. address taking a long time to access 192 range.
View 2 Replies
View Related
Dec 5, 2011
I know this is not a the preferred way to do it, but this just an interim network configuration until the Remote Site gets re-located and reconfigured. I'm trying to bridge and route traffic and hoping the community can offer a review of the sample configuration and/or some ideas to make this a reality.
Existing network is bridged across site-to-site private line (p-2-p) so 192.168.100.0/24 devices exist at both locations. In order to reduce bandwidth consumption across the p-2-p, the 172.20.100.0/24 devices (end user PCs and new to the environemnt) will be routed out a local Internet connection which in turn reduces the p-2-p traffic to just private network traffic for the two networks. That same network requires routing through the 192.168.100.0/24 network in order to access the private WAN connected to the 3900 router with IP 192.168.100.1.
View 0 Replies
View Related
Sep 18, 2012
My question is if I can configure 3 ssid, for 3 different VLAN and add the DHCP address from a WAP4410N AP, when you upgrade to the latest version of IOS I can have this functionality?
View 2 Replies
View Related
Mar 9, 2010
Is it possible to have multiple dhcp pools for multiple VLANs? The switch is a 6509 and/or 4506 catalyst. I don't want to use server-based products.
View 5 Replies
View Related
May 13, 2013
I am trying to build a new network from scratch, I have the WLC 5508 w/ Aironet 3600e APs connected to my Netgear Smart Switches and a Linksys RV082 router that I'm using as my DHCP server with several VLANs for several stuff on my Switches.
I have 2 questions:
1. Can I have 5 Interfaces configured on 5 different VLANs, each SSID on each a different Port:
Port 1: Controller management only=> 192.168.x.x /24
Port 2: SSID 1: WiFi Internal=> 172.16.x.x/12 (Radius Auth with no sharing)
Port 3: SSID 2: WiFi Internal w/ sharing=> 192.168.x.x/24 (Radius Auth with sharing)
Port 4 :SSID 3: WiFi Guest=> 10.0.x.x/8 (Web Auth)
Port 5: SSID 4: WiFi IT=> 192.168.x.x/24 ( Radius or certificate Auth with access to the controller management interface)
2. How can I use the Controller as the DHCP server for all the WiFi traffic, and how should that be configured to work with my other DHCP server?
View 3 Replies
View Related
May 28, 2013
i`m facing a problem configuring the mentioned access point to act as stand alone access point with multiple SSID assigned to differnet VLANs the problem is that
1) i`m not able to broadcast the both SSIDs in the same time from the Access point
2) i need to make the radius server to manage the SSID access for the wireless clients (trying to find a way in which the aceess point sends a log for the radius server containing the VLAN id /IP address of the the SSID) you may find the below info about the IOS ver. & the configuration?
i`m running IOS /c1100-k9w7-mx.123-8.JEE/c1100-k9w7-mx.123-8.JEE?
View 2 Replies
View Related
Aug 26, 2012
Is it possible to assign a single ssid to multiple interface groups by assigning the ssid to multiple AP groups?
I have buildings geographically dispersed that are configured with multiple vlans in interface groups so that I can maintain an addressing scheme of dhcp assigned addresses per building. Each building is also further grouped as AP groups. I'd like to know if by assigning the same wlan ssid to each of the AP groups, will I maintain addressing integrity for each building? I'm thinking it will work.
Do the buildings have to be outside AP range of each other to avoid problems?
5508 controller
7.2.110.0 code
6 buildings
6 interface groups
1 ssid
View 4 Replies
View Related
Jul 17, 2012
I am position to migrate from CatOS 6509 switch to native IOS 6509 switch. long time ago, there was some site to convert automatically based on copy and paste onto the tool, but i can not find.
Does anybody know how to convert CatOS configuration to Native IOS configuration ? It is not IOS change, but it is configuration convert.
View 1 Replies
View Related
Dec 14, 2012
I have webcams that need port 8081 opened and I did that, everything worked fine until my DIR655 jammed up and power cycling it and the modem 3-4 times DID not make it work: no internet access and it was definitely a DIR655 problem. So, out with the paperclip to do the big reset, causing me to lose my configuration. When "most" of it came back up with my new config (I had screen prints), all was okay EXCEPT the webcams. Addresses and ports were all configured properly, address was fixed too on the client computer rather than use DHCP. I had a DNS relocation service running (DYNDNS) for the WAN side, but that address (My IP) didn't change either. I tried EVERYTHING. Finally, I realized in all my screwing around that I had enabled UPnP in my application, something I hadn't done before, but did this time as a desperation move. UPnP had always been checked off in the router. So.....I REMOVED my port forwarding and virtual server settings (either one worked before), and voila, everything working, Is this a normal occurrence, that if you have UPnP running, that this auto configuration overrides any manual configuration?
View 2 Replies
View Related
Sep 19, 2012
My setup is ISP-2811-PIX 515E-LAN. Right now, I am doing a PAT for IPSEC tunnels to terminate on the PIX. Do you recommend I use the 2811 instead of PIX for VPN or keep things the way it is? Trying to determine the best box to use.
View 4 Replies
View Related
May 27, 2013
I need to know which IOS should I download for my 2811 router to get all ip sla features
Router(config)# ip sla ?
<1-2147483> Entry Number
auto
enable
Note this is from my 2951 router.
I need full features like this in my 2811 router.so which IOS should I download.
View 3 Replies
View Related
Feb 29, 2012
I want to upgrade LMS 3.2 to 4.1. But when I look to "Special Notes and Exceptions for Devices Supported" document ,It seems that 2811 have 2 SysID.
Why there are two IDs for the same hardware and under which ID will my 2811 routers be classified into inventory database. This information is important since customer want to have support of 2811 in CiscoView of LMS 4.1 (around 200 devices).
View 3 Replies
View Related
