Cisco WAN :: 2811 Router To Configure Port Security
Mar 29, 2011How do you configure port-security on a 2811 router? If not, is there a way to configure some type of security on each port ?
View 3 RepliesHow do you configure port-security on a 2811 router? If not, is there a way to configure some type of security on each port ?
View 3 Replieswe are using 2960 cisco switch asn we are trying to configure port security.we are able to configure MAC base port security, but unbale to configure IP base port security.can any one guide us can do IP base port security like MAC port security. if not which switch will support IP and Mac base port security.
View 6 Replies View RelatedI have cisco 2811 router and two ISP copper line. How can configure it as BGP router.
View 11 Replies View RelatedCurrently 2811 series router is configured for site to site VPN, CAN I configure USER VPN on the same box. We want Users to connect to VPN Server using Cisco VPN Client. best authentication method for USER VPN
View 1 Replies View RelatedI have an ASA 5510 that I want to connect to 2 isp (one of my private network uses the isp1, and all others the isp2). Excluding the 5510 does not accept PBR(policy based routing), i saw that you could put a router, like cisco 2811 in front of the ISP. my questions are : can i put a switch 3750 in place of the 2811 router? , I have vpn connections in isp1, this architecture is compatible?
View 2 Replies View Relatedconfiguring policy based route for my cisco router?Basically, I have a 2811 cisco router with 2 ADSL ports. 1 port is for iiNet line and another port is for Telstra line.I want to configure a policy based route on the router so that:Any traffic coming from 1 internal IP (i.e. 172.16.x.1) will go through iinet line (i.e. Dialer 0) interface.Any traffic from rest of the office will go through the Telstra line (i.e. Dialer 1) interface. Is there any easy way to configure this policy based route?
View 8 Replies View RelatedI have to configure router 2811 for Data and Voice network.However I have only one Fast Ethernet interface. [code]
what else do I need to configure on switchport on which Avaya phones are connected.And is there any extra command, i need to configure on the router and 2950 switch.
I am trying to configure a newly installed HWIC-4ESW on a 2811 router to bridge to the FE 0/0 interface. Currently, I have a cheap switch connected to FE 0/0 which in turn connects to all the phones, however now I just want to connect all the phones to the HWIC and have it internally bridge to FE0/0 for the connectivity to CME, etc.
View 5 Replies View RelatedMy company ordered NAC and ACS 1120 My question is Can i configure 802.1X security through ACS server and NAC in layer 2 Inband Virtual Gateway.for campus switches.Is it the good design to have double security for switch ports. 1st is 802.1X and 2nd is NAC in layer 2 INBAND VG?
View 1 Replies View RelatedI'm trying to setup a SSL VPN on a 2811. I believe I have the SSL VPN portion understood, but I can't tell because I keep getting stuck on the Certificate Server, ca trustpoint and identity trustpoint configuration.
guide that walks you through the CA cert, Cert Server, ca trustpoint and identitiy trustpoint to ios SSL VPN?
I have an Internet link, connected to my Cisco Router. The package I subscribed for comes with a dynamic IP Address. I was told, if I need to remote access into the Cisco Router, I need to enable the DDNS feature. Can this be done on a Cisco Router?
View 1 Replies View RelatedI have a client machine that requiers a DSL connection
my office already has a leased line to the building so don't want to pay for a DSL and BT phone line.
Can i configure my 2811 to act as a DSL server so that I can plug the clients ADSL modem into my router and let it think that it has a valid DSL connection.
Then the 2811 can provide internet over my leased line.
I have a 2811 ISR configured to provide the following services to my network:
Internet access to LAN users Cisco Call Manager ExpressSite-to-stie VPN to 3rd party networksVPN server to provide VPN access to remote usersSecurity Zone configurationsStatic NAT configurations Now I recently just got the ASA5510 device and I am not sure how to go about with the setup, whether to put the ASA in between the internet and the ISR (Internet - ASA - ISR - LAN), or put the ISR in between the internet and the ASA (Internet - ISR - ASA - LAN)? While i know I can move most of the config unto the ASA, i know that the CME cannot be moved, hence I would like to do the setup such that users on the network still have access to CME.
configured 2 EzVPN groups using a 2811 router, i am trying to do this but is not working i have another VPN working thru EzVPN but if i try to configure another group for another EzVPN client is not working and the problem is that the debug crypto isakmp say that Apr 3 08:45:25.802: ISAKMP:(1309): phase 2 SA policy not acceptable!
How is that possible? in my understand the EzVPN server will inject the the IKE (phase 1) and IPSec (Phase 2) parameters for the client and that's they dont need to negotiate nothing, is important to say that the EzVPN client is an ASA5505 with onlu DES encryption enabled, 3DES and AES are not available due to licensing reasons.
I have a 2811 router and how to configure a RADIUS server using the CLI.
View 3 Replies View RelatedFacing a unique problem in my cisco Router (2811) .. Router is well configured but suddenly it stops working , when logged in using console the configuration register is observed to be 0x2142.
How does it automatically changes register value during operation?
I'm am wanting to know how to configure Easy VPN server with downloadable ACLs on a cisco router 2811.
Indeed, I would like to set up a remote access vpn that uses radius for authentication of VPN clients. The radius server is connected to an Active Directory server that contains the log in / password. I would like to on the basis of the user who connects to the VPN, the ACL that define the services or servers to which this user can access is automatically applied on the router and define the rights of the users.
I am new to firewalls and I am trying to make mine block specific websites but so far have had no success. Here are the settings I am using in the router's admin area:
Security > Firewall > General
Active firewall
Security > Firewall > Rules
[Code].....
I have a Cisco 6500 router at my POP site and I have a Cisco 2811 at the tail site. I have to bond 3 city to city T1s to make a 4.5Mg pipe between the 2 ends. How do I configure the routers to make this happen? This is a configuration example for a single T1:
POP end on 6500:
interface Serial1/0/1:0
ip address 10.125.1.1 255.255.255.248
Tail site on 2811:
interface Serial0/2/0
ip address 10.125.1.6 255.255.255.248
I've been collecting information on principles of SHDSL connection. I have found plenty of examples on how to configure only one SHDSL link. Very soon I'm going to the site to install two independent SHDSL links in Cisco 2811 which has one Cisco HWIC-2SHDSL module, so I can route one type of traffic through one connection and another type of traffic through another. Both SHDLS links have static IP addresses and probably different VPI/VCI values. how to install two SHDSL links into one HWIC-2SHDSL module, set one value for VPI/VCI on one link and another value for VPI/VCI on another link, also set one IP address on one link and another IP adddress on another link?
View 13 Replies View RelatedHow do I disable the USB port in the 881 router?
881router#show usb port
Port Number: 0
Status: Disabled
Connection State: Disconnected
Speed: Full
Power State: ON
I have a Cisco 2811 with an additional HWIC-4ESW card. [code] I need to NAT anything heading out of the WAN port. [code] I can ping anything connected to my other private networks from my 10.0.24.0 network but nothing on the Internet. [code]
View 3 Replies View RelatedWhen I try to configure a voice port (like voice-port 0/0/0:15) after doing a conf t, it gives me an error of invalid input detected.We are using a Cisco 3945. We have successfully setup 3825 and 2851 in the past.
View 2 Replies View Relatedhow can I configure QoS in the router CISCO1841 for the port IPSEC(UDP 500 ,UDP 4500) and the port tcp 4433
View 5 Replies View RelatedI'm trying to enable port security on several 4507R's. When I try to configure a range of ports the switch will randomly put 1 or 2 in err-disable. It's different every time I apply the config to the same group of ports. However if I do them one at a time it seems to work. But I really don't want to configure 6 fully populated switches one port at a time. We also have a lot of 3750's and they gave me no problem using a port range. [code]
View 4 Replies View RelatedI have a Cisco 857 router which i used for Internet connection with RJ11 connectior (ADSL0 POTS) but now the ISP has changed the internet link with PPOE type and the ONT connection is RJ45 , Is there a possibility to configure one os the Fast Ethernet ports as WAN port for internet.
View 2 Replies View RelatedI need to configure the port forwarding on Cisco 887 to forward port 22 on Public IP to a LAN IP port 2200. I don't know anything on Cisco router at all, beside telnet to the cisco and quit.
View 1 Replies View RelatedThe router 861 Fast ethernet have support for wan protocol L2TP ?
Can I configure the router to use L2TP wan protocol to communicate the wan FE port to my ISP ?
If yes wath is the way ( CLI or Cisco E[press Professional Configurator ?)
I have D-Link's DSL-2730U modem/router. I've enabled the router's firewall and disabled TR-069 (putting in some dummy ACS URL and login credentials as well). However port scans show 30005 as open. I believe this is used by the TR-069 client. How do I definitively filter this port?
View 9 Replies View RelatedI Have a Cisco 1941 router which had its GE0/1 port burnt out and we have since plugged in a module with 4 fast ethernet ports. I need to reconfigure the router such that at least one of the Fast ethernet ports can server the purpose of the GE0/1. GE0/0 connects to our Service provider and GE0/1 connected to the inside network.Currently, while connected to one of the ethernet ports, i can telnet into the router on the address 192.168.29.1. when i'm on the router, i can ping our remote site, network address 192.168.24.0 with no problem, but when i use the command "Ping 192.168.24.0 source 192.168.29.1" there is no response.
View 1 Replies View RelatedWe have several routers that can only be accessed on telnet port 6066 (vice 23). I have no global exec privilege so I can not provide config.So my question is: how do you configure the router to accept port 6066 for telnet and deny port 23?
View 4 Replies View RelatedWhat is network port ? I want to configure a trunk port as network port, so that the trunk port becomes the network port for all the VLAN associated to the port.
View 18 Replies View RelatedI have a 1941 that I am going to deploy with a HWIC-D-9ESW switch module (I only need 3 switch ports but need the PoE). I am going to hang a 1262 autonomous AP off one of the ports but I need to configure MAC address port-security so that only that AP can pass traffic. I know the switch modules are 'almost' exactly like a switch for commands but I can't seem to enable or configure any port-security settings. Is port-security no available on the switch modules?
View 3 Replies View Related