I have the following setup where the Cisco ME 3400 provided by the ISP.
My Cisco 2911 is configured as below:
CORE_Router#sh run
Building configuration...
Current configuration : 6075 bytes
[Code].....
I cannot ping and end node on my system from my Cisco 2911. I've tried to configure my computer to ping the device and I am able to. It seems the difference between using my computer and the 2911 is that with my computer I am able to set the default gateway as the end node's ip.
View 1 Replies View RelatedI have two Cisco routers - 2911 in HQ and RV180 in branch office. Because in HQ LAN network I have some development servers, to which guys from branch office need to have acces, I decided to setup VPN site-to-site between HQ and branch office. Everything went quite smoothly, on both devices I see, that ipsec connection is established. Unfortunately I am not able to ping resources from one network to other one and vice versa. Below is the configuration of 2911 router (I skipped som unimportant (imho) configuration directives) :
crypto isakmp policy 1
encr 3des
hash md5
[Code].....
After I changed customer router to CISCO 2911 from H3C firewall, the WAN interface can not ping its gateway after about 10 minites, I do not know why. it works well before I change the device. [code]
View 10 Replies View RelatedFrom My Router that connects to Cable modem i am unable to ping website 4.2.2.2I am able to ping all other websites fines.Same website i can ping from my pc and all other switches fine.Router has only 1 ACL thats for NAT.
View 25 Replies View RelatedI have a a firewall policy on a Cisco 2911 - the zone policy from OutZone>InZone basically drops everything apart from inspected traffic on the opposite direction and a few essential traffic generated externally (such as Outlook web access and E-mail exchanging). However, I seem to be getting a lot of firewall drops coming from the immediate gateway of the ADSL WAN address to the internal IP range on port 3. I get about 10 hits every 5 seconds.
Policy:
policy-map type inspect FWPol_Out-In
class type inspect CCP_PPTP
pass
class type inspect FCMAP_In-Email
pass
class type inspect FCMAP_In-OutlookWebAccess
inspect(code)
%FW-6-LOG_SUMMARY: 1 packet were dropped from IMMEDIATE WAN GATEWAY:0 => INTERNAL IP ADDRESS:3 (target:class)-(FWPair_Out-In:class-default), the immediate gateway would ping an internal IP address? Keepalive? Could this be stemming from another problem? The traffic wasn't generated internally as all InZone>OutZone is inspected.
I have some issues with router configuration. I cannot open any external web pages, but ping or telnet is just fine. Im using router-on-a-stick scenario. Router connected to LAN trough EtherSwitch module. Config attached.
View 8 Replies View Relatedlast week I installed a new router (2911) in my network.We had to create two different VLANs for the new setup to work as wanted.I have a Windows 2008 R2 which is a Domain Controller for Active Directory on the ip address 192.168.0.195.That server (HP DL180 G6) has two NICs. One has the above IP address and the other one has 192.168.0.199.
On the other VLAN, I have a server, running the same OS, that I want to re-join, as it formerly was, the AD on the first server (192.168.0.195). This server has the new IP address 192.168.10.194.All these are connected to a Cisco switch SG 200-50 Gigabit Smart Switch. That one is connected to a Cisco 2911 router.
The problem is that, once the old 192.168.0.194 got to be 192.168.10.194, the 192.168.0.195 can't ping it anymore... At least not all the time... Sometime it works, sometimes not... Neither can't the 10.194 ping the 0.195 all the time. When one way works the other one doesn't... When one pings the other one successfully, the other one can't...
we have the following setup for our network :
UserNetwork - ASA5550 - WAN Router 2911 - ISP Netowrk - Branch Routers 877s / 1941s
Since last week we started noticing this problem that the branch users started to complain of slow application response.. After verifying it with the ISP and middle network we noticed that if i ping from my machine (ie usernetwork) to the WAN Router interface (facing the ASA) , i get time outs.. which is strange cause this is directly connected to it via ethernet cable.
We have a router 2911 recently purchased which supports vpn but we are not able to do vpn tunneling, So what is required to use VPN connection.
Does ios has to upgrade or some kind of license is required.If license is required then what kind of license.Router version is 15.0(1r) M15 which I found in sh version command.
I have a Cisco 2911 router that I will like to use it for setting up a site to site VPN but the router does not support VPN commands. When I issue crypto isakmp command, it says command no recognized. When I issue ipsec transform-set command, it says command not recognized. The IOS running on my router is c2900-universalk9-mz.SPA.151-2.T1.bin. Also see the output of my show licences features command: [code]
what can be done on this router to enable use it for setting up a VPN connection.
I recently purchased a Cisco 2911 to replace my Cisco 1711 router. I copied the configuration from the Cisco 1711 router to the Cisco 2911 router. Everything seemed to work correctly except when I VPN tunnel into the Cisco 2911 router using Cisco's VPN client version 5.0. I can ping the router LAN interface from my PC that is VPNed into the router but I can no longer ping or access the devices on the LAN side of the router as I did on the Cisco 1711 router. I don’t see errors in the log or hits blocking anything in the acls. It’s using the same configuration that I had on the Cisco 1711 router, and this did work on the Cisco 1711. The Cisco 2911 router is running IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, RELEASE SOFTWARE (fc1).
Here is the VPN clinet portion of the configuration: The LAN is addressed as 192.168.0.0/24. The router LAN interface is 192.168.0.1, which I can ping and access. I can't ping or access anything on the LAN (192.168.0.0/24) beside the router.
aaa authentication login vpnclientauth local
aaa authorization network vpngroupauth local
!
crypto isakmp client configuration group remote-clients
key 6 xxxx
pool clients
[Code]....
*I have 2 cisco routers 2811 router A&B*using 0/0 for WAN and 0/1 for LAN on both routers*both routers are connected together with crossover cable to 0/0. recieve link and activity*both routers are on the same subnet Router A:0/0 192.168.1.1/24 - router A:0/1 192.168.2.1/24 ; Router B:0/0 *192.16.1.2/24 router B:0/1 192.168.3.1/24*I can ping the inside and outside address of both router from PCs connected at its respectable end. *PC A 192.168.2.2/24 PC B 192.168.3.2/24 *when connected to router A 0/1 and I try to ping router B 0/0 it times out in DOS* but I AM (CAN) able to ping from PC A to router B 0/0 in hyperterminal, telnet and Cisco SDM. I just CANNOT ping in DOS?
View 10 Replies View RelatedI have created a site to site Ipsec vpn with a cisco 2610 and a linksys RV042. Running a show "crypto isakmp sa" command I get a qm_idle status and when running a "show crypto ipsec sa" I see that packets are being decrypted and encrypted. Also when running the "show ip access-lists" command I do have matches to that connection.The problem is that I am unable to ping hosts from one network to another. For example, from the Cisco router in network 192.168.0.0 I am unable to ping the remote network 192.168.2.0 and vice versa.
I am not sure what is happening. Do I need to create a route to that remote network? I guess it could also be a problem with NAT or an ACL.Here is what running-config shows:
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
lifetime 28800
I am connecting a 2600 router to an ISP. Interface 0/0 is connected to the ISP using DHCP. Interface 0/1 is connected to the inside providing DHCP services to the inside. At least it should only be providing DHCP services to the inside. I also have a public static IP that is NAT to a private static IP. Everything is working except the computer on the static IP. From the router I am able to ping inside and out from each interface. I am able to ping both interfaces of the router from the computer on the static IP but I cannot ping outside the router. If I do a debug all I see a reject for the gateway of the static IP but it has “mobile IP” in the text string. Not sure what mobile IP is relating to. Networks are as follows:
0/0 DHCP 10.X.X.X
0/1 192x.x.x
Static 75.X.X.X
[Code].....
I've been called upon to fix the SSL VPN issues in our ASA5505. The issue I am having is that I am able to log into the vpn, access the internet, but I'm unable to access anything on the LAN. I can't use ping or use DNS.
I'm using ASDM v. 6.2(1) and ASA verison 8.2(1). I'm not comfortable using the CLI and prefer the GUI.
We have many CT/MRI etc. machines and Servers in the Hospital LAN. Now intermittently we are loosing the LAN connectivity i.e we are not able to ping any system from any node inside the hospital network for sometimes, after some time it will start working and then again it will stops again.We are using procurve switches and also we are not using any router
View 2 Replies View RelatedI m not able to ping from one to another with the os win XP n other with win 7.
View 1 Replies View RelatedI'm trying to do port forwarding on my DIR-615...first of all I need to be able to ping the router from outside! I did enable the ping options to allow request from WAN...still don't work!!I removed the router and plug my laptop directly on my cable modem adapter and I'm able to ping my IP address (did put the same address the router had)...so, the IP is OK and it is possible to get in the modem from outside.I did plug back the router, and still not working...I did some trick like enable all IP with the Inbound filter...give access to few MAC address that I have to give more chances to get in and still not working!!!
View 6 Replies View RelatedI just tried to configure my ASA but unable to ping. My setup is as follows:
Cable Modem (DHCP from IPS)---> ASA (192.168.1.1)--->Belking Router (192.168.5.1)--->Switch (192.168.5.14)--->
ASA Version 8.2(3)
!
hostname WoodHomeASA-1
[Code].....
I am currently working on a 1941w router. The problem that I am having is that I am unable to ping the switch that is directly connected to it and I am unable to ping from the switch to the router. If I take the address off of vlan 1 and move it to gi0/0.1 the pings work, but then client traffic on the wireless ap inside the 1941w fails.
Here is the releveant config off of the 1941w
version 15.0
no service pad
service timestamps debug datetime msec localtime show-timezone
[Code].....
im trying to connect a dell MD3000i to a Cisco 3750-s but i am not abel to ping the server.the status is up and Protocol is up. but still nothing.i configerd the port to be a acces port and also at trunk port but still nothing is happening.
View 1 Replies View RelatedI have the following setup.
host PC (192.168.9.3) -----> gateway (192.168.9.2) ----- Pix E1 (192.168.9.1)/Pix E0 (81.x.x.250) ------ Internet
The 192.168.9.2 gateway is a 3560 switch connected to the PIX. I can ping out to the Internet via IP from the PIX, but not via the host PC (192.168.9.3) on the LAN. PIX and gateway configs below. Am I missing something that's preventing me pinging out to the Internet from the internal LAN?
PIX config
test-cal-pix01# sh run
: Saved
:
PIX Version 8.0(3)
!
hostname test-cal-pix01
enable password btf1YD.Vq7mE6vEA encrypted
[code]....
i have a site to site vpn stablished, the vpn works fine (while is up), i have a cisco asa 5520 and the other end of the vpn is a jupiter device that for technical reasons needs to send a continuos ping and when it does not receive a reponse back it brings down the vpn tunnel and reestablish it again. while the vpn is up traffic flows perfectly but because i m unable to repond to the ping the vpn is brought down as reestablished by the jupiter device. the jupiter device pings the encryption domain which is an ip that is natted to the real ip in the inside network. this is my configuration of the vpn:
AAA.AAA.AAA.AAA is the ASA public ip in the outside
BBB.BBB.BBB.BBB is the jupiter device ip (part of the object group IP_LIST)
CCC.CCC.CCC.CCC is the nat ip on the ASA
10.21.0.164 is the real address in the inside(code)
I have 3 2620xm routers connected via dte/dce serial connections In a lab.One of the routers Is also connected to a 2950 switch.
The 2950 switch connects to an unmanaged tp-link switch that Is connected to a dsl modem/router.I have Internet access via the 2950 to my laptop.
I have ripv2 enabled on all the routers and It's working fine.The dsl modem, switch and connected router are on the same subnet.
When I ping the dsl modem via the 2950 or via the router connected to the 2950 , It works 100%.If I ping the 2950 from either of the other two routers , It also works 100%.I can't ping the dsl modem however from the other two routers.I've only been studying for the ICND1 so maybe there's something I'm missing here.
This is what I have as a setup:BT Home Hub wifi routerPC with Windows 7 Home premium connected via ethernetMacbook Pro with OSX10.6 connected via wifiIt feels like i've tried everything to get this working. As far as I can see the settings are all ok but I've noticed that I can't ping the PC from the mac although I can ping with success the other way around tried traceroute from the macbook and it gives me this so it is able to see it somehow...Code:traceroute to 192.168.1.66 (192.168.1.66), 64 hops max, 52 byte packets 1 alistair-pc.home (192.168.1.66) 1.724 ms * 1.151 msNot sure where to go from here. I think discovering that ping is failing is a good start to diagnose.
View 19 Replies View RelatedI have a home network of 3 cmputers. DHCP from router. 1 computer is not getting address. But if I assign it one, with same gateway and dns(not a duplicate ip of others), it can ping internally, and outside. I can do tracert to 8.8.8.8 and ping it (google DNS). But I can't get to internet. So - i can get out, but nothing coming in. I have checked firewall.
View 4 Replies View Relatedi'm configuring the network using static routing from the information above. can i know why i'm unable to ping from pc 1 to pc2 and pc0 to pc2?
View 8 Replies View RelatedRecently we have configured new site where we are unable to ping global DNS from routers and switches.Checked in the firewall ICMP is allowed.The thing we did is we made Native vlan as vlan 10 (Data vlan ) instead of vlan1. Do this is the issue for not pinging.
View 6 Replies View RelatedI need another set of eyes on my config. I am trying to set up my router for a basic connection for the time being. I set my gig 0/0 port to dhcp I see traffic being sent and recieved but I can not ping 8.8.8.8. I am connected to a basic comcast modem from 0/0 I have also tried setting gig 0/0 to 100 full. I do have IP routing enabled. I believe I have my acl's configured correctly. I am wondering at this point if I need a static block of IP's from comcast.
hostname vpn-router-2901
username ****** password *****
enable secret *****
[Code].....
I have 2 routers, one is an Apple AirPort Extreme with a static outside IP address, I also have a Cisco 871 with a static outside IP address. The Airport Extreme connects to a switch on the private network and has an IP address ending in .1. The Cisco 871 connects to the same Private network and it ends in .2. The 871 is setup as a VPN Server. now when clients connect to the VPN they can ping the VLan IP Address on the 871, but they can t ping any other hosts on the smae network. The hosts on the private network can ping the vlan on the 871.
View 7 Replies View RelatedI have setup 5505 ASA for Testing purposes. It has static route to layer 3 switch on outside interface that goes to the internet.
ciscoasa# sh route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
[Code].....
I' d like to have some support for a very-basic PIX firewall configuration. I 'm dealing with PIX 515E. Inside hosts can ping inside interface , outside hosts outside interface and so on. Simply i cannot ping outside interface from inside hosts, Inside host-192.168.1.0
Outside - any host like google.com, or to check my isp link's dns ip. I have attached the pix configuration text file to test.