We have a router (7206) which connected to client device in /30 IP segment, but this device is a switch which connected to many more devices. Doing packet capture on our router interface unravel many ARP requests which comes from the client switch.Is there any feature or command which we can stop this?
View 3 RepliesWe have a router (7206) which connected to client device in /30 IP segment, but this device is a switch which connected to many more devices. Doing packet capture on our router interface unravel many ARP requests whcih comes from the client switch. Is there any feature or command which we can stop this?
View 4 Replies View RelatedWe have a 25Mbit connection comming in through a cable in the basement, going through a modem that is connected to a RVS4000 small buisness router on the first floor, that acts as the single NAT. Connected to that in parallel we have 4 wireless b/g or b/g/n routers of various cisco/linksys models, one for each floor, each with DHCP disabled.Over the last few months there have been some issues with the router and I'm curious if there is anything that can be done to solve them.The firmware of the router is the latest at the time of this writing, V2.0.2.7
1. The router will occasionally lock up and completely stop responding to DNS requests. Attempting to open a website will result in browsers giving their standard 'DNS Lookup Failure' messages. The router will also become completely non-responsive when trying to access it via its IP address (standard 192.168.1.1). No username/password dialog appears.However oddly enough IRC and other chats like skype will still work fine.Restoring Factory settings has not worked. This issue has gotten to the point where this happens about once a day. Restarting the router will fix the issue. While I think the issue may sometimes resolve itself, it could also just be one of the other people in the house restarting it manually.I'm assuming that the router is to blame here and not the cable modem in the basement or the DNS server of our ISP, mostly due to the fact that the router becomes unresponsive and won't let me log in as admin when this happens. also restarting the router, not the modem, seems to fix the issue.
2. The router's log is always empty Specifically I have enabled 'Output' and 'Local Log' as you can see here:
3. Issues with some people hogging bandwidth With 25 people and a 25Mbit connection each person in the house should effectively get about 125KB/s of download speed, especially since not everyone is always using bandwidth. However it can happen where one person is, often without knowing it, hogging a large chunk of bandwidth and slowing the network down for everyone, such as downloading multiple large files from different sites, streaming high-quality video, etc.I would like to know if any of the following might be possible to do with this router: See the bandwidth usage per individual MAC or IP address on the network over timeLimit the amount of bandwidth a specific MAC or IP address can use. Make the distribution of bandwidth more fair when a few people are using far more of it than other people.
I have at times resorted to limiting P2P via IPS in the past, and of-course that does work somewhat, but that's not ideal. I'd much rather just know who is doing it, and specifically by how much they are slowing other people down. While the IPS page will list the IP addresses of those trying to use P2P when it's disabled, there is no way for me to really quantify how much bandwidth they'd be using otherwise, and this doesn't at all include things straight-up HTTP downloads.In any case, this router should easily be able to handle ~25 simultaneous connections, right? Are there any settings that I should make sure to enable or set to distribute bandwidth more fairly, given the setup we have?
4. The IPS report chart is not readable.This is a bit of a nit-pick, but the IPS report chart is basically not readable because the colors used in the key are identical in color. Can you tell the difference between the colors of 'Network Traffic' and 'Attack Counts' in the key at the top? They could have used any two colors that are at least somewhat distinguishable, even light grey and dark grey would have been better, not magenta and another magenta.
I am trying out a DAP-1513 unit but there is no forum section for this? My question seems to be general and might cover the other models also. Do the DHCP request, from the attached LAN devices on the DAP, get pass to the DHCP "server?"
View 6 Replies View RelatedI am having a Cisco 7406 VXR router. I want to know what is the max. MPLS link capacity that can be terminated on the link? We are planning to upgrade the MPLS link to 450 Mb..so was just wondering whether 7206 will support or not..
View 1 Replies View RelatedGoal: To forward requests over port 80 from my LAN to an external server on a specific port, that is I would like to forward all requests over http to an external proxy.
I know that this can be done with IP-Tables, but I would like to do the same thing with my D-Link. I have looked at Advanced --> Routing, but that seems to be specifically for inbound requests. I want to do this for outbound requests. This can be achieved with the D-Link DIR-655?
Using a DIR-655, does anybody know how to create a firewall rule to block all dns requests except to specific servers?
View 2 Replies View RelatedI want to configure multilink between two Cisco 7206 routers POS interfacesafter configuring both sides.Router 1interface Multilink5 ip address. [code]. I can see both sides through show cdp, also ospf process goes to FULL stateBut traffic is not flow between interfaces, and i can not even ping router's own ip address.When i delete network statement from ospf process, i can ping router's own interface and both routers can ping each other.
View 1 Replies View RelatedWhenever I start a Cisco VPN from any machine on the network, DNS requests to the DIR-655 stop working. If I reboot the router, DNS starts working again (the VPN was left on). Why starting the Cisco VPN would freak out the router?
View 3 Replies View RelatedHow do i stop a Wireless device from connecting to the router? i attempted to find an answer myself and failed
View 1 Replies View Relatedi can detect the IP of DDOS attacks and if there's a simple way to prevent it. I've heard different suggestions from blocking incoming ping requests to blocking specific IP ranges
running 2.03 firmware
I have the DIR-655 Hardware version B1, Firmware version 2.00NA and everything has been working fine for about 3 months. Lately the internet connection to all the computers would just stop. All the computers are connected to the router and the router is connected to the cable modem and their is no indication of a problem. The lights are all on and the router status shows the cable status as connected and the network status as established. I can't open any webpages, or all the ping would time out. It happens on all device, Windows Vista/7 PC, Mac computer, Linux laptop, and iPhone/ iPad. The problem gets fixed when I reset the router or just wait about 5-10 minutes and the problem goes away. That normally isn't a problem, but it's starting to happen twice a day now and it is really really annoying when I'm playing games. I tried the FAQ and searching the forums, but in vain.
View 7 Replies View RelatedRegion : Australia
Model : TL-WR740N
Hardware Version : V4.20.0
Firmware Version :
ISP :
I have TL-WR740N router. I dont know how to stop and start wifi signals.
I live in a Townhome complex so inSSIDer displays a lot of wireless activity. I have noticed that many of the routers channels are listed as 6 + 2, 4 + 1, etc., while show only a single channel. I have been able to "temporarily" replicate this by setting the Channel Width on my DIR-655, by setting channel width to auto, and when I am successful it displays a speed of 300, both in my task bar and in inSSIDer. However, that is usually short lived and the channel for my router reverts back to a single channel and the displayed speed drops to 130 or 144. My neighbor's Netgear is rock solid at displaying dual channels. Well, that and besting my signal strength. :-)
I have the router manually to channel 8 because none of the routers, judged by their displayed strength, use it.So, I guess my question is; how do I stop my DIR-655 from dropping back to using a single channel, which I interpret 20MHz, even though it is set on auto?
I recently purchased a dir 655 router and it works fine but in after a while of using it, the wifi signal will stop broadcasting my other computers still work with the internet that are hard wired but the ones im using through the wifi signal will loose connection. So my fix has been unplugging the router and plugging it back in then it will broadcast my wifi again. I tryed leaving it plugged in and refreshing and rebooting my computers but that wont fix it until i disconnect the router and plug it back.
View 14 Replies View RelatedRegion : Others
Model : TL-WR741ND
Hardware Version : Not Clear
Firmware Version :
ISP :
after year and a half of using TL-WR741 ND router, it suddenly stop working during the night. I have no problems with router before this happened (I think only one or two reset in 1 year and 6 months). System led light does not flash (some sytem error) and I can't access to 192.168.1.1 router setup site. I tried almost everything, unplug power, reset etc. for almost 100 times, reconnect the router with modem and PC in all posible ways, but still can't establish connection or even access to router's setup. Obviusly internet works fine?
I have 3 cameras. all had the problem that after a while motion detection would be triggered continuously for no reason at all. With 2 of them I managed to fix it with a firware update, but no luck with the 3rd one. I even tried several different firmware versions.) it starts to record continuously after abt 24-48 hrs & i have to reboot to get it to stop.
View 1 Replies View RelatedMy younger brother uses IDM to download files and it slows my Internet down to a crawl. I've tried reasoning with him but its not getting through to him. Is there any way I can use my router (bcz only I have access to it) to limit IDM?
View 5 Replies View RelatedI recently switched from a DSL ISP (Earthlink, Zyxel modem configured as a bridge, pppoE connect) to a cable ISP (Comcast, Arris cable modem, dhcp connect). Basically PC --> DIR615-->Cable modem-->Internets. With the old DSL the Internet activity LED (green, looks triangular) on the DIR615 blinked only when internet activity occurred. With the new Comcast connection it blinks non-stop about 5 times a second! Even if the PC is turned off it blinks. It stops blinking if I disconnect the ethernet cable between router and modem. The connection itself is fine, but if the DIR615 is doing something it should not be doing it might slow the connection down a bit, (or burn something out prematurely?)FYI, the Arris cable modem does not seem to be a router. It takes a cable connection from outside and provides a single ethernet cable and 2 (voice) telephone cables to the house.
View 1 Replies View RelatedRegion : Australia
Model : TD-W8950ND
Hardware Version : V1
Firmware Version : 1.2.9 build 110212 Rel.22296n
I made some changes on my wireless modem router to stop dhcp and dns provided by my device. A server is now doing it, but at the same time I appear to have connection issues where I didn't before. In an attempt to resolve the issues I looked at the System Log and a number of things were coming up that concerned me. These are as follows:
-user: tr69c: Unable to retrieve attributes in scratch PAD
-user: Stored Parameter Attribute data is corrupt or missing
Additionally I'm getting a lot of kernel: Intrusion alerts which I can't determine how serious they are. Where to start tracking down these issues (if they even warrant investigation).
client is unable to establish a connection to the backend servers via the vip on port 389 ,636 configured that servers are listening on these ports .even the probe is successful on port 389 but not getting any response back from the servers. [code]
View 1 Replies View Relatedhow many clients simultaneously associate with Cisco AP 1252G.. right now when I try to connect more thn 25 rest unable to access the AP. Clients (smart phones plus laptops) are using 802.11b/g standard.
View 11 Replies View RelatedPlease find attached a simple BYOD/ISE document I uploaded to kick start my new Wireless setup. Its all configured on my ISE sever and Controller as per doc.My setup:
-3600 AP's
-Internal 5508 Controller
-DMZ 5508 Controller (acts as a DHCP server for wireless clients)
Controllers have established connectivity (mobility acnhors), as a client I can connect fine to my new SSID get a DHCP IP address back from DMZ WLC and at the moment can connect out to the Internet fine (using no WLAN Security as a test). So this part is working.I have now followed the document configured ISE, enabled AAA on the Internal WLC only and used the AAA override setting on WLAN as in the attached document.I connect to SSID expecting to be redirected to my ISE Guest Portal, nothing happens other than connecting to Internet WebPages.My question is, if I have followed this document correctly why is the Internal WLC not redirecting client requests to ISE, is this because my mobility anchors need to be re-configured, perhaps the AAA/ISE config needs to be applied to my DMZ WLC not internal WLC?
I would prefer the Internal WLC to redirect the login to ISE, doesn't make sense to traverse through the DMZ Firewall onto DMZ WLC back into the Internal Network again to the ISE to authenticate.Or am I missing something additionally to this document to make sure clients are directed to the ISE Guest portal login.
We have an 1140N AP connected to a switch and our "network partner" controls the router and will hand out DHCP and do the NAT for this WLAN. How can I configure the AP to forward DCHP requests through.
I have WPA2 PSK (TKIP) setup and the client is able to authenticate however we fail to get an address. In this case the Ethernet interface was left alone so it has the default config and it gets a DHCP address fine. How can I configure this AP to enable the rest of the WiFI clients to get an IP?
I am using ACS5.1 connected to WLC (v7.x) and frequently see host auth requests in the ACS logs. I am not interested in seeing host auth requests at all. Is there anyway just to ignore these.The issue is that these will always fail. If I enable the lock out facility within WLC and a host continually tries to auth the WLC will lock-out that mac address meaning that when the user is ready to connect with their own credentials they are unable to as the WLC is blocking that mac address from connecting to the wireless network.I tried disabling the 'process host lookup' option, but this apparently only changes the type of request to appear like a standard PAP auth request which again fails, filling up my RADIUS logs and stopping me from enabling the WLC lookout feature.So, as I say, I want to simply ignore host requests. I have no control over the end points so am unable to go and update config etc of these devices.
View 4 Replies View RelatedI'm working on a project where a wi-fi client is tracked and located using RADIUS authentication requests. The problem I'm running into is that the WLC (5508) sends an RADIUS authentication request to my freeradiusd, which is ok so far, but if the client roams to another accesspoint (3602AG, 1131AG, 1252AG), the WLC does not send a further RADIUS auth. request - and the client is allowed to connect to the next ap.Is there an option like RADIUS-cache which I can disable, so that the WLC sends everytime an authentication request when a client tries to connect to an ap or roams from one ap to another one?
View 4 Replies View RelatedI have 2 1242AG APs setup with one SSID and no vlans configured. The APs are connected to a switch along with my DHCP server. Clients are able to connect to the SSID but are unable to get an IP from the server. Clients can plug into the switch and get an IP. If I configure a static IP on the wireless card, the client works fine.
Is there something I'm missing on the AP to allow DHCP requests to pass through? IPhelper?
Here is the AP info: AIR-AP1242AG-A-K9 12.4(21a)JA1
I'm using Cisco VPN client 5.0.7 and Cisco ASA 5510 (7.4 and 8.4.2) VPN RAS solution. Clients are authenticated using certificates and AAA RADIUS (ACS 3.3) and AD.Each time, when client connects, ASA issues 2 RADIUS requests, first - correct one which is successfully authenticated by ACS and immediately - second which always fails. I couldn't find any information related to this strange behaivor. "Double authentication" feature (most likeable to its name) is accessible only to Anyconnect clients which we don't use. When I'm authenicated using group password, there is only one RADIUS request.What is the source of such behavior?The negative impact is that my logs are filled with spurious failed auth attempts, and users are incrementig failed attemps counter in AD.
Debug from ASA:
----First request----
RDS 10/24/2011 16:16:01 D 0232 14884 Request from host 172.16.8.1:1645 code=1, id=22, length=145 on port 1025
RDS 10/24/2011 16:16:01 I 2519 14884 [001] User-Name value: user1
RDS 10/24/2011 16:16:01 I 2519 14884 [002] User-Password value: B2 A9 D0 2D 15 5F B8 BB DB 1E 3A 38 F5 24 72 B5
RDS 10/24/2011 16:16:01 I 2538 14884 [005] NAS-Port value: -1072693248
RDS 10/24/2011 16:16:01 I 2538 14884 [006] Service-Type value: 2
[code]....
SSH is not working in Cisco 7206 VXR Router. I have configure
Hostname
Ip Domain name
Crypto key generate RSA
IN Line VTY 0 4
transport input preferred SHH
transport input telnet SHH
But stll it is not working. I am getting invalid crc recieved in packet.
Current IOS running is 12.3 (19) Enterprise 3des
I have two 7206 VXR routers with the VPN Service Adapter either side of a leased line (i.e. no provider between, pure layer two connectivity)A requirement is that traffic traversing the link is encrypted so I've configured an IPSec VPN between the two endpoints.During load testing we noticed a very severe performance hit when the VPN was enabled, disabling it again saw we were able to use almost 100% of the 1000Mbs line. The performance hit looks to be due to the increased MTU size when using IPSec, possible due to fragmentation.
I've read that the 7206 VXR can support 980Mbs (or there abouts) of throughput using AES providing the MTU size is 1400.Configuring this manually on each server in each data centre isn't feasible.As the link is effectively a point to point and we have control over the MTU size between the two routers, what options are available to increase the performance when the VPN is enabled?
I am attaching my current network topology, My problem is that i am having mpls & p2p link terminated on the 7206 router left side of diagram. now my problem is if i apply PBR on this 7206 router & tracer any host which are on right side of the diagram, it drops on IP 10.1.1.1..ideally it should go to my Core switch on right of the diagram.
View 8 Replies View RelatedMy friend is invisible to ping requests. I know he is online because he is on my Gtalk friend's list. This is because he is using Windows 7. Earlier, when he was on Win XP, he responded to ping requests. He said that he didn't mess with the firewall settings. Therefore this feature comes default with 7.I'm using XP and I don't want to change to 7 right now. Can I get this feature?
View 5 Replies View RelatedCisco Small Business Switch POE ESW-520-24P with a Wireless Access Point Cisco Aironet AP1141. Both the devices are upgraded to the latest firmware.
Connected to the ESW-520-24P is a Windows 2008 SBS 2011 with DCHP and Domain Controller. Along with the server I have a number of wired computers connected to the switch which do not have any issues and connect to the DHCP server without any problems.
When connecting two wireless devices to the AP1141, they get the IP address and DHCP from the server; but when connecting other devices apart the first two they will fail to connect to the DHCP server and do not get any IP Address. They manage to connect to the Wireless access point but they cannot contact the DHCP server.