I have got two 878 integrated services routers and I need to configure them as transparent bridges in order to connect 2 remote sites over ATM.
As I'm testing the topology, I configured two switches (representing the sites) at each end with a VTP domain. VTP works while the switches are connected directly with eachother, but it won't work with the bridges in the middle. [code]
I have inherited a sbs 2008 network where they have a SBS2008 server and Server2008 running as a terminal sever at the main office and they have 2 satellite offices. These offices all connect through router to router vpn tunnels. The main site is on 10.0.0 and dhcp is done by the sbs. Satellite site a is on 10.0.10 and dhcp is done by the vpn router and Satellite site b is on 10.0.5 and dhcp is also done by the vpn router. All client computers can run rdp to access shares / programs etc on the two servers but when trying to push out group policy, antivirus updates or even using remote control through the SBS2008 server it is hit or miss. DHCP records on the SBS server do not seem to update correctly, manually changing the ip address in DNS records results in warnings that the PTR record cannot be created.
So I am wondering if the configuration they currently have setup is correct. What might be stopping some but not all computers from updating, why I can connect to some but not all computers at site "a" but I am not able to remotely connect to any computers at site "b".Why I can do remote installs of Eset Endpoint Security on roughly 10% of the clients but the other 90% fail.
I would like to know if there is a possibility to create 2 Remote access VPNs for 2 ASA situated in different sites and using only one PCF file.Is set up a tunnel between the 2 ASA the only way to reach the 2 destinations with the same PCF file?
View 6 Replies View RelatedI'm looking to put together a solution for a customer that wants to "bridge" between their current office and a new office space they have rented. I know how to set up a site-to-site VPN between two sites with different private IP ranges. For example, site A is 192.168.1.0/24 and site B is 192.168.2.0/24. But is it possible to make both sites appear as a single IP block? This way, systems could be moved one by one without renumbering.I am guessing there might be a way to tunnel the layer 2 traffic and make it work, but I am concerned about broadcast services being broken. I am using non-cisco platforms so I am just looking for pointers on the protocols that might be used so I can do further research.
View 3 Replies View RelatedWe have a Main ASA 5520 and two remote site ASA 5505's that connect to each other via S2S VPN tunnels. Currently they are doing split tunneling, so only local traffic goes over the tunnel. We have are local LAN (10.0.0.0/16) and our DMZ (10.3.0.0/24) network at the main site. The DMZ hosts our external sharepoint, but we have access to it internally The problem is site A (10.1.0.0/24) and site B (10.2.0.0/24) have no idea of it, and when attempting to go to the site, it fails. You can access it via the external site address, but that's the only way. Normally the external address is blocked when you are internal.What i'm stuck at is even when we had all traffic sent from Site A to our main hub, it still wouldn't find it. Would i have to make a separate vpn tunnel purely for that DMZ traffic?
View 6 Replies View RelatedI have been asked to setup wireless and we have purchased WLC 5508 and 1142 APs.We have several remote sites and a centralized WLC. The requirement are to have a common SSID (Corporate) advertised across all the remote sites and have that SSID locally switched, and have another two SSID Guest and Mobile tunneled back to the central site (WLC).I want all the wireless (Corporate) clients to use the same subnet as the wired clients at each remote site, the IP assigment will be done by a DHCP server at the central site. The Guest and Mobile users will use a common subnet each across all the site and this will also be handled by the DHCP server at the central site.
I have enabled H-REAP with Centralized Authentication and Local switching but I'm not sure about the second part which is to have a common SSID (Corporate) across the remote sites and localy switched whilst having the other two SSIDs tunneled back to the WLC. Cisco TAC told me to configure dynamic interfaces for each of the remote site but then he said I still wouldn't be able to switch the Corporate traffic localy if I use a different subnet to the wired subnet for the wireless clients.
I am installing 2 ASA 5505s at home offices with dynamic IPs. The EasyVPN server is a ASA585x. I am using the 5505s in NEM mode. I configured a unique DHCP scope on each 5505. I have a dynamic crpto map on the server. I configured unique tunnel groups, group policies and usernames for each site on the server. This seems to work fine. Is it normal to configure unique tunnel groups, group policies and usernames for each remote site?
View 2 Replies View RelatedWe have a Cisco 2921 router at the head office (Easy VPN Server) and been deploying Cisco 887VA (EasyVPN remote - Network Extension) for remote offices using EasyVPN. We are allowing Voice and Data traffic over VPN. Everything has been working great until this issue was discovered today:
When a remote user behind Cisco 887VA calls another remote user also behind Cisco 887VA, the call connects and Avaya IP phone rings but no voice in either direction.
Calls to/from head office and external mobiles/landlines are fine. Only calls between two remote sites are affected. As there is no need for DATA connection between Remote office, our only concern is Voice support.
I think "hair-pinning" of traffic over VPN interface is needed. (Examples configs etc).
I have been working with my ASA 5505 VPN Concentrator to maintain a connection with one of my remote sites. I have several tunnels that work fine and dont have any issues at all, but one tunnel with outside IP ending in 146 and inside LAN 192.168.3.0 goes down every 24 hours. Attached is the config from the concentrator. I changed around the Security Association Lifetime Settings and the tunnel would drop after that amount of time expired. If I set it to 24 hours, the tunnel would drop every 24 hours. If I set it to 8 hours it would go down every 8 hours.
I have swapped the router a few times, double and triple checked my key settings, disabled keep alives on both ends, and this problem just started happening a few weeks ago after working fine for years. I also get the following e-mail error every time it goes down:
<161>Jul 10 2011 16:19:47: %ASA-1-713900: Group = xxx.xxx.xxx.146, IP = xxx.xxx.xxx.146, construct_ipsec_delete(): No SPI to identify Phase 2 SA!
How can I connect Two ISPs on My LAN simultaneously in order to boost my internet connections?
View 1 Replies View RelatedI'm dessigning a network and this is my scenario:
5 - Remote sites (no static IP there)
3 - Remote users (comercial)
1 - Central building (using static ip address)
Is it possible to establish a permanent vpn tunnel between each one of my remote sites to the main building, even if I have no static IP address in the remote sites?
Do you think that RV180 is the best choice to mannage vpn connection between remote sites and the central building securely and faster?
for example, there are 3 sites, A, B and C. A and B are 1.5 km apart and both are separate LAN(mixture of wireless and wired). C is 35 km apart from A and B. I have to connect A, B and C so that they can communicate with each other. Security is required.
View 8 Replies View RelatedMY ISP installed one router in my lab.for internet connectivity they mail me steps :connect your Laptop directly to gi0/3 port to check internet connectivity with public ip 1.1.1.x and Gateway 1.1.1.1 with subnet mask 255.255.255.240 after connection I surprised because I am able to access only google sites like gmail,google search etc. but I am able to ping/traceroute all sites.from browser I am able to access only google sites only.In Router no firewall no such access list.
View 2 Replies View Relatedmy situation is that i have to connect 2 site which are 1km apart our data speed requirement is not so high 64kbps is enough so i heard this kind of setup is it best
View 3 Replies View RelatedI've been having problems for the past couple of weeks trying to connect to some websites. It is only SOME, not all websites. It will either say that it is taking too long to connect or that the website is experiencing problems.
View 9 Replies View RelatedOn wireless (lenovo tabletx61) I cannot connect through the intranet - no problem connecting through internet. When I manage to connect through intranet connection is dropped quite often.No problem connecting via Ethernet cables.
View 1 Replies View RelatedCan't connect to sites such as this GamersFirst Forums -> International APB Reloaded Forums, unless I use a proxy site.Nor does connecting to the game works, either. But it works for my friends, apparently.I checked the router settings, no go. Turn the firewall and Norton on and off, and still the same. I even tried accessing on my sister's computer which is also connected to the same router, and it connects. Only my computer doesn't connect to some certain sites.
View 3 Replies View RelatedI have a laptop that works perfectly fine when plugged into a network cable, but the wifi refuses to work. It pulls an ip, and everything looks good when I run ipconfig/all, but it can't even ping the router. All other computers on the network are working fine. I've flushed dns, set static IP and DNS, uninstalled/reinstall device, updated drivers, bios, and firmware, and even created a backup image of the computer and reloaded the os using the recovery partition. The event log doesn't tell me anything, and there are no flags in the device manager. I'm at a complete and total loss. I cannot figure this one out.The laptop is a Compaq Presario CQ50-142US. Vista 32bit OS. Everything was working perfectly fine before it got a virus. I ran through the standard procedures of AVG, Malwarebytes, TDSSKiller, and even resorted to Combofix, but somewhere along the line the wifi dropped off and will not come back.I even double checked the HOSTS file and IE proxy settings to ensure I wasn't crazy; although I know those should've affected the wired connect too.My last step is to either replace the wifi chip (which I don't think is the problem), or wipe it and load the os from scratch, but I don't have an oem disc since it has the recovery partition.
View 14 Replies View RelatedI can't access some sites, loading times are endless and they look totally strange when I can access them (No images and so on). Sites are completely random, some examples are GamersLegacy.it - Starcraft 2, Diablo 3, Dota2, World of Warcraft, League of Legends, Inferno eSports - Homepage (videogames forum)FINECO: Conto, Investimenti, Trading, Prestiti e Mutui - Banca diretta, online o con promotore (bank) Sigma Draconis
1) Cleaned laptop with Ad-aware and Malwarebytes, found 2 issues but didn't fix the problem.
2) Closed firewall, nothing either.
3) Canghed/flushed DNS, tried both openDNS and GoogleDNS, nothing.
4) She CAN access those sites, she has same connection to the router (via wireless) and she has same OS (Windows Seven). I think that means it's my problem, not a router one.
5) Tried to lower MTU settings in my wireless connection as I read that could be the problem, nothing new here.
6) Here comes the tricky part. I tried to access those sites via proxy (Ninja Cloak | Fast, free, anonymous web browsing with NinjaCloak.com) and they actually work!
I have dir655 Hardware Ver B1 Firmware Version: 2.10NA.Comcast Motorola cable modem surfboard SB5101. The problem started happening a couple of days ago. When my computer is hooked up to the cable model directly, i am able to connect to outlook.com just fine but when i go through my router, it can't connect to the site. I played with MTU (lower it by 10) all the way to 1300 but it didn't work.The problem started happening all the sudden without any changes in the cable modem, router or my computer.
I also tried cloning MAC address from my pc but didn't work.I also tried turn off both modem and router, wait 2 minutes, start modem, wait for all lights to come up and start the router.Sites i can't connect are: outlook.com, starcraft2, Comcast, eBay, Facebook.One thing that i noticed weird is that i am able to connect to cnn.com using IE9 just fine but ping shows: [code]
I have problem of Site to Site connectivity I have 2 sites (Site 1' public ip. 115.119.120.X, local ips are 192.168.1.0, & Site 2' public ip 115.119.187.X, local ips are 192.168.2.0)Both sires are having different locations & using routers are Maipu 800.At present both sites are running with internet (each router are configured for DHCP, NATING & DNS for intenet)guide my with complete config, both local systems has to communicate...My preperance is existing routers & If it is nessary to change the routers, what will be the config.
View 1 Replies View RelatedI'm having problems connecting to certain sites on the internet through one computer. I can connect ok on other computers going through the same home network. On the one computer that is having problems I can connect to the site but then when I click on a link I get unable to connect then I can reload the page and some times it connects to the page. So as I am browsing through the site almost every time I click on a link I get unable to connect and have to keep reloading the page.
View 5 Replies View RelatedWIth Chrome it does work although a bit slow. With IE as-well.Had the problem with FB as-well allthough that i could cancel with allowing it to connect.Gmail doesnt.Production Security Services and the certificates seem to cause problems.Searched the internet; tried a scan, checked the date, activataed the SSL and TLS in the browsercertificates, the server and organisations names.
View 4 Replies View RelatedWe can't find the Linksys router's manual and have no clue what is causing our WiFi not to let us access certain websites. For example, we are unable to access the Microsoft, Target, our local Library, YouTube and some other ones that we find out about once it doesn't let us get on them. We thought it was an issue with Microsoft Security Essentials because we hadn't updated it correctly, but that was not it. The reason we know it is OUR WiFi because we can access the sites I mentioned above whenever we use our apt complex WiFi, so it is not our laptop. We have the same problem with this when using our wifi on our iTouch. I hope that all made sense (had to access this site with my phone.)
View 13 Replies View RelatedI'm trying to solve up a really nasty problem I have at home and I've come here hoping to find some answers. Since last Saturday, I am unable to access certain internet sites when at home. Strangely enough everything was fine before that. Went to bed around midnight local time and when I went to check those sites after work at around 3:30 pm local time I could not get on those sites. For some reason the pages just keep on endlessly loading, giving me only a blank page. What is also strange is that no computer in my house can access those sites. So it's not limited to one computer.
View 1 Replies View RelatedMy only options for internet have been 56k or wireless USB modems. That is, until recently. We switched from the wireless USB modems to a wireless hotspot from US Cellular (Samsung SCH-LC11). However, ever since making the switch I've had problems accessing certain websites both on our PC and on my Macbook Pro. I can't connect to Invision Free (or any of its user-created forums) or [URL]. It happens with other, random sites as well. I tried manually changing DNS settings to Google's and another one (don't recall which) and it did allow me to access the site. However, once there, every other site started moving slowly and eventually the ones in question timed out as well.
View 12 Replies View RelatedI built a computer down at school in Utah, semester's over so I went back to Idaho for the summer. When I got here I seemed to stop being able to connect and load content from random sites. It gets a ping time out every time on the same random websites.
Some of the sites:
[URL]
I can access these sites in Utah, so I called my ISP (frontier communications, previously verizon.) They flushed the DNS and checked that the modem wasn't to blame. I checked my host files and they're unaltered. After two hours on the phone they were stumped and hung up. [URL] loads fine, but it won't load the pictures which is odd.I'm not sure if it matters but I do have a 6 year old modem (westell 327w) that I think uses LAN g whereas my mobo (asrock extreme3 gen3) uses Realtek 8111E if i'm looking at the correct specs.one last thing to add would be that I am not able to access [URL], but I am able to access [URL]. Is there something all these websites have in common that cause them not to load?
For some reason there are some sites that I cannot access websites from inside interface.One such example is lxer.com where I am receiving this message in the browser:The connection has timed out The server at www.lxer.com is taking too long to respond.This has "suddenly" happened, and so I am wondering what others have done when such things has happened. My outside has a dhcp-IP, and I have noticed that this address had changed, so I corrected this in my router settings.ASA version is 5505
These are my settings:
: Saved
:
ASA Version 8.4(2)
!
hostname ciscoasa
domain-name example.no
enable password 123412321 encrypted
passwd 1231231 encrypted
names
[code]....
I am using a USB Modem from HUAWEI Technologies to use internet when im not on a wifi zone.. The Internet Speed is kinda slow (512 kbps), so I configured my browser to go through a proxy to make it a lil bit faster (2mbps now)..Everything works fine except that I couldn't connect to https sites (gmail, facebook, eBay, etc)
View 3 Replies View RelatedMy Toshiba will not connect. I keep getting cannot connect to server messages. Also get the error 623 message. Im not sure what to do. I use Windows xp on it. Bought it in 2006. I had thought about reseting it to factory settings but I never made restore disks and cannot find the toshiba reset stuff.
View 1 Replies View RelatedI am using a USB modem to go online when i'm not in a wifi zone.. The internet speed is very slow (512 kbps) so I configured my browsers to connect via proxy to boost the speed which is now (2 Mbps)..Everythings working fine except that I cannot connect to SSL sites, e.g Gmail, Facebook, Ebay.
View 8 Replies View RelatedI am trying to connect two overlaping IP address sites ( see attached diagram). Site A LAN address will dynamic NAT to 10.1.1.0/24 at ASA5520.All the users from site A need to get services from site B ( DHCP, DNS, Mailbox,Print Servers, AD loggin etc). All the connections will be initiating from site A to B.
1-will all these services will run over NATed address.( dynamic) or I have to change to static NAT?
2- Any sample config for ASA 5520 for this type of network?
Unable to connect to unsecured wireless sites using a USB Realtec high gain antenna on a Toshiba laptop running Win7 Pro, 64 bit. Network troubleshooter resets adapter but states it cannot correct the problem. Wireless adapter settings set to High Performance. Latest Realtec drivers have been downloaded and installed. Light on front of the laptop shows that the wireless function is running. Turned the function off, rebooted and then turned it back on. Same result when Toshiba is operating off 110v so power shouldn't be the problem.
View 1 Replies View Related
