Cisco WAN :: 887 Clients Can't Connect To Internet
Dec 13, 2011
Purchased an 887 my my home office. ADSL ATM0 and Dialer get an address from my ISP, have tried to configure NAT but none of my clients can browse the internet. I can't ping outside the network but I can ping clients internally as my clients are connected via a switch, which is plugged in before the 887. I can get access to the router via the Command Line and CP Express and Config Pro seems to work.
Building configuration...
Current configuration : 8900 bytes
!
! Last configuration change at 12:47:16 NewYork Wed Dec 14 2011 by elrooko
i just installed a pix515e ( ios ver 6.2) in my network. and the vpn users can connect to it from the internet successfully but they aren't able to connect to any of the internal resources. some other informaion: i configured nating between the internal network (10.0.0.0/24) and the internet and another static nat policy between an internal resource through another public ip address on outside interface. but right now i need to let the vpn clients to connect to my internal resources.
Once a client connects to my VPN (VPN Client 5) they can not see anything other than the outside interface. If I ping anything on the LAN for example I get a reply from the outside interface. I can not see any WAN either (even by IP) My LAN clients can see the clients within the VPN Pool. I would like all traffic to flow through the VPN. I have tried split tunneling to verify if the internet would work and local lan would stay connected. It does work but I was still unable to access anything on the remote netwok. I am not sure if I am missing a nat command or something simple.
The current setup is as follows. 881 Router with windows 2008 radius authentication. The client is authenticating and reciving an IP address from the local ip pool. Please see below for the running config.
I have a ASA5505 and it has a vpn set up. The VPN user connects using the Cisco VPN client. They can connect fine (the get an ip address from the ASA), but they can't ping the asa or any clients on the network. Here is the running config:
We currently have an ASA 5520 communicating with 10 ASA 5510's, all on static outside addresses. I was asked to add 5 additional 5510's on dynamic address. All worked well in testing until it was decided that some of the dynamic clients needed to talk to each other.
I just purchased a WAP 321 and followed the setup wizard. Its powered by a poe switch. The issue I have is no clients can connect to it. I updated the firmware. I reset to factory and tried setting it up manually till no one can connect. I dont understand what im doing wrong here. Unless its a bad unit. I will have about 10 to 15 clients connecting to it. Its the only ap in the building.
I bought 3 of the Aironet 1231g access points and cannot get any clients to connect to them. I have tried everything from an Iphone, Droid2, Win 7 and XP laptops with built in wireless G cards. All say that they cannot connect to the wireless network. I have two setup currently, one on Vlan 1 that I have configured the way I want with WPA2 enterprise. The other one is just one I setup while playing around.
Basically, yesterday while hanging some 3602's going to a different controller, I started getting task reports of wireless phones not working. However, due to the area of complaint I mistakenly assumed it was due to me causing havoc in the area with AP replacements. Then the issues started to spread with Carts and Cow's and other various devices not able to connect until it started affecting me. I was not able to connect to any SSID at all, kind of nerve racking when you talking ICU/NICU area's in a hospital. Once I got to a wired device, my first thought was to move the AP's to a different controller to at least try and get things back up and then work on the controller to see what was going on. However, in trying to get the AP's to move, most of them wouldn't. In hind sight, I wish I had just shut off the etherchannel port on the 6500 that this wlc is on and force the AP's to move that way, but with people standing over me I ended up just rebooting the controller. Of course, once it came back up the AP's reattached to it but everything was working fine. I went ahead and moved the AP's off of it to another controller for now but am searching for answers. About to start digging into bug reports, but am concerned with this line of code causing the issue and worried about moving to 7.2.110.
I have 4 desktops cat5 to Dlink DIR 615 router. All work fine. Any wireless clients, laptop or netbooks, see the desktop computers for a while then disconnect somehow. All machines can see the Internet through the router at all times. The desktops disappear from the laptop/netbooks but the wireless machines can be seen from the desktop computers but clicking on them gets 'Access Denied' message after a wait.3 desktops = XP, 1 98SE. All laptop/netbooks = XP
I want to know why all my wifi client connect only in G protocol, even if the wireless card supports N, even if all the AP in one of my buildings is AP3500. In the WCS config for my two WISM controller the 802.11a network status is disable, the 802.11n network status is enable and the 802.11b/g Network status is enable and 802.11g support is enable. even in that part of config the 802.11n is enable.
In the High throughput 802.11n section all the rates is check to be supported.
What config I'm missing to get my 802.11N client to get connected with this protocol and not on G protocol.
I have an ASA 5505 that has had a working configuration with several AnyConnect clients using dual authentication for weeks now. My normal process for adding new users has been to configure the user in both authentication databases and the onboard certificate authority, have the user connect to the outside IP of our firewall with IE, download the P12 cert after entering their OTP and then connecting once the cert's imported to download AnyConnect.
I had to add a new user a couple days ago and curiously IE (8) on their computer could not connect to the outside interface of our firewall, as if the laptop had no internet connectivity. I could telnet to port 443 from a command-line, and could even hit it with Firefox (which I ended up doing to download the P12 cert...). I can hit other SSL-enabled and standard websites from IE as well as Firefox. In addition, because AnyConnect seems to rely on the same mechanism to connect as IE does, AnyConnect can't connect either.
I then tested using a previously working laptop fully configured with AnyConnect and a certificate and now it can't connect. There are other previously working laptops that still work, which only makes the issue more clouded.
In watching the logs on the firewall, when one of these non-working computers attempts to connect they hit the firewall, a connection is opened and the SSL handshake is started, but it's never finished and the connection is torn down. Working computers complete the handshake as expected and a tunnel is opened.
I've checked IE forums for this issue and none of the fixes found therein seem to apply or work. Since this issue seems to only affect IE and AnyConnect's ability to connect to my firewall I have to assume the issue is there.
I have a 4402 which is connected to a 4506 Switch int Gig 3/1 via a trunk port. The Managment and AP-manger interfaces are on vlan 6 [code] I have a 1142N AP also connected to the switch and it pulls a DHCP IP Address and configs etc and registers to the WLC. It too is on Vlan 6 and it is connected to the 4506 on int gig 4/33 which is an access port. [code] I am doing local authentication, so i have added users to the WLC.. My problem is that the first client that connected was able to get an IP address and connect to anything internal and external.I then connected another client on another laptop and that client could connect but not get an IP address, it just self assigned.When i look at the clients i can see the MAC address of both Clients on the WLC, but doing a show mac address-table dynamic i only see the MAC of the client that works properly. The client that doesnt get an IP has no entry in the 4506 switch.I am stumped, from what I understand, is that the 2nd clients traffic is being trunked to the WLC , hence it has the MAC address. But I dont know why its not getting a DHCP assigned IP address.
I am currently having some problems on our 5520 ASAs. The problem is the IPSec VPN clients not being able to connect. We have had an issue twice this week where this happened. Earlier in the week we had folks not able to sign in, but some folks who were connected already stayed connected. The ASAs had been up for 200+ days and no changes have been made to it recently. At that point I had to reload the ASAs so users could start signing back in to it. Today we had a similar issue, but I didn’t have to reload the ASAs. The issue‘resolved’ itself. The VPN clients are getting Error code: 433 and the ASAs are getting Reason: Peer Address Changed when this occurs.
ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz version 8.3.2.
I have a WAP4410n which has been configured with a single SSID since implementation several weeks ago with no issues. I am now trying to add a second SSID and not having any success. Originally the second SSID was not being assigned a MAC address and thus not being broadcasted. After upgrading firmware to 2.0.4.2 I now see a MAC address associated with second SSID and it is being seen by clients, but they still cannot connect. I reset the AP to default settings and reconfigured from scratch but still no luck. I have two of these APs, the other one is still at FW rev 2.0.1.0 and has same issue (it does have MAC address associated with second SSID so I didn't bother upgrading firmware yet).
I have tried a few different authetication options, including disabling authentication, to no avail. Question - I do not see an IP address associated with the second SSID - is that the problem and if so, how do I fix that?
I have a AP1240 Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1), and want to configuration WPA2 without using Radius.But my clients can not connecto to AP. On AP always display messages "%DOT11-7-AUTH_FAILED: Station 0026.6609.e55d Authentication failed"
Here is my configuration:
version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname AC1P1F08
I have a Netgear WNDR4500 running the stock firmware, acting as a router for my home. I also have 2 routers that are flashed with DD-WRT (Linksys WRT54G and Asus WL-520GU) running as client bridges. The Netgear is 192.168.1.1 and the other 2 client bridges are 192.168.1.2 and 192.168.10.3. The Netgear router is performing DHCP giving addresses from 192.168.10.100 to 192.168.10.254. I have numerous machines connected to the Netgear, wirelessly and wired, and numerous machines wired to each client bridge. All machines have IP addresses that are 192.168.10.100, 192.168.10.101, 192.168.10.102, etc... Everything is working fine, but I have one question: When I access the Netgear router, it shows the client bridges as clients, machines that are wired and wireless to the Netgear router are listed as clients, but the client list does not show any clients that are connected to the client bridges. I assumed that since the router is performing DHCP that all clients would show up.
I'm having a tough time with VPNing into work.I'm the network admin.I set up the Windows 2003 RRAS server. I'm finding that the remote clients have "either / or" connectivity.Once a client is connected, it either has local Internet without LAN resources OR it has the needed LAN resources but no local Internet.I can watch continuous pings work, fail and start up again depending on the VPN connection.
I have 19 locations, each with 1 or more LAP1142N AP's in FlexConnect mode, AP's are primed using CAPWAP to my 5508 WLC at the datacenter. The AP's join the WLC without issue every time. I have two WLAN's, one guest and one staff, the guest network is open and obtains DHCP from a WatchGuard XTM33 firewall at each of the remote locations. The staff side is WPA2/RADIUS and DHCP is assigned from the WLC. Each AP is assigned a static IP that is not in the DHCP scope. For example: DHCP scope on the branch firewall is 192.168.1.10-250 the AP will be assigned static IP of 192.168.1.1.. The AP's are connected to a HP procurve switch that has a untagged VLAN, the firewall is using the native vlan 1 and so is the AP.
I have been running this network for over a year and it has not had a single issue until the last two weeks. Nothing on the network has changed or has been upgraded.The issue I am seeing is that clients are no longer able to connect to the AP and do not get DHCP assigned to them. I am able to get it working, if I remove the static IP from the AP, the AP will reboot, join the controller, then begin working, users can connect and DHCP is assigned from the firewall as it should. However, If the AP then reboots, the AP will join back to the controller but no clients can connect nor do they get a DHCP address. So, I then reassign a static IP to the AP again and it reboots, connects to the controller and clients then can connect and get DHCP.i've found several posts on this topic, in fact the patch of unassigning or reassigning static IP is one that I found. I am also waiting on my SmartNet to start up and will be contacting Cisco support as well.
I am using two AIR-CT2504-K9 controllers Product Version.................................. 7.4.100.0 Bootloader Version............................... 1.0.16 Field Recovery Image Version..................... 1.0.0 Firmware Version................................. PIC 16.0
and 20 access points AIR-CAP2602I-E-K9 Cisco IOS Software, C2600 Software Version 15.2(2)JA, RELEASE SOFTWARE (fc1) LWAPP image version 7.4.100.0
I created 3 SSID: 1. [WPA2][Auth(PSK)] 2. Web-Passthrough 3. [WPA2][Auth(PSK)]
Configuration on controllers is identical. High Availability is configured on all APs. First controller controls only those APs witch have SSIDs with [WPA2][Auth(PSK)], second controller is basically for APs with Web-Passthrough SSID. From the start I have problem, some clients who try to connect to SSID with PSK are dropped or can’t connect entirely, but when they go to the next AP they connect successfully. For example I have Android smartphone and Lenovo laptop, smartphone connects successfully but laptop fails connection to the same AP, but when I take it to other AP it connects successfully. Sometimes smartphones can’t connect too. When devise can’t connect to one SSID it can’t connect to other SSID either. Sometimes there are up to 20 clients tying to connect to the same AP.
When I look into logs, I get these two messages:
Jun 3 08:58:58 192.168.224.1 WLC1: *dot1xMsgTask: Jun 03 08:58:51.176: #DOT1X-4-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:456 Max EAPOL-key M1 retransmissions exceeded for client 7c:e9:d3:f4:74:4d
AP has static IP with 2 SSIDs setup, one for guest one for domain access(both have the same issue), tried with multiple devices, both win and MAC, all show "connected but with limited access", ipconfig on those devices, all show ip "169.254.X.X", but event log on AP indicates that "authentication has been completed sucessfully".
using RADIUS server for authentication. management VLAN ID "1", SSID VLAN ID "11"
I have a Cisco 1841 router that is connected to a switch. I have WAN/LAN configured on the router and the switch is handing out internal IP's. The issus that none of the client machines can access the Internet. From within the router console, I am able to ping external domain names, my ISP DNS servers.
Once the client machines picks up an IP they are unable to ping any external domain names or IP's and not even the ISP DNS servers, but they can ping the Cisco router IP. As a note I have tried my ISP DNS servers and as a test Google's DNS servers, but neither will allow access to the Internet.
Below is the current running config:
Building configuration...
Current configuration : 1440 bytes ! version 12.4 service timestamps debug datetime msec
I have an WRVS4400N configured as a WAN and Wireless router and can connect clients (PC's and laptops) wirelessly thru out the office. The clients that are farther away (10-15 meters and on another floor) connect at a very slow rate i.e. less than 10MBps. I have a WAP4410N configured as a repeater. Immediately after powering up it will allow connections to the 4400 and clients work fine for a 1-2 minutes, then the connections drop and I can no longer connect through the 4410. Nor can I ping the 4410 through the 4400 although right after the pwr cycle I am able to ping the 4410. After another pwr cycle the 4410 is available for another short period.I have attached some info on the configuration of the units and I also have the configuration files available.
I have a 5508 WLC and 40+ LAP1142N APs spread across 19 locations that allows staff to connect to our private network via wireless. I recently deployed about 40 new laptops all identical make and model HP ProBook 4530's and all have the same client setup for the wireless. Out of those 40 laptops I have 4 that will not connect to the private network. However, these same laptops will connect to my public, open wireless network without issue. In addition to the 4 that will not connect all the others will prompt twice for network authentication.Now, I have about 10 other laptops that are not the HP model and all connect without issue and without dual propt. I don't think this is a wireless network issue but could be some type of issue with this model of laptop.
While trying to connect to WiFi at remote sites APs, the connection is getting time out.User are getting error as 'Unable to connect to <WiFi-SSID>' The APs at corporate office are functioning properly and user are able to connect to the APs.
I was so fed up of using the out of a box routers from PC World or the provided router from the host that I decided to splash out and buy a decent router.The Cisco 887 came highly recommended and seems to be a great purchase so far. Our down time and internet hangs vanished overnight.Having had this installed for several weeks now I thought it was time to look at my problems with it,I have 2 broadcom network cards, 1 for the LAN and 1 for the WAN, All machines connected to the LAN get full internet access but my server will not.
The router plugs directly into the Server (2008) with an IP address of 10.10.10.1 - this is listed under the LAN settings in Cisco CP Express.I have a fixed IP address which appears to be set up correctly and all my terminals / client pc's that are plugged through the switch. These all show IP's that look like 192.168.1.x / I am not an IT wizz kid but I know my way around a computer pretty well. I am guessing I need to move the router IP to within range. At present the Server sorts out the DHCP and we also have a VOIP phone system.
I have a DVR installed inside my network with local ip address 10.0.0.117/24 and i need to access it from the internet. there is a pix 515e (ios ver. 6.2) between the internet and my internal network. I've configured NAT from inside to outside to allow my internal clients to access the internet. but i need to allow external clients from the internet to access the DVR. I've tried to configure it on my pix but i found it doesn't have more options for nating like ASA.
is there any way to do that on pix and if so what the correct commands to do that.
I have a network of 50+ users with half running XP and half running Windows 7. Soon we will be upgrading all users to Windows 7. During the past month a number of the Windows 7 users have reported intermittent Internet connectivity. I would go to their computer and see that they are getting all the correct IP information from the DHCP server and reboot their network adapter. Usually one reset of the adapter would do, but sometimes had to reset it twice or three times before connectivity would occur.
After a few weeks of this more users would report consistent intermittent connectivity. Just to the Internet, as they were able to reach their folders on our file server and were able to receive e-mails from our e-mail server. I decided to monitor the network traffic on one of the adapters having the issue using Wireshark, and found an ARP request and reply for the gateway IP. I logged into the router and found that the reply given to the Windows 7 machine was incorrect, as the MAC address given to the Windows 7 machine was the WAN1 port of the RV082. The LAN port on the router is 192.168.0.1 and has a MAC of xx-xx-xx-xx-xx-x0. The WAN1 port on the router has a public IP and has a MAC of xx-xx-xx-xx-xx-x1. I checked the arp cache on the Windows 7 computers and confirmed that when they have no internet connectivity the ARP cache reads like this: 192.168.0.1 xx-xx-xx-xx-xx-x1 dynamic
The machine is able to ping every machine on the internal network except for the gateway IP. Also, after updating the cache to map the gateway IP with the LAN port MAC address, using: netsh interface ipv4 add neighbors "connection name" 192.168.0.1 xx-xx-xx-xx-xx-x0
the issue was resolved for that Windows 7 machine. However, the issue is ongoing for every Windows 7/Vista machine added to the network. I do not want to update the ARP cache on every Vista/7 machine introduced to the network.We are running firmware 2.0.2.01-tm which was updated from 2.0.0.19-tm just 2 weeks ago.
I am using the WAG-120 N as an AP and switch for 3 laptops and 2 desktops. Our department is assigned only one Static IP from our server, so only one pc can connect to the server and the internet. I use the first lan port of the Wag-120N as a WAN port and i assign the Static IP address there, along with the subnet, default gateway and DNS addresses. The connected clients are assigned then an ip address from the router's DHCP (192.168.1.10x), but cannot connect to the internet. How can i configure the router to allow the clients to connect?
I have successfully configured my DHCP server because I can ping it from the clients PC and my clients PC automatically grabs IP from my DHCP. How my clients can have access to internet. Here is my hardware setup: 1. I connect clients PC and one DHCP server in one unmanaged switch2. I have my Bell DSL Modem but not connected yet to one of these machines. I do not know how I can configure it yet to work with my machines.The IP I assigned started at 10.10.200.10 to 10.10.200.90How do I connect the DSL and configure so that it may give everyone access to internet?
