Is there any documentation on how to extend a VLAN over WAN using a ASA 5520 appliance?I will be inheriting the network appliance and need to make the configuration change.
View 2 RepliesI am having an issue where I can't get to external network sources via my sub interface which is attached to a 192.168.10.X VLAN I created to for Guest wireless traffic. The internal interface is a 10.5.X.X network. I can get out the external interface, but anything that we have A records for such as our mobile iron server that we can hit from the outside via https and an external IP can't be hit from the subinterface at all. Would this be a DNS rewrite issue or inspection problem?
View 3 Replies View RelatedI have an ASA 5510 and would like to extend one of the subnets behind this ASA out to my house that has a cable modem, a wireless router/switch and then behind that I have a 2821 router. I've been reading and it looks like L2TP may be the way to go but can't find and config examples. Again, I would like to securely extend one and nail up a permanent connection of one of the VLANs in the production network all the way into my house using my cable modem and the 2821. Any config examples! Also, any IOS recommendations for the 2821. Lastly, does L2TP look like the way I need to go? I'm attaching a very basic Visio diagram of what I'm trying to do.
View 4 Replies View RelatedI am having soem difficulty getting documentation and setup procedures for the new ASA 5512-X (or X models in general) firewalls.I know the IPS sensor is a software-based one, but I'm not sure how much different the setup in than with a 5510 and IPS module.
Also, is the IOS upgrade procedure different?
I have connected an ASA 5520 firewall DMZ to SERVER (17) vlan in core switch and INSIDE is connected as trunk to the core switch (including vlan 15,18). now the management ip of the switch is 10.xx.xx.126/25. and the other vlans are showing "administratively down"..but if I enter to any of the other vlans and do a "no shut", that particular vlan wil go UP but the other 2 will go down..means only one vlan become up at a time.
View 4 Replies View RelatedI have connected an ASA 5520 firewall DMZ to SERVER (55) vlan in core switch and INSIDE is connected as trunk to the core switch (including vlan 66,77). now the management ip of the switch is 10.xx.xx.126/25. and the other vlans are showing "administratively down"..but if I enter to any of the other vlans and do a "no shut", that particular vlan wil go UP but the other 2 will go down..means only one vlan become up at a time.
View 1 Replies View RelatedI would like to know if any of you know how to do a documentation of a network (Computer Network) in the topics of Remote Application, Users, and Group Policy.I have been trying to look for examples of documentations of those topics, but nothing.
View 1 Replies View RelatedHow do you create a vlan? In enable mode, there is no "vlan" command.
View 4 Replies View Relatedi would like to setup a L2 VLAN trunk connection over a VPN. I hear this can be done with a GRE tunnel. I currently have Cisco MWR2941's that i would like to configure the TRUNKs on then push them over a 5520 VPN ( IPSEC Tunnel ) to a 5510. on the other side of the 5510 i will have another MWR2941 to recieve the trunk.
how to configure this trunk or some configuration ideas?
good docs for configuring a 1260 autonomous AP?
View 1 Replies View Relatedwhere I can find detailed documentation on these two products. Particularly, I am looking for high availability capabilities and any license requirements.
View 1 Replies View RelatedI have 2 active sites (Site A and Site B), currently there are a number of vlans stretched between the 2 location via a layer 2 link. We are looking at a planned refresh and moving away from an layer 2 link to a layer 3 link. We are also deploying Cisco ASA5520 at below locations. I still need to be able to stretch the vlan between the 2 location and wondering how best to achieve this. Can this be achieve using Cisco ASA or do I require a layer of routers in from of the Cisco ASA to achieve this.
View 6 Replies View RelatedIs there documentation on setting the RV042G to Router Mode and what that changes to it's topography? The manual simply tells us to click the button to change the mode?!?!? A 4th grader could figure that out - but what does it do to the unit? Does it basically become a glorified switch with an internet connection? Can the 2nd WAN port be used as a switch node?
View 1 Replies View RelatedI have Cisco 881g with 3g.I can;'t find any documentation about sending USSD requests from 3g module.is it possible to send USSD request ?
View 0 Replies View RelatedI was reading the documentation of the Catalyst 4500-X for creating VSS and MEC (multichassis etherchannel).In the VSS specific part, it's written"Cisco Release IOS XE 3.4.0SG does not support Layer 3 MEC".
Can I still use VlanX interfaces ad route through them?In my setup I only have IP addresses assigned to vlanX interfaces (with some VRF-lite magic)[code] Does that sentence only mean that I can't have IP assigned directly to the MEC?
Site A:
ASA5520
VLAN data subnet 172.16.10.x/24
VLAN Voice subnet 10.0.0.x/24
Site B:
ASA5505 Base license
VLAN data subnet 192.168.10.x/24
VLAN Voice (restr) subnet 10.0.1.0/24
The callmanager is located on site A and needs to sent out DHCP-offers to site B through the VPN so the IP-phones can register to the callmanager. I got the VPN up and running for the data-subnet but i can't get traffic through the voice-subnet/VLAN.
Can the ASA's do the job or do I need to route traffic before the ASA's on both sides and sent it through the tunnel, configured both subnets as interesting traffic? Ofcourse the last situation I need to upgrade the license for the 5505 to gain more VLAN's.
We use Cisco Any connect with a Cisco ASA 5520 firewall. Today I changed the inside interface of the firewall's IP because i needed to do some inter vlan routing and needed to move the inside interface from the lan vlan to a routed port on our 3750.
Now people can vpn and authenticate to the MS radius inside but cannot access any network resources nor ping anything inside.
What are recommended commands to get input for network documentation (for disaster recovery)?
I've got 6500 with these modules: WS-SVC-FWM-1,
WS-SVC-IDSM-2, VS-S720-10G, WS-X6704-10GE, WS-X6748-SFP and dozens of WS-C3750E-48TD in couple of buildings.
So far I have these commands: Code...
I am a complete novice at networking, but I was tasked to have an ASA 5520 do inter VLAN routing (since my shop doesn't have a layer 3 router).As a basic setup, I am trying to have three workstations on three different VLANs communicate with each other. The attached screenshot shows the topology. I am unable to ping from a PC to the ASA...therefore I can't ping to other VLANs.
ROUTER CONFIG:
ciscoasa#ciscoasa# show run: Saved:ASA Version 8.3(1)!hostname ciscoasadomain-name nullenable password ###### encryptedpasswd ###### encryptednamesdns-guard!interface GigabitEthernet0/0no nameifno security-levelno ip address!interface GigabitEthernet0/1no nameifsecurity-level 100ip address 10.10.1.1 255.255.255.0!interface GigabitEthernet0/1.10vlan 10nameif vlan10security-level 100ip address 10.10.10.1 255.255.255.0!interface GigabitEthernet0/1.20vlan 20nameif vlan20security-level 100ip address 10.10.20.1 255.255.255.0!interface GigabitEthernet0/1.30vlan 30nameif vlan30security-level 100ip address 10.10.30.1 255.255.255.0!interface GigabitEthernet0/2shutdownno nameifno security-levelno ip address!interface
[code]....
I´m trying to configure a subinterface named Inside with vlan 1 but the interface stops work with this vlan.My switch is a Cisco and use the lan with vlan 1 too.If I change de vlan for other i.e vlan13 works fine. And all others vlans works fine too.Is there a problem to use the vlan 1?
My configuration is:
Cisco ASA:
interface gig0/3
no ip address
no security
no nameif
Interface gig0/3.1
vlan 1
nameif Inside
Securirity-level 100
ip address 10.x.y.x 255.255.224.0
The giga port of the swtich is configure to trunk model.
I have ASA 5520 and SSM-10 module. During copy between vlans, connected to gigabit port of asa the speed is up to 6,5 Mbyte/sec. Network cards and trunked switch are gigabit. I've temporarily disabled SSM but it didn't work. Here is my config. Also I found out, that putting SSM into bypass mode solves the problem. But I don't send any traffic to IPS. [code]
View 2 Replies View RelatedI Recently purchased the Linksys AE2500 adapter, upon looking at the advanced adapter settings, I couldn't find any more information pertaining to these settings on any linksys website or in fact online, where can I find a guide about these settings, Nothing about these setting was included on the CD.I set the basic one such as roaming aggressiveness but there are others that I would like to know about.
View 8 Replies View RelatedCurrently, we have a Cisco router (28xx), ASA 5520, and a core switch 4500. We have different vlans. We also have Auto QoS running for our Cisco IP Phones.My manager just asked me to see if I can either reserve some certain bandwidth for one vlan, or give that vlan higher priority on internet traffic than the others.
1.) Anyway we can reserve some more bandwidth for one vlan than other vlans?
2.) If #1 cannot be done, how can we provide higher priority on the internet traffic to one vlan than the others?
3.) Is #1 or #2 the same config? If not, which one would be easier (without changing our current QoS settings)?
4.) If 1 or 2 can be done, which device I should config the settings on?
5.) This question may be duplicate, but do we need to reset our current QoS to achieve the goal?
I have an ASA that houses 11 VLANs, and I am trying to add a 12th.One of the VLANs is for PCs that have internet only access.The new VLAN will be similar, but for multifunction printers only.VLAN 99 is for internet only and works fine, I can ping the gateway of 10.99.3.33 from any PC in that VLAN.I am creating VLAN 98, modeling it after VLAN 99, and I cannot get a PC in the vlan to ping the gateway of10.98.3.17.Both switch and ASA show the new VLAN 98 as UP, switchport is UP/UP.I have deleted and recreated VLAN 98 a few times, but I cannot get a PC VLAN 98 connectivity.Once it is working on the core switch, I will add it to the trunk to the IDS switches. VTP is not in use, everything is manual. [code]
View 4 Replies View RelatedI have a multiple Offices in my location , all my external users are connecting my site using Cisco Client to site VPN and accessing my 2 sites , All users are able to access my 2nd office servers which are in 10.10.0.x pool , I have a different vlan in that same location with 10.10.35.x series and users are not able to access this pool servers , I am not much familiar with Routing . i am using ASA 5520 firewall .
View 11 Replies View RelatedI am working for a large campus network. The network has more than 70 VLANS in a Layer 3 Switch(Catalyst 4503). Customer wants to stop intervlan routing between all vlans except 2 vlans. How will i do that? I have also a Firewall (ASA 5520) & a Router (2811) in up of the switch. Besides this, I have run HSRP in Layer 3 Switches for redundancy.how will i stop intervlan routing between VLANS except 2, with ACL or any other process has?
View 10 Replies View Relatedhow to conntect an old PC to a wireless broadband home network. I had set up wireless broadband at home on a laptop. Next I added a second laptop to the network just by entering the password that I had used when first setting up the wireless service. This PC does not have a wireless adapter nor ethernet ports.if addition of a wireless adapter card into a vacant motherboard PCI slot would be sufficient to extend internet access to this PC.
View 5 Replies View RelatedI Have a 2 Access Points First One : TP-Link TL-WR542g V7 and this is a Picture of it: url...i Have my Router on The First floor and My Wireless Enabled on it With WEP Encryption.i Need To Extend The Coverage to The 2nd Floor,By Using one Of my 2 AP's.Setting up my AP To Receive the Wireless Signal From My Router And Re-send it To My Laptop.."Wireless"..So i can Leave it only With AC Power ..And Still Streaming The Signal While my Laptop Receiving.
View 1 Replies View RelatedMy b/g/n router is at one end of the house and on the second floor needs to be. I currently have a b/g/n wireless bridge hooked to a LAN port of an b/g/n router that I am using as an access point almost in the center of the house, about thirty feet away with one wall between them. I get good connection speed on an Internet TV that's about 7 feet below the access point with one floor/ceiling between. I get a reliable but slow connection to an Internet TV that is about 20 feet from the access point with two walls between. I get intermittent, slow connections with portable devices near the opposite end of the house on the first floor. Measured horizontally, they are within 15 feet of the upstairs TV that has a slow connection and about 9 feet below it.
The ceiling of my unfinished basement stairwell is a few feet below my router. I am thinking of putting a wireless bridge in the stairwell and connecting it with ethernet cable to an access point located in the crawl space, which is very dry, under the house directly below the upstairs Internet TV. It would be about 12 feet below the TV with a floor and a ceiling/floor between. That location would put it within 15 feet of the wireless devices on the far end of the house that now have a poor connection, with only a floor between. My primary goal is to get a better connection for them, but I'm hoping for a better one to the upstairs TV. My house is of frame construction with mostly plaster interior walls.
I want to use a POE access point under the house because I think it would be easier and safer than running a long extension cord. Looking at POE devices in catalogs, it is often not clear to me whether the device in question expects to be powered over ethernet or expects to power other devices over ethernet.
I have the following questions:
Does my plan sound feasible, and would it be expected to accomplish what I want?
How can I be sure that, when I order a POE access point, it expects to receive power over ethernet, not provide it?
Can POE devices be cascaded? If I do this and find that I did not get the coverage I hoped and, therefore, want to add another POE AP, can I add a POE hub or switch and run cable from it to the additional POE AP? If so, is there any particular monclature for devices that expect to both receive and provide POE? Can such devices receive and provide over any port, or do they have to receive power on a designated one and provide it to the others?
We own two houses next door to each other and I have the first 655 set up as WAP, wired to second in other house as a range extender. Works perfectly. I would like to add a third 655 (wired to the second) to extend my range further.
View 5 Replies View RelatedWe are trying to config vlan 10 for data and vlan 20 for voice on the same port - port 1 of swtich SF300-24P to run both data and voice on different vlans.Do I have to add vlan 10 as an untagged vlan to port 1 and add vlan 20 as an tagged vlan to port 1?If I do not want to assign the native vlan 1 to port 1, how can I remove it ? The GUI page - assign VLAN to port does not allow to remove it.Aslo, what mode shall I set up on port 1? General, trunk or access ?
View 18 Replies View RelatedHow do I submit an RFE (Request For Enhancement) to the Cisco SBR team to encourage them to implement the missing support for VLAN to VLAN firewall rules that was available in the RVS4000 (See [URL]) and that was supposedly added to a beta release of the RV220W firmware (See [URL])?
View 1 Replies View RelatedBetween our hosting and a customer we have an extended vlan, traveling on a fiber, between two cisco 3560 switches.The thing is, that we want to create one or more vlans inside that extended vlan, in some way if possible?
View 3 Replies View Related