Branch office has 881 VPN router. Services that ignore MSS in packets don't work. Adjusting MSS has no effect since the services are ignoring that setting.works fine, but some Yahoo sites don't.Found a workaround for exceeded MSS for PIX and ASA (link below), but can't find anything for VPN routers.
View 0 RepliesBranch office has 881 VPN router. Services that ignore MSS in packets don't work. Adjusting MSS has no effect since the services are ignoring that setting. Example: www.google.com works fine, but some Yahoo sites don't.
Found a workaround for exceeded MSS for PIX and ASA (link below), but can't find anything for VPN routers.url...
I thought that in the past I had problems with my ASA5505 because I had to reboot a number of times, now that I have logging enabled I can see the following: -Deny traffic for protocol 17 src inside, licensed host limit of 10 exceeded.Does this mean that I can not have any more than 10 inside host going out of the outside interface at any time, if not what this means and how I can solve it.
View 16 Replies View Relatedi had a client request to block ICMP request on their 1841 WAN link. i've got ACL hits for ACE 170 but not for 171.
how to test or simulate for ICMP time-exceeded? is this TTL related and is there a DOS command or any way to produce ping packet with a less TTL count that would hit the ACL log? below is the config.
interface FastEthernet0/0
ip address 202.42.x.y 255.255.255.252
ip access-group IDS_Fastethernet0/0_in_0 in
ip access-list extended IDS_Fastethernet0/0_in_0
[code]....
I have had several complaints from around the firm where by mobile devices are being bumped off the PSK secured network (All other SSID networks are operating A-OK). Both Android and iPhone devices are being affected, the device will just loop until it reconnects, sometimes up to 20 minutes of trying to establish a connection. It will eventually connect so the key is not the issue.I've attached a debug of a device which fails to connect and then shortly after is successful.
Controller 5508 v7.0.116.0
AP 3502i IOS 12.4(23c)JA2
I am seeing the following log messages appear on our border edge 7600 router (SUP720-3BXL) The messages seem to appear when tag switching has been enabled on the interface, so somehow related I presume. The MPLS forwarding table is very small however. [code]
I can't see anything that is using up the ACL_TCAM HI BANK using "show tcam global acl" There aren't any ACL's applied to any of the interfaces, or policy-maps. The only ACL's in use are for SNMP, ntp, and VTY. These are very small any way. Interface Gi1/22, and 1/1 have tag switching enabled. [code]
The router has a full BGP routing table learned via an upstream (EBGP) peer neighbor, and an IBGP peer. The CPU utilisation seems fine, as is memory usage. CEF seems to be running okay. It's currently running [code] Are prefix lists part of TCAM? Is the router over-resourced holding a full bgp routing table?
I've just installed ACS 5.1 and noticed that it seems to count managed devices differently than previous versions.
I have a 500 count license which should be fine as I have about 100 devices which will use ACS for TACACS. On ACS 3.x and 4.x, I would set up AAA clients by using a wild card for the subnets that host our routers/switches, say 192.168.1.0/24, 172.16.1.0/24 and 10.1.1.0/24. when I do this with ACS 5, I get a Managed Device Count Exceeded error messasge becasue of the potential of more than 500 AAA clients. It seems to be counting every IP address in the subnet as a managed device, even if there are only a handful actually in use. Is there a way around this short of having to manually enter (and maintain) the exact IP Address of every managed switch and rotuer which will use the ACS server for TACACS?
I have an ASA 5520 running version 8.2(1) and I am having an issue with ASDM sessions.I can SSH into the ASA and have tried to clear the sessions but they do not clear as per below.
largoGW# sh asdm session0 dguselnx1 dguselnx2 dguselnx3 dguselnx4 dguselnxlargoGW# confi tlargoGW(config)# asdm disconnect 0largoGW(config)# asdm disconnect 1 largoGW(config)# asdm disconnect 2largoGW(config)# asdm disconnect 3largoGW(config)# asdm disconnect 4largoGW(config)# exitlargoGW# sh asdm session0 dguselnx1 dguselnx2 dguselnx3 dguselnx4 dguselnxlargoGW#
An interesting point: the host dguselnx is my linux based computer that I am using to SSH to the ASA. I do not connect via ASDM from this device so it is strange that the hostid for the asdm sessions is showing as my linux host and not my Windows laptop (that I am trying to connect via ASDM from).
I've just installed an SG300-28 (v01) switch configured in layer 3 mode with 1.0.0.27 firmware. It's working just fine except that when running a traceroute across the switch, it does not respond with an ICMP-11 time exceeded packet. Does this behavior persist in the current 1.2.5 firmware?
View 1 Replies View Related following errors.
Nov 7 21:34:50: %EARL_NETFLOW-SP-STDBY-4-TCAM_THRLD: Netflow TCAM threshold exceeded, TCAM Utilization [99%]
Nov 7 21:44:44: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM threshold exceeded, TCAM Utilization [91%]
I've already found this kinds of cases, in this community. So, It seems that Changing the current configuration to 'mls aging fast threshold ## time ## ' is most suitable in our situation.But, I don't know how to calculate the apt threshold value and time value.
[1] sh run | in mls
mls ip multicast flow-stat-timer 9
mls flow ip interface-full
no mls flow ipv6
no mls acl tcam share-global
mls cef error action freeze
[code]....
when do we get Desteination host Unreachable and time to live exceeded while trying to ping .
From 10.1.1.1 icmp_seq=2 Destination Host Unreachable
From 10.1.1.1 icmp_seq=4 Destination Host Unreachable
From 10.1.1.1 icmp_seq=7 Destination Host Unreachable
This is the error message I am getting on our ACS 5.1 appliance - is there anyway to purge the database or compact the file?
View 1 Replies View RelatedI get on-line, and the internet all-of-a sudden starts to show that I've downloaded my limit of 250MB. Now, I am on Hughesnet for internet service, can not get on DSL, wont happen already asked. Now, I am running a router, only way my wife and son can access the internet. They have laptops windows 7 and build-in Wireless Cards. I have a desktop windows 7. My updates are scheduled in the morning hours about 5AM so their is no reason for the computer to update. Same goes for my wife and son, their are set for early morning hours as well. I get an error message as soon as I click on my webpage that I want to browse, Internet Can Not Display The Webpage or something to that effect.
View 8 Replies View RelatedI have an e2000 wireless router. I have the latest software version for the Cisco software.I have noticed that Cisco sets up the same password to access the router setup page as the wireless password..Anyone that connects to the main SSID will be able to connect to the setup page at 192.168.1.1...I know that I can change the password in the linksys setup page to whatever I want, but then when I open the Cisco software, it wants me to change the password to match what the administrator password is.Don't they realize that a wireless password is different than the Administrator password to access the router settings?
View 5 Replies View RelatedI m having 2500 series router. when i boot router automatically get into router(boot)> . how to solve?
View 6 Replies View RelatedI want to use cisco connect with the Router E1200. There is a wireless connection between laptop and E1200 Router. When I run the "Cisco Connect" after couple minutes searching It can not find the Router and I have to put an (Router name SSID) and password.
View 9 Replies View RelatedI have managed to get the tunnel up and working and we are sending data via the tunnel from our Cisco VPN router to the Draytek and onto the clients server. (they , the client, have acknowledged that they are recieving and sending packets back to us).But, we never see any returning packets at our VPN tunnel endpoint. When we send I see the encrypted packet count go up , but the packet decrypt remains at zero, this is using show crypto ipsec sa | begin x.x.x.x.
We do have other working VPN solutions, but this is the first connecting to a Draytek. The ACL's are matching, and they have NAT turned off. The routing is fine or else the tunnel would not come up as are all the tunnel parameters, else our packets would not arrive at their server.
I configured dmvpn at cisco router 2900. one hub router and 3 spokes. all of them are working normally but tomorrow i see one error at at one spoke router.
error:
Maximum Tx Bandwidth limit of 85000 Kbps reached for Crypto functionality with securityk9 technology package license
I have a CISCO 851W router in the garage that I want to connect to my Linksys router in the office, which is connected to the internet.The 851W is connected from it's WAN port to Lan port 1 of the Linksys router. Now, currently that ethernet cable is a straight-through cable. Does it have to be crossover? If so, I can fix that.
I want the default gateway for the CISCO router to be 192.168.2.1. I am not sure how to configure that. [URL]
i'm currently doing task in this packet tracer, i've already completed 100% but i noticed that there are certain router cant send packet to the main router,i think the best way is to add default route, and i already add default route but it doesnt come out on the routing table,problem : HQ router cant send packet to ISP router?
View 13 Replies View RelatedI have two mac laptops and am trying to copy a directory with a number of PDFs in it. The files aren't particularly large, but there are many of them. At some point in the process the router stops and must be turned off and on before it will respond again either wirelessly or wired. I have tried the same experiment with both devices wired and the router works fine. I have tried changing the MTU, channel, beacon setting, etc. as other forum posts have tried. I tried reflashing the firmware, resetting to factory defaults and reconfiguring. So far no success. Cisco support wants me to return the router. Frankly I'm at the point of considering the former Linksys/Cisco products complete rubbish. I am going to have to buy a new router even if I return this one since I can't be without a router for any length of time.
View 8 Replies View RelatedWhy there is no parental control feature built in for WAP610N... how do i block website on all computers connected to my router?
View 4 Replies View RelatedWe have a home use WRT160N router linked to a PC desktop and two wireless laptops, Yesterday bought a new I-Phone, but could not link to my network (entered the security key many times). I accidentally connected to computer fix it firm that linked to my PC and wanted a large sum to fix the problem which he said was due to large number of temp?? internet files and once removed he would change the IP address of the desktop computer? Is this diagnosis logical and can I do it on my own. The router is definetely working - both laptops access the internet and I was recently able to hook up a Samsung Blu-Ray player using the same security code I used for the I-Phone.
View 1 Replies View RelatedIs the Linksys E4200 Dual Band Router compatible with DHCP and VPN?
View 1 Replies View RelatedThe router had firmware 2.0.x(?) and I tried to update to the latest FW, according to the webpage that's
FW_E1000_2.1.02.006_US_20130115.bin
Hardware is E1000 v2 according to sticker on back.The firmware update failed (no reason given) and the router now hangs in limbo where all it does is flashing the power LED.I set my PC to 19?2.168.1.2 and TFTP'd the firmware over to 192.168.1.1 - no errors reported and 192.168.1.1 is pingable. Held reset for 30s, then powered down the router for another 30s. On power-up the router still flashes the power LED.
I installed an IP camera, and had to change my E1000 router settings to a static IP address. Now I can't access the router settings. 192.168.1.1 is still the default gateway, but it won't open in any browser.
I'm reluctant to do a reset because it took me quite a while to figure out how to get the IP camera and port forwarding working (it does!), and I'd hate to do it all again and come to the same place. I'm not very good at this stuff, and it's a small miracle that I did it once.
Can you use your WRT54G router with the newer WRT310N router to extend your wireless signal? How?
View 7 Replies View RelatedThe standard Verizon router doesn't have Wireless N capability, so I got the WRT600N (first floor) a while back and connected it to one of the ports on the Verizon router (basement). I have the wireless turned off on Verizon router. My problem is that anything connecting to the WRT600N has extremely intermittent connectivity.
View 1 Replies View RelatedI just got E1000 cisco wireless router. Started setup, everything worked fine and replaced admin password with my own. For some reason got error message. tried to redo setup and got message router not recognized. used laptop and found out that wireless works fine. After few days noticed that there is a (mynetworkname) guest connection you can connect without any password. i don't need that stupid thing and my question is how to disable guest network? I cannot reach Main Menu from cd and have no idea where to look for it when i connect to router by web.
View 9 Replies View RelatedI I use a Linksys E3000 router. Sometimes when I look at the network map I see a device called "Unknown." It appears as though the two notebooks sometime are going through this device to access the Linksys E3000. (I've checked when both notebooks are on and I can determine what devices are connecting directly to the router and what devices are going through this unknown device.) Is there any way to determine what this unknown device is?
View 5 Replies View RelatedBEFSR81 v3.0.I selecting Enabled UPnP and now I cannot access the router. When I enter the default admin for the password in the Authentication Required screen. I get the following screen: 401 Authorization RequiredThis server could not verify that you are authorized to access. Either you supplied the wrong credentials(e.g., bad password), or your browser doesn't understand how to supply the credentials required.I didn't enter anything new into the username or password fields.
View 5 Replies View RelatedI currently have my wired cable internet hooked into my wrt310n. I have that hooked into a linksys 10/100 ef3124 switch. From there, I have cat5 run to the back of my house, where the wireless signal is weakest. I've got an E2000 router and would like to hook that in at the back of the house. What settings do I need to make in order to set up a completely new wireless network in the back of the house?
View 1 Replies View RelatedMy main Internet connection is a frontier modem /router It is on the main level of the house. In the basement I am trying to set up the cisco E3000 through an Ethernet cable.
View 4 Replies View Related