Cisco WAN :: BGP Setup With 2 2900 Routers And One Sonicwall
Apr 24, 2013
I am looking to setup for BGP with the following conditions:
Client has two 2900 routers, each connecting to a seperate ISP
Client has a Sonic Firewall with a link to each router
Client owns their own /24 block of public IPs and has their own AS Number.
Client has a public /24 and /25 from the corresponding ISPs
Client has supplied the following routing rules they would like to use:
-Anything from their own public subnet should advertize via the two ISP's with best path selection
-Anything from the respective ISP public subnets should use only their link (The ISP's are not auth'd to advertize the other's network)
The two routers are directly connected to eachother and each has a link going to the Sonicwall.
View 5 Replies
ADVERTISEMENT
Feb 17, 2011
We are in the process of switching to a new internet provider in our office and have run into some problems. Our old setup was with AT&T, where they provided a managed router which linked to our internal switch and also provided NAT to the internal IP of our email server.Our new setup right now is just the internet coming in through a cable connected to a switch, we were told we needed to provide our own router. Someone donated a Cisco 2900.What should our proper set-up be? Should the internet come in directly to the router and then to our switch, or should it go to the switch they provided, then the router, and then our switch?Also, there seems to be some confusion about whether or not we need anything else to get the internet to work. There are slots for network cards in the router. Does it come with at least one built in we can use, or do we need to provide one?
View 1 Replies
View Related
Nov 5, 2011
I am trying to setup a VPN tunnel between a Cisco ASA 5510 (Version 8.2(2)) and Sonicwall TZ200. I got tunnel up and going and I am able to ping the Cisco ASA internal IP from the Sonicwall LAN but nothing else works.
When I try to ping a host behind the Cisco ASA from the Sonicwall LAN I get the following message "Asymmetric NAT rules matched for forward and reverse flows;
[code]...
View 14 Replies
View Related
May 22, 2011
Hardware Configuration:
Office 1: Sonicwall TZ200 (192.168.11.xx)
Office 2: Sonicwall TZ100 (192.168.12.xx)
Home Office: Linksys RV042 v1 (192.168.13.xx)
The VPN tunnel between Office 1 and Office 2 is functioning.The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
View 4 Replies
View Related
Aug 9, 2011
Is there any suggested upper limit to a single EIGRP hub-and-spoke design (i.e. with a single central router)?
Router is a 2900 ISR
I'm vaguely aware of a similar design limitation with OSPF areas where no single area should contain more than 40 - 80 routers. Could be heresay...
View 13 Replies
View Related
Oct 14, 2012
Trying to set-up a p2p link between a L2 fast ethenet module (within a 2900) to a 6506.Have created a subinterface SVI on the 2900 and put the fast ethernet port in the respective VLAN. However on 6506, am I correct in thinking I can do a no switchport and just create a L3 interface? Do I need to put the 6506 in the same vlan and the fast ethernet module and create a L3 SVI on it? As it's not a trunk port between the 6506 and the fastethernet module, the packets won't be tagged?
View 3 Replies
View Related
Mar 25, 2013
Is there any suggested upper limit to a single EIGRP hub-and-spoke design (i.e. with a single central router)?Router is a 2900 ISR,I'm vaguely aware of a similar design limitation with OSPF areas where no single area should contain more than 40 - 80 routers.
View 8 Replies
View Related
Oct 26, 2011
I am doing a comparative between cisco and sonicwall routers. Which router would better fit me? i need it to support at least a 20MB internet connection in a datacenter and has to have a firewall included. I was thinking about a router 1941. What do you think ?
View 1 Replies
View Related
Aug 25, 2011
If there is a router ISRG2 2900 with SEC license and without HSEC license, there is a limit in count of cumulative encrypted VPN tunnels of 225. Which commands can show us a number of current tunnels on the router, so we can see if we are near this limit of 225?
View 4 Replies
View Related
Dec 13, 2012
I want to configurate Cisco SSL AnyConnect VPN on cisco router 2900 series.when i install this license on router after that can i configurate ssl anyconnect vpn? Must I be first enable EULA then install this license?
View 0 Replies
View Related
Jun 15, 2011
what is the maximum number of Lan-to-Lan and user vpns supported in the ISR G2 2911 and 2921?
View 5 Replies
View Related
Oct 23, 2012
I have a customer that has a Cisco 2900 Series ISR on his Headquarters, and has some branches with RV082s.We have VPN Client configured on the 2900 ISR Router and we can connect remotely using the VPN Client to the Headquarters (192.168.1.0) however we can't reach the branches subnets (192.168.2.0, 192.168.3.0, etc.)... we found out that in the RV082 you need to specify the secure traffic as a destination, but in only supports one network (192.168.1.0 or Headquarters in this case), we can't specify the VPN Client pool defined on the ISR so it can reach the incoming VPN Clients.Is there any way to accomplish this? We need to access the branches subnets when connecting using VPN to the 2900 ISR.
View 1 Replies
View Related
Nov 8, 2011
Is there a way to set up Quick VPN on the RV120W without changing the internal subnet? I have just taken over responsibility for a network and I don't know all of the nooks and crannies yet, so I'd rather not change the internal sub net. I've tried setting up a user then changing the LAN settings afterward, but it automatically removed the VPN user when I did so.
View 1 Replies
View Related
Jan 1, 2012
I've just purchased a couple of SRP527W routers. I've been unable to even browse to the default 192.168.15.1 to start my configuration. My local network is 192.168.1.x. At risk of showing my stupidity, what am I doing wrong.
View 5 Replies
View Related
Oct 29, 2012
I have two CISCO 2800 routers tied together over a Metro Ethernet bewteen an HQ location and a Colocation facility. There are multiple subnets on both sides of the MAN. All things work in this regard.
I added two new Interfaces to the routers to create a VPN failover should the above MAN go down. I use IP SLA to track the MAN, then move to the VPN route when reachability is down.
I can source ping from one CISCO router Interface to the other, through the two interfaces to the Sonicwalls and reach the router interface of the CISCO on the other side of the VPN tunnel.
Problem: I can not ping any subnet behind the interface I ping through the Sonicwall VPN tunnel?
Example 2800 G0/2 interface 100.1.1.41 /30 through Sonicwal over Internet to other Sonicwall and out ot the G0/2 100.1.10.41 /30 interface on the other 2800 router. Ping is fine.
View 15 Replies
View Related
Aug 16, 2011
I am building the VPN with Sonicwall and Cisco Router, the VPN status is indicated ok on the Sonicwall and able to ping only,I know it required ACL on Cisco but it failed, I cannot ping the sonicwall from cisco, the access from external to cisco internal is also fail.
Site A SonicWall = 192.168.1.0Site B (Cisco) = 192.168.143.0
crypto isakmp policy 15encr 3desauthentication pre-sharegroup 2lifetime 28800crypto isakmp key XXXXX address 118.142.###.###crypto ipsec security-association lifetime seconds 28800crypto ipsec transform-set T1 esp-3des esp-sha-hmaccrypto map tosonicwall2 15 ipsec-isakmpset peer 118.142.116.146set transform-set T1match address 110 ip nat inside source route-map nonat interface Dialer0 overloadip nat inside source static tcp 192.168.143.20 80 202.64.135.### 80 extendableip nat inside source static tcp 192.168.143.20 3389 202.64.135.### 3389 extendable!access-list 1 permit 192.168.143.0 0.0.0.255access-list 110 permit ip 192.168.143.0 0.0.0.255 192.168.1.0 0.0.0.255access-list 110 deny ip 192.168.143.0 0.0.0.255 anyaccess-list 115 permit ip 192.168.143.0 0.0.0.255 anyaccess-list 115 deny ip 192.168.143.0 0.0.0.255 192.168.1.0 0.0.0.255no cdp run!route-map nonat permit 10match ip address 115!
View 7 Replies
View Related
Feb 4, 2009
We have a several SonicWall TZ 190 establishing VPN tunnels with a ASA5520. Pericodically random VPN tunnels will drop and can not re-establish a connection. In order to re-establish the dropped VPN tunnel, our firewall folks manually drop all VPN tunnels connected to the ASA (they use to physically power cycle the ASA). They claim this is the only way to resolve the problem and since the SonicWall Life Time seconds for Phase 1 and 2 are set to 28800, they reset the tunnels every 8 hours. Additionally, they claim that SonicWall IPSEC is different that Cisco IPSEC which is the main problem. Hence they are requesting a SONICWAll VPN concentrator..
View 4 Replies
View Related
Feb 8, 2011
My SIP trunk provider uses a SonicWall Pro 3060, I need to initiate a IPSec VPN tunnel from an ASA 5505 (ASA1) for SIP traffic to a PBX connected on ASA1's inside.ASA1 should also connect a VPN to ASA2, ASA2 has a fixed IP I have not been able to figure out how to initiate the tunnel from the ASA1 to the Sonicwall due to the dynamic IP.
View 3 Replies
View Related
Oct 5, 2012
My internet line is coming directly into HUWAI router and from here its supplying to sonicwall TZ210 WAN port.I have a domain from dyndns.org that is set right now in sonicwall. But when I browse this domain from outsde it opens my HUWAI router login page and I want it to open my SONICWALL login PAGE.
View 2 Replies
View Related
Mar 18, 2013
Which is a better firewall without looking at all the additional services you can purchase on a Sonicwall.
View 19 Replies
View Related
Dec 11, 2012
It's been awhile since work has thrown me a curve ball so I was about due. We've got a client that wants us to log into their secure portal, this is normally not a issue. The link they sent us to their 'portal' apparently takes us to the wrong page. Their solution to this is for us to create a DNS entry to resolve that URL to a specific IP address. We don't currently have a DNS server setup in house so I assumed this would be something done on the Sonicwall.
I asked them why I couldn't just go to the IP address instead of the URL anyway and they said it wouldn't work. Is this something that I can maybe create a NAT Policy for and have it redirect traffic to there? I know the SonicWall has a DNS tab but I've never touched it and I'm not sure what I would need to put in there anyway.
View 7 Replies
View Related
Dec 9, 2012
I'm having a hard time finding which Verizon 3g usb phone cards that will work with a TZ105. How to get it working on a TZ105, what usb phone card you're using and the phone provider. Sonicwall support is telling me there are no verizon cards that will work right now. I have my Sonicwall vendor looking into it, but still haven't heard back from him either. So at this point I'm looking for any USB 3g phone card that is known to work.
View 11 Replies
View Related
May 19, 2011
Hardware Configuration:
Office 1: Sonicwall TZ200 (192.168.11.xx)
Office 2: Sonicwall TZ100 (192.168.12.xx)
Home Office: Linksys RV042 v1 (192.168.13.xx)
The VPN tunnel between Office 1 and Office 2 is functioning.
The VPN tunnel Office 1 and HomeOffice has been established, BUT I cannot ping any subnets across the tunnel. I have tried different settings, and will post the current configuration later.
this setup and can post their respective settings.
View 2 Replies
View Related
May 15, 2013
I am attempting to get a NAT connection to work through a Sonicwall TZ200 to a VLAN defined on a Cisco 3750 switch. So far I have not been able to get it to work. I am able from the VLAN to access the internet and devices on another VLAN.
I have reviewed the configuration of the Sonicwall with Sonicwall support. They checked and see no issue with the configuration. I have the NAT gateway set to the vlan gateway IP address.
Are there any particular configuration options that I need to set on the 3750 switch in order to be able to route the traffic from the internet to the VLAN?
View 4 Replies
View Related
Jan 11, 2012
I have my modem then a switch, and two gateways a Cisco 800, and a sonicwall tz170.The Cisco isn't managed by me, it's on a 172.18.2.x subnet and I only have about 12 addressable IPs.I manage the sonicwall and have all 254 addresses open. The computers have to stay behind the Cisco because it connects to a VPN that the line of business software uses.
I can't connect the two gateways by VPN because I cant control the Cisco.How can I get these two to talk? I have a new server on the sonicwall network and an old server on the Cisco network. I want the computers to be able to see both servers
View 13 Replies
View Related
Apr 5, 2011
How do I block specific domains (pandora.com, etc.) in the Sonicwall? It seems like this would happen in the CFS but do I need a subscription for this? I don't want to subscribe to Sonicwall's filtering list, I just want to block a couple specific domains.
View 9 Replies
View Related
Mar 24, 2011
At work, I am able to connect to sonicwall and log onto SAP.At home, I am able to connect to sonicwall, yet I can't get onto SAP.I am sure that this is a non-SAP related issue because I can use other VPN's to connect to other SAP systems. In control panel -> view network status, sonicwall says 'unidentified network' which I believe is causing the issue. Normally it wouldn't say this
View 1 Replies
View Related
May 10, 2011
I need to replace my old sonicwall firewall. I was looking at the latest Sonicwalls, but they are really expensive if you get all of the services. For the TZ 210 - if I go for just the firmware updates without the gateway security services, how much better of a firewall is it than a Netgear fvs336g?
View 3 Replies
View Related
Dec 17, 2012
Not sure what's going on with this thing. Unfortunately I'm 3 hours away from where it's installed. We put it in place about 3 months ago. It's set to use failover and load balancing. When I installed it I tested the failover and load balancing and everything worked as it should. The past 2 weeks the unit has not been failing over when one ISP drops. This requires a power cycle of unit to get the secondary on X2 to pick up. Data collection is turned off. Probing is turned on for both WAN ports. While both ISP's are up it load balances fine. I was there last week and pulled the patch cables going to the modems and it didn't skip a beat doing a constant ping. Just randomly it takes a shit when one ISP goes down. Takes out the network as well as no internal resources are reachable as well. Can't ping the server from any PC's and such.
It's running an older firmware. 5.5.6 from Nov 2011. 5.8 is currently available. I'm just leery about flashing a new firmware remotely.
Anything like this before with these units? We have plenty of 170's and 180's in place that are trouble free.
View 6 Replies
View Related
Oct 17, 2011
I am looking for a Cisco firewall to replace a Sonicwall NSA240 firewall in SME environment?
View 3 Replies
View Related
May 24, 2011
I am trying to make an IPSEC tunnell between a 857 and a Sonicwall NSA240.The tunnell goes up but the traffic from the 857 seems to be pushed outside the router to the public internet, not into the tunnel.
Following configuration:
crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 lifetime 28800crypto isakmp key xxxxx address 111.111.111.111 no-xauth!crypto ipsec security-association lifetime seconds 28800!crypto ipsec transform-set xxxx esp-3des esp-md5-hmac!crypto map xxxx 1 ipsec-isakmp description VPN to xxxx set peer 1111.111.1111.111 set security-association lifetime seconds 3600 set transform-set xxxx set pfs group2 match address 115
ip forward-protocol ndip route 0.0.0.0 0.0.0.0 Dialer0!
access-list 115 permit ip 172.28.3.0 0.0.0.255 192.168.22.0 0.0.0.255
If I try a traceroute the traffic is not pushed into the tunel but it seems the it tries to route the traffice over the internet using Dialer0.
View 4 Replies
View Related
Sep 16, 2012
i have one sonicwall NSA 240. it is directly connected to ISP and other interface connected with cisco Layer 2 switch. my que. is that. how to access that sitch remotely ??
sonicwall 1st interface connected with ISP (pubilc IP) and 2nd interface connected with cisco switch with private IP bocz there NAT configuration. i m able to access sonicwall and i m getting ping up to sonicwall bt i cann't able to ping cisco switch.. i think some i need a some missing in sonicwall configution like telnet or VPN
View 1 Replies
View Related
Mar 20, 2011
When I start the installation of sonicwall vpn client 2.4 in Windows 7 that sends me the following message "unable to manage networking component. operating system corruption may be preventing installation".I use the version 2.4 Windows 7 32-bit?
View 2 Replies
View Related
