Cisco WAN :: Closing TCP Ports 2001 / 4001 / 6001 And 9001
Oct 31, 2011
Our security department wants me to close tcp ports 2001,4001,6001 and 9001. Below is part of my configuration
Interface Fastethernet0/0
IP address X.X.X.x
ip access-group control out
ip access-list extended control
deny tcp any any eq 2001
deny tcp any any eq 4001
deny tcp any any eq 6001
deny tcp any any eq 9001
permit any any
When they do a scan outside the company network is still shows up open. I have tried both a ip access-group in and out and it never seems to hit the ACL. The scan being done is on the f0/0 ip address.
View 18 Replies
ADVERTISEMENT
Mar 17, 2011
We have two WAP2000's in our offices which we roam between depending on which office we are in. Lets call them Access point A and Access point B.Both are firmware 2.0.4.0 and have seperate IP addresses. Both are set up with two SSID's and VLAN tagging. Both handle connections just fine and can route traffic. Both are PoE and the catalyst switch reports PoE util at 25% over all of its ports.After 10 minutes of uptime, Access point B will close all of its TCP ports - SNMP, Web admin etc but does still handle wireless connections and traffic correctly. Access point A does not close any ports.I have confirmed that when the problem happens, Access point B still handles traffic just fine by checking the MAC address the clients is associated with, as well as powering down Access point A and confirming traffic is flowing. Access point B will also respond to ICMP ping after it has closed all of its management ports. I have confirmed there is no other device on the network attempting to use the same IP address as Access point B.
I have also confirmed that I am attempting to access the management ports from the management Vlan (1) - else I would not be able to reach Access Point A's management ports either. I have turned wireless management access on for Access point B and the ports close after 10 minutes of uptime from the wireless side too, so highly unlikely this is a vlan issue.I have confirmed all of the settings (bar the IP address config) exactly match on both Access point A and Access point B. The firmware revisions are the same.
View 2 Replies
View Related
Feb 3, 2012
As my main router i have the CISCO 880G with the ip 192.168.1.1 at the ethernet interface 0 and my WAN connection at my ethernet interface 4.If the other end of my cable from ethernet intrface 0 i put it to another device which has the IP 192.168.1.2 to its WAN port and define the DMZ port of that other device as transparent with rules to pass all but to register and filter some things.When i have them like this i cannot reah to neither CISCO neither other device with ip 192.168.1.2.
View 1 Replies
View Related
Nov 17, 2011
I have 2 NX4001. Each one has an uplink to a 5K. There is no VPC between the 4K and the 5K. The 5K are VPC enabled.There is a large number on input discards on the 4001 interfaces connected to the 5K and is incrementing.I have a server with smartfailover that is flapping and I think the input discard might be the culprit.what is the cause on input discard. Note: All NXOS to the latest.
View 2 Replies
View Related
Apr 21, 2013
I need to open port 4001 on my router for someone to have access. I need to do this thru GUI. Cisco ASA 5505
View 5 Replies
View Related
Dec 2, 2011
My router shuts down after 30 minutes of inactivity. It starts up again when I try to access the internet but it is annoying to have to wait for it to "wake up". Is there a way to set my computer to access the internet on it's own after maybe 25 minutes by perhaps requesting a webpage, and to repeat this process every 25 minutes, thereby keeping the internet connection always open? It is an ethernet connection, not wireless.
View 2 Replies
View Related
Oct 29, 2012
there is a similar thread a few down that I saw. They suggested going into power management and disabling the shut down for network adapters. I did that and it didnt solve anything. So, on to my problem.It started a few days ago. Whenever I closed my laptop, put it into sleep, or hibernation, the connection to the wifi would be dropped and I would be forced to reconnect. I know it cant be my wifi because I did some tests at 3 separate locations and all resulted in the same effect. After closing my laptop, the wifi is dropped. I installed some updates from Microsoft. One in particular added the Remote Desktop Protocol 8.0. I doubt this did anything, but I figured I'd let you know. I would like to avoid have to re-install my OS and unfortunately my last back-up was a few months ago.
Lastly, my router has been doing something strange. Maybe a week ago, the signal radius seemed to have shrunk. I used to receive wifi all around my house, but now I only seem to get it when I am within 7 feet of my router. I updated the firmware. but the range is still small.
View 1 Replies
View Related
Jun 24, 2012
I'm trying to get an asa5505 set up so that our web server can send an LDAPS login to a client's server and receive the request back. The default IP our traffic goes out on is different than where I want the connection to come back in on. So, I set a NAT rule to send all traffic from a specific inside IP out a default outside IP. I also allowed LDAPS traffic from the client's server IP address in and have nat'd it back to the appropriate inside IP address. It seems to build the outbound connection fine, but then seems to drop it right away, which then seems to not allow the response back in. I've attached a picture of the log, with (what I think are) the lines in question highlighted. I'm far from a routing expert, but this seemed like a fairly easy setup.
View 1 Replies
View Related
Mar 27, 2013
I'm working on a 892W router.To close the session between the wireless device and the router's console, the command Control-Shift-6 x is required.The Issue is that this command is not working for me. I'm using a SuperPuTTY connecting tool.
View 7 Replies
View Related
Dec 15, 2012
When I try to open my bluetooth software, it just keeps closing...I've tried to reinstall earlier versions but it does the same. I have a dell xps studio 16 . What other information would I need to provide for a full diagnostic?
View 5 Replies
View Related
Jul 26, 2012
I have a ACE module A2(3.5) installed, I am having a connectivity problem between two servers in my network. I have captured some traffic on different points in my network and from capture it seems like the problem is with this ACE module or somehow it is closing the connection.
View 6 Replies
View Related
Feb 9, 2011
Last week I purchased the E4200 and for simplicity, I configured it with basic settings using Cisco Connect. Today, I went into the web interface. The only thing I did was review settings and get the Routers PIN (it appears that Intel Chipset cards on Windows requires this PIN?) Close the browser (did not save any settings) and now I am completely locked out of the device. Cannot connect does not accept the wireless password. I hard reset the device, ran through the wizard. Everything was working again. Launch the browser and connected to the device closing window and balm?
View 9 Replies
View Related
Jun 9, 2013
We have an ASA 5505. 5505 comes with two default vlans 1&2 with each of them marked as inside & outside respectively.My query is , if i do not want to use vlans on 5505 and only want to use the Ethernet ports as pure physical layer 3 ports, is it possible?i.e. i want to assign a layer 3 ip address on eth0/0 and eth0/1 and make them as the inside & outside interfaces rather than vlans. is it possible to do away with vlans in 5505 & will it work otherwise?
View 3 Replies
View Related
May 14, 2013
Is there a way to associate spare firewall ports with another port that is being used..For example...int gi 0/2 is being used currently for my web dmz. Its ip is 192.168.10.1..Is there a way for me to associate gi 0/3 with the same layer 2 as gi 0/2 ?
In my webdmz I use 2 ACE 4710 proxys in FT mode. I used a layer 2 switch to connect firewall and proxys together.
I would like to eliminate this switch if possible..and connect both 4710's (layer 2) direct to firewall.If I could make gi0/2 - 4 part of the same vlan, then I would be good to go.
View 2 Replies
View Related
Aug 7, 2011
How many of the 881 switch interface ports can be used as router ports, have used the 877 etc where i can use 2 but need a low cost router that supports 3 for routing. (needs to be physical ports)
View 2 Replies
View Related
Feb 2, 2012
One of techs accidentally connected two access ports from different switches together. Since then, LMS is alerting them as being Link ports down. I tried to default the config and set them to access ports without any success. what I should do in LMS to recognize them as access ports?
View 2 Replies
View Related
Nov 8, 2011
Is it possible to use one port on a cisco 837 ADSL Router as a wan port and others as LAN Ports if we don't want to use its ATM Interface?
View 3 Replies
View Related
Jan 30, 2011
I have seen several cases where ISP's block traffic on both UDP and TCP ports 135-139 even in core firewalls. Port 135 should be Microsoft EPMAP service and ports 136-139 should be NetBIOS services. However, why do ISP's sometimes block traffic on those ports?
View 4 Replies
View Related
Apr 8, 2013
i am deploying some SG 300's to some remote sites and will have static IP's assigned to them. the elements that will be plugged into the SG 300's ports will be DHCP. Is there a way to find out what IP's are assigned by port? Either by the Web GUI, the console, a log, etc?
View 2 Replies
View Related
Feb 10, 2012
I have a Cisco 877 connected to a VSAT modem, and I can't open ports outside, I dont know why?The Cisco 877 Fa0 port is connected to the VSAT modem at VLAN9, and the rerst of ports are connected to the local lan network at Vlan2. I can enter to Internet, but I can't open port outside. ADSL over pots is not used here.I need to open port 81 for ip address 192.168.1.130 and I dont know why this isn't working. Also if I do: sh ip nat translations I see this:
sh ip nat translations
cisco877#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 172.30.xx.122:81 192.168.1.130:81 --- ---
udp 172.30.xx.122:81 192.168.1.130:81 --- ---
[code].....
View 5 Replies
View Related
Apr 10, 2012
I've set up a WLC2504 with interface "mgmt" and "guest" (2 different VLAN IDs) both configured on port1.Now I'd like to be able to connect to PoE ports (port 3 and 4) 2 LAPs which should be able to get IP addresses from the DHCP as if they were connected to port1.
View 14 Replies
View Related
Jun 15, 2011
if i have four LAN ports on my modem+router , three of which are already occupied and i wish to add another three PCs to the same network, what hardware should i add to the fourth LAN RJ45 port so as to attach the other three PCs too.
View 1 Replies
View Related
Dec 31, 2012
So the 2T comes with 2 10GE and 3 GE uplink ports. Can you use all 5, one or the other, a mix, or what? How does that work? It's not really clear from reviewing the products webpage or data sheet.
View 3 Replies
View Related
Nov 11, 2012
I would like to know if I can connect 4 sets of NX5596 (each NX 5596 will have 5 NX2K attached) to one set of NX7010 (each NX7K has 4 X N7K-F248XP-25 modules) and using 16-way port-channel for each set? I did some digging on the Cisco website and noticed on some of the old document stated that the NX7K only support up to 8 active vPC ports between both vPC peers.
View 8 Replies
View Related
Oct 19, 2011
I wonder if any of you now if there exists a small IPSEC box that can be put between units that don't support IPSEC? I'm not looking for a Wireless router with a WAN port. Only a small box with 2 ethernet ports and IPSEC client support.
View 5 Replies
View Related
Jun 28, 2012
I have a telephony system already in place with 6 FXO active ports configured on a 2821 Router.The thing is that I am not able to make an ip phone forward calls to a mobile No.I can make calls to the same mobile number when dialed from the phone but the call routing seems not to function correctly when call-forward all is configured on the ephone-dn.I would like to focus only on voice-port 0/0/0 and 0/0/1?
voice-port 0/0/0
supervisory disconnect anytone
output attenuation -3
echo-cancel coverage 32
compand-type a-law
cptone GB
[code]....
View 3 Replies
View Related
Apr 24, 2012
We have a DVR here at work that has a web interface on port 100. From our internal network we just use http:192.168.100.40:100. What is the best way to set that up on cisco 5510 firewall. I have cisco asdm and set a access rule: enabled=checked ; source=any ; destination= 192.168.100.40 ; service= tcp 100 ; action=permit. It shows a couple of hits when I go to [URL]
View 7 Replies
View Related
Jan 9, 2013
I need to configure a Cisco 887va router for a customer with a firewall that doesn't support PPPoA. I basically need to ensure all traffic that is recieved from the internet (ADSL connection) is NAT'd to a LAN interface so the firewall can do the specific NATing. I have the following route map and NAT rule in mind, but what I am confused about is that if the atm0 interface needs to be configured as the outside interface and vlan2 as the inside interface. How will the following work?
View 0 Replies
View Related
Sep 25, 2012
I have a Cisco 5508 controller and am considering using LAG. Can I enable LAG but only use 2-4 of the 8 available ports on the 5508? I am asking because currently I don't have enough ports on my 3750G switch to accomidate all 8 ports on the 5508.
View 2 Replies
View Related
Sep 26, 2012
We just got a new ASA5510 (straight out of the box). I’m new to the Cisco but feel we followed the directions. We connect to the management port and have our workstation set to get an ip via dhcp. A cat5 is connected to the management port, that goes into a hub (tested to work) and a cat5 is connected from the hub to the workstation (tested to work). Nothing else is connected. The workstation does not get an ip address. (assigns APIPA) Both the 5510 and workstation have been rebooted.The workstation works otherwise. We have also connected both a crossover and straight through cable from the 5510 to the workstation. We have statically assigned an ip of 192.168.1.2 to the workstation and cannot ping the cisco (192.168.1.1).
View 2 Replies
View Related
Feb 5, 2011
I have a SA 520W with the following configuration:
-WAN port: Internet access for web browsing and QuickVPN access for remote users
-Optional port: Configured as WAN, for VPN access to another office (Office 2) in the same building throung a public network
-Ethernet ports: Computers on Main Office.
So far I have been able to configure communication between Main Office and Office 2 via VPN.Office 2 have no Internet access, so I need to share the Internet access from Main Office.QuickVPN clients have no access to Office 2, only to Main Office.
View 1 Replies
View Related
Dec 26, 2010
I need to open ports 25, 993, 995, 443 and 465 to setup MS-Exchange. I don't have an inhouse IT guy and this seems pretty straight-forward in theory but I can't figure it out I need to open ports 25, 993, 995, 443 and 465 to setup MS-Exchange.
View 5 Replies
View Related
May 7, 2013
What are these ports used for? What can I do with them?
View 2 Replies
View Related
