I have been trying to get my FTP server working for months with no joy. It works when I connect to it internally but not from outside. If I do a port scan, I can see that port 21 is open. I tried it with disabled firewalls and also checked with ISP that nothing is being blocked. I have attached the config file. I used several differnet FTP servers such as CoreFTP, Wing FTP etc.
View 13 RepliesXP Home edition, went to tools can't find working off line or working online to make sure off line is not checked so I can get on line DSL Verizon , Wireless router, wireless switch in on, on the cpu
View 1 Replies View RelatedASUS Notebook G60Vx Series
Windows 7 Home Premium 64-bit
Intel(R) WiFi Link 5100 AGN
A few days ago my internet suddenly stopped working. I plugged in the ethernet cord and everything worked fine. Checking the properties in the device manager showed the device was working properly, I also tried resetting it to make sure it was enabled but it did not work.
Upon troubleshooting, the "Windows Network Diagnostic" said the problems was that the Wireless adapter was not turned on. Using the switch on the front of the laptop as well as the function keys does nothing. Usually a graphic pops up showing if the WiFi is on or off, changinging transparent to show the WiFi is disabled. Now when I turn the switch on it always appears transparent, effectively going from off to off
So I know the computer reads both the function keys and the switch on the front but both methods never actually turns the adapter on. I just finished a system restore and nothing has changed
Today, while surfing the web my internet connection on my PC just randomly shuts off. I go check on my laptop and its normal. My WiFi says that I am connected to an Unidentified network with no internet access. So i got frustrated and checked all the forums and nothing seemed to work. So i restored my computer to factory settings and I still got this problem. Does this mean my Wifi Card is bad? Is it a virus? I can see other networks fine but i just cant connect to mine!
View 8 Replies View RelatedI need to know if I'm right about this. I have a customer that wants me to set up a dynamic-to-static IPsec tunnel between an 1811 router (dynamic) and an ASA with a static address.The catch is that the 1811 sits behind an ISPs cable modem where it picks up a private 192.168.x.x address.
Is there any other way to make this work where the router with the dynamic IP is sitting behind a box that's doing PAT translations?
I've recently been tasked with providing access to several internal servers to a remote site via one of our ASAs. In order to keep things simple, I have begun by creating a single static NAT rule for one of the servers. The Site-to-Site VPN connection profile was then created and testing has begun. Unfortunately it looks as though the NAT rule isn't working. As I monitor the tunnel, I still see our internal number being broadcasted and not the mapped address, which prevents the tunnel from being established. The remote site has verified that this is what they are seeing too.
Appliance:
ASA 5510
ASA 8.4(2)
ASDM 6.4(5)
Address Legend:
(Note: The following addresses are not actual addresses.)
[Code]...
why the following configuration is not working? I have two clustered ASAs inline from one another, in front of a 4506-E switch in front of a host I want to access via RDP, like so: My issue at this stage lies with getting the UNTRUST firewall configured. I've tried the following configuration 1) Creating the host.
View 13 Replies View RelatedI am trying to use a Dell FTRJ8519P1BNL SFP fiber module in a Cisco Catalyst 3560 and have already run these commands: no errdisable detect cause gbic-invalid service unsupported-transceiver.But I STILL am getting these errors even after shut/no shut on the port.
View 19 Replies View RelatedI am have unabled the cisco SDM on my pc, and able to get the http for my router 1841:I have done below configuraiton in my R1841[code] why I am not able to get the above commands, and does my SDM not work due to this or anything else need to be done?
View 4 Replies View Relatedmy ASA config does not work? My config is attached in a txt file.
I tried to forward port 25 and 110 from the outside to the inside server, but I can't connect...
I've got a new 891 to replace an old 837 and I'm struggling to get the dynamic nat pool working.I've successfully configured the dialer etc for PPPoE and when I set up a static NAT translation between my PC and an external address then I can ping hosts on the internet e.g. ping 8.8.8.8 successfully. But when I remove the static translation and try and use the dynamic NAT pool then no NAT translations take place, and show ip nat translations only shows the other static entries.The relevant bits of the config are below and I've also attached a full (cleaned) config.
ip nat pool TestPool 81.2.123.226 81.2.123.226 netmask 255.255.255.248
ip nat inside source list 15 pool TestPool overload
! Can only access internet when static route is defined for my PC
! If I remove this line then it doesn't use the dymnamic pool TestPool
ip nat inside source static 172.16.0.11 81.2.123.226
[code]....
SSH is not working in Cisco 7206 VXR Router. I have configure
Hostname
Ip Domain name
Crypto key generate RSA
IN Line VTY 0 4
transport input preferred SHH
transport input telnet SHH
But stll it is not working. I am getting invalid crc recieved in packet.
Current IOS running is 12.3 (19) Enterprise 3des
i have a 876 Router, connected to the Internet and a VPN. From inside i would like to pass all traffic destinied to 192.168.0.0 255.255.255.0 to the VirtualPPP IF and al the other to the Internet (vlan2) I have created this rule, but after applying ist works only for about 30 to 60 seconds. after that only the Internet reachable. Everytime i do a clear ip nat trans * both Interfaces will work für 30 to 60 secs again...
This is the relevant part of the cfg
ip nat inside source route-map Di1 interface Virtual-PPP1 overload
ip nat inside source route-map VLAN1 interface Vlan2 overload
!
access-list 1 remark CCP_ACL Category=2
[Code].....
We have an ASA running 8.2.2 (adsm 6.2.5). VPN connections are working well.But it's not possible to use a SIP client (phone or software) through an SSL tunnel.So today I've tried to look in detail on this problem. I installed an ubuntu system,openconnect and ekiga as softphone. In our network everything is working without any error. I used an external DSL connection to test everything over the VPN tunnel.I can ping the SIP server and I can access the https frontend of the the SIP Server.The client "seem's" to connect as well. I can call the ekiga client, it's ringing and i can speak and hear everything (most times).Dialing from the ekiga client ALWAYS fails. On the ASA there is no policy allowing or denying those connections. How can I trace it on the ASA ?
View 2 Replies View RelatedI have ASA 5505 with outside interface IP 206.206.206.5 I configured the SSL vpn on this but still i am getting page can not be displaed when opening https://206.206.206.5 from broadband.
Below is the related configuration in ASA. What needs to be done in order to able to connect SSL vpn.
group-policy GroupPolicy1 internalgroup-policy GroupPolicy1 attributesvpn-tunnel-protocol IPSec l2tp-ipsecwebvpn functions url-entry file-access file-entry file-browsing
tunnel-group DefaultWEBVPNGroup general-attributesdefault-group-policy GroupPolicy1tunnel-group DefaultWEBVPNGroup webvpn-attributesnbns-server 10.10.10.11 timeout 2 retry 2
policy-map type inspect http Http_inspect_policyparameters protocol-violation action drop-connectionclass BlockDomainClass resetpolicy-map global-policyclass global-class inspect dns inspect esmtp inspect ftp inspect netbios inspect rsh inspect rtsp inspect snmp inspect sqlnet inspect tftp inspect xdmcp inspect icmppolicy-map inside-policyclass HTTPTrafic inspect http Http_inspect_policy!service-policy global-policy global
webvpnenable outsideurl-list nuk001 "abc002" cifs://10.10.10.1 1
we have installed a new appliance of LMS 4.2.2 in our VmWare environment. The platform is running licensed to work with 1300 devices. We have approximately 500 devices in DCR, most of them are small switches ranging from Catalyst 2950 to Catalyst 3750, and also a bunch of Nexus 5548 switches.CiscoView is not working for any of them, we get an error message which we cannot interpret. We have updated to the newest possible device packages, but all to no avail.
View 2 Replies View RelatedI get a lot of information via RME or SNMP but not the RAM Information.
View 1 Replies View RelatedI have configured my Cisco 881 and it is quite stable but now I am working on some minor details.
I have several Public WAN IP addresses which are NATing to internal web server. When I go to the WAN IP at port 80 from the Internet, the NAT works fine and it maps perfectly to the internal Web server. However, when I try the same same WAN IP from the LAN which contains the web server, the Router blocks the traffic and I get nothing back.
I have verified that I can get to the Inernet from the LAN but it seems that I cannot go bfrom the LAN to the Internet and back into the LAN via NAT.
I have ASA running version 8.2.5 and using snmp v3 as below;
snmp-server group Authentication&Encryption v3 priv
snmp-server user SNMP_TEST Authentication&Encryption v3 encrypted auth md5 cisco123 priv aes 128 password123
snmp-server host IN 10.10.10.110 version 3 SNMP_TEST
LMS device credential is as per above SNMPv3 config.Can't get this to work. Digging aroung but no avail. I also try this on ASA 9.1 but same result.
I got a question about ACS 5.3 and WLC We have now the ACS 5.3 running for MAB (good working) and TACAS for device AAA.But now our WLC’s will not work.I have created already a special “custom attribute” => role1 / mandatory / ALL Already changed to the combinations Role1=ALL / Role1=All / Role1=all / role1=ALL / role1=All / role1=all But still not working. I get a wrong response.
I followed the guideline in attach, PDF file.
Debug dump from WLC
ACS 5.2 / ACS 5.3
-------------------
*tplusTransportThread: Sep 28 15:07:59.222: auth_cont get_pass reply: pkt_length=24
*tplusTransportThread: Sep 28 15:07:59.222: processTplusAuthResponse: Continue auth transaction
*tplusTransportThread: Sep 28 15:07:59.388: tplus response: type=1 seq_no=4 session_id=b1fddbfc length=6 encrypted=0
[code]....
what ios for 827-4v from 12.4 can i use for IPSEC+ddns?i tested some from 12.4 but normally working only 12.3(26)GD, but i want ddns feature? some from 12.4 is working with tracebacks, other is not loading - with error (loadprog: error - program section linked to illegal address)
View 4 Replies View RelatedI am having issues with running IS-IS between my ASR9006 and Cat6500 switch.I am running IOS XR 4.0.3 with Mini and MPLS packages enabled. My configuration on ASR is below, does configuration on the ASR9000 is correct and why its not working? [code] .....
View 4 Replies View RelatedI am setting up ssh on my 871 router and I get prompted for only a password. I have typed in the correct password and it doesnt let me in. I also have telnet enabled and with telnet I do get prompted for both username and password and I am able to login. I would like to setup ssh so that it used the local username and password. This is what my vty has.
line vty 0 4
access-class 23 in
privilege level 15
login
transport input telnet ssh
My network is currently running with SNMP v2 configured in easch devices. With snmp v2 our LMS 3.2 server is working fine. However we have planned to migrate our network to snmp v3 . I have configured my few devices for SNMP v3 and added them to my LMS server.
Except DFM module these new SNMP v3 devices are working fine in all other modules. In DFM these devices are reflecting under "snmp timeout" group. I checked with device center -> management station to device; where the SNMP v3 connections are showing "okey"
following are tyhe configuration i have done in my devices.
snmp-server group v3g v3 priv read testr write testw
snmp-server user v3u v3g v3 auth md5 test123
snmp-server view testr iso in
[Code].....
EEM script. I have tried below script on 1841 with 12.4(24)T5 but not working
snmp-server enable traps ipsla
snmp-server enable traps event-manager
ip sla 10
[Code].....
I want to try ping remote ip every 5 mins , if ping fails wait for 3 mins then trigger reload , and router come up again if ping fails reload again.
I have a 837 that I'm getting setup for a charitable cause. I copied most of another operation setup but am having issues with the routing, I think.
THe ATM appears to be correct using the "ping atm interface 0 0 35 end-loopback" command.
I have pasted the run-config below:
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers(code)
I got 2 DC Cisco MWR 1941 and 3600, I do not know the reason why when I set up IP NAT to 1941 does not work but if I do it in the 3600 if it works.
View 13 Replies View RelatedI have a Cisco ASA and a 2901 Cisco Router connected via site-to-site VPN. The ASA can ping over the VPN to computers behind the router, but the router can not always ping to computers in the ASA network. When i ping from a computer in the IOS router's 10.100.36.0 network the requests times out most the time; although every few minutes, i will get about 10 pings back, then stops working again.
I uploaded their two configurations.
The ASAs public IP is 20.20.20.5 and local (inside) network of 10.101.36.0/24
The IOS routers public IP is 20.20.20.10
There are many internal networks, but 10.100.36.0/24 is the one with issues.
More and more recently I'm seeing that inspect ICMP and ICMP error do not allow trace route to work through the firewall from inside to outside.I used to go in, enable the inspections and subsequent trace route's worked. Now when this is enabled, the firewall still blocks return trace route.
View 4 Replies View Relatedi'm having troubles with a DHCP server, which is unable to give IPs to hosts that are on a different VLAN than the server.I have this little scenario, one L3 switch (SGE2010-48 without PoE) with 7 different VLANs configured in[CODE]
View 3 Replies View Relatedim having trauble when using chap as authentication for my two routers, i dont know whether my configuration is wrong or not.Is theres anything wrong with the configuration ??note : both routers are c2961
View 11 Replies View Relatedconfiguring AAA on 1841 router, initially it authenticates me well using my TACAS+ login. but though i have configured enable password in router, router directly puts me in privilage mod without asking enable password .
my configs for AAA as below
aaa authentication login ACS group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization config-commands
aaa authorization exec ACS group tacacs+ local
aaa authorization commands 0 ACS group tacacs+ local
aaa authorization commands 15 ACS group tacacs+ local
aaa accounting commands 1 ACS start-stop group tacacs+
aaa accounting commands 15 ACS start-stop group tacacs+
I'm having problem on my 1841 it won't boot. No response on console but the led lights seems to be normal.I tried removing the CF then turn it on again to see if the router will go to rommon but didn't happen. I did try using another pc thinking the com1 is faulty but still no response on console nor rommon not showing up.
View 15 Replies View Related