I have configured Cisco 1841 router. My problem is what if every first time a user opens the browser will display a web page server. My web server ip address is 10.10.1.5. [code]
View 4 Replies
I have one problem in my Client end router cisco 1841.
Everyday we switch on the router it will automatically goes to ROMMON mode.
So i take remotly and check wheather the IOS is corrupted or not.
So i use the command dir flash: to check IOS is available or not. i found the IOS is there.But it is not boot from IOS.
So i use the coomand boot xxxx.bin to boot from IOS.and finally it booted.
They told to use the coomand confreg in the ROMMON mode.
I have a 1841 deployed as my NAT device towards internet. NAT is setup so that internal addresses can access WWW. I also have some NAT translations opening speciic ports from outside to inside in the form: ip nat inside source static tcp A.B.C.D 443 A.B.C.D 443 extendable.
Now have an outside address/port setup with a public DNS reference and using NAT from outside to get access to the corresponding inside address. It works when being outside the LAN.
Now to the problem: From the LAN side of the router - i cannot access the public name. I can ping it - but my browser dont find the webserver behind the name. Someone told me it should be setup as "local firewall domain" - and i should set this up as "source NAT".
We are going to be setting up a remote access VPN to a Cisco ASA 5505, once connected to the VPN the internet traffic from the client will then go back out to the internet from the ASA (for web browsing), but Is there anyway to force the traffic through an AV server at the head office site before the traffic goes back out to the internet?
View 5 Replies View RelatedI've configured the DHCP server on a Cisco Switch C3560E as follows:
ip dhcp excluded-address 172.16.0.1 172.16.10.255
ip dhcp pool perth_main
network 172.16.0.0 255.255.0.0
default-router 172.16.10.254
lease 0 8
!
My goal was to limit the dhcp to the range 172.16.11.0 - 172.16.13.255, as there are not so many user on this network I so limited the lease time to 8 hours in order to "recycle" the unused addresses". What happend is that it is always using new IPs, even if the lease time has expired.
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
172.16.109.90 XXXXXXXXXXXX Apr 04 2013 10:00 PM Automatic
172.16.113.106 XXXXXXXXXXXX Apr 04 2013 06:55 PM Automatic
172.16.113.122 XXXXXXXXXXXX Apr 04 2013 09:04 PM Automatic
[code]....
1. How can I force the DHCP server to recycle the unused IPs?
2. Can I specify a DHCP range (172.16.11.0 - 172.16.13.255) instead of an "excluded-address" range?
How to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?
The company i am working in has 5 vlans which have been set an lay-3 switch(3560), uses the dhcp-relay server .(in svi configuration: ip helper-address X.X.X.X) well , that works ok~
Now , I got my problem: I need to force the client only can get ip by dhcp-relay server, that means if anyone set static IP manunally , he can't really access to anywhere (to provent anyone set static IP with malignancy )
I know if a h3c router , how to set this configuration n svi configuration : dhcp relay security address-check enable )
the how to configure on a cisco 3560 ?
I was trying to access some computers in network via remote desktop. All those computers had been used by other staffs.What I noticed that, for some computers I can access via remote desktop by forcing them to log off (people who were using the computers)But for some computers, I got the message similar to "user is currently logged onto the computer, you are not allowed to connect"I want to force them too and access these computers. How I can do it?
View 6 Replies View RelatedI have a server on Intel PC and the computer used to start up if the power shutdown and then come back. However, lately , I notice that when the power shutdown and then come back, the server is not turning on and have to press the turn on button on the PC.
View 2 Replies View RelatedI have a DLSW connectivity between 2800 series router and 7206 router. AS 400 is directly connected to 2800 series router and other server is connected directly to 7206 router. now i want to add one more server which will work as backup for the server connected to 7206 . What would be the connectivity/configuration to make it working in case primary server connected to 7206 is down or connection would automatically needs to shift on its backup server.
View 1 Replies View Relatedi have a server with windows server 2003 that SQL server 2008 is installed on it.regulary server service will be stoped automativcaly and all shared folders will be unshared and i must restart server and waiting for next stop and .
View 1 Replies View RelatedI have created individual folders for the different users on the network domain server, but i am having trouble allowing the client to automatically connect to their personal folder.
View 2 Replies View RelatedI just bought a Linksys E4200v2 router and updated the firmware to 2.0.26.124551. The DHCP server is turned on however, it won't issue any IP addresses. I have to set IP reservations for all of my devices in order for the router to give them an IP address. This includes my printer, xbox360 and 2 computers. I'm also having this problem with the wired and wireless lan.
View 4 Replies View RelatedI have setup a VPN server on cisco 1841 and dialed through pc, it worked fine. But when I dial through another ISP it is not working. It can establish VPN but it can't pass traffic through VPN, what may be the problem. The configuration is same and I can access Internet through this ISP.
View 4 Replies View RelatedI got 1 public IP for router and 16 Public IP's for NAT from ISP. Both router IP in one range and the NAT IP's are in different range. I want to use 1 NAT public IP for one of my windows server.Am using cisco 1841 router, in which I ve configured the public IP provided by the ISP for router.
View 10 Replies View RelatedI am deploying a Cisco 1841 in place of our basic DSL router.I have an ADSL WIC and FA0/0 connected to our LAN.LAN IP ADDRESS range is 192.168.1. 0/ 24 I have dynamic and static NAT configured. At this point although I have ACL's configured I have NOT implemented them as yet for the following reason. I am unable to recieve inbound SMTP traffic - now know my MX records are correct as this all owrks happily on our basic DSL router. I can send external emails no problem and all internal email works fine. [code] I am in the process of defaulting the router and programming the barbones to get the link working and see if inbound SMTP works then start building the blocks again.
View 4 Replies View RelatedI have 6513 which have wism and sup 720 , for some reason the access points keeps on going up and down the port channels created automatically but i cannot see any configuration inside it as shown below .I tried to edit the interfaces and add the trunk configuration but it cannot be modified . [code] the Wism status is showing up but the APs Number regestered keeps on going up and down the version running on the sup 720 is 12.2(33)SXI5 and the wism is installed in slot 9.
View 5 Replies View RelatedOur company has a Cisco 1841 router which provides our connection to the outside world. We also have a windows server which provides our DHCP and DNS services. Our workstations which also get their lease from the server (using DHCP) do have a connection to the outside world.
when we connect a new computer or other device to the network we can only ping as far as the inside interface of the router. But when we assign the ip settings staticly we do get a connection, even if we configure it with the exact same ip as a lease it got a few seconds ago.
[code]...
We have 2mbps leased line and have Cisco 1841 which is managed by our ISP. I have hooked up another 1841 (please find basic config below, it will get more complex lateron) Now when I connect my laptop I am able to browse Internet. But when I conect VOIP phone, it is not able to contact it's Hosted Server on Internet.
VOIP phone is Polycom SoundPoint 550 and I get URL call disabed message. If I try netgear Firewall everything seems to work.that the voip provider needs following ports UDP Range 16384 - 32766, TCP 5060 & UDP 5060. But in my config all outbound traffic is allowed. [code]
I am using Solawinds syslog and trying to get our Cisco routers send syslogs to our syslog server. I followed the procedure on Configuring Cisco Devices to Use a Syslog Server from [URL] Our Cisco swtches are all sending syslog messages but not the routers. I compared the config with our access switches but can't seem to find the problem:
Sample router config:
service nagleno service padservice tcp-keepalives-inservice tcp-keepalives-outservice timestamps debug datetime msec localtime show-timezoneservice timestamps log datetime msec localtime show-timezoneservice password-encryption!hostname WWF-RT1boot-start-markerboot-end-marker!security authentication failure rate 10 logsecurity passwords min-length 8logging buffered 4096logging rate-limit all 10logging console critical!aaa new-model!!
[Code] .......
is there a command that prevents the router from sending the syslog to the server?
I have new DIA Internet service coming in and unlike the last vendor who provided a router, I am configuring my own. This is my first full Cisco config - I've been looking at this for 3 days now. I have SIP signalling, rtp and default traffic on a (3) t1 multilink (4.5mb). My lan and firewall uses dscp tags and passes them to the 1841 for outbound. The ISP only prioritizes by destination address so I just need the 1841 to respect the tags internally. Inbound, I have only port numbers to go by to differentiate voice traffic and I want to tag EF and CS3 accordingly for use by the 1841 and the rest of my network.
Below is part of my proposed config. I have read tons of Cisco docs and looked at all the queuing methods and this one I understand the best. I am getting the error: "CBWFQ : Can be enabled as an output feature only", so I presume that something is wrong on an input definition somewhere. For now all the firewall functions are done at the actual firewall (Sonicwall NSA) so other than limiting ports to the PBX everything else is just pass-through. Any changes required. IOS is 12.4(4)T1.
[Code]....
my configuration of Cisco 1841.
I was able to configure the cisco to accept VPN connections from clients. But when i am connected i can not access the VPN LAN. My cisco VPN client shows all the time Packet Decrypted: 0 when connected. I tried the split tunneling configuration based on the example on cisco.com for split tunneling.
I include config for better understanding. The outside interface is fa0/1 with ip 10.0.0.2 w LAN 10.0.0.0 Inside interface fa0/0 with ip 192.168.10.9 w LAN is 192.168.10.0
IP for VPN clients 192.168.20.100 - 105
I have a branch office connected to the Head Office through a VPN Tunnel in cisco 1841 Router. If i enable Internet for any pc in Branch Office through cisco router i cannot access it remotely from Head Office. [code]
View 2 Replies View RelatedI have a 1841 router with two wan access from two different ISP:throught dialer with fixed ip obtained from dhcp - ATM interface,thought fastethernet 0/1 with fixed ip and a specific gateway - can be use for Internet traffic if dialer is down.I can't manage to make them accessible at the same time (ping and ssh).In a second time I would like to have a VPN client access on one wan and site to site VPN on the other, instead of having the two on one wan.
View 12 Replies View RelatedI have a Cisco 1841 router that is connected to a switch. I have WAN/LAN configured on the router and the switch is handing out internal IP's. The issus that none of the client machines can access the Internet. From within the router console, I am able to ping external domain names, my ISP DNS servers.
Once the client machines picks up an IP they are unable to ping any external domain names or IP's and not even the ISP DNS servers, but they can ping the Cisco router IP. As a note I have tried my ISP DNS servers and as a test Google's DNS servers, but neither will allow access to the Internet.
Below is the current running config:
Building configuration...
Current configuration : 1440 bytes
!
version 12.4
service timestamps debug datetime msec
[Code].....
I'm working on setting up a couple of new WAN sites with 256K frame relay circuits back to our main building. Each new site has a new PVC, and both are pointing back to a PVC on a T1 at the main building. The main site has a 2801 with a single CSU/DSU WIC, and each new site has a 1841 with a 3560 connected to fa0/1. At both sites, I'm able to get the circuit up, and the serial interfaces at both new sites show up/up, and the subinterfaces at the main site also show up/up for both sites. Routing is being done by EIGRP, and both sites are able to establish the 2801 as an EIGRP neighbor, and I'm able to ping/tracert anywhere on our network by name or IP, so routing and DNS appear to be working. I can also ping both new routers from the main site. However, that's about all I can do. I'm not able to access any resources on our network (email/shares/internet/intranet/etc) from the two new sites. I can ping the new routers/switches from the main site, but can't ssh to them. I can ssh to them locally. There are no firewalls in the equation, and I don't think there are any ACL's in the picture either.
Can ping and tracert just fine anywhere on our network (from both the 1841, a PC plugged into the 3560, or a PC plugged directly into the fa0/1 port on the 1841), including out to the internet, by name or ip.Can ssh to local router, but not to anything that isn't localDNS is workingDHCP not working using ip helper pointing to DHCP scope on server at main site, have to use static IPCan't rdp to anythingCan't get emailCan't browse windows sharesCan't get to any websites, external or intranet. IE says "Website found, waiting for reply..." but eventually times out.
I did some testing for communication over certain port numbers using telnet and nmap, and found the following:
Can telnet to url.. and local intranet webserver on port 80 (http)Can telnet to two of our Exchange Servers on port 25 (SMTP)If I run an nmap scan on url...com, or our intranet webserver, it confirms that 80 and 443 are open, but the pages will not load. I am able to telnet (port 23) to a state mainframe via the internet that some of our employees use, and I do get the expected login screen. I tried erasing the config one of the new routers, and just added back the bare minimum config to get the circuits up (serial/ethernet interface configs, eigrp), but saw the same symptoms.
One other thing to note: the 2801 at the main site has three other frame relay sites connected to it on the same WIC as the new sites, all of which are working fine.
I just don't understand why I can ping everywhere I need to be able to ping, and port scans show that communication is open over needed ports, but the applications don't work.
I have setup a remote access on our 1841 device, with split tunnel.
now i am able to connect via the vpn tunnel, and even ping and telnet into the cisco device, but when i try to ping any device past the 1841, the ping fails and no traffic is even been encrypted to go over the vpn traffic (looking at the vpn client statistics).
From the ciscos side, pings to the vpn client is failing, yet i see the vpn client in the routing table.
Here is my config:
cisco1841#sh run Building configuration...
Current configuration : 7682 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname cisco1841!boot-start-markerboot-end-marker!logging buffered 51200
[Code].....
I can not access the configure menu.
I try access with Serial cable blue DB09 / RJ45 on console port and serial ports on PC using putty or hyperterminal but any connection can not be done. The screen stay black and not show any text.
The computer found the port COM1 but i csn not access any information from Cisco router model 1841
I have a problem in my Cisco 1841 in Virtual-Access Interface all interfaces is UP Except Virtual Access is Down . [code]
when i want recover the virtual access to up ,should i do shut & no shut to the ATM interface.What is the cause of the problem, and how I can solve this issue?
Is there an easy way to allow specific websites access in cisco router 1841? I am trying to allow a website through access list 102 but not working. I am using access-list 102 permit ip host 192.168.21.20 host www.website.comIf i allow all websites then it works fine.
View 1 Replies View RelatedI have an 1841 between my firewall and the ISP. Three interfaces - multilink to ISP, FA to my firewall, and FA to my inside network. I use the inside interface for configs aand snmp access, etc. Only my ISP-assigned fixed address block will get routed to the multilink by the ISP but I am nervous about the inside interface sitting on my LAN. I know I can remove it, but if I keep it there, how can I set up an ACL so that all traffic from the multilink interface is denied to the inside interface? I suppose another way to think about it that the inbound iface can only accept traffic from its own outside, not from the router.I think this is fairly simple but I don't want to knock down the traffic if I get it wrong.
View 8 Replies View RelatedUsers behind a Cisco 1841 are not able to connect to a network using the Cisco Systems VPN Client. Transport is IP sec over UDP (NAT/PAT). Connection just times out.
Which ports should be allowed in the access list? Or do you have an link to a article for this?
Im unable to access my newly configured 1841 via SSH or via CCP from the WAN side.
Is there anything I can do from the LAN side in CCP that will assure that this router is able to be managed from the WAN?
Trying to setup client VPN access on a 1841 router. essentially i would like to connect using the cisco vpn application.
View 2 Replies View Related
