Cisco WAN :: NAT Configuration On 877-K9?
Feb 6, 2011
I want just want to know on how to add NAT inside and outside ip address.
For instance:
Original Address = 119.xx.xxx.257 (8138)
Translated Address = 119.xx.xx.28 (8138)
On the example above, I can access my web application by typing www.wesbite.com:8138
The settings above was configured by the previous administrator and unfortunately I dont know how to configure same thing as he did.
Now, I made new web application and set it to port 8139, so I should be able to access it by typing the www.wesbite.com:8139
In order to make it accessable on the internet, I should make configuration first on the router via NAT, and I dont know how.
Also, I tried to edit NAT configuration via Cisco SDM (Secutiry Device Manager)
Cisco SDM>Configure>NAT>Edit NAT Configuration
I clicked Add button but nothing happens, even clicking Edit and Delete button
View 4 Replies
ADVERTISEMENT
Jul 17, 2012
I am position to migrate from CatOS 6509 switch to native IOS 6509 switch. long time ago, there was some site to convert automatically based on copy and paste onto the tool, but i can not find.
Does anybody know how to convert CatOS configuration to Native IOS configuration ? It is not IOS change, but it is configuration convert.
View 1 Replies
View Related
Dec 14, 2012
I have webcams that need port 8081 opened and I did that, everything worked fine until my DIR655 jammed up and power cycling it and the modem 3-4 times DID not make it work: no internet access and it was definitely a DIR655 problem. So, out with the paperclip to do the big reset, causing me to lose my configuration. When "most" of it came back up with my new config (I had screen prints), all was okay EXCEPT the webcams. Addresses and ports were all configured properly, address was fixed too on the client computer rather than use DHCP. I had a DNS relocation service running (DYNDNS) for the WAN side, but that address (My IP) didn't change either. I tried EVERYTHING. Finally, I realized in all my screwing around that I had enabled UPnP in my application, something I hadn't done before, but did this time as a desperation move. UPnP had always been checked off in the router. So.....I REMOVED my port forwarding and virtual server settings (either one worked before), and voila, everything working, Is this a normal occurrence, that if you have UPnP running, that this auto configuration overrides any manual configuration?
View 2 Replies
View Related
Feb 6, 2013
Can any explain this topology for me and how it works ? I don't understand the necessity of defining tow PVCs .
View 2 Replies
View Related
Feb 25, 2013
I have an LMS 4.1 where sys log reports available for all the reachable devices on the network. All the devices were configured with the command "logging host <LMS_IP_address>".
The problem is that the report on LMS are shifted 2 hours from the clock displaying on the devices ("show logging" on any device).
How can I check the NTP configuration of LMS? Is it supposed to use the NTP configuration of the operating system (Windows Server 2008)?
View 3 Replies
View Related
Mar 27, 2011
Just trying to find my way through the new NAT configuration in later version of the ASA OS but having a few issues.
View 7 Replies
View Related
Jul 20, 2012
i have the asa5505 with asa8.4.5 and asdm 6.4.2. my asa work like site to site vpn with the other asa5505. i would be love that monitoring status of VPN. i enabled on asa logging, i puted address of smtp server, receipent email, source email, the problem is because my smtp server require authentication, TLS. how set configuration on asa5505?
configuration of logging for send notification on email.
View 3 Replies
View Related
Apr 11, 2011
why the following configuration is not working? I have two clustered ASAs inline from one another, in front of a 4506-E switch in front of a host I want to access via RDP, like so: My issue at this stage lies with getting the UNTRUST firewall configured. I've tried the following configuration 1) Creating the host.
View 13 Replies
View Related
Dec 4, 2012
I'm trying to setup an IPSEC tunnel above GRE using the topology in the attached image file.However the traffic between the 2 endpoints: lo0 on R5 (10.0.5.1) and lo0 on R4 is traveling via the GRE tunnel without being encapsulated in IPSEC: I'm using 2 routing protocols:
- OSPF area 0 for the connectivity between R1,R2 and R3
- EIGRP AS 1 for the internal sites connectivity
View 8 Replies
View Related
Jun 8, 2012
I'm shortly going to move our stuff to a new data centre, where we have two network feeds - so there'll be two lengths of CAT 5 coming into the rack, for "first hop redundancy".I have something similar at our existing DC, but I'm simplifying the equation somewhat at the new DC, and using a simpler configuration that just uses two switches, rather than two switches and two routers. All of the servers will have public IP addresses.Now - the network guy at the new DC has confirmed that a simpler two switch configuration will work.
View 17 Replies
View Related
Sep 27, 2011
Cisco 3550 and when I do a sh int fa0/1 and the status does not show last input or last output. Is a 3550 have a configuration that needs to be set?
View 0 Replies
View Related
Oct 6, 2011
I have a nat configuration to apply on a 8.4. I am a bit confused.On a ASA 7.0 the configuration is as such static (inside, outside) 10.102.247.0 10.102.247.0 netmask 255.255.255.0Basically, I want a bidirectional nat .. for users to connect to the inside network using the real IP.object network Delta subnet 10.102.247.0 255.255.255.0,object network Delta
View 0 Replies
View Related
Mar 30, 2012
The basic setup Newly installed redundant ISP, thus setting up the 891 with dual WAN Using PFR to load balance between the two. Did initial config through CCP (not express), but I am familiar with the basics of IOS CLI (not used to the new zone based firewall yet, managed aour old Pix for too long, but that is a different subject)
I cannot seem to get anything but Gi0 to be accepted as a WAN interface. I go through the entire setup in CCP, test each connection, etc, and it all looks good until I exit out of CCP and go back in. At that point, I get squat out of Fa8. CCP won't let me test the connection, won't let me edit the connection, wont let me delete the connection. The wizard for a new WAN connection becomes available again (Wanting to set up a "second" WAN on Fa7...)
Again, I have verified connections to each ISP line independently, either one works just fine on Gi0, neither ever works on Fa8. This is my first real foray into PfR.
Building configuration...
Current configuration : 21486 bytes
Last configuration change at 18:59:43 UTC Mon Mar 26 2012 by admin
[URL]....
View 4 Replies
View Related
Apr 22, 2012
After launching config collection job in LMS 4.2 I can't get job results and receive error message - Unable to get results of job execution for device. I've increased the job result wait time using option in Admin > Collection Settings ... , but nothing changed.Here are screenshots of error message and wait settings I used.
View 3 Replies
View Related
Nov 21, 2012
1)how can i backup the configuration on cisco lms 4.2 and to re-imported later when i re-install the lms 4.2
2)how can i change the admin password on cisco lms 4.2
View 3 Replies
View Related
Sep 28, 2011
Does following configuration is responding to the request of my client asking for 20 T1/E1 connections on a Secure ISR 3945E, by combining on the same router One (01) NM-8CE1T1-PRI card and Three (03) HWIC-4T1/E1 cards.
Here are the router configuration:
CISCO3945E-SEC/K9 Cisco 3945E Security Bundle w/SEC license PAK
MEM-3900-1GU2GB 1GB to 2GB DRAM Upgrade (1GB+1GB) for Cisco 3925/3945 ISR
MEM-CF-256U1GB 256MB to 1GB Compact Flash Upgrade for Cisco 1900,2900,3900
NM-8CE1T1-PRI 8 port channelized T1/E1 and PRI network module
HWIC-4T1/E1 4 port clear channel T1/E1 HWIC
SM-NM-ADPTR Network Module Adapter for SM Slot on Cisco 2900, 3900 ISR
PWR-3900-AC/2 Cisco 3925/3945 AC Power Supply (Secondary PS)
CAB-ACE AC Power Cord (Europe), C13, CEE 7, 1.5M
S39EUK9-15104M Cisco 3925-3945 SPE IOS UNIVERSAL
PWR-3900-AC Cisco 3925/3945 AC Power Supply
3900-FANASSY Cisco 3925/3945 Fan Assembly (Bezel included)
C3900-SPE250/K9 Cisco Services Performance Engine 250 for Cisco 3945 ISR
ISR-CCP-EXP Cisco Config Pro Express on Router Flash
SL-39-IPB-K9 IP Base License for Cisco 3925/3945
SL-39-SEC-K9 Security License for Cisco 3900 Series
View 1 Replies
View Related
Aug 22, 2012
Our client has a vendor who needs to establish a VPN tunnel to their own router which sits behind our Firewall.
VPN Concentrator (Vendor) <------> ASA5505 Client (7.2) <-------> 3750 Switch <-------> VPN ASA outside Interface - 208.64.1x.x4 DG - 208.64.1x.x3
ASA Inside Interface - 172.20.58.13/30
3750 Switch Interface Connected to ASA - 172.20.58.14/30 and DG - 172.20.58.13
3750 Switch Interface connected to VPN router - 172.20.58.21
VPN Router Interface connected to the 3750 - 172.20.58.22/30 DG - 172.20.58.21
I have also attached a Visio for this and the running configuration from the ASA and 3750. We don't have access to the TNS VPN router. Our responsibility is to just to make sure the tunnel comes up.
1) Create a static NAT on the ASA for Public to Private IP of the VPN router
Public - 208.64.1x.x5 / 28
Private - 172.20.58.21 / 30
Will the ASA automatically ARP for this address or do i have to configure another interface on the ASA with this public IP?
2) What would the access list look like on the ASA?
3) The client gave us some config to copy the stuff on the ASA so that they can create the tunnel but i couldn't put those commands in the ASA. How would this be applied and on what interface?
Firewall Access: The following information pertains to access between the VPN router and the
VPN concentrator. If a firewall/router is present in front of the VPN the following services need to be
allowed:
permit esp host 208.224.x.x any
permit gre host 208.224.x.x any
permit udp host 208.224.x.x any eq isakmp
permit udp host 208.224.x.x any eq non500-isakmp(code )
View 2 Replies
View Related
Nov 28, 2012
I am using Prime LMS 4.2.2 software to archive configuration for my cisco Network Device switch and firewall . All works fine except for two new Cisco ASA 5525 and ASA 5545 ( Software Version 8.6.1.2 ) . I have already checked credential , ssh access , snmp configuration and all seem correct. But Archive configuration job end with failure. This is the error message:
View 1 Replies
View Related
Feb 2, 2012
Cisco 891 configuration Details: [code] I could connect to the Giga bite thernet wan, based on above configuration.When I test on FastEthernet8 for the secondary ISP connection it will not go through the internet.
View 17 Replies
View Related
Jun 26, 2011
We have cisco 3560G switch I need to configure QOS in this switch. video & vice Is it possible to configure port wise policy ?
View 1 Replies
View Related
Jan 23, 2011
I configured the below in IOS ver 12.4(5a) is working fine (able login using Putty) , but the same configuration is not working in IOS ver 15.0(1)M2 (Not able to login using Putty)
hostname hostnameip domain-name domainnamecrypto key generate rsa
ip ssh time-out 120
ip ssh authentication-retries 2
View 6 Replies
View Related
Mar 28, 2011
I would like to replace my firewall by using ACL on my Cisco 881 for testing. Could it be possible?
Configuration:
access-list n° permit ip host distant_site_public_IP host my_public_IP
access-list n° permit tcp any host my_public_IP eq port
This configuration works fine for SSH in exemple.
I can't allow "web pages" flow!!!
When i put: access-list n° permit tcp any host my_public_IP eq www
It does'nt work.
With Wireshark, I've seen that random ports are used to set the "http connexion". How could I resolve it keeping the best security configuration? I place my ACL on WAN port, Maybe I have to place it on LAN or create others ACL list to complete the configuration?
View 2 Replies
View Related
Jun 2, 2011
upload configuration to the Cisco 877? normaly i am using the TFTP server,
View 30 Replies
View Related
Jan 21, 2013
I recently installed an ASA firewall for one of our customer. I am trying to map the web server’s private address to the public address:
The private address is 192.168.207.15
The public address is 71.x.x.51
Here is the NAT configuration. For some reason this configuration is not working. I am not sure what is wrong with this configuration.
object network inside-out
nat (any,outside) static interface
object network new-www
nat (inside,outside) static 71.x.x.51
access-group inside_access_in in interface inside
access-group global_access global
NOTE: Inside network users can access Internet just fine. But I just cannot get natting to work.
View 14 Replies
View Related
Dec 31, 2011
I have two routers 3845 and HSRP is configured properly. Currently we are using default route to ISP and right now I want to use BGP as I have 3 Public pools and that's why I want to advertise in the public network. How I can configure that in my Router.
View 1 Replies
View Related
Feb 12, 2013
I have a router Cisco 2911 with two possible Wan interfaces out and a backup configuration using IP SLA. When the Primary Interface goes down the traffic is automatically rerouted through the Backup Interface, but the problem I have is that when the traffic is going through the Backup Interface (because the Primary is down) if the Backup Interface also goes down, if the Primary goes up, the traffic is not automatically rerouted to the Primary Interface. And it looks to me like it keeps trying to goes out the Backup Interface and cannot see that the Primary is down. I guess that the pings are going out the backup Interface and as it is down the router doen't receive any anwer to the ping and doesn't change to the Primary.
The main configuration related to the IP SLA is this:
!
track 1 ip sla 1 reachability
!
interface GigabitEthernet0/0
description backup Interface
ip address 175.xx.xx.10 255.255.255.252
ip nat outside
[Code]....
View 8 Replies
View Related
Aug 7, 2011
I have an existing home office network with a special Actiontec DSL modem to support 20 meg down and 5 meg up speeds. The modem has 4 separate gig LAN ports. My network has several printers, servers, and PCs using a combination of DHCP and static IP addresses. The modem supports DHCP, port forwarding (which I am using) as well as wireless 'n' networking along with other features. I would like to keep all this as is.
Can a Cisco RV110W be configured so that it just looks like another device on my existing network with either a DHCP or a static IP address on my home network? If I can do this, can I also set it up to receive all VPN requests so I can connect to my home network from any remote location? I can configure my existing modem to port forward all VPN requests to the RV110W address.
I really need a VPN device on my home network that will allow me to connect remotely, receive a DHCP address on my home network and then act as though it is just another computer on my network so I can access all the printers, servers, PCs, etc and use my VPN connection to send out internet traffic through the Actiontec modem. Can I do this with the RV110W? It would also be a plus to be able to enable the networking on this so I could have 2 wireless networks.
I've tried 3 types of VPN hardware and software combinations so far and none of them have worked. The ones that want to replace my Actiontec do not work because they don't support the 5 meg upload speeds. I cannot use PPTP on Windows 7 due to the firewalls where I am currently doing some work. I have to use IPsec or perhaps SSL to get out of this remote network so I can connect to my home network.
The Actiontec modem gets a dynamic IP address so I use services like DynDns to associate a domain name with the static address on the DSL modem. Then a use a NAT network behind the modem.
View 1 Replies
View Related
Sep 9, 2012
quick question regarding a 3G access via a cisco 881G i have a partner sim card (with the same number as the one in my mobile) iserted into the router.now i have the problem that my mobile is unreachable (line busy), is there a way to use both sims at the same time?what do i have to change in the router configuration?
View 1 Replies
View Related
Apr 14, 2013
In studying and testing SSL VPN on an ASA I have the network as shown in the attached diagram. The configuration is based on an ASA with 8.3 but our ASA is 8.2 and at this time I'm not familiar with the new NAT configuration and commands in 8.3 or later and how to translate the 'nat (inside,outside) source static' for me to an 8.2 version.
View 3 Replies
View Related
Sep 26, 2012
I'm having trouble configuring an ASA into a network solution. We have a 501 with the outside interface on 10.24.10.1, the inside interface as 172.18.10.1, and a DMZ on 192.168.1.1. in the DMZ there is a HTTP/FTP/TFTP server connected to 192.168.1.2 on a virtual machine. When on a machine configured to 172.18.10.10 I can ping to the outside interface but not the DMZ. When I am in the DMZ the PIX does block traffic to the inside, but I can't reach the outside interface. When on the outside I am blocked from the inside, but also blocked from the DMZ.
Group10(config)# sh run
: Saved
:
PIX Version 8.0(4)
[Code]......
View 22 Replies
View Related
Jul 9, 2012
how to configure IPSEC VPN, but unsuccessfully.At my office are two uplinks - LAN and Backup, both are connected to ASA5510 (with static IP) and I would like to create ipsec to data center where I have another ASA5510 with one uplink.
View 7 Replies
View Related
Jan 8, 2013
I need some help in configuration of Cisco IOS VPN. Basically, we have 2 Cisco 1811 routers in our company. Router 1 - Production router (IP 192.168.x.254)Router 2 - VPN router (IP 192.168.x.251). All machines/servers inside our network has been configured with a default gateway of 192.168.x.254. Hence, all internet traffic will go through the production router.
Now, we want to deploy a new router (i.e. Router 2) which will be solely used for VPN purpose (such as DMVPN, IPsec site to site, VPN client configuration etc). I have configured Router 2 with Cisco VPN client and can connect to this using VPN client application from my home PC. However, once I connect to it, I am not able to ping anything inside this network other than Router 2 IP (192.168.x.251).
Is there anything else that I would need to put into the configuration so that I can ping everything inside the network?
View 4 Replies
View Related
Aug 30, 2011
sample config for ASA 8.4 L2L VPN using Policy NAT?We could have multiple VPN tunnels terminated on the central ASA and our customer's LAN subnets could be interfering.Basically I need to build something like this [URL]but the problem is that I have ASAs running 8.4
View 2 Replies
View Related
