Cisco WAN :: Configuring Remote Access On 881?
Dec 10, 2012
I'm configuring remote access on my cisco 881. Protocol PPTP was chosen.I've configured PPTP VPN access on my router, but there's an issue with accessing my LAN. I can access my Internet connection and open web sites, but I'm not able to access my local resources.I can only Ping my router's interfaces (192.168.2.10, 79.104.14.62) and Internet resources. For example, I can not ping switch, directly attached to the router, with address of 192.168.2.2 and other hosts on LAN.
View 1 Replies
ADVERTISEMENT
Apr 20, 2011
I am configuring Remote Access IPSEC VPN in IOS Router 12.4T.I am able to establish IPSEC VPN from VPN Client 4.0. But I am able to access all the LAN machines from this client connected.I want to restrict access to only one server in my LAN rather than accessing all the servers in Datacenter.For example
-Group FTP should be able to access only FTP Server with ip addess 10.1.1.21 on Port 21
-Group WEB should be able to access only WEB Server with ip address 10.1.1.80 on Port 80
View 11 Replies
View Related
Oct 28, 2012
I am trying to configure RemoteDesktop on a home lab ASA5505 with IOS 8.4.1 and no matter what I tried, I am unable to remote into a local server behind the firewall. I've searched online and found several threads with solutions online including here at Cisco Support Community forum and have tried them all, but have no success. I'm sure it may be something very simple that I've missed.
ASA Version 8.4(1)!interface Vlan1nameif insidesecurity-level 100ip address 192.168.148.5 255.255.255.0!interface Vlan2nameif outsidesecurity-level 0ip address 67.x.x.75 255.255.255.128!interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2shutdown!interface Ethernet0/3shutdown!interface Ethernet0/4shutdown!interface Ethernet0/5shutdown!interface Ethernet0/6shutdown!interface Ethernet0/7shutdown!ftp mode passivedns domain-lookup outsidedns server-group DefaultDNSname-server 67.x.x.75domain-name demo.localobject network insidesubnet 192.168.148.0 255.255.255.0object network rdp-serverhost 192.168.148.105object service rdpservice tcp source eq 3389access-list outside_in extended permit tcp any object rdp-server eq 3389pager lines 24mtu inside 1500mtu outside 1500icmp unreachable rate-limit 1 burst-size 1no asdm history enablearp timeout 14400nat (inside,outside) source static rdp-server interface service rdp rdpnat (inside,outside) source dynamic inside interfaceaccess-group outside_in in interface outsideroute outside 0.0.0.0 0.0.0.0 67.x.x.75 1
View 7 Replies
View Related
Sep 30, 2012
I have a 6 month old RV042 with the newest firmware (v4.2.1.02). Over the weekend I configured the DMZ which after a lot of trial and error, was able to get working. Prior to configuring DMZ, I was able to log in with remote management. However now remote management no longer works. I've tried:
- Rebooting the router
- Turning the firewall off/on
- Turning remote management off/on
- Changing the remote management port
The only step I haven't taken is resetting the router back to factory defaults and trying to reconfigure it all again. This router is so finicky I have no faith I'd be able to get my current functionality back again.
View 2 Replies
View Related
Nov 2, 2011
I have a 2911 router where I was configuring the device to allow remote desktops connections. Everything is working properly, but for some reason my ACL has disappeared.
View 5 Replies
View Related
Sep 20, 2012
At the main site, I have 3 5508 WLCs each part of a mobility group (wlcMain-MG). In NCS, under "System/Mobility Groups" for each controller, I see each controller listed as "local" with the other Controllers listed with the group name "wlcMain-MG". None of the SSIDs are "anchored".
I have a new site with a 2500 series WLC that I would like to push out 2 SSIDs. This site contains two customers. One customer is the Main customer with the second customer leasing space.
I have the Cust2 WLAN at the remote site set to have traffic egress out of a local interface on the 2500 WLC (this traffic is then tunnelled back to their Main location via an ASA which houses the DHCP scope for that vlan). I can connect to this SSID, obtain an IP Address off the ASA and am tunnelling without issue.
For the Cust1 WLAN at the remote site, I would like to broadcast an SSID from the Main location on those same APs which are registered to the 2500. It is my understanding, that I anchor the SSID at the Main site and identically configure the SSID at the remote site. This will allow the end user to authenticate to the RADIUS server at the Main site and be placed upon the correct vlan (we are using DOT1x and dynamic vlans).
For my test, I am starting simple. I have created a test WLAN with no authentication. At the main site, on 5508 WLC3, I have created the test WLAN, and placed the interface into a low security vlan (call it VLAN-low). I have anchored this test WLAN to that controller. At the remote site, I have created the same WLAN (but placed it into the management interface for now - the VLAN-low does not exist at the remote site) and configured that WLAN to anchor back to the WLC3 at the main site. I am unable to obtain an IP address from the remote site. I have placed the remote site WLC in the wlcMain-MG as well. How close does the code need to be on the controllers - the 5508s are at 7.0.116.0 and the 2500 is at 7.0.220.0? What could I be missing?
View 5 Replies
View Related
May 7, 2012
I have created remote access vpn in my ASA 5505. The tunnel is established but i am not able to access the internal network.
View 3 Replies
View Related
Aug 16, 2012
Im currently connected to a remote acess vpn setup using the vpn client and am unable to get anywhere around my network, this normalyl works fine The only difference i can see is that the are multiple virtualaccess interfaces pointing to my public ip address, which im presuming is causing routing issues How can i clear these unsed virtual access lines and how can i make it forget them automatically after disconnects?
View 5 Replies
View Related
May 17, 2011
We have an ASA5510 and a few days ago we were unable to access some segments from remote access VPN, the problem was not the config. A few hours later the problem was resolved on its own and I suspect we have an IOS bug. This has happened a few times in the past and its becoming an issue. How can this be confirmed and which IOS should we upgrade to? Prefer not 8.3 given the syntax difference
View 1 Replies
View Related
Nov 1, 2011
Based on my diagram, my computer A (192.168.100.11) can ping and access my computer B (192.168.10.14). But, when i'm home and i use remote access vpn (192.168.200.x) in cisco asa 5520 to connect to my computer A is okay. But, when i try to ping my computer B is not okay. I already do the exemption for 192.168.100.x and 192.168.10.x in nat rules for inside interface (192.168.100.2) ...
Should i put routing from outside 1.1.1.2 to 192.168.10.x by using 192.168.100.1 as a gateway?
View 1 Replies
View Related
Dec 22, 2011
I have dozens of Cisco Aironet 1100 access points, each is managing its own wi-fi with DHCP. I had to disable dhcp on them because they are on a wired subnet where I am using the static IPs and don't want my wired clients to get DHCP addresses, nor someone to be able to plug the wire into own laptop and get on the network. It's been working fine with one exception - I need to be able to ping my access points from the central site, and I can't. What IOS command would enable ICMP echo on my access points in this case?
View 8 Replies
View Related
Dec 18, 2011
I have successfully been able to allow outbound access from inbound hosts on the appliance; however, I have only one outbound IP address and had to configure outbound access using static PAT. What I need to do is to configure access to certain inbound hosts from outside. What's wrong with my running config? Below are the commands that I believe need to be changed from the configuration. [code]
View 14 Replies
View Related
Jun 11, 2013
How to configure ssh in all access points ( cisco 3500 Access points ) under wlc 5508 ?
View 3 Replies
View Related
May 29, 2012
I has 4 VLANs and I want a MAC address has access to a VLAN, but not to another.
I used ACLs, but this will block the access to the access point, How to get the mac address will have access to a VLAN, eg no other Vlan? I has 4 VLANs and I want a MAC address has access to a VLAN, but not to another.
I used ACLs, but this will block the access to the access point, How to get the mac address will have access to a VLAN, eg no other Vlan?
View 6 Replies
View Related
Jan 25, 2012
I have a old server that has custom apps developed by a bankrupt company that we can't replace yet. We are being tasked with upgrading the Operating System and security patches, while preserving the existing live server. I was able to accomplish this by virtualizing it, then cloning the virtual machine. Where I got stuck was, the custom app requires a specific host name. So, I got the idea to have the two servers live on different sides of the firewall until the test platform is accepted and the old live one can be retired.
My problem is that I have no experience with configuring a real firewall like this asa5510.
Servers are:
CM1 live server
CM2 test platform
ADS Active Directory and File and Print
[code]....
I've started to carefully poke around in the Cisco ASDM-IDM, but haven't figured out how to access the DMZ from the outside (so far just testing with http as I don't have my certificate to setup https just yet). Am I missing something to get through to the DMZ from the WAN side?
View 2 Replies
View Related
Nov 14, 2011
how to set up a WAP54G v3.1 Access Point if you've misplaced the CD?
View 5 Replies
View Related
Sep 15, 2009
I have a DLG-4500 router as my primary router and want to connect a second router (DIR-655) to it as an extention of the LAN to the second floor of my home. I have found instructions on doing this with most other routers, but not DLINK. In fact when doing the initial configuration and trying to disable the WAN link on the second router by using a bogus IP address string (127.0.0.1) The router won't let me save the change? What are the steps for configuring a secondary router cascaded to the primary (both wireless) to extend network coverage.
View 13 Replies
View Related
May 17, 2012
i got some problem configuring my cisco 887VAW internet access point.I want to be able to manage it thru ssh console with the service-module wlan-ap0 session mode. And i want to access thru http but it's not working too I show you my config
This is my config :
Current configuration : 3281 bytes
!
! Last configuration change at 21:43:11 UTC Fri May 18 2012 by jon
! NVRAM config last updated at 21:46:05 UTC Fri May 18 2012 by jon
! NVRAM config last updated at 21:46:05 UTC Fri May 18 2012 by jon
version 15.1
[code]....
View 1 Replies
View Related
Apr 19, 2012
I recently purchased a Ciso 1200 Series WAP and I want to bridge this to my existing Cisco Wireless Router So I can extend my coverage. I have done some research but keep coming up short as to where I need to start. Note*(I do not want a physical connection to the WAP, I simply want to be able to bridge the connection from my existing Wireless router to my WAP.
View 1 Replies
View Related
Jun 10, 2012
I need configuring RDP access to my local server from a remote location on my Cisco ASA 5505 Firewall.I have attempted to configure rdp access but it does not seem to be working for me. How to modify my current configuration to allow this? I need to allow the following IP addresses to have RDP access to my server: [code] The other server shows up as 99.89.69.334 but is working fine.
I already added one server for Static route and RDP but when I try to put in same commands it doesnt allow me to for this new one. My configuration file and what are the commands i need in order to put this through. Also, if there are any bad/conflicting entries. Also I have modified IP information so that its not the ACTUAL ip info for my server/network etc... lol for security reasons of course.Also the bolded lines are the modifications I made but that arent working. [code]
View 8 Replies
View Related
Apr 3, 2012
I have 2 APs, Cisco Aironet 1040, and 2504 WLC.Is it possible to configure guest access (Guest SSID/VLAN and Corporative SSID/VLAN) without dedicated guest WLC in DMZ?
View 4 Replies
View Related
May 17, 2010
i have a router to connect on Internet, i need it because it let me use VOIP. I want to use WAG120N like Access Point Wireless because my VOIP router is not wireless.
How i have to configure it? What kind of incapsulation i have to use? VOIP router IP: 192.168.1.1
If is it possible (and if it is useful) i would to configure WAG120N with 2 IP, first one: 192.168.1.101 (to communicate with VOIP router and to let me go on internet) second one: 192.168.0.1 (to let me have control on it's configuration)
My devices will connect to 192.168.0.0 network
View 9 Replies
View Related
Mar 26, 2012
We have network that uses a Cisco router and use a WAP54G to access the network wirelessly.
We use static IP address so if someone wants to use the wireless an IP address has to be assigned to it and be manually configured for IP Address, Gateway, Sub Net Mask and DNS.
This is becoming unwieldly, but it is safe. Is there any way to config the WAP54G as a router that would automatically assign an IP address in a range just for wireless devices.
Therefore the wireless devices could be set up as DHCP and we would use WPA/WPA2 encryption with a passkey, instead of just assigning static IP addresses.
View 1 Replies
View Related
Mar 21, 2011
I have a rental property with 3 apartments that are sharing the same internet connection. The users are consistantly downloading more than their monthly allowance, and I would like to monitor how much data each apartment's users are downloading.My plan is to purchase a Cisco WAP2000 Access Point and configure 3 SSIDs (one for each apartment). I havent decided if each SSID is to be setup on it's own VLAN.
Will I be able to use SNMP to monitor the data that each SSID has downloaded each month? I am happy to use a network management software package (such as PRTG from Paessler) for the actual monitoring itself, but I just need to know if the SNMP in the WAP2000 Access Point will provide the information to begin with.
View 1 Replies
View Related
Dec 19, 2011
how to configure Cisco 1252-AG-A-K9 Access Point Root and Repeater?
View 9 Replies
View Related
Mar 26, 2013
I have a Netgear N300 and am using a linksys wrtg54g flashed with dd-wrt as an extender. I would like to setup my wireless network to limit various devices (laptops, iPod touch, etc) to certain times of the day.
How do I configure both devices to limit connectivity? I've got it down pretty much on the NetGear using a MAC address filter and scheduling the services, but I am not sure how to get the extender to do the same.
View 3 Replies
View Related
Dec 16, 2012
I am trying to configure an older Belkin Router (Model Number 5FD8230-4) as an Access Point so that I can boost the range of my network. The problem I have is in configuring the old router. It won't allow me to change any settings, or at least the changes don't stick, even after clicking "apply changes". I tried creating an administrative password but I am not even sure that this is working. I am using a Macbook, so perhaps this is an Apple compatibility issue. I have tried resetting the router and reverting to Factory default settings, but no joy.
View 3 Replies
View Related
May 2, 2011
I’m configuring a L2TP IPSEC VPN on a 5505 asa so that windows 7 clients can natively connect. It connects correctly during Phase 1 and 2, but I can’t ping anything or access resources on the internal network. This is my first time working with an ASA.
Master# sh run
: Saved
:
ASA Version 8.2(2)
!
hostname Master
domain-name service.local
[code]....
View 2 Replies
View Related
Feb 27, 2012
configuring DHCP on access point, i have cisco 1142N access point, in my network.. working in autonomous mode, i have assigned a static ip to access point with default gateway.. from AP i'm able to reach internet and user connecting to access point are not able to get ip.. i have DHCP server in my network. how to make access point to fetch ip from my dhcp server and assign the saem to client.
View 10 Replies
View Related
Apr 26, 2013
Having some problems connecting up my "new" AP My current set-up consists of a Netgear "Virgin Superhub" cable modem/wireless router, a ZyXEL WRE2205 (repeater) in the hall on the first floor, and Ethernet connections through to a number of rooms, including the loft. I can't get wireless access in the loft, and I want to put the AP up there, connected through Ethernet. I want to use the same SSID and security for the AP as on the router and repeater so I can roam around(!) That's possible isn't it?What I've done so far (which hasn't worked) is connected via laptop to AP, set AP into AP mode(!), set the AP to dynamic IP, set the SSID / security the same as the router/repeater, plugged the AP into the Ethernet and tried to connect.
View 7 Replies
View Related
May 28, 2011
I just purchased 2 E2000 routers at BB and was assured the second one could be configured as a repeater access point. Some current messages indicate this is not possible.Will a Cisco moderator please confirm and clarify repeater options.
View 2 Replies
View Related
Jan 26, 2013
I have a 2960 SI lan lite switch that I am configuring for admin and guest access. I have wireless AP's plugged into trunked ports 2 and 3. I am using two vlan's (in addition to the native VLAN). Vlan 5 for Admin and Vlan 10 for guest access. I have ACL configured on the router preventing guest users from accessing the Admin network. I want to prevent those on the guest network from seeing other hosts in the vlan however the lan lite software does not support port ACL's. Any way to accomplish this with this switch.
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
[Code]...
View 5 Replies
View Related
Jan 3, 2013
I have a tplink acess point TL-wa5110G . I have WISP ( wireless internet service provider). I have configured the acess point on wisp client router mode and wan type to pppoe gave the username and pwd..Now i want to share internet wirelessly. now my question is that can i connect the aces point to wan port of the wirless router to share internet wirlessly? Because i have seen the instruction figure in tplink access router where they have shown that u can connect it with with unmanage able switch to share it to wired lan.i want to ask can wirless works to share internet if i use wireless router to access point.
View 1 Replies
View Related
