we are having some trouble setting up our router (Cisco 861W) webserver on the LAN so that it can be accessed from outside (http via port 80). When we try to access it via the web address, we just get the login window of the Cisco router software?
View 10 RepliesIs there a way to set up a new admin user on ACS 5.2 appliance through logging into the device via SSH?
We lost our password for https access but can get in via ssh. I want to set up another user with https access from the SSH interface.
I will be adding wireless access points or repeaters on a business network. The business already has one wireless router using a https login, that 15 computers are wired to, through switches. This Secure http router is directly connected to the cable modem.Would I be loosing the benefit of Secure http by adding wireless access points or repeaters that don't support it? Or would they be securely routed by the main https router connected to the gateway?I have never had the opportunity to work with a secure http router before.
View 4 Replies View RelatedMy father works at a mall in a shop and had bought a Brother 2270DW printer (wireless and wired networking) to find that it was a bit bigger than he had anticipated it to be and does not fit on his kiosk desk, and so gave the printer to me yesterday. He was wondering if it is possible to setup the printer so that it could be printed to from over the internet. After I reserved a DHCP IP address for the printer, changed 'admin' and 'user' passwords, and disabled some protocols, I made sure IPP was enabled and that port 631 (TCP) was forwarded on my DD-WRT router.
I added the printer as my external IP address [URL] in Windows, selected the correct driver as provided by Windows Updates, and attempted to send a test page without success.This would be my first time trying to setup a printer for over-the-Internet printing (aka IPP).what I could do to try get this to work?
I have a fresh SR520 that I only did two things to it using CCA 3.2(1):
1. Assign the address of FA4 to be 1.23.456.90 with a mask of 255.255.255.252
2. Declared a static nat of 1.23.456.90 port 80 to 192.168.75.12 port 80
I connected laptops to two ports:
1. FA0 (DHCP assigned laptop the address 192.168.75.12)
2. FA4 with the address on the laptop set to 1.23.456.90 and mask of 255.255.255.252
This is an exercise to simulate a cable internet configuration I will install the SR520 into.I can ping and point my browser to 1.23.456.89 and access the web server running there on port 80 via the inside laptop.I CANNOT point my browser to 1.23.456.90 from the outside laptop and make a connection.
What I am doing wrong with NAT? (I believe the problem lies therein as I did even try telling CCA to delete the firewall and I still could not connect to the inside web server).I have a network monitor (Wireshark) on the inside and see nothing coming across. I THINK I see successful NAT translations in the NAT logging (also in the attachment).
i had done inter-vlan routing , attached a DNS server to that network, i didn knw how to config a server to act as http??? so that i can view webpages forn systems of that network??
View 3 Replies View RelatedI am trying to set up my router to grant http traffic a minimum bandwidth of - for example - 5,000 kBit (if there is any http traffic).
So I set http min. rate to 5,000 while I set nntp min. rate to 1 However, when I run nntp downloads on several connections (e.g. 10) my single http download never goes above 1,000 kBit. Without any other connections I reach 8,000 kBit.
I am using a single 12 MBit line.
I am having pentium p3 zenith make,window xp sp3 is the operating system. Belkin router N150 is being used.,I am able to get connection through this router on other p4 pc of my friend.,but when I try to connect to my pc.,belkin router set up do not display.,and diagnostic network connection ,indicate that error 12007 could not connect to HTTP,FTP etc., IE 8 and mozilla firefox are installed and both give the same error i.e. connection to internet could not be established
Quote:
Windows IP Configuration
Host Name . . . . . . . . . . . . : home-1d64a843b7
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes[code].....
I have one server-A(windows 2008) installed one application called"host front" which gives athentication to connect Linux(mainframe console)server(SERVER B). These 2 servers are bihind the firewall.If one internal user who has the athentication to logine server-B ,tried to login server A,will get the" username and password"screen and once they enter the username and password ,will get the server-B screen.But if somebody try to connet via MPLS(we need to test MPLS site customers) from outside via ASA 5540 ,to server-A will get the "username password" screen and once enter the credentials,after 1 minitue will get error"http server faild to send datas to the server" and will not move to server -B screen.Where do you think is the problem?
View 3 Replies View RelatedI just upgraded my ASA 5585 cluster from 8.2 to 8.4. I also upgraded the asdm .bin from 6.35 to 6.43. after rebooter the cluster, I try to access it with ASDM installed on my computer but it blocked at 17%.I tried to access [URL] but I just an error (with IE & FF) [code] What did I miss in the ocnfiguration ? I precise that I never used the http page, I already had the ASDM installed from another ASA.
View 4 Replies View RelatedI using IOS c2950-i6k2l2q4-mz.121-22.EA14.bin but no support command "ip http secure-server" and I not connect switch by CNA. How I fix ? Or IOS C2950 support ip http secure-server and ssh ver2 ?
View 1 Replies View RelatedI have a customer who used to own a 3750 with a older version of IOS. The switch he had used a three year old version of IOS which allowed him to browse to the switch IP and manage it via HTTP without entering a password at all. Now that he has a replacement switch with a new ver of IOS (since the previous switch died). We slapped the config on from the old switch but no matter what we do (understanding that new http aaa authentication commands were added) we cant get this thing to let him in without prompting him for a password. I understand this was an insecure config to begin with so I shouldn't be advocating using it in the first place, but this is what the customer wants.Basically what I'm trying to figure out is are we banging our heads into the wall for nothing as the "ip http server" will not allow an authentication method of "none" anyway? None of the offical documentation I have read for the http aaa authentication cmds shows this as an example nor have I found any blog posts on how to do it ether. Perhaps Cisco removed this by design.
Here is the config:
aaa new model
aaa authentication login default local
aaa authentication enable default none
aaa authentication login none none
ip http server
ip http authentication aaa login-authentication none
[code]....
We have ASA5520 and we want to configure a VPN IPSEC profile so that a partner of ours can access only a server and only on HTTP port.I've tried configuring split tunneling with an Extended ACL but probably I'm missing something. I just configured the ACL so that it included any source to our server's IP on HTTP port but when testing, it didn't work.
However, if I configure a Standard ACL on the split tunneling I can access the server and all the services it provides.Do you know if I'm missing anything on the Extended ACL configuration?
Should I configure this any other way?
I recently "inherited" a CSS 11503 - I've only used ACEs before - and I want to get HTTP keepalives working.To start, I created a test service:
lb-1# show run service sunbird-http-7025-test
!************************** SERVICE **************************
service sunbird-http-7025-test
port 7025
ip address 141.211.229.168
[code].....
I have one server-A(windows 2008) installed one application called"host front" which gives athentication to connect Linux(mainframe console) server (SERVER B).These 2 servers are bihind the firewall.If one internal user who has the athentication to logine server-B ,tried to login server A,will get the" username and password"screen and once they enter the username and password ,will get the server-B screen.But if somebody try to connet via MPLS(we need to test MPLS site customers) from outside via ASA 5540 ,to server-A will get the "username password" screen and once enter the credentials, after 1 minitue will get error"http server faild to send datas to the server" and will not move to server -B screen.
View 1 Replies View RelatedI need getting access to my http server. I have a host name that I configured to point to my IPS IP address. Port 80 is enabled on my server, but I can't seem to get access it from my web address [code]
View 5 Replies View RelatedWe have Cisco ASA 5505, 90.x.y.2/29 IP is assigned to outside interface. We have one internal HTTP server so that I use static (inside,outside) tcp interface [URL] to forward all incoming HTTP traffic to internal HTTP server 1. Now we need to add new physical HTTP server 2 so that I would like to forward
HTTP traffic to e.g. 90.x.y.3/29 to 172.16.0.11.
How can I do that? See scenario image (scenario.png) if needed.
I'm looking fot a way to do static URL blocking with ASA and when the URL is blocked present a "Web Page" to the user saying that it's been blocked.
So, i was wondering if i can use the http parameter "spoof server string" to replace the original URL sent by the user for another URL that points to an internal web server holding a basic page saying "Your URL request has been blocked".
The point is to have a way to tell users that the page they are trying to browse is blocked by a policy.
cisco WS-C6509-E Core switch with IOS "s72033-ipservicesk9_wan-mz.122-18.SXF11"
i have 2 question
Q.1 i want to upgrade this switch what is the latest IOS ver. supported by this module ?
Q.2 i need to enable http server on this switch when i run this comman it's accsebt but i cant get http work
I have a setup like this.
Foreach computer I need to go and configure the browser proxy settings and some people are getting smart and turn it to automatic configuration again.
So what i want to achieve is to have my DIR-655 to route all the HTTP/port 80 traffic to the proxy server.
That way it is transparent and then it is not needed to configure each computers browser settings.
I am pretty new to this and the router configurations.
The proxy server works fine if i configure the browser manually.
I have an ASA 5505 that I am using to connect my contractors to via an inside interface, the outside interface is my private LAN. I have setup on our corporate Proxy server to allow traffic from my outside interface of my ASA to go to the internet without credentials BUT log internet activity. The question is I want to know if the ASA can send that http & https traffic to my proxy server and all other traffic to my default route? I want to be able to send all internet traffic to my proxy server. This will avoid me asking the contractors to place proxy credentials in their browsers.
View 6 Replies View RelatedI recently bought a EA6500 to replace a EA4500 (defective). Prior to the EA4500 I had a 160N which I now use as a WAP for 801.11G devices. I thought the 4500 was good from the media server functions it offered.However since installing the 6500 I noticed:
1. I have port forwarding for http to a web server. It works fine from machines on the outside but from my local subnet 192.168.1.x I can't access the web server (I can't even ping the external address - and yes I turned the anonymous filter off). I am not using ddns and I have a static ip address (cable modem connected) to the outside world.
I have bought a 861w to replace my 877w. We switched from telco(ADSL) to Cable due to faster speeds for up and down. My current physical setup is as such. Cable modem is a straight trough with 4 lan port in the back. Al lan ports are configured by the cable company for my assigned public ip’s. (24.x.x.2 through .6 – 255.255.255.x) I also have my assigned gateway as 24.x.x.1
My goal is to setup the new router same as the old one so all interfaces (e0 to e3) use a Vlan1 and Bridge Bvi1 to get the traffic go through e4 which is my WAN port on 861. I am not even concerned abt the wireless because I can’t get this to work. I am attaching the running config on the old 877 and 861 so you all can see what it was and what I am trying to do. As of now I am so confused that my head is spinning……I am able to ping out and ping e4 from outside but I am not able to connect any pc’s or node and connect to net from inside on any of e0 to e3.
I am testing out some inspection options on an ASA 5505, and I am running into a situation in which applying a http inspection is dropping all outbound http traffic. I get a "protocol violation" error in the logs.
Here is the setup: I'm not sure why the web traffic is getting dropped.
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
[Code].....
I've created two configurations. One for the router side and one for the AP point side. However, I am having trouble getting the internal AP to bridge to the router properly. It is my understanding that the Wlan-GigabitEthernet is the internal interface connecting to the AP and the BVI1 together. I can't ping any ip address on the router side from the ap and the radio is active and we can see it but it seems that it doesn't give an ip address. [code] Is it a VLan issue or an ip issue but I could use a second opinion. I've included both configurations.
View 1 Replies View RelatedI am trying to configure interface vlan1 to get an ip address from dhcp by entering the commnad ip address dhcp ios rejects the dhcp portion of my command as not recognised although it is referred to in Cisco manuals.my IOS version is c2950-i6k2l2q4-mz.121-22.EA14.bin.I get the same problem when I try to configure ip http secure-server on the switch. Is this a known bug or whether I have the correct IOS version for these commands?
View 6 Replies View RelatedI tried to upgrade the IOS on my internal AP and now I am in a reboot cycle. I have tried to manually boot the old and new IOS images from the rommon but neither are working. here is the output I am getting:
ap: dir flash:
Directory of flash:/
2 -rwx 6563840 <date> ap801-k9w7-tar.124-21a.JY.tar
4 drwx 256 <date> ap801-k9w7-mx.124-21a.JA1
152 -rwx 548 <date> env_vars
153 -rwx 2775 <date> cpconfig-ap801.cfg
154 -rwx 2775 <date> back_up.txt
155 -rwx 3763 <date> config.txt
[code]....
I can connect to the router over VPN just fine, problem is that once I connect I can not access the 192.168.1.0 network... can't ping a workstation on the network 192.168.1.25, I can however Ping the Router which is 192.168.1.254.
FastEthernet 4 is my WAN
used this for setup: [URL]
Here is the config:
! Last configuration change at 13:50:29 UTC Tue Mar 16 1993 by cjcatucci!version 15.0no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname c861w!boot-start-markerboot-end-marker!no logging monitorenable secret
[Code].....
I have a netger router/moden connected to my phone line for broadband, an ethernet cable coming out of that to a netgear switch an then a cable going from the switch to fa4 on the 861. I can ping the netgear router from the 861, however, when I connect my PC to it, I am unable to ping let alone connect to the internet, the PC is getting an IP from the 861 and I can ping the fa4 interface from the pc. I just don't understand my I can not ping the broadband router, I even added a static route to the netgear with no luck.
View 5 Replies View RelatedI am having some issues with a 861W router connected to a cable modem. Traffic is passing fine but my SNMP monitoring tool is showing continual changes to the ifLastChage mib. [code]
View 8 Replies View Relatedi've been using a VPN to connect to my home network from elsewhere for a few months. It's set up as follows:
PPTP
Maximum Strength Encryption
EAP-MSCHAP-v2 Authentication
Now I find out that MSCHAPv2 authentication has been broken and is no longer considered secure (even by Microsoft), so I want to change the protocol I'm using to make it secure.
However, I've spent 3 hours now researching this and I cannot for the life of me figure out how to use a better protocol on my Windows Server 2012 home server. I've tried setting up PEAP authentication (still PPTP) a la Microsoft's recommendation document, but it requires a certificate. I've created a self-signed certificate but it seems I can't issue certificates (via this method) without being a member of a domain, so I'm stuck. I can't even get started with L2TP since I can't find the option for it.
My question is this: Is there a way to setup a secure VPN server using Windows Server 2012 without a domain? If so, how do I do this?
I have a problem with my router 861w and I don't know from where is this problem.
I have attached a hard drive on one of the Ethernet port of the router and I'm accessing this hard drive thru my laptop which is wireless connected. The problem is that when I start to transfer larger files from the hard drive to my laptop and the speed gets more or less 4 Mb / s the wireless card reset's and never go up after that. I have to reset the router by unplug it from the power source and then to transfer again.
I've setup a NTP service by using Cisco 2811 routers. This works fine at the moment, but in the end there are some questions left.
1. I'm using two 2811 Routers, one for primary, which is resceiving the time from PUBLIC NTP 1, and one for backup, which is resceiving the time from PUBLIC NTP 2. Is it possible to compare these to times an check if the match? And if not, generate an alarm via e.g. SNMP
2. Is it possible to check via SNMP, if the routers are reaching PUBLIC NTP 1 and PUBLIC NTP 2 for sync?