Cisco Wireless :: Setup VLAN On ASA 5510?
Apr 18, 2013
I am looking to set-up an isolated WLAN for the users in my organization and how to proceed What I have is the following
Cisco 5508 Wireless LAN controller
Cisco Catalyst 3750 24 port (not sure what exact model)
Cisco AIR-AP1131AG-A-K9 POE Access Point
Cisco ASA 5510
Currently what I would like to do is to setup a VLAN on the Cisco ASA 5510, connect the Catalyst to the VLAN and connect the 5508 Wireless LAN to the Catalyst via Fibre. From there on in - I would connect each AP to the Catalyst? The proposed scenario is that the VLAN would be in a DMZ and have direct access to the Internet without any filtering and users would connect their devices to the AP and get a DHCP address and be able to surf with freedom?The problem is - I am unsure as of where to start. I have been certified Cisco in 2001, however I havent started to use my skills until now.The Vlan would be the following: 192.168.20.X
View 4 Replies
ADVERTISEMENT
Nov 27, 2012
I am trying to set up a Vlan on an SF-302-08 small business switch. I would like two Vlans both with internet access but the two cannot communicate with each other. I am not really sure how to go about setting this up as its all fairly new to me. I have successfully set up the Vlans and the ports on each VLAN cannot communicate with each other however the internet access will only work when plugged into either VLAN but wont work on both together
View 1 Replies
View Related
Nov 14, 2011
I am trying to set up VLAN on my cisco router, where do i check for the setting for creating a VLAN on my Wireless AP. Is it possible on this model.
View 1 Replies
View Related
Feb 10, 2012
I am running a /24 network in Active Directory with my ASA acting as gateway and firewall. Standard interfaces (Ethernet 0/0 as outside, Ethernet 0/1 as inside)
As of now I have no VLans set up, but I need to setup wireless Internet access for guests... I need directions on how to setup a Vlan with its on DHCP for these aguests... I can then make sure that my APs can be pointed to the same VLAN... I am not familiar with CLI, have generally used ASDM. I am currently running ASDM 6.3(1) on an ASA with version 8.3(1).
This is something I need to do quickly as we are expecting 20-40 "guests" shortly, and I don't want them to use our internal DHCP server addresses.
View 3 Replies
View Related
Jan 11, 2012
Just trying to figure out how LAP manage clients in a h-reap setup.Have a setup with native vlan on 144 (switch and AP) and ssid tagging in other vlan... Got this on switch:
Jan 12 10:31:43.121: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0811.9695.9b04 on port FastEthernet0/42.
Jan 12 10:31:43.121: %PORT_SECURITY-2-PSECURE_VIOLATION_VLAN: Security violation on port FastEthernet0/42 due to MAC address 0811.9695.9b04 on VLAN 144
Jan 12 10:37:42.770: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0811.9695.9b04 on port FastEthernet0/42.
Jan 12 10:37:42.770: %PORT_SECURITY-2-PSECURE_VIOLATION_VLAN: Security violation on port FastEthernet0/42 due to MAC address 0811.9695.9b04 on VLAN 144
Wonder why clients MAC is seen on native vlan (and ofcourse also on taged vlan) ...?
View 4 Replies
View Related
Nov 11, 2011
I've been reading this manual day in and out and can't figure it out. I think im getting Dell's & Cisco's Terminology mixxed up and that's why i can't get this switch to work.
I know my vlans work on my TZ210 ( sonicwall firewall) because they work on my dell managed switch, but now that i have my Cisco one, id like to setup my vlans on this..
If i can get one working i can do the rest.Trying to create vlan 50, iv'e created it but i don't know if i have done it correctly.
View 7 Replies
View Related
Apr 18, 2013
I'm trying to setup following scenario which is working with no issue on netgear switches (like GS108) but I have not been able to get it to work on Cisco SG-200 I did quite a bit of reading here on many post but nothing seems to work.
View 6 Replies
View Related
Aug 23, 2012
I have a Cisco RVS400 router at my restaurant. In lan ports 1-3 on the router, I have plugged in my point-of-sale computers.Into LAN port 4 I have plugged my wireless access point that is in my dining room.
The wireless access is there ONLY for the customers to access the internet. I want to make sure the customers cannot access my company data, can this be accomplished through the use of VLANs ? If so, how do I do this? All of my devices are configured for dhcp..if that's relevant.
View 2 Replies
View Related
Apr 7, 2011
Cisco ASA 5510 with static routes. I created a new internal vlan and added the correct route to the ASA. Internally the vlan is fully accessible but when I connect to the VPN I cannot communicate with systems on it.
The dynamic access policy and associated ACL are fine. A system associated with this policy but not on the new vlan is accessible thru this policy.
View 4 Replies
View Related
Feb 6, 2013
I have the following setup using two SF302-08P PoE switches:
1st floor
=========
Switch #1 <-------> private network
<-------> public network
[Code].....
I have tried to make the config in switch #2 identical to switch #1, but something is still wrong. Is this most likely a VLAN setup problem, or what?
View 3 Replies
View Related
Jun 11, 2012
setting up two VLANs for my WAP: one for all local network and internet traffic and one for just (guest) internet traffic. I just purchased both devices but I don't know if I have the option for free Cisco phone support.
View 1 Replies
View Related
Oct 7, 2012
I would like to create 3 x VLANs on an SG 300-28P and have them completely isolated from each other, for example ports 1 - 12 on VLAN 1, ports 13 - 24 on VLAN 2 and ports 25 - 28 on VLAN 3. No communication between any of the VLANs.
Any simplest way to achieve this?
View 4 Replies
View Related
May 27, 2012
i'm setting up vlan and inter-vlan routing in my lab. My vlan work well (routing between them and dhcp relay) on the LAN side of the ASA but they cannot reach internet trough the ASA.
Here my ASA settings :
Note : I know that the physical interface musn't have an @IP but my present network needs one to work. I'll fix this during my next tests.
: Saved
:
ASA Version 8.2(1)
!
[Code].....
View 8 Replies
View Related
Mar 9, 2012
One of our customers has asked us to Nat from the LAN to the Voice LAN based on destination IP address in order to access a public phone server through a vendor managed voice router..
Internet for everything else
|
|
Inside ------------------------> ASA 5510 -----------------> Voice router ------> outside to public phone server only
10.10.1.0/20 10.10.1.7/320 172.16.20.1/24
Voice------------------------->
172.16.20.0/24 172.16.20.254/24
Here the ASA5510 has an interface in both networks and the inside network can ping the voice network through the firewall by using non at acls. The phone server can only talk to the 172.16.20.0/24 network. So I need to nat the 10.10.1.0/20 network to the Voice interface on the ASA 172.16.20.254/24.
So I think I need the following static but I get the error below:
static (Inside,Voice) interface 10.10.0.0 net mask 255.255.240.0
WARNING: All traffic destined to the IP address of the Voice interface is being redirected.
WARNING: Users will not be able to access any service enabled on the Voice interface.
ERROR: Invalid net mask with interface option
[Code] .......
View 5 Replies
View Related
Feb 25, 2013
User want to create on 5 network , 100.x , 200.x , 210.x , 250.x , 220.x .at the ASA5510, no enough port for 5 network.So I want to create 4 vlans on eth 0/3. I can create vlan but i cannot run this command " switchport mode trunk" " "switchport trunk allowed vlan list" how can be done for that?
Actually i want to use like thisASA5510-----4 vlans on eth 0/3------switch----vlan200,vlan210,vlan250,vlan220.
View 1 Replies
View Related
Apr 26, 2012
I have a general networking question regarding VLANS, multiple broadband connections and accessing PC's on both setups from each other.What I would like to do is have 2 broadband connections, one a cable connection and one a DSL connection. I would like to run them both through a Netgear FS-726T switch. Since the cable connection will go through a Linksys router giving out I.P.s in the range of 192.168.1.x and the DSL will probably use the same range, I would like to keep specific PC's connecting through the DSL connection and some other PC's specifically through the cable connection. I THINK that this can be done via the use of VLAN's set up on the Netgear switch but I am unfamiliar with setting them up. I've read through the manual and researched it online but I must be missing something.Due to the bandwidth limitations on the Comcast connection, I would like to avoid any data coming from the PC's on the DSL connection from going out through the cable connection (I do customer support for my business and want customers to be able to access files on my file server and also be able to back up their PC's online to my backup server but on the DSL connection. I will eat up my cable bandwidth in a hurry just from the backups alone. I would like to set up all the PC's with static I.P. addresses if possible. Now, I also need to be able to remotely access any of the PC's from outside my network (which I can do now) but I need to be able to access the cable connected PC's from the DSL connected PC's and vice versa.I have a feeling what I want to do is a mess and may not even be feasible. I have asked the networking personnel where I work but (primarily because they are arrogant SOB's) they won't even give me the slightest bit of information.
View 1 Replies
View Related
Mar 3, 2011
Trying to work out if I can setup a VLAN interface on a 1721 router.The only interfaces that are listed are the Ethernet (W1-ENET) and the Fast Ethernet interface.I'm still super new to all of this and learn how to change IOS via rommon and TFTP after realizing I had an IOS too large for the memory?
View 3 Replies
View Related
Apr 24, 2012
I have a RVS4000 and I am going to configure vlan in the near future. Among all other configurations sent by the internet provider company is this one :
Firewall NAT :
from x.x.2.0/24 to 0.0.0.0/24 should be NAT
from x.x.2.0/24 to x.x.0.0/21 should not be NAT
From all the other configurations, this one is not clear to me. Can this configuration be done on a RVS4000 and where can it be done.
View 1 Replies
View Related
Apr 5, 2013
So I've got an odd issue here, have an older 4948 that I'm trying to setup on our management vlan so i can manage it from another host connect to the switch. I can't figure out why its not working. Below is the config
vlan is 64 and all the trunk and access ports that are on vlan 64 are working just fine. Just can't hit the switch from a machine on the 64 vlan.
!
interface Vlan1
no ip address
[Code].....
View 9 Replies
View Related
Nov 19, 2012
I am using an SRP541W router and i am trying to configure 2 vlans, each one to use its own Wan:Here are the dhcprules and vlans:As can be seen, each one has its own wan interface.
Vlans:As can be seen, each vlan is using its own ports and dhcp rule, so, now they should be separate.
Both Wans are connected: So now (at least as i see things) the two vlans are separate and using different Wan. But the reality is different, everything is going out using Wan1.Also in the Interface Info you can see that the 2 vlans are listed under the Wan1.
The rest of router setting are default.
View 17 Replies
View Related
Mar 23, 2013
May I know the reason why we cannot create interface vlan on Cisco ASA 5510?
View 2 Replies
View Related
Jan 13, 2013
Whether it is possible to have same vlan on multiple interface on ASA 5510 and higher models ?
View 2 Replies
View Related
Dec 14, 2011
I am working on the exact same configuration as noted here [URL] that uses subinterfaces on the asa. I have two interfaces on my stacked 3750's configured as trunk ports (primary ASA on primary 3750 stack member, secondary ASA on secondary 3750 stack member).
My questions is what should the DG be configured on the 3750. Can I keep the 3750 in L2 or will I have to enable L3 routing? Should the VLAN interfaces be configured.
The port that the ASA is configured with has 3 subinterfaces on VLAN 100, 200, and 300.
The subinterfaces are G0/2.100, G0/2.200, and G0/2.300.I am in the middle of converting from 3 separate DMZ switches, each attached to their own port on the asa which is their default gateway to one physical port on the ASA broken into 3 subinterfaces which then connect to stacked 3750's. The stack will then have the 3 separate DMZs in actual separate VLANs.
My goal is to leave the default gateway for each dmz on the ASA so I don't have to modify other areas of the ASA config.
View 1 Replies
View Related
Mar 18, 2013
I am extremely new to network but also excited with the things you can achieve with a Cisco switch.For about 3 months I sat down looking at my "Cisco C2950-24 Switch", this surely for such a beastly looking thing it must be able to do something other than just allow you to plug in cables. So with that said I started to do some reading and watched a couple of You Tube Videos.I am on the route to complete my first goal and thats have my own VLAN setup with 1 Server and 6 clients. The Server is running ESXi therefore a few other servers are running inside it too.So my VLAN - VLANID 20 running the network 172.22.22.0. On the physical switch I have the following:Port 1 - WAN incoming connection from my Router on the network 192.168.178.0Port 2 thru 9 all running on VLAN 20.By the way I am using the GUI Cisco Network assistant
View 4 Replies
View Related
May 21, 2013
i have a question about the proper method to setup up vlan(s) on a sg200 switch with a sv220w router. Should i setup the vlan on the router or the switch? I have small office setup, i need atleast 2 vlans to separate the networks. i want both to have internet access but be completely isolated from each other.
View 5 Replies
View Related
Aug 13, 2012
I'm new to managed networking. So I'm having trouble understanding how to set up my switches properly. I have a closed network with about 20 switches and 2 IDF's. No router, and no internet. I have a SLM 2024 in want to have 4 ports set up with a VLAN. I have another SLM2024 I want to be on the same VLAN some where else. Switch 1 uses port 24 GBIC as and up link port to one of the IDF's. Switch 2 uses ports 12 and 24 copper(LACP) to make a hop from another switch(ports 1 and 13 LACP)which inturn is connected to the same IDF on port 24 GBIC. How do I set up switch 1 ports 7,8,19,20? Also, how do I set up switch 2 ports 7,8,19,20? VLAN 11
View 1 Replies
View Related
Jan 30, 2012
I have a Cisco 3845 Integrated Service Router and I have installed a Service Module. I want to use the integrated Gigabit ports as switch ports and put ports in the Service Module and Gigabit port in a VLAN.
Is this possible? can it be done by setting internal Gigabit link as trunk and how? Below is the somewhat the setup i am looking for
Service module
fa0/1 |
fa0/2 | Vlan X
fa0/3 |
[Code]....
View 7 Replies
View Related
Jan 16, 2013
Topology: 3560 <-access-mode-link-> ASA5510 - Internet,3560 has 3 VLANs and 3 corresponding SVIs (default-gateways for VLANs),Just configured RAS VPN on ASA5510 and successfully made connection,Now, from RAS VPN (IPSEC) client workstation CLI, can ping all 3560 SVIs,CANNOT PING host devices plugged into switchports.
View 1 Replies
View Related
Oct 25, 2012
we have a base license ASA 5510, and been trying to get ICMP working to check that we're routing and not hitting any NAT translation. We have a VLAN280 setup to ISP for VPN link to remote site and another VLAN281 for internet access for internal users.
Users can browse internet from (name _inside interface e0/1 access port) which is fine. When I do a ping to remote office through the VPN I get a response pinging from VLAN280 name VPN_Link. When I do a ping from name inside interface I don't get a response both are security level 100 with same-security-traffic permit inter-interface configured.
Config:
!
interface Ethernet0/0
speed 100
no nameif
[Code]....
View 11 Replies
View Related
Nov 13, 2011
Unable to create VLAN interfaces in ASA 5510
View 1 Replies
View Related
Jul 25, 2012
I have a dell powerconnect 2848 switch and setting up a vlan 3 an make port 1 mngt, port 48 uplink to layer 3 switch and tag vlan 1 and 3 to port 48 with cli commands for this setup. and also to untag ports 2-10 for computers
View 1 Replies
View Related
Mar 26, 2013
I have registered here to clarify some things about VLAN's. There are so many (different) names and mentions that i found tat my vision gets blurry looking through all the info.I have a setup at a client where the Guest WiFi access needs to be separated from the normal LAN where all the normal devices are attached to. The guests are not allowed to reach the IP camera's and printer etc. etc. . I am trying to visualize how the traffic should flow but the Tagged, Untagged, PVID, Trunks and other names that i found make it difficult for me to see how it works together.
View 8 Replies
View Related
Feb 3, 2012
I'm looking to setup Inter-VLan routing on a 4800G switch.
I'm looking for all workstations (VLAN1) to be able to talk to the windows network (VLAN2) and to our Novell network (VLAN3)
but I don't want Windows (VLAN2) and Novell (VLAN3) talking to each other. Is this possible accross a single switch? I have 7 switches available to use if needed.
View 5 Replies
View Related
