D-Link DIR-615 :: DSL-526B Can Firewall And NAT Remain Enabled
May 11, 2011
I am using the router DIR-825 together with a modem-router DSL-526B. After reading many posts, I understand that I have to bridge the DSL-526B and use the more complete DIR-825 under PPOE to connect to Internet. However, when bridging the DSL-526B, the settings are showing after setup that the firewall and NAT are enabled whereas, when looking at the quick bridging setup in the manual, it seems that they should be disabled. My questions are therefore:
In bridging mode, can the firewall and NAT remain enabled, what can possibly create a conflict with those of the DIR-825 or create complication? If yes, how to disable them, as no option for doing it in the briging quick set up?
I rencently moved house and after 10 years on cable at 19400 Mbps I'm now on ADSL 1 at 1500 Mbps. I have a DIR-655 which I want to keep, and I've purchased a DSL-526B to connect me to the Internet. (I was originally told ADSL 2+ was available, but then I was told I am on a pair gain system and only ADSL was available.
Before I set up bridging I changed my password on thr DSL-526b now I can't log into the device. Is there a way to fix this without a factory reset?
The DIR-655 has all my DHCP reservations, ACLs, Web filtering, MAC address filters, QoS and schedules. The DSL526B has only a small subset of the features of the DIR-655 so I want to set things up to use the DIR-655 as the controlling device and the DSL-526B as nothing more than a modem.
Once I'm back into the DSL modem, I can set it to bridge mode. My DIR-655 manual appears to say nothing about bridging. So...
(1). Do I only have to enable bridging on the DSL modem?
(2). My ISP runs PPPoE. I note that both devices support this. I assume I leave the PPPoE settings (username, password etc), in the DSL modem, and do not put the details into the DIR-655.
(3). I then plug ethernet cable from DSL-526b to Intenet port of DIR-655
(4). I use 192.168.1.250 as the DSL-526B's address. I used to use the same address for the DIR-655. I assume I need to give the DIR-655 a new address (Eg 192.168.1.251)?
(5). DO I still point the PCs at the DSl-526B for the gateway and DNS or do I point them to the DIR-655?
my configuration; ADSL2+ @ 21Mbps comes in via Telstra. Fibre optic cable trunk to main road, copper to the house, total distance 246m, hence good speeds. The phone is connected to a dual port filter with a phone and fax connected through double adapter to one port, and DSL-526B connected to other port.DSL-526B connected to DIR-655 Hardware A4, firmware 1.30. The two are set up in bridge mode, with a static IP. The DIR-655 connects to a DGS-1016D and a DGS-1008.I am running WIndows 7 ultimate x64 w/8GB ram, I5-2500K, and all MS patches.
four days ago I reinstalled my windows system. At that time, I uninstalled Tablet PC components and Windows search. I use FreeDownload Manager for my download needs, and it includes a BitTorrent client. I installed the latest version.From that point on, whenever I download any torrents the connnection to the internet resets and takes about 1 - 3 minutes to re-establish itself. I have tried going back through the several versions of the program to get back to the version I was running before I re-installed all to no avail.
I replaced the cable between wall socket and filter, replaced filter, replaced phone cable, also to no avail. I have tweaked the program settings now with only three half open connections, and I've reset the modem donezn of times. I've reset the DIR-655, and done factory resets on both and reconfigured them. Nothing has worked. I use MAC address filtering and I have ACLS which block access to various sites because of kids, and I use OpenDNS web content filtering too.
My PC is hardwired to a Comcast all in one Internet/Phone Modem/Wireless Router. I have installed new software on my Android Phone that can control my music recording software over Wi-Fi. Here is the rub: Recording software and the Internet don't play nicely together. They are in constant conflict for resources. I used to simply disable my network connection when working in my recording software. This obviously won't allow my phone to connect to my computer . Is there a way to disable my Internet connection yet remain connected to my network? I don't want to disable the entire networks Internet connection since there are other Internet users on the network.
Cisco ISE 1.1.3 is running in standalone mode, when I made any configuration it show me the notification that "Configuration changes has been recorded but remain pending" .
I am running a DIR-825 I believe one of the original's no updates or anything. I run it mixed mode. The 2.4 shows up and I can connect to but the 5 ghz (n) speed says it's enabled but I can never see it when I scan on any of my wireless n products (laptops and other computers). Dlink support told me to change to mixed mode g and n. I was running it in mixed mode (a, g and n). D link told me to change to mixed mode g and n and to make sure they stay on channel 6 and 11. Is this correct. Which firmware should I upgrade to and is there any easy way to do this?
I just recently setup a network in my home and selected the D-Link DIR-655 router to manage traffic. It's not clear to me when this issue first appeared as I've been away so apologies for not having a proper timeline.The router is setup in it's default configuration with only the IP Address being changed due to a conflict with my DSL modem. I don't have any experience with routers and it seemed to be working fine so I didn't mess with it.However, the router goes into what appears to be an endless series of reboots making it completely unusable. This can occur anywhere from immediately upon a cold start power to a few hours into it.I suspected a defective router and since I had been traveling the warranty was of no use so I purchased a brand new router last week which is also a DIR-655. The new router is doing exactly the same thing as the original one.
If I disable the wireless functionality both routers perform flawlessly for extended periods (many days/weeks). As soon as I enable wireless what appears to be warm start reboots begin as mentioned anywhere from immediately to a few hours along.Since I am new to networking in general and routers in particular I thought perhaps am I doing something wrong and hence my post here.The f/w in the new router is 204NA. I don't recall the f/w release of the initial router but I did update it within the last month to whatever was the most current from D-Link. If it's important to know the f/w release of the initial router I will find it for you.
Two (2) DIR 655 routers appear to enter a state of perpetual warm start reboots whenever wireless functionality is enabled. This begins anywhere from immediately to a few hours after a router cold start.Disabling the wireless functionality completely stabilizes both routers.
I am doing a security assessment of an organization that uses 871/881 routers with the firewall features enabled. I see the following commands defining packet inspection done by the firewall software.
-ip inspect name inet-users tcp -ip inspect name inet-users udp -ip inspect name inet-users icmp
What I am trying to define is the inspect name "inet-users". It is obviously a constant defined by IOS as it is not defined anywhere in the configuration file like any other "variable" and does not generate an error.What does "inet-users" define? I'm assuming it is all users using the interface(s) where the inspect commands are used, but is that correct? The Cisco IOS manuals do not contain a reference to "inet-users" hence why I'm here asking.
how do I verify if CG-NMS is enabled on ASA5520. I just need to know if it's enable/install to be enabled and used?Cisco Adaptive Security Appliance Software Version 8.0(5)28..Device Manager Version 6.1(5)51
this is regarding my RV042. Its firmware version is v4.1.1.01-sp (Dec 6 2011 20:03:18), unchanged from how I received it. I purchased less than a month ago. I have a problem wherein the firewall behavior is not what I expect it to be, where I expect only allowed ports/services to be open to a given private IP from the outside but am finding that all are open to that private IP!
Let me describe the current configuration. I am going to blank out all digits of the public IP addresses when discussing them except for the final digits for security reasons.Router's WAN1 is set up as static, X.X.X.189. This is part of my public IP block. WAN2 is disabled. One-to-One NAT is enabled. Three instances of it are set up. One, for example is 192.0.2.89 (a private IP) mapped to X.X.X.180, a public IP, part of our public block. Forwarding is not enabled. There is no DMZ Host. That is set to 192.0.2.0. Firewall and SPI are Enabled. Access Rules for the firewall are set up in addition to the default rules which are present to Deny all traffic with WAN1 and WAN2 as the source from any source to any destination. This to me means that unless I set up Allow actions, there should be no access from the outside, WAN1. As an example of one of my Allow rules, I have this:
Action: Allow Service: HTTP Log: Not log Source interface: WAN1 Source IP: ANY Destination IP: Single, 192.0.2.89 Time: Always
My problem: My expectation is that based on the One-to-One NAT setting, the public IP X.X.X.180 is now associated with the private IP 192.0.2.89, but nothing from public to private is allowed unless allowed by the firewall, which is only set to allow HTTP / port 80 to 192.0.2.89. But the behavior is that 192.0.2.89 is, as presently configured, open to everything from the associated public IP, not just port 80, but all ports! It is as if my firewall rules have no impact whatsoever.
My router is running the stock 1.21 firmware and it has been fine for almost a year before the wireless suddenly stopped working. I reset the router and restored my previous configuration. After the reboot, the SSID is visible and I can connect to it but there is no internet connection. Also the router becomes unresponsive, i.e. timeout trying to access the router configuration page. After trying out different settings it seems that enabling WPA2+AES is the cause.In the mean time, I am running an open wireless network and everything seems fine. Is the hardware faulty? I am reluctant to update the firmware because of a negative experience with another router (same model).
I should upgrade ASA 5550 with nat controller enabled, from 7.2 to 8.x, I've been reading nat is differently configured up from release 8.3. So I choosed to upgrade to 8.2 release.
Region : India Model : TD-W8968 Hardware Version : V1 Firmware Version : 0.6.0 1.1 v0005.0 Build 120926 Rel.27100n ISP : MTNL
After lot of troubleshooting and efforts I figured out there seems to be BUG with routers firmware 0.6.0 1.1 v0005.0 Build 120926 Rel.27100n.When you enable Bandwidth control, FTP stops working from Internet. However, it does work from local network. When you disable Bandwidth control, FTP starts working from internet as well as local network.
Im notice after configure the trend micro url filtering on a Cisco 2821 high latency on Http navigation, the latency on the ping for the requests shows a 245ms latency, but if i disable this feature on the router, returns to normal navigation and decrease the latency up to 70ms.
Recent incountered an issue with our elastix pbx and packet loss. Noticed this morning that when I turn on the firewall on our RV082, packet loss begins around the level 3 servers I see in my traceroute, and then slow spread out to all hops. When I turn the firewall back off, all hops have no packet loss or less than 1%. The weird part is, previously, I had the firewall enabled, and never had this issue.
I recently installed an RV042 v1.1 vpn router (older hardware revision but using the latest available firmware 1.3.12.19-tm) and set up VPN access with the QuickVPN client. QuickVPN requires that the HTTPS setting be enabled under the Firewall options, so I did. I then scanned our static IP with grc.com's ShieldsUP! to check for open or non-stealthed ports and discovered that ports 80 and 443 show as wide open, while port 113 is closed but not stealthed. If I disable the HTTPS setting under Firewall, then ports 80 and 443 become stealthed. Is there any way to use QuickVPN and keep these ports stealthed?
I am getting this error on my PIX 535 with 8.0.4 code. The error is Error : OSPF/RIP cannot be enabled on failover interface, I am getting this error while trying to enable RIP on the firewall. The context is single mode and failover is enabled. When I am disabling the failover the Firewall is accepting the RIP configurations.
Today i received FWSM from cisco (RMA), I need to configure it as standby unit for existing FWSM active/standby setup.
IOS on RMAed FWSM is 2.3.4 and cisco VSS supports FWSM IOS 4.0.4 and later.My issue is, I cannot access FWSM (IOS 2.3.4) via session command from cisco 6513 but could successfully consoled it without any problem. I have reloaded it twice and also tried to disable and enable power on it.
VSS#sh module switch 2 Switch Number: 2 Role: Virtual Switch Standby Mod Ports Card Type Model Serial No. --- ----- -------------------------------------- ------------------ ----------- 2 6 Firewall Module WS-SVC-FWM-1 -----------
[code]....
why I cannot access FWSM through session command ?Whether this is because of older IOS ? If yes then how to upgrade its IOS ?Is it possible to upgrade IOS via FWSM console ? if yes, Do i need to test on different slot ?
The unit is configured as internet gateway. 4 NAT ports are active. When firewall disabled all works fine. When firewall enabled I do get connection lost at random interval. In firewall only 4 rules added to the default 3 rules. The added rules are:
1/ permit 192.168.1.22 port 25 to any 2/ permit 192.168.1.27 port 25 to any 3/ permit 192.168.1.10 port 25 to any 4/ deny any port 25 to any
I do get at random times connection lost when navigating with windows explorer on a PC with IP 192.168.1.x to a share on a PC with IP 172.25.152.74. The same happens when copying files. Sometimes it works, later it fails or reties are needed. When the firewall is switched off all runs fine.
Ping from 192.168.1.x to 172.25.152.74 allways give a <1ms response
Is there a RV082 perfomance problem or do I have a configuration problem?
Using a Mac running Mac OS X 10.6.8 with VPN Tracker 6.3.0.Before switching to the WAG320N I had no issues with my IPSEC VPN client. After the switch it consistently fails in Phase 1 negotiation.In the log file of the gateway I only notice: Mon, 2011-08-22 07:47:31 - [Outgoing] UDP Packet - 192.168.1.100:500 --> IP.ADDRESS.VPN.GATEWAY:500.The software itself complains about timeouts while contacting the remote gateway.VPN pass through is enabled, no port forwarding is set up, firewall is disabled.
I have a RV042 router on a single WAN and an internal LAN. I have configured port forwarding as follows: HTTP[TCP/80~80]->10.0.0.6HTTPS[TCP/443~443]->10.0.0.6IMAP[TCP/143~143]->10.0.0.5IMAP SSL[TCP/993~993]->10.0.0.5SMTP SSL[TCP/587~587]->10.0.0.5
Everything works just fine when I have the firewall DISABLED. However, when I enable it the behaviour is erratic. 1 out of 10 attempts to connect to ANY port forwarded works. Almost all attempts time out. Notice that this happens even if using only the default firewall rules (which should be bypassed by the port forwarding as I read in other posts).
My second try was to create firewall rules manually, overriding the default ones. I tried adding rules from source WAN1 (where my connection is) to ANY and to SINGLE IP's on every port. Nothing seems to work.
I don't know what I'm doing wrong, this is really bugging me. I had to turn the firewall off so we can access our servers from outside the office. This shouldn't have to be done.
Just found out that my firewall is getting LOTS and LOTS of Blocked - SYN Flood entries. I think this is why we are having trouble with the firewall. Could this be the problem? I have no idea where all these SYN packets are coming from since they appear with spoofed IPs or come from different bots all over.
Trying to add my Toshiba Laptop to my already exsiting D-Link 524 wireless router. However whenever I try to change my DCHP to enable, it won't save the changes. I have tried both the Dynamic and Static IP Address, and it will say saving changes, but when I return, all changes are gone. On the cmd prompt when I type in ipconfig /all it lists DCHP enabled.
my wifi was suddenly disappear, and im trying to fix it but in manage wireless network its stated that "wireless is not currently enabled", i reinstall the driver of the wlan but still it doesnt work. even on device manager in network adapter there is no wireless icon.
I have a server that is running on 2003 and we are having a few problems and in the event log I am getting id101 with the message whats virtual is not enable and i am not sure what this refers to or how to sort it out.
I have disabled / enabled and unistalled / installed and updated driver software but to no avail.It has been replaced, I have refreshed TCP/IP as per previous instruction found here and it did go a bit further, but now stuck as per below from CCX diagnostics Utility:
I have a HP G62 laptop with windows 7 and a Atheros AR9285 wifi adapter. The Wireless Assistant shows the WLAN as disabled. In the device manager, the adapter is listed as enabled. When I push the F12 key that turns on and off the wireless, the wireless assistant alternates between showing the WLAN as Off or Disabled. I tried disabling the adapter and re-enabling it from the device manager, but the wireless assistant still shows it as disabled.
We have a standard modem/wireless setup that has worked fine for years. Last month, my sister brought her laptop over and, for some unknown reason, choose "set up a connection or network" and unknowingly changed the setup to a security enabled network. I have no idea why she couldn't just log on without any problem. She has the same modem at her house, and I have no problem logging on at her house. Anyway, it now asks for a password, and she swears she never entered one. I can go online if I plug in an ethernet cord but that means my laptop can only go online at my desk. And I cannot use the internet features on my ipod touch. Is there a way to reset the modem back to a regular unsecured setup?
I had it working fine up until i decided to install a new harddrive on my xp pro machine. but to the point, when i connect to the 3g card its fine, but if i try to enable the lan at the same time it disconnects my 3g card. my problem isnt how to network two computers, its how to get lan and a usb modem working simultaneously. i have tried to enable ics, then reboot. same results. if i can get the lan to stay on while the 3g card is on i have the rest whooped.it is some kind of setting somewhere. maybe i need to install windows 2003 server or something like that.
the DNS error and was able to fix it but I have a new error. I currently use a Motorola SURFboard SB5101 USB Cable modem and am having an issue. I have tried repairing it and I receive a message "TCP/IP is not enabled for this enabled for this connection. Cannot proceed." I currently have 3 LAN or High-speed internet connections that are showing up. Two are the ones I have said earlier and the third is a Intel(R) PRO/100 VE Network Connection #2. All are connected and firewalled but I cannot use the internet.
I am using my neighbor's WiFi connection in my WiFi enabled motherboard PC with good signal strength. Now i want to connect a router to my PC so that i can easily use WiFi for my mobiles.
