My router just dropped the internet. I checked with ISP and confirmed that their modem is fine - I can connect direct into that - but the DIR-655 won't connect externally. I've tried wireless and wired and can connect fine to the router, but it is like the firewall has reset itself or something. at the moment I'm surviving because of a 30m long ethernet cable to the modem going out the window and round the house!
View 5 RepliesI bought a DIR-655 for my parents after their old router died in a planned power outage. It's a rev. B1 model running the 2.00 firmware. It worked fine initially for a day or two with great wireless coverage, even in the previously low-signal spots in the house.Then the problems started. The router now has trouble loading any website. What you get is instead a page returned from the router saying something along the lines of "network unreachable, please check you internet settings" (I will go there today or tomorrow so I'll update the post with the specific error). Refreshing the page a few times sometimes makes it load, but extremely slow and then the same thing happens again a few moments later. The same thing happens on both wifi and through the router's LAN ports. If I connect a computer directly to the modem it works just fine, as it has always done before getting this router.I have disable QoS, NAT endpoint filtering and the firewall (SPI). I have also set the WAN port speed to 100Mbit/s in the router, to match what the modem is set to (also had issues with the default setting).
View 7 Replies View Relatedok i have setup a subnet on my uncles network on which i am running a domain with server 2008. i am using a dlink di 624 router and wanted to know if i upgraded to a 300mbps router would this increase the bandwidth within my network?i know i am limited to what i am receiving from my uncle who is also limited to what he is receiving from the ISP. im not worried about internet speed. i want to increase client to server speed for both lan and wireless.
View 1 Replies View RelatedAfter connecting via anyconnect client 2.5, I cannot access my internal network or internet. My Host is getting ip address of 10.2.2.1/24 & gw:10.2.2.2
Following is the config
ASA Version 8.2(5)
!
names
name 172.16.1.200 EOCVLAN198 description EOC VLAN 198
dns-guard
!
interface Ethernet0/0
description to EOCATT7200-G0/2
switchport access vlan 2
[code]....
I purchased a WAP4410n for our small office to provide wireless access to our internal network to laptop users. I have configured the device as simplistically as is possible, but although I can get my laptop to connect to the AP (verified by managing the device wirelessly as well as by pinging the IP address) I can not get to any other IP address on my internal network nor the internet.I gave the device a static IP address - 192.168.1.50 subnet 255.255.255.0 with a default gateway of 192.168.1.254 which is my 2811 router. I set up a WPA-secured SSID.
A second problem I have is that if I set up my laptop wireless card to get its' IP settings form a DHCP server, it picks up a 169.xx.xx.xx ip address - it is as if the AP is not passing my DHCP broadcast / response through.
I have an ASA 5510 configured 3 interface Internet_AAPT, Internal_Network and Server_Network. The server network works fine as is able to connect to the internet and services like port 80 work from the internet in. But from the Internal_Network can only get to the server network but not internet (6May 13 201214:17:4030201310.153.111.21253663199.47.216.14880Built outbound TCP connection 42508 for Internet_AAPT:199.47.216.148/80 (199.47.216.148/80) to Server_Network:10.153.111.212/53663 (10.153.111.212/53663). The weird thing in logs i see a connection being made but for some reason its referring to the Server_Network interface? below is my current config...
ASA Version 8.2(5)
!
hostname ASA01
domain-name names
name 10.153.11.184 QNAP
name 10.153.11.192 exc2010
name 10.153.11.133 zeacom
[code]....
I have configured an ASA 5505 to connect a single internal network to internet, it is not working. I have attached the config
View 9 Replies View RelatedWhat is the best way to monitor an Internet Edge router from the Internal network behind the Firewall?We want to pull more information from the edge router like netflow. We can use SNMPv3 and ACLs to keep the router secure.
But I am looking for the best config to keep both the router and firewall as secure as possible while still allowing us to monitor performance and faults.I am running an ASA and a 2821.
Have a new DIR-825 setup at home for coverage to another part of the house. I want to completely restrict clients using this WAP from accessing a couple internal IP's (that I use for work-related things). Restriction meaning filesharing, ping, RDP, etc - everything. Can this be done on the router side?
View 3 Replies View RelatedHave a Rev. B1 w/207NA on Time Warner with a Moto Surfboard SB5150.Working with TiVo's, we've been through hell and back trying to resolve why Multi Room Viewing doesn't seem to want to work - but only one way! The newest TiVo's their Premiere model with HD and all the bells and whistles, it sees the other TiVo and all the other software that can send programs back and forth with it.
I brought on a Series 2, which is an older model that's non HD and has some older software in it. While the Premiere and the other PC's/Software around the building's network can 'see' the Series 2 and it can 'see' the other shared PC's, etc. the thing can't 'see' the Premiere.This has been going on for awhile, I've worked with TiVo Support also to unlock ports, IP addresses and anything else we could think of. Still no luck. Then we had a strange occurance!
The DIR-655 seemed to 'lock up' or disconnect from the Net. One day I was surfing the Now Playing menu in the Series 2 and the other TiVo wasn't showing as usual. I checked it again during a commercial for something totally different and suddenly noticed there it was!! I thought it was weird, so I went out front to check with the person using the main TiVo if they had made any changes or done anything - they hadn't, but did mention their Net connection was gone.
I turned around and looked at the 655's status lights and noticed while all the rest were fine - the WAN/Net status light was totally out. Not a single blink. And then I looked at the Moto cable modem and noticed it's 'activity' light was also totally dormant. I twisted the Moto to get a better look at it and things started working again, I tightened the cable modem cable on the rear and that was it.
From that point on - once again, the front TiVo won't show on the back TiVo! Does every other way, but not that. In our discussions on TiVo we thought it could've been the cable modem firewall or something, but I retested it and this time it had NO effect. Tried not only taking out the cable-cable but the Ethernet cable as well to ensure all were tested. Still didn't now up. What I thought was going on was the 655 had turned into a giant 'Hub', which would've caused the TiVo's to use their old-fashioned Beacon software to 'find' each other. When the 655 software kicked back in from that glitch, the hub setup would've obviously stopped and the 655's software settings would've kicked back in.
I have a complete list of the ports internally that need to be open for those two TiVo's to communicate, but I can't find anything in the 2.07NA GUI (or Help manuals) that tell me how to write a rule to open those ports internally. I wouldn't think there's any internal blocking or firewalling going on (I have it set to allow communications between clients on the internal Net) but there's so many settings in this GUI it makes your head spin!
Does it make a gateway outer with an internal DNS function
View 4 Replies View RelatedLately, Ive been trying to change my router DNS to OpenDNS. Somehow, after changing it, I couldnt access the router page at 192.168.0.1, getting the error 500 message. I unplugged and plugged the router with no effect. Im using a dlinkddns.com dynamic IP, and have a few ports forwarded for my DVR. The router model is DIR 615. want to change the DNs for speed and filtering purposes.
View 4 Replies View Relatedthere is something I find strange on C6500 about QoS: C6500 derive an internal DSCP value for it's internal use, but when configuring the qos mapping on output interfaces, only a cos value (I guess, an internal cos value) can be used. Is it a misunderstanding from me, or is it really illogic?
View 2 Replies View RelatedI have a 1TB internal SATA HD that I want to turn into a network drive. Since the MB in the desktop I had this drive in fried, I'm looking for options to network this drive (that stores photos, music, utilities, etc). So far after brief research, looks like my most reliable option would be an external enclosure with USB and a router with a USB share port.
-what other options do I have?
-what would be a good wireless N/G router with a USB share port, great range or range extender option and can handle multiple devices online (xbox, ps3, wii, droid phones, 2x or more laptops, wifi Tv all not connected at once, but a few can be, so I need a router to handle the demand)
-a good reliable external enclosure
I need a router that has a good strong signal. The current G router I have (d-link di-524(?)) works ok, but the signal cuts out in the kitchen and virtually non-existent in my garage (to use Pandora on phone).
My computer has an option in the Bios and in the boot menu for the "internal network adapter boot." Can I use this to install an OS?
View 3 Replies View RelatedHow to open website company in internal network
View 1 Replies View RelatedI seem to be having an issue with my PIX configuration. I can ping the VPN client from the the internal network, but can cannot access any resources from the vpn client. [code]
View 4 Replies View RelatedWe have ASA5510s and I've configured an SSL VPN using AnyConnect.. The VPN address pool is 10.10.10.0/24 and our internal network is 10.10.20..0/24. After successful login, using LDAP. the client receives a 10.10.10.0/24 address from the pool, but cannot access anything on the internal 10.10.20.0/24 network. I've toyed with access lists and NAT exemption, but to no avail. What do I need to do?
View 8 Replies View RelatedI have the connection working with my ASA 5505 but cannot ping the internal network. (Note external interface is getting the IP via DHCP)
View 4 Replies View RelatedI have a small request. I have a setup where the internal users within the corporate network need to remote VPN into the VPN concentrator.
The setup is as below
inside
(202.x.x.x)VPN ASA 5520 ---------------- FW ------------- intenal network
----------------
outside
The problem is that the 10.0.0.0/8 internetl network establishes the connection via the outside interface. However, the return path is via the inside interface. But the vpn concentrator keeps showing next-hop not reachable for USP 500. Why does it show that when it has a route via the inside interface.
6|Jan 29 2013 13:44:38|110003: Routing failed to locate next hop for udp from NP Identity Ifc:202.x.x.x..29/62465 to outside:10.163..x.x/5892
Also, since we are trying to send traffic from outside to the inside interface, I tried to NAT the source ip i.e 202.x.x.x and left the source unaltered. But it still doesnt work.
I am wondering why is the ASA not routing via the inside interface and looks for the return traffic via the same outside interface the traffic entered in. The outside has a security-level of 0 and the isnide has a sec-level of 100.
setting up VPN IPSec with Cisco ASA 5505. I've managed to successfully setup VPN andcan connect to it from outside and browse securely to the outside/internet via tunnel. However, once I am connected to VPN, I cannot access any of my internal hosts/servers via VPN client.
!
hostname ciscoasa
enable password xxxxxxxxxxx encrypted
passwd xxxxxxxxx encrypted
names
!
interface Ethernet0/0
[code]....
I am hoping to have my internal data NOT sent via the router.I'm trying to figure out if data from the Windows PC to the Ubuntu PC goes via the N750 AND the router or just the N750.It should be noted that the N750 is set up as an access point with DHCP/NAT disabled. I have read that switches (and I assume this "access point") can store the MAC Addresses of computers to cut out the router, but I'm not sure how to make sure that that's happening.
View 2 Replies View RelatedI have a Cisco ASA 5505 (version above) and I have someone that needs to SSH into a box behind the ASA. I'm having a few issues trying to configure this access-list and NAT. I've tried many combinations and clearly my IOS is not as good as I thought. What commands should I enter to accomplish mapping SSH from an outside network range to an internal host ?
View 5 Replies View RelatedI now need to configure an ASA 5505 for a small server farm. It's fairly straightforward:isp -> asa5505 -> internal servers,'m using static addresses -- no DHCP involved.VPN works; I can get into the internal network.pinging from the ASA to an external address works,However, I cannot get from a laptop connected to an internal port out to the internet, either using ping or typing an address in the browser.
View 7 Replies View RelatedI am trying to build a remote vpn in ASA 5520 Software Version 8.3(1). I am using ASDM 6.3(1) for the configuration. I went through the SSL VPN wizard and did the configuration. I tried connecting to the ASA using anyconnect VPN and I could successfully connect the VPN. My home laptop takes an IP 192.168.60.21 (which I have defined in the wizard). Now my issue is, I can't access any office internal network from this laptop (none of the internal IP is ping ing even). Meanwhile, I could ping and rdp to this laptop(which is connectd by anyconnect VPN) from my office network. One thing I noticed is that when I give a traceroute to an internal IP from the laptop, the first hop goes to my home ISP router.
View 8 Replies View RelatedI write here to see if some kind soul can not solve my problem (which is common to seeso many people around the world). problem: I have a mail server (192.168.1.17) configured static NAT because it is accessible byPublic IP (PPP.PPP.PPP.PPP). Everything works properly from the outside, but if I get my Mail server (on port 443) from the internal network (192.168.1.xxx) there 'verse. This configuration is called Nat inside-to-inside is done by default by some SOHO routers(such as the TPLINK from 25 euros) but Cisco did not succeed. I search on the internet for 2 days without a get nowhere. PS: I have a Cisco 1801 router. (or 1941 as another router).
View 13 Replies View RelatedI have a base config of AnyConnect VPN below, however the ASA 8.3.1 code has deprecated some commands and the VPN/NAT/FW rule syntax is quite different. Can som point out what's missing from the pertinent config below that prevents the VPN Pool from accessing the internal LAN?
The Core LAN router is 1.2.3.1.
!
ASA Version 8.3(1)
!
interface Ethernet0/0
nameif inside
security-level 100
ip address 1.2.3.2 255.255.255.0
I have two ASA 5515 configured in failover (active / standby).I used the ASDM wizard to create connections through ipsec cisco client.Currently users are able to connect but can not do a ping to anywhere inside the network.
The ping request is received from the internal client but the internal client can not communicate with the remote user.The ping fail also directly from the ASA.
When the remote client is connected an entry is added to the routing table:
S 192.168.10.130 255 255 255 255 [1/0] via <ip of the ISP>, "WAN"
as if that IP was reachable directly from the Internet.I tried changing the settings of the NAT but in no way I can make them communicate.The ultimate goal would be to create different users with different access permissions to the LAN and the other subnets in the company.
I'm new to this cisco 5505 and I want to carry out a task as simple as a remote access VPN, in my case I did the wizard, with time on my test, I could connect to the VPN, but I can not ping any device internal network. [code]
View 6 Replies View RelatedWhat I got is a 5505 ASA firewall and I'm connected to it via VPN. I'm pulling an 192.168.169.x address because that's what we set their company's internet LAN to. Which is what we want. What I can't do while I'm VPN'd in is ping from the internet network to the DMZ, and the same when I try and ping from the DMZ to the internal network.
The DMZ is on a 196.0.0.x network.The internet network is 192.168.169.x network.
I don't need them to have internet access on the DMZ I just want to be able to access it from the internal network. What is going on is we need them to be able to VPN into the DMZ and access their equipment. At this point it would just make me happy to be able to ping from the internal network to the DMZ and I can figure it out from there I've setup rules and applied them and when I wasn't having success I referred back to defaults. Right now the rules are set at default, any thing in and anything out, on both internal and DMZ. I'm using a VPN client and going through Cisco ASDM Launcher to setup the rules and static routes, I haven't done anything with the command line. All the research I've done everyone does it command line, I find it easier to do it GUI. This is my first time working with an ASA firewall.
I am having a problem getting my ASA to work properly. I attached a diagram for reference and most of the config is below. When I finally got it to route properly between 2 sub nets on the internal network, the NO NAT statement broke routing for the VPN Clients who rely on a NAT statement for the same sub net that is listed in NO NAT access list. I can get one of the 2 to work by replacing NAT statements but can't figure out a combination to allow routing for both the internal sub nets and the VPN clients to work.
It's been about 5 days of tweaking this thing just to get the internal routing to work correctly and when I finally did I broke VPN client access. To note, the VPN clients can still log in and get a session going, they just can't get anywhere once they are in. I also think there's a lot of stuff in this config that is not needed like a lot of the object groups, etc. but I am being very careful about removing anything. I took over support of this ASA after someone else put it in place and over this past weekend we moved it to a new building and new ISP and that is when I had to get it to route between sub nets. The main point of this move was to remove building 1's reliance on building 2 for Internet and outside email access in the event that building 2 is not available (it is close to water and this has happened more than once over the past year).
So that is why I can't go with the smartest option of just keeping the routes on the router in the other building. I also know the 1600s are ancient but they're all we have for now. I can provide those router configs also but they are VERY basic, all static routing. The IP for the Cisco router on the same sub net as the ASA is 192.168.42.254.
This is the statement that allows the routing to work between the 2 internal sub nets but breaks VPN clients: nat (INSIDE) 0 access-list NO NAT
This is the statement that allows the VPN clients to work but breaks the internal routing: nat (INSIDE) 0 access-list INSIDE_nat0_outbound
The rest of the config is below the diagram.
ASA Version 8.2(2)
host name Cisco asa
domain-name default.domain.invalid
enable password - encrypted
password - encrypted
names
dns-guard
[code]...
The ONLY reason I bought a router was to get connected to my Security DVR. I don't want to provide Internet for a network. Maybe someday but my only wish right now is to be able to view and control my DVR with my computer. It is hidden away and hard to get to at the moment so a Lan connection would be great.
I tried direct connect with a Crossover cable between the DVR and my computer. The network was reporting as "Connected" but I could not see the DVR much less view the video. Their support said they'd never heard of this configuration. Could not understand connecting without Internet and wasn't sure if it'd work without a Router.
So, first I bought a wired router(EBR 2310) because I didn't need or want the wireless aspect. I followed all instructions until it came to Internet connection setup. Then became lost because I don't have a dedicated ISP, I'm using a USB modem for connectivity. I don't have a static IP so could not enter on. So, backed out of setup and entered the IP of my computer to be 1 higher than my DLink routers. 192.168.0.2. Gateway .1, NO dice. Router not recognized.I called support and stayed on the line over an hour. Finally he said the unit was defective. It would not assign IPs theough DHCP. We ipconfiged, pinged reset and all.
I took it back and got an DIR615, hoping it might be a little better. Same problem. Computer says Connected" but when I ping it, there is not sigh of it. I have manually assigned IPs, DHCPed it reset it rebooted my computer, but still no sign of a router.
I am in trouble with my cisco 1841 configuration.The "what I want to" schema: very external IP ( AAA.AAA.AAA.AAA ) in the internet cloud => | cisco 1841 external IP BBB.BBB.BBB.BBB | => internal computer IP CCC.CCC.CCC.CCC
View 1 Replies View Related