I'm doing something in class where I have to define a ip addressing scheme for multiple buildings in what im guessing is a campus lan. I understand how to subnet, but was never taught how to put it into practice. I'm having trouble grasping the creation of a network for: multiple buildings(4) with 3 levels/floors each, housing around 2000 students and 400 staff, all needing to access the network in each building.The main hall houses the data center on the first of 4 levels.
I have been assigned to create a basic IP Addressing Scheme. The company has a single class B private address range of 172.16.11.0/16 and it needs to be divided into four subnets. They are all based on a single router.
I was trying to make an Ethernet cable about 100 feet long and what I found; it was not working in non-standard color scheme. However it works fine when re-arrange its color combination into standard, (Same cable, only color difference).So, why this Color scheme is important? And what is the secret behind its color combination?This is Standard Color Scheme for Ethernet.
I have a cisco 2801 router, My ISP in which i receive my bandwidth from has assigned me a ip address/gateway etc for my FA0/0 from our Telco switch. I need to figure out how to bridge through the public ip scheme they are issuing me through FA0/1 (setting up a transparent bridge) so in example if i was givin 192.168.1.189 on a /30 network for my router (assigned to FA0/0) how to i set it up to bridge through the publics?
I was wondering if an interface numbering scheme is available for the 6509-E switch equipped with SUP-2T and includes 16Port X 10GE DFC4, 48 x 1GE SFP and RJ 45 line cards. Would like to understand:
How the slots are addressed Interface Addressing On board SUP-2T 10G and 1G port addressing
I've been working on an application recently that practice ACL configuration, and since finishing I figured it should be put on the internet as there wasnt much more work to do to make it suitable for a website. It allows you to practice both standard and extended ACL configuration by generating a random number of ACL actions for you to configure, and provides the correct config to compare yours against to see if you were correct. It also emulates a router at a very basic level to allow practice when there is no equipment available.
I have access points deployed across several buildings that each have a different IP scheme and their own T1 line. Is it possible to configure the 5508 controller to allow these access points to use the IP scheme assigned for that particular building or will dhcp always assign an IP address to the connecting client based on the IP scheme of the building that the controller resides in?
I like to take log backup in ASA.. and i like to check whether any attack pattern is there?? how could i do this...?Also how could i do a best practise for this?
Any pointers on configuring security on a Cisco 3750X switch that sits on a public (WAN) network. It will distribute connectivity to individual ASA firewalls as there are only two main links from upstream. Obviously I'll be disabling the http server, SSH (besides the management interface), etc.I know I can create ACL's, but worried about performance? I'm looking at blocking Netbios and other protocols that are not nessesery on our network. I've been told to disable the default VLAN... is that a good idea? And instead use the management port? I've looked around but there doesn't seem to be much information about what you should enable or disable on public switches.
I was wondering if a interface numbering scheme is available for the 4900M. Configuration includes 1 x 8Port 10G and 1 x 20Port 1G modules. would like to understand How the slots are addressedInterface AddressingTwinGig interface addressing
I have 2 cisco 6500 in a VSS configuration , All of my Lan access switches are Stack switches and every Stack is connected to the VSS in a Port-channel so basically this is a loop free environment with no blocked ports .As a best practice I left STP in the Background (mstp)which enhanced cisco features to STP should I configure on the Aggregator (6500-VSS) and on the Access switches ?
Because of my topology I dont see the need in configuring most features like Uplink Fast and Backbone Fast but I have configured Loop Guard in addition to UDLD on the 6500 Aggregation Switches (on the port-channels).On the access ports I have configured portfast , bpduguard and guard root (seems a little pointless to configure the two...)
1.should I Leave UDLD on and get rid of LoopGuard and configure Guard root instead ? since LoopGuard cannot be configured with Guard Root.
2.should I configure GuardRoot on access ports if I already have BpduGuard on them ?
3.Is there anything I need to configure on the physicall interface or is everything configured on the port-channel since STP reguards port- channel as a single interface ?
I switched from Time Capsule with AirPort to E2000 and have a problem with configuration.I use the same IPs as in AirPort and E2000 gives me an error:"The WAN IP address cannot be the same subnet as the Guest Network IP address" and I can't save configuration.But in my opinion they are different.I use "Static IP" option and I have IPs from my ISP: [code] So WAN IP is different subnet as LAN and I don't know what to do now. It worked with these settings in AirPort and here I can't proceed.
I am having an issue where occasionally the Sidewinder starts to see my internal RFC 1918 address instead of the configured external address of my firewall. This is for peering between the two. The error they see on the Sidewinder is:So instead of seeing the external peer address he sees a 10.220.3.18 address. We are not sure what triggers this becuase normally he see's my 63.117.98.222 address.
I have an old ASA 5505, and I'm having some trouble with Nat Hairpinning. I've done this with other firewalls before and I am having no luck now. I have an internal address that I wish to forward from an external address- so if someone goes to 123.456.789.012:3456 then it will forward to 192.168.1.244:92 (All numbers are arbitrary here- only for illustration). I have and Access Rule and NAT and PAT set up so that I can get in if I originate from outside the LAN. What I am trying to do is to have this work from inside the LAN as well- so that if I am at my desk, and I connect a device and type in 123.456.789.012:3456, it will deliver the content at 192.168.1.244:92. The problem I am having is that it just isn't working, and I cannot figure out why- When I started here, there was an address configured to work this way, and it still works- I just cannot find what is different between what I am doing and what the person who configured it did.
I have a Linksys WRT54GS v5.1 router running firmware 1.52.5.I am trying to use Linksys IP Phones SPA942, but these do not seem to be able to log on and just show "Initializing network" even though the MAC address appears in the router with an IP address.The strange thing is that I already have 4 SPA941 phones that work with no problem and just log on to the network.Is there something about the SPA942 that I need to configure differently, I have factory reset it with sucess, but still unable to log on to the network.
I recently switched routers to the DIR-615 and I'm trying to troubleshoot why one of our laptops keeps losing the IP address and gets a self-assigned IP address. I see the following messages in the log, I am wondering if the reason codes are listed and explained somewhere? I tried searching the manual but could not find any information.
We have an ADSL connection and use a D-Link DSL-320B modem. We have a D-Link DIR-120 router connected to this modem. This has worked perfectly fine up until today when we disconnected the router and connected a computer (call it A) directly to the modem because it was getting an unusable connection through the router for some reason. We later also performed a factory reset on the DIR-120 router.
Unfortunately, after the above steps the router did not receive any IP address (through DHCP) from the ADSL connection anymore. During my attempts to debug this I noticed that my laptop (call it B) didn't get any IP address either (when connected directly to the modem). I noticed the following syslog entries repeating over and over while trying to connect: [code]
At this point computer A could still get a connection just fine tho (when connected directly to the modem).
I then tried to change the MAC address of the router to an arbitrary one (a copy of computer B's MAC address but with the last digit increased by one). The router still did not get assigned any IP address. Finally I tried making the router clone the MAC address of a third computer (call it C). C has never been connected directly to the modem. Doing this worked. After cloning the MAC address of computer C the router is immediately assigned an IP address and the internet connection works as it did prior to all this.
Now, my question is, why would computer B and the original MAC address of the router not be able to get an IP address while two other computers worked just fine? Why would changing to an arbitrary MAC address not work while cloning the MAC address of another computer did? Could the router's MAC address have been blocked by the ISP for some reason (and what could cause this)?
but my situation seems more like a blacklisting of some MAC addresses rather then allowing just a single MAC address.
On my cisco IOS 12.4 router,Can i make it so only lets say mac address 11:22:33:44:55:66 able to use ip address 10.10.10.2?I want this so that only this IP can configure servers, and so if the computer using it is turned off, any other device cannot use the IP address.
I recently configured and installed a 1941ISR for a customer. The customer purchased a 25-User SSLVPN license with the router, and I configured it for remote SSLVPN access. This is working nicely except for one issue: when users initiate an SSLVPN connection request by browsing to the assigned webvpn gateway IP, they get the "There is a problem with this website's security certificate" browser message. They are in the process of working with their DNS hosting provider to get a DNS entry assigned to the IP address so the users won't have to specify an IP address in the URL address box, but they will continue to get the certificate error until/unless I can figure out how to resolve the issue.
I've tried the following "How to make IE8 trust a self-signed certificate in 20 irritating steps" that I found via another forum link but with no luck:
1.Browse to the site whose certificate you want to trust. 2.When told "There is a problem with this website's security certificate.", choose "Continue to this website (not recommended)." 3.Select Tools->Internet Options. 4.Select Security->Trusted sites->Sites. 5.Confirm the URL matches, and click "Add" then "Close". 6.Close the "Internet Options" dialog box with either "OK" or "Cancel". 7.Refresh the current page. 8.When told "There is a problem with this website's security certificate.", choose "Continue to this website (not recommended)." 9.Click on "Certificate Error" at the right of the address bar and select "View certificates". 10.Click on "Install Certificate...", then in the wizard, click "Next". 11.On the next page select "Place all certificates in the following store". 12.Click "Browse", select "Trusted Root Certification Authorities", and click "OK". 13.Back in the wizard, click "Next", the "Finish". 14.If you get a "Security Warning" message box, click "Yes". 15.Dismiss the message box with "OK". 16.Select Tools->Internet Options. 17.Select Security->Trusted sites->Sites. 18.Select the URL you just added, click "Remove", then "Close". 19.Now shut down all running instances of IE, and start up IE again. 20.The site's certificate should now be trusted.
I followed all 20 irritating steps to the letter, but am still getting the security certificate nat.Now when I “Continue to this website (not recommended)” and click on "Certificate Error" at the right of the address bar, the certificate error windows says “Mismatched Address”.Is there a way that I can get this fixed without resorting to a 3rd party CA?
one of my friend can tell me my ip address by using gmail. He don't have any software to know the ip address. but he can tell me my ip address. how did he know it. is my wi-fi not safe? or other? and can we know it any way?
We have moved house recently and changed internet provider. The laptop and x-box have both connected ok. However the main pc will not connect. The wireless router says that it is connected but the icons of pc-router-internet is not connected. when you hover over the pc icon, there is no IP address.
I'm wondering is there a way that i could actually change the IP address of a computer based on its MAC Address that is connected to a network via switch only ? By running some bat file ? I only manage to change a target computer ip,dns,subnet via running the bat file on the physical computer but not through a network with switch.
