PPPoE Bridge In Router And Giving Firewall A Public IP?
Jan 5, 2013
I have 2 public ip, 1.1.1.1 anda 1.1.1.2. I'm connected to the ISP using PPPoE. I also have a router and a firewall. I want to assign 1.1.1.1 to router and 1.1.1.2 to the firewall. I do not want to NAT 2 times (one in router and one in firewall)That's why i want to bridge Fa0/0 and Fa0/1.Could this be done in Cisco router? I've done this command but it's not working as i want. I'm using bridge irb and bridge-group.
I recently changed my internet connection to DSL from Cable, so now I'm using PPPoE type of connection.
Right now my router is configured as Automatic DHCP with the modem doing the PPPoE connection. All is fine and well.
Since I own a PS3, and Nat Type 3 conection is really bad for my online gaming, I would like to bridge my modem and connect to the internet through my router. That way I can properly forward my ports, use QoS and effectively get a better connection on the PS3.
I was able to successfully bridge the modem, but the PPPoE config on the router isn't able to connect to the internet.
Modem and router have been reinitialized after the configurations were changed. I do have the username and passwords, and they were properly put on the router.
config to setup PPPoE on the cisco 831 router to be used with a modem in bridge mode. I have tired other peoples configs found on the web but, not all the commands were available on the IOS version thats on the router. Also note that I bought this as a used router and I dont have a service contract so I am unable to download an updated IOS. The router ver is 12.3(7)T9 and the IOS is c831-k9o3sy6-mz.123-7.T9.bin. Running config below is last tried still could not connect or get ip address from isp. [code]
I'm having a very difficult time getting my WRT54GS to work with my Westell 6100 modem. I've been bouncing around gathering info, and what I've learned is that the goofy way CenturyLink tech support told me to hook up my old wired router (modem line into outgoing (LAN) router port) is because the Westell 6100 is a "smart modem/router". Therefore, when I run the Linksys setup CD, it sees the modem as a router, and won't properly configure. I've also learned that the Westell modem can be "dumbed down" into simply a modem by putting it into "bridge mode", which is where I'm at right now - trying to get it reset to factory defaults and resetting the connection type from PPPoE to Bridge. In the meantime, I also reset the WRT54GS to factory defaults, and now I've got another problem: the router will not allow me to set up encryption. The default setting is "Disabled", and when I click the down arrow and try to make any selection at all (preferred selection is WPA2 Personal), it reverts to Disabled. I've also tried to change the router's IP address to 192.168.2.1 (and alternately to 192.168.1.253), so it won't conflict with the modem's IP, and it freezes up every time I try.
I'm using the ASDM, if I configure VLAN2 with the IP address of the VDSL interface I can ping the modem from the console session via Putty. If I take that off and configure up the PPPOE client I can't ping the VDSL modem, I'd expect that. If I then add in an IP address to the PPPOE client config like I assigned to VLAN2 it doesn't ping either.If I can't ping the VDSL modem I don't expect it would work but it seems I can only either give it a static address which pings but has no pppoe or give it a PPPOE config which means I can't ping the VDSL. why I can't ping the VDSL modem when the interface is set as PPPOE with an IP address?Presumably if I'm on the ASA console doing pings from there to the modem then I'm ruling out problems with the routing from the laptop (trying to isolate where the issue is)
I have a cisco 2801 router, My ISP in which i receive my bandwidth from has assigned me a ip address/gateway etc for my FA0/0 from our Telco switch. I need to figure out how to bridge through the public ip scheme they are issuing me through FA0/1 (setting up a transparent bridge) so in example if i was givin 192.168.1.189 on a /30 network for my router (assigned to FA0/0) how to i set it up to bridge through the publics?
i need to allow https traffic to a server in the DMZ that will have a routable IP address will just an ACL suffice ?which interface do i apply it to ? wan or dmz ?i dont need a NAT since the DMZ is a routable space?
We need to deploy a Cisco ASA 5510 behind the Internet facing router for Remote Access VPN (RAVPN). We bought the block of 16 IPs (in a different subnet) which is routed through the main router (69.x.x.x)and configured the outside interface of ASA with a public IP 64.x.x.x and subnet mask 255.255.255.240. Below is the network structure.
I'm working in my lab trying to do proof of concept for traffic policing on the ASA 5510 running 8.0(4). I have two laptops running Ubuntu one on the outside and one on the inside. Both laptops have 100Mbps interfaces. My tests consists of downloading a file from one laptop using HTTP. Without any QoS I can see speeds close to 100Mbps which I would expect. On a side note, try using XP and you won't come close to those speeds. Anyhow, I implement policing using the config below and expect to see the max rate on the laptops during the transfer max out close to the CIR. However, I see speeds much higher on the laptops.
When I set the CIR to 10000 bps with bc at 1500 bytes I get speeds that range from 300Kbps to 700Kbps. I would expect to see speeds max out at the CIR which would be 10Kbps.I'm having a hard time understanding why my numbers don't match.
I 've got some problem with my Mail Server since I've migrated to an ASA5510.Actually the server is in a DMZ with a private Ip ( 10.x.x.2) and it is translated to a Public IP ( 194.x.x.65).Some Users received in there mailbox a system administor error message :Object : Impossible to deliver : testYour message could not be deliver to one or more of its recipients: 421 SMTP connection went away!When they try to re sent it some times later, message is sent whithout problem.
My ASA 5505 has stopped giving out DHCP address to my machines.Everything was working fine and nothing has changed in the network. I've reloaded the firewall and clear all DHCP on the firewall I've even re-entered the cmd on the ASA.
I'm able to staticlly assigned address to the clients and all is way. When I do a DHCP debug on the ASA I don't see any events relating to the DHCP service apart from checking for lease expiry.
I've also tried to plug a machine straight into the ASA and no result. I finally did a packet capture and I am seeing the client machine sending out a DHCP discover packet and nothing else is responding.
My ASA config is:
dhcpd address 192.168.3.10-192.168.3.33 inside dhcpd dns 8.8.4.4 interface inside dhcpd option 3 ip 192.168.3.1 interface inside dhcpd enable inside
I am trying to get a Cisco ASA5505 to get onto the internet using PPPOE through a Netgear DG384 ADSL router. I have the Netgear in Modem only mode - if you put it in Router mode internet access works fine. When I change it to Modem mode, the error I get on the ASA is PADI timeout. Looking through the config I think I am missing a Global NAT??Also not 100% on the best way to set the IP - we have a static IP from the ISP. Do you set the interface to use DHCP and get this address or set it statically? Then do you put the setroute option or put in a static? [code]
I am tyring to remotely diagnose a troublesome ASA5505
It is connecting via PPPOE and the original suscpicion was that the PPPOE was going down during heavy loads during the day, i.e 9am and lunchtime. I suspected MTU and have verified the MTU outside is set to 1492
However further troubleshooting doing a remote ping to the PPPOE address indicates that this does not drop at all.
When remoteley connected to the ASA my session dies and any outbound internet fails, then in a few minutes it comes back.
all the time the PPPOE line stays up?
One thought is that although the line does not go down it is being crippled with traffic and just getting so unresponsive it appears it has died.
We currently use a linux software based firewall called IPCop that sits between our network and router (This is in bridged mode) IPCop conects over PPPoE and everything works fine.
However the system is not reliable and I fear not that secure so have purchased an ASA5505 now I have added the PPPoE info to the device using the ADSM software however although it picks up my external static IP I'm unable to access the internet. On IPCop I only had to enter the broadband credentials and it worked however I feel like I may have to add more to the Cisco, for example do I have to specify DNS servers and do I have to set a static route?
Here is my config file so far (Note I think I have turned on the ability to ping from internal to external). My config I have done through the ADSM as opposed to the CLI
New to the ASA 5505 8.4 software version, but here is what I'm trying to do:
-Single static public IP: 16.2.3.4 -Need to PAT several ports to three separate servers behind firewall -One server houses email, pptp server, ftp server and web services: 10.1.20.91 -One server houses drac management (port 445): 10.1.20.92 -One server is the IP phone server using a range of ports: 10.1.20.156
Basically, need to PAT the ports associated with each server to the respective servers behind the ASA 5505. Is anything missing from this config? Do I need to include a global policy for PPTP and SMTP? [code]
I have a asa 5510 vpn client groups configured and connected to the internal network DHCP server stops giving network service dhcp and the network goes down.
How can i determine the current PPPoE session duration on ASA 5500 Systems? If i use the different CLI commands like "show vpdn session state / show vpdn session pppoe state" the output says:
State: SESSION_UP Last Chg: 593595 secs.
The ISP is forcing a reconnect every 86400 seconds, so the value can't be the actual duration of the pppoe session. Does it only indicate the link duration to the attached modem or interface state? Is the only way to detect interruptions of the pppoe session with debug and syslog?
configure my ASA 5505. It is setup using PPPoE. What I want to do is this:
I have one of my IP addresses (99.23.119.78) setup for ftp using the ftp protocol to our internal IP address 192.168.1.3. What I need is to also allow for HTTP access but not just that, I need it to forward the http port to port 9000 because the web interface requires port 9000 for customer access. Previously on our old firewall customers were able to access the web interface by browsing to [URL]. I would like to not have to not require the port in the URL.
In addition, I would like to be able to setup a different IP address in our range (99.23.119.73) to be setup for http access using the standard port 80 for the same internal IP address (192.168.1.3). This URL will allow us to access the administration web interface for the FTP server.
Here is my current config:
Result of the command: "show running-config" : Saved:ASA Version 8.2(1) !hostname ciscoasaenable password qVQaNBP31RadYDLM encryptedpasswd 2KFQnbNIdI.2KYOU
We have a Cisco ASA 5510 with: -version: asa845-k8.bin -ASDM: asdm-711-52.bin
Interface "Outside" is a PPPOE configuration.We currently have 36 site to site VPN connections up and running through the "Outside" interface. Now when we try to add, via ASDM, a new site to site VPN connection, we can not choose the "Outside" interface. The interface is just not available. All other interfaces are, bot those are inside interfaces.
I tried running ASDM on a different computer (thought that ASDM or java got corrupted perhaps), but the same problem appeared.Now when we "shutdown" the outside interface and "no shutdown" it again, the "Outside" interface is available again when you add a new site to site VPN profile.
Sidenote: if we check the current profile of a succesful running site to site VPN, it say's that it's using an inside interface. But that is, ofcourse, not possible.
I've an ASA 5505 connecting to a vdsl modem. The ASA is doing the PPPoE encapsulation. I've noticed the traffic amount on the outside interface is always twice the bandwidth it receives on its inside interface. I can't believe the PPP encapsulation is taking that much. Only two interfaces (inside and outside)
I have ASA 5510 with CSC-SSM-10 .ASA 5510 IOS version- 8.4.2 and CSC-SSM-10 IOS version 6.6.1162.Web filtering is working fine with respective to my configuration.From yesterday morning, i was facing issue with the sites like gmail, webmail.After giving credentials like username and password in the web page, the page is not resonding.In troubleshooting process, i removed all the acls, class maps which will direct all the traffic towards the CSC. In this scenario all my mail service sites are opening.If we apply the these ACLs and Class-Maps, only my mail service sites only affecting.
I have just upgraded my internet connection. My ISP is now supplying 50mpbs. If I connect my laptop or pc directly into the ISP modem I get a speed of 75mpbs, very happy with that. But if I connect my Sitecom wl-340 router to the ISP modem and then my pc or laptop into the router i can only get 10mpbs! I have connected everything with cat 5 ftp cable.
I have ZyXEL PLA4201KIT Mini Powerline Ethernet Adapter Starter Kit Up to 500Mbps to connect my desktop to the internet and recently i've been getting random moments where i lose internet connection so everything stops working. I have to either restart my comp or take out the ethernet cord and put it back in. my router is next to our tv and i read somewhere that having it next to a big appliance will suck all the power for itself.
i have a cisco router that has dhcp configured, the router ip address is 10.10.10.***. all computer that attached to the router are using static ip and works fine but when i am connecting my laptop using wireless in gets an 192.168.1.*** address.
My connection is good directly to the modem. But the wireless router is giving off very slow speeds. For instance the modem is 10Mbps but I'm only getting 1.5 - 2Mbps through wireless.
I have a switch connected from the internet outtake in my apartment.This switch gives internet to two, or sometimes three computers, by cable.To get wireless I have a DLINK-615 connected after the switch.This solution works flawless for some time, just after the router is started or reset. If I go to speedtest.net both the upload and the download works flawless.However, after around half an hour it's virtually impossible to upload, which gives heavy lag in programs like skype and games. If you try to speedtest.net now the download is still fine, but the upload gives a result of 0.1mb/sec after trying to even start the test for 3-4 minutes.Router giving up upload completely
I've tried to change the IP in the router to prevent a conflict between it and the switch. The problem is still there whatever IP I choose though, I simply have no upload.I've also tried to disable the DHCP, mess with the MTU and to enable the Access Point mode with no result.
I was using my internet on my Acer Windows 7 operating system wireless just fine on Monday. I tried to use it on Tuesday and could not connect to the internet wireless any longer. I get an error message next to my network stating ""The settings [COLOR=green ! important][COLOR=green ! important]saved[/COLOR][/COLOR] on this computer do not match the requirements of the network"I have never encotured this kind of problem before. I proceeded to call Comcast who did all kinds of trivial beginner troubleshooting such as restart the router, restart the modem turn on and off the computer.
I have VPN Router (3845) in Head Office and VPN Router (1921) at Branch Office. I have also internet router (1921) which passes through ASA 5520 to internal Network at Head Office. I can give internet connectivity to Head Office Users by giving access in ASA 5520 with following lines: nat (inside) 1 192.168.2.13 255.255.255.255.
I have added line for internet access for Branch Users in following manner in ASA 5520: nat (inside) 1 173.16.33.4 255.255.255.255. My Head Office user can access internet but my branch office user cant access internet. how can i give internet access to my branch office users?
I don'y know why connecting to a router is always so difficult.. Anyway, my win 7 laptop is connecting to the router and I set it up (Reset everything a few times). I also have no connection through Ethernet connection with the router.What do I do? The modem is Cisco DPQ3212 and the router Keebox-w150nr wireless 150 N router.
