We have a Cisco 2911 Router and have configured via BT Infinity Broadband for out going internet access etc. Are there any incoming restrictions ACL settings etc. that will stop us using for ISA VPN, Exchange connections, Intranet, Sharepoint etc. We have reserved 13 Static IP Addresses from the ISP.
View 1 Replies
is it possible to configure a Cisco 881 router to split the incoming internet connection between two ASA's? If one ASA fails then the router would switch traffic over to the second ASA. The 2nd ASA would takeover from the primary ASA through the active/standby failover configuration and crossover cable. I'm trying to avoid configuring the switch to control the traffic using VLANS if possible.
View 3 Replies View RelatedI have 2 2911 routers that will be connected via fiber with an ethernet Gig handoff to each router. Each router will then be connected to local networks on a second ethernet interface on the router. I have always connected routers via serial connections so this is new to me. Outside of the usual ethernet interface addressing configuration, is there anything else that would need to be configured on the 2 routers?
View 1 Replies View Relatedmy computer, my network connections icon have a exclamation mark (!) and it say i don't have internet access,but luckily i have internet access but i can't remote my computer,
View 4 Replies View RelatedI have a 2911 router where I was configuring the device to allow remote desktops connections. Everything is working properly, but for some reason my ACL has disappeared.
View 5 Replies View Relatedi have with my Edimax router. I could not make any progress with Edimax personnel in Taipei.
If i connect my vista box directly w/o the router, i can see that port 21 (Filezilla) is open, using WhatsMyIP.org | Port Scanners/Sniffers
When I insert the Edimax br6215srg router, the port is in timeout as reported by aforementioned site (guess the port scanner gets no synack nor reset back to the syn it sends)
The router is set to "disable firewall" or to "enable firewall and DMZ enabled" with as client's ip the one that is configured in the router's dhcp table for the vista box. The NAT module is set to forward port 21 to the same ip. ipconfig confirms that i do get the ip programmed in the router's dhcp table.
I do not want to believe that this edimax box is unable to forward connections!
I recently moved house to a flat where I now have an adsl wireless router. Ever since I installed it its been major problems for me, my speeds are terrible takes ages to load a webpage and days to download anything. Also I have tried to stream to my apple tv through the use of airplay mirroring but this again doesn't work and an error code appears every time which I then looked up and it says its to do with my firewall blocking incoming connections. I have gone to my routers settings to try change this and it says to select the options by clicking the radio buttons however they do not exist on the page as you can see on the screenshot below.
View 1 Replies View RelatedI need to block 4000 nodes (Ultrasurf, TOR exit nodes) and I've written a script that will ssh and copy in these objects (prob 100 at a time) into an object group and then put a blanket deny. I don't see a flood of traffic (occassional hits every other day, etc) but I was wondering what the impact would be? Can the ASA handle an object group of that size plus an ACL with it? Any way to block incoming connections from TOR/Ultrasurf?
View 1 Replies View RelatedI have a Cisco 3745 that is my internet router, I have a domain that directs the web address to the WAN IP address...Can I set up my 3745 to forward incoming connections to my server?
View 3 Replies View Relatedwhich product has the capability to receive multiple incoming connections
View 1 Replies View RelatedI have a Cisco 2911 router that I will like to use it for setting up a site to site VPN but the router does not support VPN commands. When I issue crypto isakmp command, it says command no recognized. When I issue ipsec transform-set command, it says command not recognized. The IOS running on my router is c2900-universalk9-mz.SPA.151-2.T1.bin. Also see the output of my show licences features command: [code]
what can be done on this router to enable use it for setting up a VPN connection.
I've been fighting with getting VPN connections working properly with my Dlink router. I set up virtual servers for PPTP and L2TP and could usually get the first attempt to work. Subsequent client connections would always fail.The logs display the following-Dropped GRE packet from 192.168.0.10 to 64.232.xxx.xxx as unable handle packet header. Blocked incoming GRE packet from 64.232.xxx.xxx to 76.105.xxx.xxx.What seemed to fix it was going to Firewall Settings and setting UDP Endpoint Filtering to Endpoint Independent and TCP Endpoint Filtering to Address Restricted.
View 1 Replies View RelatedHow to configure my DIR-615 (Hardware Version E1 - Firmware Version 5.00NA) to:
1. Assign/Reserve IP address for 2 machines.
2. Route a web browser to a server on the first machine (port 80) as a default when another computer or smart-phone or device joins my open wireless network.
I am hoping to eliminate any changes to the IP address of the first two computers so that the server's IP address and port are static. I would also like anyone who joins the network to merely open their browser and be presented with the http interface from my server.
I am trying to make my computer support incoming VPN connections. I am using Windows 7 Home Premium on the computer I want to make the connection on.I am also using Verizon FioS internet (comes with default router/modem combo) to which I have the DIR-655 router connected. I am able to connect to both WiFi's fine and they work correctly.I think the Verizon router is set to block incoming VPN connections and I think this is why I cannot get anyone to be able to access my computer / internet via VPN. How I can perhaps forward ports and which settings I would need to specifically change in both routers admin settings so that I can get VPN connections to forward to my computer and be accepted.
View 1 Replies View RelatedIn OS X 10.6.5, the following dialogue popped up:.Do you want the application "master" to accept incoming network connections?
View 3 Replies View RelatedAny example of how to configure an sm-es2-16-p service module to route over an Cisco 2911?
View 2 Replies View RelatedI'm trying to set up VLANs in my network.So the first device after the internet cloud is my ISP modem/router. I don't really use the router part. The second device is my Linksys WRT54G router with DD-WRT firmware on it.Between the two, there is a subnet just for them. After the DD-WRT router, there is a subnet for my LAN.The third device is my netgear GS108T switch (with vlan support) to which almost all my computers are hooked up. One of those computers is my server that is domain controller and has the roles as shown in the image. What I would like to do is to create several virtual machines in Hyper-V. The trick is that I want to isolate them from the rest of my network. They should be able to access (and be accessed) from the internet but not the rest of my network. So my whole network should be in the same VLAN but each VM should be individually in separate VLANs.
1) I've allready created the VLANs on my Netgear Switch. I know my DD-WRT also has VLAN support. Do I need to create the same VLANs on that also?
2) How to configure the VLAN part of the Hyper-V server? (by the way, my server OS is Windows Server 2008 R2 with the hyper-v role, it's not the bare-metal hyper-v)Should my Virtual Switch be in VLAN 10 and my VMs in the other VLANs?Should the port (on the netgear switch) in which my server is connected, be in VLAN 10 (so that my server is accessible from every other computer in the network)?
I was at my computer when the desktop appearance and taskbar changed. I immediately opened task manager to see what program might have caused this and didn't see anything out of the ordinary. Then about 2 minutes later my desktop changed back to what it normally is. I then went and disabled remote desktop connections... I think that someone may have accessed my pc remotely, buy I wasn't able to catch them at it. Is there any way to review incoming remote desktop connections historically?
View 3 Replies View RelatedI've been fighting with my E2500 since I got it back in June with lag, dropped connections, etc. It's a bit intermittent but can hang around for hours at a time when it kicks in. Restarts but the issue always comes back. Most noticeable while gaming online or on a VOIP program such as Team Speak. Generally when it happens If I'm monitoring my Team Speak connection the incoming packet loss shoots up between 20-30%, starting to drop out every other word or so. No out going packet loss. The connection drops are random between computers (I have one mac and one pc in the house) where one will be fine and the other wont, or when the whole system will stay connected and drop all transfer. In the case of this last one it's not my ISP's connection as any streaming happening between one computer and an Apple TV device will also cease. I've also swapped back to my old router (an older model linksys) and all problems have stopped. Fully rebooted and reconfigured the router about 3 or 4 times and am on the latest version of firmware (1.0.003). It was much worse on 1.0.002 but still very noticeable on 003. Also no difference with a different wireless adapter. I've tried the chat technical support but all they did was take 45 minutes to tell me how to reboot my router after telling them I already had.
View 1 Replies View RelatedWe are having 3 internet connections coming in to one of our customer's main offices for redundancy and etc. I would like to replace the 3 routers with a one for easier support and management. One of the connections is an ADSL and the other 2 are leased lines so they terminate with an RJ45 connection.
Would something like a Cisco 2911 + HWIC ADSL card be sufficient enough or would you recommend something else?
We are about to install a cisco 2911 router to replace a linux based router.
The Cisco will have 5 gig ports, 4 ports connected to DSL modems each modem connected to a different ISP, and the last port connected to a Cisco LAN switch.
802.1q will be used on the internal router port to split the LAN segments up into VLAN's as the building contains lots of different businesses.
Each customer in the building has there own servers and set of public IP addresses assigned e.g
Customer A - ISP 1 uses 81.34.65.78 NAT'd to 10.0.0.1 Vlan 5 port 25 (SMTP)
Customer B - ISP 2 uses 217.23.67.87 NAT'd to 192.168.1.1 Vlan 6 port 25 (SMTP)
and so on
The outbound traffic also needs to go out of the correct DSL line which ever has been assigned to that customer.
Am i right in thinking the only way to do this will be to use "Route Maps" ??
(IP addresses above are made up, or at least not ours)
I have been looking for the command to view all concurrent active connections or sessions on our Cisco 2911. I want to see what the total connections or sessions are at peak times throughout the day.
View 4 Replies View RelatedWhat specific commands are needed to configure qos on a router?
Two sites:
Cisco 2911 (site 1 ) Cisco 2911 (Site 2)
Data Vlan
Management Vlan
I want to configure QOS on Site 1 where the Data Vlan traffic is always marked higher than the management Vlan coming from Site 1.
I have one router 2911 with the following image c2900-universalk9-mz.SPA.151-4.M4.bin I have two IPS on this routers and I tried to configure the IP SLA on this and I`m not able to do it and I don´t know why. I can configure almost everything but not the IP SLA command.this is the config:
track 10 ip sla 1 reachability
delay down 10 up 1
!
track 20 ip sla 2 reachability
delay down 10 up 1
!
[code]....
What I need to do in this case? or why cannot configure the IP SLA?
I've got a 2911 with a primary ethernet link to the ISP, with BGP running over it. There's also an ADSL module in it, which will connect into the same ISP AS. how do i configure BGP over the ADSL so that it sits there doing nothing until the primary link fails? Do i need to setup a new instance of BGP with a different AS on the router or can it sit in the same AS as the primary link?
View 1 Replies View RelatedWere bringing up a new site shortly and I'm trying to configure Serial0/0/0 which will be connected to an MPLS over 1.5m T1 line. I am basically doing a simular configuration as other sites where one of the ethernet interfaces is handed off from a fiber optic wan, but a T1 MPLS is connected to a WIC card and this provides a redundant path (though slower) in case of a fiber cut or equipment failure. This should be pretty straightforward but it appears as if I have no serial interface on this router. Card is in and everything, it is a VMIC-3-1MFT-T1/E1 in EHWIC 0.
View 7 Replies View RelatedSuppose a broadcasted IP packet reaches one of the integrated RJ-45 ports on a 2911 ISR G2, will it be possible to configure the router so that the other integrated RJ-45 ports, ESM/EHWIC modules installed on the router, as well as the MGF also recieve the packet? Technically, the router should act similar to a switch with the SRE behaving similar to a seperate machine connected via the MGF and other external machine connected to the ports of the router to recieve the broadcasted packet.
Also, if SNMP traps were generated from the router,Will it be possible to send the traps from the router via the MGF to the SRE installed on the router?
I need to configure two links (active and failover) on router 2911. Do I need DATA LICENSE to configure this with static router and route-map?
View 4 Replies View Relatedwhat will be the work around on this configuration.currently we have a Lease Line connection on serial interfaceISP <=SERIAL=>Router 2911<=ACCESS MODE=>Firewall(DATA DHCP SERVER located here, policy implemented here)<=TRUNK MODE=>CORE Switch(VLAN Assignment is here)<=TRUNK MODE=>ACCESS Switch(DATA and VOICE passess thru each ports)i am thinking to create a DHCP pool on the router to where my firewall should point to and from the DHCP pool it will point the internal network going to public network.
View 2 Replies View Relatedis it possible to configure an ASA 5505 with two internet connections? One dedicated for VPN and the other one for Internet access only.
View 9 Replies View RelatedI have an RV220w in office, which I have configure it for ipsec vpn connections. Behind router there is a NAS for file storage. [code]I have managed to connect to router from my home with ShrewVPN and I can ping every client connected to RV220w.The problem is that I can't connect to neither to router's web interface nor to NAS web interface or any other intranet web page ( the browser doesn't give any error, but keeps loading without showing the web page). Although, I can access web pages from my laptop.Also, in windows file explorer when I connect to NAS, although I can browse folders I can't copy files from my laptop to NAS and vice versa, I always get timeout error (I have checked the permissions to NAS and in addition I succeed to copy a small txt file 1kb, but no luck with bigger files).I also tried with QuickVPN client, but I had the same results. When I connect with pptp from windows everything works like a charm.My laptop has windows 7 64bit.
View 2 Replies View RelatedWe have a switch gc2960. It has ports configured on vlan 27 and vlan 29.It is connected to switch ch3550. It has presence of vlan 27 vlan 29 and also vlan 18 and several other vlans.Our internet firewall is connected to ch3550. It is a fortinet product, so this is not indicated on the diagram.
When the two switches were connected on vlan 29 access ports, pc's on vlan 29 on gc2960 worked as expected. vlan 27 clients of course did not work.When we switched the connecting ports to trunk ports, some weird stuff happened. Clients on gc2960 on vlan 29 could ping and resolve dns, but not browse the intenet. The same was true for clients on gc2960 vlan 27. We verified that packets from the web were coming in through the firewall. What we were thinking, is that they somehow were not being tagged to vlan 29 even though we were trunking.
When we set native vlan 29 on the trunk, then clients on gc2960 vlan 29 operated as expected. However, clients on gc2960 vlan 27 are still having this problem, we can ping and resolve dns but not browse.Consider the other switch ch2960-jstreet which has presence of vlan 18 and vlan 27. It is also connected on trunk to ch3550. We are not using native vlan on this trunk, and traffic works as expected.Is the lack of presence of vlan 18 a factor as to why gc2960 is not receiving the tagged packets correctly? Should the interface vlan18 on gc2960 have an ip address on the vlan 18 network?
I've been collecting information on principles of SHDSL connection. I have found plenty of examples on how to configure only one SHDSL link. Very soon I'm going to the site to install two independent SHDSL links in Cisco 2811 which has one Cisco HWIC-2SHDSL module, so I can route one type of traffic through one connection and another type of traffic through another. Both SHDLS links have static IP addresses and probably different VPI/VCI values. how to install two SHDSL links into one HWIC-2SHDSL module, set one value for VPI/VCI on one link and another value for VPI/VCI on another link, also set one IP address on one link and another IP adddress on another link?
View 13 Replies View Related
