Remote Corporate Networking Via Vpn
Nov 22, 2012
I am the CEO of a small company with 5 divisions, 2 of which are remote. There is also my home office that I wish to be on the company VPN.We can't afford an IT department, so it is up to me to ask for a network diagram (as specific as possible) that lays out all the hardware required.My plan is to eventually have an intranet web server, file server, and database server all for internal use. Our external webserver is hosted by a well-known company. Growth must be considered both in hardware and network.
View 4 Replies
ADVERTISEMENT
Aug 17, 2011
I need information about the Aironet 600 access point.I got a customer who want to deploy a guest WLAN on branch office with an authentication with a captive portal that is centralized. I would like to use the OfficeExtend functionnality with Aironet 600 Acces point & WLC 5508 or 2504 to centralize the traffic from all access points on the controller.
On those branch offices, there were a few "free access desktops" that need a copper link. I want those devices to be also authenticated by captive portal, so I want to connect them on the four 10/100 port of the access point. But it seems that we can only use one port as "corporate remote LAN", the threee others are just for "home LAN". Is it correct ? Is there any solution to configure the four ports as remote LAN interface ?
View 3 Replies
View Related
Nov 24, 2011
I want a simple remote client-initiated VPN for employees to access corporate resources from home simultaneously with being able to access the internet. I am using CCP and seem to have several options including Easy VPN server, SSL VPN. I also can choose "Full Tunnel" or not.I have a 2911 router. I have a static range of internet IP addresses. The router is already functioning with inside to outside and outside to inside NAT, etc.
View 1 Replies
View Related
Apr 4, 2011
I have a situation here where the company is rapidly expanding through acquisition. They are essentially a holding company and own several smaller entities. However most IT is consolidated as new entities are brought in and run out of Headquarters because the Board of Directors/Executive Mgt do not see IT as important and so the budget is extremely limited.
They have approximately 200 remote users at any given time, but they all work for these smaller entities. Currently each location has its own Dedicated Internet Access and VPN appliance (Netgear ProSafe, Cisco ASA 5510, I know of one entity that is just port forwarding to each workstation for RDP ).
They would like to route all traffic back through Corporate so they can consolidate this VPN mess and quit paying for all different kinds of licensing, and also stop paying for dedicated internet access for each location and just use the MPLS and have all traffic inbound/outbound run out of the corporate office.
The only issue is they dont want users to be able to access network resources at other organizations.
Like I said earlier the Board of Directors/Executive Mgt do not see IT as important and so the budget is extremely limited; so if there is an OpenSource option available that would be best. Also the IT dept there is 3 people (IT Manager (IBM AS400 guy), two Helpdesk guys (no certs, HS GED)) So the knowledge resources are limited as well.
View 4 Replies
View Related
Mar 21, 2011
I have a Belkin Wireless G Plus MIMO Router and had no problems connecting to corporate in the past until several months ago. I can connect just fine if I bypass the router and connect to the modem. I also have no problem if I go to places like Subway. There is no problem with the wireless internet connection, only a problem when I try to connect to corporate through the VPN.
View 3 Replies
View Related
Apr 4, 2012
erro came with 3722------however after checking date and time i was able to login. AZAD
View 1 Replies
View Related
May 21, 2012
I have cisco's CUCM version System version: 7.1.5.10000-12 when I do a corporate lookup (form my 7970 I hit Directories - 5) Corporate Directory) I see all sort of accounts that have no phone extensions I.E. our windows service accounts, our administrator accounts that have no number associated with them. is there a way for me to hide them?
View 1 Replies
View Related
Jun 11, 2012
I am trying to connect to my office wifi which uses a proxy server. Scenario 1: I am using Samsung Bada (wave 1), connected to the internet successfully and also any applications that require an internet connection including Samsung's app store. While, connecting via open networks like home wifi and other friends' wifi also worked without any issue. Scenario 2: Now I also have an android based Galaxy pocket: even after entering all the required proxy setting as mentioned above, I can access websites via browser but cannot access samsung's app store, google's play store, skype, sipdroid etc. I know it is nothing to do with the network administration as I am still accessing via my samsung wave but not via android. Is there anything like a network profile I need to assign for these applications?
View 1 Replies
View Related
May 30, 2012
How can i to prevent the demonstration of a software in corporate network?
View 2 Replies
View Related
Feb 7, 2012
I have a computer that was previously connected on-site (hard wired) to a corporate network. I am now attempting to connect it on-site to my home network. While I have a live Internet connection going into the computer, I cannot connect to the Internet. Is there soem sort of setting adjustment that i need to make?
View 5 Replies
View Related
Mar 16, 2011
My company uses an ASA 5520 to authenticate VPN using the Anyconnect client. We would like to deploy a second authentication method such as Host Scan (CSD.) Our ASA is currently running on a "Plus" license. As I understand CSD will only work with "Premium?" If this is correct are there other options for two part authentication? We're also considering using FOBs and have ruled out using the NAC.
View 3 Replies
View Related
Sep 30, 2012
Looking for input on creating a guest VLAN for a client. The goal is to create a guest VLAN that doesn't have access to the corporate network using one DSL modem. They currently have a managed switch (3COM Baseline Switch 2928-SFP Plus). There are no existing VLANs or guest access. Additionally, they are looking for a WAP that supports captive portal.
View 10 Replies
View Related
Oct 3, 2012
I change DHCP scope to match corporate IP scheme Friday came back To discover only some stations picked up new leases from the scope.
View 2 Replies
View Related
Aug 7, 2011
Trying to access my corporate VPN. My laptop can successfully VPN in anytime I'm on the road, but not through my WRT54gx at home. I've enabled the VPN pass through but my expertise ends there.
View 1 Replies
View Related
May 21, 2012
Looking for routing with an SA540 router connecting to corporate VPN.We have an odd configuration that is beyond the scope of what I have configured previously with these devices..I am trying to configure the routing to the additional IP addresses listed for the HQ. The VPN tunnel between the .26.120.x and the .17.0.0 networks is built however it does not appear to be routing. The Cisco administrator at the HQ site says that they have "fully configured the routing" from all the listed IP addresses back through the VPN tunnel. The options I am unsure of for configuration of the SA540 router are: GW - I believe that I use the internal IP address of the 17.26.120.x router.Is this logical since the VPN tunnel. We are using NAT for the firewall internally.The existing 3 172.26.x.x VPN tunnels are live and working and fully routing between themselves.
View 2 Replies
View Related
Oct 1, 2011
I have some trouble with the setup of an oeap 600 ap. The ap has joined the controller as it should and the remote-lan connection to my corporate network works well, but i can't connect to the corporate wlan.
When i check the event log on the ap it says:
"
*Oct 02 07:36:56.662: (Re)Assoc-Req from 00:1a:73:d2:82:8c forwarded to WLC, wired: no
*Oct 02 07:36:56.665: received assoc-rsp for wireless client, status=0011
*Oct 02 07:37:11.712: DisAssoc-Req/DeAUTH from 00:1a:73:d2:82:8c forwarded to WLC, wired: no
*Oct 02 07:37:11.713: WTP Event: Delete Mobile sent to wlc00:1a:73:d2:82:8c"
and a debug on the controller gives me:
apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Adding mobile
on LWAPP AP ec:c8:82:c2:3a:20(0)
*apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Association received from mobile on AP ec:c8:82:c2:3a:20
*apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Sending Assoc Response to station on BSSID ec:c8:82:c2:3a:20 (s
tatus 17) ApVapId 1 Slot 0
[code]....
View 3 Replies
View Related
Sep 14, 2012
I have created an IPSEC VPN tunnel using a Cisco ASA5520 (corporate) to a Cisco SRP541W (remote). The corporate subnet is 10.1.0.0/16, and the remote subnet is 192.168.1.0/24. From the remote subnet, I can ping anything on the 10.1.0.0 corporate network, but I cannot ping from the corporate network to the remote subnet. At first I thought this was something obvious, perhaps an incorrect acl or something easy on the corporate firewall. However, we have several other vpn tunnels established, all set up the same, and they work just fine. After looking at it a bit more closely, if I ping the remote subnet I see the hit counter increment by one each time, which leads me to believe that traffic is in fact being routed properly.Now I'm thinking that something in the remote SRP541W that is not allowing icmp traffic, but I can't find it anywhere. To be honest I have never used this type of firewall before, they have all been Cisco PIX501/506e and ASA5500 models.
View 2 Replies
View Related
Jan 12, 2013
We need WiFi security on our corporate SSIDs locked down using certificates, we are using wlc cisco 2100 series. We need these on every workstation, laptops etc.
View 6 Replies
View Related
Mar 14, 2011
I am having trouble with routing in PIX501.I have one Pix 501 and one Cisco router.Cisco Router is configured for IPSEC VPN ( LAN interface 172.19.194.1) and PIX is configured for access the internet.Default gateway of Pcs in LAN are PIX inside interface ( 172.19.194.2) but people are unable to access to corporate network but can access the internet.If i set default gateway to Cisco router LAN interface ( 172.19.194.1)then i can access to corporate network.Purpose is to pass the internet traffic using PIX 501 and corporate network traffic using Cisco router.
View 6 Replies
View Related
Apr 19, 2004
I see a lot of postings about getting the GX270 working with a ghost boot floppy.
Dell Optiplex GX270 Onboard Intel LOM (Intel 1000 Pro) and Ghost 8.0 Corporate Edition using a Ghost Console Boot Partition.I'm using identical Intel Drivers on both the floppy and the Boot Partition.It works from the floppy(only using PC-DOS however).
When started from the ghost console boot partition it pauses after displaying the MAC address of the card which after a few minutes it displays an error message "command interpreter missing (command.com)".
I've gotten the scenario to work with a Broadcom Gigabit Extreme network card, haven't tried this with an Intel Pro 1000 NIC (as opposed to the onboard NIC) to eliminate the driver as the culprit. I suspect this might have something to do with the SATA configuration.and no, the -FNI or the -NOIDE switch will not work in this situation as the *.exe that starts on the boot partition is ngctdos.exe and not ghost.exe.Which, I'm assuming is the app that listens for instructions from the Ghost Console.
View 58 Replies
View Related
Feb 27, 2013
A new Windows 8 computer can't access the SSLVPN corporate connection.
When we try to access the SSLVPN website to download the launcher (you have to download the VPN launcher everytime for our configuration), you can log in and that's fine, and then you can click on the VPN Tunnel link, a popup shows up but it doesn't actually download the launcher. Solutions we've tried so far:
1) Reinstalling C++ Redistirbutable
2) Adding the site to trusted sites and allowing unsigned ActiveX controls
3) Removing all internet objects through internet options.
Is there anything else we can try?
View 3 Replies
View Related
May 9, 2012
I have a cisco 877 configured foir lan to lan between sites A and B. I have used vlan 1 but looks like i have to bvi1 if i need to use the wireless,what is the difference between bvi and vlan. if i wanted users on the same vlan and wireless what would be the base config ? at the moment all corporate traffic goes to site A and other traffic goes to internet. now would i be able to create two ssid, one for corporate to access corporate subnets and the other for guest access alone where the traffic goes out to the internet.
View 1 Replies
View Related
Oct 23, 2011
I recently installed a very basic version of XP on my old laptop (Gateway MT3707).After hours of searching for the correct drivers, I found them, and installed them. After installing the correct drivers for wireless internet I was able to pull up the list and find my network on it.When double clicking on our wireless network it asks for a network key (also called WEP key or WPA key).Now we have a password for our network, but after an exhausting amount of tries that won't work. I not sure if that is what its looking for. In our apartment we run mac OSX, windows vista, etc., but usually the password for the network is satisfactory. I have never ran into this problem.I hate to be a noob, but I don't know where to go from here.
View 6 Replies
View Related
Jan 11, 2012
One of my customers asked me to configure a WLC 2106 and 2 LAP 1131AG (lightweight) for corporate/guest Wifi. Basically they want to implement a good wifi connection for internal use and a guest one with different QoS. The two lans should both have dhcp but they must bet kept segregated so that none from the Guest wifi can access corporate resources.
Since i've never configured a WLC from scrath i lightly supposed it would be quite straigh forward as routers and switches from Cisco.Unfortunately i was totally wrong.
I've downloaded the "Cisco Wireless LAN ControllerConfiguration Guide" (Soft.Release 6.0 June 2009) and after i red it i made up this workflow
for the configurations:
1) Configure Controller: (via serial)
- Set Management Interface parameters (IP- SM - Def GW - Dhcp server IP)
- Set Ap-Manager Interface parameters
- Virtual Interface parameters
- Set Admin Credentials
- Dhcp Configuration (internal and/or external)
2) Ap registration on the controller
- Configure vlan with dhcp request redirection to the dhcp server
3) Configure Wlan following customer's requests.
- Configure Wlan Auth for Corporate/Guest Wifi
- Configure QoS for both Wlans
Unfortunately i'm experiencing issue while trying joining the AP to the WLC.It appers that the IT guy of my customer tried to configure one of the Ap.In that Ap's flash i find files referring to a "mesh" configuration like: [code]
View 11 Replies
View Related
Mar 2, 2011
Having some serious problems on the networking front here at home. I have 3 PC's and 2 Xbox's that run constantly. Our Internet bandwidth is Insight's 50.0 which is 50Mb download speed 5Mb upload speed. The problem we're having is this. Ever since we upgraded from dual 20Mb lines on a Cisco RV042 to a 50Mb on a DIR-655 we've been having latency issues. I have everything turned off in the router. It's basically there to give out IP numbers and thats it. All security is handled from the PC's themselves. Bandwidth tests are fine, I sustain download speeds above 7MB/s using download managers. But pings are terrible. Xbox live is terrible, PC online gaming is terrible. Pingtest.com is terrible. Only when behind routers. I've tried it behind 3 seperate routers. The DIR-655, the Belkin f5d8236 that insight provided me, and the cisco rv042 originally used for dual wan routing. all of which are met with serious failure.
If I plug directly in to the modem pings are fine. Add a router and pings go to shit.
View 14 Replies
View Related
Jun 19, 2012
I have a Linksys EA4500 setup on my corporate network for wireless access. I have enabled the guest network and from all I can tell it's on a seperate subnet from my internal network like it should be. 192.168.x.x My internal is on a 10.x.x.x network. I conenct to the guest network using a laptop and I'm prompted for a password to get to the internet, which I like. The one issue I'm seeing is when I'm connected to the guest network I can still do an RDP session to internal resources. How is this possible if the guest network is on a seperate subnet?I take a laptop which has not been joined to my domain, connect to the guest ssid, and then open an RPD session and enter an IP address for an internal server and it connects. Is there a setting to keep this from happening
View 6 Replies
View Related
Feb 27, 2011
I have a serious problem with my corporate firewall, witch is an ASA 5520, fv 8.3, with 8 +1 interfaces. It suddenly started to crash every 10/20 minutes and rebooting alone.
First of all I checked system resources witch are in a very low usage state. I also checked interfaces errors, but nothing strange come out o from error counters analysis. I tried disabling logging and all the service policy rules configured, but nothing changed.
Nothing changed and firewall continue restarting by itself.
Last logs I received before crash were:
%ASA-4-711004: Task ran for 35 m sec, Process = Dispatch Unit, PC = 84a619e, Call stack =
%ASA-4-711004: Task ran for 35 m sec, Process = Dispatch Unit, PC = 84a619e, Call stack = 0x084A619E 0x084A6512 0x084A70E1 0x084A7987 0x084A7AAA 0x08558B9B 0x08558E8A 0x083D3518 0x083CA145 0x080659D1 0x089196D9 0x08919790 0x089FF711 0x08A27468
Here the sh crash info command on module 0, after last reboot:
[Code] ......
View 12 Replies
View Related
Sep 12, 2012
We have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
-------------------------------------------------------------------------------------------------------------------------
WORKING CONNECTION
-------------------------------------------------------------------------------------------------------------------------
%ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device
NAT-Traversal auto-detected NAT.
%ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user
%ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
[code]...
View 1 Replies
View Related
Mar 9, 2011
On wireless (lenovo tabletx61) I cannot connect through the intranet - no problem connecting through internet. When I manage to connect through intranet connection is dropped quite often.No problem connecting via Ethernet cables.
View 1 Replies
View Related
Sep 24, 2012
I have 3 LAN connections. I m using 3 modems and 3 switches to connect all the pcs in LAN.but now i want 1 pc as a server which have connected all the 3 lan network with it.so that everyone can share its file to server and even all clients. Should i have to create VPN or homenetwork to connect with server? and i must have to install microsoft windows server in server pc?
View 4 Replies
View Related
May 30, 2012
My laptop (Win 7 x64) can currently access all the shares on the XP computers in my home network but,although I can see it, I cannot access the laptop from my main xp computer. I haven't tried to access it from the other xp computers downstairs. I have read the guide on this site as well as 3 or 4 other threads on this subject but am unable to resolve the issue. Completing the network setup so that I can look into my laptop from this main xp computer. My laptop has a wireless internet connection but I also have it plugged into my wired home network for sharing. I will provide other details as needed. I suspect that some essential services for file sharing may not be running on the laptop, but I'm not sure.
View 19 Replies
View Related
Jul 16, 2012
I have been looking at ways of networking my printer in my office. The problem being that my printer does not have any kind of inbuilt networking capacity.So I thought I could connect it via USB to my router as it has a USB port on it.The router is an Orange Bright Box - In the specs for the router it says that the USB port is for file sharing, mentions nothing of connecting a printer to it
View 2 Replies
View Related
Sep 11, 2011
Trying to network between a Windows 7 computer and a Windows XP computer is possibly the hardest thing I have ever done.I have googled for hours and hours and none of the solutions seem to be working.I will try to explain what I have already done. Although I have done loads and I am sure I am missing some things.I have a Windows 7 laptop and for this exercise I shall call it WIN7. I have a Windows XP computer and for this exercise I shall call it WINXP.Both computers are in the same network which I have called SAMNETWORK. I have enabled permission to Everyone in folder sharing settings on WIN7. I have turned on Sharing and I have made myself discoverable with no password set on Network and Sharing Advanced Settings. Both user accounts on the XP and 7 machines are the same and both passwords are the same. I have turned all firewalls off. The WINXP computer has sharing enabled.
I have done a lot more things including installing LLTP (sp.?) and changing registry entries like Lsa/anonymous something like that (can't remember the actual directory) but I have changed registry entries as I have read elsewhere on the web and I have changed the network from home to work but that did nothing etc. etc. But everything that everyone suggests is just not working and I have been looking for about 4 hours now so you can imagine I have tried everything I have found!Anyway, my 7 laptop can see WINXP but when I click on it, it states that Windows cannot access \WINXP. The WINXP computer can see shared folders from WIN7 but it also states that it is not accessible. However, I did once get the WINXP computer to access the WIN7 shared folders. However, that doesn't even work now. I need the WIN7 to access the WINXP files. [code]
View 1 Replies
View Related
