I have installed a video security system into my home/office and several IP cameras are connected via my wired cat5 network which connects to my router and switcher into a PC with internet access. This will allow me to record any break ins and alert me of this event and view it in real time.I would like to restrict access to these devices for anyone else on the network, with either dedicated access or password protection.
View 1 RepliesNot sure If I am asking this correct. I want to install a wireless access point into a switch and out the WAN. Going to PW access into the wireless access point. Can I restrict the user from entering the LAN from wireless access point? Change subnets, what to do? Would not mind resticting speed, etc. I think I can through my switch.
View 19 Replies View Relatedgot myself the Netgear internal PCI wifi adapter today & it works just fine on my Windows XP SP3 desktop.
The only problem I have is the question of restricting complete internet access to kids @ home. If it was an external USB adapter, I could have just taken it away but the concern is the device being an internal & always available one.
The user configuration on the PC is such that there is 1 main administrator (The actual windows "administrator" account) that no one uses. Apart from that,
- 1 user with admin privileges (me)
- 1 limited account for the kid
- 1 admin privilege account for the kid again (for purposes like installation of games which require an admin account as mandatory)
I would like for the wifi PCI card to work only when I login to my user account. There must be someway by which I could disable the device or make the internet inaccessible in the other accounts,, (but pls bear that 1 of the account that the kid uses also has admin privilege)
I tried disabling the device from control panel but in vain.. (tried something like the sys admins do in corporates ..) disabling the usb ports on the PC's in my office..!
I am trying to block access to facebook and twitter on my router, to a certain range of ips, 192.168.1.8 - 254. I have been digging around and trying stuff but all I do seems to restrict everyone access to the internet.
View 5 Replies View RelatedWe have recently ordered a laptop along with a docking station with the intention of connecting it with the desktop PC in the office. We want the documents folders of both computers to be synchronized and to that end we want to share the folders between each computer. However, to do so we will have to connect the laptop to the larger network in our office. Given the sensitive nature of the documents we only want the desktop PC and the laptop to be able to access these files and synchronize them.
Is there anyway in Windows 7 to specify exactly which computers are allowed access to shared folders on a computer? What's the best way to achieve the file synchronization between the two?
This is my scenario. I have my IP as 172.16.1.1 (aaaa.bbbb.cccc.dddd) which has full internet access. Now when i am not available in the office, i noticed some one assigning my IP in to his workstation and gaining full internet access. How do i restrict such things? i.e. even if some one assigning my IP on the network, they shouldnt access LAN or WAN.I tried 'arp 172.16.1.1 aaaa.bbbb.cccc.dddd arpa' configuring on my L3 Cisco 3750X switch assuming i can acheive, but that did not work.
View 8 Replies View RelatedI have Configured a WLAN with WiSM2 Controller installed on a 6500 series, Aironet 3600series APs and ACS 5.3 for userauthentication. The ACS is connected to Active directory so users are authenticating using the AD (802.1x is used and not a pre-shared key) on SSID A. I have created a separate SSID B for guest users. I have put restrictions on this SSID. Guest users are also created on the same AD where internal users are created. How can I force Guest users to connect to SSID B and not be able to connect to SSID A? Currently they can connect to both.
View 3 Replies View RelatedI have an ASA firewall and I have never configured an FTP server for a large scale network (well large in my opinion). I want to ensure we have the highest level of security available for the FTP and to limit only the specific users designated by an ACL. Would SFTP be the best available option for security measures? Should I only use Passive FTP and what range of ports above 1023 should I open for only 1 or 2 FTP clients at a time? Also if I use Passive mode do I need to use protocol inspection for FTP?Also, Currently I'm unsure of what files need to be accessed on our network but should the SFTP Server always only be installed within the DMZ?
View 4 Replies View RelatedI have a Cisco 2901 Terminal server with AAA authentication via ACS server. I create twoaccounts on the acs server, cciesec2011 and vendor. Both accounts can log into the Cisco 2901 Terminal Server without any issues. By the way, I am NOT using AAA authorization on the Cisco Terminal Server. Once cciesec2011 or vendor accounts are authenticated, theseaccounts can access all the async line on the Cisco Terminal Server.
Now I have a new requirements. I would like to allow cciesec2011, once this account is successfully authenticated, this account has access to ALL async line on the Terminal Server. The "vendor" account, I want to restrict this account access only to async line 35 (there are 32 async lines available on the Cisco Terminal Server) and nothing else.
How can I accomplish without using AAA authorization on the Cisco Terminal Server?Is it possible to use "privlege level" to accomplish this? if so, how?
Is there a way to restrict wireless access to my router from wireless pc's in my home. Two grandsons are off from school now, and are playing online games to the wee hours of the morning. Can I do something to have the routher shut off their connection at a certain time? Is that possible. If I have to go back to dd-wrt to do that, fine. I have lynksis wrt54g with their 4.2.1 firmware.
View 5 Replies View RelatedThe following diagram represents my current network.
I would like for the Phone and the Laptop both on wireless to have internet access but not access to the other PCs/shares.
I have access to routing tables in both the cable router 10.0.0.1 and the wireless router
wired : ASUS RX3042H
wireless : Linksys WRT54G (default Firmware)
Recently, I have configured a small Wireless Network with Cisco 2500 WLC (25 AP License) running version 7.3.101.0 ,Total 15 APs were installed and associated with the Controller successfully.I have configured WLAN with WPA2-PSK.
I came across a strage issue, where all Android devices can't access Internet via Wireless.When I checked the Controller log, the Android devices (Phones, Tablets) are successfully authenticated and associated to the Wireless Network (They got the IP Address from the DHCP Server configured on the Switch) but they can't access internet.
There is no issue with Apple devices (IPhones, IPADs) and Wireless Laptops. Even the Apple devices and laptops getting IP Assigned from the Same DHCP pool configured on the Switch.
Any issue connecting just Android devices? All other devices connect fine.
Is there any limitation/configuration on the WLC which restricts the Internet Access only to the Android devices?
We have configured a Cisco ASA 5505 with AnyConnect access. This works great. However, these users cannot seem to ping devices on the private network. We have configured all devices on the network with a 10.10.10.0/24 address space. The inside interface of the ASA i 10.10.10.1/24 and the VPN return addresses are 10.10.10.50 - 10.10.10.65/24.They users can utilize SSH and Oracle or MySQL calls but cannot seem to ping. Obviously, I am over looking something.
View 2 Replies View RelatedI have a 5505 between a vendor router & my company network, vendor is not able to access devices on internal network. I am also not able to access the firewall via asdm
View 10 Replies View RelatedI work at a small business that has an exisiting wired network. Our setup is: Internet > ISP Box > DHCP Server > Switch > Users. I have been attempting to add a wireless router to the network to enable our shop techs to wirelessly access our file computer. I have managed to get the wireless working, but the network was not visible, I could not access any network computers from the wireless, and I could not access the wireless router from our main server. After this I screwed up the settings completely and even a wired connection to the router couldn't connect to the internet. Now I have purchased a WAP54G, but I forsee the same problems when I go to config everything tomorrow.
View 2 Replies View RelatedWe are running ACS 5.2 patch 6 and want to restrict access for users to be able to add devices to the system.For example, admin person in site A can only add devices into the site A group and cannot see/access other sites groups.
View 1 Replies View RelatedWhere can I find a log or list of devices that attempted to access my EA4500 wireless network?I am using the cloud services to monitor my EA4500 usage in an apartment environment.
View 1 Replies View RelatedI have a neighbor, whom I barely know, (don't know his name even) ask if I would be willing to give him the number off of my modem so he can cannot wireless to my internet. I believe that is a bad idea. For one I don't know him but if it was possible and I did that, would he be able to access my account? or start more trouble? He at first said If I give him the numbers off of my router but then I stopped him because I have a modem not a router. So I would never let him but was curious if someone can tap into a signal of mine from a laptop next door to me using wireless signal? And if so can that person see all of my stuff? Would my computer and I be at risk?
View 5 Replies View RelatedI am a networking student so have access to a free copy of Windows Server 2012. I want to setup and get experience with AD, DHCP, and DNS, among other services. Right now I have a Netgear router attached to a Cisco switch. (studying for CCENT cert) I have my desktop and server plugged into switch. I want my desktop to connect to the domain for testing and messing aroudn with. My wife has a netboook, smartphone, and wireless ipod. I'd like her 3 devices to get an IP from the DHCP server without having her authenticate to the server. Will the Netgear router allow this since wirless access is on? Or will she need to authenticate with the server to get a DHCP IP? I am gonig to disable the router's DHCP service.
View 3 Replies View RelatedFirst I tried restricting all computers from accessing the internet from 11:00PM to 6:00 through access control. I enabled it and set up the schedule but it does not cut off the internet. I went through create a new schedule and did that but again it still connects. Then, in access control, I selected always and put in my son's IP address and created a schedule for him but it won't allow him any internet access.
View 2 Replies View RelatedWe are using ACS 5.1 in our network. We have created users and grouped them as per the requirements. We want to restrict the user sessions in the network. A user should authenticate and able to access a network resource. But when he is active with that session, we need to block him from another successful authentication. We want to avoid multiple users using same user credentials for logging into the devices. whether this can be achieved by making configuration changes in ACS.
View 2 Replies View RelatedI am currently running a guest wireless network using 4404 controllers on the wireless side and a 4402 as an anchor controller, all running 7.0.98.0 and all is working fine. Accounts being created via the WCS lobby admin and applied to the 4402.The question I have is, is there any way of restricting the use of an account to 1 device at a time. I am currently seeing evidence of password sharing and my boss would like to make sure that everyone who use the system has their own credentials.
View 1 Replies View RelatedI use a mail filtering service that delivers mail to me via SMTP on standard port 25 on one of my 5 static external IP's. I wish to restrict this to their IP's only (they have two) and I am unsure on how to do so? As it stands now, anything on the net can talk to my mailserver and my logs are filling quickly with failed attempts as a result. Here's my setup and what I am trying to accomplish:
mail filtering service -> my public ip:25 -> internal mailserver at 10.0.10.2:25, deny everything inbound except traffic from the mail filtering service, I am thinking an ACL would fit the bill here, but unsure of how to implement. Router is an 1811 with version 15.1(4)M3 IOS. WAN is on fa0, lan is on fa1.
I had a BT homehub with regular dropouts. I have changed it for a Belkin wireless router. I am now unable to stream music from laptop to Yamaha 671 or connect with wifi printer.My internet is working fine and I can communicate with my Dreambox and Vu Duo with no problem at all. Both these devices and the Yamaha are hard wired to the router.
View 2 Replies View RelatedI recently moved from BT adsl (using the WAG320N) to Virgin 100mb ISP. I had reconfigued the WAG320N to use the ethernet WAN port and the Virgin router as a modem only. The problem I have is that the WAG320N is restiricting the download speed to 37MBs. Initially I thought it was a problem with Virgin but after many visits from Virgin engineers and extensive testing we found that the WAG320N was restricting the speed to 37Mb/s.I am now using the router provided by Virgin which is not ideal. Is there a fix as I cannot find one anywhere.
View 1 Replies View RelatedI just started configuring AnyConnect with ASA 5520 that uses Cisco SecureACS to pass radius authentication. I configured two profiles with different split tunnel restrictions and what I discovered is that when the client connects to the ASA, they are provided a choice of these two groups (I guess there is no way to restrict this) and I can log into either one with any user account. How do I restrict this so that the user can only use one profile? Currently users capable of VPN would be placed in one specific AD group so that is what SecureACS checks. Is there a sample configuration guide to handle multiple profiles with different levels of access?
View 3 Replies View RelatedI have a 2900 router at branch office. This router has a 4 port switch card and two gigabyte ports. The gigabyte port is use for wan connection and the 4 port switch card is use for lan connection. I have two separate networks on my lan side. (network 1 and network 2)
I have assigned port 0,1 of the switch card to vlan1 for network 1 Ports 2,3 of the switch card is assigned vlan 20 for network 2
My problem is I would like to applied a bandwidth restriction for all data coming out from vlan20 capping same to 384 kb.
Note I do not want use QOS because this will only kickin when saturation occurs,
I have a customer that wants to restrict SSIDs that groups get based on their AD credentials. Currently, he is using Windows 2008 Radius Server and AD with Cisco 5508 WLCs. I found examples that shows this is possible but my question is if I have 2 user groups (teachers and students) in AD and apply a policy for the Radius to send SSID x to teachers and SSID y to students. Upon successfully authentication, would this deny teachers access to SSID y and students access to SSID x?
View 10 Replies View RelatedWe want to permit certain mac addresses on the cat 4506 switch wherein only those mac addresses will get access to network.
Configuration Planned: For testing purpose we have created mac access list on cat 4506 and deny laptop mac address in this access list. The mac access group is applied to the port where the laptop is connected to cat 4506.Even after applying the mac access group on the port, the laptop is able to ping the vlan ip of cat 4506 [code]
laptop with ip address 192.168.10.2/24 connected to port 2/1 is able to ping 192.168.10.1 even after applying the mac access-group
Note-we have tested same configuration on cat 3560 and its working fine. We apply the mac access-group command on interface and clear the arp-cache and we are not able to ping vlan interface ip. The moment we remove the mac access-group,ping starts again.
One is my HOME the other is my CARAVAN SITE. both networks are working fine independently, the problem occurs when i join the networks togetherI need to connect the said networks together in order to view my IP cameras which are dotted all around the campsite, i need to be able to view these from HOME.The problems i am having is DHCP servers are stealing clients from the other sides and directing them to the wrong gateway.please see below network map (these routers are all running DDWRT)Below is another network map which someone on another forum told me to do but its still not working. (DHCP servers are still clashing and still stealing clients)by the way, on both of the network maps all routers are connected with the LAN interface. someone told me to connect certain routers with WAN and it didn't work, or it was not explained correctly.Also please note that assigning clients with Static IP's is completely out of the question due to most of the clients being campers who come and go.
View 9 Replies View RelatedI have a problem with my 2 networks which are 1000 meters apart.One is my HOME the other is my CARAVAN SITE. both networks are working fine independently, the problem occurs when i join the networks together.I need to connect the said networks together in order to view my IP cameras which are dotted all around the campsite, i need to be able to view these from HOME.The problems i am having is DHCP servers are stealing clients from the other sides and directing them to the wrong gateway.please see below network map (these routers are all running DDWRT)if(GetCookie('computingnet_image') == 'yes') { document.write(''); }Below is another network map which someone on another forum told me to do but its still not working(DHCP servers are still clashing and still stealing clients)by the way, on both of the network maps all routers are connected with the LAN interface.someone told me to connect certain routers with WAN and it didn't work, or it was not explained correctly.Also please note that assigning clients with Static IP's is completely out of the question due to most of the clients being campers who come and go.
View 1 Replies View RelatedI have a WRT54G routher hardlined to a Ubuntu 12.04 server that is dedicated to minecraft.I have two ports opened for Minecraft to run off of.I'de like to give remote access to the computer to other people to maintain the server.BUT I need to restrict ANY and ALL ability for them to access the internet by either blocking all other ports or something else. Id rather not have to restrict it through Ubuntu if I don't have to.
View 1 Replies View Relatedi have to restrict that router and switches shall join only given multicasts. Means if i change multicast in TVG430 from 239.0.96.1 to 233.0.96.1 than it shall be blocked.My TX rate i set to 20 Mbits on TVG430, i want to rate-limit it to 15 Mbits on switch on Ingress int gi 0/23 or egress gi 0/24 included are three show runs output.ip multicast rate-limit out group-list GROUP source-list SOURCE.
View 2 Replies View Related