I am facing the following problem. SmartPhone is connected WiFi hotspot. Suppose SmartPhone ip is 10.0.2.2 and hotspot ip is 10.140.13.12. I am able to send data from smartphone to a server(over internet) which has static ip and sender details in server are hotspot ip. Problem is sending data from server back to smartphone. Tried sending to 10.0.2.2(smartphone) from server but packets are not received.
View 3 RepliesI am able to ping the node but when i try to access the systm using backslash i am uable to access it and an error of host inaccessible.
View 1 Replies View Relatedi'm stuck at registering inline posture node to primary node. I doing fresh install both ISE appliance using version 1.1.1, patched all 3 available patach version after install. AD and DNS were perfectly configure, ping using hostname able to resolve Everything set, so both PSN and iPEP generate CSR and ready to let CA server to signed. But anyway this is the outcome i get Error message "Unable to authenticate. please check server and CA certificate."
01. - What certificate template to be use primary node and inline posture node? I having problem the CA certsrv won't show computer template for inline posture node. can i use web server template and on the extension include client autthenticaiton andserver authentication on this case?
- What certficate template use for primay node CSR?
02. According to Cisco ISE user guide 1.1.1, it mentioned "Creating certificate trust list in Primary ISE Node"
So first action is importing Root and CA certificate . my rootCA.cer import to certification operation certifcate store, while CSR generated then Bind CA certificate. question, should i check anything like "Tust for client authentication" checkbox or any other option to be check? How about Inline Posture node, should i export the CA certificate and import to primary node's certificate store?
I have configured a Remote access vpn on pix 525 with 7.2(4) code. After getting connected (with ip address assigned from the pool) i am not able to reach any of the internal networks. [code]
View 3 Replies View RelatedI have remote access vpn setup and I can get connected with no issues. I assigned the vpn a pool of addresses from the end of my inside interface subnet. When connected I can ping any device on that subnet, I can also connect to my switch on the same subnet via my browser. I can not however access any device located in my dmz while connected. This is a new setup I'm testing but I need vpn user to be able to use rdp to connect to machines in the dmz.
Result of the command: "show running-config"
: Saved
:
ASA Version 8.2(1)
!
hostname ASA1
domain-name
enable password encrypted
[code].....
Recently i bought a new printer: Epson SX620FW, I've tried many things, but I can't connect it wireless to my network. Ive downloaded and installed the latest drivers and software from the internet. My PC is connected with a cable to my wireless router. When I connect the printer with a cable to my router everything works perfectly. But I want to connect my printer wireless. On the printer I disconnect the cable. I followed the wireless wizard setup on the printer and I connect to my wireless router. This is confirmed by an ip adress on the printer. Also in the menu of my router I find the ip adres of my printer in the DHCP clients list. So far so good. But from my PC I can not find the printer in my network. I also cant ping my printers ipadres. When I connect the UTP cable to my printer again, I can ping the ip of my printer.
View 2 Replies View RelatedWe are facing strange issue in our network. We have a remote branch which is connected to main branch using Leased Line. Remote branch is having Cisco 1700 Router. Every day in the morning time the remote router is unreachable. We are not able to reach (ping/telnet) the remote Router but able to reach L3 switch/ LAN behind this router. The users from remote branch is also not able to reach the local router but they are able to ping the Main branch.Users in the remote branch are not able to access any resources in the main branch during the issue.
During the issue, we have checked the remote branch router and found the CPU utilization of the Cisco 1700 router is very high (99%). If we run "Show process CPU" command (please find the attachment) specially IP input process is very high (97%).
I have a network of one router which servers both LAN and wifi, my laptop can only use wifi to connect but the range of the router doesn't reach the third floor. I need a way to either extend or create a second hot spot but I'm not sure whether to use a repeater, a hub or a switch? this is my first time dealing with a network
View 3 Replies View RelatedGoal: extend the reach of my WiFi to multiple floors with keeping in the basement the DSL modem - Actiontech M1000 and Actiontech W1000. I have a Linksys Access Point and Linksys Router. I was told by CenturyLink (only allowed support for Actiontech) that the modem would need to be put in bridge mod that would disable the Actiontech W1000. Whereas I want to keep access in the basement and add coverage to upstairs.
being able to config the Linksys(s) or using DD-WRT operating system?
The Cisco 1921 router has two routed adapters. One is GE0/0 which I am using for my WAN interface. It is working properly. The 2nd interface is GE0/1 which is being used as my internal adapter. It is running NAT. When I attempt to reach the internet it fails while checking the exit interface. Here is the report.
AttributeValueRouter ModelCISCO1921/K9Image Namec1900-universalk9-mz.SPA.151-3.T.binIOS Version15.1(3)THostnameBulldog
Interface Details
AttributeValueInterfaceGigabitEthernet0/1IP address192.168.1.1DescriptionNOC Link Test Activity Summary
[Code].....
I have a sg300-10 switch. i update the firmware with the last one. Things are complicated when i create 2 VLAN. ( really 1 VLAN cause the first is native ).So i have the first VLAN with the interface 192.168.1.254 ans the VLAN 2 wich IP is 192.168.2.254
I'm connected with my workstation ( ip : 192.168.1.2/24 with GW 192.168.1.254 ) and i try to ping a web server on VLAN 2 ( ip : 192.168.2.2/24 GW 192.168.2.254 )
Ping is OK ! But when i try to reach any ports of the webserver : Nothing.
I have ASA 5510 and configured client VPN or Annyconnect VPN, when I connect to the ASA remotely using anyconnect I am able to get IP address as configued, from Internal network I can ping and RDP that anyconnect VPN desktop, but the problem is from the remote anyconnect VPN client I am unable to access internal network, when I use ASA packet tracer and check traffic from internal to anyconnect pool of addresses it gives result ok, but when i use packet tracer to check traffic on outside interface from anyconnect address pool to internal subnet it always gives the packet is dropped at WebVPN - SVC, and I can find any where related configuration for that.
View 5 Replies View RelatedI'm replacing our current router with an ASA 5510 running 8.4(3) and I'm having what I think are NAT issues.From the 192.168.0.0/24 subnet, I'm able to reach the outside world (via NAT/PAT) without any issues. However none of the internal subnets (e.g. 192.168.10.0/24) are able to. Packet-tracer shows no ACL issues.
Here's my config:
ASA Version 8.4(3)
!
hostname gw
domain-name internal.mycompany.com
enable password asdf encrypted
[code].....
I have a problem where I have 3845 router and c3845-advsecurityk9-mz.124-24.T5.bin dis is the IOS running on it and there's a back up BRI interface for the serial. Now if my serial link goes it normally goes to my BRI, once we had a time where the BRI was also down and when we restored back the Serial link we were still not able to reach the other side. We are using OSPF routing to reach the destination. When this happens and when we reboot this router we are able to reach the destination. sometimes we are able to reach it when we remove ospf and use static and now if we put back the ospf routing the link comes back, this happens again and again.
View 2 Replies View RelatedI've just reset our WISM2 in the test lab back to factory default as I needed to reconfigure the 6500 and the WISM2 itself. Bearing in mind I had it working before.I've just renamed and re-addressed some of the vlans so things flow better and make it easier to add more WISM2s in the future.Now I've run through the initial configuration and it's rebooted ok and show WISM status is showing Oper-Up and there's a port channel 407 been created as I would expect. However, I am unable to get to the management interface via GUI or SSH. In fact from the 6500 I can't even ping the management interface (but I can the service port).The Vlans have been changed in the 6500 config so it knows the native-vlan and service vlan etc and all the vlans are up/up.
View 17 Replies View RelatedI have a multiple Offices in my location , all my external users are connecting my site using Cisco Client to site VPN and accessing my 2 sites , All users are able to access my 2nd office servers which are in 10.10.0.x pool , I have a different vlan in that same location with 10.10.35.x series and users are not able to access this pool servers , I am not much familiar with Routing . i am using ASA 5520 firewall .
View 11 Replies View RelatedI have 2691 router with following config
line console 0
login local
password xty
When i remove the login local from the line console i connect to console port and press enter it shows router prompt 2691Router> but i am unable to go to enable mode.If i telnet to router then i put username and pw then it goes straight to enable mode.
vty config is
line vty 0 4
exec-timeout 600 0
logging synchronous
login local
length 500
transport input telnet ssh
escape-character 3
Any reasons why i can not go to enable mode by console?
Our ESP traffic is passing through multiple nodes and we can not establish the tunnel. and I want to know which node blocked ESP traffic. How to trace which node blocked ESP traffic ?
View 5 Replies View RelatedI have 3 WRV200 that I want to install in 3 cities.I want each router to have its own Internet connection from the local ISP.I then want each router to connect to the other 2 routers and create a 3 node WAN using VPN connections.
View 1 Replies View Relatedto grant not to show the certificate error adevertise to all clients connecting to guest services (because obviously they don't have the CA root certificate of our company), we have purchased a wildcard certificate from Verisign in order to work with all of our PSN Common Names and friendly url for sponsor and mydevices. But when I try to import it to more than one PSN the following error message is shown " The certificate already exists in the data base".How can I import the same certificate (with the same private key) in every PSN in a node group?
We have ISE 1.1.2
I'm constantly seeing that the sync and replication status for my secondary admin/monitor node in the primary node as node not reachable. The secondary still thinks it is in standalone mode. When I run the ISE diag tool connectivity tests I am able successfully ping the devices from each other using both hostname and ip and the nslookup also works fine between both nodes. Ping and nslookups also work from different networks within the environment. The two nodes are in the same vlan on a 6500 vss pair but on different switches of the pair.
View 6 Replies View RelatedI have several locations with time clocks (a Kronos application) on a small home network with outgoing traffic wide open.I have a server in my office behind an ASA5505 router/firewall, also with outging traffic wide open. I have tried taking the device off of the remote network and giving the it a public, static ip address so it is actually on the internet, yet the server cannot see the device, but it can ping it. I was advised to put the device on the remote private network and set up a virtual server using port 8080 at the remote location. The server is still unable to see the device. I also set up a virtual server for VNC. When I am on my server on my work network behind the ASA5505, I can start my VNC viewer and attach to the device at the remote site using the IP of the router (apparently the device has a build in VNC server).
I have also tried to NAT my server to a public IP, I have set up incoming and outgoing rules on the firewalls at both ends.this should be a fairly straight forward connection.
I have a PIX 515e running version 7.2(4).I have 2 interfaces - DMZ3 (sec lvl 50) and LAB (sec lvl 100) behind the pix. There is also the OUTSIDE interface (sec lvl 0) which connects to the internet.In DMZ3 I have a webserver - x.x.124.217/24 (host is NATed via static command to public IP)In LAB I have a server - x.x.1.203/24 (entire range is NATed via NAT/Global statements to public IP)The server in LAB needs to access a webserver in DMZ3. From the internet both of these hosts have public addresses that are NATed into the inside addresses. I can reach the webserver from the internet, but not from the LAB interface.I think I have to add a static command so that the LAB host can access the DMZ3 host without accessing the internet.
View 3 Replies View RelatedI wish to purchase Cisco Prime LMS 4.1, particularly Cisco part # R-LMS-4.1-500-K9 which support 500 Cisco nodes.We have about 360 Cisco switches/routers/ASA/FWs/WLCs so the 500 nodes license would seem to suffice for now & for future growth.We also have about 200 lightweight APs that are managed & monitored by our WLC/WCS/Navigator environment.According to the device support documentation for LMS, it supports and I assume will auto-discover these APs.Does that mean these APs will use up node licenses on LMS even though management of the APs is done by WLC/WCS? If so is there an easy way to suppress discovery of APs by LMS so we don’t have to purchase extra node licenses for LMS? Or, does LMS offer additional support features for wireless APs not already offered by WLC/WCS/Navigator?Just trying to understand how many network node licenses for LMS I have to purchase.
View 3 Replies View Relatedwe operate an active/passive cluster with 2 ASA5510 in Routed Mode. Is it possible to add another node, so that we have one active and two standby nodes in the cluster? Unfortunately, I have found no documentation on this .... The data sheet say only up to 10 nodes can be mentioned as a VPN load balancing cluster.
View 1 Replies View RelatedI would like to ask, given that i got 2 units of ISE-3315 appliance, one need to be primary node for admin-policy service-monitoring, another unit then become Inline posture node.For the preparation on line posture node, what shoud i do on it?
01. For the unit ready to become inline posture node, so I just boot it, install the OS from sractch (using version 1.1.1), then start the initialize setup etc, like Normal setup?
02. Before i regieter, what is the deployment nodes i should select for inline posture node unit? provided the admin-policy service-monitoring will become primary node, and registration for inline posture node will be next action.
Here's the layout: Cable modem in the basement. Several devices in which I'd prefer a wired connection in the basement. Upstairs on the 1st and 2nd floor of the house are many devices in which wifi is fine or preferred.Here's the problem: As you might guess, wifi is weak upstairs and certainly on the patio and 2nd floor. I have an access point upstairs that I've experimented with but it is flaky.
View 1 Replies View RelatedI can not connect any equipment by WIFI. Tablet & Ipod. Equipment recognize a network but doesn,t connect.
View 1 Replies View Relatedlaptop to the Internet via wifi and am having no luck. The other computers in the house and my iPhone have no issues connecting, but his computer does for some reason.When I look at the status of the wireless connection, it's says the the IPv6 is limited.Since I am posting this from my iPhone, I'm limited as to what information
View 6 Replies View RelatedI've got a dell n4110 windows 7.
For whatever reason I can't connect to public wifi (school, library, cafe, etc) but I am able to connect to my home wifi no problem.
I can see it, just can't connect (doesn't give an error message, just says unable to connect).
So to clean up my hard drive I was deleting programs I didn't need, and I accidentally deleted the capability to use wifi. As that was the only way I used to go online, I need to figure this out. I have tried rebooting my computer multiple times, with no avail. The windows update did not give me back my wifi either.
View 1 Replies View RelatedI am attempting to connect to a residential wireless network on a router that was installed up by an engineer this morning.When the engineer was here he connected an HP laptop using XP to the wireless router. At first there was an issue with the connection (seemingly the same error message I am getting now), he did something to the wireless settings on the laptop, which stupidly I didn't see, and it successfully connected.When I attempted to connect my laptop to the same wireless router I got the same error message:'Connection Unsuccessful'.I clicked Diagnose Problem and got this: 'This computer has got limited or no connectivity'.I first selected the 'Automatically get new IP settings for the network adapter' but this didn't solve the problem. I then viewed the Wireless Network Security Settings and as far as I can see they are identical to those on the HP laptop that has successfully connected: [code] I then connected my laptop to the router using the ADSL cable and was able to connect to the internet, but I am still unable to get a wireless connection. When I view the wireless connections I am 'Connected With Limited Access'.
View 3 Replies View RelatedI can not connect to the home WiFi network using this laptop, yet I can connect this laptop to other public networks using the WiFi. I can connect this laptop tp the home network using cable to the Netgear Broadband wireless router, and I can connect to the home network with other devises ie ipads, ipods and another windows XP laptop.I had McAfee installed which was not working and I have uninstalled it.Here is a copy of an ipconfig /all command I used
Windows IP Configuration
Host Name . . . . . . . . . . . . : Sheila-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros AR5007 802.11b/g WiFi Adapter
Physical Address. . . . . . . . . : 00-24-2B-AE-28-BD
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
[code]....