VPN Problem: Can't route to other network clients

Hi,
I can't ping the other clients on the network when I'm connected to VPN from outside.
But accessing internet trough VPN works. (Sending all data through VPN).
So in fact, I can only ping the VPN server I'm connected to.
Maybe someone here has an idea what I'm doing wrong here.
Here is my setup:
internet
I
I
Airport Extreme (internal IP 192.168.3.1, Router with NAT Port forwarding to 192.168.3.3)
I
I
Switch----macMini (192.168.3.3, OS X Server 10.4.10 with VPN, DHCP, DNS, NAT enabled)
l
l
Other Clients on the Network (Clients have DNS entry 192.168.3.3 192.168.3.1, Router is 192.168.3.1)
The services DHCP, DNS working well for internal clients.
Has someone an idea?
Thanks a lot.
Alex
Message was edited by: Syndrome

First, ping is ICMP traffic, different from other kinds of (eg, TCP) traffic like AFP.
See http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/productstechnote09186a00800a6057.shtml
traceroute also uses some ICMP traffic but might also be using UDP, see
http://en.wikipedia.org/wiki/Traceroute
http://www.linuxplanet.com/linuxplanet/tutorials/6524/1/
However, in testing, I can indeed ping the server, when I connect to a remote Mac OS X Server via the Mac OS X supplied vpn. But there is no AP Extreme in the path. So the two big factors are: limitations and/or configuration of the AP, and firewall settings for each/any machine involved.
The Airport Extreme is really quite limited, compared to any more full-featured routing device - in terms of just how granular you can be with controlling traffic flow.
(As a total aside, I'd recommend investing in something like a Zyxel Zywall 2 Plus (or similar or better) and running the AP in bridge mode for wireless clients.)
When you've connected via VPN, please run
netstat -rn to see what your default gateway is, that's actually being used.
Finally, what led you to try these tests ? What other problems are you having, what primary issue(s) are you trying to solve ?

Similar Messages

  • Cannot see SSID nor can I use Join Other network with Graphite BaseStation

    I got a hand me down Graphite Basestation. I can administer it via Ethernet, and I can get out on the Internet that way, but I can't join the Basestation wirelessly. None of my computers can see the SSID nor can I used the Join Other Network to join. Any idea why?
    Thanks!
    Sherman

    Correction - I mean Snow Basestation, not Graphite

  • I cant access app store with my wifi though i can access from any other network

    i cant access app store with my wifi though i can access from any other network

    What happens when you try? Error message?
    Have you synced apps from that computer/iTunes library? You can only sync apps from your one syncing computer.

  • Can't copy files to network client's folders

    We just switched from ARD 2.0 to ARD 3.0. ARD 3.0 is a great product - if it works. I can only copy files to ARD-clients, if I copy to the local hard disk, i. e. if it is a local client or if it is a network client and I copy to the top level of the volume. But if I copy files to the network client's desktop it doesn't work. I think the reason is that the network client's desktop is located on the server and not on the local hard disk.
    The same problem occurs if I use the new feature to copy files from or to a client using drag-and-drop with the observe window. It works with the client's local hard disk, but not with folders located on the server. This time there is no error message, but the message "waiting" - and the waiting never terminates.
    Has anybody a helping idea? Thanks!
    Greetings from the country of the football (soccer!) world cup!
    Horst

    I had the same problem, but I managed to fix it.
    In WGM check that the sharepoint of your users Home Folder is set to owner root with Read and Write permissions.
    I also created an ard_admin group in WGM and enabled open directory management on the client Macs. (Page 62 of the ARD admin Guide.)

  • VOFM - Formulas Problem : Can't transfer in to target Client.

    I just created a formulas in Tcode VOFM, and inserted some code , and actived it. ,
    GRPZE GRPNO AKTIV KAPPL
    ADAT 905 X
    But I can't transfer it into target client.
    The transfer log is ok .
    But the target client still don't have formula 905 .
    Is there any special step for the transfer of formulas ?
    Many many thanks .
    The following is my Request ! Is there any problem ?
    DR1K903890 ZZFZWANG
    DR1K903891 ZZFZWANG
    Program
    RV45C905
    DR1K903892 ZZFZWANG
    Table contents
    TFRM
    TFRMT

    Hi Eswar ;
      Done.  I have found the formula in the target client.
      I think the problem is simple .
      The request was released and posted 3 days ago from dev system ,and It just appeared in the target client. But I found the transfer log is ok in DEV system.
      Thanks you very very much, Eswar .
    Best Regards
    Fred

  • Not able to connect with my router, but other networks work ok.

    I have a 2d generation iPod Touch. I can't connect to my home network that operates on a DLink DIR-628 router. However I can connect to other access points with no trouble at all. When my iPod tries to connect with my router, it asks for my password and I enter the password I think is correct, but it won't accept it. When I check the router web page there is no password visible. Does the problem lie with the Router or with the iPod Touch? I have three other computers and two wireless printers that are operating through the router with no problem at all.

    Have you tried:
    - Resetting your iPod:
    - Resetting network settings on the iPod: Setting>General>reset>Reet Network Settins
    - Powering off and then back on your router
    - The troubleshooting here:
    iPhone and iPod touch: Troubleshooting Wi-Fi networks and connections

  • Site to Site VPN Problems With 2801 Router and ASA 5505

    Hello,
    I am having some issue setting up a site to site ipsec VPN between a Cisco 2801 router and a Cisco ASA 5505. I was told there was a vpn previously setup with an old hosting provider, but those connections have been servered. Right now I am trying to get the sites to talk to the 2801. Here ere are my current configs, please let me know if you need anything else. Im stumped on this one. Thanks.
    IP scheme at SIte A:
    IP    172.19.3.x
    sub 255.255.255.128
    GW 172.19.3.129
    Site A Ciscso 2801 Router
    Current configuration : 11858 bytes
    version 12.4
    service timestamps debug datetime localtime
    service timestamps log datetime localtime show-timezone
    service password-encryption
    hostname router-2801
    boot-start-marker
    boot-end-marker
    logging message-counter syslog
    logging buffered 4096
    aaa new-model
    aaa authentication login userauthen group radius local
    aaa authorization network groupauthor local
    aaa session-id common
    clock timezone est -5
    clock summer-time zone recurring last Sun Mar 2:00 1 Sun Nov 2:00
    dot11 syslog
    ip source-route
    ip dhcp excluded-address 172.19.3.129 172.19.3.149
    ip dhcp excluded-address 172.19.10.1 172.19.10.253
    ip dhcp excluded-address 172.19.3.140
    ip dhcp ping timeout 900
    ip dhcp pool DHCP
       network 172.19.3.128 255.255.255.128
       default-router 172.19.3.129
       domain-name domain.local
       netbios-name-server 172.19.3.7
       option 66 ascii 172.19.3.225
       dns-server 172.19.3.140 208.67.220.220 208.67.222.222
    ip dhcp pool VoiceDHCP
       network 172.19.10.0 255.255.255.0
       default-router 172.19.10.1
       dns-server 208.67.220.220 8.8.8.8
       option 66 ascii 172.19.10.2
       lease 2
    ip cef
    ip inspect name SDM_LOW cuseeme
    ip inspect name SDM_LOW dns
    ip inspect name SDM_LOW ftp
    ip inspect name SDM_LOW h323
    ip inspect name SDM_LOW https
    ip inspect name SDM_LOW icmp
    ip inspect name SDM_LOW imap
    ip inspect name SDM_LOW pop3
    ip inspect name SDM_LOW netshow
    ip inspect name SDM_LOW rcmd
    ip inspect name SDM_LOW realaudio
    ip inspect name SDM_LOW rtsp
    ip inspect name SDM_LOW esmtp
    ip inspect name SDM_LOW sqlnet
    ip inspect name SDM_LOW streamworks
    ip inspect name SDM_LOW tftp
    ip inspect name SDM_LOW tcp
    ip inspect name SDM_LOW udp
    ip inspect name SDM_LOW vdolive
    no ip domain lookup
    ip domain name domain.local
    multilink bundle-name authenticated
    key chain key1
    key 1
       key-string 7 06040033484B1B484557
    crypto pki trustpoint TP-self-signed-3448656681
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-3448bb6681
    revocation-check none
    rsakeypair TP-self-signed-344bbb56681
    crypto pki certificate chain TP-self-signed-3448656681
    certificate self-signed 01
      3082024F
                quit
    username admin privilege 15 password 7 F55
    archive
    log config
      hidekeys
    crypto isakmp policy 10
    encr 3des
    hash md5
    authentication pre-share
    group 2
    crypto isakmp key XXXXX address 209.118.0.1
    crypto isakmp key xxxxx address SITE B Public IP
    crypto isakmp keepalive 40 5
    crypto isakmp nat keepalive 20
    crypto isakmp client configuration group IISVPN
    key 1nsur3m3
    dns 172.19.3.140
    wins 172.19.3.140
    domain domain.local
    pool VPN_Pool
    acl 198
    crypto isakmp profile IISVPNClient
       description VPN clients profile
       match identity group IISVPN
       client authentication list userauthen
       isakmp authorization list groupauthor
       client configuration address respond
    crypto ipsec transform-set myset esp-3des esp-md5-hmac
    crypto dynamic-map Dynamic 5
    set transform-set myset
    set isakmp-profile IISVPNClient
    qos pre-classify
    crypto map VPN 10 ipsec-isakmp
    set peer 209.118.0.1
    set peer SITE B Public IP
    set transform-set myset
    match address 101
    qos pre-classify
    crypto map VPN 65535 ipsec-isakmp dynamic Dynamic
    track 123 ip sla 1 reachability
    delay down 15 up 10
    class-map match-any VoiceTraffic
    match protocol rtp audio
    match protocol h323
    match protocol rtcp
    match access-group name VOIP
    match protocol sip
    class-map match-any RDP
    match access-group 199
    policy-map QOS
    class VoiceTraffic
        bandwidth 512
    class RDP
        bandwidth 768
    policy-map MainQOS
    class class-default
        shape average 1500000
      service-policy QOS
    interface FastEthernet0/0
    description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$$FW_INSIDE$
    ip address 172.19.3.129 255.255.255.128
    ip access-group 100 in
    ip inspect SDM_LOW in
    ip nat inside
    ip virtual-reassembly
    duplex auto
    speed auto
    interface FastEthernet0/0.10
    description $ETH-VoiceVLAN$$
    encapsulation dot1Q 10
    ip address 172.19.10.1 255.255.255.0
    ip inspect SDM_LOW in
    ip nat inside
    ip virtual-reassembly
    interface FastEthernet0/1
    description "Comcast"
    ip address PUB IP 255.255.255.248
    ip access-group 102 in
    ip inspect SDM_LOW out
    ip nat outside
    ip virtual-reassembly
    duplex auto
    speed auto
    crypto map VPN
    interface Serial0/1/0
    description "Verizon LEC Circuit ID: w0w13908 Site ID: U276420-1"
    bandwidth 1536
    no ip address
    encapsulation frame-relay IETF
    frame-relay lmi-type ansi
    interface Serial0/1/0.1 point-to-point
    bandwidth 1536
    ip address 152.000.000.18 255.255.255.252
    ip access-group 102 in
    ip verify unicast reverse-path
    ip inspect SDM_LOW out
    ip nat outside
    ip virtual-reassembly
    frame-relay interface-dlci 500 IETF 
    crypto map VPN
    service-policy output MainQOS
    interface Serial0/2/0
    description "PAETEC 46.HCGS.788446.CV (Verizon ID) / 46.HCGS.3 (PAETEC ID)"
    ip address 123.252.123.102 255.255.255.252
    ip access-group 102 in
    ip inspect SDM_LOW out
    ip nat outside
    ip virtual-reassembly
    encapsulation ppp
    crypto map VPN
    service-policy output MainQOS
    ip local pool VPN_Pool 172.20.3.130 172.20.3.254
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 50.00.000.110 track 123
    ip route 0.0.0.0 0.0.0.0 111.252.237.000 254
    ip route 122.112.197.20 255.255.255.255 209.252.237.101
    ip route 208.67.220.220 255.255.255.255 50.78.233.110
    no ip http server
    no ip http secure-server
    ip http timeout-policy idle 60 life 86400 requests 10000
    ip flow-top-talkers
    top 20
    sort-by bytes
    ip nat inside source route-map COMCAST interface FastEthernet0/1 overload
    ip nat inside source route-map PAETEC interface Serial0/2/0 overload
    ip nat inside source route-map VERIZON interface Serial0/1/0.1 overload
    ip nat inside source static tcp 172.19.3.140 21 PUB IP 21 extendable
    ip access-list extended VOIP
    permit ip 172.20.3.0 0.0.0.127 host 172.19.3.190
    permit ip host 172.19.3.190 172.20.3.0 0.0.0.127
    ip radius source-interface FastEthernet0/0
    ip sla 1
    icmp-echo 000.67.220.220 source-interface FastEthernet0/1
    timeout 10000
    frequency 15
    ip sla schedule 1 life forever start-time now
    access-list 23 permit 172.19.3.0 0.0.0.127
    access-list 23 permit 172.19.3.128 0.0.0.127
    access-list 23 permit 173.189.251.192 0.0.0.63
    access-list 23 permit 107.0.197.0 0.0.0.63
    access-list 23 permit 173.163.157.32 0.0.0.15
    access-list 23 permit 72.55.33.0 0.0.0.255
    access-list 23 permit 172.19.5.0 0.0.0.63
    access-list 100 remark "Outgoing Traffic"
    access-list 100 deny   ip 67.128.87.156 0.0.0.3 any
    access-list 100 deny   ip host 255.255.255.255 any
    access-list 100 deny   ip 127.0.0.0 0.255.255.255 any
    access-list 100 permit tcp host 172.19.3.190 any eq smtp
    access-list 100 permit tcp host 172.19.3.137 any eq smtp
    access-list 100 permit tcp any host 66.251.35.131 eq smtp
    access-list 100 permit tcp any host 173.201.193.101 eq smtp
    access-list 100 permit ip any any
    access-list 100 permit tcp any any eq ftp
    access-list 101 remark "Interesting VPN Traffic"
    access-list 101 permit ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127
    access-list 101 permit ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127
    access-list 101 permit ip 172.19.3.128 0.0.0.127 host 172.19.250.10
    access-list 101 permit ip 172.19.3.128 0.0.0.127 host 172.19.250.11
    access-list 101 permit tcp any any eq ftp
    access-list 101 permit tcp any any eq ftp-data
    access-list 102 remark "Inbound Access"
    access-list 102 permit udp any host 152.179.53.18 eq non500-isakmp
    access-list 102 permit udp any host 152.179.53.18 eq isakmp
    access-list 102 permit esp any host 152.179.53.18
    access-list 102 permit ahp any host 152.179.53.18
    access-list 102 permit udp any host 209.000.000.102 eq non500-isakmp
    access-list 102 permit udp any host 209.000.000.102 eq isakmp
    access-list 102 permit esp any host 209.000.000.102
    access-list 102 permit ahp any host 209.000.000.102
    access-list 102 permit udp any host PUB IP eq non500-isakmp
    access-list 102 permit udp any host PUB IP eq isakmp
    access-list 102 permit esp any host PUB IP
    access-list 102 permit ahp any host PUB IP
    access-list 102 permit ip 72.55.33.0 0.0.0.255 any
    access-list 102 permit ip 107.0.197.0 0.0.0.63 any
    access-list 102 deny   ip 172.19.3.128 0.0.0.127 any
    access-list 102 permit icmp any any echo-reply
    access-list 102 permit icmp any any time-exceeded
    access-list 102 permit icmp any any unreachable
    access-list 102 permit icmp any any
    access-list 102 deny   ip any any log
    access-list 102 permit tcp any host 172.19.3.140 eq ftp
    access-list 102 permit tcp any host 172.19.3.140 eq ftp-data established
    access-list 102 permit udp any host SITE B Public IP  eq non500-isakmp
    access-list 102 permit udp any host SITE B Public IP  eq isakmp
    access-list 102 permit esp any host SITE B Public IP
    access-list 102 permit ahp any host SITE B Public IP
    access-list 110 remark "Outbound NAT Rule"
    access-list 110 remark "Deny VPN Traffic NAT"
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.19.10.0 0.0.0.255
    access-list 110 deny   ip 172.19.10.0 0.0.0.255 172.19.3.128 0.0.0.127
    access-list 110 deny   ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 host 172.19.250.11
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 host 172.19.250.10
    access-list 110 permit ip 172.19.3.128 0.0.0.127 any
    access-list 110 permit ip 172.19.10.0 0.0.0.255 any
    access-list 198 remark "Networks for IISVPN Client"
    access-list 198 permit ip 172.19.3.0 0.0.0.127 172.20.3.128 0.0.0.127
    access-list 198 permit ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
    access-list 199 permit tcp any any eq 3389
    route-map PAETEC permit 10
    match ip address 110
    match interface Serial0/2/0
    route-map COMCAST permit 10
    match ip address 110
    match interface FastEthernet0/1
    route-map VERIZON permit 10
    match ip address 110
    match interface Serial0/1/0.1
    snmp-server community 123 RO
    radius-server host 172.19.3.7 auth-port 1645 acct-port 1646 key 7 000000000000000
    control-plane
    line con 0
    line aux 0
    line vty 0 4
    access-class 23 in
    privilege level 15
    transport input telnet ssh
    line vty 5 15
    access-class 23 in
    privilege level 15
    transport input telnet ssh
    scheduler allocate 20000 1000
    ntp server 128.118.25.3
    ntp server 217.150.242.8
    end
    IP scheme at site B:
    ip     172.19.5.x
    sub  255.255.255.292
    gw   172.19.5.65
    Cisco ASA 5505 at Site B
    ASA Version 8.2(5)
    hostname ASA5505
    domain-name domain.com
    enable password b04DSH2HQqXwS8wi encrypted
    passwd b04DSH2HQqXwS8wi encrypted
    names
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    interface Vlan1
    nameif inside
    security-level 100
    ip address 172.19.5.65 255.255.255.192
    interface Vlan2
    nameif outside
    security-level 0
    ip address SITE B public IP 255.255.255.224
    boot system disk0:/asa825-k8.bin
    ftp mode passive
    clock timezone est -5
    clock summer-time zone recurring last Sun Mar 2:00 last Sun Oct 2:00
    dns server-group DefaultDNS
    domain-name iis-usa.com
    same-security-traffic permit intra-interface
    object-group network old hosting provider
    network-object 72.55.34.64 255.255.255.192
    network-object 72.55.33.0 255.255.255.0
    network-object 173.189.251.192 255.255.255.192
    network-object 173.163.157.32 255.255.255.240
    network-object 66.11.1.64 255.255.255.192
    network-object 107.0.197.0 255.255.255.192
    object-group network old hosting provider
    network-object host 172.19.250.10
    network-object host 172.19.250.11
    access-list 100 extended permit ip 172.19.5.64 255.255.255.192 object-group old hosting provider
    access-list 100 extended permit ip 172.19.5.64 255.255.255.192 172.19.3.128 255.255.255.128
    access-list 10 extended deny ip 0.0.0.0 255.0.0.0 any
    access-list 10 extended deny ip 127.0.0.0 255.0.0.0 any
    access-list 10 extended deny ip 169.254.0.0 255.255.0.0 any
    access-list 10 extended deny ip 172.16.0.0 255.255.0.0 any
    access-list 10 extended deny ip 224.0.0.0 224.0.0.0 any
    access-list 10 extended permit icmp any any echo-reply
    access-list 10 extended permit icmp any any time-exceeded
    access-list 10 extended permit icmp any any unreachable
    access-list 10 extended permit icmp any any traceroute
    access-list 10 extended permit icmp any any source-quench
    access-list 10 extended permit icmp any any
    access-list 10 extended permit tcp object-group old hosting provider any eq 3389
    access-list 10 extended permit tcp any any eq https
    access-list 10 extended permit tcp any any eq www
    access-list 110 extended permit ip 172.19.5.64 255.255.255.192 172.19.3.0 255.255.255.128
    access-list 110 extended permit ip 172.19.5.64 255.255.255.192 object-group old hosting provider
    pager lines 24
    logging enable
    logging timestamp
    logging console emergencies
    logging monitor emergencies
    logging buffered warnings
    logging trap debugging
    logging history debugging
    logging asdm informational
    mtu inside 1500
    mtu outside 1500
    ip verify reverse-path interface inside
    ip verify reverse-path interface outside
    ip audit name jab attack action alarm drop reset
    ip audit name probe info action alarm drop reset
    ip audit interface outside probe
    ip audit interface outside jab
    ip audit info action alarm drop reset
    ip audit attack action alarm drop reset
    ip audit signature 2000 disable
    ip audit signature 2001 disable
    ip audit signature 2004 disable
    ip audit signature 2005 disable
    icmp unreachable rate-limit 1 burst-size 1
    icmp permit 75.150.169.48 255.255.255.240 outside
    icmp permit 72.44.134.16 255.255.255.240 outside
    icmp permit 72.55.33.0 255.255.255.0 outside
    icmp permit any outside
    icmp permit 173.163.157.32 255.255.255.240 outside
    icmp permit 107.0.197.0 255.255.255.192 outside
    icmp permit 66.11.1.64 255.255.255.192 outside
    icmp deny any outside
    asdm image disk0:/asdm-645.bin
    no asdm history enable
    arp timeout 14400
    global (outside) 1 interface
    nat (inside) 0 access-list 100
    nat (inside) 1 0.0.0.0 0.0.0.0
    access-group 10 in interface outside
    route outside 0.0.0.0 0.0.0.0 174.78.151.225 1
    timeout xlate 3:00:00
    timeout conn 24:00:00 half-closed 0:10:00 udp 0:10:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 24:00:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    http 107.0.197.0 255.255.255.192 outside
    http 66.11.1.64 255.255.255.192 outside
    snmp-server host outside 107.0.197.29 community *****
    snmp-server host outside 107.0.197.30 community *****
    snmp-server host inside 172.19.250.10 community *****
    snmp-server host outside 172.19.250.10 community *****
    snmp-server host inside 172.19.250.11 community *****
    snmp-server host outside 172.19.250.11 community *****
    snmp-server host outside 68.82.122.239 community *****
    snmp-server host outside 72.55.33.37 community *****
    snmp-server host outside 72.55.33.38 community *****
    snmp-server host outside 75.150.169.50 community *****
    snmp-server host outside 75.150.169.51 community *****
    no snmp-server location
    no snmp-server contact
    snmp-server community *****
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
    crypto ipsec security-association lifetime seconds 28800
    crypto ipsec security-association lifetime kilobytes 4608000
    crypto map VPNMAP 10 match address 110
    crypto map VPNMAP 10 set peer 72.00.00.7 old vpn public ip Site B Public IP
    crypto map VPNMAP 10 set transform-set ESP-3DES-MD5
    crypto map VPNMAP 10 set security-association lifetime seconds 86400
    crypto map VPNMAP 10 set security-association lifetime kilobytes 4608000
    crypto map VPNMAP interface outside
    crypto isakmp identity address
    crypto isakmp enable outside
    crypto isakmp policy 20
    authentication pre-share
    encryption 3des
    hash md5
    group 2
    lifetime 86400
    telnet 172.19.5.64 255.255.255.192 inside
    telnet 172.19.3.0 255.255.255.128 outside
    telnet timeout 60
    ssh 0.0.0.0 0.0.0.0 inside
    ssh 0.0.0.0 0.0.0.0 outside
    ssh timeout 60
    console timeout 0
    management-access inside
    dhcpd dns 172.19.3.140
    dhcpd wins 172.19.3.140
    dhcpd ping_timeout 750
    dhcpd domain iis-usa.com
    dhcpd address 172.19.5.80-172.19.5.111 inside
    dhcpd enable inside
    threat-detection basic-threat
    threat-detection scanning-threat shun except object-group old hosting provider
    threat-detection statistics
    threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
    ntp server 128.118.25.3 source outside
    ntp server 217.150.242.8 source outside
    tunnel-group 72.00.00.7 type ipsec-l2l
    tunnel-group 72.00.00.7 ipsec-attributes
    pre-shared-key *****
    tunnel-group old vpn public ip type ipsec-l2l
    tunnel-group old vpn public ip ipsec-attributes
    pre-shared-key *****
    tunnel-group SITE A Public IP  type ipsec-l2l
    tunnel-group SITE A Public IP  ipsec-attributes
    pre-shared-key *****
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny 
      inspect sunrpc
      inspect xdmcp
      inspect netbios
      inspect tftp
      inspect pptp
      inspect sip 
    service-policy global_policy global
    prompt hostname context
    no call-home reporting anonymous
    call-home
    profile CiscoTAC-1
      no active
      destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:
    : end

    I have removed the old "set peer" and have added:
    IOS router:
    access-list 101 permit ip 172.19.3.128 0.0.0.127 172.19.5.64 0.0.0.65
    ASA fw:
    access-list 110 extended permit ip 172.19.5.64 255.255.255.192 172.19.3.128 255.255.255.128
    on the router I have also added;
    access-list 110 deny  ip 172.19.3.128 0.0.0.127 172.19.5.64 0.0.0.63
    Here is my acl :
    access-list 110 remark "Outbound NAT Rule"
    access-list 110 remark "Deny VPN Traffic NAT"
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.19.10.0 0.0.0.255
    access-list 110 deny   ip 172.19.10.0 0.0.0.255 172.19.3.128 0.0.0.127
    access-list 110 deny   ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 host 172.19.250.11
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 host 172.19.250.10
    access-list 110 permit ip 172.19.3.128 0.0.0.127 any
    access-list 110 permit ip 172.19.10.0 0.0.0.255 any
    access-list 110 deny   ip 172.19.3.128 0.0.0.127 172.19.5.64 0.0.0.63
    access-list 198 remark "Networks for IISVPN Client"
    access-list 198 permit ip 172.19.3.0 0.0.0.127 172.20.3.128 0.0.0.127
    access-list 198 permit ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
    Still no ping tothe other site.

  • Can a router have 2 networks?

    I have 1 router.  Initially I created an unsecure network named "Linksys" which I think is the default name.  Then I created a secure network "SN".  My wireless card detects both networks.  How can I determine if the unsecure "Linksys" is on my router (or on someone else's) and if it's mine delete it?  Thanks!

    Which router? Check the label for exact model and version?
    I think most normal linksys routers are only able use a single SSID which you configure in the web interface http://192.168.1.1/ If you have changed the SSID in the web interface and your wireless card detects the SSID the other "linksys" SSID is probably your neighbor.
    You can also use a tool like net stumbler (http://www.netstumbler.com/) to search for ssids in your neighborhood. Netstumbler also lists the MAC address of the routers & APs it finds. Compare the MAC address with the MAC address printed on your router or shown on the Status - Wireless tab of your router.
    You should secure your network with WPA or WPA2 and a strong passphrase. Anything else it not really secure.

  • Can't print from other network computers

    Windows 7
    HP Photosmart C4650
    Installed on main computer and everything is great! Added the printer to the other computers in the home network, 1 wired and 2 laptops wireless, all running Windows 7. went through the properties and shared the printer, etc. Everything looks great. Test page prints from the main computer as well as anything else I print from there...........but..........
    from the other computer, ZIP, ZERO, NADA!!!!!
    I send a test page from 1 laptop and it says the page is sent. No error or anything, but nothing prints. nothing in the queue, just like the printer wasn't there although all 3 of the other computers recoginze the printer and have it as a default printer.
    i ran the HP diagnostic and it found no printer...........NONE?????
    How does that happen? I can use it, but it's not there!!
    Any help greatly appreciated, thanks.

    OK so both wired computers work and the wireless laptops don't. Trying more things.....

  • Stuck on a VPN problem - can anyone help

    ISAKMP Header
      Initiator COOKIE: 0b e0 e3 08 39 eb 3d 89
      Responder COOKIE: 00 00 00 00 00 00 00 00
      Next Payload: Security Association
      Version: 1.0
      Exchange Type: Identity Protection (Main Mode)
      Flags: (none)
      MessageID: 00000000
      Length: 188
      Payload Security Association
        Next Payload: Vendor ID
        Reserved: 00
        Payload Length: 136
        DOI: IPsec
        Situation:(SIT_IDENTITY_ONLY)
        Payload Proposal
          Next Payload: None
          Reserved: 00
          Payload Length: 124
          Proposal #: 1
          Protocol-Id: PROTO_ISAKMP
          SPI Size: 0
          # of transforms: 3
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 36
            Transform #: 1
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: 3DES-CBC
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 40
            Transform #: 2
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: None
            Reserved: 00
            Payload Length: 40
            Transform #: 3
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 5
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
      Payload Vendor ID
        Next Payload: None
        Reserved: 00
        Payload Length: 24
        Data (In Hex):
          40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3
          c0 00 00 00
    Feb 21 16:17:27 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:27 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:27 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:27 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:29 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:29 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:30 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:30 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:31 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:31 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:31 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:31 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:32 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:32 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:34 [IKEv1]: IP = 38.98.146.1, IKE_DECODE RESENDING Message (msgid=0
    ) with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length : 188
    ISAKMP Header
      Initiator COOKIE: 0b e0 e3 08 39 eb 3d 89
      Responder COOKIE: 00 00 00 00 00 00 00 00
      Next Payload: Security Association
      Version: 1.0
      Exchange Type: Identity Protection (Main Mode)
      Flags: (none)
      MessageID: 00000000
      Length: 188
      Payload Security Association
        Next Payload: Vendor ID
        Reserved: 00
        Payload Length: 136
        DOI: IPsec
        Situation:(SIT_IDENTITY_ONLY)
        Payload Proposal
          Next Payload: None
          Reserved: 00
          Payload Length: 124
          Proposal #: 1
          Protocol-Id: PROTO_ISAKMP
          SPI Size: 0
          # of transforms: 3
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 36
            Transform #: 1
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: 3DES-CBC
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 40
            Transform #: 2
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: None
            Reserved: 00
            Payload Length: 40
            Transform #: 3
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 5
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
      Payload Vendor ID
        Next Payload: None
        Reserved: 00
        Payload Length: 24
        Data (In Hex):
          40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3
          c0 00 00 00
    Feb 21 16:17:37 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:37 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:41 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:41 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:42 [IKEv1]: IP = 38.98.146.1, IKE_DECODE RESENDING Message (msgid=0
    ) with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length : 188
    ISAKMP Header
      Initiator COOKIE: 0b e0 e3 08 39 eb 3d 89
      Responder COOKIE: 00 00 00 00 00 00 00 00
      Next Payload: Security Association
      Version: 1.0
      Exchange Type: Identity Protection (Main Mode)
      Flags: (none)
      MessageID: 00000000
      Length: 188
      Payload Security Association
        Next Payload: Vendor ID
        Reserved: 00
        Payload Length: 136
        DOI: IPsec
        Situation:(SIT_IDENTITY_ONLY)
        Payload Proposal
          Next Payload: None
          Reserved: 00
          Payload Length: 124
          Proposal #: 1
          Protocol-Id: PROTO_ISAKMP
          SPI Size: 0
          # of transforms: 3
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 36
            Transform #: 1
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: 3DES-CBC
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 40
            Transform #: 2
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: None
            Reserved: 00
            Payload Length: 40
            Transform #: 3
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 5
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
      Payload Vendor ID
        Next Payload: None
        Reserved: 00
        Payload Length: 24
        Data (In Hex):
          40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3
          c0 00 00 00
    Feb 21 16:17:45 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:45 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:47 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:47 [IKEv1]: IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be pr
    ocessed when P1 SA is complete.
    Feb 21 16:17:50 [IKEv1 DEBUG]: IP = 38.98.146.1, IKE MM Initiator FSM error hist
    ory (struct &0x37ceaf8)  <state>, <event>:  MM_DONE, EV_ERROR-->MM_WAIT_MSG2, EV
    _RETRY-->MM_WAIT_MSG2, EV_TIMEOUT-->MM_WAIT_MSG2, NullEvent-->MM_SND_MSG1, EV_SN
    D_MSG-->MM_SND_MSG1, EV_START_TMR-->MM_SND_MSG1, EV_RESEND_MSG-->MM_WAIT_MSG2, E
    V_RETRY
    Feb 21 16:17:50 [IKEv1 DEBUG]: IP = 38.98.146.1, IKE SA MM:08e3e00b terminating:
      flags 0x01000022, refcnt 0, tuncnt 0
    Feb 21 16:17:50 [IKEv1 DEBUG]: IP = 38.98.146.1, sending delete/delete with reas
    on message
    Feb 21 16:17:50 [IKEv1]: IP = 38.98.146.1, Removing peer from peer table failed,
    no match!
    Feb 21 16:17:50 [IKEv1]: IP = 38.98.146.1, Error: Unable to remove PeerTblEntry
    Feb 21 16:17:51 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:17:51 [IKEv1]: IP = 38.98.146.1, IKE Initiator: New Phase 1, Intf insi
    de, IKE Peer 38.98.146.1  local Proxy Address 10.70.50.0, remote Proxy Address 1
    0.10.100.0,  Crypto map (S2S-VPN)
    Feb 21 16:17:51 [IKEv1 DEBUG]: IP = 38.98.146.1, constructing ISAKMP SA payload
    Feb 21 16:17:51 [IKEv1 DEBUG]: IP = 38.98.146.1, constructing Fragmentation VID
    + extended capabilities payload
    Feb 21 16:17:51 [IKEv1]: IP = 38.98.146.1, IKE_DECODE SENDING Message (msgid=0)
    with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length : 188
    SENDING PACKET to 38.98.146.1
    ISAKMP Header
      Initiator COOKIE: 96 21 c7 41 66 de df 5c
      Responder COOKIE: 00 00 00 00 00 00 00 00
      Next Payload: Security Association
      Version: 1.0
      Exchange Type: Identity Protection (Main Mode)
      Flags: (none)
      MessageID: 00000000
      Length: 188
      Payload Security Association
        Next Payload: Vendor ID
        Reserved: 00
        Payload Length: 136
        DOI: IPsec
        Situation:(SIT_IDENTITY_ONLY)
        Payload Proposal
          Next Payload: None
          Reserved: 00
          Payload Length: 124
          Proposal #: 1
          Protocol-Id: PROTO_ISAKMP
          SPI Size: 0
          # of transforms: 3
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 36
            Transform #: 1
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: 3DES-CBC
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 40
            Transform #: 2
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: None
            Reserved: 00
            Payload Length: 40
            Transform #: 3
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 5
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
      Payload Vendor ID
        Next Payload: None
        Reserved: 00
        Payload Length: 24
        Data (In Hex):
          40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3
          c0 00 00 00
    uall
              ^
    ERROR: % Invalid input detected at '^' marker.
    ASA5505# Feb 21 16:17:59 [IKEv1]: IP = 38.98.146.1, IKE_DECODE RESENDING Message
    (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length :
    188
    ISAKMP Header
      Initiator COOKIE: 96 21 c7 41 66 de df 5c
      Responder COOKIE: 00 00 00 00 00 00 00 00
      Next Payload: Security Association
      Version: 1.0
      Exchange Type: Identity Protection (Main Mode)
      Flags: (none)
      MessageID: 00000000
      Length: 188
      Payload Security Association
        Next Payload: Vendor ID
        Reserved: 00
        Payload Length: 136
        DOI: IPsec
        Situation:(SIT_IDENTITY_ONLY)
        Payload Proposal
          Next Payload: None
          Reserved: 00
          Payload Length: 124
          Proposal #: 1
          Protocol-Id: PROTO_ISAKMP
          SPI Size: 0
          # of transforms: 3
          Payload Transform
            Next Payload: Transform
            Reserved: 00
            Payload Length: 36
            Transform #: 1
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 2
            Encryption Algorithm: 3DES-CBC
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: Transformu
            Reserved: 00
            Payload Length: 40
            Transform #: 2
            Transform-Id: KEY_IKE
            Reserved2: 0000
    a        Group Description: Group 2
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
          Payload Transform
            Next Payload: None
            Reserved: 00
            Payload Length: 40
            Transform #: 3
            Transform-Id: KEY_IKE
            Reserved2: 0000
            Group Description: Group 5
            Encryption Algorithm: AES-CBC
            Key Length: 256
            Hash Algorithm: SHA1
            Authentication Method: Preshared key
            Life Type: seconds
            Life Duration (Hex): 00 01 51 80
      Payload Vendor ID
        Next Payload: None
        Reserved: 00
        Payload Length: 24
        Data (In Hex):
          40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3
          c0 00 00 00
    Feb 21 16:18:01 [IKEv1 DEBUG]: Pitcher: received a key acquire message, spi 0x0
    Feb 21 16:18:01 [IKEv1] : IP = 38.98.146.1, Queuing KEY-ACQUIRE messages to be p
    rocessed when P1 SA is complete.
    all

    It seems that this device is initiating the tunnel, it sends IKE MM1 but it never receives a response from the peer.
    Feb 21 16:17:50 [IKEv1 DEBUG]: IP = 38.98.146.1, IKE MM Initiator FSM error hist
    ory (struct &0x37ceaf8)  , :  MM_DONE, EV_ERROR-->MM_WAIT_MSG2, EV
    _RETRY-->MM_WAIT_MSG2, EV_TIMEOUT-->MM_WAIT_MSG2, NullEvent-->MM_SND_MSG1, EV_SN
    D_MSG-->MM_SND_MSG1, EV_START_TMR-->MM_SND_MSG1, EV_RESEND_MSG-->MM_WAIT_MSG2, E
    V_RETRY
    EV_ERROR-->MM_WAIT_MSG2
    indicates that we give up when waiting for the response...
    Check if the peer is reachable, if the ISP (yours or the peer's) is not blocking UDP500, if the peer has IKE enabled, ... run debugs on the peer to see if it receives MM1 and why it does not respond...
    hth
    Herbert

  • HT3939 Hi i buy iphone 5 from usa and i want to know if it will work in other network or not because im out from usa this is my serial number f2ljdxcef8h5 so can you chick if it will work out side us in other network thank you

    I want to if my iphone 5 wich i buyet from usa well work out saide usa
    This is my phone serial number f2ljdxcef8h5 can you chick if i can use it from other network out of usa
    Thank you

    Hi,
    thanks for your answers.
    The reason why I am trying to get iphone from verizon is because if you buy unlocked Iphone from Apple it is model A1428 and I need A1429 CDMA (uses LTE frequencies that are mostly used around the world). I would buy A1429 GSM but it can be bought only outside US. I have read that A1429 can also be used on GSM without problem.
    I was just wonderign if someone knows do I cancel my contract without even inserting verizon sim and activating, or do I need to first insert VZW sim, activate the phone and than after can I cancel my contract.
    @kaebfly- I have understood I can cancel contract within 14 days of activation and without returning the phone just pay 350 ETF and the phone is mine.
    @21stNow - do you think I have to wait to cancel contract after 14 days?
    @ both- when you say off contract do you mean VZW on month-to-month base or unlocked iphone from apple? If you think of later than the reason is the phone model.
    Thanks for your answers

  • Problems with Linksys router...

    Ever since I upgraded to Leopard a few weeks ago, I have felt nothing but the urge to pull my hair out. Okay, I'm exaggerating a little... but the non-internet is getting old quick.
    I can connect to all other networks, including my neighbor's behind us and beside us. I can't connect to our wireless though, and I don't know why! It's not password protected, no one has the same wireless name as us, but my Airport seems to hate it. I either get: "AirPort does not have an IP address and cannot connect to the Internet." or some evil mumbo-jumbo about a "self-assigned IP address and cannot connect to the Internet."
    Linksys model #BEFW11S4 -- if that helps any?
    I'm using Leopard 10.5.4
    Airport Extreme (0x168C, 0x87), Firmware Version 1.4.3.1
    ...Help, please? I'd really like to get internet in my bedroom. It's the one place where the neighbor's wireless doesn't go.

    I have the exact same problem. My solution is to shut off all network devices and restart them. Make a new "Network Location" called "All Off". Set it to all your interfaces to disabled. Actually they don't let you do that so leave the Firewire device there since you probably won't use it. Be sure to press the "Apply" button to activate the new location. Wait a minute then turn your interfaces back on. Hopefully it will be able to connect. If not, reboot your router while the devices are off and turn them back on when the Linksys is up and running. Remember when you reboot your router to leave it unplugged for 15 seconds so all the electrons evaporate.

  • HT1178 Can I just use my airport express as the primary base station and the time capsule as the network client?

    I bought a new airport time capsule 3tb to be used to save to file all my pictures. Can I use it as network client and the airport express as the
    Primary base station?

    To my opinion this looks a bit like what I'm looking for.
    At the moment I have an Imac that is wireless connected to a 2TB time capsule (TC1).
    To this time capsule I have another 2TB time capsule (TC2) connected via a upt wire connection.
    At the moment there is a backup made via time machine from the Imac to the time capsule TC1 (the second TC is not used)
    I'm not so technical so I hope you understand the configuration.
    What do I want to achieve :
    copy all my data from the Imac to TC1 so that the information can be accessed by more users.
    create an automatic backup from TC1 to TC2 (mirror or raid system) for security.
    give access to some users on the network to access TC1 to read and write data.
    TC2 only serves as backup from TC1 and no direct access is needed to this disk.
    If there is a solution, thanks for explaining it in 'IT kindergarden style' so that I can understand and use the info.
    Many thanks in advance.

  • Social network client

    I'm using nokia 701 since the last two months. Just before a week there is a problem in my phone, the social network client is not running. When i'm opening the social application it was showing ”sorry, please uninstall the social and reinstall” also i cn't download it from anywhere else.

    So mine and friend too,nokia 206 asha.3 weeks ago it formated my facebook and whatsapp but then i upgraded them.Again it did but this time it Deleted Whatsapp and Notifications,I can't download it anywhere now it says 'SOMETHING WENT WRONG'..I need my whatsapp back,please help!

  • HT4199 I just got a new iPod touch 4th generation and I'm trying to connect to my router and my iPod says, 'Cannont find network.' I don't know what to do! No other networks come up on the list so I can't 'tag' along with thier wifi. Please help. I need a

    I just got a new iPod touch 4th generation and I'm trying to connect to my router and my iPod says, 'Cannont find network.' I don't know what to do! No other networks come up on the list so I can't 'tag' along with thier wifi. Please help. I need advice.

    What type network is yu router set up for? The 4G iPod can only connect and see 2.4 GHZ networl like B, G and the 2,4 GHz N. There is also a 5 GHz N but the iPod will not even seethat network.
    See:
    iOS: Troubleshooting Wi-Fi networks and connections
    iOS: Recommended settings for Wi-Fi routers and access points

Maybe you are looking for

  • TS1441 How can I restore an iPod touch if the home button is broken and I don't know the password?

    I just bought my iPod Touch (4th Generation 8GB) from my friend and the home button doesn't work. Then, my parents took it away for about 6 months and I just got it back and I forgot my password. Then, I tried to get in too many times and now it says

  • Service MSExchangeMailSubmission. There is no available HubTransport server in the local site.

    I have found this and a number of other errors in my Exchange Organization after failed attempted DR exercise. I will list a few: The Microsoft Exchange Mail Submission service is currently unable to contact any Hub Transport servers in the local Act

  • Delta in Append 0CRM_SALES_ACT_I ?

    Hi, we extend extractor 0CRM_SALES_ACT_I in new field zkeyfigure. user using interfaz for modify olnly zkeyfigure value, but Delta to BW not get value, only get value 0. any idea ? is posible delta when modify only zkeyfigure ? Thank you.

  • Removing Discoverer 4.1 Desktop

    The company I work for has migrated from Desktop to Plus. The person supporting Desktop has left and the Plus team cannot/will not offer any support. So here is my question...I am trying to remove the Desktop version using ORAINST. However I get an e

  • Need informations about permission file

    hello, first excuse me for my english i speak french and im not very good in english.. i record (publish file mp4) from flash as3 with fmis 4.5. Then i see all file have the permission 0660 when save in the folder in opt/adobe/fms/... i change in ser