Accessing two identical networks

I have the following dilema. I have two private networks with the same subnet e.g. 192.168.0.X.
In each LAN I have several devices with IP addresses 192.168.0.1, 192.168.0.2, 192.168.0.3 and so forth. Currently there is no connection between both LANs.
I need to address devices from both LANs from one station, but changing their IP addresses is not an option.
I need to know what type of equipment do we need to make this happen, if it is a router, a bridge or something else.
Any help would be deeply appreciated.

Hi,
You need a router doing NAT.
The simple reason is: for your host connecting to f.e. 192.168.0.1 in LAN1 and 192.168.0.1 in LAN2 both stations must have unique IP addresses. So the NAT requirement is: 192.168.0.0/24 in LAN1 may be unchanged, but 192.168.0.0/24 in LAN2 has to be translated in a free/unused IP subnet.
There are some documents describing the configuration details, like in "Translating Overlapping Address: Example"
http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a008044eddc.html#wp1073462
You will find more documents searching for "overlapping address nat" in Cisco search.
Hope this helps! Please rate all posts.
Regards, Martin

Similar Messages

ASA 5505 VPN - how to access Two private networks

Hello
i have cisco 5505 and i confirgured a remote VPN clients. here is my sceniro
cisco switch 2950   === holds two private network 192.168.8.x and 192.168.4.x
vlan 2 outside interface -    Eth0/0       155.155.155.x
Vlan 1 inside interface --       Eth 0/1    192.168.8.180
VPN pool ip address = 192.168.8.100 --110
i drag i cable from my cisco switch and put in to Eth0/1. and i want to access this twor private networks 192.168.4.x and 192.168.8.x .
now i can access to 192.168.8.x .
but i can't access 192.168.4.x .. please can any one help me that.
Regards
Thomas

configure a split tunnel list that contains the networks you want the client to access.
Sent from Cisco Technical Support iPad App

Accessing two seperate networks

Ok here is my situation:
1. There are two completely separate networks. One which is used for the internet(it uses proxy servers) and the other which we use to manage a set of servers at remote locations.
2. I need to be able to access both networks at the same time as my email is web based and I need to copy and paste information often.
Right now I am having to change the service order so I can do both. Is there a better way to do this? A tweak somewhere or software I can use?

I resolved issue using the route command to input the secondary port's subnet and gateway information

Problem with PowerBook (but NOT MacBook) and two access points on network

I recently installed a wall-plugged ethernet adapter system (Netgear XE104 and XE103) and plugged a wireless access point (Netgear WPN802) into one of the adapters (in the part of our house where we lacked a wireless signal) in order to extend the range of our (DSL) wireless network. I configured this new access point--disabled DHCP, assigned an IP address to the access point that does not fall into the wireless router's IP adress range, put the wireless router and access point on different channels (6 and 11), and made sure the router and access point had the same SSID.
I have had no problems using the resulting setup with our new MacBook--everything goes as planned. BUT I am having a terrible time with my PowerBook G4. It has a really strong signal everywhere, but when I open my browser it says that I am not connected to the internet. The problem seems to be that my PowerBook refuses to change channels once it connects to one. I installed iStumbler to see if I could manually control which access point/channel the PowerBook uses, and, while I can track the signal strengths for both access points, I can't get my PowerBook to switch from one access point to the other.
I've tried just about everything I can think of. I suppose I could try giving a different SSID to the access point (and then try to switch with the airport menu in the toolbar), but I would like to avoid this if possible.
I would really appreciate any advice you have. Thank you!

Can you connect if you temporarily turn off WEP or WPA?
This will determine if it is a WEP or WPA issue.
Does your PC support WPA, from both a hardware and a software perspective?
The problem you are having probably lies with the encryption key.
Accessing a Airport Network with a Windows XP PC or laptop (with XP SP2)
http://tech.ifelix.net/1011.html
Accessing a Airport Network with a Windows XP PC or laptop (with XP SP1)
http://tech.ifelix.net/1010.html
Problems connecting an XP PC to an Airport Base Station
http://tech.ifelix.net/2002.html
iFelix

PIX 501 config - access to internal network not working from remote VPN users - everything on the inside is OK

One other thing - I had a problem with the key pairing so I rebuilt the rsa 1024 and the unit started working. Unfortunately I reloaded without the config in place and now I cannot get it to work again. Any help will be greatly apprecaited although I did review a dozen other posts of people having similar problems and for some reason there is never any conclusion as to the solution and I am not sure why.
Some other info from the client end:
I just ran the stats on the client and packets are being encrypted BUT none are decrypted.
Also Tunnel received 0 and sent 115119
Encryption is 168-bit 3-DES
Authentication is HMAC-SHA1
also even though the allow LAN is selected in the Cisco VPN client it states the local LAN is disabled in the client stats
also Transparent tunneling is selcted but in the stats it states it is inactive
I am connecting with the Cisco VPN Client Ver 5.0.07.0440
This config works. It is on the internal net 192.168..40.x and all users obtain dhcp and surf the web. It has required ports opened.The problem is that you can connect remotely via the VPN and you receive an IP address from the remote-vpn pool but you cannot see any machines on the internal network. The pix is at 40.2 and you cannot ping the pix and the pix from the remote PC connecting via the VPN and youcannot ping the remote PC from the PIX console when the remote is connected and receives the first IP address in the VPN pool of 192.168.40.25
I need to see the internal network and map network drives. I have another friend that is running the same config and it works but his computer is on a linksys wireless and has an IP of 192.168.1.x and the IP he receives from the VPN pool is 192.168.1.25 so I do not know if the same network is allowing this config to work even if there is an error in the config. In my present case I obtain the ip of 192.168.40.25 from the VPN pool and my connecting pc on 192.168.1.x I really am not sure how the VPN virtual adapter works. I am assuming it routes all traffic from your connecting PC to and from the virtual adapater but I really do not know for sure.
Other people have had similar issues with accessing the internal network from the VPN. One solution was the split-tunnel, another was the natting and another had to do with the encrption where there and an issue with the encrypt and ecrypt which was stopping the communicaton via the VPN.
I still cannot seem to find the issue with this config and any help will be greatly appreciated.
This is the config
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password somepassword
hostname hostname
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
object-group network internal_trusted_net
network-object 192.168.40.0 255.255.255.0
object-group icmp-type icmp_outside
icmp-object echo-reply
icmp-object unreachable
icmp-object time-exceeded
icmp-object source-quench
access-list OutToIn permit icmp any xxx.xxx.xxx.0 255.255.255.248 object-group icmp_outside
access-list no_nat_inside permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list split_tunnel permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list OutToIn permit ip any any
access-list outbound permit ip any any
(NOTE: I had many more entries in the access list but removed them. Even with the above two allowing everything it does not work)
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside xxx.xxx.xxx.xxx 255.255.255.248
ip address inside 192.168.40.2 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpn_client_pool 192.168.40.25-192.168.40.30
pdm history enable
arp timeout 14400
global (outside) 1 interface
I had this statement missing from the previous posted config but even with the nat (inside) 0 access-list no_nat_inside it still does not work.
nat (inside) 0 access-list no_nat_inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group acl_outside_in in interface outside
access-group outbound in interface inside
route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.168.40.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community $XXXXXX$
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set 3des_strong esp-3des esp-sha-hmac
crypto dynamic-map clientmap 50 set transform-set 3des_strong
crypto map vpn 50 ipsec-isakmp dynamic clientmap
crypto map vpn client configuration address initiate
crypto map vpn client configuration address respond
crypto map vpn client authentication LOCAL
crypto map vpn interface outside
isakmp enable outside
isakmp identity address
isakmp client configuration address-pool local vpn_client_pool outside
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup remote-vpn split-tunnel split_tunnel
vpngroup remote-vpn idle-time 10800
vpngroup remote-vpn password ANOTHER PASSWORD
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh 192.168.40.0 255.255.255.0 inside
ssh timeout 30
console timeout 60
dhcpd address 192.168.40.100-192.168.40.131 inside
dhcpd dns xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd enable inside
username AUSER password PASSWORD privilege 15
terminal width 80
****************** End of config
I have been searching docs and other people's postings trying to obtain the info to make this work. It appears pretty much boiler plate but I believe my problem is in the natting. I am using a range in the internal network for the VPN pool and I have tried switching this to other networks but this has not helped. Unfortunately I have been unable to get the PDM to work and I believe this is a PC config thing and I did not want to waste the time on it. I read a post where a person using the PDM interface with the same problem (not being able to access the internal network) was able to go to a section in the VPN wizard and set the Address Exeption Translation. They said they originally set the VPN subnet when they did not have to. Many of the other blogs I read also stated that if the natting is not proper for the VPN pool- that it will not work but I am confused by the examples. They show as I do the complete range for an access-list called no_nat_inside but I believe it should only have the VPN pool IP range and not the entire network since the others do require natting - not sure if my thought process is correct here. Any help will be greatly apprecaited. Also this morning I just tried a boiler plate example from CISCO and it also did not do what I need for it to do. And I also connect a PC to obtain an IP to see if I can see it - no good. The PC can ping the PIX and viceversa but no one can ping the remote PC that connects via the CISCO Remote VPN client even though it receive an address from the vpnpool. Also include LAN is checked off on the client. This was mentioned in anther post.
Thank you once again.

Hi,
PIX501 is a very very old Cisco firewall that has not been sold for a long time to my understanding. It also doesnt support even close to new software levels.
If you wanted to replace the PIX501 the corresponding model nowadays would be ASA5505 which is the smallest Cisco ASA firewall with 8 switch port module. There is already a new ASA5500-X Series (while ASA5505 is of the original ASA 5500 Series) but they have not yet introduced a replacing model for this model nor have they stopped selling this unit. I have a couple of them at home. Though naturally they are more expensive than your usual consumer firewalls.
But if you wanted to replace your PIX firewall then I would probably suggest ASA5505. Naturally you could get some other models too but the cost naturally rises even more. I am not sure at what price these are sold as used.
I used some PIX501 firewalls at the start of my career but have not used them in ages since ASA5505 is pretty much the firewall model we use when we need a firewall/vpn device for a smaller network/branch site.
Here is a PDF of the original ASA5500 Series.
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80285492.pdf
Here is a PDF of the new ASA5500-X Series
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf
I am afraid that its very hard for me atleast to troubleshoot this especially since I have not seen any outputs yet. Also the very old CLI and lack of GUI (?) make it harder to see what the problem is.
Could you provide the requested outputs?
From the PIX after connection test
show crypto ipsec sa
Screen captures of the VPN Client routing and statistics sections.
- Jouni

Home sharing across two wifi networks?

I have two wifi networks in my home and each is attached to its own cable modem. Can home sharing be used across both networks so I can see my Apple TV and my iTunes library at the same time in the remote app? Thus far, I have only been able to access them separately by switching wifi networks on my iPhone. All my devices are set up with the same Apple ID. My main computer is running Windows 7 and it is connected to network #1 via LAN and network #2 via wireless. All my speakers including Apple TV show up in the Airplay menu of iTunes. Apple TV is connected to network #2 solely for the reason that the signal is stronger.
Any ideas out there? This has been frustrating the heck out of me. Thanks in advance!

http://support.apple.com/kb/ts2972
http://support.apple.com/kb/HT4620
http://support.apple.com/kb/ht3819

My iPhone has two identical options under "iTunes wi-fi sync" that are the same computer. I only have one user on my computer, and I tried moving my iTunes file in Finder to organize it and now my library's not synced with my phone. Help?

My iPhone has two identical options under "iTunes wi-fi sync" that are the same computer. I only have one user on my computer, and I tried moving my iTunes file in Finder to organize it and now my library's not synced with my phone. Help?

I have the same problem. Right now my iPhone 5S shows 3 instances of the computer to which it is connected under Settings » General » iTunes WiFi Sync. I'm having problems connecting and syncing, and this is probably the cause: the phone chooses one of these connections, and it isn't the one that's actually in use. What's probably happening is that the phone and computer establish a connection using a dynamic IP address, the address becomes "disassociated" due to error, another address is associated, the phone retains each address/link, and each link is displayed as if it represents a separate computer (the fact that the name of the computer is identical is ignored, as the only thing that is considered important is the IP address). But that's all conjecture. More important, I'm not sure how to fix the problem. A network reset doesn't do it.

Running two wireless networks simultaneously

I am running two independent 802.11n 5GHz networks simutaneously. Each has a unique SSID. The first network is using channels 36 & 40 and the second network is using channels 44 & 48. When the first network is transmitting data and the second network attemps to transmit, the second network must wait until the first is finished and then start its transmission. If the first network then needs to transmit, it must also wait until the second network is finished. They keep flip-flopping back and forth. Is this normal? I know they have to wait until the "channel" is clear before they can transmit, but I'm using unique channels and unique SSIDs. Anybody have any idea what's happening and how to get around it?

I agree. The Draft N Standard does provide for a "speed drop and wait" period if another N network is running in the same area. I would "guess" that if there is any possible way you can do so - and of course only you know your circumstances, etc., so it may not be an option for some very good reason- consider combining your two units into one network with two accesspoints available on it. This will eliminate the "stop and wait" stuff, give you better coverage than the two separate networks, and be far less sensitive to various slow-downs, etc. If you reason for separating them is because you're isolating the non-N equipment on one network, if you're lucky enough that it's maybe just one or two printers and/or a computer or two - see if you can hardwire them either back to the AEBS N Units or to a powered hub that's then connected to the Base Stations. Getting the 801.11 B&G units off the air and onto hard wired connections will speed them up greatly, and eliminate any problems with these units slowing down your blazingly fast N-network access. I know it sure as **** did so for me. I had two printers (one w/ Ethernet and 1 with USB Only) and I migrated both of them to hard wired connection at the AEBS-N/g. The one non-N computer was literally beside the base station/cable modem anyway - so plugging it into ethernet was no problem at all. The result is that the remaining five or six computers with an "N-spec" card in them jumped in speed to where they can easily outrun anything my Time Warner Cable modem can ever hope to deliver. My whole network suddenly feels like it's hard wired vs airport. Amazing benefit for getting two printers and one aging computer onto ethernet and off the airports.
Good luck! But I am afraid that as long as your networks are seeing another "N" network in the area they're going to do this slow down and wait routine to avoid collision of data and retrys resulting from that.
All the best,
MI

At home I have two wifi networks , I try to use one of them depending on their strength of signal, can I not save both their passwords on Apple TV , so that I can switch to one of the two wifi networks as required

At home I have two wifi networks , I try to use one of them depending on their strength of signal, can I not save both their passwords on Apple TV , so that I can switch to one of the two wifi networks as required
Also the passwords are long and cumbersome to type every time on the apple TV remote, what is the alternative if I cannot store them on the memory of the Apple TV

Is it possible that you are using the same password for the old O2 Study and newer O2 Apple Base Station networks?
If so, Keychain Access is storing the old information about the old network and may be associating it with your AirPort Extreme settings based on the BSSID that William has mentioned.
If that's the case, open Macintosh HD > Applications > Utilities > KeyChain Access and look for a listing with the old network name. Delete this entry. You may need to power down both the computer and the AirPort Extreme and restart them.

ITunes match gave me two identical copies of the instrumental version - want words!

Imogen Heap's "Ellipse" featured two "CD's" - One featured all her songs sung by her - The other featured all her songs as instrumentals. When syncing with iCloud, iTunes Match gives me access to only the instrumental version of all songs...twice! So now I only have access to two identical copies of the instrumental tracks - no word tracks - help :-(

The original versions are still in your iTunes library, so they haven't taken anything away from you.
It does create problems if you want them on your iOS device though. Unfortunately, I can't give you any idea how to get them on there short of turning match off.
Sorry, it is a problem at the moment, and you are not alone.

Need to configure Airport connection to access corporate wireless network

Need to configure Airport connection to access corporate wireless network.
Have imported my certificate from Windows XP machine into keychain and made Leopard always trust in order to authenticate automatically into my corporate wireless network. Also attempted to establish a new 802.1x connection via network preferences without any success. It keeps asking me for username and password even though we used self-generated certificates to log into corporate wireless network. Does anybody have any instructions on how to successfully configure certificates in Leopard?

Welcome to the discussion area, jackregan!
You'll need to "hard reset" the Time Capsule and then reconfigure it again. To do this, you will hold in the reset button until you see the amber light begin to blink more quickly, keep holding another second or two and then release.
The "hard reset" will not affect the data on your Time Capsule
Now you can open AirPort Utility and configure the Time Capsule using wireless (be sure to log on to the default network which will have a name like Apple Network xxxxxx), or you can connect an ethernet cable from your computer to one of the LAN <-> ports on the Time Capsule to have AirPort Utility communicate with it that way.
When you open AirPort Utility, click Continue to follow the guided setup to re-configure your Time Capsule. You would choose the option to "Create a wireless network" when you are given the configuration options.

ADF BC: Choosing between two identical DB schemas on application startup

Hi,
We want to provide users with capability to choose between two identical db schema.
Anu idea how to do this ?

Cvele wrote:
Thanks a lot ! My pleasure.
One question: datasource name entered by the user (on the login form) is a JDBCDataSource property value for the Application module Configuration (which connect trough JDBC DataSource), correct ?Yes.
If so, then, we still must define two different sets of App Module Configurations, one for each DB schema, correct ?No. I'm not suggesting that you implement your UI like the demo that I forwarded. It might not be appropriate for your user to type in the datasource name, but the same code would be required to make the datasource name change work. Rather than getting the datasource name from the HTTPRequest and setting on the session where the custom sesison cookie impl and env info provider access you, for your solution that datasource value might come from some other place that the end-user doesn't directly type in.
Otherwise:
1. we cannot have two different datasource names, correct ?The example I forwarded should allow you to enter different JNDI names, so those would be different datasources.
2. in case of one Configuration – what is a way to define (at deployment time) username/password for each of those two schemas ? Is this correct ?The username/password information is encapsulated inside the Java EE container when you define the datasource. The application doesn't know that information and doesn't have to provide it when you are using a JDBC datasource by JNDI name.
On the other hand, what confuses me, is a fact that you say:
“You wouldn't use different configurations” And really, you example attached to me have just one App module Configuration (datasource name = jdbc/scottDS), which connect through dataSource.
Wondering what a user can enter as datasource name, except jdbc/scottDS ?I forget whether in my example I configured another datasource, but the user could enter the name of any available JNDI name for the datasource on the Java EE container.
Again, I don't suggest necessarily that you let the end-user type it in, that was just how I built the demo since I quickly evolved it from the other dynamic credentials demo that accepted the username and password from the end-user.

Verizon Chat advises pdf attachment non-download from AOL email is a software problem and directs me to Apple Support. I see "can't access cellular data network" in an instant before the file's icon turns into the file's name.

Verizon Chat advises pdf attachment non-download from AOL email is a software problem and directs me to Apple Support. I see "can't access cellular data network" in an instant before the file's icon is replaced by the file's name. In Inbox three emails in a row show there is an attachment. My iPad 3rd gen. runs 7.1.

You have Acrobat Pro on your system. It will try to open PDFs, and of course it will fail. You must uninstall it. Then, you will need a PDF reader. So install Adobe Reader. That seems quite simple, but perhaps something is wrong. If anything goes wrong with these two steps (1) uninstall Acrobat Pro (2) install Adobe Reader, then please let us know the details.

Two identical fax machines in one location

I have two identical Officejet Pro 8620 printers, on a Wireless network, in the same office location. Is there a problem if they both show up under Devices and Printers with Identical names?
If so, I do I fix this?
Thank you.
Tkelly.

Hi @TKelly , and welcome to the HP Forums!
I can see that you're experiencing fax issues. I would love to try and help you, but I do need a little information first. I am linking a few HP Support documents below that will show you how to find which operating system you are using. Also, if you're using Windows, please include whether your operating system is 32-bit or 64-bit.
Mac OS X: How Do I Find Which Mac OS X Version Is on My Computer?
Which Windows operating system am I running?
Is the Windows Version on My Computer 32-bit or 64-bit?
Please let me know what you find. Thanks for posting on the HP Forums!
Please click “Accept as Solution " if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the right to say “Thanks" for helping!
Jamieson
I work on behalf of HP
"Remember, I'm pulling for you, we're all in this together!" - Red Green.

HT201699 My carrier is Straight Talk (using ATT network) and they require the user to enter the APN settings in order to access their data network. My Iphone 4s is factory unlocked but I can not get to the Cellular Data Network tab to enter the settings?

My carrier is Straight Talk (using ATT network) and they require the user to enter the APN settings in order to access their data network. My Iphone 4s is factory unlocked but I can not get to the Cellular Data Network tab to enter the settings?

Yes ATT hides the APN settings so when you try to use a st sim it automatically reads on AT&T network so the APN settings are hidden and cannot be accessed however you can go to apn.straighttalk.com on you'r phone and select APN/data settings then select AT&T then iPhone and a screen will pop up asking if you would like to install the profile for whatever reason it's not verified but works fine. You can also go to www.unlockit.co.nz and set up a straight talk APN profile that is verified not sure exactly what that means but both work to get the data working on the phone for straight talk but it does not make the MMS work. There are a couple other methods I have read about one is on howardforums using ibackupbot to manually change the files on the phone I haven't been able to get mine to stick using that method but other people have and there is a sim swap method to trick the phone to reveal APN settings using a tmobile sim I have not tried this but other people have with success. The last two methods mentioned will make both data and MMS work

Accessing two identical networks

Similar Messages

Maybe you are looking for