AEBS / router config advice

Hope someone can advise on the best aproach for the following - not a particularly complicated setup, but it is causing me problems.
I have a Netgear router (not wifi, just a router) which is hard-wired into my old-style AEBS (g). The router;
Router - 192.168.0.1 (does NOT do DHCP)
|
AEBS - 192.168.0.2 (manually configured)
The AEBS distributes IP addresses via DHCP to 3 Mac's and a PC on the 10.0.1.n address range.
I use my work PC to connect to varous custoemr VPN networks... most work, but 1 customer won't work unless I reconfig my Wireless IP's to something other than 10.0.1.n. 172.16.n.n is fine, but unfortunatly another customer fails on this!
Ideally I think all IP's in my network to use 192.168.0.1 would be best, but this causes problems with Netgear as it's on 192.168.0.1!
I can't use the Netgear for DHCp as I need to use the AEBS's WDS functionality for my AXBS. If I configure the AEBS to use 192.168.0.n it complains as the 'range of addresses is reserved for local ethernet'.
Can anyone advise on my best approach?
iBook G4 933Mhz 640Mb + iMac G4 Flat 800Mhz 1Gb + Mac Mini 1.4Ghz Mac OS X (10.4.10)

Assuming you have broadband Internet, connect things like this:
Internet -> [WAN] Netgear [LAN] -> AEBS
Configure the Netgear so that the DHCP server is ENABLD.
Configure the AEBS so that the option to distribute IP addresses is DISABLED.
There should be no problem configuring the AEBS to create a WDS link to the AirPort Express (AX).
Are you using the AX to wirelessly extend the network or just stream music? If just stream music, it would be better to forget WDS and just have the AX join as a wireless client.

Similar Messages

Security Wireless 857w router config.

Hi,
I do have adsl & wireless internet connection running properly under my Cisco 857w router.
However, I am trying to configuring with out success the (wap), my wifi internet connection still open for everyone.
I will really appreciate your advices.
Thanks in advance.
Daniel.

Hi Brandon,
Thanks for your response, but unfortunally I could not setup my Wireless Security yet.
With the following config I am unable to connect with my laptop:
Encryption mode: "Cipher TKIP"
Authentication Key Management:
Key Management: "Mandatory" "WPA"
WPA Preshared key: "xxxxxxxxx" "ascii"
I mean, if I want to connect with my laptop via wifi the router encryption modes need to be configure to (none).
Here below I attached my router config, maybe you can see what is wrong on it.
Thanks in advance.
Daniel

WRT54G firmware failure leaving no access to router config

I have a WRT54G router. Running Vista SP2 64-bit on a laptop wired to router. When I first tried to upgrade the firmware I was connected wirelessly. (I know, please just think it but don't type it) During the upgrade the internet connection disconnected and the upgrade failed. I am connecting right now wirelessly using someones unsecure network. I attempted to upgrade the firmware to 8.00.7. Since then I am unable to access the router config using IP 192.168.1.1. I have read as many posts as I can handle. I have checked and that is the IP showing in Vista, (Network & Sharing, view status, properties) however I cannot ping that IP. It times out every time. I have done all the resets (10 seconds and up to 1 minute) on the router and power cycle etc. Nothing. I downloaded the firmware utility and I get an error message everytime that it is unable to get responses from the server. I have tried my password, which I think is gone due to all the resets, and am using admin as the password. I have disabled my firewall. I do have Network Magic and when I checked control internet access it says I am able to do so. Is there a way to disable Network Magic? Can that be the issue? When all this started I had my own internet connetion. I'm in the process of moving so I have disconnected my internet service. Since I'm only trying to connect to the router locally, do I really need to have a live internet connection? Please, HELP! I don't want to buy a new router. This one has been very reliable. If I do have to buy something new, can you recommend something just as reliable.
There have been 2 or 3 times where it looked as though I was going to be able to connect to config interface and the firsrt basic screen loads with minimal data and no clickable links to allow me to change screens. The "&" from one of the links that is supposed to appear but does not, is the only thing that appears in that area and if I click it, I either get a error from IE that it cannot connect, or, it takes me to the Ports screen with minimal data and I cannot progress from there. In the top right corner of the screen, it does show the firmware version is 8.00.7. ?????
P.S. Obviously, I'm not very computer savvy so excuse me if I'm missing the obvious.
Message Edited by Steviegt on 09-29-2009 08:38 AM
Message Edited by Steviegt on 09-29-2009 08:43 AM
Windows Vista Home Premium SP2 64-bit
Internet Explorer v8
Office 2007 SP2 Home and Student
Outlook 2007 Standalone
ESET Smart Security
WRT54G v8.00.6
Solved!
Go to Solution.

Its Great that your issue has been resolved now...

Disappearance of IP Routing config on 6509

Our 6509 Switch (Cisco WS-C6504-E) suddenly lost its Routing table & entire Routing configs including all Static & Dynamic route configurations.
We had to turn on ip routing & restore the routing configuration .
Have anyone experienced this & does it could be some kind of caveat with the MSFC or the Layer 3 engine .
Any thoughts are welcome.
No config changes were applied to the switch ; except only a SNMP ip address was allowed .
Thanks
Prabs

Ah, ok, thanks. I guess that was pretty obvious, now that I know the answer.
The "ip routing" command isn't mentioned anywhere in the CLI documentation, but I guess if I'd thought about it a little longer, I may have come to the same conclusion.
Thanks Tom.

Review my first 892 router config

This is the first router config that I have done, and I used CLI to program a Cisco model 892. There are about 10 users behind this router connected to a series SG300 switch. This router will provide DHCP, VLANs, and NAT access to the internet (via cable modem). The lan port is FE0 and the WAN port is FE8 to the internet. There are 4 Cisco WAP321 connected with two SSID's. The guest SSID (internet access only) uses VLAN2 and the normal SSID uses VLAN1.. Please let me know if there are security or efficiency improvements that I can add to this. Thanks!
! Last configuration change at 20:04:03 PST Mon Dec 22 2014
! NVRAM config last updated at 15:10:16 PST Mon Dec 22 2014
! NVRAM config last updated at 15:10:16 PST Mon Dec 22 2014
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname gateway
boot-start-marker
boot config usbflash0:CVO-BOOT.CFG
boot-end-marker
no aaa new-model
clock timezone PST -8 0
ip cef
ip dhcp excluded-address 192.168.10.1 192.168.10.99
ip dhcp excluded-address 192.168.8.1 192.168.8.99
ip dhcp pool data
import all
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 192.168.8.60
domain-name summmitdrive.local
ip dhcp pool guest_wifi
import all
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 64.59.168.13 64.59.168.15
no ip domain lookup
ip domain name summitdrive.local
ip host gateway 192.168.0.1
ip host fs1 192.168.8.60
ip name-server 64.59.168.13
ip name-server 64.59.168.15
no ipv6 cef
multilink bundle-name authenticated
license udi pid CISCO892-K9 sn FCZ1714C2ZD
username sdcadmin privilege 15 secret 4 zsc1w55wVxL1behpFMAW8XrxKcVujVnNHLpMKP.ZgXk
redundancy
ip ssh version 2
interface Loopback0
ip address 192.168.0.1 255.255.255.0
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
interface FastEthernet0
switchport mode trunk
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
no ip address
interface FastEthernet5
no ip address
interface FastEthernet6
no ip address
interface FastEthernet7
no ip address
interface FastEthernet8
ip address 184.71.128.156 255.255.255.252
ip access-group INBOUND_INTERNET in
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
interface GigabitEthernet0
no ip address
shutdown
duplex auto
speed auto
interface Vlan1
description data_vlan
ip address 192.168.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
interface Vlan2
description guest_vlan
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list NAT interface FastEthernet8 overload
ip route 0.0.0.0 0.0.0.0 184.71.128.154
ip access-list extended INBOUND_INTERNET
permit icmp any host 184.71.125.118 echo-reply
permit icmp any host 184.71.125.118 time-exceeded
permit icmp any host 184.71.125.118 unreachable
deny ip any any log
ip access-list extended NAT
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended SSH
permit ip 192.168.8.0 0.0.0.255 any
control-plane
mgcp profile default
line con 0
logging synchronous
line aux 0
line vty 0 4
access-class SSH in
exec-timeout 5 0
login local
transport input ssh
ntp server 1.ca.pool.ntp.org
ntp server 0.ca.pool.ntp.org
end

I've modified inbound_internet:
ip access-list extended INBOUND_INTERNET
permit icmp any host 184.71.125.118 echo-reply
permit icmp any host 184.71.125.118 time-exceeded
permit icmp any host 184.71.125.118 unreachable
permit udp any any eq ntp
permit tcp any any established
deny ip any any log
The idea is to block anything inbound unless it is an already established connection from the inside. Does that make sense?

851 Router Config Issue

Hi all,
Hopefully this will be a nice easy one for you all.
I have recently configured and installed an 851 router successfully :) I now only have one issue, the damn thing switches itself off after a period of inactivity!
If I want to use it again I have to issue a reset command then a boot command.
This takes me to the:
router>
prompt. I then have to issue a copy start run command. And then a no shut on each of my interfaces.
Obviously I would just like the router to stay up and running. But I cant work out how to do it. Im sure that this is just a simple config issue and I would dearly love for you all to solve it!
If any of you know the answer can you please provide clear an accurate commands as I will copy it parrott fashion into the router.
Thank you all in advance.
Stuart

Hello,
as spremkumar already pointed out the config register usually is set to 0x2102. You can reconfigure the register by:
Router#configute terminal
Router(config)#config-register 0x2102
Router(config)#end
Then perform a reload and check whether the config is present after the router finished booting.
Hope this helps! Please rate all posts.
Regards, Martin

Simple Router Config Issues

Forgive me, I have configured several routers on the inside but never a default gateway. It seems simple enough but I am stuck.
I can ping the Gateway from the inside. I can ping the inside from the gateway. I can ping the outside from the gateway, but I cannot ping the out side from the inside. (Or get to the DNS server assuming they have ICMP turned off) Heres my config (IPS have been changed to protect the innocent:) )
My guess is something is screwed up with NAT
Configuring g
!b
boot-start-ma
no
ip subnet-zeroered, becomes
no ip routinghe configurat
!n
!e
no ip cef
interface Ethernet0er enable secret: b
ip address 63.223.13.115 255.255.255.128The enable password is used when you do n
ip access-group 20 out
[OK]
ip nat outside
*Mar
enable
no ip route-cacheith some older sof
half-duplexs, and Trans
!i
ip nat inside source list 20 pool poolone
ip nat inside source static 192.168.10.5 63.223.13.121
ip classless
ip route 0.0.0.0 0.0.0.0 63.223.13.1
no ip http server
access-list 20 permit 192.168.0.0 0.0.255.255
banner login ^Cc
###### WARNING ######
AUTHORIZED ACCESS ONLY^C
line con 0
password 7 03005A1C011C70
login
line aux 0
line vty 0 4
password 7 06020E364B5D58
login
no scheduler allocate
end
ZaxT1#
Pro Inside global Inside local Outside local Outside global
--- 63.223.13.121 192.168.10.5 --- ---
ZaxT1#

I do not know how you generated this config listing but it seems to be quite garbled. So I am not sure how accurately we can evaluate it.
But one things that does appear to be there is that you are using access list 20 to control what addresses get translated by NAT and it permits 192.168.0.0/16. So that any address in 190.168.0.0 will get translated. However the same access list is applied outbound on Ethernet 0. So Ethernet 0 will only permit outbound traffic whose source address is 190.168.x.x. Except all these addresses have been translated so that the source address is no longer 192.168.x.x. This would prevent any traffic going out through Ethernet 0.
Do not use the same access list to control translation and to control outbound traffic on the interface.
HTH
Rick

Router Config Question

I am a newbie to Cisco. I have a router that pings another at a remote location. We only use pings on this particular router to monitor a link, so when the pings drop we know a link is going down. It used to do a continuous ping of the distant end router, but since restarting and adding a new IOS, the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings? This is a major router and I can't afford to make an config error that would shut the routers down or stop the pings.

Hi,
" the router will only ping at the max number provided which is 2147483647 times. I know the no exec-timeout is for the user login, but what is the command to allow continuous pings?"
Use IP SLA icmp-echo and IP SLA logging traps to alert you when a certain condition is met.
http://www.cisco.com/c/en/us/td/docs/ios/ipsla/command/reference/sla_book/sla_02.html#wp1052104
Regards
Alain

AEBS & AE Network advice

I just added 3 AE to my existing AEBS network. I have a 3 story house. Currently the AEBS is on the 2nd floor with Hawkins 7dbm antenna array. I added a 3 AE on the 1st floor. 1st one is in the kitchen hooked up to a Bose stereo. 2nd near the foyer to cover signals to the porch and front of house. 3rd in the family room and hosting a IP cam webserver. The AEBS was set to WDS and all 3 AE was set to router mode, with 1 DHCP and 2 manual IP for ntk printing. Also set all 3 AE to extends signal mode of the AEBS and all setup as remote station, except AEBS as main station. All elements are on same channel and have been given different ntk names. Please advise anything I can do different. All seems to work good. The wife and her XP seems to be able to connect to any one of the 3 AE's on the 1st floor. The Air Tunes works fine to the Bose. IP cam has port forwarding from the main station (AEBS) to port 80 in/out to DHCP server IP on the AE in the family room. Thanks for the input.

Assuming you have broadband Internet, connect things like this:
Internet -> [WAN] Netgear [LAN] -> AEBS
Configure the Netgear so that the DHCP server is ENABLD.
Configure the AEBS so that the option to distribute IP addresses is DISABLED.
There should be no problem configuring the AEBS to create a WDS link to the AirPort Express (AX).
Are you using the AX to wirelessly extend the network or just stream music? If just stream music, it would be better to forget WDS and just have the AX join as a wireless client.

Server 2012 - Clustering CSV Config advice

We have a Dell VHDX Server with 2 server blades (This has shared storage built in)
I've installed Server 2012 Datacentre on both servers, configured a cluster (My first!)
I have a number of HDD's in the chassis and hardware RAID is built in.
A file-server VM, print server as well as other miscellaneous VM's will be installed on the cluster.
What would be the ideal config for the CSV's? Should I create a RAID CSV exclusively for the VM's themselves to reside on?
Then separate RAID CSV's for each data requirement?
What about the SQL Server, should that have its own separate CSV? (Its not heavily utilised)
For the File-server, should the primary group shares be in the file-server VHDX, or a separate VHDX for each?
Should I consider using SMB 3.0? and how would I configure/design that?
Any advice or suggestions appreciated.

We have a Dell VHDX Server with 2 server blades (This has shared storage built in)
I've installed Server 2012 Datacentre on both servers, configured a cluster (My first!)
I have a number of HDD's in the chassis and hardware RAID is built in.
A file-server VM, print server as well as other miscellaneous VM's will be installed on the cluster.
What would be the ideal config for the CSV's? Should I create a RAID CSV exclusively for the VM's themselves to reside on?
Then separate RAID CSV's for each data requirement?
What about the SQL Server, should that have its own separate CSV? (Its not heavily utilised)
For the File-server, should the primary group shares be in the file-server VHDX, or a separate VHDX for each?
Should I consider using SMB 3.0? and how would I configure/design that?
Any advice or suggestions appreciated.
Looks like it's an extended version of a post from here:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/2d7cd5b0-cbe5-4dcd-8ed1-759c12cc81ae/server-2012-csv-raid-advice
1) Don't go for multiple LUNs as that's an effective way to steal IOPS from your config. Put all spindles into RAID set and create one RAID10 LUN to host one CSV. Reasons are listed with the link above.
2) Don't create multiple "islands" of storage. Hell to manage and lower performance.
3) Don't separate moderately loaded SQL Server VM from other ones.
4) You map SAS disks AS IS, creat Clustered Storage Spaces, create a CSV, you create file server VMs and keep shared content on a VHDX stored on CSV. See:
http://technet.microsoft.com/en-us/library/cc732181(v=ws.10).aspx
With R2 you can use shared VHDX instead of iSCSI running on top of your storage.
5) With two blades you cannot use SMB 3.0 as you cannot run it in a loopback. See:
http://blogs.technet.com/b/josebda/archive/2012/11/14/windows-server-2012-file-server-tip-avoid-loopback-configurations-for-hyper-v-over-smb.aspx
With 4 blades you could in theory assign pair of blades to become Hyper-V hosts and another pair to become SoFS set but there's no point in doing this: you'll steal CPU resources from your hardware config (2 boxes instead of 4 running VMs) and make everything
slower (1 GbE interconnect built-in into VRTX). Use Clustered Storage Spaces as that was the idea behind whole VRTX thing.Hope
this helped :)
StarWind VSAN [Virtual SAN] clusters Hyper-V without SAS, Fibre Channel, SMB 3.0 or iSCSI, uses Ethernet to mirror internally mounted SATA disks between hosts.

Backup router config

Hi everybody!!!
I have a script to backup my ASA configuration. I want to use the same script to backup my routers, but Im looking for special questions, look..
I want to create a user, like "backup" and this user can run the command "more system:running-config"
The idea is the user "backup" log on the router, without enable and run that command above...
That command needs to run automatically, and after, the user needs to log off..
I tried something like parse viewer and autocommand but without success...
If anyone can help me..
Im trying in a Cisco 2801 Router.
Thanks
Diego

Hi all...
Rancid sounds good..
I tried kron now. I could send my config to my tftp server, but when I run sh kron sch I receive this message:
Kron Occurrence Schedule
back-0303log01 inactive, will run again in ERROR - Timer Not Running
Look my conf for kron
kron occurrence back-0303log01 at 14:56 recurring
policy-list back-0303log01
kron policy-list back-0303log01
cli sh running-config | redirect tftp://172.19.4.121/0301router
My clock conf:
clock timezone BR -3
clock summer-time BRV recurring 3 Sun Oct 0:00 3 Sun Feb 0:00
ntp clock-period 17178040
My clock:
15:19:27.036 BRV Tue Dec 11 2012
What is wrong?

Netgear rangemax & AEBS & AExpress Config - help please !

Hi
Here is my current set up. Just need to know whether I'm doing things right here !
I have a Netgear Rangemax wireless Modem/Router to which I have attempted to hook up the AEBS via the ethernet port to act as an extension to the wireless network. I have used Airport Admin utility to give the AEBS the same network name as the router and under the internet tab it is connecting using Airport (WDS) and has the also allow wireless clients box checked and is configured using DHCP. Under Network tab I have disabled the option to distribute IP addresses. Finally under WDS tab It is checked to enable use as a 'Remote base station' and to allo wireless clients.
Have I got this bit right ? The AEBS has the middle power light solid and the right and left lights flash together intermitently.
If this is correct. How do I configure the Airport express to further extend the network, as everything I have tried so far just leaves it with a solid orange light.
Thanks for taking the time to read this ! Really do appreciate any guru's knowledge !

Configure your AirPort Express (AX) following the directions in KB 302153, AirPort Express: How to join an existing wireless network in client mode.

Airport & Webstar DPC2100 config advice needed!

Recently moved into a new house with cable internet & television from Virgin Media.
I'm having some trouble setting up Airport Express with the modem we have. The modem has both USB & Ethernet ports which the manual instructs can be used at the same time.
To start with I did a hard reset of Airport and waited to see if a DHCP connection would work. No joy so I set up a manual connection using the information I could find from the Modem's page at 192.168.100.1
Currently the Airpor is set up as follows:
TCP/IP - manually
IP: 192.168.100.5
Subnet: 255.255.255.0
Router: 192.168.100.1
DNS: 10.226.112.144 (the cable modem's IP address according to it's status page. Leaving the DNS field blank yields the same result, I tried this to see if it worked - it didn't)
Airport's light is glowing green, and I can connect to the network fine, but there's no access through Safari/Firefox/Mail/Thunderbird/MSN Messenger or any other network app I care to try.
Safe to say, I'm stumped and I'd love any advice anyone has.
Thanks in advance!
Mat

The modem has both USB & Ethernet ports which the manual instructs can be used at the same time.
The AirPort Express (AX) must be connected to that devices Ethernet port. You can not connect to the Internet using the AX's USB port.

WCCP Router config

I found this paragraph in the IOS 12.x documentation. The second sentence seems odd to me. Because WCCP redirection was enabled on a specific interface, it affects all interfaces on a router. Does it only affect interfaces that have an outbound redirection statement associated with them or does it affect all traffic on all interfaces?
Configuring WCCP for redirection for inbound traffic on interfaces allows you to avoid the overhead associated with CEF forwarding for outbound traffic. Setting an output feature on any interface results in the slower switching path of the feature being taken by all packets arriving at all interfaces. Setting an input feature on an interface results in only those packets arriving at that interface taking the configured feature path; packets arriving at other interfaces will use the faster default path. Configuring WCCP for inbound traffic also allows packets to be classified before the routing table lookup, which translates into faster redirection of packets.

Has anyone tried configuring a Cisco 2621 with NAT/CBAC/CEF/WCCP simultaneously? I have a branch office connection with a single router and am having serious trouble getting CBAC and WCCP to work nicely together. I'm redirecting to a Volera Cache Engine. Synopsis of config:
ip wccp web-cache redirect-list http
ip wccp 98 redirect-list streams
ip cef
ip inspect audit-trail
ip inspect name filter cuseeme
ip inspect name filter ftp
ip inspect name filter h323
ip inspect name filter http java-list 90
ip inspect name filter netshow
ip inspect name filter realaudio
ip inspect name filter rtsp
ip inspect name filter streamworks
ip inspect name filter tcp
ip inspect name filter udp
ip inspect name filter vdolive
ip audit notify log
interface FastEthernet0/0
ip address 10.32.2.1 255.255.255.0
ip nat inside
ip wccp web-cache redirect in
ip wccp 98 redirect in
interface Serial0/0.100 point-to-point
ip address 100.100.100.217 255.255.255.252
ip access-group 101 in
ip nat outside
ip inspect filter out
interface FastEthernet0/1
ip address 32.100.100.241 255.255.255.248
ip nat pool office-net 32.100.100.245 32.104.73.246 netmask 255.255.255.248
ip nat inside source list 99 pool office-net overload
ip access-list extended http
permit tcp any any eq www
ip access-list extended streams
permit tcp any any eq 1755
permit udp any any eq 1755
permit udp any any eq 554
permit tcp any any eq 554
access-list 90 permit any
access-list 99 permit any
access-list 101 permit (all my vpn tunnel entries)
access-list 101 permit (certain icmp)
access-list 101 deny ip any any log

Router config for console modem access

We're upgrading 2500 series routers with 2811's in several remote sites, and we have preferred modem access to be connected to the console port as opposed to AUX, in order to see boot-up and diagnostics we wouldn't otherwise see. Our only issue is that we aren't replacing the modems out there and some aren't connecting correctly. We obviously need AA turned on, and also be able to continue a session if the cable is moved to another device's console port (like the local switch.) If we were using the AUX port, I know autoconfigure discovery and other commands might fix this; but we'd like to keep the modem connected to the router console port. Are there any router commands I can use?

If I understand correctly these modems were connected on the Aux port of the 2500 & now you intent to connect then on the console port of the 2800, what vendor modems are in use?
The below doc has info on router console port configuration, we will need to configure the correct initialization string on the modem based on the modem vendor (the AT commands will change as per the description based on the modem vendor).
http://www.cisco.com/en/US/tech/tk801/tk36/technologies_tech_note09186a00800941c9.shtml
Thanks, Mak

AEBS / router config advice

Similar Messages

Maybe you are looking for