Bandwidth Issue on a Local LAN
OK,
I've been beating my head against the wall with this one. First I will begin with a list of the test equipment.
2 iSight Cameras, 1 Powerbook G4 1.5Ghz, 1 iMac G5 1.8Ghz and a PowerMacG5 Dual 2Ghz.
It all started when I went to connect from my PowerMac to my iMac. I kept getting the Insufficient bandwidth issue. So I thought the problem was the iSight Cameras, so I pulled out my laptop and presto the Powerbook connected both video and audio with no problem to my iMac. Next, I decided to test Powerbook to Powermac and I got the same error. So I thought to myself maybe it is a preference file. I moved my preference folder out of my Library on my Powermac, rebooted and attempted again, still got the same error. So I though again, maybe iChat is corrupted on my PowerMac, I deleted it and grabbed the copy from my Powerbook and placed it on my Powermac. Tried again, same error.
As you can tell by now I am ripping my hair out. All the machines have the same settings for iChat and Quicktime so that is not the problem.
So then there was one more thing, my iMac and Powerbook are both wireless and the Powermac is on my Gigabit LAN. Hmmmm.... so I placed my powerbook on the wire LAN just to make sure that wasn't the issue. Guess What?! The same ERROR!!!!
By now I have no hair left on my head. Can someone please advice what could be happening, what I did not try. I do not think I need to reinstall Tiger on my Powermac, that is a windows thing (when all else fails reformat and install). Both the powerbook and powermac are upgraded the iMac is a clean Tiger install. Please someone help!!!
Thank you,
JC
OK here is where I put my foot in my mouth. I have 2 gateways in my house one for dsl and one for cable. I have both in case one goes down in my house as I work from home. All the machines that were getting dynamic addressing were pointing out to the dsl router (iMAC, POWERBOOK) and the ones with physical address are pointing to the Cable (POWERMAC, PC, SERVER (workign comps)). THis is due to the fact that I didn't want my wife or daughter on using up the faster cable connection. THey are all still in the same network but pointing to different routers. Now I do not know how it affects the video/audio chat of iChat but it does. Even though all machines can see each other, work together, have a TEXT chat together but just see the internet via different routers as all before is local, it appears to cause a problem with the video and audio connections. So Ralph, thank you, you were correct, it had to do with the router. I would love to know how this affected anything since it was the video/audio connection I wanted was local.
JC
Similar Messages
-
ASA 5505 & VPN Client blocking access to local lan
I have setup a IPSec vpn client connection to a Cisco ASA 5505, when I connect to the unit it fully authenticates and issues me an ip address on the local lan however when I attempt to connect to any service on the local lan the following message is displayed in the log can you help:
Teardown UDP connection 192.168.110.200 53785 192.168.110.21 53 outside:192.168.110.200/53785(LOCAL\username) to inside 192.168.110/53
See the attached file for a sanitised version of the config.This is a sanitised version of the crypto dump, I have changed the user and IP addresses
ASA5505MAN# debug crypto ikev1 7
ASA5505MAN# debug crypto ipsec 7
ASA5505MAN# Jul 24 15:49:03 [IKEv1]IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=fbc167de) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
Jul 24 15:49:03 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, processing hash payload
Jul 24 15:49:03 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, processing notify payload
Jul 24 15:49:03 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, Received keep-alive of type DPD R-U-THERE (seq number 0xa6dcb72)
Jul 24 15:49:03 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, Sending keep-alive of type DPD R-U-THERE-ACK (seq number 0xa6dcb72)
Jul 24 15:49:03 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, constructing blank hash payload
Jul 24 15:49:03 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, constructing qm hash payload
Jul 24 15:49:03 [IKEv1]IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=515fbf7e) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
Jul 24 15:49:18 [IKEv1]IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=2fe7cf10) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
Jul 24 15:49:18 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, processing hash payload
Jul 24 15:49:18 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, processing notify payload
Jul 24 15:49:18 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, Received keep-alive of type DPD R-U-THERE (seq number 0xa6dcb73)
Jul 24 15:49:18 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, Sending keep-alive of type DPD R-U-THERE-ACK (seq number 0xa6dcb73)
Jul 24 15:49:18 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, constructing blank hash payload
Jul 24 15:49:18 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, constructing qm hash payload
Jul 24 15:49:18 [IKEv1]IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=e450c971) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
Jul 24 15:49:28 [IKEv1]IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=e6c212e7) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
Jul 24 15:49:28 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, processing hash payload
Jul 24 15:49:28 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, processing notify payload
Jul 24 15:49:28 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, Received keep-alive of type DPD R-U-THERE (seq number 0xa6dcb74)
Jul 24 15:49:28 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, Sending keep-alive of type DPD R-U-THERE-ACK (seq number 0xa6dcb74)
Jul 24 15:49:28 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, constructing blank hash payload
Jul 24 15:49:28 [IKEv1 DEBUG]Group = VPN-Users, Username = username, IP = x.x.x.x, constructing qm hash payload
Jul 24 15:49:28 [IKEv1]IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=af5953c7) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
This is the isakmp dump
ASA5505MAN# show crypto isakmp
IKEv1 SAs:
Active SA: 2
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 2
1 IKE Peer: x.x.x.x
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
2 IKE Peer: x.x.x.x
Type : user Role : responder
Rekey : no State : AM_ACTIVE
There are no IKEv2 SAs
Global IKEv1 Statistics
Active Tunnels: 1
Previous Tunnels: 40
In Octets: 322076
In Packets: 2060
In Drop Packets: 84
In Notifys: 1072
In P2 Exchanges: 35
In P2 Exchange Invalids: 0
In P2 Exchange Rejects: 0
In P2 Sa Delete Requests: 24
Out Octets: 591896
Out Packets: 3481
Out Drop Packets: 0
Out Notifys: 2101
Out P2 Exchanges: 275
Out P2 Exchange Invalids: 0
Out P2 Exchange Rejects: 0
Out P2 Sa Delete Requests: 284
Initiator Tunnels: 231
Initiator Fails: 221
Responder Fails: 76
System Capacity Fails: 0
Auth Fails: 54
Decrypt Fails: 0
Hash Valid Fails: 0
No Sa Fails: 30
Global IKEv2 Statistics
Active Tunnels: 0
Previous Tunnels: 0
In Octets: 0
In Packets: 0
In Drop Packets: 0
In Drop Fragments: 0
In Notifys: 0
In P2 Exchange: 0
In P2 Exchange Invalids: 0
In P2 Exchange Rejects: 0
In IPSEC Delete: 0
In IKE Delete: 0
Out Octets: 0
Out Packets: 0
Out Drop Packets: 0
Out Drop Fragments: 0
Out Notifys: 0
Out P2 Exchange: 0
Out P2 Exchange Invalids: 0
Out P2 Exchange Rejects: 0
Out IPSEC Delete: 0
Out IKE Delete: 0
SAs Locally Initiated: 0
SAs Locally Initiated Failed: 0
SAs Remotely Initiated: 0
SAs Remotely Initiated Failed: 0
System Capacity Failures: 0
Authentication Failures: 0
Decrypt Failures: 0
Hash Failures: 0
Invalid SPI: 0
In Configs: 0
Out Configs: 0
In Configs Rejects: 0
Out Configs Rejects: 0
Previous Tunnels: 0
Previous Tunnels Wraps: 0
In DPD Messages: 0
Out DPD Messages: 0
Out NAT Keepalives: 0
IKE Rekey Locally Initiated: 0
IKE Rekey Remotely Initiated: 0
CHILD Rekey Locally Initiated: 0
CHILD Rekey Remotely Initiated: 0
IKEV2 Call Admission Statistics
Max Active SAs: No Limit
Max In-Negotiation SAs: 12
Cookie Challenge Threshold: Never
Active SAs: 0
In-Negotiation SAs: 0
Incoming Requests: 0
Incoming Requests Accepted: 0
Incoming Requests Rejected: 0
Outgoing Requests: 0
Outgoing Requests Accepted: 0
Outgoing Requests Rejected: 0
Rejected Requests: 0
Rejected Over Max SA limit: 0
Rejected Low Resources: 0
Rejected Reboot In Progress: 0
Cookie Challenges: 0
Cookie Challenges Passed: 0
Cookie Challenges Failed: 0
Global IKEv1 IPSec over TCP Statistics
Embryonic connections: 0
Active connections: 0
Previous connections: 0
Inbound packets: 0
Inbound dropped packets: 0
Outbound packets: 0
Outbound dropped packets: 0
RST packets: 0
Recevied ACK heart-beat packets: 0
Bad headers: 0
Bad trailers: 0
Timer failures: 0
Checksum errors: 0
Internal errors: 0
ASA5505MAN#
and this is the ipsec dump
ASA5505MAN# show crypto ipsec sa
interface: outside
Crypto map tag: SYSTEM_DEFAULT_CRYPTO_MAP, seq num: 65535, local addr: x.x.x.x
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (192.168.110.200/255.255.255.255/0/0)
current_peer: x.x.x.x, username: username
dynamic allocated peer ip: 192.168.110.200
#pkts encaps: 778, #pkts encrypt: 778, #pkts digest: 778
#pkts decaps: 1959, #pkts decrypt: 1959, #pkts verify: 1959
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 778, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: x.x.x.x/4500, remote crypto endpt.: x.x.x.x/54599
path mtu 1500, ipsec overhead 82(52), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 532B60D0
current inbound spi : 472C8AE7
inbound esp sas:
spi: 0x472C8AE7 (1194101479)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, NAT-T-Encaps, IKEv1, }
slot: 0, conn_id: 241664, crypto-map: SYSTEM_DEFAULT_CRYPTO_MAP
sa timing: remaining key lifetime (sec): 26551
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x532B60D0 (1395351760)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, NAT-T-Encaps, IKEv1, }
slot: 0, conn_id: 241664, crypto-map: SYSTEM_DEFAULT_CRYPTO_MAP
sa timing: remaining key lifetime (sec): 26551
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
Crypto map tag: outside_map0, seq num: 1, local addr: x.x.x.x
access-list outside_cryptomap_1 extended permit ip 192.168.110.0 255.255.255.0 192.168.0.0 255.255.0.0
local ident (addr/mask/prot/port): (192.168.110.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (192.168.0.0/255.255.0.0/0/0)
current_peer: x.x.x.x
#pkts encaps: 39333117, #pkts encrypt: 39333117, #pkts digest: 39333117
#pkts decaps: 24914965, #pkts decrypt: 24914965, #pkts verify: 24914965
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 39333117, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0
local crypto endpt.: x.x.x.x/0, remote crypto endpt.: x.x.x.x/0
path mtu 1500, ipsec overhead 58(36), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: F6943017
current inbound spi : E6CDF924
inbound esp sas:
spi: 0xE6CDF924 (3872258340)
transform: esp-3des esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 163840, crypto-map: outside_map0
sa timing: remaining key lifetime (kB/sec): (3651601/15931)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xF6943017 (4136906775)
transform: esp-3des esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 163840, crypto-map: outside_map0
sa timing: remaining key lifetime (kB/sec): (3561355/15931)
IV size: 8 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
ASA5505MAN# -
Why do I have bandwidth issues only with iTunes.?this is not the first time and its not common it's every time. I watch Netflix on a daily basis it may buffer in middle of something once or twice a day. From what I've read to send HD only needs around 5-8 Mbps I have 15 at my house I can nearly watch an iTunes movie with out it buffering about every 5 minutes.
If you are genuinely getting sustained 15 Mbps downloads iTunes content should play immediately and not stop/startl - the fact this is happening suggests an issue with your LAN or wider internet connection (or the AppleTV).
Netflix works differently - the image quality is rate adaptive and decreases as available speed drops, consequently I can play Netflix withing seconds whereas HD iTunes movies need to buffer for about 20 mins on my 4.5 Mbps connection. -
Does 10.4.3 fix anybody's "insufficient bandwidth" issue?
Apple claims that 10.4.3 makes progress on curing the "insufficient bandwidth" issue that plagues many ichat users. It did not help me. Did it help you?
hi Cgist,
iChat needs a minimum connection speed of 100kbps for even 1-1 Video chats.
This can be capped by setting System Preferences > Quicktime > Streaming tab to a speed less than than this.
It can be further capped by iChat itself in Preferences > Video Section > Bandwidth Drop down (even setting it to 100 here will enable only abbout 80% of the bandwidth available.
There is also a difference between pure internet connection speed and the bandwidth available. Imagine a 4 lane carriage way. It may have 4 lanes and a speed of 70 mhp but add cars and coaches(buses) and lorries(trucks) then it soonn becomes congested.
You can test your Internet connection speed here http://www.dslreports.com/stest
You can check the settings above.
You also need to get your Buddy to check.
Also any other app that is using the internet is also eating into that bandwidth as are other computers sharing the connection.
Ralph -
Configuration of Cisco WLC 2504 with Local LAN static IP and DHCP
I want to configure Cisco WLC 2504 with Local LAN static IP and WLC 2504 with DHCP so that APs can be connect with controller.
Currently i am using WLC 2504 with DHCP so can anyone suggest how to do that..Hi Sandeep
The info is correct, if we're using code below 7.3.101.0.
This issue is fixed via the below bug id.
CSCto01390 Unable to ping AP's directly connected to a 2500 controller
check the fix that is updated on 7.4, 7.5 RNE.
http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn75.html
Note
Directly connected APs are supported only in Local mode.
http://www.cisco.com/en/US/prod/collateral/wireless/ps6302/ps8322/ps11630/data_sheet_c78-645111.html
For quick and easy deployment Access Points can be connected directly to 2504 Wireless LAN Controller via two PoE (Power over Ethernet) ports
Thanks
Saravanan -
Vpn site to site isa 570 to asa 5505 multiple local lan
Hello, i have configured a site to site vpn with a asa 5505
In the tunnel will pass the network 172.x.x.x/16 and 192.168.x.x/24 from local isa to a single lan 192.168.x.x/24 on remote asa
I have create a group network address and i put the the default_lan and the other lan in it
In the tunnell configuration i have use this group address with local lan parameter
When the tunnel was up in the routing table i view the remote lan on interface ipsec0 but also i view the local lan on interface ipsec0
Is this configuration n ot supported?
Thank best regardsHello, thank for answer.
The problem is that tha second lan is a routing static lan.
The ip address of ISA is 172.16.10.254/16 and the default_lan is 172.16.0.0/16
The second lan is 202.1.1.0/24 and it is a staic lan on another gateway.
When the site-to-site ipsec go up in routing table i see three route on interface ipsec0:
The remote lan, the default-lan (that is also on default interface. Behaviour?) and a subnet lan 172.16.10.0/24.
If i ping from a lan pc an ip of subnet 172.16.10.0/24, i see that the arp is equal at mac-address of ISA and i have a problem on the lan. It's normal?
Best regards -
Cisco ASA 5505 VPN help for local lan access.
Hi all,
I am very new to Cisco systems. Recently I was tasked to enable local lan access for one of my server. The problem is this. I have this server with 2 interfaces. One interface to my FTP server(192.168.2.3) and the other to the Cisco ASA(192.168.1.1). Whenever I connect the server to Cisco Anyconnect VPN, I am unable to access the FTP server anymore.
I googled and found out that the problem is because the metric level is 1 for Ciscoanyconnect network interface which causes all traffic to go through the Cisco VPN Interface. Another problem is I can't change the metric of the Cisco VPN Interface as whenever I reconnect to the VPN, the metric resets back to 1 again. I tried to follow some guides to configure split tunnel but my traffic is still going through the VPN connection.
Anyone can tell me what I am missing here? Sorry I am very new to Cisco systems. Spent about 5 days troubleshooting and I feel I am getting it soon. Anyone can guide me what else I am supposed to do?
What I did> Configuration>> Remote access VPN>> Network Client Access>> Group Policies>> Advanced>> Split Tunneling>> Uncheck Inherit and select "Exclude Network List below.>> Uncheck Network List and select Manage, Add 192.168.2.0/24 to permit.
Really appreciate if anyone can tell me what else I can do to ensure my server has access the my FTP Server after connecting to the VPN.
Thanks all!
Wen QiHi,
Try adding the following configuration
policy-map global_policy
class inspection_default
inspect pptp
And then try again.
I'm not 100% would you need to perhaps allow GRE through the firewall even after that. (Protocol 47)
- Jouni -
Transparent Tunneling and Local Lan Access via VPN Client
Remote users using Cisco VPN 4.2 connect successfully to a Cisco Pix 515 (ver. 6.3). The client is configured to allow Transparent Tunneling and Local Lan access, but once connected to the Pix, these two options are disabled. What configuration changes are required on the Pix to enable these options? Any assistance will be greatly appreciated.
Mike BowyerHi Mike,
"Transparent Tunneling" and "Local Lan Access" are two different things. "Transparent Tunneling" is dealing with establishing an IPSec Tunnel even if a NAT device is between your client and the VPN-Headend-Device. "Local LAN Access" is dealing with access to devices in the LAN your VPN-Client-Device is connected to.
What do you mean exactly with "disabled once the connection is made" ?
You can check the local LAN Access by having a look at the Route-Table of the VPN-Client:
Right Click the yellow VPN-lock Icon in System-Tray while the VPN-Connection is active and select "Statistics ...". Have a look at the second register page "route details".
Are any local LAN routes displayed when your are connected ?
And - always remember two important restrictions the Online Help of the VPN-Client is mentioning:
1: This feature works only on one NIC card, the same NIC card as the tunnel.
2: While connected, you cannot print or browse the local LAN by name; when disconnected, you can print and browse by name.
Carsten
PS: Removing Split Tunnel won't enable local LAN access as all traffic would be sent into the IPSec tunnel. -
How to get the local lan connecting all the system names ?
how to get the local lan connecting all the system names using java?
any body know then send the coding or solutionThis question is asked and answered repeatedly. Search the forum.
-
I have a local LAN DNS server. My preferences point to that server. Why does dig give me 8.8.8.8 as my DNS server?
Something is/was modifying my DNS preferences to 8.8.8.8 It seems to be pointed correctly now (at my local LAN DNS server), but why was it pointed at 8.8.8.8 before? I never want it pointed to 8.8.8.8You've hit the nail on the head Ben. For point to point communications, the IP addresses should be fixed, therefore there is no need for DNS. If a DNS is configured, the NIC (Network Interface Card) drivers will try to contact it.
In my test system, I need DNS for the test computer, but I am communicating with a dedicated Spectrum Analyzer over TCP/IP. So I added a second NIC. The main NIC is configured for DNS and all that jazz. The second NIC (plugged into PCI slot) is configured with a hard coded address, no DNS, no Gateway, nothing else. I connect that NIC to the spectrum analyzer using a crossover cable. The analyzer is configured with a hard coded address also. Now my computer can get on our company network, and the spectrum analyzer is isolated from the network, so it can't catch any viruses, etc., and it still talks to the computer. When using a configuration such as this, it is best to use a dedicated address for the 2nd NIC and spectrum analyzer in the range of 192.168.100.0 to 254
- tbob
Inventor of the WORM Global -
Unable to resolve local lan hostnames
As a fairly recent Mac convert, one of life's little niggles is the seeming inability of Tiger (10.4.8) to resolve the names of WinXp PCs on the local LAN. I can browse to them fine, set up shares to them, use smbclient to them, but can't ping them or use their names in things like VNC or RDC.
I know I can put names in the etc/hosts file, but that dictates using static IP addresses, which I'd rather not do. I've seen many other posts regarding this problem, but no obvious solutions. Anyone got one?
Thanks!Hi Praveen,
i am guessing that you have a supernet on the LAN. I checked the config and saw the following;
Host_Name=MagnaQuestGF
Device_Name=MagnaQuestGF
Ipv4_address=172.16.8.4
Ipv4_subnet_mask=255.255.248.0
IPv4_default_gateway=172.16.9.1
IPv4_Primary_DNS=172.16.9.1
would it be possbible to put up a simple, even 'windows paint' diagram of the network setup, IP addresses and masks.
I am guessing that the PC hosts are in one network and the wireless clients might be in another network, hence they can't 'talk' to each other.
Can you also mention the model of brand and model of the router you are using ?
it would be interesting to also see the network mask given by DHCP to the PC hosts on the LAN.
Sorry for this extra hassle, but adding a picture can be most descriptive.
regards dave -
I have a user that has an Exchange email account setup on his iPad (Wi-Fi only) and it works fine when he is away from the company. When he is connected to the companies Wi-Fi and is on the same local subnet as the Exchange server he can't connect to the server. He receives this error "Cannot Get Mail The connection to the server failed" Does anybody have any ideas, thanks?
JoeMy guess would be that your LAN's DNS server can't do internal routing. Many low-cost firewall/routers can't resolve a external domain name that point's back to itself. Assuming you have Outlook Web Access enabled, you can test this from a PC or Mac. In a browser, type in the domain name you used to configure the iPad.
For example, Outlook Web Access for my Exchange Server when I'm outside of the office is www.mycompany.com/owa. With my old router, if I typed that in while I was in the office, it would give me page not found. Typing in the local LAN IP address of the server rather than the domain name would work. (e.g.: 192.168.1.2/owa) Because www.mycompany.com pointed back to the LAN I was on, the routing failed. But of course, using the internal IP address wouldn't work when outside the office unless I also configured a VPN. (The VPN would connect the iPad to the "directly" to the internal LAN.)
I don't have any simple solution. What I did was replaced my router. There were other reasons I needed to replace the router, but one of the additional benefits was to get the internal routing.
So either get a different router or internal DNS server (or reconfigure the internal DNS server to route correctly, if possible. Or setup a VPN and configure the iPad to only use the internal IP address of the Exchange server. -
can lync server be run on local lan only ? for example a LAN in a remote location where there is no internet ? however the size of LAN is large with lots of client spread over a distant area.
Also is Lync server bundled in Exchange Server 2013 ?
sorry i am new to this.
regards
FaisalAgree with Anthony. yes, you can run lync on LAN but users will be able to connect with lync on LAN only cand can't connect from their home/outside.
On premises, Lync Server is not Bundle with Exchange Server 2013. you will need to buy it's licenses and cals.
if you host it online at cloud like office 365, Lync is bundle with Exchange 2013
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer" -
WAP321 Isolate guest from local LAN
I have been searching for an easy explanaition on how to create a guest SSID and isolate them from accessing local LAN, however, they need (obviosly) to be able to use the default GW and DNS server on local LAN, as I can not se any way that the WAP321 can act as an dhcp server for individual SSID's and thus use external DNS and act as default GW for independant SSID's.
Please someone tell me straight forward how to do this.
I'd like to do this without using VLAN tagging.
Thks
KristianHello
The ACL should not affect the "non-guest" SSID at all, make shure you have not "assigned" the ACL to non guest.
Prior responcce:
The Switches in this environment is layer 2, thus no VLAN tagging (it is a SOHO environment, actually a resturant) The DNS/DCHP is delivered by the internett router, as I mentioned earlier, if you have seperate DNS/DHCP units, you will have to allow acces to these IP's, you should then limit the TCP/UDP ports to DNS/DHCP port. (I assume that Guest should not have access to domain or domain servers, in your enviroment you will as mentioned have to give access to relevant TCP/UDP ports on the server/DC)
If you have switches VLAN cappable, I'd use VLAN tagging, that would be a "cleaner" and probably more secure solutions
Hope this helps
Br
hkl -
Unable to see local (LAN)_share drive and pc on server 2012
Hello,
we have windows server 2012 and almost everything is working well.
we have installed AD and domain controllers but we do not use domain controllers. we use mostly for RDP connection.
What we are trying to do is that other users on the same network can see the share folder setup on windows 2012 but no sucess
they see all other network devices but not windows 2012.... they even see our old 2003 server.
I am banging my head for almost 1 week to fix this issue.
and also, the w2012 server does not see any others local share device
the firewall is disable and sharing is on for pubic on w2012.
is there a gpo that is blocking it or something else
the fact that is not is on the same workgroup (but 2003 is on different workgroup and other people can see the see that server )
any guide or indices because i am out of idea and i am nearly to throw my server because of that :(
Thank youSorry for my English and for misunderstanding.
We have 2 servers only : one 2003 and other 2012
2003 is running but rarely used.
2012 is a new server : AD, RDP Licensing Server and file share server are on the same OS (same machine)
You also have another server (2) that's running windows 2003 and is not joined to the domain (workgroup only).
No, it is configured as domain too but not same as 2012.
Users are bringing in their own devices, plugging it into a LAN network (that's on the same subnet as the servers) and are not able to see the 2012R2 file server but they can see and connect to 2003 server.
Correct
Thank you
Maybe you are looking for
-
I havent had any problems with my iPad2 until today. I cannot download anything from the app store or iTunes. Doesn't matter if it's a previously purchased app or a new one. Help??? I just get a message--- after a long wait where the app icon says "w
-
Upgrade again.. but w/o DVD drive:-)
Hi, +/* Sorry to bother the community with maybe same question: I see many regarding upgrades. Unfortunately I didn't find a solution for my particular situation, so here it goes again ...+ 1) I have a G5 with 10.3.9; need to upgrade to a higher v-n
-
Notes has started doing strange things. First I couldn't get it to sync (but I got that problem fixed). Now, when I add anything to a note on my iPhone 4S (version 6.0), it double spaces everything I write. However, when I look at the note (or ent
-
Is there a way that I can call a Swing application
Hi all, Is there a way that I can call a Swing application from html page. fox example when user clicks on the url in html will activate a swing local application thanks
-
Having a prob actually getting texts anywhere near the time they are sent - sometimes its even a couple of days late. The connections good wherever i am. The firmware is up to date and it was happening even before i upgraded. I spoke to Virgin Uk (th