Can't connect sites in MPLS
Have a 4 site MPLS with provider-managed CE routers. Final configuration will be Internet provided to all sites through HQ, along with VoIP at all sites. Currently between HQ and RS1 is a p2p T1.
Was told by provider that all I'll need to do is connect the MPLS router to my core switch which didn't work. For now, just trying to get RS3 and RS4 up on MPLS. When they connect their network to their MPLS router nothing happens. I have the swtich at their location set to the MPLS router as the gateway. If I add an ip route to their network across the HQ MPLS router doesn't do anything.
Attached is my core switch config. I have the MPLS router connected to FE0/3.
Am I way off base or out of my leauge or what?
Thanks!
Thanks! Couldn't configure it with an IP (or at least the one I tried), and aren't sure what you meant by SVI. But, I changed the port from trunk to access and it worked. Now it's:
fe0/1
description AT&T MPLS
switchport access vlan 100
switchport mode dynamic desirable
switchport voice vlan 200
no ip address
spanning-tree portfast
And it's working for at least the data side of things. Haven't tackeled voice yet, but will this configuration be right for voice?
Similar Messages
-
RV180 can't connect site-2-site with osx server
Trying to connect an rv180 to an os x server
Getting the following (have redacted IP's etc)
Thu Oct 31 01:34:39 2013 (GMT +0000): [router970EB8] [IKE] INFO: accept a request to establish IKE-SA: redacted.somwhere.com
Thu Oct 31 01:34:39 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:34:39 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:34:55 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1. ESP 194.xx.xx.xx->77.xx.xxx.174
Thu Oct 31 01:35:13 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Invalid SA protocol type: 0
Thu Oct 31 01:35:13 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1.
Thu Oct 31 01:35:22 2013 (GMT +0000): [router970EB8] [IKE] INFO: Using IPsec SA configuration: 192.168.2.0/24<->192.168.1.0/24
Thu Oct 31 01:35:22 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:35:22 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:35:58 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1. ESP 194.xx.xx.xx->77.xx.xxx.174
Thu Oct 31 01:36:11 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Phase 1 negotiation failed due to time up for 194.xx.xx.42[500]. 3e3e7706187e45f5:0000000000000000
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: Using IPsec SA configuration: 192.168.2.0/24<->192.168.1.0/24
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: Initiating new phase 1 negotiation: 77.xx.xxx.174[500]<=>194.xx.xx.42[500]
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: Beginning Aggressive mode.
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: NAT-Traversal is Enabled
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: [isakmp_agg.c:257]: XXX: NUMNATTVENDORIDS: 3
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: [isakmp_agg.c:261]: XXX: setting vendorid: 4
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: [isakmp_agg.c:261]: XXX: setting vendorid: 8
Thu Oct 31 01:36:12 2013 (GMT +0000): [router970EB8] [IKE] INFO: [isakmp_agg.c:261]: XXX: setting vendorid: 9
Thu Oct 31 01:36:47 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1. ESP 194.xx.xx.42->77.xx.xxx.174
Thu Oct 31 01:36:57 2013 (GMT +0000): [router970EB8] [IKE] INFO: Using IPsec SA configuration: 192.168.2.0/24<->192.168.1.0/24
Thu Oct 31 01:36:57 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:36:57 2013 (GMT +0000): [router970EB8] [IKE] INFO: remote configuration for identifier "redacted.somwhere.com" found
Thu Oct 31 01:37:30 2013 (GMT +0000): [router970EB8] [IKE] ERROR: Phase 2 negotiation failed due to time up waiting for phase1. ESP 194.xx.xx.42->77.xx.xxx.174
Have checked all settings
Tried main and aggressive mode
Been on this for nearly 4 hours and getting no where.
Can anyone help?
ThanksHave tried twice on the support chat but got absolutely nowhere so far.
Will try support chat again but not holding my breath.
Works fine with a checkpoint; and a netscreen :-S -
MPLS Handling of Aggregated ADSL-connected sites
I'm familiar with serially-connected sites entering an MPLS core, where there is a physical connection associated with each site, and so the site is simply identifiable to the MPLS PE by virtue of a physical port. However, I'm trying to get my head round how to handle ADSL connections, where many sites' traffic is aggregated into one bearer. How does the MPLS network associate the right traffic with the right site under these conditions? Sorry if this is a bit of a "dumb newbie" question, but I've googled extensively, and just haven't got to the stage where I feel confident in my understanding.
JimHi Jim,
When using DSL most architectures use PPPoA/PPPoE (you could just bridge at the dslam and use no PPP but that would result in a subinterface a VRF could be configured on).
PPP will create a virtual-access interface per PPP authentication (username).
When the virtual interface is being created the provider router (LNS) will ask a radius server if the user can be granted access. If yes, the radius can also give the router configuration information which can include IP address and VRF.
Ultimately the traffic is kept separate because point to point logical sessions can be built on top of a multi access network (PPPoE).
Hope this helps,
Matt Ayre -
VPN Client can't reach router or hosts, but can reach other connected sites.
We have a VPN client configuration on a 2901 router. The client passes authentication and connects fine. When connected, cannot reach the 2901 or any devices directly behind it, BUT can reach routers and hosts that are connected to the same 2901 through site to site connections.
Few notes:
I have added some lines excluding NAT in a few different ways, but does not resolve.
I have switched the RAP rool from 10.96.20.x to 172.21.20.x and can then connect to the local host. Appears to be a routing issue to the 10.x network, but I can't seem to find the solution.
Any help would be greatly appreciated. Here is the config:
boot-start-marker
boot system flash
boot system flash:c2900-universalk9-mz.SPA.153-2.T.bin
no ip domain lookup
ip inspect log drop-pkt
ip inspect name FIREWALL tcp
ip inspect name FIREWALL udp
ip inspect name FIREWALL ftp
ip inspect name FIREWALL fragment maximum 256 timeout 1
ip inspect name FIREWALL ntp
ip inspect name FIREWALL pptp
ip inspect name FIREWALL dns
ip inspect name FIREWALL l2tp
ip inspect name FIREWALL pop3
ip inspect name FIREWALL icmp router-traffic
no ipv6 cef
crypto isakmp policy 1
encr aes
authentication pre-share
group 2
crypto isakmp policy 5
encr 3des
authentication pre-share
group 2
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp policy 95
authentication pre-share
group 2
crypto isakmp policy 99
hash md5
authentication pre-share
group 2
crypto isakmp policy 110
hash md5
authentication pre-share
crypto isakmp client configuration group VPN-RAS
key *********
dns 10.96.17.2 10.1.200.50
wins 10.96.17.2 10.1.200.50
domain mine.com
pool RAPOOL
acl SPLIT
save-password
split-dns mind.com
netmask 255.255.255.0
crypto isakmp profile USERS
match identity group VPN-RAS
client authentication list DOMAIN
isakmp authorization list VPN-RAS
client configuration address respond
keepalive 300 retry 5
crypto ipsec transform-set AES128 esp-aes esp-sha-hmac
mode tunnel
crypto ipsec transform-set 3DES esp-3des esp-sha-hmac
mode tunnel
crypto ipsec transform-set DES esp-des esp-md5-hmac
mode tunnel
crypto ipsec transform-set 3DES-MD5 esp-3des esp-md5-hmac
mode tunnel
crypto ipsec transform-set DES-SHA esp-des esp-sha-hmac
mode tunnel
crypto ipsec transform-set myset esp-3des esp-sha-hmac
mode tunnel
crypto dynamic-map dynmap 1
set transform-set AES128
set isakmp-profile USERS
crypto map COMPANY_VPN 10 ipsec-isakmp
set peer *******
set transform-set 3DES-MD5
match address PA-VPN
qos pre-classify
crypto map COMPANY_VPN 50 ipsec-isakmp
set peer ******
set transform-set AES128
match address VPN
qos pre-classify
crypto map COMPANY_VPN 999 ipsec-isakmp dynamic dynmap
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address 37.222.111.224 255.255.255.248
ip access-group INBOUND in
no ip redirects
no ip unreachables
no ip proxy-arp
ip verify unicast reverse-path
ip flow ingress
ip flow egress
ip nat outside
ip inspect FIREWALL out
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
no mop enabled
crypto map COMPANY_VPN
interface GigabitEthernet0/1
no ip address
ip flow ingress
duplex auto
speed auto
interface GigabitEthernet0/1.17
description LAN
encapsulation dot1Q 17
ip address 10.96.17.253 255.255.255.0
ip access-group OUTBOUND in
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in
standby 0 ip 10.96.17.254
standby 0 priority 110
standby 0 preempt
standby 0 track 1 decrement 20
interface GigabitEthernet0/1.27
description VOICE
encapsulation dot1Q 27
ip address 192.168.17.254 255.255.255.0
ip access-group OUTBOUND in
ip helper-address 10.96.17.2
ip flow ingress
ip nat inside
ip virtual-reassembly in
h323-gateway voip bind srcaddr 192.168.17.254
ip local pool RAPOOL 10.96.20.50 10.96.20.150
ip forward-protocol nd
ip nat inside source route-map NAT-POOL interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 37.222.111.223
ip route 10.96.16.0 255.255.255.0 10.96.17.250
ip route 172.22.1.0 255.255.255.0 10.96.17.250
ip route 172.22.2.0 255.255.255.0 10.96.17.250
ip route 172.22.3.0 255.255.255.0 10.96.17.250
ip route 192.168.16.0 255.255.255.0 10.96.17.250
ip access-list extended DMZ
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
permit ip any any
ip access-list extended GUEST
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
permit ip any any
ip access-list extended INBOUND
deny ip 80.25.124.0 0.0.0.255 any
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
permit udp host 173.239.147.114 any eq isakmp
permit esp host 173.239.147.114 any
deny ip 192.168.0.0 0.0.255.255 any
permit udp any host 37.222.111.224 eq isakmp
permit udp any host 37.222.111.224 eq non500-isakmp
permit esp any host 37.222.111.224
ip access-list extended NAT
deny ip 10.96.20.0 0.0.0.255 any
deny ip any 10.96.20.0 0.0.0.255
permit ip 192.168.0.0 0.0.255.255 any
permit ip 10.0.0.0 0.255.255.255 any
ip access-list extended NONAT
permit ip any 192.168.0.0 0.0.255.255
permit ip any 10.0.0.0 0.255.255.255
ip access-list extended OUTBOUND
deny udp any host 22.55.77.106 eq isakmp
deny udp any host 22.55.77.106 eq non500-isakmp
deny esp any host 22.55.77.106
permit ip any any
ip access-list extended PA-VPN
permit ip 10.0.0.0 0.255.255.255 10.96.18.0 0.0.0.255
permit ip 10.0.0.0 0.255.255.255 192.168.18.0 0.0.0.255
permit ip 192.168.0.0 0.0.255.255 10.96.18.0 0.0.0.255
permit ip 192.168.0.0 0.0.255.255 192.168.18.0 0.0.0.255
ip access-list extended SPLIT
permit ip 10.0.0.0 0.255.255.255 any
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended VPN
permit ip 10.96.16.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.96.17.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.96.18.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.96.0.0 0.0.255.255 192.168.0.0 0.0.255.255
permit ip 10.96.0.0 0.0.255.255 10.0.0.0 0.255.255.255
permit ip 192.168.16.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.17.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.18.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.17.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 192.168.18.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 172.22.0.0 0.0.255.255 10.0.0.0 0.255.255.255
permit ip 172.22.0.0 0.0.255.255 192.168.0.0 0.0.255.255
route-map NAT-POOL deny 5
match ip address NONAT
route-map NAT-POOL permit 10
match ip address NATWe have a VPN client configuration on a 2901 router. The client passes authentication and connects fine. When connected, cannot reach the 2901 or any devices directly behind it, BUT can reach routers and hosts that are connected to the same 2901 through site to site connections.
Few notes:
I have added some lines excluding NAT in a few different ways, but does not resolve.
I have switched the RAP rool from 10.96.20.x to 172.21.20.x and can then connect to the local host. Appears to be a routing issue to the 10.x network, but I can't seem to find the solution.
Any help would be greatly appreciated. Here is the config:
boot-start-marker
boot system flash
boot system flash:c2900-universalk9-mz.SPA.153-2.T.bin
no ip domain lookup
ip inspect log drop-pkt
ip inspect name FIREWALL tcp
ip inspect name FIREWALL udp
ip inspect name FIREWALL ftp
ip inspect name FIREWALL fragment maximum 256 timeout 1
ip inspect name FIREWALL ntp
ip inspect name FIREWALL pptp
ip inspect name FIREWALL dns
ip inspect name FIREWALL l2tp
ip inspect name FIREWALL pop3
ip inspect name FIREWALL icmp router-traffic
no ipv6 cef
crypto isakmp policy 1
encr aes
authentication pre-share
group 2
crypto isakmp policy 5
encr 3des
authentication pre-share
group 2
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp policy 95
authentication pre-share
group 2
crypto isakmp policy 99
hash md5
authentication pre-share
group 2
crypto isakmp policy 110
hash md5
authentication pre-share
crypto isakmp client configuration group VPN-RAS
key *********
dns 10.96.17.2 10.1.200.50
wins 10.96.17.2 10.1.200.50
domain mine.com
pool RAPOOL
acl SPLIT
save-password
split-dns mind.com
netmask 255.255.255.0
crypto isakmp profile USERS
match identity group VPN-RAS
client authentication list DOMAIN
isakmp authorization list VPN-RAS
client configuration address respond
keepalive 300 retry 5
crypto ipsec transform-set AES128 esp-aes esp-sha-hmac
mode tunnel
crypto ipsec transform-set 3DES esp-3des esp-sha-hmac
mode tunnel
crypto ipsec transform-set DES esp-des esp-md5-hmac
mode tunnel
crypto ipsec transform-set 3DES-MD5 esp-3des esp-md5-hmac
mode tunnel
crypto ipsec transform-set DES-SHA esp-des esp-sha-hmac
mode tunnel
crypto ipsec transform-set myset esp-3des esp-sha-hmac
mode tunnel
crypto dynamic-map dynmap 1
set transform-set AES128
set isakmp-profile USERS
crypto map COMPANY_VPN 10 ipsec-isakmp
set peer *******
set transform-set 3DES-MD5
match address PA-VPN
qos pre-classify
crypto map COMPANY_VPN 50 ipsec-isakmp
set peer ******
set transform-set AES128
match address VPN
qos pre-classify
crypto map COMPANY_VPN 999 ipsec-isakmp dynamic dynmap
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address 37.222.111.224 255.255.255.248
ip access-group INBOUND in
no ip redirects
no ip unreachables
no ip proxy-arp
ip verify unicast reverse-path
ip flow ingress
ip flow egress
ip nat outside
ip inspect FIREWALL out
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
no mop enabled
crypto map COMPANY_VPN
interface GigabitEthernet0/1
no ip address
ip flow ingress
duplex auto
speed auto
interface GigabitEthernet0/1.17
description LAN
encapsulation dot1Q 17
ip address 10.96.17.253 255.255.255.0
ip access-group OUTBOUND in
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in
standby 0 ip 10.96.17.254
standby 0 priority 110
standby 0 preempt
standby 0 track 1 decrement 20
interface GigabitEthernet0/1.27
description VOICE
encapsulation dot1Q 27
ip address 192.168.17.254 255.255.255.0
ip access-group OUTBOUND in
ip helper-address 10.96.17.2
ip flow ingress
ip nat inside
ip virtual-reassembly in
h323-gateway voip bind srcaddr 192.168.17.254
ip local pool RAPOOL 10.96.20.50 10.96.20.150
ip forward-protocol nd
ip nat inside source route-map NAT-POOL interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 37.222.111.223
ip route 10.96.16.0 255.255.255.0 10.96.17.250
ip route 172.22.1.0 255.255.255.0 10.96.17.250
ip route 172.22.2.0 255.255.255.0 10.96.17.250
ip route 172.22.3.0 255.255.255.0 10.96.17.250
ip route 192.168.16.0 255.255.255.0 10.96.17.250
ip access-list extended DMZ
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
permit ip any any
ip access-list extended GUEST
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
permit ip any any
ip access-list extended INBOUND
deny ip 80.25.124.0 0.0.0.255 any
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
permit udp host 173.239.147.114 any eq isakmp
permit esp host 173.239.147.114 any
deny ip 192.168.0.0 0.0.255.255 any
permit udp any host 37.222.111.224 eq isakmp
permit udp any host 37.222.111.224 eq non500-isakmp
permit esp any host 37.222.111.224
ip access-list extended NAT
deny ip 10.96.20.0 0.0.0.255 any
deny ip any 10.96.20.0 0.0.0.255
permit ip 192.168.0.0 0.0.255.255 any
permit ip 10.0.0.0 0.255.255.255 any
ip access-list extended NONAT
permit ip any 192.168.0.0 0.0.255.255
permit ip any 10.0.0.0 0.255.255.255
ip access-list extended OUTBOUND
deny udp any host 22.55.77.106 eq isakmp
deny udp any host 22.55.77.106 eq non500-isakmp
deny esp any host 22.55.77.106
permit ip any any
ip access-list extended PA-VPN
permit ip 10.0.0.0 0.255.255.255 10.96.18.0 0.0.0.255
permit ip 10.0.0.0 0.255.255.255 192.168.18.0 0.0.0.255
permit ip 192.168.0.0 0.0.255.255 10.96.18.0 0.0.0.255
permit ip 192.168.0.0 0.0.255.255 192.168.18.0 0.0.0.255
ip access-list extended SPLIT
permit ip 10.0.0.0 0.255.255.255 any
permit ip 192.168.0.0 0.0.255.255 any
ip access-list extended VPN
permit ip 10.96.16.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.96.17.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.96.18.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 10.96.0.0 0.0.255.255 192.168.0.0 0.0.255.255
permit ip 10.96.0.0 0.0.255.255 10.0.0.0 0.255.255.255
permit ip 192.168.16.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.17.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.18.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.17.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 192.168.18.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 172.22.0.0 0.0.255.255 10.0.0.0 0.255.255.255
permit ip 172.22.0.0 0.0.255.255 192.168.0.0 0.0.255.255
route-map NAT-POOL deny 5
match ip address NONAT
route-map NAT-POOL permit 10
match ip address NAT -
I can't connect to Facebook, it doesn't even register the site, and I can't even ping it in CMD?
I can't connect to Facebook. I could this morning, but suddenly I can't anymore. It tries to load, and then says "The connection has timed out".
I also can't connect with Internet Explorer. However, I can connect with Firefox, or IE from other computer (Other computer also has other internet provider).
I can connect to any other site on the web, like I am now on Mozzila support.
When I go to run, CMD, and type "ping www.facebook.com" it also says "Request timed out", and 4 packets lost. When I ping it, I get "star.c10r.facebook.com [31.13.64.65]". When I search for that IP i get "Facebook Ireland Ltd".
When I do same ping on my other computer (and other internet provider) he pings "star.c10r.facebook.com [179.60.192.3]" and pings correctly. From that other computer I also can't ping first IP (31.13...), but from first computer (on which I can't go to Facebook site) I can ping second ping (179...) correctly, but I need to type it in manually. When I just type "ping www.facebook.com" it gives me that first IP that doesn't work (31...).
Why does it happen, and why do I get different IP's when I type "ping www.facebook.com"?
Any idea how to fix it?Some problems occurs when your Internet security program was set
to trust the previous version of Firefox, but no longer recognizes your
updated version as trusted. Now how to fix the problem: To allow
Firefox to connect to the Internet again;
* Make sure your Internet security software is up-to-date (i.e. you are running the latest version).
* Remove Firefox from your program's list of trusted or recognized programs. For detailed instructions, see
'''[https://support.mozilla.org/en-US/kb/configure-firewalls-so-firefox-can-access-internet Configure firewalls so that Firefox can access the Internet.]''' {web link}
Type '''about:preferences#advanced'''<Enter> in the address bar.
Under '''Advanced,''' Select '''Network.'''
Look for '''Configure How Firefox Connects''' and press the '''Settings''' button.
Check the settings.
Contact your ISP and have them check your service. -
Can only connect to HTTPS (secure) sites and can't connect to HTTP sites
In short I CAN ONLY connect to HTTPS sites, meaning secure.
I've narrowed this down to an issue regrading my mac book pro and the wireless router.
Router:
- not sure of the make model
- other computers CAN connect to this router and go online
My Mac:
- Mac Book Pro
- OS X 10.6
- I can connect to other wireless networks just fine
- I can surf the web for about 10 minutes or so then it blocks ALL http traffic
and i'm only allowed to https sites
going to a http site results in a "page is taking to long to respond"
please anything?The router is a Verizon MI424WR
hope that helps, but i doubt it will...
just to also clairfy http sites either go really slow then time out only never to come back, https are blazing fast -
I can't connect to a web site via the site's own WiFi.
This is a strange one. When I'm in the New York Public Library and connected to the internet via their WiFi I can connect to any web site EXCEPT the New York Public Library's! (www.nypl.org) It tries connecting then times out every time. I can connect to the NYPL's site when I'm not there from home or other WiFis public or private, and when there I can connect to it on my iPhone, but not from my computer with either Firefox or Safari. Other people with Macs can access the site from there and I went over my settings with one of them but could find no differences.
I'm using 10.5.7 and have the latest updates for Firefox and Safari and the latest updates for OSX. What's frustrating is that when I'm at the library doing research there are databases one can only access from there, not from outside, so it's a very odd situation. Using iPhone for such a reason is quite impractical, too so I'd appreciate any help anyone can offer. I'm sure it's a setting somewhere in my network prefs or something but I'm baffled as to what it might be - has anyone else ever run across something similar?
Thank you!I am hear at the New York Public Library now. I am connected to the internet on their WiFi but still cannot get to their site at the address http://www.nypl.org , it times out. I pinged them with this result:
Ping has started ...
ping: cannot resolve http://www.nypl.org: Unknown host
I tried "lookup" with the following result:
Lookup has started ...
; <<>> DiG 9.4.3-P1 <<>> http://www.nypl.org +multiline +nocomments +nocmd +noquestion +nostats +search
;; global options: printcmd
nypl.org. 182 IN SOA ns1.nypl.org. root.ns1.nypl.org. (
2002092709 ; serial
10800 ; refresh (3 hours)
3600 ; retry (1 hour)
10800 ; expire (3 hours)
10800 ; minimum (3 hours)
I have tried at other times to get to the site through links from other sites with no luck.
Thank you in advance for your time and attention. -
Can I connect an external hard drive to Time Capsule for off site back up?
I like having a copy of everything at another site in case of a house fire. Can I connect an external hard drive to Time Capsule to make a duplicate of what is on Time Capsule? I would store that hard drive at work and bring it home monthly or something to back up Time Capsule. Thanks!
Can I connect an external hard drive to Time Capsule to make a duplicate of what is on Time Capsule?
That is exactly what the Archive function on the Time Capsule is for. Connect a USB drive and click Archive, and a mirror image of your Time Capsule will be copied over to the USB drive. It's a slow process that will take 4-8 hours depending on how much data is on the Time Capsule, so best to start things late at night and let them run overnight.
Another option would be to use a commercial application like Carbon Copy Cloner to keep your backup. The advantage to this approach is that once the first "master" backup is done, the application will only back up the changes on the Time Capsule that have occurred since the last backup. So, subsequent backups will be much faster, probably only taking about 10-15 minutes. -
Why does Safari keep saying "it can't connect to the server" every time I try to access any sites?
I have the latest safari update for os x, which was working perfectly fine up until 3 days ago. Everytime I would try to access any site, safari would tell me it couldn't connect to the server, and I would have to refresh the page at least 5-10 times until I can access the site. I checked my internet, and it seems to be running perfectly. I also tried using Chrome and it had no problems accessing sites, too, so I know it's not my internet. :/
Is anyone else having the same problems?Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, reboot as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2. -
Hi, every time i try downloading ios5 it reaches 100% and then the connection times out and nothing happens after that; though the internet connection is fine as i can access other sites etc. what could be the problem?i tried using 2 different modems. Where can i download the ios5 from as my itunes is on my desktop which uses windows xp. Please help
Download iOS 5.1
iOS 5.1 (build 9B176) is compatible with iPad 1, iPad 2, iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3rd & 4th gen, and iPad 3. Additional builds are available for Apple TV 2 and Apple TV 3. The below download links are all direct downloads of iOS 5.1 from Apple.
iPad 1
iPad 2 Wi-Fi
iPad 2 GSM (AT&T)
iPad 2 CDMA (Verizon)
iPad 2,4
iPhone 3GS
iPhone 4 GSM (AT&T)
iPhone 4 CDMA (Verizon)
iPhone 4S
iPod touch 3G
iPod touch 4G
iPad 3 Wi-Fi
iPad 3 GSM
iPad 3 CDMA
Apple TV 2 (9B179b1)
Apple TV 3 (9B179b1)
Source: http://osxdaily.com/2012/03/07/ios-5-1-download/ -
I can not connect to my gmail on my Mac, also can't get to google athough I can get to my yahoo mail and some other sites Help!
Routing gmail through Mail.app:
imap-http://mail.google.com/support/bin/answer.py?answer=81379&topic=12814
pop-http://mail.google.com/support/bin/answer.py?answer=13275&topic=12810
More up-to-date advice here:
http://www.macworld.com/article/2033842/make-mail-and-gmail-play-nice.html#tk.nl _mwhelp
Note that you lose privacy when using Gmail (and Yahoo):
Gmail and Yahoo both scan users' emails. They do algorithmic analysis of your email messages, targeting ads that relate to the content of your messages. Defenders point out that "they", are not people, but machines. And they argue that it is a harmless way of making advertising relevant to users and raising revenues.
Others might say that whether a machine or a human is doing the work, the potential for a privacy breach is there. -
I ran the diagnostics in Itunes and this is the results
Firewall Information
Windows Firewall is on.
iTunes is enabled in Windows Firewall.
Connection attempt to Apple web site was unsuccessful.
The network connection timed out.
Basic connection to the store failed.
The network connection timed out.
Connection attempt to Gracenote server was successful.
The network connection timed out.
Last successful iTunes Store access was 2012-04-15 22:46:58.
Itunes just keeps loadingUse this article to continue trying to troubleshoot this issue.
Can't connect to iTunes Store
B-rock -
I can not connect to iswifter, some times it is connected and some time it is not connected and getting message " UNABLE TO CONNECT TO SERVER , CHECK YOUR INTERNET" but my internet connection is ok and I can open other web site with out any problem. Please guide me how to solve this issue.
Can't connect to the iTunes Store
http://support.apple.com/kb/TS1368
Cheers, Tom -
Can't connect to a site - all other sites working fine
Bizarre problem here: I can't connect to one particular site from my iMac. I have a WiFi network, using an Apple Airport Express. I can connect to this same site from my MacBook, connected to the same WiFi network.
Has any one encoutered this same problem before?Have you tried resetting Safari or clearing the cache (vs a full reset)? The command is in the Safari menu. My wife's PC sometimes has a similar problem with IE occasionally and requires the cache to emptied to fix it.
-
I can not connect to a web site using aol/ google with safari , only yahoo will connect to the site
I find i can only connect to some sites using yahoo. google and aol will not allow me to connect , what do I do?
First off, AppleTV doesn't give web access.
Second off, Apple's classic operating system compatibility with many websites is very limited. That's the operating system available in virtualization on Macs made prior to early 2006, and as a boot operating system on Macs on or before 2003.
So without knowing what you have that is compatible, we can't give you really good advice on what to make it work. Identify your Mac, if you have one:
http://discussions.apple.com/docs/DOC-2881
And tell us what version of the Mac OS you have in Apple menu -> About This Mac. Mac OS 10.0.x does not run on AppleTV. Then we can tell you what operating system support you should be able to get, and what browser support you should be able to get.
Maybe you are looking for
-
Hello, I am trying to load data from r/3 into the ODS. When i check in the monitor its saying that 07:37:12 ( 549741 from 549741 Records ) But its not turning green.Its still yellow. I checked the new data in the ODS. The number of entries in it is 0
-
Hp officejet pro 8500a constantly disconnects
I loose the connection to my printer in the ePrintCenter. The printer a HP OfficeJet Pro 8500A will show "Not Connected". If I cycle power on the printer and do a refresh the printer will come back up as connected and ready. Then 10-15 minutes lat
-
Software update doesn't remember my printer software update
Every day Software Update tells me to update my printer software. Every day it updates it. I found a 2012 thread about this in 10.8, and here it is again in 10.9 Anybody got any ideas what to do about it?
-
Can we make customzie report(ie Master Detail Report) with web layout in 10g report builder,which has complete jsp coding?
-
I have a thread that connects to a number of web-pages, downloads them, parses and after that some additional actions. The problem is that I can�t control any grapical components while the thread is executing, even if I set it to lowest possible prio