LAN-LAN connections

I have a dual router setup with comcast internet modem connected to E4200 (doing DHCP) this is connected (Wired) to an E3000 (setup as access point with cable from lan port to lanport) per the linksys instructions. The IP seg is 10.0.1.x
with the E4200 having router address 10.0.1.1 and the E3000 as 10.0.1.199 with its DHCP disabled and NAT disabled.
I have a MAC upstairs (connected via ethernet) to the E3000 and it is connected with an IP address of 10.0.1.10 so the E4200 DHCP server assigned it and got me on to the internet. The problem is after a period of time the Mac loses this internet connection and when I go to check its IP address it has been changed to something in the 169.254.x.x I assume this means it is losing its DHCP lease and can't renew it. In order to get back on the internet I have to reboot both the E4200 (first) then turn the E3000 on after the E4200 comes up and stabilizes.
Any suggestions for how to fix this ??
Thanks in advance
RLK

It seems that MAC is not getting IP address from E4200 router.
Make sure that E4200 is connected to the Ethernet port on E3000 and not Internet.
Just disable DHCP server on E3000 . NO need to disable NAT under Advanced routing section.
If you are still facing the same issue then I think you can try to upgrade the firmware on Linksys router.
Download the latest firmware of E3000 form Linksys website.
Connect the computer to the router with the Ethernet cable.
Open the setup page and upgrade the firmware.
After upgrading the firmware, reset the router and reconfigure it.
Networking is easy

Similar Messages

ASA Remote Access VPN: internal LAN cannot connect to connected VPN clients

Hi community,
I configured IPSec remote Access VPN in ASA, and remote client use Cisco VPN client to connect to the HQ. The VPN is working now, VPN clients can connect to Servers inside and IT's subnet, but from my PC or Servers inside LAN cannot ping or initial a RDP to connected VPN clients. Below is my configuration:
object-group network RemoteVPN_LocalNet
network-object 172.29.168.0 255.255.255.0
network-object 172.29.169.0 255.255.255.0
network-object 172.29.173.0 255.255.255.128
network-object 172.29.172.0 255.255.255.0
access-list Split_Tunnel remark The Corporation network behind ASA
access-list Split_Tunnel extended permit ip object-group RemoteVPN_LocalNet 10.88.61.0 255.255.255.0
ip local pool remotevpnpool 10.88.61.10-10.88.61.15 mask 255.255.255.0
nat (inside,outside) source static Allow_Go_Internet Allow_Go_Internet destination static remotevpnpool remotevpnpool
crypto ipsec ikev1 transform-set myset esp-aes esp-sha-hmac
crypto dynamic-map dyn1 1 set ikev1 transform-set myset
crypto map mymap 65000 ipsec-isakmp dynamic dyn1
crypto map mymap interface outside
tunnel-group remotevpngroup type remote-access
tunnel-group remotevpngroup general-attributes
address-pool remotevpnpool
authentication-server-group MS_LDAP LOCAL
default-group-policy Split_Tunnel_Policy
I don't know what I miss in order to have internal LANs initial connection to connected vpn clients. Please guide me.
Thanks in advanced.

Hi tranminhc,
Step 1: Create an object.
object network vpn_clients
subnet 10.88.61.0 mask 255.255.255.0
Step 2: Create a standard ACL.
access-list my-split standard permit ip object RemoteVPN_LocalNet
Step 3: Remove this line, because I am not sure what "Allow_Go_Internet" included for nat-exemption.
no nat (inside,outside) source static Allow_Go_Internet Allow_Go_Internet destination static remotevpnpool remotevpnpool
Step 4: Create new nat exemption.
nat (inside,outside) source static RemoteVPN_LocalNet RemoteVPN_LocalNet destination static vpn_clients vpn_clients
Step 5: Apply ACL on the tunnel.
group-policy Split_Tunnel_Policy attributes
split-tunnel-policy tunnelspecified
split-tunnel-network-list value my-split
Step 6:
I assume you have a default route on your inside L3 switch point back to ASA's inside address. If you don't have one.
Please add a default or add static route as shown below.
route 10.88.61.0 mask 255.255.255.0 xxx.xxx.xxx.xxx
xxx.xxx.xxx.xxx = equal to ASA's inside interface address.
Hope this helps.
Thanks
Rizwan Rafeek

IMac slows down wifi/LAN cable connection

Hello,
I came across a quiet unique and annoying problem, that I have not seen being discussed so far.
I spend the last 3 weeks trying to solve my internet/wifi connection following all kinds of posts here.
Problem: Wifi/Lan internet connection is slow (less than 0.8mbit/s)
Problem only appears when I login with an iMac via wifi OR lag cable
iMac, 2011 27`` Mac OS 10.7.5
Background:
I have a 20mbit/s internet connection with my provider. works fine on iPad, iPhone, appleTV HTC one mini, etc… BUT as soon, as I login with my iMac, the internet connection slows down to less than 1 mbit/s
I have tried following solutions:
- live box (router) was exchanged and is brand new
- security settings on router changes (wpa2 etc)
- all channels on router tested from 1-13
- keychain saved passwords for Wifi and router deleted, PRAM reset
- renewed lease of connected devices (no IP conflict)
- shut down wifi on iMac - connection with all devices great, as soon as i switch wifi on, all devices lose their high speed connection and go down to less than 1mbit/s
- connected iMac via LAN cable: same problem, all speed is lost
- iMac is not in the network - speed is great
- connected iMac via time capsule wifi, same problem. connected iMac via netgear extender, same problem
also, if I open network preferences and start the "assist me" app and run diagnostics, all dots are green except the ISP and server, bit most of the time they switch to green immediately, but connection is still slow.
Reception bar is on "3", so signal strength is no problem, and I´d like to emphasize that this is also happening on LAN cable. and again, if the iMac is disconnected from wifi AND / OR LAN, all other devices work fine.
Would love to hear your thoughts!
Thanks!

Although I have been on Mac OS for a while now, I have never had to troubleshoot faulty network in the mac itself.
OSX does apparently have a safe mode boot..
OS X: What is Safe Boot, Safe Mode?
Try that.. as that gives you the same thing as windows with all the extras left out, so you get a basic operating system only and you can see if the problem still exists.. if it does.. I would simply bite the bullet.. wipe the Mac.. reinstall the OS and then carefully reinstall your applications from original disks/downloads and move your operating files back .. but start a different user on the computer and copy back the min you need to get working again.
If the problem still happens even in safe mode boot then do a hardware test.. because it is possible something has actually failed at the hardware level.
Using Apple Hardware Test

Qosmio X500: Lan/Internet connection get lost after period of time

Hi all,.
I got the qosmio x500 for about half a year now...
I got this problem where after about 5 hours or less the lan/internet connection get lost.
I disabled the wireless connection and is using only the wired connnection now.
When it get disconnected... all devices seems to work seemlessly, no problem can be found. I checked the win7 network adaptor --and it seems to be connected properly.
I haven't got a slightest idea how to fix that.... Only a reset of the system and reloading the os results with a valid connection.
It is even stranger,. When using it for a piriod of time (listeding to audio streams from the web)... when getting back to the machine the audio connection seems to work properly.... but when trying to access other sites, or other machines in the homegroup, or network (under explorer). It result faulty.
Please guide me somehow how to fix the issue, it is bugging me a lot (all these resets to the machine probably doesn't do it any good as well).
thanks in advance,.

Hi,
It could be the energy saving feature of your network card.
Right click Network Icon on the status bar, choose 'Open Network Center and Sharing', Click on 'Connection', Click on 'Properties' (low left button), you'll see the tab with your Network Properties. Click 'Configure' (Upper right button), choose 'Power Management' (last right tab).
Uncheck 'Allow computer to shut down this device to save energy'. Probably your problem will now be solved.
If the names I write aren't exactly right, I'm on a French language computer so my translations can be slightly wrong.
Bye,
Ton
Message was edited by: Tonio78370

IChat LAN-LAN bonjour connection via OSX-Server and Draytek routers ?

We want to configure a LAN-LAN iChat intranet connection via our OSX-Server and several Draytek 2600 routers. We have static IP-addresses in all local LANs, do LAN-connection via DynDNS and opened the iChat NAT-Ports on every router as described in several posts.
LAN-LAN connection (e.g. volume mounting and ARD (Apple Remote Desktop)) works fine. We started iChat on every Mac and chatting via .mac accounts also works, but not via Bonjour. The logged-in users are not listed in the iChat bonjour contact list.
What do we have to configure more ? Starting the iChat service on the OSX-Server ?
Thanks in advance for help
Alex
PowerPC G5 DP 1.8MHz Mac OS X (10.4.9) 1GB RAM 22 Display
PowerPC G5 DP 1.8MHz Mac OS X (10.4.6) 1GB RAM 22 Display
PowerPC G5 DP 1.8MHz Mac OS X (10.4.6) 1GB RAM 22 Display

Bonjour works without a server but will only work within the same subnet. It's likely your routers are on different subnets and so using Bonjour you would only be able to see contacts on the same subnet.
If you're not seeing anybody else at all, even those on the same subnet as you, then perhaps your firewall hasn't been opened to the iChat Bonjour ports (TCP, 5297 and 5298). There's also an entry for it in each Mac's Firewall config pane.
You best bet may be to run an XMPP server. iChat server is an XMPP/Jabber server (using a copy of the pretty old Jabberd 1.4 code), but you might want to consider running the superior OpenFire (http://www.igniterealtime.org/projects/openfire/index.jsp) on your server instead.
Just create all the users on the server and then enter the relevant details into each copy of iChat.

EA6300 - Cascading the Linksys router to another router (LAN-LAN) - Does not Bridge built in Wifi AP

Regarding:
http://kb.linksys.com/Linksys/ukp.aspx?pid=80&vw=1&articleid=3733#
Cascading the Linksys router to another router (LAN-LAN)
The Bridge mode function on the EA6300 does not bridge the Wifi AP radio to the network.
The ethernet ports are bridged, and the router can see network devices and wifi devices connected to itand ping devices in both directions , but Wifi clients connecting to the unit running in bridge mode are not "bridged" to the network.
~
Using the built in webpage of the router, all devices can be pinged.
Ethernet RJ-45 devices plugged into it can ping the unit and pull up the units config webpage, but not ping wifi clients connected to it.
Wfii devices connected to its access point radio, can pull up the units config webpage, but not ping ethernet RJ-45 devices connected to it.
If there is a bridge, then the bridge is broken in half and not functional.
~
All devices are set with IPs on the same subnet, 192.168.2.x
~
I have a Netgear router in Bridge mode, and it works fine, connecting the wifi access point and RJ-45 ethernet clients together like it should be, so I know how Bridge mode... should work...
But it doesn't on this unit, it is not working completely out the factory door. It will bridge one Router to another via the RJ-45 ethernet ports, but its own AP radio is no longer bridged and connected (like when running in NAT
Note that doing cascading using NAT as described under "Cascading the Linksys router to another router (LAN-WAN)" works fine.

Hi,
There's no WLAN bridge feature on the new Linksys Smart Wifi routers. You might also like to check and review these articles about Bridge Mode:
Article ID: 24583 - Setting up your Linksys Wi-Fi or Smart Wi-Fi Router to Bridge Mode
Article ID: 25714 - Setting up your Linksys Smart Wi-Fi Router to Bridge Mode using your Linksys Smart Wi-Fi Account
Hope this helps!
If everyone needs to believe in something, I believe I'll have another beer..

Cascading the Linksys router to another router (LAN-LAN)

My current set is LAN-LAN asame like on this link...http://kb.linksys.com/Linksys/GetArticle.aspx?docid=785463d9ecaf4cac84aed245b08d615f_3733.xml
my "main" router is set as DHCP server only and wireless is disabled on it. This router is in the basement.
my "secondary" router is in living room.....DHCP is disabled on this router and this routers beams provided wireless for the house in 2.4 and 5 Ghz...lets call 2.4 SSID "Network 2" and 5 we call "Netowrk 5". Wireless coverage is really good in all of the house except basement. I would like to make it better in the basement as well.
In this current set up what could i do to make it better. Since "main" router is not beaming wireless should I add another "third" router?
Any help would be appreciated.
Thanks
Solved!
Go to Solution.

It should pick the strongest one of either the 2.4Ghz SSID or the 5Ghz SSID but only in the case were both router's have the same SSID for the 2.4Ghz and the same SSID for the 5Ghz. (Remember have separate SSID's for 2.4Ghz and 5Ghz signals)
It can be confusing so here's an example:
Main router:
2.4 Ghz SSID: myhouse
5Ghz SSID: myhouse_5gz
Linksys router:
2.4 Ghz SSID: myhouse
5Ghz SSID: myhouse_5gz
As a wireless client moves around the location it will switch to the strongest signal for the SSID it last connected to.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

LAN-LAN bandwidth with 1310 Bridge

I setup LAN-LAN bridge in my lab. with 1310(integ. antenna)
iperf.exe test results maximum 13 mbit/sec
any idea?

before I test the same over 100 mbit switch
(wired-connectivity)
result is 78 mbit bandwidth.
Below is "show dot..." and runnig config
As shown current rate is 54mbit
Signal is very good
I expect nearly 30-40 mbit bandwidth
13 mbit is very low for my opinion
ap#sh dot11 associations all-client
Address : 0021.a026.bc70 Name : ap
IP Address : 192.168.10.91 Interface : Dot11Radio 0
Device : 11g-bridge Software Version : 12.3
CCX Version : NONE Client MFP : Off
State : MAC-Assoc Parent : self
SSID : cisco
VLAN : 0
Hops to Infra : 1 Association Id : 1
Clients Associated: 1 Repeaters associated: 0
Tunnel Address : 0.0.0.0
Key Mgmt type : NONE Encryption : WEP
Current Rate : 54.0 Capability : WMM ShortHdr ShortSlot
Supported Rates : 1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates : disabled
Signal Strength : -22 dBm Connected for : 20232 seconds
Signal to Noise : 76 dBm Activity Timeout : 30 seconds
Power-save : Off Last Activity : 0 seconds ago
Apsd DE AC(s) : NONE
Packets Input : 4014885 Packets Output : 4085019
Bytes Input : 511245571 Bytes Output : 712893677
Duplicates Rcvd : 0 Data Retries : 8044
Decrypt Failed : 0 RTS Retries : 0
MIC Failed : 0 MIC Missing : 0
Packets Redirected: 0 Redirect Filtered: 0
Session timeout : 0 seconds
Reauthenticate in : never
ap#sh run
ap#sh running-config
Building configuration...
Current configuration : 1729 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap
enable secret 5 $1$tH1Q$qw6f1KVjymElfdtmFQKpp1
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 ssid cisco
authentication open mac-address mac_methods
infrastructure-ssid
username Cisco password 7 13261E010803
username 0021a026bc70 password 7 091C1E5B480447405D0E077D7B
username 0021a026bc70 autocommand exit
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption key 1 size 128bit 7 A9E1230C15B678330C1A84143965 transmit-key
encryption mode ciphers aes-ccm tkip wep128
ssid cisco
station-role install root
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface BVI1
ip address 192.168.10.90 255.255.255.0
no ip route-cache
ip default-gateway 192.168.10.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end
ap#

Intermittent Internet Connection and VPN clients can't ping internal LAN but connected after installating cisco ASA5512x

Hi!
I wish someone can help me on this, I'm a new guy on cisco firewalls and I'm currently implementing cisco asa 5512x, here are the details:
ISP -> Firewall -> Core switch -> Internal LAN
after installing the cisco asa and terminating the appropriate lan for the outside and inside interfaces, internet seems intermittent and cisco vpn client can connect with internet connection but can't ping internal LAN.
here's my configuration from my firewall.
ASA Version 8.6(1)2
hostname ciscofirewall
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address 203.x.x.x 255.255.255.0
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 10.152.11.15 255.255.255.0
interface GigabitEthernet0/2
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/4
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/5
shutdown
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
ftp mode passive
dns domain-lookup outside
dns domain-lookup inside
dns server-group DefaultDNS
name-server 4.2.2.2 -------> public DNS
name-server 8.8.8.8 -------> public
name-server 203.x.x.x ----> Clients DNS
name-server 203.x.x.x -----> Clients DNS
same-security-traffic permit intra-interface
object network net_access
subnet 10.0.0.0 255.0.0.0
object network citrix_server
host 10.152.11.21
object network NETWORK_OBJ_10.10.10.0_28
subnet 10.10.10.0 255.255.255.240
object network NETWORK_OBJ_10.0.0.0_8
subnet 10.0.0.0 255.0.0.0
object network InterconHotel
subnet 10.152.11.0 255.255.255.0
access-list net_surf extended permit ip any any
access-list net_surf extended permit ip object NETWORK_OBJ_10.10.10.0_28 object InterconHotel
access-list outside_access extended permit tcp any object citrix_server eq www
access-list outside_access extended permit ip object NETWORK_OBJ_10.10.10.0_28 any
access-list outsidevpn_splitTunnelAcl standard permit 10.152.11.0 255.255.255.0
access-list LAN_Users remark LAN_clients
access-list LAN_Users standard permit any
access-list vpnpool extended permit ip 10.10.10.0 255.255.255.248 any
pager lines 24
logging enable
logging asdm informational
mtu management 1500
mtu outside 1500
mtu inside 1500
ip local pool vpnpool 10.10.10.1-10.10.10.6 mask 255.255.255.248
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
nat (inside,outside) source static NETWORK_OBJ_10.10.10.0_28 NETWORK_OBJ_10.10.10.0_28 destination static NETWORK_OBJ_10.10.10.0_28 NETWORK_OBJ_10.10.10.0_28 no-proxy-arp route-lookup
object network net_access
nat (inside,outside) dynamic interface
object network citrix_server
nat (inside,outside) static 203.177.18.234 service tcp www www
object network NETWORK_OBJ_10.10.10.0_28
nat (any,outside) dynamic interface
object network InterconHotel
nat (inside,outside) dynamic interface dns
access-group outside_access in interface outside
access-group net_surf out interface outside
route outside 0.0.0.0 0.0.0.0 203.x.x.x 1
route outside 10.10.10.0 255.255.255.248 10.152.11.15 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication telnet console LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
http 10.0.0.100 255.255.255.255 inside
http 10.10.10.0 255.255.255.240 outside
http 0.0.0.0 0.0.0.0 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map inside_map interface inside
crypto ikev1 enable outside
crypto ikev1 enable inside
crypto ikev1 policy 10
authentication crack
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 20
authentication rsa-sig
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 30
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 40
authentication crack
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 50
authentication rsa-sig
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 60
authentication pre-share
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 70
authentication crack
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 80
authentication rsa-sig
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 90
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 100
authentication crack
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 110
authentication rsa-sig
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 120
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 130
authentication crack
encryption des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 140
authentication rsa-sig
encryption des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 150
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
client-update enable
telnet 10.152.11.0 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 192.168.1.2-192.168.1.254 management
dhcpd enable management
threat-detection basic-threat
threat-detection statistics
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
webvpn
enable outside
anyconnect-essentials
group-policy outsidevpn internal
group-policy outsidevpn attributes
dns-server value 203.x.x.x 203.x.x.x
vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-client
split-tunnel-policy tunnelall
split-tunnel-network-list value outsidevpn_splitTunnelAcl
default-domain value interconti.com
address-pools value vpnpool
username test1 password i1lji/GiOWB67bAs encrypted privilege 5
username test1 attributes
vpn-group-policy outsidevpn
username mnlha password WlzjmENGEEZmT9LA encrypted
username mnlha attributes
vpn-group-policy outsidevpn
username cisco password 3USUcOPFUiMCO4Jk encrypted privilege 15
tunnel-group outsidevpn type remote-access
tunnel-group outsidevpn general-attributes
address-pool (inside) vpnpool
address-pool vpnpool
authentication-server-group (outside) LOCAL
default-group-policy outsidevpn
tunnel-group outsidevpn ipsec-attributes
ikev1 pre-shared-key *****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
inspect http
inspect ipsec-pass-thru
class class-default
user-statistics accounting
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
hpm topN enable
Cryptochecksum:edc30dda08e5800fc35b72dd6e1d88d7
: end
thanks. please help.

I think you should change your nat-exemption rule to smth more general, like
nat (inside,outside) source static any any destination static NETWORK_OBJ_10.10.10.0_28 NETWORK_OBJ_10.10.10.0_28 no-proxy-arp route-lookup
'cause your inside networks are not the same as your vpn-pool subnet.
Plus, if you're trying to reach inside subnets, different from 10.152.11.0 255.255.255.0 (ip from wich subnet is assignet to your inside interface, and for wich above nat exception should be enough), you should check if routing is configured from that subnets to your vpn-pool-subnet through the ASA.

LAN internet connection just stopped working

Hi all,
I've just signed up to use my university LAN for accessing the internet yesterday. I registered my MAC address, and all was working fine: I could check my e-mail, use Safari etc. Then suddenly yesterday afternoon my connection stopped working, and my iBook began behaving weirdly: when it's connected to the LAN, it will assign itself an IP address and show a green light for "Built-in Ethernet" under Network Preferences, but it won't load any webpages, get my e-mail in Mail, or access any databases in Endnote.
Moreover, when I restart my computer with the network cable plugged in, when I log-in the dock appears successfully, as do the volume, time and battery indicator, but the grey menu-bar that normally lies underneath the time/battery indicator etc. at the top of the screen won't appear, and the cursor turns to a permanent spinning wheel. As soon as I remove the network cable, the grey bar reappears and log-in continues as normal.
Finally, Help Viewer crashes if I try and load it when I've got the netork cable plugged in, but works fine if I've got it removed.
Any idea what's happening?
Cheers,
Laurence
FYI: I also have Virex 7.2 on my comuter, but have set it up so that it doesn't load at start-up, if that's got any relevance... Tha LAN itself is working fine, I'm writing this on a Windows machine which is also connected to the LAN... The LAN uses DHCP automatic assignment of IP addresses.

Laurence,
You had posted a question about the LOCATION not being displayed in the iPod Calendar. That post has been archived so I cannot post a reply to it. Since I don't know your email address I'm going to respond to that here. Hopefully the topic-police will be understanding.
The problem is that the iPod calendar software ignores some of the tags in the ics file including LOCATION, ATTENDEE, and PRIORITY. I've written a Perl script which corrects the problem for an ics file generated with iCal, but I haven't tested it with an Outlook generated ics file yet. Also, my solution isn't perfect because every time you resync you have to fix the files again, so until Apple corrects this your best bet may be to regularly put the location information in your description field. I'll be posting my solution at <http://isd.usc.edu/~bbellina> sometime in the next couple of days.
Regards,
Brendan Bellina

E51 Wireless Lan - Net Connection Time Out

Hi all,
I cant get my E51 to open websites. It connects to my wireless LAN fine, but I get the message Net Connection Time Out when I try to browse to any website. Before the message comes up, it takes a minute or so of blank screen before the error message appears.
I have a netgear router and I use WEP. The key is entered correctly.
Has anyone come across this before?

this probably is a case of a bug in ur device so what u can try are: plz make a back up
take out your sim card and put in *#7780# to restore factory settings. you should not lose any data, but all settings will go into default. try that first.
the second option is a reset *#7370# this one will erase all of your data, 'wipe the phone clean' and restore to factory settings. see if any of these options work and if you are able to use your phone as you like/need to.
the third option U can go in for a hard reset which will turn ur device as it left the factory totally new
U can also update/reinstall ur firmware and see the result...
Also use ur device without the memory card and see
in case of ur memory card there are different options available to you to get rid of the corrupt/unwanted data in your card.
menu--tools--memory---options---format memory card......
remember everything including ur factory installed apps will be deleted......... but u can always download them later either from nokia or google them...
or insert ur card in any reader or laptop and check for virus and also the hidden folders.......
Articles posted courtesy engadget
keep us updated about the progress.... if u like wat I have to offer then click on khudos.

Networking question (LAN based connection)

My Macbook has been running relatively well up until about a week or so ago. My internet randomly stopped working (but only my network connection which I connect via a LAN in an apartment building), my WiFi when a signal could be found worked fine. This first time I checked Network Diagnostics and for Ethernet connection and Network Connection I had a Green dot and a Yellow dot respectively while ISP, Network and Internet all had Red dots next to them. So i summed this up to an internet or network problem.
Then exactly one week later the same thing happened only after a day with no internet I checked the Network Diagnostics and all sections (ISP, Ethernet, etc) displayed Red dots and all were listed as 'failed'. Now I'm concerned it may be my Macbook.
A friend plugged their Windows based computer into the network cable and got internet in both cases, the first case I summed up to network problems with OSX compatibility, now I'm not so sure.
WiFi works but I have yet to test Ethernet on another LAN.
Any suggestions on how I can confirm it is the network and not my Macbook, or any ways I can troubleshoot this problem? Note: The first instance I was able to renew my DCHP and IP Address easily, this time nothing shows up in those input boxes.

Sorry, I misread the sentence which you mentioned it.
Ok, it does sound like there is something amiss with the ethernet card or it's configuration in the G5 or your Linksys may be set to filter out this particular device by either IP or MAC address.
First, I'd check to see if your Linksys has any applied filters, by going to the Linksys Advanced > Filters page. Look to see if there are any values assigned to either "Filtered Private IP Range" or "Private MAC Filter." If there are not filters set, specifically for the G5, then try turning off your Linksys for at least 10-15 minutes and then repowering it up.
If this doesn't help, then it's time to troubleshoot the ethernet card or configuration on your G5. Are you sure the IP Address, Subnet Mask & Gateway values are correct for your network? (Sorry, just needed to ask.) If so, have you tried the following pings?
127.0.0.1
192.168.1.102
192.168.1.1
Did all of them complete without errors? If it fails at the first two addresses, most likely the problem is with the card. If it fails at the last address, I'd check the ethernet cable used between the G5 & the Linksys.
The last thing I can think of is my 8-port Linksys has the option to set port 8 as an uplink port via a recessed switch. Not sure about the 4-port model. As you probably are already aware, when used as an uplink port you would normally add another hub/switch to the port and it wouldn't work for computers.

Graphite ABS Ethernet hub LAN internet connection Problems

I have a first generation graphite ABS connected to my 5 port 10 base-T hub. My cable modem also connects to the hub as does my B&W G3.
My powerbook Titanium 867 connects to the ABS. Everything is set to DHCP. The problem is, I cannot connect to the internet with both Macs at the same time. It's like one connection is blocking the other.
What settings should I use on the ABS to enable both Macs to connect to the internet?

Using a hub in this way is incorrect. The DHCP server provided by the graphite ABS would conflict with your ISP's DHCP server and they don't like that.
Your options:
Replace the graphite ABS with a wireless base station that has one or more LAN ports (in addition to the WAN port).
Place a wired router between the cable modem and the graphite ABS. Configure the graphite ABS so that the option to distribute IP addresses is DISABLED. In this configuration the graphite ABS will act only as a wireless access point. The wired and wireless clients will all get IP addresses from the wired router.

Does WLC License will impact LAN & WAN connectivity access ?

Hi,
rececntly we have installed 2504 WLC in of branch office, I can able to log via console but it is not coming over LAN not even showing in CDP, all config seems to be fine in wired side & WLC side & physical connection also fine...LED also green.
I am seeing log message in WLC, is this related to License issue ?
*License Client Lib Notify Process: Sep 19 05:40:03.303: %LICENSE-1-REQUEST_FAILED: license_syslog_notify:564 License request for feature data_encryption 1.0 failed in this device, UDI=AIR-CT2504-K9:PSJ163200FM
*License Client Lib Notify Process: Sep 19 05:40:03.302: %LICENSE-1-REQUEST_FAILED: license_syslog_notify:564 License request for feature base-ap-count 1.0 failed in this device, UDI=AIR-CT2504-K9:PSJ163200FM
Thanks
Shrinivas

Hi Shrinivas,
Two things spring to mind here:
Are you trying to join APs to the Controller and they are failing? I'd expect that error message to come up if you haven't installed a license for the APs on top of the base license...
I'm not so sure about why you cannot access the Controller over your LAN, I expect if anyone is to help you will need to provide more details on where you're accessing it from etc, sorry!

Give LAN higher priority than wireless / deactivate wireless if LAN is connected

Hi.
What I want to do is quite simple: Im my office there is a quite fast LAN connection and a rather poor wireless connection. Therefore, I want to tell my device: "If there is a LAN cable plugged in, just use LAN. Do not use Wifi in this case. If there is no LAN cable plugged in, try to connect to Wifi."
It is really annoying to change that manually each time.
I have already changed the network connection priority in Windows 7 as described here: http://support.microsoft.com/kb/2526067
But to no avail.
My notebook is E531.
Wifi Device: Intel Centrino Wireless-N 2230
Driver Date 30.09.2012
Driver Version 15.3.1.2
Solved!
Go to Solution.

Hi cis,
do you by any chance have Access Connections installed on your system? It is possible that the WLAN adapter is set to a higher priority than LAN in your location profile which is causing the behaviour. If you don't have AC installed it may be a possible solution you could try.
Link to another thread on this subject;
http://forums.lenovo.com/t5/ThinkVantage-Technologies/Access-Connections-disable-WiFi-on-Wired-Conne...
Andy ______________________________________
Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points
Did you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos Please add your type, model number and OS to your signature, it helps to help you. Forum Search Option T430 2347-G7U W8 x64, Yoga 10 HD+, Tablet 1838-2BG, T61p 6460-67G W7 x64, T43p 2668-G2G XP, T23 2647-9LG XP, plus a few more. FYI Unsolicited Personal Messages will be ignored.
Deutsche Community Comunidad en Español English Community Русскоязычное Сообщество
PepperonI blog

LAN-LAN connections

Similar Messages

Maybe you are looking for