RV 120W Port Fowarding and remote address

Good morning
Hi Bruno, thanks for using our forum, my name is Johnnatan and I am part of the Small business Support community. In order to resolve your problem, I have a couple of question for you:
Which services do you want to forward?
Is your ip address static or dynamic? If it is dynamic, are you using a domain?
Could you send us a screenshoot with your firewall configuration?
Could you access to your server in your LAN?
I found a document related to Port forwarding, where you can see how to configure it:
http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2616
I hope you find this answer useful,
*Please mark the question as Answered or rate it so other users can benefit from it"
Greetings,
Johnnatan Rodriguez Miranda.
Cisco Network Support Engineer.

Similar Messages

Port Forward and IP address question

I am configuring my father's computer so that I can "see" his screen. He's on a different network, using a mac with a wireless router. He enables remote desktop login, I use Chicken of the VNC software on my mac to see and control his computer.
Here's my question, when I set up his router to forward the ports so this will work, do I use the ports for apple remote desktop or VNC? (The ports overlap (5900) but are different.)
Also, which IP address do I enter into Chicken of the VNC? His router IP, his static IP that we assigned or his computer's IP.
Thanks for the help,
Rob

ok, but in his prefs for apple remote desktop, it gives the static IP address that we set as the address other people can use, so... any thoughts?
You use that private address if you are in the same subnet as his Mac. That is the address you enter into the port forwarding settings on the router because the router needs to send requests received on the public IP address to that unreachable private IP address.
When you are on the internet, you can't reach that private IP address.

Add new remote address book

I am trying to add a new ldap address book in communications express
Can somebody help me with a sample to start with this.
The below is a sun document explaining basic steps for reference:
Currently I have personal address book and corporate directory shown in the drop down list. When we select the corporate directory all users for that hosted domain is listed correctly. And in PAB all contacts entered in outlook contacts is listed. Now we want to add new book that will point the root of ldap to list all users accross all hosted domian.
I hope this is possible. Thanks in advance
SUN DOC:
Corporate Address Book
For corporate and remote address books a corresponding xxx instance should exist in the personalstore.properties file. The value of db.xxx.urlmatch in personalstore.properties file should be assigned the value of bookremoteurl attribute present in defaultps.xml file.
To add a new remote address book, you need to add the following items:
Steps
Add a new book node in defaultps.xml file
Add a new xxx instance in personalstore.properties file.
Create a directory under WEB-INF/config to store the db_config.properties and xlate files.
Note �
The xlate files contains the field mappings between an LDAP schema and address book XML schema for a contact or group

I forgot to include the following details:
We are having V250 server with Solaris 9/04 SPARC with Java Entpr 2005Q1. Thanks in advance

Coherence::net::messaging::ConnectionException: could not establish a connection to one of the following addresses: {10.242.152.242/10.242.152.242:8088}; make sure the "remote-addresses" configuration element contains an address and port of a running TcpA

Hi
I have installed coheI have installed coherence server "fmw_12.1.3.0.0_coherence_Disk1_1of1.zip" along with Examples on windows machine and C++ client coherence-cpp-12.1.3.0.0b51709-windows-x86-vs2012.zip on the same machine.
I have built the "contacts" C++ Example successfully and while I execute this "contacts" using run I am facing TcpAcceptor error.
On my coherence server the TcpAcceptor is listening on port 8088, so I have modified the extend-cache-config.xml file with values "ip address of my windows machine" and port as "8088".
All the time I am getting below error,
coherence::net::messaging::ConnectionException: could not establish a connection to one of the following addresses: {10.242.152.242/10.242.152.242:8088}; make sure the "remote-addresses" configuration element contains an address and port of a running TcpAcceptor
    at class coherence::lang::TypedHandle<class coherence::component::net::extend::PofConnection> __thiscall coherence::component::util::TcpInitiator::openConne
ction(void)(TcpInitiator.cpp:307)
    at coherence::component::util::TcpInitiator::openConnection
    at coherence::component::util::Initiator::ensureConnection
    at coherence::component::net::extend::RemoteCacheService::openChannel
    at coherence::component::net::extend::RemoteService::doStart
    at coherence::component::net::extend::RemoteService::start
    at coherence::component::util::SafeService::startService
    at coherence::component::util::SafeService::restartService
    at coherence::component::util::SafeService::ensureRunningServiceInternal
    at coherence::component::util::SafeService::start
    at coherence::net::DefaultConfigurableCacheFactory::configureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureRemoteCache
    at coherence::net::DefaultConfigurableCacheFactory::configureCache
    at coherence::net::DefaultConfigurableCacheFactory::ensureCache
    at coherence::net::CacheFactory::getCache
    at unsigned __int64 coherence::lang::class_spec<class coherence::lang::Managed<class ContactId>,class coherence::lang::extends<class coherence::lang::Object,class coherence::lang::Void<class coherence::lang::Object> >,class coherence::lang::implements<void,void,void,void,void,void,void,void,void,void,void,void,void,void,void,void> >::sizeOf(bool)
    at _onexit
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at BaseThreadInitThunk
    at RtlInitializeExceptionChain
    at RtlInitializeExceptionChain
    on thread "main"
Caused by: coherence::net::messaging::ConnectionException: coherence::component::util::TcpInitiator::TcpConnection@029EAD78{Id=NULL, Open=1, LocalAddress=NULL,
RemoteAddress=10.242.152.242/10.242.152.242:8088}: socket disconnect
    at class coherence::lang::TypedHandle<class coherence::net::messaging::Response> __thiscall coherence::component::net::extend::AbstractPofRequest::Status::g
etResponse(void)(AbstractPofRequest.cpp:203)
    at coherence::component::net::extend::AbstractPofRequest::Status::getResponse
    at coherence::component::net::extend::AbstractPofRequest::Status::waitForResponse
    at coherence::component::util::Initiator::openConnection
    at coherence::component::net::extend::PofConnection::open
    at coherence::component::util::TcpInitiator::openConnection
    at coherence::component::util::Initiator::ensureConnection
    at coherence::component::net::extend::RemoteCacheService::openChannel
    at coherence::component::net::extend::RemoteService::doStart
    at coherence::component::net::extend::RemoteService::start
    at coherence::component::util::SafeService::startService
    at coherence::component::util::SafeService::restartService
    at coherence::component::util::SafeService::ensureRunningServiceInternal
    at coherence::component::util::SafeService::start
    at coherence::net::DefaultConfigurableCacheFactory::configureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureRemoteCache
    at coherence::net::DefaultConfigurableCacheFactory::configureCache
    at coherence::net::DefaultConfigurableCacheFactory::ensureCache
    at coherence::net::CacheFactory::getCache
    at unsigned __int64 coherence::lang::class_spec<class coherence::lang::Managed<class ContactId>,class coherence::lang::extends<class coherence::lang::Object
,class coherence::lang::Void<class coherence::lang::Object> >,class coherence::lang::implements<void,void,void,void,void,void,void,void,void,void,void,void,void
,void,void,void> >::sizeOf(bool)
    at _onexit
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at BaseThreadInitThunk
    at RtlInitializeExceptionChain
    at RtlInitializeExceptionChain
    on thread "main"
Caused by: coherence::io::IOException: socket disconnect
    at unsigned int __thiscall coherence::net::Socket::readInternal(unsigned char *,unsigned int)(Socket.cpp:333)
    at coherence::net::Socket::readInternal
    at coherence::net::Socket::SocketInput::read
    at coherence::io::BufferedInputStream::fillBuffer
    at coherence::io::BufferedInputStream::read
    at coherence::component::util::TcpInitiator::readMessageLength
    at coherence::component::util::TcpInitiator::TcpConnection::TcpReader::onNotify
    at coherence::component::util::Daemon::run
    at coherence::lang::Thread::run
    on thread "ExtendTcpCacheService:coherence::component::util::TcpInitiator:coherence::component::util::TcpInitiator::TcpConnection::TcpReader"

We are facing same issue.    Could you please provide us any working .Net sample code for the version 12.1.2.0.
<ssl>
              <protocol>Tls</protocol>
              <local-certificates>
                <certificate>
                  <url>c:\Cert\</url>
                  <password>password</password>
                  <flags>DefaultKeySet</flags>
                </certificate>
              </local-certificates>
            </ssl>
thanks
Bala

Can implement port forwarding using win2003 routing and remote acccess?

I have a sql server 2005 with a internet ip address b and a computer onwindows 2003 with a internet ip address a .
Now I want to use address "a" 's 14330 port to access sql server 2005 on ip address "b" with port 1433.
I use router and remote access to implement this,but fail.
in every server only have a adaptor and a ip.
How to do it?
Please tell me how to implement it from "routing and remote access" in detail.
I dont want use netsh.

Hi,
I think this will not work. As we know, when a source computer send a request to SQL server, the packet should contain the following information.
Source IP and port number (this port is a randomly generated)
Destination IP and port 1433 (SQL by default)
So we cannot control which port to use when connecting another service.
Hope this helps.

SRP521W - Local and Remote Traffic Cannot be the Same Subnet Address

I support an existing VPN infrastructure with PIX, Juniper NS5GT, and Netopia devices used as VPN endpoints. In all cases, I can create a VPN where the location's internal subnet, 10.x.y.0/24 sends traffic to 10.0.0.0/8 out the VPN tunnel. In the case of this 521W that we are evaluating, it appears that I cannot do this. Insteadm when creating the IPSEC policy I get this error "Local and Remote Traffic Cannot be the Same Subnet Address." Which, while strictly true, has never been an issue with all the above devices. Is there a workaround or other methodology to support this?
Thanks.

We have extactly the same problem with the SRP527W. Other Cisco small business products work like.
Cisco RV 120W
http://www.cisco.com/en/US/products/ps10852/index.html
Cisco WRV210
http://www.cisco.com/en/US/products/ps9929/index.html
We need a device with that supports one IPSec VPN and one ADSL interface and is easy to use like these devices.

Coherence Extend remote address port in TCP Connection

Hi,
From the log below, I see remote address port is picked some random port(48552). (currently i disabled the firewall), If i enable the firewall it could be an issue, is there any way i can specify the remote ports that tcp connection use?
2011-02-24 13:18:18.076/1280.207 Oracle Coherence GE 3.6.0.1 <D6> (thread=Proxy:ExtendTcpProxyService:TcpAcceptor, member=13): Opened: TcpConnection(Id=0x0000012E56A3CA1B0A1F96B688F7EEBCEDA2AA9397203393CF480379B3963D86, Open=true, LocalAddress=10.31.150.182:9099, RemoteAddress=10.31.150.182:48552)
One more question,
I have two proxy servers, is it possible to configure the client to make two connection (redundant) one for first proxy and another for second proxy. is it make sense?
Thanks
Prab
Edited by: 833796 on Feb 24, 2011 2:35 AM

Hi Prab
The random port is what normally is called an ephemeral port for the client and is usually not a problem for firewalls since this is expected behavior. If you want to control the client port you can do this by adding the <local-address> to the tcp-initiator element.
As for the second question, it doesn't quite work to do as you suggest. The proxy contains state for the client, as this is not replicable between the proxies one cannot continue where the other one left off.
Thanks
/Charlie

Trusted RFC and Remote logon not possible due to Nat'd IP addresses

Hi,
We are trying to connect our SolMan 4 to our cusotmers ECC 6 and BI7 systems, the systems are off site and the IP addresses for the customers systems are nat'd when they come in and go out from our Network.
The problem we get is that we cannot set up Trusted systems or Remote Logon to these systems due to issues with the Nating of the IP adresses. We can set up all standard RFC's after adding the the appropriate addresses into the hosts file and they work fine. But the trusted RFC does not set up properly and the BACK rfc from the satelite system does not get set up properly. What appears to happen is that when you try to start a remote session SAP goes to the satelite system and finds the Instance Name and the local IP address rather than the NAT'd IP address and try's to open a session from there. I found this by going into the trusted RFC in SM59 and then going to Extra's, System Information, Target System, this then tells me the Target System information, where it shows the System ID and IP address (which is the incorrect IP address).
Anyone know how we can get the system to try to have the correct IP adress in the target system information so that we can get Remote Logon's to work??
Cheers

Hi Carl,
Based on your explanation about Nating,, how will the RFC determine to connect to Solmans internal IP after it has been directed to the IP for the Router connection.
I feel it is like configuring a jump of RFCs from one IP to another in a single chain.
Can this be done ?? I mean we have to specify an IP in the RFC connection right.. so how will the automatic jumping of IPs be done.
Sorry not answering the question but its very interesting and wanted to know.
Also went trough note # 148832, might help.
Regards,
Kaustubh.
Edited by: Kaustubh Krishna on Aug 13, 2009 12:17 PM

Port fowarding not working and Max Payne 3

I have had a proble with this game badly lagging and some things not being applied to my account while playing etc etc etc
Now the ports that I've already opened ( or seemingly not ) are :-
UDP 6672
UDP 27900
UDP 27901
443
I have put the Hub 3 ( 3A ) into DMZ, and when I go to an online port checking facility no matter which one it tells me that eaach of the ports are closed, and I'm still lagging in game etc
I'm not new to computers, just not done a lot of connection problems.I did the port forwarding via a BT tech rep over the phone, so there shouldn't be any problems with how it's been setup ( e.g me not putting in something should have been taken out of the equation ).
I've seen a few posts about the HH3a not doing as it should.So 2 questions here, can I ask/demand a HH3B, and is there the same problems with this as with the HH3A ?
If you have any other questions for me, be free to ask, but I might ask how to do some things
Andy

After 4 telephone conversations , it appears that either there is something wrong with the HH3 Type A , and port forwarding isn't happening , or the HH3 doesn't allow me to see if the port forwards are concerned, which isn't very helpful either way.
Added to which BT are unable to send me out a HH3 Type B because " they are undergoing testing at the moment, because there is a problem with them " , quote , unquote.It has taken these 4 phone calls to find this out, which could've been explained the first time, instead of just fobbing me off, saying the port fowards are done, when clearly as far as online open port checkers are concerned, their not.
So, there isn't any way I can go back to the game developers technical help , until this problem is sorted.
I've put a post on another thread asking which router would be best for me to purchase, as this seems my only course of action, with BT just washing their hands of the situation, saying that although port forwarding is part of the HH3, it doesn't mean to say that it works, and they don't support it !
Many thanks for any replies.
Andy

Port Forwarding and Static IP addresses

Netcomm NB1300 router and Airport Express.
I want to use and old G3 mac running 10.3.9 as a server for HTTP and FTP. The Mac is currently connected via Airport but I can connect it via Ethernet if necessary.
I understand that I will have to activate Port Forwarding on my Router with Ports 21 and 80 to allow external Internet access to the G3. I will also have to configure DHCP Manually for a Static IP address and probably link up with a Free DNS service to maintain reliable access to the G3.
I have other computers on the network, two Macs (Ethernet / 10.3.9 & Airport 10.4.11) and two PC's (one with Vista, one with XP / both on Airport). Only one of the extra Macs is connected via ethernet, the rest are connected via Airport.
Will I have to assign Static IP addresses to all the computers or just the one I want to use as a server?
And also, can anyone tell me about Port Forwarding via Port 22 to give more security from external observation/attacks? I know nothing about this security measure.
Thanks in advance.
Christo.

Hi--
Christo wrote:
I am now assuming I will be able to access the 'server' from an external location. Very optimistic! But I can't test that for a couple of days.
Ah, but you've given up too soon! You can access your web server from outside your network real easy: you just need to find an external client you can point back to your site. I like to use the W4C validator to do that. It has the happy side effect of also telling you if your web page markup is valid. So you'd point your browser to the validator page:
http://validator.w3.org/
I like to choose "More Options" and tell it to show the page source. That way I can also verify that it's seeing the page I want it to see.
If I disconnect the iBook from Ethernet, can it still be accessible from an external location if it is connected to the Router via Airport, or do I have do so something like Port Forwarding with my Airport Express as well? Note the iBook can still connect to the Internet via Airport.
It would depend on how your Airport is set up. I think there are a couple of ways to set them up. One is to make the Airport a DHCP server, which would make the wireless network essentially a separate network. In that case, you'd have to forward throught the Airport, too.
My wireless network, though, is set up to bridge, so it's all one network. In that case, all I'd have to do to forward wirelessly to a client would be to set up the forward on the main router.
Being that persons other than myself will be accessing the iBook via FTP, do I give them the user account password of the Mac, or can I set a password in the Router or something else?
Also, when accessing the iBook on my local network using Cyberduck, I can see the entire directory of the iBook's user account. Is there a way to limit access to just one folder, such as the Public folder, or a self-designated folder?
Unfortunately, I don't know anything about setting up FTP. I would suggest that you look into maybe making an account on the iBook specifically for the FTP user and only give out that username and password. You might want to poke around in the Networking and the Web and Unix discussions in the Mac OS X Technologies area. I've seen a number of posts there about setting up FTP, and you might be able to find your answers there.
charlie

Port Forwarding and Printing with Static IP Address

Hey there -
I am trying to setup a network printer that can be printed to from anywhere in the world. My organization has 5 static IP addresses given to us by our ISP. Four of those I have on computers, and one of them I have on my Linksys router (WRT54G v.8).
What I want to do is be able to setup a printer on my router that I can print to from anywhere I have an internet connection. My wireless router's static IP address is 74.172.54.XXX - The address on my network is 192.168.7.1 - I have a printer statically assigned the IP address 192.168.7.2 - and I have a port forwarding for port 70 to forward to 192.168.7.2
In theory, I would think that now I could print to 74.172.54.XXX:70 and have no problems. But that doesn't seem to be working. Even printing to 192.168.7.1:70 doesn't seem to work either.
Also, the printer has a web GUI interface that if I type http://192.168.7.1/ into my browser it comes up, so in theory I would think typing http://74.172.54.XXX:70 into my browser it should come up (but it doesn't nor does http://192.168.7.1:70).
Anybody got any suggestions? I tried to do a search about this, but ever Port Forwarding question seemed to deal with gaming (which I have no desire to do). Thanks!
I will include two screen snapshots of what I am talking about:
Thanks for any help.

Is the router setup to accept static connections?
I have my router set up to accept both, so from 192.168.1.100 to 192.168.1.192 the addresses are static the other addresses are given by DHCP.
If you do not define a range and the address your laptop has as static IP conflicts with the address given by DHCP your loose ... as in you get no address.
Set up of that feature may depend on your type of router but usually any decent router will have that capability ... read your manual for specifics about your unit.
Best of luck.
R.
Last edited by ralvez (2009-12-10 00:08:50)

I am wanting to add my icloud email account to Windows Live email...during the process i's being asked server type (POP or IMAP) and server address incoming and outgoing the port boxes already have a nbr. in them, 25 (Outgoing) and 143 (Incoming).

I am wanting to add my icloud email account to "Windows Live"....During the setup process I'm being asked for server type (POP or IMAP) and server address (Incoming and Outgoing) Where can I find this information?...The port boxes already have a number in them - 25 (outgoing) and 143 (incoming)..do I leave these the same??...also do I check the box "Requires a secure connection (SSL) for both incoming and outgoing???

iCloud Mail Server Settings

NAT port-forwarding and WAN side IP addresses

I have my Airport Extreme setup to forward port 21 to an FTP server on the LAN side of my network. The AE is connected via DSL to my ISP.
When a client from the WAN side connects to my server, the server's LOGS don't list the IP of the client, rather it says the client connected from my assigned WAN IP. For example (fake ip's):
Client ----> AE ----> FTP-SERVER
130.129.12.3 76.99.89.3 10.0.1.2
Log states client connected
from IP: 76.99.89.3
My previous Linksys router, with the same DSL modem and ISP, would report the client as connecting from 130.129.12.3.
Am I missing something in how I am configureing my AE? Or, is this how the AE manages port-forwarding and there's nothing I can do about it?
I used to use firewall rules to control access to the FTP server, i.e. rules set on the server. This can't be done anymore with the AE operating as it does.

Seems to me that the NAT translation in the Airport 802.11n is such that it does not use the incoming IP of clients connecting from the WAN side to a computer on the LAN side. The ingoing and outgoing packets reach their respective destinations, it is just that the AE uses some kind of non-standard routing (at least not that I am used to working with).
This is bad because it prevents the use of some forms of access controls on BSD and Linux servers on the LAN side, TCP Wrappers and iptables for example. This can create obvious security problems when WAN ports are set to forward to such a LAN client. We are already getting hit with robot-like script attacks on our server, this was a problem with our Linksys router, but with the above mentioned tools and scripts we were able to block abusive clients.
Perhaps an Apple can work on resolving this issue in a future firmware release, at least make it an option... Anyone from Apple out there?
jmj

Unplugging all network devices from Fios router prevents DVR freezing and remote control lock ups.

All,
I recently had a Verizon tech visit my house due to constant DVR and remote control freezing. TV content was freezing whether it was locally recorded, pulled from another DVR in the house, or On Demand. On a hunch after the tech tested everything and was about to leave, he unplugged my gigabit switch from the Fios router. Lo and behold everything started running perfectly. Since to the tech, the problem was solved, he closed the case and was on his way. The probem is of course I have more devices than the built in router switch provides ports for. My network is compised of an 8 port Netgear gigabit switch downstream from the Fios router with two wireless access points (with their own built in gigbait switches) connecting to the Netgear gigabit switch. There are no loops in the switch topology. I've tried changing out the router, the gigabit switch, removing the wireless acces points individually as well as plugging the access points directly into the Fios router switch (one at a time with no Netgear switch in the middle) and all scenarious cause the DVR/remote control freeezing to come back. The only devices I can plug into the Fios router without causing freezes are PC's....anything with it's own switch essentially brings the network to it's knees. If anyone has an idea how to get my network back in one piece AND make the DVR's/remotes behave, I'd greatly appreciate the help!
My Fios equipment:
MI-424WR GEN-3I rev I (eye) running firmware 40.19.36
5 Motorola HD-DVRs all QIP 7232-2 running software release 1.9.1 platform build 25.39 (Oct. 22, 2012)
Specific config:
75/35 Fios connecting via ethernet from ONT. Set-top boxes connect to Fios router coax port via powered splitter.
*All SNR/dB mesasurements taken by the tech from the set-top boxes and router are well within spec.
Fios router provides DHCP addressing. Wireless N access points are configured for roaming with the same SSID and non-overlapping channels. Access points are not providing routing or IP adressing...all layer 3 and up services still provided by Fios router
Diagram:
ONT
|
Fios Router ---------Cable Splitter---------Set Top Boxes
|
Netgear Switch
|           |
WAP1    WAP2

WayfarerII wrote:
... DVR ... remote ... freezing ... TV ... whether ... locally recorded, pulled from another DVR ...
... tech ... unplugged my gigabit switch from the Fios router ... and ... everything started running perfectly ...
... config:
75/35 Fios ... via ethernet from ONT ... Set-top boxes connect to Fios router via powered splitter ...
ONT
|
| cat5
|
Fios Router ---------Cable Splitter---------Set Top Boxes
|
Netgear Switch
|           |
WAP1    WAP2
I am inclined to echo several of the "tns" comments, particularly with respect to your splitter. My layout is based on a standard 8-port splitter of the type usually supplied in a VZ install. In addition I do have a ChannelPlus device that functions as a powered splitter, but its use is limited to distribution of secondary TV signals to older analog TVs. My first point then is that this may be an offender as "tns" has suggested.
In addition, I'd describe your wiring as "non-standard" (red-colored items in the above diagram)  As you're no doubt aware, with 75/35 you don't really need Cat5e from the ONT (your original diagram). It seems the highest tiers do require it, but in "standard" installations this run is coax directly to an 8-port non-powered splitter (below diagram), then from that splitter via coax to all STBs and CableCards, other TVs, et.), and also to the Actiontec.   Subsequent feeds from the Actiontec to wired devices (including WAPs) are via Ethernet (typically Cat 5e).
In fact I don't immediately see how your STBs get additional services such as On Demand and IMG with the wiring shown in your diagram (perhaps someone can help me out here). In "standard" installs the Actiontec must be connected via coax to the ONT to provide such services to other network clients. I don't see that requirement being met here.
For starters I'd recommend that you change your service from WAN Ethernet to WAN coax. This can easily be accomplished over the telephone. Then I'd run coax directly from the ONT to the Actiontec as in my revised diagram below (blue-colored items). If your setup can manage with this arrangement, I think it will help greatly with the "freezing" issue.
ONT - - - - - - coax - - - - -
                                         |
Fios Router --- coax--- Standard 8-Port Splitter --- coax --- Set Top Boxes
|cat5
Netgear Switch
|cat5          |cat5
WAP1 WAP2
Subsequent Note: You provided additional info while I was composing a response, and I'd like to offer another comment. Structured wiring "panels" of the type usually available are pre-configured to provide data, phone and video. This usually means that one is in certain respects limited by the ideas of the panel designer. I have what can be called a structured wiring layout, but it really is composed of individual small custom networks for each service (automation, security, video, data, telco, etc.), configured so that all wiring terminates in "home run" fashion at a central panel (a few details here: http://forums.verizon.com/t5/Home-Networking/Cmon-Show-Us-Your-Network/m-p/481733#M765 ). This layout makes it easier to make adjustments (and there have been quite a few over the intervening years). I'm thinking that in your case you may have to abandon the powered splitter (presumably) built into the panel in order to avoid your present fix.
Subsequent Subsequent Note:   From your description it seems that you are using more than a single "whole house" DVR to supply programming to other devices. This is a bit puzzling to me because somewhere along the line I recall reading that only a single whole house DVR was allowed on the network. Can you elaborate a bit?

ASA 5505 - L2TP over IPsec - Remote Address shows outside interface address

Using an ASA 5505 for firewall and VPN. We've enabled L2TP over IPsec to allow Windows clients to connect without third party software.
The devices complete the connection and authenticate fine, but then are unable to hit any internal resources. Split tunneling seems to be working, as they can still hit outside resources. Packet tracer shows tcp flowing freely between VPN clients (192.168.102.0/24) and internal resources (192.168.100.0/24). Even the NAT translation looks good in packet tracer.
I pulled up the session details for one of the VPN clients in the ASDM and under the IPsecOverNatT details, it is showing the VPN client's remote address correctly, but displays the local address as the address assigned to the outside interface (which the client is using to connect.) This seems to be the problem, as viewing detailed connection logs shows the internal resources trying to send packets back to the outside interface rather than the VPN client's assigned internal addresses. Details:
Crypto map tag: SYSTEM_DEFAULT_CRYPTO_MAP, seq num: 65535, local addr: [OUTSIDE INTERFACE ADDRESS]
local ident (addr/mask/prot/port): ([OUTSIDE INTERFACE ADDRESS]/255.255.255.255/17/1701)
remote ident (addr/mask/prot/port): ([VPN CLIENT ADDRESS]/255.255.255.255/17/0)
current_peer: [VPN CLIENT ADDRESS], username: vpnuser
dynamic allocated peer ip: 192.168.102.1 [This is what I think it should be showing for local ident]
dynamic allocated peer ip(ipv6): 0.0.0.0
#pkts encaps: 16, #pkts encrypt: 16, #pkts digest: 16
#pkts decaps: 18, #pkts decrypt: 18, #pkts verify: 18
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 16, #pkts comp failed: 0, #pkts decomp failed: 0
#post-frag successes: 0, #post-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#pkts no sa (send): 0, #pkts invalid sa (rcv): 0
#pkts encaps failed (send): 0, #pkts decaps failed (rcv): 0
#pkts invalid prot (rcv): 0, #pkts verify failed: 0
#pkts invalid identity (rcv): 0, #pkts invalid len (rcv): 0
#pkts invalid pad (rcv): 0,
#pkts invalid ip version (rcv): 0,
#pkts replay rollover (send): 0, #pkts replay rollover (rcv): 0
#pkts replay failed (rcv): 0
#pkts min mtu frag failed (send): 0, #pkts bad frag offset (rcv): 0
#pkts internal err (send): 0, #pkts internal err (rcv): 0
local crypto endpt.: [OUTSIDE INTERFACE ADDRESS]/4500, remote crypto endpt.: [VPN CLIENT ADDRESS]/8248
path mtu 1500, ipsec overhead 82(52), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 05BFAE20
current inbound spi : CF85B895
inbound esp sas:
spi: 0xCF85B895 (3481647253)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Transport, NAT-T-Encaps, IKEv1, }
slot: 0, conn_id: 77824, crypto-map: SYSTEM_DEFAULT_CRYPTO_MAP
sa timing: remaining key lifetime (kB/sec): (4373998/3591)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x000FFFFD
outbound esp sas:
spi: 0x05BFAE20 (96448032)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Transport, NAT-T-Encaps, IKEv1, }
slot: 0, conn_id: 77824, crypto-map: SYSTEM_DEFAULT_CRYPTO_MAP
sa timing: remaining key lifetime (kB/sec): (4373999/3591)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001
Any ideas? The remote clients connect but when internal resources try to send traffic to the VPN clients, the packets are directed to the outside interface address instead of the local address assigned to the VPN client.

I have what I believe to be a similar issue. Site to site vpn is working well. That is site b can ping and send traffic to site A but Site A can not. Site B is a 3rd party vpn router. Site A is a Cisco 5505.
It appears that when the crypto map inserts the route into the routing table it shows the route via the outside IP of the outside interface and not the IP of Site B. in the crypto map I can see the proper ip address for the peer. I can't figure out why when it inserts the route that it uses the wrong ip address

RV 120W Port Fowarding and remote address

Similar Messages

Maybe you are looking for