RV082 DMZ Configuration Question - Point to Point

Hello,
We have 2 offices in different countries both using the RV082 router. Currently both offices have an internet connection on WAN1 and that is working fine.
We are adding a Point to Point circuit between the two offices, and my question is on the RV082 configuration on each side.
I was going to configure WAN2 in DMZ mode on each router, then connect the point to point circuit to the WAN2 port. On the China side, the DMZ IP will have to be a private address (192.168.177.1), while the DMZ port on the San Diego side will be a public IP.
We need internal computers to be able to go to the internet normally through WAN1, but also go through WAN2 if they are trying to reach the other network. I will be adding routes on each RV082 for this.
Is there anything wrong with this configuration? Do I need to change the routers from Gateway to Router mode? Does it matter if the DMZ WAN2 port has a private IP address?
Any advice or tips are greatly appreciated!
Thank you in advance,
Eric

Thanks Tom but that thread is not exactly what I was looking for. Mainly I just want to know if the RV082 can act as a fully functioning router with the two WAN ports going to different networks. So the LAN side would hit the router, look at the routing table and know which WAN port to go out of. Using the DMZ seems like it will work, but I have never tried it so I wanted to throw it out there and see if anyone has done this before.

Similar Messages

Question POS point to point with no APS

One side
POS1/0/0
SECTION
LOF = 0 LOS = 0 BIP(B1) = 0
LINE
AIS = 0 RDI = 0 FEBE = 0 BIP(B2) = 0
PATH
AIS = 1 RDI = 2 FEBE = 1119 BIP(B3) = 463
PLM = 4 UNEQ = 0 TIM = 0 TIU = 0
LOP = 0 NEWPTR = 0 PSE = 0 NSE = 0
Active Defects: None
Active Alarms: None
Alarm reporting enabled for: SF SLOS SLOF B1-TCA B2-TCA PLOP B3-TCA
Framing: SONET
APS
COAPS = 0 PSBF = 0
State: PSBF_state = False
Rx(K1/K2): 00/00 Tx(K1/K2): 00/00
S1S0 = 00, C2 = 16
Remote aps status (none); Reflected local aps status (none)
Other end
POS1/0/0
SECTION
LOF = 0 LOS = 0 BIP(B1) = 0
LINE
AIS = 0 RDI = 0 FEBE = 0 BIP(B2) = 0
PATH
AIS = 1 RDI = 1 FEBE = 419 BIP(B3) = 859
PLM = 3 UNEQ = 0 TIM = 0 TIU = 0
LOP = 0 NEWPTR = 0 PSE = 0 NSE = 0
Active Defects: None
Active Alarms: None
Alarm reporting enabled for: SF SLOS SLOF B1-TCA B2-TCA PLOP B3-TCA
Framing: SONET
APS
COAPS = 0 PSBF = 0
State: PSBF_state = False
Rx(K1/K2): C0/15 Tx(K1/K2): 00/00
S1S0 = 00, C2 = 16
Remote aps status (none); Reflected local aps status (none)
My question is the Kbytes what does that mean loss of signal on RX ? Rx(K1/K2): C0/15 Tx(K1/K2): 00/00
There is no Auto protection Switching on this circuit it is straight point to point.

Hello,
the meaning of the K1/K2 bytes are defined in "Telcordia document GR-253—Synchronous Optical Network (SONET) Transport Systems: Common Generic Criteria".
K1/K2 = 00/00 means no APS (respective no APS requests)
K1/K2 = C0/15 means
K1 = 11000000, which translates to "low priority signal failure on protected channel"
K2 = 00010101, which translates to "working channel 1 in 1+1 redundancy, bidirectional mode"
So this can mean, that the provider equipment on one end has APS configured, whereas your euipment has no APS configured. APS is local between your interface and the provider equipment (multiplexer).
Hope this helps! Please rate all posts.
Regards, Martin

Air Bridge 1310 - Configuring QOS on Point to Point

I have 2 BR1310 Air Bridge's configured for a point to point connection, one is root,one is non-root. In configuring QOS for VOIP for the first time, I'm looking for a best practice configuration.
Behind each bridge is a 3560 switch that has QOS configured on each switchport. Our environment consists of 7960 desk phones.

Hi Michael,
Have a look at these docs. Hopefully they will help get you started;
Cisco Aironet 1300 Series Outdoor Access Point/Bridge Software Configuration Guide, 12.3(4) JA
Chapter 14 - Configuring QoS
This chapter describes how to configure quality of service (QoS) on your access point/bridge. With this feature, you can provide preferential treatment to certain traffic at the expense of others. Without QoS, the access point/bridge offers best-effort service to each packet, regardless of the packet contents or size. It sends the packets without any assurance of reliability, delay bounds, or throughput.
From this doc;
http://www.cisco.com/en/US/docs/wireless/access_point/1300/12.3_4_JA/configuration/guide/o13qos.html
Giving Priority to Voice Traffic
This section demonstrates how you can apply a QoS policy to your wireless network's voice VLAN to give priority to wireless phone traffic.
In this example, the network administrator creates a policy named voice_policy that applies voice class of service to traffic from Spectralink phones (protocol 119 packets). The user applies the voice_policy to the incoming and outgoing radio ports and to the outgoing Ethernet port for VLAN 77.
Use the Apply Policies to Interface/VLANs drop-down menus to apply policies to the access point Ethernet and radio ports. If VLANs are configured on the access point, drop-down menus for each VLANs' virtual ports appear in this section. If VLANs are not configured on the access point, drop-down menus for each interface appear.
From this doc;
http://www.cisco.com/en/US/docs/wireless/access_point/1300/12.3_4_JA/configuration/guide/o13qos.html#wp1047736
Hope this helps!
Rob

Solman_Setup, J2EE Configuration, start J2EE Config points at old server

Hi,
I have recently performed a system copy on my solution manager server. As far as I'm aware I have followed the correct procedure and performed all post installation tasks.
Since the copy I have a problem with my SLD which is in my solution manager system. I think it may be one of two problems.
Firstly
When I run SOLMAN_SETUP initial configuration step 3 - Start J2EE Configuration the url launched points at my old server name rather than the new one.
I have raised a call with SAP and have so far done the following things
Notes : 1297849 & 805344 - Everything pointed to new server
Notes 1301106 & 669669 - I have patched ABAB & JAVA AND updated the Content in the SLD
Note 624282 : Transaction LCRSERVADDR contains no entries and the SLDCHECK launches the correct SLD info.
None of these notes resolved my issue
Secondly
In transaction SMSY my solution manager settings are not correct - The ABAP stack is correct the message server points to the new message server, however the JAVA stack message server still points to the old system. I have tried to delete but I am unable to as I get the message system in use in Groups / Landscapes. SAP have done work on my server as part of the SURGEN programme and I'm sure this is something they have done that I am not able to remove.
Please help.
Regards
Tracey Smith. (John Beard - Corporate account for Kelda Group)

You are using client 100 for example. It seems so that the UME store from the Java stack still points to the 001 client (probably you made a client copy on ABAP side from 001 to 100????). The CTC want to check SOLMAN_ADMIN user in the system where the UME destination is set (in this case 001).
So basically you got now 2 options: redirect your Java UME to client 100 or you simply create the required user SOLMAN_ADMIN in 001 client.

URL Error - Configuring watched folder end point in Adobe LC

I am trying to configure watched folder end point in Adobe LC and it is giving me below error
Invalid url \\server1\PDFLiveCycleFolder. Please check for invalid filename characters in the url.
Same path can be accessed from windows explore. What could be the reason?

You need to check the access rights.
Check this - http://help.adobe.com/en_US/livecycle/9.0/adminHelp/admin.htm?content=000106.html
~ Varun

Project Validaation error, no question marks/exclamation point, whats wrong

I've read the forum recommendations on addressing this error to no avail. I cant burn. I was prompted for project validation error. Checked DVD map but no question marks/exclamation points. I checked all chapter markers on iMovie and they were all correct. Everything on DVD map looks correct. Tried people's suggestion of saving as Disc Image or even as Video-TS but got the same error message on project validation. I've tried and retried for several hrs already but cant figure out what could be wrong.
I am using iMovie HD and iDVD 08. Dragged movie into iDVD project. Have done similar projects before without problem.
Help pls. This is so frustrating after working many hours on iDVD project.

Yes filled all the image drop zones, no extra buttons, previewed everything in iDVD map and all ok. Used a 6.0 theme in one menu, and a 5.0 or old theme in a submenu. Have done that too before without any problem.
How can I check if there is an extra unused "holder"? there are no blank buttons that I see.
thanks

Question about Access Point

Hello
In my work, we have two WAP4410N Wireless-N Access Point with Power Over Ethernet, but ¿how many users support each access point? And, somebody knows how I can configure the two access point to be viewed as one in all laptops? Normally, the laptops found access point 1 and acces point 2 but, somebody says me I can configure them as if they are one.
Thanks

Eliana,
The rule of thumb is a typical Ap can handle 20 users each, but the actual capacity could be more or less, alot of it depends on the traffic the users are generating and the bands/protocols.
for example if you are using 802.11g @ 54mbps, in reality your getting roughly 36 mbps of actual throughput, so then you have 20 users each using 100k of bandwidth which is about 2mb of traffic, you could handle more, but if you have 10 users that are pulling 1.5mbps then your cumlative traffic is 15mbps; so load is traffic dependant. Retries and other issues can affect this as well but are hard to calculate.
Also make sure the 2 access points you setup are on different channels.
Null or limited connectivity?? do you mean low signal strength or no network access?
Hope this helps.
Please rate useful posts

AP1242G Point-to-Point Bridge Configuration

Hi,
I have two Cisco AP 1242G and i'm trying to configurate a Point-to-Point Bridge Configuration to connect two wired LAN. Figure 1.8
http://www.cisco.com/en/US/docs/wireless/access_point/1300/installation/guide/130h_c1.html
I would connect two wired networks.
I tryed two configurations:
Root and Non-Root AP. This way every wired PC on the Root AP can connect to the Access points, but cannot connect to the wired PC on the Non-Root AP.
AP and WGB. Even this way the wired computers on one AP cannot connect to the wired PC on the WGB. This way only the wireless client can connect to the wired network.
Any advise? This is my network:
Root Bridge                                 Non Root Bridge
10.0.0.1                                      10.0.0.2
Wired clients on the RB                Wired clients on the Non RB
10.0.0.100                                   10.0.0.200

Thank you for the answer.
Root bridge:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap1
enable secret 5 $1$z4Wo$o9KqD9KSFmKFg62JiPVPU/
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 syslog
dot11 ssid Bridge
   authentication open
   guest-mode
   infrastructure-ssid
dot11 network-map
username Cisco password 7 13261E010803
username 003a999f3dc0 password 7 15425B5F0573727D2E60312143
username 003a999f3dc0 autocommand exit
username c89c1ddac8cc password 7 13064F4B085D002E2A27703036
username c89c1ddac8cc autocommand exit
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
ssid Bridge
antenna gain 6
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2422
station-role root bridge
distance 1
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
interface BVI1
ip address 10.0.0.1 255.255.255.0
no ip route-cache
ip default-gateway 10.0.0.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server local
no authentication eapfast
no authentication leap
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end
Non-root Bridge:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap2
enable secret 5 $1$z4Wo$o9KqD9KSFmKFg62JiPVPU/
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 syslog
dot11 ssid Bridge
   authentication open
   guest-mode
   infrastructure-ssid
dot11 network-map
username Cisco password 7 13261E010803
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
ssid Bridge
antenna gain 6
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role non-root bridge
mobile station scan 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 2467 2472
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
interface BVI1
ip address 10.0.0.2 255.255.255.0
no ip route-cache
ip default-gateway 10.0.0.2
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end

OSPF Point to Point network question

I just have a quesiton about the linkstate database. I have a point-to-point link between a couple routers(makes sense) and when I look at the database for the lsa type 1, it shows the router has 2 links in the area and one is a stub. I don't under stand how thats possible.
            OSPF Router with ID (4.4.4.4) (Process ID 1)
                Router Link States (Area 1)
LS age: 1136
Options: (No TOS-capability, DC)
LS Type: Router Links
Link State ID: 4.4.4.4
Advertising Router: 4.4.4.4
LS Seq Number: 80000007
Checksum: 0xC738
Length: 60
Number of Links: 3
    Link connected to: another Router (point-to-point)
     (Link ID) Neighboring Router ID: 1.1.1.1
     (Link Data) Router Interface address: 192.168.41.2
      Number of TOS metrics: 0
       TOS 0 Metrics: 10
    Link connected to: a Stub Network
     (Link ID) Network/subnet number: 192.168.41.0
     (Link Data) Network Mask: 255.255.255.0
      Number of TOS metrics: 0
       TOS 0 Metrics: 10
Can anyone explain to me what I'm seeing here? Thanks

Full config
hostname R4
boot-start-marker
boot-end-marker
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
ip cef
no ip domain lookup
multilink bundle-name authenticated
archive
log config
hidekeys
ip tcp synwait-time 5
interface FastEthernet0/0
ip address 192.168.104.1 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 dallas
ip ospf 1 area 1
duplex auto
speed auto
interface FastEthernet0/1
ip address 192.168.41.2 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 dallas
ip ospf 1 area 1
duplex auto
speed auto
router ospf 1
router-id 4.4.4.4
log-adjacency-changes
ip forward-protocol nd
no ip http server
no ip http secure-server
control-plane
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
end
R4#

SAP-JEE, SAP_BUILDT, and SAP_JTECHS and Dev Configuration questions

Hi experts,
I am configuring NWDI for our environment and have a few questions that I'm trying to get my arms around.
I've read we need to check-in SAP-JEE, SAP_BUILDT, and SAP_JTECHS as required components, but I'm confused on the whole check-in vs. import thing.
I placed the 3 files in the correct OS directory and checked them in via the check-in tab on CMS.   Next, the files show up in the import queue for the DEV tab. My questions are what do I do next?
1. Do I import them into DEV? If so, what is this actually doing? Is it importing into the actual runtime system (i.e. DEV checkbox and parameters as defined in the landscape configurator for this track)? Or is just importing the file into the DEV buildspace of NWDI system?
2. Same question goes for the Consolidation tab.    Do I import them in here as well?
3. Do I need to import them into the QA and Prod systems too? Or do I remove them from the queue?
Development Configuration questions ***
4. When I download the development configuration, I can select DEV or CON workspace. What is the difference? Does DEV point to the sandbox (or central development) runtime system and CONS points to the configuration runtime system as defined in the landscape configurator? Or is this the DEV an CON workspace/buildspace of the NWDI sytem.
5. Does the selection here dictate the starting point for the development? What is an example scenarios when I would choose DEV vs. CON?
6. I have heard about the concept of a maintenance track and a development track. What is the difference and how do they differ from a setup perspective?   When would a Developer pick one over the over?
Thanks for any advice
-Dave

Hi David,
"Check-In" makes SCA known to CMS, "import" will import the content of the SCAs into CBS/DTR.
1. Yes. For these three SCAs specifically (they only contain buildarchives, no sources, no deployarchives) the build archives are imported into the dev buildspace on CBS. If the SCAs contain deployarchives and you have a runtime system configured for the dev system then those deployarchives should get deployed onto the runtime system.
2. Have you seen /people/marion.schlotte/blog/2006/03/30/best-practices-for-nwdi-track-design-for-ongoing-development ? Sooner or later you will want to.
3. Should be answered indirectly.
4. Dev/Cons correspond to the Dev/Consolidation system in CMS. For each developed SC you have 2 systems with 2 workspaces in DTR for each (inactive/active)
5. You should use dev. I would only use cons for corrections if they can't be done in dev and transported. Note that you will get conflicts in DTR if you do parallel changes in dev and cons.
6. See link in No.2 ?
Regards,
Marc

WLC and Point-to-Point Bridge/Repeater

Hi all,
I have a WLC2125 and 11 LAPs installed in our warehouse. There is going to be one additional AP but the problem is we can´t provide cabling in that area. The idea is to have this additional AP connected to one of the existing LAPs and repeat the signal of it or to create point-to-point link, the question is, would LAPs and WLC support such configuration, is it possible at all? If so, please let me know the config process or some documentation.
Thanks in advance.

Hi,
Q> What do I gain by going for mesh topology?
>> A lot.. here is the details..
http://www.cisco.com/en/US/prod/collateral/wireless/ps5679/ps6548/prod_brochure0900aecd8036884a.html
http://www.cisco.com/en/US/netsol/ns621/index.html
Q> I can´t eliminate WLC from my network,
>> Mesh network will not work without WLC.
Q> instead I thought of leaving one LAP as autonomous AP and bridging it with the new AP that will not have a physical connection
>> The only way to Integrate the Autonomous AP to LWAPP AP is by using the WGB Mode, the REPEATER is not supported and even the Point to Point bridging. The WGB doesnot provide Wireless where in you can conect a switch and conect wired clients to it.
Regards
Surendra

Cisco 1310 point to point encryption?

Howdy.
We have two Cisco 1310 devices working currently in point to point mode. I have a couple of questions regards this..
1. What is the best method to encrypt the point to point links between the two? We would like to use local passwords for this.
2. We have two point to point links on each device. Would we be able to configure one link for encryption without dropping our connection to that device and then configure the second one?
3. Is there any sample guide for point to point encryption?
Many thanks..
Taff.

1. What is the best method to encrypt the point to point links between the two? We would like to use local passwords for this.
ANS - We can use Ciphers TKIP as the encryption and WPA-PSK as the authentication.
2. We have two point to point links on each device. Would we be able to configure one link for encryption without dropping our connection to that device and then configure the second one?
ANS - I request you to brief me out on "we have 2 P2P on each device" does this mean we have 2 SSID configured??
3. Is there any sample guide for point to point encryption?
https://cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008054339e.shtml#pers
Regards
Surendra

Bridge Point to Point with AP 1552EU - Maximun Data Rate

Hi all, I have a question for you, and I need your help.!!!
I have two site (Central and Remote) and I did a link point to point between it. These AP are managed by a WLC 5508, the distance between this AP is 30 Mts or 98 feed, I have configured the channel width in 40Mhz in the WLC, and MCS-5 in the data rate sección of Bridge AP. I did tests flooding the link and I only can transfer 40Mbps in both directions at the same time. This ap model is 802.11n capable. So how can I increase the data rate from 40Mbps to 100 o more Mbps.?
The antennas are directional with two ports (TX/RX) and are connected in the ports 1 and 3 of AP.
I hope your response.
Thanks,

Wow. You're radios are only 100 feet apart and you have 14dBi directional panels hooked up to them? Hopefully the TX power is configured properly and is turned *way* down.
You should certainly be able to get 802.11n HT rates between two 1550s with these antennas and 2 spatial streams. You *should* be able to achieve HT MCS 15 at 40MHz with a PHY data rate of 300 Mbps. Actual Layer 3 throughput would be approaching 100Mbps, but I think you are more likely to see ~80Mbps in actuality.
Best of luck!

BR1310 Wireless Point-to-Point Bridge

I recently configured two BR1310 Access Point/Bridges into a Root & Non-Root (without clients) configuration to extend a LAN to another building. I configured the units to use LEAP (Root acting as Radius server), authenticating with Network-EAP w/ WPA2, and AES as the encryption cipher. Being that WPA2/LEAP handle the key management, I had a question regarding best practices. I currently have configured a "dot1x timeout reauth-period" of 300 seconds, in addition a broadcast-key change of the same. I have 4 VLANs trunked over this bridge, and since I have no wireless clients associating with these bridges, I'm assuming I do not need the broadcast-key rotation. The idea is that by forcing a dot1x reauth, a new PTK/PMK will be created every 300 seconds. Is that a recommended practice?
Also, being that I have 4 VLANs trunked across these bridges, is there a way to verify (via debug?) that all VLANs traffic is being encrypted by AES? Obviously when I do a "show dot11 assoc all", only my native VLAN (mgmt) shows as AES, no other VLANs.
Thanks,
Dan

Hello,
it normal that you only see with "sh dot11 ass .." the native vlan. On this vlan (infratstructure) will be realize the authentication and encryption. That means not,
all other vlan,s are not encrypted !! Of course they are, because the vlan,s will be "transport" sequential in the AES encrypted connection. You can by the way see this with a WLAN-ANALYSOR.
The timeouts (reauth-period) not so low I use 10000 sec. It is not mor secure If you so often reauthenticate the session.
A Cisco staff had by my customer configured 40000 sec. A good choice is once per day.
regards Ulrich

EventInterfaces: Send via PI instead of point-to-point

Is it true that event interfaces only support sending point-to-point (via a logical port configured in SOAMANAGER)? Or can they send via PI, too, like other web service interfaces? If so, how?

Hi Yvonne,
Your question sounds as if you want to utilize a standard mechanism of printing in SAP ME but need to set up the physical printer or print server to send the document as email instead of printing it on a paper. If so, I guess such question should be addressed to a vendor of the printer. If you use a multifunctional copy system rather than a simple printer, I would believe it might be configured in such way.
If you want to change a printing process of SAP ME so that the output is an email instead of a document sent to a physical printer, then you really need a customization. The problem is that the current implementation of email notifications in SAP ME allows a user to send email at triggering a message. Configurable (not hard-coded into a logic of specific features like Production Interface or SPC) messages can be fired from Real-Time Warnings, from NC Log and from Message Board. Once your process is not related to the first 2 features, only manual Create Message (of FREE_FORM messages type) from Message Board ca nbe used. If you happen to embed this manual Create Message in your process, then you can turn on the system rule to enable saving PDF files to the file system and change FREE_FORM message type to mention this location of the files and assign to specific email addressees.
If you cannot afford to use Create Message plugin in manual mode, then you can discuss with SAP ME Consulting a possibility of enhancement to implement a hookable version of Create Message functionality. This looks like a good future enhancement, in fact.
Regards,
Sergiy

RV082 DMZ Configuration Question - Point to Point

Similar Messages

Maybe you are looking for