Static ARP Entry telnet command - techies take a look pls!!

Hello Seniors,
What is the TYPICAL telnet commpand for binding a MAC address to an IP (aka Static ARP entry) on most Linksys routers? I don't have GUI for this within the FW so telnet is the hope.
I am making question quite simple with ahope the story behind is not quite necessary to desist the thread from going astray
I am inside my telnet# on 192.168.1.1, I just need the usual command syntax,
Thank you.
Solved!
Go to Solution.

Linksys X3500:
arp add 192.168.1.xxx aa:bb:cc:dd:ee:ff
arp delete 192.168.1.xxx
arp show

Similar Messages

Static ARP entry command no worky with vlan

Anyone know why this happens? I'm trying to enter a static arp entry and assign it to a specific vlan, for example:
arp 192.168.200.1 aaaa.bbbb.cccc arpa vlan 15
% Invalid input detected at '^' marker
When this is entered it errors out and marks the word vlan like it is invalid, though it is a valid option when inching forward using the ? help character. I tried multiple iterations and the only other response I get is if I enter vlan 1. To that the router responds with:
Bad ARP command - Interface may only be specified when bridging IP
Is one to assume that the vlan need not be specified? I opted to enter the vlan only for uniformity, but then when it behaved strangely I became curious. I wonder in what scenario adding the vlan to an arp entry would be valid and acceptable.
Thanks, Mike

Hello,
What you experienced is the normal behavior. The L3 device does not allow
you to specify the interface when you are operating in routed mode. Based on
the address you have configured, it will automatically allocate the static
ARP entry to appropriate interface. If you have entered an IP that does not
belong to any subnet, then all interfaces will consider that ARP entry. Only
if you configure two interfaces in bridge mode (like in the case of PPPoE
scenarios), then you can specify the interface ID.
Hope this helps.
Regards,
NT

Static Arp Entry for Exchange 2010

Hello All,
I was hoping someone could assist with an issue that our Exchange team are having, specifically with replication traffic traversing our DC to DR site.
The infrastructure consists of a Layer 3 data centre and a disaster recovery site, so essentially its a live/backup environment. Both the DC and DR site are connected with a LES using routed interfaces.
The Exchange cluster at the DC is associated with the following subnets:
MAPI - 10.1.30.X
Replication: 10.1.230.X
DR site has the following subnets associated with the exhange cluster :
MAPI - 192.168.4.X
Replication - 192.168.230.X
When an attempt is made to create a database/mailbox on an exchange server at the DC and copy it using the replication subnet source: 10.1.230.X to destination subnet: 192.168.230.X, the copy process fails.
Replication traffic in general going from DC to DR or vice-versa is subject to constant problems and seems unreliable. Our exchange team have to manually copy mailboxes from one cluster to the other using Windows explorer which works fine.
The Exchange cluster at both sites reside within a VMWare ESX enclosure and connect to Cisco 6500 switches. Would the Cisco switches require a static arp entry for their respective Exchange clusters, which should be configured on each switch? If this was missing could this be the root cause of the replication problems we're experiencing? Or does this depend on whether the exchange cluster is using NLB Unicast or Multicast mode?
Any assistance would be most appreciated.
Regards,
Jamie

Jamie,
Have a look at this link:-
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080a07203.shtml
It depends on how the team NLB is set up.
You may need static mac & static arp as well as disabling igmp snooping if multicasting is bein used.
Regards,
Alex.
Please rate useful posts.

Static arp entries in zones

Hi
I'm aware of, and experiencing the problem with my arp table being poisoned. I'm working on updating the Broadcom drivers but in the meantime need to set some static entries in arp. My setup has the global zone configured on e1000g0, with a second interface e1000g1 used by a non-global-zone, alll interfaces are shared. The global zone has no ip and neither is it up on e1000g1, only plumbed. My point being this, when I create a static arp entry for my the non-global-zones default gateway, which can only be done in the global zone, it is assigned to the e1000g0 device. There is a learnt entry for the same gateway (same ip) but on the e1000g1 interface. Ideally I want the learnt entry removed and the static entry assigned to the e1000g1 interface.
Is this possible, and if not am I worrying about a problem that doesn't exist. My fear is that the non-global-zone only being aware of the e1000g1 device will only use the learnt arp entry which is in danger of changing.
If any of this made sense, please can you advise whether there is a potential problem and if it can be rectified.
Thanks

813137 wrote:
Hi
I'm aware of, and experiencing the problem with my arp table being poisoned. I'm working on updating the Broadcom drivers but in the meantime need to set some static entries in arp. My setup has the global zone configured on e1000g0, with a second interface e1000g1 used by a non-global-zone, alll interfaces are shared. The global zone has no ip and neither is it up on e1000g1, only plumbed. My point being this, when I create a static arp entry for my the non-global-zones default gateway, which can only be done in the global zone, it is assigned to the e1000g0 device. There is a learnt entry for the same gateway (same ip) but on the e1000g1 interface. Ideally I want the learnt entry removed and the static entry assigned to the e1000g1 interface.
Is this possible, and if not am I worrying about a problem that doesn't exist. My fear is that the non-global-zone only being aware of the e1000g1 device will only use the learnt arp entry which is in danger of changing.
If any of this made sense, please can you advise whether there is a potential problem and if it can be rectified.Unless your global zone gets an address on the same subnet as the NGZ for e1000g1, it can't add
a static arp entry in the shared IP configuration..
OTOH, you can do this with exclusive IP zones, which is really a much cleaner config/administrative model.
I'd suggest: set up the NGZ as ip-type exclusive, assign it e1000g1, and let the NGZ itself add the static arp entry
--Sowmini

Adding static arp entries in non-global zones

It doesn't seem to be working:
# arp -s 10.0.73.8 02:23:23:23:32:12 permanent
10.0.73.8: Not owner
Any privileges or devices I have to add to the non-global zone to get this working?
Thanks.

swiergot wrote:
It doesn't seem to be working:
# arp -s 10.0.73.8 02:23:23:23:32:12 permanent
10.0.73.8: Not owner
Any privileges or devices I have to add to the non-global zone to get this working?
Thanks.Unless you're running exclusive IP, the ARP table is under control of the global zone. Have you made the change in the global zone, to determine if it propogates or not? It should.
Best,

Can you take a look pls.....urgent

i'm writing a tax calculator applet i've no compilation errors but my applet doesn't seems to run. can u guys pls help....
import java.applet.*;
import java.awt.*;
import java.awt.event.*;
public class TaxCal extends Applet implements ActionListener {
     private TextField txtIncome, txtAge, txtChild, txtParent, txtCourse, txtMaid, txtPay;
     private Button b2, b3;
     private Calculate calc;
     public void init() {
               setBackground(Color.lightGray);
               /* Create the input boxes, and make sure that the background
               color is white. (On some platforms, it is automatically.) */
               txtIncome = new TextField(10);
               Panel incomePanel = new Panel();
               incomePanel.setLayout(new BorderLayout(2,2));
               incomePanel.add( new Label("Input your annual income"), BorderLayout.WEST );
          incomePanel.add(txtIncome, BorderLayout.CENTER);
               txtAge = new TextField(2);
               Panel agePanel = new Panel();
               agePanel.setLayout(new BorderLayout(2,2));
               agePanel.add( new Label("Input your age"), BorderLayout.WEST );
               agePanel.add(txtAge, BorderLayout.CENTER);
               txtChild = new TextField(2);
               Panel childPanel = new Panel();
               childPanel.setLayout(new BorderLayout(2,2));
               childPanel.add( new Label("Number of children"), BorderLayout.WEST );
               childPanel.add(txtChild, BorderLayout.CENTER);
               txtParent = new TextField(1);
               Panel parentPanel = new Panel();
               parentPanel.setLayout(new BorderLayout(2,2));
               parentPanel.add( new Label("Number of parent that live with you"), BorderLayout.WEST );
               parentPanel.add(txtParent, BorderLayout.CENTER);
               txtCourse = new TextField(5);
               Panel coursePanel = new Panel();
               coursePanel.setLayout(new BorderLayout(2,2));
               coursePanel.add( new Label("Course fee"), BorderLayout.WEST );
               coursePanel.add(txtCourse, BorderLayout.CENTER);
               txtMaid = new TextField(5);
               Panel maidPanel = new Panel();
               maidPanel.setLayout(new BorderLayout(2,2));
               maidPanel.add( new Label("Maid levy paid"), BorderLayout.WEST );
               maidPanel.add(txtMaid, BorderLayout.CENTER);
               txtPay = new TextField(10);
               txtPay.setEditable(false);
               Panel payPanel = new Panel();
               payPanel.setLayout(new BorderLayout(2,2));
               payPanel.add( new Label("Please pay"), BorderLayout.WEST );
               payPanel.add(txtPay, BorderLayout.CENTER);
               Panel buttonPanel = new Panel();
               buttonPanel.setLayout(new GridLayout(1,3));
               Button b2 = new Button("Reset");
               b2.addActionListener(this);     // register listener
               buttonPanel.add(b2);
               Button b3 = new Button("Calculate");
               b3.addActionListener(this);     // register listener
               buttonPanel.add(b3);
               /* Set up the layout for the applet, using a GridLayout,
          and add all the components that have been created. */
          setLayout(new GridLayout(8,2));
               add(incomePanel);
               add(agePanel);
               add(childPanel);
               add(parentPanel);
          add(coursePanel);
          add(maidPanel);
          add(payPanel);
          add(buttonPanel);
          /* Try to give the input focus to txtIncome, which is
          the natural place for the user to start. */
          txtIncome.requestFocus();
          } // end init()
     public TaxCal() {
     calc = new Calculate();
     public Insets getInsets() {
// Leave some space around the borders of the applet.
     return new Insets(2,2,2,2);
     // event handler for ActionEvent
     public void actionPerformed (ActionEvent e) {
          String s = e.getActionCommand();
          if (s.equals("Calculate"))
               //double income = calc.GetIncome(txtIncome.getText());
               double age = calc.GetAge(txtAge.getText());
               double child = calc.GetChild(txtChild.getText());
               double parent = calc.GetParent(txtParent.getText());
               double course = calc.GetCourse(txtCourse.getText());
               double maid = calc.GetMaid(txtMaid.getText());
               double relief = calc.GetRelief(age, child, parent, course, maid);
               double result = calc.GetResult(txtIncome.getText(), relief);
               txtPay.setText("$" + Double.toString(result));
          else
               txtIncome.setText("");
               txtAge.setText("");
               txtChild.setText("");
               txtParent.setText("");
               txtCourse.setText("");
               txtMaid.setText("");
               txtPay.setText("");
}     // end actionPerformed()
public class Calculate
private double income;
private double age, ageRelief;
private double child, childRelief;
private double parent, parentRelief;
private double course, courseRelief;
private double maid, maidRelief;
private double totalRelief;
private double result;
public Calculate()
income = 0;
age = 0;
ageRelief = 0;
child = 0;
childRelief = 0;
parent = 0;
parentRelief = 0;
course = 0;
courseRelief = 0;
maid = 0;
maidRelief = 0;
totalRelief = 0;
result = 0;
public double GetAge(String theage) {
age = Double.parseDouble(theage);
     //determine age relief
     if(age<55)
     ageRelief += 3000;
     else if(age>=55 && age<= 59)
     ageRelief += 8000;
     else
     ageRelief += 10000;
     return ageRelief;
public double GetChild(String thechild) {
child = Double.parseDouble(thechild);
     //determine children relief
     if(child<=3)
     childRelief += (child*2000);
     else if(child>3 && child<6)
     childRelief += ((child-3)*500 + 6000);
     else
     childRelief += 0;
     return childRelief;
public double GetParent(String theparent) {
parent = Double.parseDouble(theparent);
     //determine parent relief
     if(parent == 1)
     parentRelief += 3000;
     else if(parent ==2)
     parentRelief += 6000;
     else
     parentRelief += 0;
     return parentRelief;
public double GetCourse(String thecourse) {
course = Double.parseDouble(thecourse);
     //determine course subsidy
     if(course != 0 ) {
     if(course <= 2500)
     courseRelief += course;
     else
     courseRelief += 2500;
     return courseRelief;
public double GetMaid(String themaid) {
maid = Double.parseDouble(themaid);
     //determine maid levy
     if(maid != 0) {
     if(maid <= 4000)
     maidRelief += 2 * maid;
     else
     maidRelief += 0;
     return maidRelief;
public double GetRelief(double theage, double thechild, double theparent, double thecourse, double themaid) {
     double totalRelief = age + child + parent + course + maid;
     return totalRelief;
public double GetResult(String theincome, double therelief) {
     income = Double.parseDouble(theincome);
     totalRelief = therelief;
     income =- totalRelief;
     if (income <= 7500)
     result = income * .02;
     else if (income > 7500 && income <= 20000)
     result = 150 + ((income - 7500) * .05);
     else if (income > 20000 && income <= 35000)
     result = ((income - 20000) * .08) + 775;
     else if (income> 35000 && income <= 50000)
     result = ((income - 35000) * .12) + 1975;
     else if (income > 50000 && income <= 75000)
     result = ((income - 50000) * .16) + 3775;
     else if (income > 75000 && income <= 100000)
     result = ((income - 75000) * .2) + 7775;
     else if (income > 100000 && income <= 150000)
     result = ((income - 100000) * .22) + 12775;
     else if (income > 150000 && income <= 200000)
     result = ((income - 150000) * .23) + 23775;
     else if (income > 200000 && income <= 400000)
     result = ((income - 200000) * .26) + 35275;
     else if (income > 400000)
     result = ((income - 400000) * .28) + 87275;
     return result;
} // end of class Calculate
}      // end class TaxCal

In order to run an applet you must encapsulate it in a web page using the APPLET tag and open the web page with an internet browser, or include the APPLET tag in the source code of the applet class and run it with the appletviewer.
In order to run your applet in the appletviewer add this in between the import statements and the class implementation.
<APPLET Code="TaxCal" width="300" height="300">
</APPLET>
Good Luck.

And again firewall issue... (but take a look, pls)

I read posts here again and again, but didn't find an answer; situation:
1. my rmi-app works fine on local network;
2. i deployed Server-side of it on my web-server;
3. web-admin opened 2 ports (1099 & 3456) in server firewall;
4. server started;
5. client runs and binds server object
6. when trying to execute method, exception appears:
Connection refused to host: 127.0.0.1; nested exception is:
java.net.ConnectException: Connection refused: connect
I cannot understand why it wants to connect to 127.0.0.1 ???
Some server code:
Registry r = LocateRegistry.createRegistry(1099);
RmiImpl implementation = new RmiImpl("RmiImpl",3456);
RmiImpl code:
public RmiImpl(String name, int port) throws RemoteException
super(port);
try
Naming.rebind(name, this);
java.policy file on server:
grant
permission java.security.AllPermission;
running server: ./java Server
Client code:
java.rmi.registry.Registry r = java.rmi.registry.LocateRegistry.getRegistry(serverName, 1099);
// this works
myServerObject = (RmiInterface) r.lookup("RmiImpl");
// this is ok, too - I think I have pointer to server object now
myServerObject.getServerInfo();
// here I have Exception:
Connection refused to host: 127.0.0.1; nested exception is:
java.net.ConnectException: Connection refused: connect
any ideas, pls? I thought I almost reached final...
// and excuse my English

Your RMI server doesn't know its hostname or external IP address. Check your host file or whatever DNS configuration you use. If you can't fix that, set java.rmi.server.hostname at the server VM to the server host's external hostname or IP address.
EJP

Emu 1616M PCI question(take a look,pls)

Hi
I live in Turkey.I want to buy emu 1616M PCI sound card but,it's not available in Turkey.I want to order it from the USA.Do you know any sites ship internationally?
Thanks

Maybe not from USA but directly from E-MU - http://www.emu.com/shop/wtb/welcome.asp
jutapa
Message Edited by jutapa on 11-25-200604:03 PM

How to setup a static multicast ARP entry with Cisco SF300-08?

We're running a cluster in multicast mode as a loadbalancer.
We have Cisco SF300-08 and when we adding a static ARP entry results in an error message telling the user that the hardware address needs to be a valid unicast MAC address.
So how to setup a static multicast in Cisco SF300 or maybe someone know other solution to setup multicastes mode in Cisco SF300.

Hi, Tom!
We have two watchguard xtm505(cluster active-active) in our network. Watchguard interfaces have one ip and one mac adresses. IP 192.168.111.1(Unicast) and MAC 01:00:5e:02:02:03(multicast). Cisco SF300 is router to outside networks(to internet). Cisco IP adresss is 192.168.111.254. There are another some hosts in this network.
Ping from hosts to 192.168.111.254 works well. Ping from hosts to 192.168.111.1 works well too. But there is no ping from watchguard cluster(192.168.111.1) to Cisco(192.168.111.254). And there is no routing to internet
This is well-known situation. We need to do following(example for cisco 3750):
1.    Start the Cisco 3750 command line interface.
2.    Add a static ARP entry for the multicast MAC address of the FireCluster interface.
Type this command:
arp arpa
For this example, type:
arp 192.168.111.1 01:00:5e:02:02:03 arpa
3.    Add an entry to the MAC address table.
Type this command:
mac-address-table static vlan interface <#>
For this example, type:
mac-address-table static 01:00:5e:02:02:03 vlan 1 interface gi1/0/11
But we can't add arp entry on Cisco SF300. CLI tells us "MAC address illegal"!
We tried enable igmp snooping, but is not helps.
Could you tell more detailed about MAC groups?

Telstra Update to my Modem has deleted Static ARP table

The latest automatic update to my Telstra Technicolor modem has caused my Static ARP table to be deleted. Furthermore, the update seems to have removed the ability to TELNET into the modem via command line, so I simply cannot re-create the static ARP table. I had previously mapped my home server's IP address to its MAC address through a static ARP entry. Doing so allowed me to remotely wake up my server when outside of my home network (Wake-On-LAN). Because of the aforementioned update to the modem, having deleted the static ARP table and removed my ability to log-in to it via Telnet - I can no longer remotely wake up my server. Pretty annoyed with Telstra right now. Waking my server from outside my home was something I would do almost daily in support of my business (details irrelevant).

Thanks. That is my back-up plan. I was hoping to avoid making an unnecessary purchase, plus the annoyance of then setting-up up my new modem with all my specific network configuration. Like I said, yesterday all was fine. Today, thanks to Telstra's update, I don't have the functionality I had previously and I am now facing the reality of having to fork out my hard-earned money to overcome this Telstra-initiated limitation.

ASA5510 no ARP entry ?

I have a requirement to NAT a spare address on the same subnet range as one of the firewall interface - however, because this is not allocated to a physical interface, there is no mac entry in the arp cache. the other end of the link from the firewall is connected to a router which has no idea how to reach this "virtual address" - again because there is no entry in the arp cache
I have tried to put a static arp entry into the firewall but this doesn't appear to work either. Should I be using a mac address form a physical interface or can I create a dummy mac for this -
If the router can't see the ip address, then users will not be able to target this address - so that the firewall can NAT to the real outside address.
I have tried routes to null0 on the router and static arp entries on both devices but the user just times when trying to connect to 10.2.7.11 (nat to 10.2.32.11)
attached is a very basic visio diagram which I hope explains what I am trying to achieve.
any help would be appreciated.
many thanks

Assuming your communications are always initiated from the inside, the first static statement above should suffice. When a session is built (initial syn in the TCP 3-way handshake) the xlate table will take care of the NAT on return path. I'm not sure of the effect of the second static, but I'd try temporaily removing it.
If you ever initiate from the outside (10.2.32.11/12), you would also need an access-list to allow moving from a lower security to higher security level.
Hope this helps.

Static ARP on 5508

Is there a way to add a static ARP entry onto the 5508 wireless controller? I am having trouble with wireless hosts accessing a server even though they are all on the same subnet. Every other host can reach the server except for the wireless hosts on the 5508. Network Load Balancing is being used for the server and a static arp entry is on our core switch. This fixed all of the other hosts but the wireless hosts are still having issues.
I have searched an am unable to find a way to add a static arp entry on the 5508. When I look in the arp table on the 5508 the server is not listed. Wireless hosts can communicate with every other host on the subnet. This server with Network Load Balancing configured is the only exception.
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006558
We are running 7.0.230.0
Any help would be appreciated. Thank you.

If anyone else has this issue, here was the fix.
If the wireless clients and server are on the same subnet you just need to enable multicast on the WLC.
Here is the link that shows how to enable multicast on the WLC.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807cc10d.shtml
You just need to access the GUI of the WLC, then click on Controller, Multicast, Enable Multicast enter a multicast group and Enable broadcast forwarding.
The multicast group address is an IPv4 multicast group and is recommended to be in the 239.x.x.x-239.255.255.255 range which is scoped for private multicast applications.
Do not use the 224.x.x.x, 239.0.0.x or the 239.128.0.x address ranges for the multicast group address. Addresses in these ranges overlap
with the link local MAC addresses and flood all switch ports, even with IGMP snooping enabled.

What is the maximum number of ARP entries (IPv4) and ND entries (IPv6) supported in our controllers?

Q: What is the maximum number of ARP entries (IPv4) and ND entries (IPv6) supported in Aruba controllers?
A: The maximum number of static ARP entries supported is about 2048 for M3/72xx/70xx platforms.
The maximum number of static ARP entries supported is about 128 for 6xx platforms.
The maximum number of static ND entries supported is about 2048 for M3/72xx/70xx platforms.
The maximum number of static ND entries supported is about 128 for 6xx platforms.

a)It depends upon software level. b) 16,000 per card, With release 9.3:
60K Connections Support on BXM-E—Provides the ability to support a maximum of 60K per card for VSI applications for the BPX 8600, for example, PNNI or MPLS, used on enhanced BXM-E cards.

Windows Load Balance Service - Static ARP

Hi,
We have a problem with WLBS. We have 2 windows 2000 servers connected to an Access layer 2950 switch. In the distribution layer we have 2 6509 with redundant MSFCs. The WLBS is configured in Multicast Mode
The problem in that when we put a static ARP entry on both MSFCs for virtual WLBS IP and WLBS MAC address, the processor utilization reaches to 80-95% of MSFC. Once we try to ping the mapped Unicast IP address, it partially times out and the switches responds poorly.
(arp ?Load Balance virtual-ip-address? ?Load Balance MAC address? arpa)
Any idea?
Thanking You,

Despite the problems you have been experiencing with the processor utilization, I agree with your choice going for the multicast mode.
The principle of the WLBS is that both (all?) the physical servers must see all the packets that are destined for the cluster. The individual servers then decide between themselves which frames to process and which to leave for the other guy. It can do this in multicast mode or in unicast mode.
In unicast mode, the servers respond to an ARP from the client (or router) with a virtual unicast MAC address. The client uses that address to send frames to the cluster. So why do they not get filtered by the switches in the normal way? The anwser is that the servers do not use that MAC address as source for their frames, but use their own addresses. The switches therefore never see frames sourced from the virtual MAC address, and so flood them throughout the VLAN. If you have a big VLAN, then that can cause scalability issues.
Now for multicast mode: when the client (or router) ARPs for the service address, the servers reply with a multicast MAC address. The clients (or router) then send their frames with that address as destination. The propagation though the VLAN is therefore controlled by IGMP snooping. Incidentally, some routers - including I presume the MSFC - will not believe an ARP response that gives a multicast MAC address. In my case, I had to configure the static ARP entry - IP to multicast MAC - in the router to make it work at all.
There is one other thing to say about the mutlicast scheme: the heartbeat between the servers is sent on the same multicast MAC address,but is not an IP etype, and is therefore not limited by IGMP snooping. It will be flooded to the entire VLAN. Look out for frames with etype 0x886F.
So, why are you having problems with the multicast scheme? My guess is that you have IGMP snooping, but AFAIK the 2950 supports IGMP snooping only in software rather than on the ASIC. You could switch off the IGMP snooping - that would relieve your processor, but would flood all you WLBS traffic.
I can suggest some possible aproaches to this problem:
1. Put up with the increased processor load.
2. Change your switches to something that supports IGMP snooping in hardware, or connect the WLBS servers only to switches that support this.
3. Use the unicast scheme, put your WLBS on a dedicated VLAN, and allow it to flood.
4. Use the unicast scheme and put CAM entries in all your switches for the virtual unicast address, with egress ports towards the WLBS servers.
Let me know how you solve this one, because I have the problem too, except that my servers are connected to switches that either support IGMP snooping in hardware, or do CGMP.
Kevin Dorrell
Luxembourg

Static PAT entry blocking Branch site from accessing resource on same port. How to get around this?

Hello, I have a UC560 and UC540 connected using an IPSec Site to Site tunnel.
There is a server on the main site they are trying to access (lets say IP is 192.168.1.252) and they need to access this server on ports 13000, 14000, and 15000.
Unfortunately, since there are users from the internet and other places that need to access this server on these ports, these static pat entries are in the server (Lets say 99.99.99.99 is the WAN IP):
ip nat inside source static tcp 192.168.1.252 13000 99.99.99.99 13000 extendable
ip nat inside source static tcp 192.168.1.252 14000 99.99.99.99 14000 extendable
ip nat inside source static tcp 192.168.1.252 15000 99.99.99.99 15000 extendable
The users in the branch site that is connected via VPN can reach this server on all TCP ports(RDP, http, etc) so that's not the issue. When I remove these nat statements, the VPN users can access the resource via that port (I.e telnet 192.168.1.252 13000 ) whereas they are shut down and connection fails if the static pat entries are in there.
I need to have outside users and VPN users be able to access this server whether they are coming in across the VPN goin to 192.168.1.252:13000 or coming in from the internet on 99.99.99.99:13000
Is there a way around this other than forcing the VPN users to access this server via the WAN IP for these ports? And does anyone know the logic behind this? I'm curious. From what I've seen in other cases, this is expected behavior, I'd just like a better understanding of it.
Any help on this would be GREATLY appreciated! Thank you

I hope I explained this properly. If not, please let me know!
Thanks

Static ARP Entry telnet command - techies take a look pls!!

Similar Messages

Maybe you are looking for