Using specific wan port for a particular domain/IP

I have RV042 router which is connected to the internet by both the wan ports and I want to use it as a load balancer so that both of my internet connections can be utilized evenly. But now I have an issue in this scenario as my remote application gets logout whenever the communicating IP address changes.
Now here is my question.
Is there any way out so that I can specify the wan port used for a particular public IP address/domain name?

Hi Kinshuk, thank you for using our forum, my name is Luis I am part of the Small business Support community. I read your post and I have an article from our knowledge base and called Guide me, you could use to configure a protocol binding in order to specify the WAN port that you want redirect and select the specific traffic.
http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=622
If you scroll down you will see a section called "Manage Protocol Binding" here you will see instructions to configure that.
If you have any question please let me know.
I hope you find this answer useful
Greetings,
Luis Arias.
Cisco Network Support Engineer.

Similar Messages

RV320, specific traffic through specific wan port

Hello all,
I love the RV320, one of the best routers i've bought in years and it works like a charm with our Fiber connection on WAN1 and Coax Cable on WAN2.
The only question I have right now, i know it is possible to sent specific traffic (DNS,HTTP etc) through specific WAN ports.
But would it also be possible in some way to say *.website.com traffic will go through WAN port x only?
Specific apps we use are only available through an IP coming from the provider we use on WAN2 (cable coax), so it would be handy if we could say that if app this or that and/or website is being called, auto serve it through WAN port x.
Is this possible and if not, something cisco could add?

Dear Michiel,
Thank you for reaching Small Business Support Community.
Besides the service management options available I do not see a particular feature to accomplish your needs. I work on this community forum as an analyst and I am going to mark this post as a business opportunity for improvement of the device.
Thank you for your comment and please do not hesitate to reach me back if there is anything I may assist you with in the meantime.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

RV320 - Using Specific WAN Setting

Hi All,
I am new to RV320 and I would like to know that how can I set an IP address using specific WAN (say Wan 1) connection when load balance is enable.
Thanks,
Eric

Hi Eric,
You should be able to achieve it by using protocol binding settings:
Dual WAN--> click on WAN (1 or 2) icon --> scroll down to protocol binding --> add specific rule for all services where source IP address would be your particular LAN host IP (repeated twice if it is only 1 host) and destination 0.0.0.0 (repeated twice) choose desire WAN1 or WAN2.
I hope this helps,
Aleksandra

Using the WAN port as a "LAN" port on the Airport Extreme Base Station...

Hi everyone,
I'm re-building my home wireless network and I'm doing so in preparation for the Slingbox AV I ordered last week. Here's my current setup:
I have a DSL modem attached to an Airport Express (802.11n) in my office broadcasting my internet signal. I have an Airport Extreme Base Station (802.11g) set up in my living room as a WDS extender. I currently use the base station in my living room to connect the DishNetwork ViP722 DVR to the internet and allow me to set recordings remotely on my iPhone when I'm away from home. I use the LAN port on the base station to do this, and now with the Slingbox on the way (should be here early next week), I'm wondering what I need to do to make an internet connection available for the Slingbox AV.
My question: Will I be able to simply use the WAN port as a "LAN" port since the Airport Extreme Base Station is being used as a WDS? It'd be awesome if the WAN port would become, essentially, a LAN port since it isn't being used.
Thanks in advance for your advice and insight!

slugoo wrote:
My question: Will I be able to simply use the WAN port as a "LAN" port since the Airport Extreme Base Station is being used as a WDS? It'd be awesome if the WAN port would become, essentially, a LAN port since it isn't being used.
I'd be surprised if that worked. The operation of an AirPort base station depends on keeping the WAN port and the LAN port(s) separate, as those normally are on two different networks.
You might consider buying an Ethernet hub or switch, which would allow your AirPort Extreme's LAN port to be shared. Here's an example of an inexpensive one:
http://www.bestbuy.com/site/olspage.jsp?skuId=7169244&st=ethernet+switch&type=pr oduct&id=1110266457435

Bypass material D-Chain specific status check for a particular order type

Hello All,
For a material, I want to by-pass it's D-Chain specific status check for a particular order type.
Currently when you enter the that material in the order, I am getting warning: Material XYZ has status: ABC hold
I want to py-pass this warning message, how to do this? Can we configure this based on order type??
Pls. help me.
Thanks,
Shreekant

Hi Kapil,
Threre are some material for which D-Chain status ( MVKE-VMSTA) in the materila master are set in such a way so that deliveries can not be created. We need to bypass this restriction for couple of delivery types. One of them is the delivery type used for intracompany STO.
I am looking for some way out like user exit so that I dont need to change existing config change for those statuses.
Regards,
Subhankar

RV320 - using one WAN port

What is the correct configuration for using one WAN port so that the router doesn't crash several times a day?
Should WAN2 be left as address from IP ?
Shoudl WAN2 be configured as static IP ?
Should WAN2 interface be disabled?
Should WAN2 be configured as DMZ and left as default 192.168.1.0?
Should WAN2 be configured as DMZ and then disabled?
It's definitely the router which is at fault, power cycling the fibre to copper converter dosen't fix the issue.
Nor does swapping the FTC for a brand new one.
Only a power cycle on the RV320, or a remote web interface reset if I'm unside the LAN, makes it work.
Temporarily, then it crashes next day.

I have the same settings, and the same up-to-date firmware.
I see in the logs that the router incorrectly reports WAN2 as Up, then can't sync rate with it.
Most of the time that failure is around the same time as the users report failure.
But nothing is logged for WAN1 so it doesn't seem to be a physical failure in cabling, or the FTC converter feeding the router.
2015-04-27, 10:33:35
Kernel
kernel: WAN [2] UP
2015-04-27, 10:33:35
Kernel
kernel: [eth0] lanip=192.168.1.1, mask=255.255.255.0
2015-04-27, 10:33:35
Kernel
kernel: ip[xxx.xxx.xx.xxx] mask[0.0.0.0]
2015-04-27, 10:33:35
Kernel
kernel: ip[0.0.0.0] mask[0.0.0.0]
2015-04-27, 10:33:36
Kernel
kernel: WAN [2] DOWN
2015-04-27, 10:42:10
Kernel
kernel: WARNING: cant get external phy status
2015-04-27, 10:42:11
Kernel
kernel: WARNING: no highest common denominator or auto-negotiation not complete
2015-04-27, 10:42:11
Kernel
kernel: WARNING: no highest common denominator or auto-negotiation not complete
2015-04-27, 10:58:01
Kernel
kernel: WARNING: no highest common denominator or auto-negotiation not complete
2015-04-27, 10:58:02
Kernel
last message repeated 2 times
2015-04-27, 10:58:02
Kernel
kernel: nk_bcm53115_sync_speeds_phy_to_mac(): sport[5], speed[0], duplex[0]
2015-04-27, 10:58:03
Kernel
kernel: nk_bcm53115_sync_speeds_phy_to_mac(): sport[5], speed[1], duplex[2]

How to use a fixed port for remote assistance in windows 8.1 behind a nat router freebox?

Hello,
Before to use remote assistance in windows 8.1, i need to configure my nat router freebox.
But remote assistance ( msra.exe ) use a dynamique port and never the same.
How to use a fixed port for remote assistance ini windows 8.1 ?
And why i can't use easy connect ?
i read that the router must implement the PNRP protocol. I think it's a propriatary microsoft's protocol unknow on my router.
Thanks

Hello,
Very good. It's a big range ( 255 mini from 49152 ) for a single port but if it's the only one possibility...
You are very helpfull ( i don't know if it's a good english but you make me very happy )
Merci beaucoup

Using separate ethernet ports for LAN and internet

Following scenario:
A couple of Lion clients and a Lion server connected to a switch. Switch connected to router for internet access. All devices, clients, server and router are in the same C-Class net.
I'd like to connect the Lion server with 2 ethernet ports to the switch, so that one port is solely used for connections to the Lion clients (aka LAN) and the other port is solely used for connections to the internet. That way heavy LAN traffic to/from the server cannot bog down internet access to the server. Any ideas how to acomplish that?
Usually you would configure the Lion server as a router and connect the Lion clients (via a switch) to one port and the cable modem to the other, so both ports are in different subnets. But I don't want all internet traffic from the clients going through the Lion server.
The best I've come up so far was to configure both ethernet ports with static IP addresses. The one connecting to the clients with a 255.255.255.0 netmask but no router IP given. The one for internet with a 255.255.255.255 netmask and the router IP set to my physical router IP. It seems to work, but I'm not sure, whether this is the suggested way to do such a setup.
Maybe some manual editing of the routing table is are more solid solution?
Any tips appreciated.
Pete

What you want to do can be done but maybe not the way you are trying.
First yes, you would use two Etherner ports on the Mac, if it is a Mac Pro or XServe it has two built-in, other Mac models can do this using a USB Ethernet interface.
Next, the way I would normally do this is to have a separate switch for the WAN router, this would make the setup look like the following
LAN Switch ----- Server ------------ Router --- Internet
       | |                             |
       | |                            NAT
       | +-----------------------------+
       |
       +------ Client Devices
The router could be doing NAT via one interface, or a separate Firewall box could do the NAT.
Another possible way would involve segmenting the lan switch by setting up a VLAN and putting one port for the Servers second Ethernet connection on to that VLAN (using public IP addresses and the a connection to the router on that VLAN, the LAN switch could then route between the two VLANs. Cheaper LAN switches do not have this ability.

How to find MAC address for WAN port for Airport Express 2nd Gen.

The New Airport Express has a LAN and a WAN ethernet ports. How can I find the MAC address for the WAN ethernet port as my Service Provider needs it for provisioning....I can fid MAC address for Ethernet and for two wireless 2.4 & 5GHz but not for WAN ethernet port using Airport Utility 6.1

Many thanks for the swift response. However, there is no WAN MAC address on the box or on the device anywhere. I even used magnifying glass to find one .
The airport utility shows only three mac addresses. One for 2.4GHz, one for 5GHz and one fo the ethernet (LAN port) whereas there is another ethernet port in the device mentioned as WAN port and I am still not able to find the MAC address for the WAN ehternet port for Airport Express (2nd Generation).
Will appreciate a response to make th device work wiht my service provider as providing them the WAN mac address is a must. Had there been an option for cloning mac address, the issue would have not been there.
Many thanks again - in advance.

Can I use the Ethernet Port for a computer when it is also used as a wireless network with an Airport Extreme as the access point for the wireless network

Can I use the Ethernet Port of the A1264 Airport Express to connect to the Ethernet port of a computer that does not have wireless capability when the Airport Express is also used on a wireless network with an Airport Extreme 5th generation as the access point for the network?
I have AE 5th gen
looking to buy (from ebay) the AEX A1264
Various computers, printers and hubs for the network
Is this possible to do?

Bob, Thanks for the info. I have read different articles that said yes, but I wanted to make sure before I commit to buy. I have an older A1084 which I could not use the Ethernet port. I know at one point I was able to when I was on 10.4. Now that I am on an Intel processor and 10.8 I am going to have to upgrade some of my Apple wireless hardware.
Thanks Again.

Lync Client uses wrong RTP Ports for calls from/to RGS with Agent Anonymity

We have QoS implemented and client ports for audio, video und application defined by Set-CsConferencingConfiguration. We also use firewalls in our LAN between the different VLANs for Clients, Servers and Gateways/SBC. Only RTP from the client with the defined
ports are allowed by the firewall. Media ByPass is enabled.
In all normal cases, the right ports will be used and marked by GPO with the right DSCP value. But if an agent get a call from a RGS which has agent anonymity enabled, the client uses a port in the range 1024-65535 for audio. Also if you make a call on behalf
of the RGS, the client use a random port between 1024-65535. As soon, as the source of the call is in another VLAN (e.g. a call from PSTN which comes in over a SBC in e separate VLAN), the firewall between the two VLANs block the RTP traffic.
We see the deny on the firewall log and in the SBC log we see, the reinvite for the media by pass with the IP of the agent and a not valid port. We also see, that no RTP from the client/agent will arrive the SBC and no RTP from the SBC will arrive the client/agent.
So the call will be disconnected, as soon as an agent wants accept the call.
Is there an additional setting to make sure, the Lync client always use the valid RTP port range?
This behavior exist in Lync 2010 and Lync 2013 clients.

Hi Holger,
Thanks for reply!
Sure! I set all AudioPorts on all Services, but the problem are not the ports used by the server, the problem are the ports used by the client. We set the client ports to 49152 with a count of 40. The client (2013 and also 2010) use these ports correctly in all
cases exept for call from/on behalf of an RGS with Agent Anonymity.
If we disable the RGS agent anonymity, restart the client of the agent, then the client uses also the correct source ports for RTP.
I've checked this behaviour now on 3 customer installations, our own productive installation and in our lab.
Because until now only one of our customers have firewalls between the internal VLANs, only this single customer have the issues...
Regards,
Stephan

Using a different port for SMTP

Where can I change my preference of port number for SMTP? I would like to use 366 since I think my ISP is blocking port 25.

Your ISP blocks inbound and/or outbound 25?
Port 25 is used for server-server communication and can't be changed.
If your ISP blocks port 25 inbound, then your server can't receive mail from other servers, even if you change it's port.
If your ISP blocks 25 outbound, you still need to send to a destination port 25. For outbound, the only thing you can do is relay through your ISP (either from client, or configure postfix to relay through ISP).
When people add alternate ports for SMTP, it's for the mail client to submit mail to the server. From there, server-server is always going to have a dest port of 25.
If you wish to add an alternate port (you said you wanted 366) for mail submission, edit /etc/postfix/master.cf
Find this line:
smtp inet n - n - - smtpd
add another below it (location doesn't really matter) like this:
366 inet n - n - - smtpd
Then stop/start mail server and port 366 will accept smtp connections.
FYI- the standard port for smtp submission is 587. Doesn't matter if you want to use another port (366), just make sure you're not trampling on another service which may use that port.
Jeff

SRP547W, How to use multiple WAN IPs for port forwarding?

Hi folks,
We've run into some difficulty trying to take advantage of multiple WAN IPs in conjunction with the SRP547, and I'm hoping someone here can help out or at least tell us that we're going to need to buy a different router...
What we're trying to acheive is the ability to port forward from our distinct public IPs to different internal servers. Looking at the options under Port Forwarding it looks like we can only configure forwards at the "WAN interface" level, but our problem is that we can't work out how to set up separate interfaces for each of our Public IPs...
Our ISP provides us with a fully managed NTU/router with a single "Internet" ethernet port, which we can use by statically configuring IPs on our end. For this configuration this port has been directly patched to the WAN ethernet port on the SRP547W.
We have been allocated a 255.255.255.248 (/29) subnet, giving us 5 usable IPs after the ISP's gateway address is taken into account, like so:
a.b.c.208     Network Address (/29 subnet)
a.b.c.209     ISP Gateway
a.b.c.210     IP1
a.b.c.211     IP2
a.b.c.212     IP3
a.b.c.213     IP4
a.b.c.214     IP5
a.b.c.215     Broadcast Address
On the SRP we've set up the default "Ethernet WAN2" sub-interface with the following details for IP1
VLAN ID:               4088 (Uneditable)
Connection Type:       Static IP
Internet IP Address:   a.b.c.210
Subnet Mask:           255.255.255.248
Default Gateway:       a.b.c.209
The next step (I would have thought) would be to add a second sub-interface, using similar info for IP2
VLAN ID:               4000 (Chosen arbitrarily)
Connection Type:       Static IP
Internet IP Address:   a.b.c.211
Subnet Mask:           255.255.255.248
Default Gateway:       a.b.c.209
When we try to do so however we get:
Fail!
Conflict with Ether_WAN2 interface address type
I should mention at this point that we're running on firmware version 1.02.01 (023).
Any suggestions on how we can proceed?
Is there a CLI or other method of configuration that might work if the web interface won't?
Thanks,
Tim.

OK, I've seen reference to this solution before but not much in the way of details. Perhaps you can spell out how this ought to work, as the Software DMZ doesn't behave as I'd expected it to.
As before, on the SRP we've set up the default "Ethernet WAN2" sub-interface with the details for IP1 with a /29 subnet.
VLAN ID:               4088 (Uneditable)
Connection Type:       Static IP
Internet IP Address:   a.b.c.210
Subnet Mask:           255.255.255.248
Default Gateway:       a.b.c.209
We'd now like to expose a server function on IP2, let's say LAN details for this server are:
VLAN:                  3000
VLAN IP Range:         192.168.1.1/24
Server IP:             192.168.1.10
Server Port:           80
So first we turn on Software DMZ:
Status:                Enabled
Public IP:             a.b.c.211
Private IP:            192.168.1.10
WAN Interface:         Ether_WAN2
My understanding, based on what you've said, is that this should expose the whole server to external access via IP2. Unfortunately, it doesn't seem to work this way - we don't seem to have any access at all. Perhaps there's a default deny rule on the firewall?
Just to be sure, I tried creating a rule to allow HTTP traffic to the server in the Advanced Firewall page.
In Interface (WAN):    All
Out Interface (LAN):   VLAN.3000
Source IP:             0.0.0.0
Source Subnet:         0.0.0.0
Destination IP:        192.168.1.10
Destination Subnet:    255.255.255.255
Protocol:              TCP
Source Port:           Any
Destination Port:      Single:80
Action:                Permit
Schedule:              Everyday
Times:                 24 Hours
Still no dice. What am I missing?
Cheers,
Tim.

Use single sign on for multiple portal domains

Is it possible for a user to sign on once to a domain, and then be able to access other domains. What I'm trying to do is have one user registration page/login page, but use different portal server domains to present different sites, while at the same time having a type of single sign on, once a user has entered his credentials. Thus my registration process will create a new ldap user in an external directory, and i can then just point all the different domains to that External Ldap directory.

I wouldn't recommend this because it would affect performance plus there are potential other issues like conflict that you would run into ..
Everytime a user logs into a new session is created for him and this means a user might have multiple sessions on the server. The cookie that is also set is dependent on per portal domain so it might not work ..
An alternative approach might be to have multiple roles and then customize the role for different views. You can modify the membership code in such a way that based on certain criteria you can assign him to a particular role, equivalent to your domain. However the problem could be if you want to provide delegated admin, currently the delegated admin is only at a domain level.

Using the WAN port as a LAN port?

Hi everyone,
sorry for not doing a search, but search isn't available at the moment.
I have an AirPort Extreme Base Station (n) and need to extend my network with an AirPort Express (g) so that the APX connects wirelessly to the AEBS and allows wired clients on its Ethernet port. I've read that this port can be set to WAN mode (default), but also can be used as a LAN port to provide access for AirPort-less clients.
I'm wondering now
1) if this is correct and possible at all?
2) if this will work with my older (g) APX or only with the current (n) model?
Thanks a lot!
Björn
PS: Here's some cheap +ASCII art+ showing what I want to accomplish.
Internet <–––> AEBS ))))) ((((( APX <–––> *Mac without AirPort*

Yes that will work. Configure the 802.11g AirPort Express (AX) and AirPort Extreme base station (AEBS) to connect wirelessly using WDS. Then the AX's Ethernet port will be enabled for use by your Mac without a wireless card.

Using specific wan port for a particular domain/IP

Similar Messages

Maybe you are looking for