VLANs On WAN Side

I'm looking for a security device that can handle VLANs on the WAN side.
Like virtual WAN interfaces; one for each VLAN
I'm hoping something like the SA540 can do it.
Any suggestions?

Hi,
SA500 today supports only vlan on LAN ports. vlan/sub-interfaces over WAN is not supported.
You may want to check out Cisco IOS 800 router or ASA that should support what you are looking for.
On the other hand, I am interested in understanding what you are trying to accomplish with subinterface support over WAN?
i.e. sub-interface based application service provided by local ISP? or? Feel free to send me through private message if preferred.
Regards,
Richard

Similar Messages

RV180 managing VLAN on WAN side

Hi,
i have a question:
Does the RV180 supports managing vlans on the WAN side?
i would like to use PPPoE over a certain VLAN, and i do not get it working.
see https://supportforums.cisco.com/thread/2242943 for more information.
if the RV180 does support it, how can i manage this?
if the RV180 does not support this feature, which entry level router does support this feature?
Message was edited by: Mad Cat: added link to other question

I have this problem also with the RV180. The Fibre internet in New Zealand requires a PPPoE login in on VLAN 10. This is not unusual as I understand it. Is this something that could be implemented in a future firmware update? Happy to test a beta firmware.

WRT54G: Static mode set on WAN side, but still sometimes pulls address via DHCP!

We've had (6) WRT54G (v5) installed in a building, for about (2) years now, with no previous problems. Now, ALL of them are doing something weird. They are all set for Static mode on the WAN side (we have static ip addresses for these), yet every now and then they will spontaneously pull an address via DHCP on their own. When they do this, the setting itself doesn't change. It will still show "STATIC" in the pull down list. But, the address will no longer be the address we assigned to the unit, and will instead appear to be an address that it pulled via DHCP.
Thanks, in advance, for any help and insight into this strange problem.
David

Ah. In that case, we're not going to put our client through the frustration of chasing a ghost in the machine. We'll just replace them with new ones. But, I'll try this on them in my spare time and let you know how it goes.
Thanks for your assistance,
David
Message Edited by ld-systems on 09-19-2007 08:01 AM

Is there a way / app that would allow me to access my jetpack's web ui remotely from the WAN side ?

Is there a way / app that would allow me to access my jetpack's web ui remotely from the WAN side ?

netdestroy, that's a great question. I apologize that currently, we don't support any applications that allow this capability.
LasinaH_VZW
Follow us on Twitter @VZWSupport

How do I set up the port interface for the WAN side of my RVS4000 to 100T Full Duplex?

How do I set up the port interface for the WAN side of my RVS4000? The ISP says I need to set it to 100T Full Duplex, but where would I do that? In the Router's administration GUI I can't find any options to make such settings for the WAN side.

The setup of the folders in Finder is entirely up to you. Whatever suits your needs is what you should do. Lightroom will be fine no matter how you set it up.
So I'm not really sure what your question is.

NAT port-forwarding and WAN side IP addresses

I have my Airport Extreme setup to forward port 21 to an FTP server on the LAN side of my network. The AE is connected via DSL to my ISP.
When a client from the WAN side connects to my server, the server's LOGS don't list the IP of the client, rather it says the client connected from my assigned WAN IP. For example (fake ip's):
Client ----> AE ----> FTP-SERVER
130.129.12.3 76.99.89.3 10.0.1.2
Log states client connected
from IP: 76.99.89.3
My previous Linksys router, with the same DSL modem and ISP, would report the client as connecting from 130.129.12.3.
Am I missing something in how I am configureing my AE? Or, is this how the AE manages port-forwarding and there's nothing I can do about it?
I used to use firewall rules to control access to the FTP server, i.e. rules set on the server. This can't be done anymore with the AE operating as it does.

Seems to me that the NAT translation in the Airport 802.11n is such that it does not use the incoming IP of clients connecting from the WAN side to a computer on the LAN side. The ingoing and outgoing packets reach their respective destinations, it is just that the AE uses some kind of non-standard routing (at least not that I am used to working with).
This is bad because it prevents the use of some forms of access controls on BSD and Linux servers on the LAN side, TCP Wrappers and iptables for example. This can create obvious security problems when WAN ports are set to forward to such a LAN client. We are already getting hit with robot-like script attacks on our server, this was a problem with our Linksys router, but with the above mentioned tools and scripts we were able to block abusive clients.
Perhaps an Apple can work on resolving this issue in a future firmware release, at least make it an option... Anyone from Apple out there?
jmj

TC not routes to WAN side the website 89.97.132.131

The IP address 89.97.132.131 (corresponding to URL "www.pubblica.istruzione.it") is not available from the LAN side of TC (10.0.0.0). Same things for the POP3 mail server "pop.istruzione.it".
This address is well achievable from the WAN side of the TC router or from LAN side of all other routers.
I can surely exclude any PC, Internet Provider, ADSL modem, Op.System, Firewall, etc. problems. TC is updated to the last firmware available (7.3.2).
Ping is answering only if you use the numeric IP Address, no answer using the mnemonic URL.
I think that the TC router routes the network class "89.97.132.0" erroneously to LAN side instead of to be routed to the WAN side.
If the TC router is working as bridge, it work fine and the URL is reachable.
I contacted APPLE support and I am still waiting for answer.
Someone get similar problems ?

890306 wrote:
Can any one please help to create the tuning task... When i executed below task it encountered with below error.. dont no whats wrong in this.. please help me to resolve this error.
SQL> DECLARE
2 my_task_name varchar2(50);
3 sql_txt clob;
4
5 BEGIN
6
7 sql_txt := 'SELECT /*+ALL_ROWS*/
8 a.lcl_id AS Ora_Order, --Order_Number,
9 a.closed_date AS Closed_Date,
10 a.modified_date AS Modified_Date,
11 a.received_date AS Received_Date,
12 a.status AS Status,
13 b.seq AS Ora_Line, --Line_Number
14 b.sub_seq AS Ora_sub_line,
15 c.seq AS Unit_Number,
16 SUBSTR (c.olig_group_id, INSTR (c.olig_group_id,'.',-1, 1) + 1) AS shipment_number,leftmost single quote mark in line above terminates the string being assigned to "sql_txt" variable.
ORA-01756: quoted string not properly terminated

Is my ISP blocking ICMP on the WAN side? Linksys E1500 on Comcast Cable

Hi-
Device: Linksys E1500 - firmware: 1.0.01
I've got a static IP setup for a small remote office and want to keep tabs on their internet connection by pinging it via a monitoring program we use. However, the router seems to not responding to ICMP.
- Filter Anonymous Internet Requests is unchecked.
- I've verified that the Static IP is correct.
- I've tried pinging from several remote locations on different connections, with no avail.
I can't seem to figure out why i can't ping this device. I just want to make sure there isn't a setting in the wireless router that is preventing echo replies.
The only other thing i can assume is that Comcast is filtering ICMP on their side of the WAN connection.
EDIT: Here's a traceroute from my PC to the WAN side of the Linksys....
Tracing route to 50-194-XXX-XXX-static.hfc.comcastbusiness.net [50.194.XXX.XXX]
over a maximum of 30 hops:
1    <1 ms    <1 ms    <1 ms 172.25.2.1
2     6 ms    16 ms     6 ms 10.0.0.5
3     9 ms     8 ms     8 ms 10.0.0.1
4     7 ms     7 ms     7 ms 10.0.0.2
5     8 ms     7 ms     7 ms ont-static-208.57.XXX.XXX.mpowercom.net [208.57.XXX.XXX]
6     7 ms     7 ms     7 ms ont-static-208.57.XXX.XXX.mpowercom.net [208.57.XXX.XXX]
7     7 ms     7 ms     7 ms gi142.5.cr1.irvnca.telepacific.net [65.60.126.97]
8    10 ms    16 ms     9 ms so-0-1-0.ar2.sna1.gblx.net [64.214.146.65]
9     9 ms     9 ms     9 ms po3-40g.ar4.lax2.gblx.net [67.17.107.82]
10    21 ms    11 ms    12 ms te-0-0-0-7-cr01.losangeles.ca.ibone.comcast.net[66.208.233.201]
11    29 ms    27 ms    27 ms pos-0-4-0-0-cr01.santateresa.tx.ibone.comcast.net [68.86.86.18]
12    42 ms    47 ms    52 ms he-0-12-0-0-cr01.denverqwest.co.ibone.comcast.net [68.86.89.53]
13    54 ms    47 ms    47 ms he-0-6-0-0-ar02.denver.co.denver.comcast.net [68.86.94.158]
14    43 ms    43 ms    43 ms te-8-3-ur09.denver.co.denver.comcast.net [68.86.103.2]
15    62 ms    59 ms    54 ms te-17-10-cdn22.denver.co.denver.comcast.net [68.85.221.110]
16    56 ms    54 ms    69 ms c-174-51-179-19.hsd1.co.comcast.net [174.51.179.19]
17     *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.
Trace complete.
Any help verifying that i have the Linksys setup correctly would be greatly appreciated.
-Aaron

Actually, as I understand it
Since he is seeing the following, I'd say its working fine
1    <1 ms    <1 ms    <1 ms 172.25.2.1
2     6 ms    16 ms     6 ms 10.0.0.5
3     9 ms     8 ms     8 ms 10.0.0.1
4     7 ms     7 ms     7 ms 10.0.0.2
5     8 ms     7 ms     7 ms ont-static-208.57.XXX.XXX.mpowercom.net [208.57.XXX.XXX]
6     7 ms     7 ms     7 ms ont-static-208.57.XXX.XXX.mpowercom.net [208.57.XXX.XXX]
7     7 ms     7 ms     7 ms gi142.5.cr1.irvnca.telepacific.net [65.60.126.97]
8    10 ms    16 ms     9 ms so-0-1-0.ar2.sna1.gblx.net [64.214.146.65]
9     9 ms     9 ms     9 ms po3-40g.ar4.lax2.gblx.net [67.17.107.82]
10    21 ms    11 ms    12 ms te-0-0-0-7-cr01.losangeles.ca.ibone.comcast.net[66.208.233.201]
11    29 ms    27 ms    27 ms pos-0-4-0-0-cr01.santateresa.tx.ibone.comcast.net [68.86.86.18]
12    42 ms    47 ms    52 ms he-0-12-0-0-cr01.denverqwest.co.ibone.comcast.net [68.86.89.53]
13    54 ms    47 ms    47 ms he-0-6-0-0-ar02.denver.co.denver.comcast.net [68.86.94.158]
14    43 ms    43 ms    43 ms te-8-3-ur09.denver.co.denver.comcast.net [68.86.103.2]
15    62 ms    59 ms    54 ms te-17-10-cdn22.denver.co.denver.comcast.net [68.85.221.110]
16    56 ms    54 ms    69 ms c-174-51-179-19.hsd1.co.comcast.net [174.51.179.19]
As I understand it the following
17     *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.
Is actually the networks there are not allowing the trace data to be returned
which is normal for a number of reasons

AEBS Loose IP on WAN side (dhcp)

Hi'
I Have an airport extreme base station, after I upgraded to 7.5.2 my WAN IP loses within a week or so, the wan side, uses dhcp
when I checks the wan ip, the address is a 169.254.x.x address, if I release/renew the interface, it still gets the 169.254 address.
after power cycle it works again, for ca. a week (I belive around the dhcp expire time)
After downgrade to 7.5.1 there are no problems, anyone got a clue ?
- I can read a-lot got LAN side problems, but it is realy a WAN side problem

Well there should not be any issues in assigning private wan ip address for BEFSR41 and WRK54G both, but you are facing issue in doing that for BEFSR41, try flashing latest available firmware on BEFSR41. You can get from www.linksys.com/download

Ea6500 Wan side address

is there any method to find the WAN side IP address when remote? Router rebooted this afternoon and need to find its WAN address foe camera access,

If you can't find it using the Linksys Smart Wifi software, you can use a port checker like PING.EU to get your WAN IP. When you click on the link, it should show you Your IP, which is your Internet IP address.

WAN Side DHCP Renewal

My existing router (not the Actiontec) allows me to view all activity going on with my network. I just noticed that the WAN DHCP renews every hour. When I look at the lease time it shows the next renewal is coming up at 12:17pm.
Why is Verizon doing this?

jumpin68ny wrote:
fortigate 3.0. The WAN side is connected to the Ethernet Port of Verizon Fios service.
Since this is FIOS, directly to the ONT (optical network terminal)?
Google Image search for fios ont
Because if not: that first router that is handling the public IP, is giving you a one hour lease.
^^
In Verizon DHCP areas, I hear/read that the lease time is two hours.
If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

RV320 - vlan on Wan Port

Here in Brazil VIVO (from the spanish Telefonica group) is recently providing fiber links.
Their fiber link is being splitted into 2 vlans: one for their IPTV (vlan id 20) and another for internet (vlan id 10).
So, when they install on your house or company, they install 2 boxes: 1 ONT (Optical Network Terminal) and 1 router (which connects to the ONT and does the PPPoE auth on VLAN 10 and creates the internal VLAN for the IPTV - id20).
So, is it possible to replace their router with the RV320 and create tagged / untagged VLAns on Wan Ports and assigning ip address on each vlan (PPPoE for internet, DHCP for iptv)?
The topology is basically like this:
[Fiber Cable]
ONT
[Ethernet Gigabit]
Router
[Ethernet / Coaxial]
Network Devices
TVs (coaxial connection provided by 2. Router)
PCs (wireless /ethernet connection provided by 2.Router)

Hello,
Thank you for sharing the information about the DD-WRT firmware on other devices.Unfortunately the RV320 is not capable of such a feature, it is just not designed to do that.
On the other hand we do have one unit that is capable of such configuration, it is the RV315W router.
Here is a link to the emulator for the unit so that you have an idea of its capabilities.
http://www.cisco.com/assets/sol/sb/RV315W_Emulators/RV315W_Emulator_v1.01.03/index.asp.htm
The feature you are looking for can be configured by going to Port settings, WAN, Wan interface settings, then you can configure the desired VLANs.
I'm not sure that this device is available in Brazil. If it is not available then you may have to consider using enterprise units or other devices.
Please let us know if this is helpful.

VLAN on WAN port

I am using an LRT224 which does include VLAN support for LAN ports. This might be usefull, but i would alos suggest to support VLAN on WAN ports.
Why? A lot of users are now using cable or fiber optique connexions. This connexions always come with a fiber or cable modem and ususally a box as a routeur and multimedia server. However a lot of people would like to replace the ISP's box with a router like my LRT224.
But this will not work especially here in france but possibly also in some other countries, because the WAN connexion also includes a telephone and a TV connexion. In fact the ISP's are using vlan's for each of those functions, for example ORANGE is using VLAN 835 for data. As long as the vlan is not supported i have to go thourgh their box using DMZ because of the luck of vlan support on the WAN connexion, or i have to use a smart switch with vlan support, that's what i am doing, but that is not very elegant.
If anybody has any suggestion, would be nice.
If something works don't fix it.

That is a good idea.
I read the product datasheet and I agree with you , it seems that it does not support VLAN on WAN.

VLANS across WANS

I am working on a project for CCNA class. I want to maintain VLAN identities across multiple WAN sites...i.e. My central Core will be in LA, remote offices at Dallas and St Louis. If I define VLANs 10, 20,30, and 40 at LA for 4 departments, with network 10.0.10.0/22, 10.0.20.0/22 etc..I have considered using EoMPLS to maintain the VLAN structure and the ability to not have to change or reassign different network address at the remote sites. In essence, I wish to have the same subnets at all sites for all VLANS and implement NMC from the LA office. I want to have VLAN 10, with 10.0.10.0/22 at all 3 sites. Is this possible and maintainable from a management standpoint using EoMPLS. What am I missing here? Other posts I have researched state that this is not possible and not recommended. The objective is to maintain VLANs across all 3 sites.
If not, then how do we maintain VLAN identities and membership across all 3 sites with different Subnets? I am just looking for ideas, not solutions. Just some guidance, since I am a student.

I haven't personally used EoMPLS, but it seems a viable option. The other L2 extension technologies to consider are:
VPLS
OTV (ASR1k or CSR1k)
L2TPv3 (can use regular IOS routers)
Typically you'd only consider extending L2 VLANs across a WAN for DCI (data center interconnect) and not branch to branch.
L2TPv3 is a neat feature that can be done cheaply using 800-series routers. It does transmit all L2 traffic so it's possible to have spanning tree loops over the WAN (fun in the lab, but not in production).

Vlans over wan

Is it possible to run a vlan over a wan link on my router ?

Yes, but don't do it......
There shouldn't be any reason for you to 'Bridge' over the WAN. Use Layer-3 and route your traffic.
Andy

VLANs On WAN Side

Similar Messages

Maybe you are looking for