What's replaced the vpn concentrator?

Greenhorn here, I didn't sit any of this up. We have three remote sites, sister institutions, that we share an app with. We house the app. One site has a vpn concentrator setup, the other two are using a point to point leased line. They have each have a router that connects to a single router. They want to replace the leased lines with a vpn concentrator. Doing the digging I see the concentrators are EOL.
So what's used to replace the concentrator today? What's a solution today to move away from the leased lines? These are all cash poor non-profits. My guess is they'll say look on Ebay for a concentrator if the solution is too pricey.
Thanks Jim

Sorry it took so long but here's the output from sh version.
Location 1
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-I-M), Version 12.2(16a), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Fri 18-Apr-03 19:25 by xxxxx
Image text-base: 0x8000808C, data-base: 0x80A0EE84
ROM: System Bootstrap, Version 12.2(10r)1, RELEASE SOFTWARE (fc1)
xxxxxxxxx uptime is 41 weeks, 3 days, 20 hours, 54 minutes
System returned to ROM by power-on
System image file is "flash:c2600-i-mz.122-16a.bin"
cisco 2621 (MPC860) processor (revision 0x00) with 27648K/5120K bytes of memory.
Processor board ID JAD07070EVT (2982455740)
M860 processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
2 FastEthernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Location 2
Cisco Internetwork Operating System Software
IOS (tm) C1700 Software (C1700-SY-M), Version 12.2(11)T6, RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Fri 14-Feb-03 14:34 by ccai
Image text-base: 0x80008124, data-base: 0x80A94064
ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1)
xxxxxxxxxxx uptime is 14 weeks, 14 hours, 22 minutes
System returned to ROM by power-on
System image file is "flash:c1700-sy-mz.122-11.T6.bin"
cisco 1721 (MPC860P) processor (revision 0x100) with 44237K/4915K bytes of memory.
Processor board ID FOC0708028N (496857573), with hardware revision 0000
MPC860P processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
1 FastEthernet/IEEE 802.3 interface(s)
1 Serial network interface(s)
WIC T1-DSU
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Location 3
Cisco Internetwork Operating System Software
IOS (tm) C1700 Software (C1700-SY-M), Version 12.2(11)T6, RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Fri 14-Feb-03 14:34 by ccai
Image text-base: 0x80008124, data-base: 0x80A94064
ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1)
Xxxxxxxxx uptime is 13 weeks, 6 days, 5 minutes
System returned to ROM by reload
System image file is "flash:c1700-sy-mz.122-11.T6.bin"
cisco 1721 (MPC860P) processor (revision 0x100) with 44237K/4915K bytes of memory.
Processor board ID FOC0707142M (1927840357), with hardware revision 0000
MPC860P processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
1 FastEthernet/IEEE 802.3 interface(s)
1 Serial network interface(s)
WIC T1-DSU
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Location 4
Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 12.4(3g), RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Mon 06-Nov-06 02:36 by alnguyen
ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
xxxxxxxxxx uptime is 40 weeks, 5 days, 6 hours, 22 minutes
System returned to ROM by reload at 13:34:01 UTC Thu Dec 27 2012
System image file is "flash:c2800nm-advsecurityk9-mz.124-3g.bin"
This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to [email protected].
Cisco 2811 (revision 53.50) with 249856K/12288K bytes of memory.
Processor board ID FTX1051A01V
2 FastEthernet interfaces
2 Serial interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102

Similar Messages

We are looking to replace our LaserJet 8150dn printer. What model replaced the 8100 series? - Thanks

We are looking to replace our LaserJet 8150dn printer. What model replaced the 8100 series? - Thanks

Hi Allan...
Will try to keep this short. Tried to respond yesterday...but message kept coming back as undeliverable.
I am in SW Louisiana.
Did some checking. Back in Sept of 2006, my screen went black and was experiencing some "popping sounds" prior to it going black. Took it to Baton Rouge (about a 2 hour drive) to CompUSA. They kept it a month and "repaired" it. If I do some serious looking in boxes of old receipt files, I may be able to find the receipt. (Kept receipts because we got flooded out by Katrina in the New Orleans area and was living with mother-in-law during repairs.)
Currently I have the same little problem described earlier to you...collapse to center and black screen for about 15 minutes. Once or twice daily. It has been consistant since first happening back in August...and usually daily when on the computer.
My computer is in the G84201xxxxx range and an eMac USB 2.0.
Saw the message to look at the ones on eBay. Saw a used computer lab one for about $150. May decide to buy it. (Am leery because I bought one some years ago that turned out to be stolen -- I had to give it up when a tech working on the screen saw the serial number from a list of stolen computers from a college computer lab.)
Basically, in your opinion, this problem that I am having will or will not get worse? Capicator problem or cable problem?
Am wondering if the fix done in '06 actually replaced the cable? and WHY I was not told of the recall problem at the time. I know that I had to pay well over $100 for the fix, whatever it was.
Anyway, I will call the 1-800 number this week but expect little or no assistance from them.
When experiencing the problem initially back in 2006, I called Apple tech support and they could do nothing for me and my problem? My extended warranty had run out and was no longer renewable. Strange, if there was a recall fix out there for the problem that I was having, nothing was told to me.
Anyway, thanks for your input!
Joe

Replace 3005 VPN Concentrator

We have two 3005 concentrators that need to be replaced.
Is there anything equivilant that will allow for creation of groups, Cisco VPN client, web VPN and is reasonably priced?
What do people generally do for a plug in replacement to the 3005 VPN concentrator?

What is generally done about the cost?
At the moment, the PIX firewalls are not EOL.
If I replace the firewalls, just because the 3005 is EOL, will be a large expense correct?
Also, at the moment, the firewall is passing through the traffic to the concentrator in a DMZ.
What is the alternative in the ASA appliance?
And, does the ASA allow for the creation of groups for access like the concnetrator does?

What does replacing the bottom plate of the body cost?

Hello
I am wondering if anyone knows what Apple charges to have the bottom plate of the MacBook Pro replaced. When I was at a store, an employee told me that it "might cost, like, uh, forty bucks," in a way that made me think he was just pulling that price out of his you-know-what. After searching eBay for that part and finding no auctions for less than $100, I assumed that Apple would charge something more like that.
It's really irritating that in order to replace two of my footpads, I must replace the whole bottom plate of the body. Apple is really trying to get people to buy the service plan, and then a new laptop when that runs out. Great for the environment. The whole unrepairable Retina Display MacBook debacle is just more proof of that.

Approaching retirement the Apple store job sounds a lot better than Home Depot, but that is another story
When you were at the store you mentioned in your original post, did you have the MBP along and was it a genius bar person you talked with? I have found the sales floor people to have a wide range of actual useful knowledge. The genius bar staff, however, are super.
Why not make an appointment at the genius bar, so you don't have to stand aournd and wait, and talk hard facts about replacement and what options are available. Definitive, quality information is the best thing to have.

What can replace the hit counter - preferably one without ads - an html code?

I'm looking for some html code for a hit counter to replace the one from iweb.
The free sources all have ads associated with them.

Statcounter is kind of overkill for most websites much like Google Analytics.
You will get a link to a whole bunch of simple hit counters on this page...
http://www.iwebformusicians.com/Search-Engine-Optimization/Statistics.html
Am I the only person on the planet that uses the web server stats like Webalizer? No code required and even I can make sense of them!

What is replacing the Report Model

Hi
Given that from SQL 2012 onwards it is no longer possible to create a Report Model for use in the Report Builder, I was wondering what is taking its place?
The scenario is that I want our end users to be able to create reports using Report Builder to query the live transactional database. I thought I should create a Report Model to help them, but now I'm not sure what to do.
I want to build a solution that we can take forward and not base it on something that is deprecated.
IS the recommendation to move to Analysis Server? If so, what about real time reports.
Thanks for your help.
Graham

Think of a Shared Dataset as a view. You can create them and users can use them in the same fashion, though the data is flattened out. A Shared Dataset works through a Shared Data Source and is direct connection to the database, however when
developing against a Shared Dataset, users typically do not have to authenticate like they would with a Shared Data Source.
There really isn't anything to expose the raw schema or specific set of tables like you can with a model anymore that i am aware of other than using a Share Data Source and trying to limit security on the database side.

What's next for Creative? IE, what's replacing the Zen Vision

Subject says it all. Do we know what/when is coming out next?

*bump*?I am wondering too. *** PURE SPECULATION AHEAD!? Read at own risk?***?I would imagine they will try their hand at wireless (like the Zune and others have)?I also assume they are working on players with the newer capacities of flash (there is a 32 Gig Flash dri've out now)?Lastly, I think plaid is the new color for all Creative players. ?Eric

VPN concentrator and webVPN

Hi,
Trying to setup VPNc 3005 for WebVPN.
The VPNc is configured with NTP server so
the clock is fine. I installed SSL vpn
client and SecureDesktop software onto the VPNc. Create a local account and
group. When I perform https://vpnc/admin.html, I can manage the
VPNc from the external interface so the
certificate is good.
When I do http://vpnc from the same XP Service Pack 2 workstation, it attemped
to install both ssl vpn client and secure desktop onto my winXP, I have admin privilege on the XP machine, then
it tells me that the vpn concentrator
has a server certificate error. I've
attached the screen shot. Anyone know
what it is? Thanks.

If you connect to a website that loads content (such as images) from a second, previously unauthenticated server, the content might not be rendered correctly. WebVPN clientless mode does not support websites that require authentication for access to content from secondary servers. When using WebVPN with NAT-T, do not set the NAT-T port to 443. We recommend using port 80 for NAT-T, as firewalls should allow this.
http://www.cisco.com/en/US/docs/security/vpn3000/vpn3000_41/configuration/guide/webvpnap.html
http://www.cisco.com/en/US/docs/security/vpn3000/vpn3000_41/quick/start/gs3mgr.html#wp1302684

IP Address Assignment on VPN Concentrator through AD

Is it possible to assign an IP address on a per-user basis using Active Directory as your authentication method for a group within the 3000 series VPN Concentrator?
I know this can be done with ACS/RADIUS, but I do not see any documentation on how this can be accomplished using Active Directory as your external authentication server.

Sorry for the thread title it should be : "reserver" not reverse.
I have been advised to read the "admin guide"
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a008026f96c.shtml
under the heading below
Assign a Specific IP Address to a User
In order to assign a static IP address for the remote VPN user every time they connect to the VPN 3000 Series Concentrator, choose: Configuration > User Management > Users > Modify ipsecuser2 > identity.
My question i am using production box (to avoid screw up whole system), does it affect if i want to create a specific group and assign specific ip address to a user
On my PIX (VPN running paralled to the PIX, i.e it is not behind nor inforn of the PIX) what I have got these lines of configurations which are related to the VPN concentrator
nat (inside) 1 10.2.2.0 255.255.255.0 0 0,,,,,,,,ip for VPN pool as seen in figure
nat (inside) 1 172.168.1.0 255.255.255.0 0 0,,,,,,,,,not related to VPN
nat (inside) 1 192.168.0.0 255.255.0.0 0 0,,,,,,,,,not related to VPN
global (outside) 1 10.1.1.150-10.1.1.155
global (outside) 1 10.1.1.156
route inside 10.2.2.0 255.255.255.0 192.168.55.254 1,,,,,,,,,,,,,192.168.55.254, is the VPN Ethernet 1 ip address.
http://img204.imageshack.us/img204/7306/vpnpooleu1.jpg
What I am thinking to do, are below (please any comment) :
1- I want to modify the current group (see my VPN figure ) to be from range 10.2.2.1-10.2.2.9 instead of 10.2.2.1-10.2.2.10
2- Create another group called : " mobile_users "
3- Create a user called : " commuter "
4- Assign the user " commuter " to the group " mobile_user "
5- Assign ip address 10..2.2.2 to the user " commuter "
6- In the cisco site that I have posted , it syas: tick option for " User address from Authentication Server ",,,,I do not think this will apply to me ?
again since I am using production box, I have to assure that the modification above does not screw up the whole system

ACS with VPN Concentrator : IP address attribution

Hello,
I need to know if it is possible for ACS to attribute an IP address to the VPN Clients connected to a VPN Concentrator, with XAUTH, instead of the VPN Concentrator,and if yes : how can I do, what is the procedure ? With the attribute Framed IP Address ? Does it work ?
Thanks !
Patrice

yes it can be done at works very well under the radius attributes uses the:
[014] Login-IP-Host
NAS Specifies
User Specifies
Other
Check other and then add the ip address that you want to assigned

VPN Concentrator authentication with multiple domains

I have a hub and spoke network where a T1 comes in to the hub site A and there is a frame relay connection going over to the spoke site B. We want to add a VPN concentrator to site A for remote access but site A and site B have their own domains that are independant of one another. Can I set up the VPN Concentrator to authenticate users that belong to site A domain using site A's domain controller and authenticate users the belong to site B domain using site B's domain controller? That way we can use a single VPN concentrator and a single internet connection but keep the authentication seperate.
Thanks in advance for any help.

To authenticate users that belong to site A domain using site A's domain controller you should authenticate users the belong to site A domain using site A's domain controller

LDAP ON VPN CONCENTRATOR

I have a vpn 3015, I want my vpn users to be authenticated and authorized to the vpn 3015 throught my Active directory (LDAP).
For Authentication server, I use Kerberos/Active Ritectory Server and it works when I test it.
but for the Authorization Server, I use LDAP server (the same server as the authentication server), with all the parameters like Login DN, Base DN, naming attributes, but when i test it it doesnt work?????why??
Thanks

The VPN Concentrator supports user authorization on an external LDAP or RADIUS server. Before you configure the VPN Concentrator to use an external server, you must configure the server with the correct VPN Concentrator authorization attributes and, from a subset of these attributes, assign specific permissions to individual users. Follow the instructions given here to configure your external server.
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a008015ce27.html

Routing loop when tracing to remote ip address on vpn concentrator

When I try and ping a remote address on my vpn 3000 concentrator I get ttl exceded. When I try and tracert from my workstation to the remote address on my vpn 3000 I see a loop.
Tracing route to x.3.17.145
over a maximum of 30 hops:
1    29 ms    31 ms    28 ms 172.4.0.20
2    32 ms    30 ms    29 ms 172.4.0.25
3    38 ms    29 ms    31 ms 172.3.0.21
4    33 ms    30 ms    32 ms 172.4.0.25
5    32 ms    49 ms    27 ms 172.3.0.21
6    35 ms    30 ms    38 ms 172.4.0.25
7    31 ms    28 ms    28 ms 172.3.0.21
   8    28 ms    28 ms    42 ms 172.4.0.25
9    38 ms    27 ms    32 ms 172.3.0.21
10    35 ms    28 ms    36 ms 172.4.0.25
11    35 ms    27 ms    28 ms 172.3.0.21
12    30 ms    28 ms    28 ms 172.4.0.25
13    39 ms    30 ms    43 ms 172.3.0.21
14    48 ms    28 ms    29 ms 172.4.0.25
15    36 ms    28 ms    34 ms 172.3.0.21
16    39 ms    39 ms    56 ms 172.4.0.25
17    42 ms    38 ms    47 ms 172.3.0.21
18    35 ms    39 ms    41 ms 172.4.0.25
19    49 ms    32 ms    29 ms 172.3.0.21
20    32 ms    28 ms    29 ms 172.4.0.25
21    28 ms    43 ms    30 ms 172.3.0.21
22    37 ms    32 ms    34 ms 172.4.0.25
23    29 ms    31 ms    32 ms 172.3.0.21
24    29 ms    33 ms    31 ms 172.4.0.25
25    32 ms    41 ms    43 ms 172.3.0.21
26    43 ms    29 ms    39 ms 172.4.0.25
27    47 ms    33 ms    31 ms 172.3.0.21
28    37 ms    29 ms    35 ms 172.4.0.25
29    44 ms    30 ms    91 ms 172.3.0.21
30    31 ms    41 ms    50 ms 172.4.0.25
172.3.0.21 is my private interface on the vpn 3000.
172.4.0.20 is my public interface on the vpn 3000.
172.4.0.25 is the default gateway / router interface on my router.
interface GigabitEthernet1/1/0.1
description connected to LAN
encapsulation dot1Q 1 native
ip address 10.3.0.25 255.255.255.0
interface GigabitEthernet0/0.4
description vpn 3000 concentratorconnection
encapsulation dot1Q 4
ip address 10.4.0.25 255.255.255.0
172.3.0.21 has a no default gateway on the vpn conentrator.
172.3.0.21 has a default gateway 172.4.0.25 on the vpn concentrator.

Hi John
could you clarify where you are pinging from and where you are pinging to please?
From the LAN to a destination across a VPN tunnel?
Or from a source across the VPN tunnel to a host on the concentrator's LAN?
Or from a source across the VPN tunnel to a host on the Internet?
I suppose your last line has a typo, it should be
172.4.0.21 has a default gateway 172.4.0.25 on the vpn concentrator.
right?
Apart from the default gateway are there any other static routes configured on the vpn3k and the router? No dynamic routing protocol?
tnx
Herbert

AAA VPN Concentrator 3005

Hi, I have run into a problem with my VPN concentrator. I was setting up AAA on it this morning and after configuring it ,I cannot get back into the web interface. It is version 2.21 running on the concentrator. I cannot get a console session, nothing appears when I use the settings 9600, 8, 0, 1, Hardware. I can see the authentication is working on the ACS Logs but I am getting invalid login on the VPN Concentrator. Is there anything I can do at this point?

Was using the wrong type cable to console into the Concentrator. Done a password reset from the console and that allowed me back in.
Cheers
Brian

After changing the battery in my iphone 4s, the phone will not boot up. I only see the apple and when it sits for a few minutes, a code shows above it. What is going on? Did I damage the phone by replacing the battery?

My sister gave me her iphone 4s for my son. It needed a new battery so, I bought one and replaced it. after doing so, it will not power up. I can only see the apple on the screen and when left for a few minutes.... 10 lines of numbers and codes show up at the top of the screen. Did I ruin the iphone by replacing the battery? Was a simple switch so I don't understand what is going on. Have never had one of these before.

iPhones are not user servicable.
Take the device to a competent repair person or buy a new one.

What's replaced the vpn concentrator?

Similar Messages

Maybe you are looking for