Hi,

I have a problem on cisco C892. At the moment I apply a ACL-IN ACL on external Dialer0 int, I lose the connectivity from LAN to internet (ping, dns, http, everything), which is unwanted. While I still have RDP access from internet 2.2.2.0 network to internal server at 192.168.1.37.
From LAN to INET I want to block just SMTP except from mail server.
From external network 2.2.2.0/24 I want to allow access to everything.
From other internet addresses I want to allow only what is specified in ACL-IN access list.
1.1.1.1 is my fixed public IP address I get on Dialer0 interface with pppoe connection.
(I have been said that the costumer has another 4 public IP addresses which are routed by ISP over 1.1.1.1 address, but they are not in use - if relevant)
Any ideas would be more than welcome.

Here is a relevant part of router configuration:

ip cef
ip domain name domain.local
ip name-server 8.8.8.8
ip name-server 8.8.4.4
ip inspect log drop-pkt
ip inspect name WALL tcp
ip inspect name WALL udp
ip inspect name WALL tftp
ip inspect name WALL ftp
ip inspect name WALL realaudio
ip inspect name WALL icmp
ip inspect name WALL rtsp
ip inspect name WALL http
ip inspect name WALL https
ip inspect name WALL ssh
ip inspect name WALL sip
ip inspect name WALL h323
no ipv6 cef
!
interface FastEthernet8
 description ***INTERNET PPPoE***
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip virtual-reassembly
 load-interval 30
 duplex …

Hi support,
I should disable nat on a fritz avm 7590 router (I have a public subnet)
in the configuration menus I can't find the way.
Do you have any suggestions?
Thank you

Regards

I have 3 cisco routers with gateway to gateway vpns setup. Location 2 can ping the local domain (mydomain.local which resides at Main Location1) and everything works just fine. Users can connect to the domain perfectly.

Location 3 cannot ping mydomain.local or the netbios name of the server at MainLocation1. I can ping the ip address of the server at MainLocation1.

MainLocation 1 (Where the server resides)
Location 2 (satellite office)
Location 3 (satellite office).

On the workstation at Location 3 I manually assigned dns 1 to the server's ip.

Other details: All of the routers are the same. Any help I can get would be much appreciated!

Went on a call to a new client today, who has been having issues with their network.  They have a DSL modem with WiFi on channel 1 (Since disabled) cascading to a TP-LINK Archer c5400 (Upgraded firmware today).  They are working on getting the PPPoE (Centurylink DSL connection) so we can bridge the DSL modem and set the router up properly.  Some devices hardwired and wireless will not function because they are getting a DHCP address from the DSL modem.  I can log into the DSL modem on those computers.  Is this a malfunction in the TP-Link (It only happens less than 10% of the time and very random on devices)?  I have had very bad experiences with TP-Link switches, are their routers any better?  The owner said the problems have always been existant and the old IT company (who installed it), could never get it working 100%.  I am recommending replacement of router, but wanted to hear thoughts on this subject.  The client will be ordering their own new router, and won't have until Monday.  This should be a non-issue once the modem is bridged.

If I release the DHCP enough times, it will go back to the correct DHCP server of the router and start working properly.  The DSL modem is not accessible by devices connected when getting the working IP address.

We utilize Fortigate vdoms for  many school districts. Currently, as recommended by Fortigate, we extend the school vlans across our WAN. The vlans become virtual interfaces on the Fortigate vdom which firewall policies are applied to. This works very well for us but, recently, this design caused issues on our WAN because of LAN issues at one of the districts bleeding over to the WAN. The solution we are currently implementing is to create a single, transient vlan and route all other vlan subnets through it to the Fortigate. This works for simple configurations but is not a viable solution for complex Fortigate configurations. The best solution would allow us to  extend the district layer 2 vlans across a layer 3 connection and then pick up the vlan again at the Fortigate so it can be used as a virtual interface with the same subnet as what is used at the school district. (See drawing) .

The switches we are currently using are Aruba 3810s

What options are available in this scenario?

Thank you for assistance!
Layer-3-link.pdf

A friend of mine recently recommended I get an access point in addition to the router I have.  What access point should I buy?  I have an Apple AirPort acting as my router/access point for about 30 wireless devices in the house.

My plan is to have my router hard wired to my desktop and smart tv, then an access point setup to serve the rest of the devices that use wireless (Nest, Baby monitoring cameras, cell phones, ipads, etc).

When you recommend an access point should I make the Apple AirPort the main router or have the new recommendation be the router and turn the AirPort into the access point?

Thank you.

Is there a network appliance that can monitor primary and secondary internet links/circuits and if the primary link/circuit were to go down, this network device can automatically enable ports on devices connected to secondary internet link/circuit that have duplicated IP settings of the primary router's devices? And subsequently shut down the ports on devices connected to the secondary internet link/circuit when the primary internet link/circuit comes back online. The ports of devices connected to the secondary internet link/circuit should always remain disabled while the primary internet link/circuit is active and working because those devices' ports will have duplicated settings of the primary router's devices and should only be activated by the network appliance when the primary internet circuit goes down.

Hi Guys,
can you recommend a very cheap/refurbished VDSL2 modem ONLY with rj11 (POTS) WAN connection?
I want only modem or bridge feature because I have a dedicate firewall.

For now i have seen Draytek Vigor 130

HI,

Although I have worked on Cisco routers for many years I have little experience on Cisco ASA. Recently I have started managing a site that uses ASA between two offices. The foreign office is managed by another Vendor. I sometimes feel like the foreign offices vendor is feeding me BS as things sometimes seem to fix themselves overnight with out change on his part "apparently"

Example. the following packet tracer was performed

packet-tracer input inside udp 172.27.1.9 domain 10.1.1.112 domain
 
Phase: 1
Type: UN-NAT
Subtype: static
Result: ALLOW
Config:
nat (inside,outside-tm) source static NO-NAT-LOCAL NO-NAT-LOCAL destination static NO-NAT-REMOTE NO-NAT-REMOTE
Additional Information:
NAT divert to egress interface outside-tm
Untranslate 10.1.1.112/53 to 10.1.1.112/53
 
Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group global global
access-list global extended permit ip any any
Additional Information:
 
Phase: 3
Type: NAT
Subtype:
Result: ALLOW
Config:
nat (inside,outside-tm) source static NO-NAT-LOCAL NO-NAT-LOCAL destination static NO-NAT-REMOTE NO-NAT-REMOTE
Additional Information:
Static translate 172.27.1.9/53 to 172.27.1.9/53
 
Phase: 4
Type: NAT
Subtype: per-session
Result: ALLOW
Config:
Additional Information:
 
Phase: 5
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
 
Phase: 6
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
class-map …

Our network has a Sonicwall router NSA 220W connected to Cisco unmanaged switches but the wireless signal is horrible. How would I configure the NSA 220W to use another wireless router to provide the WiFi for the office. I have a netgear wifi router that used to give us a strong WiFi signal for this. Thanks for the help.

Seeking information from Australian IT Pro's

A stalemate with the Internet provider and their supplied router has me stuck.

We needed to add an additional port fwd rule to the device a Telstra V7610 (we have 4 at present) and when added it fails to fwd the 5th port.  The Internet Provider confirmed it was an issue and has:

• Downgraded the firmware and it failed to rectify.
• Sent a Technician to our site to repeat the process and confirm I am seeting it up right, and was able to confirm that it fails.
• Upgraded the firmware to a yet to be released version which created its own new list of problems, one of which was the loss of access to the management interface as soon as the connection to the NBN was online.

Like many we had to remove a perfectly good apliance (Draytek Vigor Series) and replace it with the Telstra/Netgear V7610.  In two years we've had the V7610 replaced 3 maybe 4 times to address problems with DOT and connection quality.

Do you have a solution to retianing the V7610 for DOT and another device for all other services, even better do you have one that addresses a V7610 with a Draytek Vigor appliance?