About roncro

roncro · 03-10-2024

Hello,I have a Cisco 2951 and it works as a "DNS forwarder" for my local network. It looks like 'someone' is sending DNS requests from the outside.I see msgs like:2024-03-01T01:13:23.953850-07:00 gateway 516: Mar 1 08:13:22.938: %DNSSERVER-3-TOOSHOR...

roncro · 02-18-2024

closed the thread too quick I think: So I tried this, below. I can ping another host in the same vlan (vlan10) but can not ping the router (192.168.1.1) (should I 'permit' the router separately? so that vlan 10 keeps connectivity with the WAN side...

roncro · 02-17-2024

Hello,I am trying to set up remote logging with rsyslog. But all the messages form the router (Cisco 2952) and switches (Cisco 2960) keep ending up in /var/log/messages (RHEL) is that because of the "Syslog Facility" I use, 'local7'? I want the log m...

roncro · 02-17-2024

Hello, if I want to separate/segregate one vlan (vlan10) from everything else, I think I can use an access-list like: access-list 110 permit ip 192.168.10.0 0.0.0.255 192.168.1.1 0.0.0.0 correct? The idea is that any ip in the 192.168.10.0 network ...

roncro · 02-17-2024

Hello, I set up a vlan, vlan10, and it doesn't seem to be working. I posted the configs from, AP (aironet 1100), switches (Cisco 2960) and router (Cisco 2951), and there doesn't seem to be anything wrong. (I am sure i forgot to do something, been a ...

roncro · 03-12-2024

I noticed this community/forum is a really great place to ask questions, some people here are VERY knowledgeable.So thank you! and others on your level for willing to help people out.Ron

roncro · 03-12-2024

My WAN interface is:interface GigabitEthernet0/0description WANip address dhcpip nat outsideip virtual-reassembly induplex autospeed autoI think I need to add:"ip access-group Deny-DNS in" to block/deny incoming DNS requests from the internet/wan sid...

roncro · 03-10-2024

That is what I was expecting, and indeed what it is that I want to do. I need some DNS locally, instead of host files, but do not want to handle requests from the WAN side, So I am indeed going to use liviu.gheorghe's suggestion

roncro · 03-10-2024

That's something I was looking for, I just want to block incoming requests. I am not hosting a DNS server here (except for some 'hard coded' local addresses on the Cisco 2951)I'll try that later, thanks!Ron

roncro · 02-18-2024

Hello Paul, perfect, that's exactly what I was looking for, it works. everything can reach everything else in that vlan, but a host in it can only get out on the internet, and nothing local canget into that vlan, just how I wanted it.thanks!

Member Since	‎02-26-2019 01:55 PM
Date Last Visited	‎03-13-2024 12:02 AM
Posts	241
Total Helpful Votes Received	32

User Statistics

User Activity

DNS on a Cisco 2951

separating/isolating a vlan (round 2)

rsyslog on router/switch and "syslog facility"

separating/isolating a vlan

vlan not working on AP (Aironet 1100)

Re: DNS on a Cisco 2951

Re: DNS on a Cisco 2951

Re: DNS on a Cisco 2951

Re: DNS on a Cisco 2951

Re: separating/isolating a vlan (round 2)