Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm having trouble with Apple products connecting to a Aironet 1231 using WEP. Apple products seem to complete the association process:*May 26 17:01:23.647: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 001e.5271.1890 Associated KEY_MGMT[NONE]But...
I have an internal network 192.168.10.0/24 on Ethernet0, DSL (Dialer1 interface) is dynamically assigned by ISP, Loopback0 has a static public IP address 66.1.1.25. Traffic originating from outside (Dialer1) is NAT'd from 66.1.1.27 to 192.168.10.34,...
We have a Dymanic Multiuser VPN (DMVPN) setup, but I can't figure out why the route 10.0.0.0/8 is coming from a spoke router (via 10.64.0.96). Also, if I shut down the 10.64.0.96 router, then another spoke (such as 10.64.0.20) will then put the rout...
I've got a Dynamic Multipoint VPN tunnel setup, but I'm worried about the wildcard isakmp key, so is it possible to enable isakmp extended authentication (xauth) on the hub router? If so, could someone please point me to the documentation.Thanks!
Will squid work with IOS FW for http urlfiltering:. From what I've read on the subject, the vendor N2H2 speaks a protocol called "Internet Filtering Protocol," so I guess I need to know if squid can speak that protocol. IOS also supports urlfilt...
Thanks olorunloba, you're correct. The 10.0.0.0/8 static route on the hub is being distributed to the spokes, then distributed back to the hub. I guess I should explain what I'm trying to accomplish because I have no clue how to do it.All traffic d...
Kevin,Thanks for the reply.Here is the routing table from the spoke:GW1.0096>sh ip routeCodes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external...
Forgot, if you were afraid that the Kazaa or other programs might use port 80, you may be able to use N2H2 or Websense to filter what URLs are allowed. http://www.cisco.com/en/US/products/sw/iosswrel/ps5012/products_feature_guide09186a008014654a.htm...
Not sure if this is practical for your situation, but you could explicitly define what ports are allowed, then deny everything else. This is what our company did on some 800 series routers.Example: You only want to allow outgoing traffic to ports ...
All spoke routers have similar configs.SPOKE ROUTER:!version 12.3service tcp-keepalives-inservice tcp-keepalives-out!hostname GW1.0096!!ip subnet-zerono ip source-routeip tcp selective-ackip dhcp excluded-address 10.0.96.1 10.0.96.128!ip dhcp pool CL...
