Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About derrick
Stats
Member since
08-03-2009
34
Posts
0
Helpful
0
Solutions
11-17-2015
09:16 AM
It was the ACL can't believe I missed that. Thanks for pointing it out!
... View more
11-16-2015
09:52 AM
I'm try to connect two ASAs together using the following config, but unable to get it to work. Can someone let me know what I'm doing wrong?
ASA-1
crypto ikev2 policy 1 encryption aes-256 integrity sha512 group 14 prf sha512 lifetime seconds 86400 ! crypto ikev2 enable outside ! crypto ipsec ikev2 ipsec-proposal ikev2-proposal protocol esp encryption aes-256 protocol esp integrity sha-512 ! object-group network LOCAL-SUBNET network-object 10.120.128.0 255.255.254.0 network-object 10.120.0.0 255.255.254.0 network-object 10.120.32.0 255.255.254.0 object-group network REMOTE-SUBNET network-object 10.130.222.0 255.255.254.0 network-object 10.255.255.0 255.255.255.0 ! access-list ikev2-list extended permit ip object-group LOCAL-SUBNET object-group REMOTE-SUBNET ! tunnel-group 207.130.222.11 type ipsec-l2l tunnel-group 207.130.222.11 ipsec-attributes ikev2 local-authentication pre-shared-key key123!! ikev2 remote-authentication pre-shared-key key123!! ! crypto map ikev2-map 1 match address ikev2-list crypto map ikev2-map 1 set peer 207.130.222.11 crypto map ikev2-map 1 set ikev2 ipsec-proposal ikev2-proposal crypto map ikev2-map interface outside ! management-access inside ! nat (inside,outside) source static LOCAL-SUBNET LOCAL-SUBNET destination static REMOTE-SUBNET REMOTE-SUBNET no-proxy-arp route-lookup
ASA-2
crypto ikev2 policy 1 encryption aes-256 integrity sha512 group 14 prf sha512 lifetime seconds 86400 ! crypto ikev2 enable outside ! crypto ipsec ikev2 ipsec-proposal ikev2-proposal protocol esp encryption aes-256 protocol esp integrity sha-512 ! object-group network LOCAL-SUBNET network-object 10.130.222.0 255.255.254.0 network-object 10.255.255.0 255.255.255.0 object-group network REMOTE-SUBNET network-object 10.120.128.0 255.255.254.0 ! access-list ikev2-list extended permit ip object-group LOCAL-SUBNET object-group REMOTE-SUBNET ! tunnel-group 207.130.2.137 type ipsec-l2l tunnel-group 207.130.2.137 ipsec-attributes ikev2 local-authentication pre-shared-key key123!! ikev2 remote-authentication pre-shared-key key123!! ! crypto map ikev2-map 1 match address ikev2-list crypto map ikev2-map 1 set peer 207.130.2.137 crypto map ikev2-map 1 set ikev2 ipsec-proposal ikev2-proposal crypto map ikev2-map interface outside ! management-access inside ! nat (inside,outside) source static LOCAL-SUBNET LOCAL-SUBNET destination static REMOTE-SUBNET REMOTE-SUBNET no-proxy-arp route-lookup
... View more
Labels:
03-19-2015
06:33 AM
I have AnyConnect 3.1.06079 and I set it up to use SBL. I'm using this on Windows 8 machines. I can see the AnyConnect VPN option but I can't see how to connect a wireless connection before attempting to connect to the VPN. I've used the built in Windows VPN client in the past using SBL and with that it had the wireless icon in the lower left corner. I could just go there and select the wireless connection I want and then try connecting the VPN. Is there something I missed in my configuration to get that wireless icon to show on the login screen?
... View more
Labels:
12-22-2014
02:31 PM
Thanks for clearing that up. I really appreciate the time you took answering my questions.
... View more
12-22-2014
01:17 PM
Thanks for clearing that up. That's what I assumed when going over the Cisco docs, but they seem to think it's not possible for some reason. Now about the channels. I found this article here http://support.zen.co.uk/kb/Knowledgebase/Broadband-Understanding-Wireless-Channels saying that ideally yes, you would want each broadcasting on separate channels, but it is ok to have them one the same channel. The main issue is if I had mine on channel 6 while they are channel 7. Am I understanding that correctly?
... View more
12-22-2014
12:35 PM
So if I classify their APs as friendly/external and they classify my APs as friendly/external can they happily coexist in the same building? Is there something I'm not understanding correctly about these classification and what they do?
... View more
12-22-2014
12:31 PM
So what does it mean that you classify rogues as friendly, malicious or unclassified? If I classified their APs as Friendly and external since they sit outside our firewall what would happen? Also we don't really need to roam between their system and ours.
... View more
12-22-2014
12:16 PM
Yes they have Cisco but will be moving to Aruba sometime early next year. Can you elaborate on what issues this causes? Also why wouldn't it be possible to set the APs to ignore each other? Or what does setting them as Friendly external do?
... View more
Created by
derrick
in Wireless and Mobility
in Wireless and Mobility
12-22-2014
11:28 AM
12-22-2014
11:28 AM
I work in a building that currently has Cisco controller based access points. The access points aren't managed by us and are actually part of another campus. We are given access to them but they don't work quite like we want them to. So we are wanting to bring in our own Cisco WLC 2504 with 3702 APs. But when we brought this up with the main campus they said we can't have two separate enterprise wireless networks in the same building. That their APs will mark our APs as rogues and try to shut them down. There was also mention that they can't share the same channel and that the radios will negotiate with each other to determine how much power they need for coverage. But from what I've read none of that is true. So maybe I misunderstanding something and hoping someone here with more experience can shed some light on this. The only reason we would want to keep their wireless in the building is so when their staff come to our office they can use it. So can two separate WLC/AP systems on different subnets and broadcasting different SSIDs exist in the same building with out causing any issues?
... View more
Labels:
12-30-2010
08:38 AM
If I create a regular pool how will that work? Because I can't create anymore VLANs I'm already using the max that is supported with my router. What I'm trying to do is have a reserved IP within that guess VLAN that will have access to the printer. So my ACL will look something like: access-list 100 permit ip host 192.168.2.2 host 192.168.1.20 access-list 100 deny deny ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 access-list 100 permit ip any any 192.168.2.2 = Host on guest vlan 192.168.1.20 = Printer on Co. Vlan I hope this helps clarify what I'm wanting. And thanks for the responses.
... View more
12-30-2010
07:49 AM
So this will only bind it by MAC address? Is it possible to bind to the switchport? Because I would like to have it so that any guest that goes into that meet room can use the printer.
... View more
12-30-2010
07:07 AM
Realize that the title might not make a whole lot of sense but here is my scenario. I have a guest VLAN that is completely blocked off from our Company's VLAN by use of ACLs. One of our guest needs access to a printer that is on our Co. VLAN. I don't want to open that printer to all the guest on the VLAN. So here is what I was hoping to do. The guest uses one of our meeting rooms. That meeting room has a port connecting to our c2960 switch. I was wondering if there is any way to only allow access to the specific port, without creating a new VLAN or moving the port to the Co. VLAN. I thought about doing this with static IPs but I don't want to configure her laptop with a static IP. So is there a way to setup DHCP to only give that PC connected to that switchport in the meeting room the same IP address each time she connects? Again realize that this may not make a whole lot of sense the way I described. But it's early and I haven't had my coffee yet so please bear with me. Thanks, Derrick Hardware and IOS in use: Router: (C870-ADVIPSERVICESK9-M), Version 15.1(1)T Switch: (C2960-LANBASEK9-M), Version 12.2(55)SE,
... View more
Labels:
Created by
derrick
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-27-2010
01:10 PM
10-27-2010
01:10 PM
Well there is no issue with the connection between the users workstation and the router. They have a solid connection and everything works fine except outlook. When I plug them in directly to the router using an ethernet cable than outlook will work without any issues.
... View more
Created by
derrick
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-26-2010
01:30 PM
10-26-2010
01:30 PM
I have four cisco 871 routers. They each have an issue were outlook users get disconnected when using WiFi. If they are connected via wire with wireless turned off they have no issues. I'm also not able to telnet to the exchange server using ports 110 and 25 if I'm connected on the wireless. But it works just fine when I'm connected via wire.
... View more
09-08-2010
12:11 PM
Hey Leo, Do you know if version 12.3 supports DMVPN? I'm not able to find that it does.
... View more
11-16-2015
I'm try to connect two ASAs together using the following config, but
unable to get it to work. Can s...
03-19-2015
I have AnyConnect 3.1.06079 and I set it up to use SBL. I'm using this
on Windows 8 machines. I can ...
12-22-2014
Thanks for clearing that up. I really appreciate the time you took
answering my questions.
12-22-2014
Thanks for clearing that up. That's what I assumed when going over the
Cisco docs, but they seem to ...
12-22-2014
So if I classify their APs as friendly/external and they classify my APs
as friendly/external can th...
12-22-2014
So what does it mean that you classify rogues as friendly, malicious or
unclassified? If I classifie...
12-22-2014
Yes they have Cisco but will be moving to Aruba sometime early next
year. Can you elaborate on what ...
Created by
derrick
in Wireless and Mobility
12-22-2014
12-22-2014
I work in a building that currently has Cisco controller based access
points. The access points aren...
Created by
derrick
in Other Wireless - Mobility Subjects
10-27-2010
10-27-2010
Well there is no issue with the connection between the users workstation
and the router. They have a...
10-26-2010
I have four cisco 871 routers. They each have an issue were outlook
users get disconnected when usin...
Public Statistics
| Date Registered | 08-03-2009 05:37 AM |
| Date Last Visited | 09-25-2019 12:21 AM |
| Total Messages Posted | 34 |
Helpful Votes Given To
.jpg "Hall of Fame Master"){kind=icon}
