c850-advsecurityk9-mz.124-15.T7.bin ... View more

Hi, Problem fixed with a firmware update ... View more

I have firewalled the phones so that my dekstop can connect to the web interface, the phones can talk to the sip server but blocked all other traffic to the phone network. This seems to have helped but need time to check. ... View more

The other odd thing about this is from the log I am seeing: "Dec 15 16:57:41 exchange.meshdigital.com System started: ip@x.y.a.z, reboot reason:H0" What is this exchange.meshdigital.com and where it it coming from? Thanks ... View more

Hi, I don't suppose you have any example configs for what I am trying to do? Thanks ... View more

Hi, Thanks for your response. Yes, I want to open an inbound ftp connection to 5.6.7.8 2 from a single external host. If I change the ACL to inbound on the dialer I lose all connectivity. Thanks ... View more

Hi djh278778, Thanks for your reply. Yes, the FTP server is 192.168.2.20 so behind the router and I am trying to get a single host from the outside to gain access to the FTP server. I will paste a config below but the access list appears appears to be ignored as I can still connect to the external IP from anywhere as opposed to just from my single host. ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname rtr111 ! boot-start-marker boot-end-marker ! logging buffered 51200 warnings enable secret secretpassword ! aaa new-model ! aaa session-id common ! dot11 syslog ip cef ! no ip domain lookup ip domain name domain.co.uk ! multilink bundle-name authenticated isdn switch-type basic-net3 ! ! username password ! ! crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 lifetime 28800 crypto isakmp key 1.2.3.4 ! ! crypto ipsec transform-set myset esp-3des esp-md5-hmac ! crypto map remotes 2111 ipsec-isakmp set peer 1.2.3.4 set transform-set myset match address 2112 ! archive log config   hidekeys ! ! ip ssh version 1 ! ! ! interface FastEthernet0 no ip address shutdown duplex auto speed auto ! interface BRI0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 ! interface FastEthernet5 ! interface FastEthernet6 ! interface FastEthernet7 ! interface FastEthernet8 ! interface ATM0 no ip address ip nat outside ip virtual-reassembly atm vc-per-vp 64 no atm ilmi-keepalive pvc 0/38   encapsulation aal5mux ppp dialer   dialer pool-member 1 ! dsl operating-mode auto ! interface Vlan1   ip address 192.168.2.254 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! interface Dialer0 ip address negotiated ip access-group ftprule out ip nat outside no ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap pap callin ppp chap hostname test2@dsldomain.co.uk ppp chap password test crypto map remotes ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Dialer0 ! ! no ip http server no ip http authentication local no ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip nat inside source list 125 interface Dialer0 overload ip nat inside source static tcp 192.168.2.20 21 5.6.7.8 21 extendable ! ip access-list extended ftprule permit tcp any any established permit tcp host 9.10.11.2 gt 1024 host 5.6.7.8 eq ftp deny   tcp any any eq ftp ! access-list 24 permit x.x.x.x access-list 24 deny   any access-list 125 deny   ip 192.168.2.0 0.0.0.255 y.y.y.y 0.0.0.255 access-list 125 permit ip 192.168.2.0 0.0.0.255 any access-list 2111 permit ip 192.168.111.0 0.0.0.255 192.168.0.0 0.0.255.255 dialer-list 1 protocol ip permit snmp-server community string RO 24 snmp-server enable traps tty no cdp run ! control-plane ! line con 0 line aux 0 line vty 0 4 privilege level 15 transport input telnet ssh line vty 5 15 access-class 24 in privilege level 15 transport input telnet ssh ! end If I change "ip access-group ftprule out" to "ip access-group ftprule in" I lose all connectivity. Thanks ... View more