Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About George Rodriguez
Stats
Member since
02-24-2012
37
Posts
0
Helpful
0
Solutions
Created by
George Rodriguez
in Small Business Switches
in Small Business Switches
10-03-2018
05:21 AM
10-03-2018
05:21 AM
This link is not helpful. The gui nor the CLI will allow me to change the IPV4 Management IP address to another IP within the same subnet. I have worked with the 300 series and there is no issue it appears to only be an issue on the 350 series. I found a workaround on the forums that works but we shouldn't have to resort to a workaround. This is the link to the workaround. https://community.cisco.com/t5/small-business-support-documents/setting-static-ipv4-address-on-a-switch-using-gui/ta-p/3396718 Thank You.
... View more
Created by
George Rodriguez
in Small Business Switches
in Small Business Switches
10-02-2018
08:01 AM
10-02-2018
08:01 AM
There appears to be a bug in the gui for SG/SF 350 models where once the management ip address has been changed to static and assigned a new one it cannot be changed in the gui.
The CLI allows the change though.
I dont have smartnet on any of the switches so I'm hoping someone from Cisco monitors these threads and can report the issue.
BTW, i have th elatest FW loaded.
... View more
Labels:
Created by
George Rodriguez
in VPN and AnyConnect
in VPN and AnyConnect
06-26-2018
09:12 AM
06-26-2018
09:12 AM
Hoping someone can help here.
I have an ASA 5505 with a VPN back to a vendor's Sonicwall. The VPN is working with one local subnet on their host server. We need to add some more subnets to access their host. The issue is on the Sonicwall side they are already using the subnets so I need to NAT the subnets to a new subnet.
The subnet I need to add to the VPN is 192.168.2.0/24 to access the vendors host 10.7.1.115. On the Sonicwall side they already have an object and route for 192.168.2.0/24. They advised me to NAT 192.168.2.0/24 t0 10.81.86.0/24. I was able to do that and I can see the traffic on the ASA but ICMP does not seem to work from either side and the application on the server requires ICMP to work..
Here is my NAT and ACL config
access-list POLICY-NAT2 extended permit ip 192.168.2.0 255.255.255.0 host 10.7.1.115
static (inside,outside) 10.81.86.0 access-list POLICY-NAT2
access-list 110 extended permit ip 10.81.86.0 255.255.255.0 host 10.7.1.115
access-list NONAT extended permit ip 10.81.86.0 255.255.255.0 host 10.7.1.115
As I stated, when I do a Sho IPSEC SA I see the encaps and decaps.
Am I missing something?
Thanks
... View more
Labels:
01-18-2018
07:06 AM
I upgraded my cable connection to 200mbps. I have an ASA5506x with a 3550 switch. When I connect a PC or laptop direct to an ASA port I get full 200mbps. But when I connect to one of the ports on the 3550 speed gets reduced to only 100mbps. I tried changing the speed/duplex with no luck. Has anyone aver come across this? Thx
... View more
Labels:
12-07-2017
11:54 AM
So I did a little more troubleshooting and realized that when I plug my laptop into an ASA port I get full 200 mbps but when I plug my laptop into the Cisco 3550 switch I only get 100mbps. So it appears to be a switch problem.
Any thoughts would be helpful.
... View more
12-07-2017
09:08 AM
I have a 5506X connected to a 200mbps cable pipe. When i run speed test i cap at just under 100mbps. If i connect with a laptop direct to the cable modem I get just under 200mbps. I am not using any of the Firepower features. Is there anything I need to do on ASA to get past 100mbps?
... View more
Labels:
Created by
George Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-27-2017
09:05 AM
10-27-2017
09:05 AM
seems to be doing the broadcast now. I'll try on the network.
[*07/11/2017 00:10:39.9091] CAPWAP State: Discovery [*07/11/2017 00:11:09.9397] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
... View more
Created by
George Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-27-2017
08:43 AM
10-27-2017
08:43 AM
you stated that if the show version shows this:
AP Image type : MOBILITY EXPRESS IMAGE AP Configuration : MOBILITY EXPRESS CAPABLE
then I do not have to convert the image.
I'm confused.
... View more
Created by
George Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-27-2017
08:14 AM
10-27-2017
08:14 AM
So based on your response and the output of the AP it looks like I can use it on a WLC 5508. Does it operate the same as the older models where it does a broadcast capwapp looking for a controller?
cisco AIR-AP1832I-B-K9 ARMv7 Processor rev 0 (v7l) with 966396/717400K bytes of memory. Processor board ID KWC21180593 AP Running Image : 8.3.112.0 Primary Boot Image : 8.3.112.0 Backup Boot Image : 0.0.0.0 AP Image type : MOBILITY EXPRESS IMAGE AP Configuration : MOBILITY EXPRESS CAPABLE 1 Gigabit Ethernet interfaces 2 802.11 Radios Radio FW version : 2776931df5be64dcd1cbe2e7082a7079 NSS FW version : NSS.AK.1.0.c10-00017-E_custC-1.67978.1
... View more
Created by
George Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-27-2017
07:37 AM
10-27-2017
07:37 AM
I have an 1832i that I'd like to use on a WLC 5508. Is this possible? Do I need to change the IOS on the AP or is already provisioned to use either a WLC or the Mobility Express?
... View more
Labels:
Created by
George Rodriguez
in VPN and AnyConnect
in VPN and AnyConnect
10-17-2017
11:29 AM
10-17-2017
11:29 AM
I added the NAT statements as suggested and it works!!
Thank!
... View more
Created by
George Rodriguez
in VPN and AnyConnect
in VPN and AnyConnect
10-17-2017
09:05 AM
10-17-2017
09:05 AM
So the 1 & 2 will give the NAT statements a priority? That makes sense. I'll give that a shot.
... View more
Created by
George Rodriguez
in VPN and AnyConnect
in VPN and AnyConnect
10-17-2017
08:38 AM
10-17-2017
08:38 AM
Its a site to site vpn
here is the relevant config
I assumed adding the DENY on the ACL would prevent the traffic. It seems like it is but I suspect the traffic is not being NAT'd
object network LAN_Subnet subnet 10.2.0.0 255.255.255.0 object network obj_any subnet 0.0.0.0 0.0.0.0 object-group network REMOTE_SUBNETS network-object 10.0.0.0 255.0.0.0 object-group network OS_Subnet I left out for security reasons access-list INTERESTINGTRAF extended deny ip object LAN_Subnet object OS_Subnet access-list INTERESTINGTRAF extended permit ip object LAN_Subnet object-group obj_any nat (inside,any) source static LAN_Subnet LAN_Subnet destination static obj_any obj_any no-proxy-arp route-lookup crypto map DataCenter 20 match address INTERESTINGTRAF crypto map DataCenter 20 set peer x.x.x.x crypto map DataCenter 20 set ikev1 transform-set TSET crypto map DataCenter interface outside
object network obj_any nat (inside,outside) dynamic interface
... View more
Created by
George Rodriguez
in VPN and AnyConnect
in VPN and AnyConnect
10-17-2017
08:11 AM
10-17-2017
08:11 AM
Can someone assist with this scenario?
I need to have ALL traffic (including Internet) route over a VPN BUT I need to exclude some specific traffic so it gets Natted locally.
I've tried to do this by adding a n DENY on my ACL but can't seem to get it to work.
Thanks.
... View more
Labels:
Created by
George Rodriguez
in Small Business Switches
10-03-2018
10-03-2018
This link is not helpful.The gui nor the CLI will allow me to change the
IPV4 Management IP address ...
Created by
George Rodriguez
in Small Business Switches
10-02-2018
10-02-2018
There appears to be a bug in the gui for SG/SF 350 models where once the
management ip address has b...
Created by
George Rodriguez
in VPN and AnyConnect
06-26-2018
06-26-2018
Hoping someone can help here. I have an ASA 5505 with a VPN back to a
vendor's Sonicwall. The VPN is...
01-18-2018
I upgraded my cable connection to 200mbps. I have an ASA5506x with a
3550 switch. When I connect a P...
12-07-2017
So I did a little more troubleshooting and realized that when I plug my
laptop into an ASA port I ge...
12-07-2017
I have a 5506X connected to a 200mbps cable pipe. When i run speed test
i cap at just under 100mbps....
10-27-2017
seems to be doing the broadcast now. I'll try on the network.
[*07/11/2017 00:10:39.9091] CAPWAP Sta...
10-27-2017
you stated that if the show version shows this: AP Image type : MOBILITY
EXPRESS IMAGEAP Configurati...
10-27-2017
So based on your response and the output of the AP it looks like I can
use it on a WLC 5508. Does it...
10-27-2017
I have an 1832i that I'd like to use on a WLC 5508. Is this possible? Do
I need to change the IOS on...
10-17-2017
So the 1 & 2 will give the NAT statements a priority? That makes sense.
I'll give that a shot.
10-17-2017
Its a site to site vpn here is the relevant config I assumed adding the
DENY on the ACL would preven...
Public Statistics
| Date Registered | 02-24-2012 04:41 PM |
| Date Last Visited | 10-04-2018 07:55 AM |
| Total Messages Posted | 37 |
