Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Sheik Mohamed
Stats
Member since
10-02-2012
22
Posts
0
Helpful
0
Solutions
08-15-2015
10:03 PM
Dear Paul and Richard I Tried to put acl but Any established is not working .. So if any other way to block ..In case i can use cyberoam firewall it will block ???pls ASAP. Ip access-list extended TST Permit tcp 2.2.2.0 0.0.0.255 any established Permit tcp 15.15.15.0 0.0.0.255 any established deny tcp 2.2.2.0 0.0.0.255 any deny tcp 15.15.15.0 0.0.0.255 any permit ip any any Sheik
... View more
08-14-2015
12:05 AM
Dear Supporters I have Cisco 3550 series core switch IOS (tm) C3550 Software (C3550-I5Q3L2-M) . Already configured 3 vlans (Vlan 2 =192.168.2.0/24, vlan 10=192.168.10.0/24 ; vlan=192.168.15.0/24) We need to restrict the access in to particular vlan .example vlan 10 want to access other vlan 2 and vlan 15 but both vlan cannot communicate with vlan10 ??we need to be scure the vlan 10 Vlan 10 >>>>>can access vlan 2 & Vlan 15 Vlan2 &Vlan 15 xxxxx cannot access vlan 10 is their any accesslist or commands available?? pls share with me the details??? Config: version 12.1 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname xxxxxx ! enable secret level 5 5 xxxxx enable password xxxxxx ! username admin password 0 xxxxxxx ip subnet-zero ip routing ip name-server 193.188.97.209 ip name-server 8.8.8.8 ! ip dhcp pool Vlan2 network 192.168.2.0 255.255.255.0 default-router 192.168.2.1 dns-server 192.168.100.254 lease 5 ! ip dhcp pool Vlan10 network 192.168.10.0 255.255.255.0 domain-name xxxx dns-server 192.168.100.254 default-router 192.168.10.1 lease 5 ! ip dhcp pool Vlan15 network 192.168.15.0 255.255.255.0 dns-server 192.168.100.254 default-router 192.168.15.1 ! ! spanning-tree mode pvst spanning-tree extend system-id ! ! ! interface FastEthernet0/1 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/2 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/3 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/4 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/5 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/6 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/7 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/8 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/9 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/11 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/12 switchport access vlan 10 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/13 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/14 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/15 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/16 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/17 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/18 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/19 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/20 switchport access vlan 2 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/21 switchport access vlan 15 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/22 switchport access vlan 15 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/23 switchport mode access no ip address spanning-tree portfast ! interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode access no ip address ! interface GigabitEthernet0/1 no ip address ! interface GigabitEthernet0/2 no ip address ! interface Vlan1 description WAN Connection to Firewall ip address 192.168.100.1 255.255.255.0 ! interface Vlan2 description School Vlan ip address 192.168.2.1 255.255.255.0 ! interface Vlan10 description Accounts ip address 192.168.10.1 255.255.255.0 ! interface Vlan15 description Special Purpose ip address 192.168.15.1 255.255.255.0 ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.100.254 ip http server ! ! ! line con 0 line vty 0 4 password xxxxx login local line vty 5 14 password xxxxx login local line vty 15 login ! end Thanks and regards Sheik Mohamed Shahul
... View more
Labels:
06-24-2014
05:10 AM
Hi Karthi and others Pls see the attachment there is only one inside ,i need it two inside ip and one is going to leased line and another one going to ADSL.is it possible on 5512 and 5515 firewalls?? Pls ASAP
... View more
06-23-2014
05:50 AM
Please confirm the ASA 5515-X can support Two Internet Lines routing to two different Vlans (Server, Client).
... View more
06-23-2014
05:45 AM
yes leased line directed connected but ADSL connection routed mode. yes i have public ip pool for leased line . in ADSL i will not confirmed whether they will get fixed ip .
... View more
06-23-2014
05:43 AM
Hi Rahul its existing setup ,but i will purchase a new 5512 firewall with IPS .they have 2 isp's... Leased line already configured the firewall .now they taken a ADSL line for internet browsing . Leased line only for Servers and other vlans. ADSL Line Only browsing purpose can we configure to Local Users ... I didn't started the work .Just asking a doubt .whether it is possible or not?? but when i contact one supplier they says is possible .
... View more
06-23-2014
01:25 AM
Hi Karthi Are you sure ?? becaz customer needed LAN internet packets going to ADSL . Servers and other vlan traffic going to Leased line Connection . Pls Make sure whether this scenario what i will do ??If ASA will not do what we can do this customer requirement ?
... View more
Created by
Sheik Mohamed
in Firewalls
in Firewalls
06-22-2014
10:55 PM
06-22-2014
10:55 PM
Dear all I have 2 internet line (Leased line and ADSL line ).Now my requirement is In ASA 5512 in the top of network with IPS . I have 6 vlans in the core switch . In 1 Vlan Passing to internet Traffic to normal ADSL Line .and all other Vlans and traffic going to leased line .Is it possible ?? it's not failover and its not primary and secondary . Our goal :leased line remaining 5 vlans carry ADSL line only one vlan carry to for browsing . Pls give me your valuable thoughts and ideas...
... View more
Labels:
03-18-2013
05:20 AM
I want to Single SSID in my network .I have 3 cisco 4410 WAP. ISP router Have the Wireless .How to get the single ssid in the network .same time i want to do configure in the isp router for wireless??pls advise to me...
... View more
Labels:
Created by
Sheik Mohamed
in Firewalls
in Firewalls
03-10-2013
10:52 AM
03-10-2013
10:52 AM
Dont be confuse... 1.i want to access to exchange Server from outside means https://my public ip /owa 2.port translated to Router to Firewall to my exchange server...Router will get public ip so i translated to ASA ..ASA translated to my exchange server (10.0.0.100) 3.I didn't configure at the moment .because of port forwarding not done properly ...i want to know in these port will use in VPN's ip nat inside source static tcp 172.16.30.1 10000 interface Dialer0 10000 ip nat inside source static udp 172.16.30.1 4500 interface Dialer0 4500 ip nat inside source static udp 172.16.30.1 500 interface Dialer0 500 ip nat inside source static tcp 172.16.30.1 1723 interface Dialer0 1723 ip nat inside source static udp 172.16.30.1 1723 interface Dialer0 1723 ip nat inside source static udp 172.16.30.1 50 interface Dialer0 50 ip nat inside source static tcp 172.16.30.1 50 interface Dialer0 50 Router ip :172.16.30.254 ASA outside:172.16.30.1 ASA Inside:10.0.0.138 In my Scenario is I want to access my server with my public ip.i done port mapping but it could't work my exchange server and web application server. but internet is working perfectly. could you pls advise??
... View more
02-12-2013
01:15 AM
In below these ACL lists which is one i want to add for security purpose .. pls mention required ACL and Not required ACL list;Pls let me know.. access-list out2in extended permit tcp any host 10.0.0.10 eq 3389 access-list out2in extended permit tcp any any access-list out2in extended permit ip any any access-list NONAT extended permit ip 172.16.20.0 255.255.255.0 172.16.20.0 255.255.255.0 access-list anycon standard permit 192.168.4.0 255.255.255.0 access-list CLS webtype permit url cifs://192.168.4.3 log default access-list CLS webtype permit url rdp://192.168.4.3 log default access-list CLS webtype permit url vnc://192.168.4.3 log default
... View more
02-12-2013
01:11 AM
at moment no connection between in to AD/DHCP?DNS server.i directly connected to ASA etherent0/1 in to my pc.there is no dhcp server so i can put my pc manual ip and dns address field . see if i put my pc lan ip 192.168.4.33/24 gateway is 192.168.4.60 but dns field i put 192.168.4.60 not working internet when i add to this ip 10.0.0.138 it is working internet. in this situation i want to add all pc's in 10.0.0.138 or public dns server ?? if my AD/DNS/DHCP server will work i dont want bother about this am i right???? or else i can add public dns address in to the ASA??? in the scanerio if my asa configuration any faults or misconfiguraion occured ???if any commands required in to the ASA?? Best regards Sheik Mohamed
... View more
02-11-2013
11:26 PM
Sorry to this...................................................................................
... View more
Labels:
08-15-2015
Dear Paul and Richard I Tried to put acl but Any established is not
working .. So if any other way t...
08-14-2015
Dear Supporters I have Cisco 3550 series core switch IOS (tm) C3550
Software (C3550-I5Q3L2-M) . Alre...
06-24-2014
Hi Karthi and others Pls see the attachment there is only one inside ,i
need it two inside ip and on...
06-23-2014
Please confirm the ASA 5515-X can support Two Internet Lines routing to
two different Vlans (Server,...
06-23-2014
yes leased line directed connected but ADSL connection routed mode.yes i
have public ip pool for lea...
06-23-2014
Hi Rahul its existing setup ,but i will purchase a new 5512 firewall
with IPS .they have 2 isp's...L...
06-23-2014
Hi Karthi Are you sure ?? becaz customer needed LAN internet packets
going to ADSL .Servers and othe...
06-22-2014
Dear all I have 2 internet line (Leased line and ADSL line ).Now my
requirement is In ASA 5512 in th...
03-18-2013
I want to Single SSID in my network .I have 3 cisco 4410 WAP. ISP router
Have the Wireless .How to g...
Created by
Sheik Mohamed
in Firewalls
03-10-2013
03-10-2013
Dont be confuse...1.i want to access to exchange Server from outside
means https://my public ip /owa...
02-12-2013
In below these ACL lists which is one i want to add for security purpose
..pls mention required ACL ...
02-12-2013
at moment no connection between in to AD/DHCP?DNS server.i directly
connected to ASA etherent0/1 in ...
Public Statistics
| Date Registered | 10-02-2012 10:18 PM |
| Date Last Visited | 10-26-2017 01:41 AM |
| Total Messages Posted | 22 |
