I've configured a range SG300 to be used in a building for users to get internet access via theire own FW. It's using QoS and some traffic shaping. Every now and then i need to change some settings on it, and it's kinda stupid if i have to get out to the location every time i need to change something. To solve that i configured the Managment Access bit where only my office subnet has access to it. Ofcourse that solves some of my concernes aobut access from rest of the world, but i would very much like to have access to it from the location also, and from my homeoffice. How can i solve this ??  not sure how i would configure ace/acl to solve it without fu..g up access completly. Thnsk for any help Thomas                   ... View more

We got 1 customer that would like us to configure a system based on SG300-20 linked up with an SG300-10SFP using trafficshaping ingress and egress limited to 40mbit. This part of the case is solved using ingress/egress 40960 with an burtlimit a bith higher. But he also wants each firewall configured on the net to only be able to have 1 ip on that spesific port. this is an owner of a building that rents out to other companies. Each comapny is assinged a port on the SG300-20 and has theire own ip  (ie 100.100.12.34)  all of them are part of a /26 net and would use the same Gateway. Is this possible ?  that the company assigned to ie port 14 in switch 1 only can use 100.100.12.34/26 gw 100.100.12.1 and if they change to 100.100.12.36 it will not work.  This to prevent the endusers from changing and fu...g up the net for the rest :-) and on port 16 on switch 1 they can only use 100.100.12.36/26 with gw 100.100.12.1 thnsk for any input switches are in layer2 mode , but nothing is in production yet so i can change ot layer3 if thats what it takes. regard Thomas                  ... View more

I've used cisco for some time now, and are realy happe with it, but there is one thing i need to get a hang of.. Traffic from one vlan going out to internet, and traffic comming back... All i see is traffic comming from 1 ip out on internett going to my external ip on any given port. Is there a way i can wee what inside ip address it's going against and what inside ip it's comming from ?? We have a asa5510 with aprox 8 vlan's on the inside and it would be nice to see what user is causing the internet traffic and why there are so many hit's on the firewall  :-) Thnks for any help Thomas pst not to good on command, mainly used gui :-)                   ... View more

We run a Cisco ASA 5510 and i need to find out how i can find the receving end on the inside of a vlan for traffic comming from outside. ie incomming traffic on port 3937 and are NAT to eth 0/1.10 Thers a bunch of traffic on one port 33771 udp going in on 90.191.72.227 how do i trace this to the inside computer ??? lets say incomming traffic is on 90.191.72.227 and this is on eth0/0 this ip is NAT to a Vlan on the side for 10.10.0.0 with a subnet of 255.255.255.0 Do i need more info ??? ... View more