Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About jwood1650
08-18-2017
Stats
Member since
02-05-2012
89
Posts
0
Helpful
0
Solutions
07-25-2012
01:02 PM
So I went to clean up the EIGRP statements and when I took out the 192.168.2.0 and left the 192.168.0.0....I lost connectivity....why would this happen?
... View more
07-25-2012
12:58 PM
Now it works....switched my VLANs back to the VLAN200 where my main router is, changed the IP address to 192.168.2.3 and it worked....thanks for the help...
... View more
07-25-2012
12:49 PM
Can you explane this please? when you add a default-route on the 2509, then next-hop address should be an SVI interface's address on the switch for vlan200.
... View more
07-25-2012
12:35 PM
This is what I get when adding the default route Access_Server(config)#ip route 0.0.0.0 0.0.0.0 192.168.3.1 %Invalid next hop address (it's this router) Here is I have... Cisco3745 (192.168.2.1) - Main Router Cisco3550 Switch (192.168.2.2) Cisco2509 (192.168.3.1) Should the default route be 0.0.0.0 0.0.0.0 192.168.2.1
... View more
07-25-2012
12:12 PM
The AUI/Ethernet0 is connected to a switch with access to VLAN 200 where my primary router is connected. I changed the IP address of the Access Server (2509) to 192.168.3.1 255.255.255.0 so that it could have it's own subnet. EIGRP is enabled but not finding the other networks..... Access_Server#show line Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int * 0 CTY - - - - - 0 0 0/0 - 1 TTY 9600/9600 - - - - - 0 0 0/0 - 2 TTY 9600/9600 - - - - - 0 1 0/0 - 3 TTY 9600/9600 - - - - - 0 2 0/0 - 4 TTY 9600/9600 - - - - - 0 0 0/0 - 5 TTY 9600/9600 - - - - - 0 0 0/0 - 6 TTY 9600/9600 - - - - - 0 3 0/0 - 7 TTY 9600/9600 - - - - - 0 0 0/0 - 8 TTY 9600/9600 - - - - - 0 0 0/0 - 9 AUX 9600/9600 - - - - - 0 0 0/0 - 10 VTY - - - - - 0 0 0/0 - 11 VTY - - - - - 0 0 0/0 - 12 VTY - - - - - 0 0 0/0 - 13 VTY - - - - - 0 0 0/0 - 14 VTY - - - - - 0 0 0/0 -
... View more
07-25-2012
11:21 AM
I have the transceiver, and the lights are all on....input the coding above and still not able to ping my router (192.168.2.1)
... View more
07-25-2012
10:29 AM
I am trying to connect my Access Server to my main network via the AUI port and I am not able to ping any device... could help please? Current Config: Access_Server#show run Building configuration... Current configuration : 1113 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Access_Server ! boot-start-marker boot-end-marker ! enable secret 5 $1$gzBb$PW97BgUgMyZFdQPpmlpic. enable password kaylee999 ! no aaa new-model ip subnet-zero no ip domain lookup ip host BottomSwitch 2006 10.0.50.1 ip host Cisco2610 2005 10.0.50.1 ip host Cisco3640 2004 10.0.50.1 ip host Cisco3745 2003 10.0.50.1 ip host TopSwitch 2001 10.0.50.1 ip host PIX 2002 10.0.50.1 ! username woodjl1650 privilege 15 password 0 henry999 ! ! ! ! interface Loopback0 ip address 10.0.50.1 255.255.255.255 ! interface Ethernet0 ip address 192.168.2.3 255.255.255.0 ip directed-broadcast no mop enabled ! interface Serial0 no ip address no ip mroute-cache shutdown no fair-queue ! interface Serial1 no ip address shutdown ! router eigrp 1 network 192.168.0.0 auto-summary ! no ip http server ip classless ! ! line con 0 exec-timeout 0 0 logging synchronous line 1 8 no exec transport input all line aux 0 line vty 0 4 privilege level 15 password henry999 login local ! end
... View more
Labels:
05-25-2012
02:05 PM
I have to static IP address from my ISP. I am going to be hosting two web servers, one per IP address. How do I get the PIX to route each external IP to the correct web server? I currently have one setup and works just fine, but I am trying to figure out how to get the second one to work. Can I use port 80 for both or will I need to change that as well. Below is my current config: External IP Address xxx.xxx.118.208 ---> Currently hosting and working fine xxx.xxx.118.221 ---> Future Web Site Web Servers 192.168.2.22 ----> Working web server 192.168.2.24 ---> Furture web server PIX Version 8.0(4)32 ! hostname pixfirewall domain-name jkkcc.com enable password DQucN59Njn0OjpJL encrypted passwd DQucN59Njn0OjpJL encrypted no names ! interface Ethernet0 nameif outside security-level 0 ip address xxx.xxx.118.208 255.255.255.224 ! interface Ethernet1 nameif inside security-level 100 ip address 10.0.20.1 255.255.255.248 ! interface Ethernet2 shutdown nameif exchange security-level 100 ip address 10.0.30.1 255.255.255.248 ! ftp mode passive dns domain-lookup inside dns server-group DefaultDNS name-server 68.105.28.16 name-server 68.105.29.16 domain-name jkkcc.com access-list ouside-acl extended permit tcp any host xxx.xxx.118.208 eq smtp access-list ouside-acl extended permit tcp any host xxx.xxx.118.208 eq www access-list ouside-acl extended permit tcp any host xxx.xxx.118.208 eq https pager lines 24 mtu outside 1500 mtu inside 1500 mtu exchange 1500 icmp unreachable rate-limit 1 burst-size 1 icmp deny any outside asdm image flash:/asdm-602.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 static (inside,outside) tcp interface smtp 192.168.2.22 smtp netmask 255.255.255.255 static (inside,outside) tcp interface https 192.168.2.22 https netmask 255.255.255.255 static (inside,outside) tcp interface www 192.168.2.22 www netmask 255.255.255.255 access-group ouside-acl in interface outside ! router eigrp 1 network 10.0.0.0 255.0.0.0 network 192.168.0.0 255.255.255.0 network 192.168.2.0 255.255.255.0 network 192.168.4.0 255.255.255.0 ! route outside 0.0.0.0 0.0.0.0 24.234.118.193 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius http server enable http 0.0.0.0 0.0.0.0 inside http 10.0.20.0 255.255.255.248 inside http 192.168.0.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server community ***** snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 telnet 0.0.0.0 0.0.0.0 inside telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect http inspect ils ! service-policy global_policy global prompt hostname context Cryptochecksum:abd41b3df257873d44a6fc1545ae4418 : end
... View more
Labels:
05-21-2012
08:58 PM
pixfirewall# show ssl Accept connections using SSLv2, SSLv3 or TLSv1 and negotiate to SSLv3 or TLSv1 Start connections using SSLv3 and negotiate to SSLv3 or TLSv1 Enabled cipher order: des-sha1 Disabled ciphers: 3des-sha1 rc4-md5 rc4-sha1 aes128-sha1 aes256-sha1 null-sha1 No SSL trust-points configured Certificate authentication is not enabled pixfirewall# show flash Directory of flash:/ 5 -rw- 7649280 16:05:24 Feb 06 2012 pix804.bin 6 -rw- 6889764 14:12:28 May 19 2012 asdm-602.bin When I try to go to the PIX via web browser, I get: Secure Connection Failed An error occurred during a connection to 10.0.20.1. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)
... View more
05-21-2012
05:14 PM
I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can you review my config and make sure I have everything setup the way it is supposed to? PIX Version 8.0(4)32 ! hostname pixfirewall domain-name jkkcc.com enable password DQucN59Njn0OjpJL encrypted passwd DQucN59Njn0OjpJL encrypted no names ! interface Ethernet0 nameif outside security-level 0 ip address 24.234.xxx.xxx 255.255.255.224 ! interface Ethernet1 nameif inside security-level 100 ip address 10.0.20.1 255.255.255.248 ! interface Ethernet2 shutdown nameif exchange security-level 100 ip address 10.0.30.1 255.255.255.248 ! ftp mode passive dns domain-lookup inside dns server-group DefaultDNS name-server 68.105.28.16 name-server 68.105.29.16 domain-name jkkcc.com access-list ouside-acl extended permit tcp any host 24.234.xxx.xxx eq smtp access-list ouside-acl extended permit tcp any host 24.234.xxx.xxx eq www access-list ouside-acl extended permit tcp any host 24.234.xxx.xxxeq https pager lines 24 mtu outside 1500 mtu inside 1500 mtu exchange 1500 icmp unreachable rate-limit 1 burst-size 1 icmp deny any outside asdm image flash:/asdm-602.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 static (inside,outside) tcp interface smtp 192.168.2.22 smtp netmask 255.255.255.255 static (inside,outside) tcp interface https 192.168.2.22 https netmask 255.255.255.255 static (inside,outside) tcp interface www 192.168.2.22 www netmask 255.255.255.255 access-group ouside-acl in interface outside ! router eigrp 1 network 10.0.0.0 255.0.0.0 network 192.168.0.0 255.255.255.0 network 192.168.2.0 255.255.255.0 network 192.168.4.0 255.255.255.0 ! route outside 0.0.0.0 0.0.0.0 24.234.118.193 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius http server enable http 0.0.0.0 0.0.0.0 inside http 10.0.20.0 255.255.255.248 inside http 192.168.0.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server community ***** snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 telnet 0.0.0.0 0.0.0.0 inside telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect http inspect ils ! service-policy global_policy global prompt hostname context Cryptochecksum:abd41b3df257873d44a6fc1545ae4418 : end
... View more
Labels:
05-21-2012
05:14 PM
I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can you review my config and make sure I have everything setup the way it is supposed to? PIX Version 8.0(4)32 ! hostname pixfirewall domain-name jkkcc.com enable password DQucN59Njn0OjpJL encrypted passwd DQucN59Njn0OjpJL encrypted no names ! interface Ethernet0 nameif outside security-level 0 ip address 24.234.xxx.xxx 255.255.255.224 ! interface Ethernet1 nameif inside security-level 100 ip address 10.0.20.1 255.255.255.248 ! interface Ethernet2 shutdown nameif exchange security-level 100 ip address 10.0.30.1 255.255.255.248 ! ftp mode passive dns domain-lookup inside dns server-group DefaultDNS name-server 68.105.28.16 name-server 68.105.29.16 domain-name jkkcc.com access-list ouside-acl extended permit tcp any host 24.234.xxx.xxx eq smtp access-list ouside-acl extended permit tcp any host 24.234.xxx.xxx eq www access-list ouside-acl extended permit tcp any host 24.234.xxx.xxxeq https pager lines 24 mtu outside 1500 mtu inside 1500 mtu exchange 1500 icmp unreachable rate-limit 1 burst-size 1 icmp deny any outside asdm image flash:/asdm-602.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 static (inside,outside) tcp interface smtp 192.168.2.22 smtp netmask 255.255.255.255 static (inside,outside) tcp interface https 192.168.2.22 https netmask 255.255.255.255 static (inside,outside) tcp interface www 192.168.2.22 www netmask 255.255.255.255 access-group ouside-acl in interface outside ! router eigrp 1 network 10.0.0.0 255.0.0.0 network 192.168.0.0 255.255.255.0 network 192.168.2.0 255.255.255.0 network 192.168.4.0 255.255.255.0 ! route outside 0.0.0.0 0.0.0.0 24.234.118.193 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius http server enable http 0.0.0.0 0.0.0.0 inside http 10.0.20.0 255.255.255.248 inside http 192.168.0.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server community ***** snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 telnet 0.0.0.0 0.0.0.0 inside telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect http inspect ils ! service-policy global_policy global prompt hostname context Cryptochecksum:abd41b3df257873d44a6fc1545ae4418 : end
... View more
Labels:
05-15-2012
06:56 PM
thank you so so so so so so so so so much....three days of pulling my hair out and it works finally....
... View more
05-15-2012
06:49 PM
While trying to input the new confige i get this: ERROR: Static PAT using the interface requires the use of the 'interface' keyword instead of the interface IP address any ideas
... View more
05-15-2012
12:59 PM
Ok, it kinda works, but I can't rehecieve emails from outside the internet. Can you review the config and verify the problem is not with the Pix? Do I need to configure a route on the 3745 router too? ISP IP Address: 24.234.xxx.xxx PIX IP: 10.0.20.1 (inside) 3745 Router: 10.0.20.3 F0/0 192.168.2.1 F0/1 Show Run: pixfirewall# show run : Saved : PIX Version 8.0(4)32 ! hostname pixfirewall domain-name jkkcc.com enable password DQucN59Njn0OjpJL encrypted passwd DQucN59Njn0OjpJL encrypted names ! interface Ethernet0 nameif outside security-level 0 ip address 24.234.xxx.xxx 255.255.255.224 ! interface Ethernet1 nameif inside security-level 100 ip address 10.0.20.1 255.255.255.248 ! interface Ethernet2 shutdown nameif exchange security-level 100 ip address 10.0.30.1 255.255.255.248 ! ftp mode passive dns domain-lookup inside dns server-group DefaultDNS name-server 68.105.28.16 name-server 68.105.29.16 domain-name home.jkkcc.com access-list inbound extended permit tcp any host 24.234.xxx.xxx eq smtp access-list inbound extended permit tcp any host 24.234.xxx.xxx eq www access-list inbound extended permit tcp any host 24.234.xxx.xxx eq 587 pager lines 24 mtu outside 1500 mtu inside 1500 mtu exchange 1500 icmp unreachable rate-limit 1 burst-size 1 icmp deny any outside asdm image flash:/asdm-61551.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 static (outside,inside) tcp 24.234.xxx.xxx smtp 192.168.2.22 smtp netmask 255.255.255.255 static (inside,outside) tcp 192.168.2.22 smtp 24.234.xxx.xxx smtp netmask 255.255.255.255 ! router eigrp 1 network 10.0.0.0 255.0.0.0 network 192.168.0.0 255.255.255.0 network 192.168.2.0 255.255.255.0 network 192.168.4.0 255.255.255.0 ! route outside 0.0.0.0 0.0.0.0 24.234.118.193 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius http server enable http 0.0.0.0 0.0.0.0 inside no snmp-server location no snmp-server contact snmp-server community ***** snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 telnet 0.0.0.0 0.0.0.0 inside telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp inspect http inspect ils ! service-policy global_policy global prompt hostname context Cryptochecksum:db493c9a2975a6a622644c000983b0db : end pixfirewall# Show Route pixfirewall# show route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is 24.234.xxx.xxx to network 0.0.0.0 D 192.168.4.0 255.255.255.0 [90/2174976] via 10.0.20.3, 24:21:56, inside C 24.234.118.192 255.255.255.224 is directly connected, outside D 10.0.10.0 255.255.255.248 [90/2172416] via 10.0.20.3, 24:21:56, inside C 10.0.20.0 255.255.255.248 is directly connected, inside D 192.168.2.0 255.255.255.0 [90/30720] via 10.0.20.3, 24:21:56, inside S* 0.0.0.0 0.0.0.0 [1/0] via 24.234.118.193, outside
... View more
07-25-2012
So I went to clean up the EIGRP statements and when I took out the
192.168.2.0 and left the 192.168....
07-25-2012
Now it works....switched my VLANs back to the VLAN200 where my main
router is, changed the IP addres...
07-25-2012
Can you explane this please?when you add a default-route on the 2509,
then next-hop address should b...
07-25-2012
This is what I get when adding the default routeAccess_Server(config)#ip
route 0.0.0.0 0.0.0.0 192.1...
07-25-2012
The AUI/Ethernet0 is connected to a switch with access to VLAN 200 where
my primary router is connec...
07-25-2012
I have the transceiver, and the lights are all on....input the coding
above and still not able to pi...
07-25-2012
I am trying to connect my Access Server to my main network via the AUI
port and I am not able to pin...
05-25-2012
I have to static IP address from my ISP. I am going to be hosting two
web servers, one per IP addres...
05-21-2012
pixfirewall# show sslAccept connections using SSLv2, SSLv3 or TLSv1 and
negotiate to SSLv3 or TLSv1S...
05-21-2012
I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can
you review my config and make ...
05-21-2012
I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can
you review my config and make ...
05-15-2012
thank you so so so so so so so so so much....three days of pulling my
hair out and it works finally....
05-15-2012
While trying to input the new confige i get this:ERROR: Static PAT using
the interface requires the ...
Public Statistics
| Date Registered | 02-05-2012 09:53 AM |
| Date Last Visited | 08-18-2017 03:53 AM |
| Total Messages Posted | 89 |
