3 interfaces and routing PIX

Similar Questions

• How to distinguish the physical interface and logic (subinterface) interface to the Cisco router/Switch?

  Hi Expert,

  How to distinguish the physical interface and logic (subinterface) interface to the Cisco router/Switch? Can you please clarify a formal way for this so have?

  A physical interface is numbered with the same name of the interface when printing on the physical port. For example "GigabitEthernet 0/1" corresponds to port 1 of the 0 module (or the base unit).

  A logical interface can be a subinterface on a routed port and will have a point ("". "") preceding the number sous-interface (ex. GigabitEthernet 0/1.1). It can also be a loop or a virtual interface (on a router this could also include interfaces like the tunnel and virtual tunnel or VTI types). A switch may also have a VLAN logical interfaces (e.g. interface vlan 1) which are used as layer 3 virtual interfaces of type.

• Site to Site between ASA VPN connection and router 2800

  I'm trying to get a L2L VPN working between a ASA code 8.4 and a 2800 on 12.4.

  I first saw the following errors in the debug logs on the side of the ASA:

  Error message % PIX | ASA-6-713219: KEY-GAIN message queues to deal with when
  ITS P1 is complete.

  I see the following on the end of 2800:

  ISAKMP: (0): treatment charge useful vendor id
  ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 157
  ISAKMP: (0): provider ID is NAT - T v3
  ISAKMP: (0): treatment charge useful vendor id
  ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 69
  ISAKMP (0): provider ID is NAT - T RFC 3947
  ISAKMP: (0): treatment charge useful vendor id
  ISAKMP: (0): treatment of frag vendor id IKE payload
  ISAKMP: (0): IKE Fragmentation support not enabled
  ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
  ISAKMP: (0): former State = new State IKE_R_MM1 = IKE_R_MM1

  ISAKMP: (0): built NAT - T of the seller-rfc3947 ID
  ISAKMP: (0): send package to x.x.x.x my_port 500 peer_po0 (R) MM_SA_SETUP
  ISAKMP: (0): sending a packet IPv4 IKE.
  ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
  ISAKMP: (0): former State = new State IKE_R_MM1 = IKE_R_MM2

  ISAKMP (0): packet received from x.x.x.x dport 500 sports global (R)

  MM_SA_SETUP
  ISAKMP: (0): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH
  ISAKMP: (0): former State = new State IKE_R_MM2 = IKE_R_MM3

  ISAKMP: (0): processing KE payload. Message ID = 0
  ISAKMP: (0): processing NONCE payload. Message ID = 0
  ISAKMP: (0): found peer pre-shared key x.x.x.x corresponding
  ISAKMP: (2345): treatment charge useful vendor id
  ISAKMP: (2345): provider ID is the unit
  ISAKMP: (2345): treatment charge useful vendor id
  ISAKMP: (2345): provider ID seems the unit/DPD but major incompatibility of 54
  ISAKMP: (2345): provider ID is XAUTH
  ISAKMP: (2345): treatment charge useful vendor id
  ISAKMP: (2345): addressing another box of IOS!
  ISAKMP: (2345): treatment charge useful vendor id
  ISAKMP: (2345): vendor ID seems the unit/DPD but hash mismatch
  ISAKMP: receives the payload type 20
  ISAKMP (2345): sound not hash no match - this node outside NAT
  ISAKMP: receives the payload type 20
  ISAKMP (2345): no NAT found for oneself or peer
  ISAKMP: (2345): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
  ISAKMP: (2345): former State = new State IKE_R_MM3 = IKE_R_MM3

  ISAKMP: (2345): sending package x.x.x.x my_port Exchange 500 500 (R)

  MM_KEY_EXCH

  ----------

  This is part of the configuration of the ASA:

  network of the ABCD object
  10.20.30.0 subnet 255.255.255.0
   
  network of the ABCD-Net object
  172.16.10.0 subnet 255.255.255.0
   
  cry-map-77-ip object-group XXXX object abc-site_Network allowed extended access list
   
  access list abc-site extended permitted ip object-group XXXX object abc-site_Network
   
  ip access list of abc-site allowed extended object abc-site_Network object-group XXXX-60
   
  NAT (any, any) static source 20 XXXX XXXX-20 destination static abc-site_Network abc-site_Network
   
  NAT (any, any) static source 20 XXXX XXXX-20 destination static abc-site_Network abc-site_Network
   
  XXXX-20
   
  object-group network XXXX-20
  ABCD-Net network object
  object-abcd-Int-Net Group
   
  XXXX_127
   
  object-group network XXXX-20
  ABCD-Net network object
  object-abcd-Int-Net Group
   
  ip access list of abc-site allowed extended object abc-site_Network object-group XXXX-60
   
   
  Crypto card off-map-44 11 match address cry-map-77
  card crypto out-map-44 11 counterpart set 62.73.52.xxx
  card crypto out-map-44 11 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

  cry-map-77-ip object-group XXXX object abc-site_Network allowed extended access list

  Crypto card off-map-44 11 match address cry-map-77
  card crypto out-map-44 11 counterpart set 62.73.52.xxx
  card crypto out-map-44 11 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

  card crypto out-map-44 11 set transform-set ESP-3DES-SHA ikev1

  object-group network XXXX
  ABCD-Net network object
  object-abcd-Int-Net Group

  ------------------------

  Here is a part of the 2800:

  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  ISAKMP crypto key r2374923 address 72.15.21.xxx
  !
  !
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  !
  card crypto cry-map-1 1 ipsec-isakmp
  the value of 72.15.21.xxx peer
  game of transformation-ESP-3DES-SHA
  match address VPN
  !
  type of class-card inspect match class-map-vpn
  game group-access 100
  type of class-card inspect cm-inspect-1 correspondence
  group-access name inside-out game
  type of class-card inspect correspondence cm-inspect-2
  match the name of group-access outside
  !
  !
  type of policy-card inspect policy-map-inspect
  class type inspect cm-inspect-1
  inspect
  class class by default
  drop
   
  type of policy-card inspect policy-map-inspect-2
  class type inspect class-map-vpn
  inspect
  class type inspect cm-inspect-2
  class class by default
  drop
  !

  !
  interface FastEthernet0
  IP address 74.25.89.xxx 255.255.255.252
  NAT outside IP
  IP virtual-reassembly
  security of the outside Member area
  automatic duplex
  automatic speed
  crypto cry-card-1 card
  !
  interface FastEthernet1
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  IP nat inside source overload map route route-map-1 interface FastEthernet0
  !
  IP access-list extended inside-out
  IP 172.16.10.0 allow 0.0.0.255 any
  IP nat - acl extended access list
  deny ip 192.168.0.0 0.0.255.255 172.16.10.0 0.0.0.255
  deny ip 10.200.0.0 0.0.255.255 172.16.10.0 0.0.0.255
  deny ip 192.168.0.0 0.0.255.255 172.16.10.0 0.0.0.255
  deny ip 0.0.255.255 28.20.14.xxx.0.0 172.16.10.0 0.0.0.255
  refuse the 10.10.10.0 ip 0.0.0.255 172.16.10.0 0.0.0.255
  refuse the 172.16.10.0 ip 0.0.0.255 192.168.0.0 0.0.255.255
  refuse the 172.16.10.0 ip 0.0.0.255 10.200.0.0 0.0.255.255
  refuse the 172.16.10.0 ip 0.0.0.255 192.168.0.0 0.0.255.255
  refuse the 172.16.10.0 ip 0.0.0.255 28.20.14.xxx.0.0 0.0.255.255
  refuse the 172.16.10.0 ip 0.0.0.255 10.10.10.0 0.0.0.255
  allow an ip
  outside extended IP access list
  allow an ip
  list of IP - VPN access scope
  IP 172.16.10.0 allow 0.0.0.255 192.168.0.0 0.0.255.255
  IP 172.16.10.0 allow 0.0.0.255 10.200.0.0 0.0.255.255
  IP 172.16.10.0 allow 0.0.0.255 192.168.0.0 0.0.255.255
  IP 172.16.10.0 allow 0.0.0.255 28.20.14.xxx.0.0 0.0.255.255
  IP 172.16.10.0 allow 0.0.0.255 10.10.10.0 0.0.0.255
  IP 192.168.0.0 allow 0.0.255.255 172.16.10.0 0.0.0.255
  IP 10.200.0.0 allow 0.0.255.255 172.16.10.0 0.0.0.255
  IP 192.168.0.0 allow 0.0.255.255 172.16.10.0 0.0.0.255
  28.20.14.xxx.0.0 0.0.255.255 ip permit 172.16.10.0 0.0.0.255
  ip licensing 10.10.10.0 0.0.0.255 172.16.10.0 0.0.0.255

  access-list 23 allow 192.168.0.0 0.0.255.255
  access-list 23 allow 10.200.0.0 0.0.255.255
  access-list 23 allow 172.16.10.0 0.0.0.255
  access-list 123 note category class-map-LCA-4 = 0
  access-list 123 allow ip 192.168.0.0 0.0.255.255 172.16.10.0 0.0.0.255
  access-list 123 allow ip 10.200.0.0 0.0.255.255 172.16.10.0 0.0.0.255
  access-list 123 allow ip 192.168.0.0 0.0.255.255 172.16.10.0 0.0.0.255
  access-list 123 allow ip 0.0.255.255 28.20.14.xxx.0.0 172.16.10.0 0.0.0.255
  access-list 123 allow ip 10.10.10.0 0.0.0.255 172.16.10.0 0.0.0.255
  access-list 123 allow ip 172.16.10.0 0.0.0.255 192.168.0.0 0.0.255.255
  access-list 123 allow ip 172.16.10.0 0.0.0.255 10.200.0.0 0.0.255.255
  access-list 123 allow ip 172.16.10.0 0.0.0.255 192.168.0.0 0.0.255.255
  access-list 123 allow ip 172.16.10.0 0.0.0.255 28.20.14.xxx.0.0 0.0.255.255
  access-list 123 allow ip 172.16.10.0 0.0.0.255 10.10.10.0 0.0.0.255
  !
  !
  !

  !
  route-map-1 allowed route map 1
  match the IP nat - acl
  !

  Hello

  I quickly browsed your config and I could notice is

  your game of transformation (iskamp) on SAA and router are not the same, try to configure the same on both sides.

  in the statement of the ASA NAT you gave (any, any) try to give the name of the interface instead of a whole.

• Several Interfaces of VPN - Pix 6.3 (5)

  Hi all

  I'm trying to establish a secondary VPN interface off our PIX for reasons of split tunneling. Unfortunately, I can't upgrade to 7.0 + to provide the functionality of routing same interface.

  I want to keep our card crypto in place current production until the transition is complete. Is it possible to have a 'map outside_map interface outside crypto' and a 'card crypto interface ExternalVPN ExternalVPN' or will be the new command to destroy the existing?

  Thank you.

  -Dominique

  This version of Pix follows the same principle that any 7.x or 8.x or cisco devices, there can only be one card encryption interface, in your case, I think you are applying cryptographic cards various different interfaces so the substitution them shouldn't be your concerned, rather ensuring the flow and routing.

• A VPN client can go same interface on the Pix 515

  A user in a Pix VPN and get an address x.x.x.x via an ippool on the Pix. Once this is done, they will need access to information on the public network. Is it possible since they come out of the same interface?

  I can open ports and route subnets on our core routers, but that doesn't seem to work.

  Thank you

  Dwane

  Hi elodie

  You can do this by entering the following command

  permit same-security-traffic intra-interface

  Concerning

• site2site distance-VPN and access-PIX - no way?

  I have,

  I have a problem wrt site2site & VPN remote access on a PIX:

  My setup is as follows: PIX (6.3) puts an end to two a site2-site VPN and also should the remote access service clients using the client VPN Cisco (4.0.x).

  The problem is with remote access VPN clients, obtain an IP address on their VPN interface, but customers cannot reach anything. (Please note that the site2site VPN runs without problem)

  To be precise (see config-excerpts below):

  The customer, who has 212.138.109.20 as its IP address gets an IP 10.0.100.1 on his card-VPN which comes from the "vpnpool of the pool.

  configured on the PIX. This customer relationships to reach servers on interface 'inside' of the PIX as 10.0.1.28.

  However, the client cannot achieve * nothing *-a server on the inside or anything like that (e.g. Internet) outside!

  Using Ethereal traces, I discovered that the packets arrive inside interface coming 10.0.100.1 (IP address of the)

  VPN - client). I also see the response from the server (10.0.1.28) to 10.0.100.1. However for some reason any package does not thanks to

  the PIX to the customer. PIX-newspapers also show packets to and from the VPN client to the inside interface - and * no. * drops. So to my knowledge the packets from server to the VPN client really should be done through the PIX.

  I have attached the following as separate files:

  (o) the parts of the PIX config

  (o) packets showing PIX-log between the VPN client and the server (s) on the interface inside

  (o) ethereal-trace done inside the watch interface also packets between VPN client and server (s)

  I have really scratched my head for a while on this one, tested a lot of things, but I really don't know what could be a problem with my

  config.

  After all, it really should be possible to run site2site - and on the same PIX VPN remote access, shouldn't it?

  Thank you very much in advance for your help,.

  -ewald

  I think that your problem is in your ACL and your crypto card:

  access-list 101 permit ip 10.0.1.0 255.255.255.0 10.0.2.0 255.255.255.0

  access-list 101 permit ip 10.0.0.0 255.255.255.0 10.0.2.0 255.255.255.0

  access-list 101 permit ip 10.0.3.0 255.255.255.0 10.0.2.0 255.255.255.0

  access-list 101 permit ip 10.0.1.0 255.255.255.0 10.0.100.0 255.255.255.0

  correspondence address 1 card crypto loc2rem 101

  This means that this map correspond to these addresses. But your dynamic map is one that must match 10.0.100.0, 10.0.1.0 traffic because your pool local ip is 10.0.100.x. I think what is happening is that the return traffic from the lan to vpn clients trying to get out of the static tunnel, which probably does not exist (for the netblocks - you probably have a security association for each pair of netblocks, but not for vpn clients) and so do not.

  I would recommend adding these lines:

  access-list 105 allow ip 10.0.1.0 255.255.255.0 10.0.2.0 255.255.255.0

  access-list 105 allow ip 10.0.0.0 255.255.255.0 10.0.2.0 255.255.255.0

  access-list 105 permit 10.0.3.0 ip 255.255.255.0 10.0.2.0 255.255.255.0

  no correspondence address 1 card crypto loc2rem 101

  correspondence address 1 card crypto loc2rem 105

  Then reapply:

  loc2rem interface card crypto outside

• Interface GUI language PIX

  Guys,

  Is the graphic interface of the PIX with a multilingual browser configuration? What languages are supported? In particular is a Japanese GUI available? And if cannot, therefore, a user/administrator choose which language he wants when connecting?

  See you soon,.

  Vito

  Hi Vito,

  I've never heard of PDM to be multilingual.

  Thank you

  Nadeem

• ASA 5510 - possible to fill the 2 interfaces in routed mode

  Cisco ASA 5510 with security more license, version 9.1 (5) running in routed mode.

  I want to fill two interfaces for example: eth0/2 and 3/eth0 and configure an IP address / network while leaving the ASA 5510 in routed mode. I know that this is possible in transparent mode, but I need to keep this in routed mode. I know I could configure a single interface and connect a switch but my client does not want to do.

  Otherwise, my only thought would be to configure each interface eth0/2 and eth0/3 as a network traffic and the route of subnet separate between the two.

  Any help would be appreciated!

  Thank you

  Andrew

  Andrew

  That would help us answer you better if we understood more about what your client and you want to accomplish. But to answer the specific question you asked, I don't think it is possible in an ASA5510 in routed mode configuration Eth2 and Eth3 to share a single IP address.

  Linking to Eth2 and linking to Eth3 Are they really the same subnet?

  HTH

  Rick

• LAN to lan vpn between ASA and router 7200

  Hi friends,

  I need to configure the lan to lan between ASA vpn (remote location) and router 7200 (on our network).

  <7200 router="" (ip="" add:="" 10.10.5.2)="">-(Internet) -<(IP add:="" 192.168.12.2)="" asa(5510)="">---192.135.5.0/24 network

  I will have the following configuration:

  7200 router:

  crypto ISAKMP policy 80

  the enc

  AUTH pre-shared

  Group 1

  life 3600

  ISAKMP crypto key cisco123 address 192.168.12.2

  Cryto ipsec transform-set esp - esp-md5-hmac VPNtrans

  map VPNTunnel 80 ipsec-isakmp crypto

  defined by peer 192.168.12.2

  game of transformation-VPNtrans

  match address 110

  int fa0/0

  IP add 10.10.5.2 255.255.255.192

  IP virtual-reassembly

  no ip route cache

  Speed 100

  full duplex

  card crypto VPNTunnel

  access-list 110 permit ip any 192.135.5.0 0.0.0.255

  ASA:

  int e0/0

  nameif inside

  security-level 100

  192.135.5.254 Add IP 255.255.255.0

  int e0/1

  nameif outside

  security-level 0

  IP add 192.168.12.2 255.255.255.240

  access-list ACL extended ip 192.135.5.0 allow 255.255.255.0 any

  Route outside 0.0.0.0 0.0.0.0.0 192.168.12.3 1

  "pre-shared key auth" ISAKMP policy 10

  ISAKMP policy 10-enc

  ISAKMP policy 10 md5 hash

  10 1 ISAKMP policy group

  ISAKMP duration strategy of life 10-3600

  Crypto ipsec transform-set esp - esp-md5-hmac VPNtran

  card crypto VPN 10 matches the ACL address

  card crypto VPN 10 set peer 10.10.5.2

  card crypto VPN 10 the transform-set VPNtran value

  tunnel-group 10.10.5.2 type ipsec-l2l

  IPSec-attributes of type tunnel-group 10.10.5.2

  cisco123 pre-shared key

  card crypto VPN outside interface

  ISAKMP allows outside

  dhcpd address 192.135.5.1 - 192.135.5.250 inside

  dhcpd dns 172.15.4.5 172.15.4.6

  dhcpd wins 172.15.76.5 172.15.74.5

  dhcpd lease 14400

  dhcpd ping_timeout 500

  dhcpd allow inside

  Please check the configuration, please correct me if I missed something. I'm in a critical situation at the moment...

  Please advise...

  Thank you very much...

  Where it fails at the present time?

  Can you share out of after trying to establish the VPN tunnel:

  See the isa scream his

  See the ipsec scream his

  Please also run the following debug to see where it is a failure:

  debugging cry isa

  debugging ipsec cry

• Redirect pat interface on a PIX PPTP

  Is it possible to redirect traffic PPTP from the external interface of a PIX, which has a unique IP address or are you really to have an any translated IP peripheral PPTP termination.

  Example, I have a PIX with a unique public IP I have to redirect ports 23 25 53 110 to an in-house 2 k server. I would be able to redirect traffic to this server pptp also or will I have problems with the gre and need a new ip address?

  Patrick Laidlaw

  GRE will cause you problems. PPTP uses GRE (Protocol IP 47) at the time and TCP 1723 port. You will be able to redirect TCP/1723, but not the GRE traffic.

  To do this, you will need a separate IP address.

• Issue of ASA NAT and routing

  Hello

  I have a question about NAT and routing on the SAA. I'm relatively new to ASA and don't know if it works or not. I have a pool of public IP (209.x.x.x/28) that routes my ISP to the external interface of my ASA. IP was assigned address for the outside of the ASA is an address of 206.x.x.2/24 with a default GW of 206.x.x.1. I intend using NAT to allow my web/mail servers on the DMZ (192.168.x.x) use 209.x.x.x addresses. However, I do know how to make it work since I'm not arping on any interface for 209.x.x.x addresses as they will be sent to the 206.x.x.2 address by the ISP. Can I just set up a translation NAT (on the external interface?) of the 209.x.x.x on 192.168.x.x address and the ASA will figure it out?

  Thanks for the help.

  Todd

  The ASa will figure it out, he will answer ARP queries for all that he has set up in a "static" command As long as th PSIA routes 209.x.x.x directly to the ASA addresses then it should all work fine.

  You just need to add lines like the following:

  static (dmz, external) 209.x.x.x netmask 255.255.255.255 192.168.x.x

  for each of your internal servers in the DMZ. Then an access-list to allow only HTTP/SMTP/etc through these addresses 209.x.x.x.

  list of allowed inbound tcp access any host 209.x.x.x eq smtp

  list of allowed inbound tcp access any host 209.y.y.y eq http

  Access-group interface incoming outside

• Ping inside the interface on a Pix 501 from outside the network

  All the

  I have a Pix 501 firewall at a remote site with an IPSEC tunnel established at HQ. We have an analysis tool which remote sites for us let proactively pings know when a site crashes. I want to set up this ping the inside interface of the Pix tool as I can with 871 routers; However I can't configure the Pix to allow ICMP inside interface. I know by default that the Pix does not allow ICMP to the opposite interface and I was wondering if someone could help me with a configuration that will allow this? I enclose my configuration of the pix!

  Thank you

  Brian

  Hello

  By raising the ordering tool, it seems that the 'management-access' command was introduced in version 6.3

  I recommend spending at 6.3 If you can.

  Federico.

• I recently dropped my laptop and it is weird, one day he int open up to 4 start times and sometimes it shows me a folder and a question mark in the interface and sometimes asked to reset my password, what are the steps to take?

  I recently dropped my laptop and it is weird, one day he int open up to 4 start times and sometimes it shows me a folder and a question mark in the interface and sometimes asked to reset my password, what are the steps to take?

  Anything can be corrupted on your MacBook Pro, but from what you say, it seems that the cable drive/SSD/flash memory/SATA hard was seriously damaged. Him "question mark" means that your Mac is unable to find any bootable device, meaning that it does not yet detect your OS X drive.

  You should make a backup of your files (if you can still do it) and take the Mac at the Apple Store or dealer to get a diagnosis. There may be several damaged parts.

• Space and some letters does not also teredo tunneling interface and pseduo miniport adapter.

  My.title.Summed.it.up.space.and.certain.Letters.won't.Work.also.Teredo.tunneling.pseduo.interface.and.miniport.adapter.

  Please.Help

  The keyboard screen (Start - All Programs - Accessories - accessibility - on screen keyboard, type osk in Start - Runor Windows key + U) allows you to type with only a mouse. The keys work here?

  You can try the section diagnostic keys shortcut and modifier Key Release to https://skydrive.live.com/redir?resid=E2F0CE17A268A4FA! 121 & authkey =! AAFg7j814-lJtmI.

  Each of the three towers of programs, services, and drivers in increasing amounts. So restrict the possible culprits.

  Clean boot

  Click Start - all programs - Accessories - run and type

   

  msconfig
  

   

  Then go to the Startup tab uncheck everything. Then go to the Services tab check hide all Microsoft Services and uncheck everything that is left.

   

  Reset. If this resolves your wake problem ½ of services / of startup items until you find that one.

  
  Tip clean boot

  If the above does not help.

  Download Autoruns http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

  Start the program by right-clicking and choosing run as administrator and click on the menu Options - Filter Options and check hide Microsoft entries and disable include the empty slots. Uncheck the box just to the left.

  Reset. If this resolves your wake problem half of the items until you find the one that.

  Safe mode

  If the above does not help.

  Click Start - all programs - Accessories - run and type

   

  msconfig
  

   

  Go to the Startup tab, and then click Start. Reset. Come back here and uncheck the box secure start to return to normal mode.

• Wireless connection unavailable on laptop, but shows all ok on pc and router

  I was at Midway through a conversation today on msn when my wireless connection (on my laptop) disappeared. I checked my pc and everything seems ok, here, my netgear router shows that everything is fine. When I click on 'Find a wireless network' his party! I can access the net very well by plugging it but as soon as I go wireless, I still lost.

  Tried to connect manually - says network with that name already there
  Tried to re start all
  All cables checked

  It's a laptop Toshiba L300
  Virgin cable broadband
  Router NETGEAR Wireless

  everything works fine as long as I'm using the cables.

  I only had my laptop and router wireless for a month.

  Please any other ideas what to do, I really need to be wireless for work as soon as possible

  Hello severina_falls,

  Thanks for posting on the Microsoft answers Community Forum.

  I have some suggestions for you to see if we can provide you with your wireless connection.

  (1) check that the WiFi switch is on on the front panel of your laptop. It is a quick check
  (2) Recycle the router wireless on and outside. Wait at least one minute, then turn it back on. Retest with your wireless network.
  (3) are getting you the error messages in the case where connects to deal with your wireless connection?
  To join the event logs: click on the Start button, right-click computer, click on manage.
  If you receive a notification of user account control , simply click on continue.
  Double-click Event Viewer. Study summary of the the event logs for errors dealing with wireless.
  (4) use System Restore to get your iIf wireless upward and running, you have a System Restore Point that was before starting the problem with your wireless network.
  Use the following KB to get the procedure on the system restore.
  936212 KB - how to repair the operating system and how to restore the configuration of the operating system to an earlier point in time in Windows Vista
  http://support.Microsoft.com/kb/936212

  If please post again and let us know if it helped to solve your problem or if you need further assistance.

  Sincerely, Marilyn
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think.