Addition of a VLSM subnet to an existing design

Hello!

I'm studying for my CCENT exam and practical this question in the book warning stumble me.  I'm starting to think that it's a typo.

The problem relates to the addition of a subnet to an existing model.  The current design already has these five subnets:

10.0.0.0/24

10.0.1.0/25

10.0.2.0/26

10.0.3.0/27

10.0.6.0/28

The boss can't decide among five competitors subnet masks to be used for this new next subnet to add to the internetwork.  However, the boss wants you to practice VLSM and plan ID subnet he would use for each of these four possible masks.  It tells you that the new subnet ID should be part of the 10.0.0.0 network, class A, which the new subnet should not overlap with the original five subnets, and the new subnet ID must be the ID of possible subnet numerically lowest (without breaking other rules).  Choose a subnet ID that you can plan to use based on the following mask.

/ 22

The answer guide says it's 10.0.8.0/22 as the new numerically lower number of subnet that does not overlap with the existing subnets.  However; It's confusing to me because it seems that the correct answer must be 10.0.4.0/22, because it does not overlap with any of the existing subnets and is a subnet of lower than 10.0.8.0/22.

Let me know if you need more information on this.  Thanks to you all!

10.0.4.0/22 includes:

  • 10.0.4.0/24
  • 10.0.5.0/24
  • 10.0.6.0/24
  • 10.0.7.0/24

Who rides with 10.0.6.0/28.

Tags: Cisco Support

Similar Questions

  • WISN additional subnet to an existing SSID

    Is it possible on WISN having additional subnet to an existing SSID, I'm asking this for a co-worker.

    David,

    Thanks for your kind words on the blog. IM glad I can help... If you wouldn't mind you can mark your thread as corn? It will help others when searching...

    Thank you!

  • How can I change a component in an existing design?

    I have an existing design created in Ultiboard/Multisim V11.0. I want to change a single component to replace a transistor in a to a part in a MICHELE D2PAK.

    I edited the component in my library users use the footprint of MICHELE.

    I transferred (transfer to Ultiboard 11.0) revised to Ultiboard design. All components and traces were torn off by the Board and the Board outline has been removed. All that remains is a rectangle of Board outline with lots of items scattered around it.

    This happens if transfer of Multisim to Ultiboard, or if I open the file Ultiboard ewnet.

    The documentation/help says nothing about the modification of existing designs.

    How to make changes to the existing commissions without having to start from scratch?

    PRH

    Do not transfer to Ultiboard - this creates essentially a new design - what you want to do, is looking forward to annotate only (which will update the design).

    Optionally, you can transfer the Netlist UB only and reimport of Ultiboard.

    Kind regards
    N Pat

  • Addition of color chart/symbols to pre existing libraries

    It's maybe a stupid question, but here goes... How is it, I can't add new symbols or swatches to user created directly libraries?

    The only way that I found to add a shade or a symbol in a library I created is to click on each one to add to the palette swatches or symbols regular then re register. Shouldn't there be some sort option drag-and - drop or at least an option to add news from the pull down?

    Thank you!

    You must open the file that contains the library to the swatches folder and add it directly there and re-record and I think you will then need to recharge.

    Butt, he will answer your question, is that it is in fact a double file so there is no way to access it directly.

  • Addition of wireless routers in series with the existing network

    I have a client who wants to add at least 3 Wireless throughout their existing network routers. The problem is that these routers must be in the same subnet as the existing network. Oh, we use routers Linksys WRT610N. By default, routers set up a new subnet with a DHCP assigned IP of the primary subnet. I was able to change the static WAN IP, but I do not know how to configure the rest. The point of this is that if a user connected via the ethernet cable or wireless signal, they should be able to access the same network resources. I chatted with support, but they are not allowed to help what it isn't is not a "standard" configuration Anyone can shed some light on this subject? I've done this before with another customer, but its been a few years and it's a different router.

    Thank you!

    You don't want a router. You want a wireless access point. You have wireless routers that you do not use as routers, but only as access points. A router by definition routes traffic between several subnets connected to the various interfaces (LAN and WAN). This kind of configuration is not what the WRT is built for and that's why support said you that it is not a standard configuration for a WRT.

    You can use a WRT as simple access point.

    Reconfigure the router via its web interface. Connect a computer to the router first.

    1. set the LAN IP address on a free IP address in the existing network.
    2. make sure NOT to set a static IP address on the type of internet connection.
    3. on the main configuration page turn off the DHCP server.
    4. now save the settings. You will lose the connection.
    5. unplug the computer and one of the numbered LAN ports of wire to your existing network.

    Now you can access the web interface of the WRT to the new LAN IP address. All wired to the other 3 LAN ports and everything wirelessly connected has access to the network directly.

  • Cisco ASA 5505 site for multiple subnet of the site.

    Hello. I need help to configure my cisco asa 5505.

    I set up a VPN between two ASA 5505 tunnel

    Site 1:

    Subnet 192.168.77.0

    Site 2:

    Have multiple VLANs and now the tunnel goes to vlan400 - 192.168.1.0

    What I need help:

    Site 1, I need to be able to reach a different virtual LAN on site 2. vlan480 - 192.168.20.0

    And 1 site I have to reach 192.168.77.0 subnet of vlan480 - 192.168.20.0

    Vlan480 is used for phones. In vlan480, we have a PABX.

    Is this possible to do?

    Any help would be much appreciated!

    Config site 2:

    : Saved

    :

    ASA Version 7.2 (2)

    !

    ciscoasa hostname

    domain default.domain.invalid

    activate the password encrypted x

    names of

    name 192.168.1.250 DomeneServer

    name of 192.168.1.10 NotesServer

    name 192.168.1.90 Steadyily

    name 192.168.1.97 TerminalServer

    name 192.168.1.98 eyeshare w8

    name 192.168.50.10 w8-print

    name 192.168.1.94 w8 - app

    name 192.168.1.89 FonnaFlyMedia

    !

    interface Vlan1

    nameif Vlan1

    security-level 100

    IP 192.168.200.100 255.255.255.0

    OSPF cost 10

    !

    interface Vlan2

    nameif outside

    security-level 0

    IP address 79.x.x.226 255.255.255.224

    OSPF cost 10

    !

    interface Vlan400

    nameif vlan400

    security-level 100

    IP 192.168.1.1 255.255.255.0

    OSPF cost 10

    !

    interface Vlan450

    nameif Vlan450

    security-level 100

    IP 192.168.210.1 255.255.255.0

    OSPF cost 10

    !

    interface Vlan460

    nameif Vlan460-SuldalHotell

    security-level 100

    IP 192.168.2.1 255.255.255.0

    OSPF cost 10

    !

    interface Vlan461

    nameif Vlan461-SuldalHotellGjest

    security-level 100

    address 192.168.3.1 IP 255.255.255.0

    OSPF cost 10

    !

    interface Vlan462

    Vlan462-Suldalsposten nameif

    security-level 100

    192.168.4.1 IP address 255.255.255.0

    OSPF cost 10

    !

    interface Vlan470

    nameif vlan470-Kyrkjekontoret

    security-level 100

    IP 192.168.202.1 255.255.255.0

    OSPF cost 10

    !

    interface Vlan480

    nameif vlan480 Telefoni

    security-level 100

    address 192.168.20.1 255.255.255.0

    OSPF cost 10

    !

    interface Vlan490

    nameif Vlan490-QNapBackup

    security-level 100

    IP 192.168.10.1 255.255.255.0

    OSPF cost 10

    !

    interface Vlan500

    nameif Vlan500-HellandBadlands

    security-level 100

    192.168.30.1 IP address 255.255.255.0

    OSPF cost 10

    !

    interface Vlan510

    Vlan510-IsTak nameif

    security-level 100

    192.168.40.1 IP address 255.255.255.0

    OSPF cost 10

    !

    interface Vlan600

    nameif Vlan600-SafeQ

    security-level 100

    192.168.50.1 IP address 255.255.255.0

    OSPF cost 10

    !

    interface Ethernet0/0

    switchport access vlan 2

    !

    interface Ethernet0/1

    !

    interface Ethernet0/2

    switchport access vlan 500

    switchport trunk allowed vlan 400,450,460-462,470,480,500,510,600,610

    switchport mode trunk

    !

    interface Ethernet0/3

    switchport access vlan 490

    !

    interface Ethernet0/4

    !

    interface Ethernet0/5

    !

    interface Ethernet0/6

    !

    interface Ethernet0/7

    !

    passwd encrypted x

    passive FTP mode

    clock timezone WAT 1

    DNS server-group DefaultDNS

    domain default.domain.invalid

    permit same-security-traffic inter-interface

    permit same-security-traffic intra-interface

    Lotus_Notes_Utgaaande tcp service object-group

    UT og Frim Notes Description til alle

    area of port-object eq

    port-object eq ftp

    port-object eq www

    EQ object of the https port

    port-object eq lotusnotes

    EQ Port pop3 object

    EQ pptp Port object

    EQ smtp port object

    Lotus_Notes_inn tcp service object-group

    Description of the inn og alle til Notes

    port-object eq www

    port-object eq lotusnotes

    EQ Port pop3 object

    EQ smtp port object

    object-group service Reisebyraa tcp - udp

    3702 3702 object-port Beach

    5500 5500 object-port Beach

    range of object-port 9876 9876

    object-group service Remote_Desktop tcp - udp

    Description Tilgang til Remote Desktop

    3389 3389 port-object range

    object-group service Sand_Servicenter_50000 tcp - udp

    Description program tilgang til sand service AS

    object-port range 50000 50000

    VNC_Remote_Admin tcp service object-group

    Description Fra ¥ oss til alle

    5900 5900 port-object range

    object-group service Printer_Accept tcp - udp

    9100 9100 port-object range

    port-object eq echo

    ICMP-type of object-group Echo_Ping

    echo ICMP-object

    response to echo ICMP-object

    object-group service Print tcp

    9100 9100 port-object range

    FTP_NADA tcp service object-group

    Suldalsposten NADA tilgang description

    port-object eq ftp

    port-object eq ftp - data

    Telefonsentral tcp service object-group

    Hoftun description

    port-object eq ftp

    port-object eq ftp - data

    port-object eq www

    EQ object of the https port

    port-object eq telnet

    Printer_inn_800 tcp service object-group

    Fra 800 thought-out og inn til 400 port 7777 description

    range of object-port 7777 7777

    Suldalsposten tcp service object-group

    Description send av mail hav Mac Mail at - Ã ¥ nrep smtp

    EQ Port pop3 object

    EQ smtp port object

    http2 tcp service object-group

    Beach of port-object 81 81

    object-group service DMZ_FTP_PASSIVE tcp - udp

    55536 56559 object-port Beach

    object-group service DMZ_FTP tcp - udp

    20 21 object-port Beach

    object-group service DMZ_HTTPS tcp - udp

    Beach of port-object 443 443

    object-group service DMZ_HTTP tcp - udp

    8080 8080 port-object range

    DNS_Query tcp service object-group

    of domain object from the beach

    object-group service DUETT_SQL_PORT tcp - udp

    Description for a mellom andre og duett Server nett

    54659 54659 object-port Beach

    outside_access_in of access allowed any ip an extended list

    outside_access_out of access allowed any ip an extended list

    vlan400_access_in list extended access deny ip any host 149.20.56.34

    vlan400_access_in list extended access deny ip any host 149.20.56.32

    vlan400_access_in of access allowed any ip an extended list

    Vlan450_access_in list extended access deny ip any host 149.20.56.34

    Vlan450_access_in list extended access deny ip any host 149.20.56.32

    Vlan450_access_in of access allowed any ip an extended list

    Vlan460_access_in list extended access deny ip any host 149.20.56.34

    Vlan460_access_in list extended access deny ip any host 149.20.56.32

    Vlan460_access_in of access allowed any ip an extended list

    vlan400_access_out list extended access permit icmp any any Echo_Ping object-group

    vlan400_access_out list extended access permit tcp any host NotesServer object-group Lotus_Notes_Utgaaande

    vlan400_access_out list extended access permit tcp any host DomeneServer object-group Remote_Desktop

    vlan400_access_out list extended access permit tcp any host TerminalServer object-group Remote_Desktop

    vlan400_access_out list extended access permit tcp any host http2 object-group Steadyily

    vlan400_access_out list extended access permit tcp any host NotesServer object-group Lotus_Notes_inn

    vlan400_access_out list extended access permit tcp any host NotesServer object-group Remote_Desktop

    vlan400_access_out allowed extended access list tcp any host w8-eyeshare object-group Remote_Desktop

    vlan400_access_out allowed extended access list tcp any host w8 - app object-group Remote_Desktop

    vlan400_access_out list extended access permit tcp any host FonnaFlyMedia range 8400-8600

    vlan400_access_out list extended access permit udp any host FonnaFlyMedia 9000 9001 range

    vlan400_access_out list extended access permitted tcp 192.168.4.0 255.255.255.0 host DomeneServer

    vlan400_access_out list extended access permitted tcp 192.168.4.0 255.255.255.0 host w8 - app object-group DUETT_SQL_PORT

    Vlan500_access_in list extended access deny ip any host 149.20.56.34

    Vlan500_access_in list extended access deny ip any host 149.20.56.32

    Vlan500_access_in of access allowed any ip an extended list

    vlan470_access_in list extended access deny ip any host 149.20.56.34

    vlan470_access_in list extended access deny ip any host 149.20.56.32

    vlan470_access_in of access allowed any ip an extended list

    Vlan490_access_in list extended access deny ip any host 149.20.56.34

    Vlan490_access_in list extended access deny ip any host 149.20.56.32

    Vlan490_access_in of access allowed any ip an extended list

    Vlan450_access_out list extended access permit icmp any any Echo_Ping object-group

    Vlan1_access_out of access allowed any ip an extended list

    Vlan1_access_out list extended access permit tcp any host w8-print object-group Remote_Desktop

    Vlan1_access_out deny ip extended access list a whole

    Vlan1_access_out list extended access permit icmp any any echo response

    Vlan460_access_out list extended access permit icmp any any Echo_Ping object-group

    Vlan490_access_out list extended access permit icmp any any Echo_Ping object-group

    Vlan490_access_out list extended access permit tcp any host 192.168.10.10 object-group DMZ_FTP

    Vlan490_access_out list extended access permit tcp any host 192.168.10.10 object-group DMZ_FTP_PASSIVE

    Vlan490_access_out list extended access permit tcp any host 192.168.10.10 object-group DMZ_HTTPS

    Vlan490_access_out list extended access permit tcp any host 192.168.10.10 object-group DMZ_HTTP

    Vlan500_access_out list extended access permit icmp any any Echo_Ping object-group

    vlan470_access_out list extended access permit icmp any any Echo_Ping object-group

    vlan470_access_out list extended access permit tcp any host 192.168.202.10 - group Remote_Desktop object

    Vlan510_access_out list extended access permit icmp any any Echo_Ping object-group

    vlan480_access_out of access allowed any ip an extended list

    Vlan510_access_in of access allowed any ip an extended list

    Vlan600_access_in of access allowed any ip an extended list

    Vlan600_access_out list extended access permit icmp any one

    Vlan600_access_out list extended access permit tcp any host w8-print object-group Remote_Desktop

    Vlan600_access_out list extended access permitted tcp 192.168.1.0 255.255.255.0 host w8-printing eq www

    Vlan600_access_out list extended access permitted tcp 192.168.202.0 255.255.255.0 host w8-printing eq www

    Vlan600_access_out list extended access permitted tcp 192.168.210.0 255.255.255.0 host w8-printing eq www

    Vlan600_access_in_1 of access allowed any ip an extended list

    Vlan461_access_in of access allowed any ip an extended list

    Vlan461_access_out list extended access permit icmp any any Echo_Ping object-group

    vlan400_nat0_outbound to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.77.0 255.255.255.0

    outside_20_cryptomap_1 to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.77.0 255.255.255.0

    outside_20_cryptomap to access ip 192.168.1.0 scope list allow 255.255.255.0 192.168.77.0 255.255.255.0

    access-list Vlan462-Suldalsposten_access_in extended ip allowed any one

    access-list Vlan462-Suldalsposten_access_out extended permit icmp any any echo response

    access-list Vlan462-Suldalsposten_access_out_1 extended permit icmp any any echo response

    access-list Vlan462-Suldalsposten_access_in_1 extended ip allowed any one

    pager lines 24

    Enable logging

    asdm of logging of information

    MTU 1500 Vlan1

    Outside 1500 MTU

    vlan400 MTU 1500

    MTU 1500 Vlan450

    MTU 1500 Vlan460-SuldalHotell

    MTU 1500 Vlan461-SuldalHotellGjest

    vlan470-Kyrkjekontoret MTU 1500

    MTU 1500 vlan480-Telefoni

    MTU 1500 Vlan490-QNapBackup

    MTU 1500 Vlan500-HellandBadlands

    MTU 1500 Vlan510-IsTak

    MTU 1500 Vlan600-SafeQ

    MTU 1500 Vlan462-Suldalsposten

    no failover

    Monitor-interface Vlan1

    interface of the monitor to the outside

    the interface of the monitor vlan400

    the interface of the monitor Vlan450

    the interface of the Vlan460-SuldalHotell monitor

    the interface of the Vlan461-SuldalHotellGjest monitor

    the interface of the vlan470-Kyrkjekontoret monitor

    Monitor-interface vlan480-Telefoni

    the interface of the Vlan490-QNapBackup monitor

    the interface of the Vlan500-HellandBadlands monitor

    Monitor-interface Vlan510-IsTak

    Monitor-interface Vlan600-SafeQ

    the interface of the monitor Vlan462-Suldalsposten

    ICMP unreachable rate-limit 1 burst-size 1

    ASDM image disk0: / asdm - 522.bin

    don't allow no asdm history

    ARP timeout 14400

    Global 1 interface (outside)

    vlan400_nat0_outbound (vlan400) NAT 0 access list

    NAT (vlan400) 1 0.0.0.0 0.0.0.0 dns

    NAT (Vlan450) 1 0.0.0.0 0.0.0.0 dns

    NAT (Vlan460-SuldalHotell) 1 0.0.0.0 0.0.0.0

    NAT (Vlan461-SuldalHotellGjest) 1 0.0.0.0 0.0.0.0

    NAT (vlan470-Kyrkjekontoret) 1 0.0.0.0 0.0.0.0

    NAT (Vlan490-QNapBackup) 1 0.0.0.0 0.0.0.0 dns

    NAT (Vlan500-HellandBadlands) 1 0.0.0.0 0.0.0.0

    NAT (Vlan510-IsTak) 1 0.0.0.0 0.0.0.0

    NAT (Vlan600-SafeQ) 1 0.0.0.0 0.0.0.0

    NAT (Vlan462-Suldalsposten) 1 0.0.0.0 0.0.0.0

    static (vlan400, external) 79.x.x.x DomeneServer netmask 255.255.255.255

    static (vlan470-Kyrkjekontoret, external) 79.x.x.x 192.168.202.10 netmask 255.255.255.255

    static (vlan400, external) 79.x.x.x NotesServer netmask 255.255.255.255 dns

    static (vlan400, external) 79.x.x.231 netmask 255.255.255.255 TerminalServer

    static (vlan400, external) 79.x.x.234 Steadyily netmask 255.255.255.255

    static (vlan400, outside) w8-eyeshare netmask 255.255.255.255 79.x.x.232

    static (Vlan490-QNapBackup, external) 79.x.x.233 192.168.10.10 netmask 255.255.255.255 dns

    static (Vlan600-SafeQ, external) 79.x.x.235 w8 - print subnet mask 255.255.255.255

    static (vlan400, outside) w8 - app netmask 255.255.255.255 79.x.x.236

    static (Vlan450, vlan400) 192.168.210.0 192.168.210.0 netmask 255.255.255.0

    (Vlan500-HellandBadlands, vlan400) static 192.168.30.0 192.168.30.0 netmask 255.255.255.0

    (vlan400, Vlan500-HellandBadlands) static 192.168.1.0 192.168.1.0 netmask 255.255.255.0

    (vlan400, Vlan450) static 192.168.1.0 192.168.1.0 netmask 255.255.255.0

    static (vlan400, external) 79.x.x.252 FonnaFlyMedia netmask 255.255.255.255

    static (Vlan462-Suldalsposten, vlan400) 192.168.4.0 192.168.4.0 netmask 255.255.255.0

    static (vlan400, Vlan462-Suldalsposten) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

    static (vlan400, Vlan600-SafeQ) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

    static (Vlan600-SafeQ, vlan400) 192.168.50.0 192.168.50.0 netmask 255.255.255.0

    static (Vlan600-SafeQ, Vlan450) 192.168.50.0 192.168.50.0 netmask 255.255.255.0

    static (Vlan600-SafeQ, vlan470-Kyrkjekontoret) 192.168.50.0 192.168.50.0 netmask 255.255.255.0

    static (Vlan450, Vlan600-SafeQ) 192.168.210.0 192.168.210.0 netmask 255.255.255.0

    static (vlan470-Kyrkjekontoret, Vlan600-SafeQ) 192.168.202.0 192.168.202.0 netmask 255.255.255.0

    Access-group interface Vlan1 Vlan1_access_out

    Access-group outside_access_in in interface outside

    Access-group outside_access_out outside interface

    Access-group vlan400_access_in in the vlan400 interface

    vlan400_access_out group access to the interface vlan400

    Access-group Vlan450_access_in in the Vlan450 interface

    Access-group interface Vlan450 Vlan450_access_out

    Access-group interface Vlan460-SuldalHotell Vlan460_access_in

    Access-group interface Vlan460-SuldalHotell Vlan460_access_out

    Access-group interface Vlan461-SuldalHotellGjest Vlan461_access_in

    Access-group interface Vlan461-SuldalHotellGjest Vlan461_access_out

    Access-group vlan470_access_in in interface vlan470-Kyrkjekontoret

    vlan470_access_out access to the interface vlan470-Kyrkjekontoret group

    access to the interface vlan480-Telefoni, vlan480_access_out group

    Access-group interface Vlan490-QNapBackup Vlan490_access_in

    Access-group interface Vlan490-QNapBackup Vlan490_access_out

    Access-group interface Vlan500-HellandBadlands Vlan500_access_in

    Access-group interface Vlan500-HellandBadlands Vlan500_access_out

    Access-group interface Vlan510-IsTak Vlan510_access_in

    Access-group interface Vlan510-IsTak Vlan510_access_out

    Access-group Vlan600_access_in_1 interface Vlan600-SafeQ

    Access-group Vlan600_access_out interface Vlan600-SafeQ

    Access-group Vlan462-Suldalsposten_access_in_1 Vlan462-Suldalsposten interface

    Access-group Vlan462-Suldalsposten_access_out_1 Vlan462-Suldalsposten interface

    Route outside 0.0.0.0 0.0.0.0 79.x.x.225 1

    Timeout xlate 03:00

    Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

    Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

    Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

    Timeout, uauth 0:05:00 absolute

    x x encrypted privilege 15 password username

    the ssh LOCAL console AAA authentication

    Enable http server

    http 192.168.210.0 255.255.255.0 Vlan450

    http 192.168.200.0 255.255.255.0 Vlan1

    http 192.168.1.0 255.255.255.0 vlan400

    No snmp server location

    No snmp Server contact

    SNMP-Server Community public

    Server enable SNMP traps snmp authentication linkup, linkdown cold start

    Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

    card crypto outside_map 20 match address outside_20_cryptomap_1

    card crypto outside_map 20 set pfs

    peer set card crypto outside_map 20 62.92.159.137

    outside_map crypto 20 card value transform-set ESP-3DES-SHA

    outside_map interface card crypto outside

    crypto ISAKMP allow outside

    ISAKMP crypto enable vlan400

    crypto ISAKMP policy 10

    preshared authentication

    3des encryption

    sha hash

    Group 2

    life 86400

    tunnel-group 62.92.159.137 type ipsec-l2l

    IPSec-attributes tunnel-group 62.92.159.137

    pre-shared-key *.

    Telnet 192.168.200.0 255.255.255.0 Vlan1

    Telnet 192.168.1.0 255.255.255.0 vlan400

    Telnet timeout 5

    SSH 171.68.225.216 255.255.255.255 outside

    SSH timeout 5

    Console timeout 0

    dhcpd update dns both

    !

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan1

    !

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 outside interface

    !

    dhcpd address 192.168.1.100 - 192.168.1.225 vlan400

    dhcpd option ip 6 DomeneServer 81.167.36.11 interface vlan400

    dhcpd option 3 ip 192.168.1.1 interface vlan400

    vlan400 enable dhcpd

    !

    dhcpd address 192.168.210.100 - 192.168.210.200 Vlan450

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan450

    dhcpd ip interface 192.168.210.1 option 3 Vlan450

    enable Vlan450 dhcpd

    !

    dhcpd address 192.168.2.100 - 192.168.2.150 Vlan460-SuldalHotell

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan460-SuldalHotell

    dhcpd 192.168.2.1 ip interface option 3 Vlan460-SuldalHotell

    dhcpd enable Vlan460-SuldalHotell

    !

    dhcpd address 192.168.3.100 - 192.168.3.200 Vlan461-SuldalHotellGjest

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan461-SuldalHotellGjest

    dhcpd ip interface 192.168.3.1 option 3 Vlan461-SuldalHotellGjest

    dhcpd enable Vlan461-SuldalHotellGjest

    !

    dhcpd address 192.168.202.100 - 192.168.202.199 vlan470-Kyrkjekontoret

    interface of dhcpd option 3 ip 192.168.202.1 vlan470-Kyrkjekontoret

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface vlan470-Kyrkjekontoret

    dhcpd enable vlan470-Kyrkjekontoret

    !

    dhcpd option 3 192.168.20.1 ip interface vlan480-Telefoni

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface vlan480-Telefoni

    !

    dhcpd address 192.168.10.80 - 192.168.10.90 Vlan490-QNapBackup

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan490-QNapBackup

    dhcpd 192.168.10.1 ip interface option 3 Vlan490-QNapBackup

    !

    dhcpd address 192.168.30.100 - 192.168.30.199 Vlan500-HellandBadlands

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan500-HellandBadlands

    dhcpd ip interface 192.168.30.1 option 3 Vlan500-HellandBadlands

    dhcpd enable Vlan500-HellandBadlands

    !

    dhcpd address 192.168.40.100 - 192.168.40.150 Vlan510-IsTak

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan510-IsTak

    dhcpd 3 ip Vlan510-IsTak 192.168.40.1 option interface

    Vlan510-IsTak enable dhcpd

    !

    dhcpd address 192.168.50.150 - 192.168.50.199 Vlan600-SafeQ

    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan600-SafeQ

    Vlan600-SafeQ enable dhcpd

    !

    dhcpd address 192.168.4.100 - 192.168.4.150 Vlan462-Suldalsposten

    interface option 6 ip DomeneServer 81.167.36.11 Vlan462-Suldalsposten dhcpd

    interface ip dhcpd option 3 Vlan462-Suldalsposten 192.168.4.1

    Vlan462-Suldalsposten enable dhcpd

    !

    !

    !

    !

    type of policy-card inspect dns preset_dns_map

    parameters

    message-length maximum 512

    !

    context of prompt hostname

    Cryptochecksum:x

    : end

    Site 1 config:

    : Saved

    :

    ASA Version 7.2 (4)

    !

    ciscoasa hostname

    domain default.domain.invalid

    activate the password encrypted x

    passwd encrypted x

    names of

    !

    interface Vlan1

    nameif inside

    security-level 100

    IP 192.168.77.1 255.255.255.0

    !

    interface Vlan2

    nameif outside

    security-level 0

    PPPoE Telenor customer vpdn group

    IP address pppoe setroute

    !

    interface Ethernet0/0

    switchport access vlan 2

    !

    interface Ethernet0/1

    !

    interface Ethernet0/2

    !

    interface Ethernet0/3

    !

    interface Ethernet0/4

    !

    interface Ethernet0/5

    switchport access vlan 15

    !

    interface Ethernet0/6

    !

    interface Ethernet0/7

    !

    passive FTP mode

    DNS server-group DefaultDNS

    domain default.domain.invalid

    outside_access_in list extended access permit icmp any any disable log echo-reply

    access extensive list ip 192.168.77.0 outside_1_cryptomap allow 255.255.255.0 192.168.1.0 255.255.255.0

    access extensive list ip 192.168.77.0 inside_nat0_outbound allow 255.255.255.0 192.168.1.0 255.255.255.0

    pager lines 24

    asdm of logging of information

    Within 1500 MTU

    Outside 1500 MTU

    ICMP unreachable rate-limit 1 burst-size 1

    ASDM image disk0: / asdm - 524.bin

    don't allow no asdm history

    ARP timeout 14400

    Global 1 interface (outside)

    NAT (inside) 0-list of access inside_nat0_outbound

    NAT (inside) 1 0.0.0.0 0.0.0.0

    Access-group outside_access_in in interface outside

    Timeout xlate 03:00

    Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

    Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

    Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

    Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

    Enable http server

    http 192.168.77.0 255.255.255.0 inside

    http 192.168.1.0 255.255.255.0 inside

    No snmp server location

    No snmp Server contact

    Server enable SNMP traps snmp authentication linkup, linkdown cold start

    Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

    card crypto outside_map 1 match address outside_1_cryptomap

    card crypto outside_map 1 set pfs

    peer set card crypto outside_map 1 79.160.252.226

    card crypto outside_map 1 set of transformation-ESP-3DES-SHA

    outside_map interface card crypto outside

    crypto ISAKMP allow inside

    crypto ISAKMP allow outside

    crypto ISAKMP policy 10

    preshared authentication

    3des encryption

    sha hash

    Group 2

    life 86400

    Telnet 192.168.77.0 255.255.255.0 inside

    Telnet timeout 5

    SSH timeout 5

    Console timeout 0

    VPDN group Telenor request dialout pppoe

    VPDN group Telenor localname x

    VPDN group Telenor ppp authentication chap

    VPDN x x local store password username

    dhcpd outside auto_config

    !

    dhcpd address 192.168.77.100 - 192.168.77.130 inside

    dhcpd dns 192.168.77.1 on the inside interface

    dhcpd option 6 ip 130.67.15.198 193.213.112.4 interface inside

    dhcpd allow inside

    !

    dhcpd option 6 ip 130.67.15.198 193.213.112.4 outside interface

    !

    tunnel-group 79.160.252.226 type ipsec-l2l

    IPSec-attributes tunnel-group 79.160.252.226

    pre-shared-key *.

    !

    class-map inspection_default

    match default-inspection-traffic

    !

    !

    type of policy-card inspect dns preset_dns_map

    parameters

    message-length maximum 512

    Policy-map global_policy

    class inspection_default

    inspect the preset_dns_map dns

    inspect the ftp

    inspect h323 h225

    inspect the h323 ras

    inspect the rsh

    inspect the rtsp

    inspect esmtp

    inspect sqlnet

    inspect the skinny

    inspect sunrpc

    inspect xdmcp

    inspect the sip

    inspect the netbios

    inspect the tftp

    !

    global service-policy global_policy

    context of prompt hostname

    Cryptochecksum:x

    : end

    Hello

    The addition of a new network to the existing VPN L2L should be a fairly simple process.

    Essentially, you need to add the network of the Crypto present ACL configurations "crypto map" . You also need to configure the NAT0 configuration for it in the appropriate interfaces of the SAA. These configurations are all made on both ends of the VPN L2L connection.

    Looking at your configurations above it would appear that you need to the following configurations

    SITE 1

    • We add the new network at the same time the crypto ACL and ACL NAT0

    access extensive list ip 192.168.77.0 outside_1_cryptomap allow 255.255.255.0 192.168.20.0 255.255.255.0

    access extensive list ip 192.168.77.0 inside_nat0_outbound allow 255.255.255.0 192.168.20.0 255.255.255.0

    SITE 2

    • We add new ACL crypto network
    • We create a new NAT0 configuration for interface Vlan480 because there is no previous NAT0 configuration

    outside_20_cryptomap_1 to access extended list ip 192.168.20.0 allow 255.255.255.0 192.168.77.0 255.255.255.0

    Comment by VLAN480-NAT0 NAT0 for VPN access-list

    access-list VLAN480-NAT0 ip 192.168.20.0 allow 255.255.255.0 192.168.77.0 255.255.255.0

    NAT 0 access-list VLAN480-NAT0 (vlan480-Telefoni)

    These configurations should pretty much do the trick.

    Let me know if it worked

    -Jouni

  • Error when adding new subnet for CSM group

    Hello

    I'm trying to add a new subnet to an existing group in the CSM v4.0.1 b7823 company.  When you add a new subnet to the Group (the other elements of the group is a different subnet), CSM emits several errors for each SAA touched:

    Description:

    BB (GROUPNAME), referenced by the 'Http network' on maps (DEVICENAME) device to multiple network IP addresses!

    Cause:

    Made http refers to a network object that corresponds to more than one IP address on the device

    Action:

    Please config the policy with the network object that resolves to a single IP address.

    There is an error for ICMP as well.  The group is already a /24subnet content, I don't think it's a clear mistake.  Has anyone encounter this?

    Thank you very much.

    Justin

    Hi Justin,

    what you observe is normal given the way in which we have set up the remote access policy. As you probably know, in cli, you can specify only one rule of access by line for ssh, http, telnet etc...

    For example, if you want to allow ssh access to ASA lines host 1.1.1.1 and 2.2.2.2 you put two

    SSH 2.2.2.2 255.255.255.255 outside

    SSH 1.1.1.1 255.255.255.255 outside

    The CSM, we model this two lines as two different object, so the building of network type block object that refers to the object of type ssh access can have only one entry. This behavior is the same for ICMP as well.

    Access list is different because we model to the CSM in a different way, plus you can use the object-group put on different networks. It is not possible to access to the device.

    I hope that gave you an overview a little more on the reason

    Also it would be nice to score this answer if this is the case

    Stefano

  • [AI - CS4] How to add an art Council to existing document?

    Hi all

    can anyone suggest me the addition of a new work plan for existing document? I found no Palette of the artboard in CS4. But in CS5 it is given.

    Thank you

    D.A.

    The Panel to the artboard is new to AiCS5. In CS4, a new work plan can be added by doing one of the two:

    1. choose the work plan tool and click-and - drag in the area of canvas of the Illustrator document.

    2. choose the work plan tool, click on the button "New work plan" in the control panel. Then select the size you want in the list of presets of the artboard in the Control Panel, then in the area of the canvas that you want to add a new work plan.

    I hope this helps.

    Neeraj

  • Make a new instance of a symbol existing (video clip or graphic) using AS3

    I want to make a new instance of an existing design (video clip or graphic) when an object hits the side of the stage. I have the code to see if he hit the side of the stage, I just need to know how to make a new instance and bring up where the head-butted. I also want to be able to have several of these instances on the screen. Thank you in advance, I'm sure it's a fundamental thing, I'm just really new to Flash, then Yes.

    First create the symbol as a movieclip.  Then right click on the object in the library and select the link option.  In the Panel that opens select the export for actionscript option and then assign a class name for the symbol... say you name ImageMC (caps are usually used to begin class names).  Flash will provide an indication that he cannot find a class and it will create a when you compile.

    To add a new instance of the symbol to the stage you use...

    var imgMC:ImageMC = new ImageMC();

    imgMC.x =? ;

    imgMC.y =? ;

    addChild (imgMC);

    where x and y values (?) will be established based on all the information available to you about where the ball was when he hit the wall.

  • Model DW created from existing page looks fine in IE7, FF, Opera, Netscape, but not IE6

    I work on a site I want to make some pages in templates for reuse... I have an existing designed outside of DW which was beautiful in IE6, IE7, FF, Opera, and Netscape, but at the time I saved as a model and then created a new page and look at the new page in IE6 css is disabled... Not so off that CSS is not used but simply not good, but if I look in any other browser that's good... Is DW 'fix' my code for me? I looked in the settings and all Code rewriting options are deselected or is it a bug and I can around her...

    You must have an error code in the page.

    --
    Murray - ICQ 71997575
    Adobe Community Expert
    (If you * MUST * write me, don't don't LAUGH when you do!)
    ==================
    http://www.dreamweavermx-templates.com - template Triage!
    http://www.projectseven.com/go - DW FAQs, tutorials & resources
    http://www.dwfaq.com - DW FAQs, tutorials & resources
    http://www.macromedia.com/support/search/ - Macromedia (MM) Technotes
    ==================

    "WhittleOne" wrote in message
    News:f6ljvs$Jac$1@forums. Macromedia.com...
    > Thanks for the quick reply... 2 problems.
    > 1) I made sure that the options are not selected and re-created the model
    > and
    > always the same problem.
    (> 2) the site is not available but it is in development and the server, it is
    > is
    > not accessible from outside the intranet...
    >

  • Question about the migration to a new vswitch NFS port group

    We currently have our group of NFS port on the vSwitch that has all our VLAN and I'd like to bring out a vSwitch isolated dedicated network cards that will handle only NFS communnication.

    I have two network cards additional that I configured on an another vSwitch.  My question is can I remove the port from a vSwitch group and add it to this new and expect it to work?  This unmount and mount the NFS volume for me?  It will be just a quick blip?  What is a larger company?  I ask because I'm trying to figure if I need power off all the virtual machines that are on NFS before moving the port group.

    Is there another method that I should follow to do what I'm doing?

    Thank you

    t

    You'll need plan a failure.  You will need to create a new portgroup vmkernel, since you can't really "moving" a portgroup.  In addition, since you must create a vmkernel portgroup, it cannot be on the same subnet as the existing vmkernel portgroup.  You can have two on the same subnet, no matter how vSwitch' are you have.  Also, I'm not 100% sure the NFS, when you go back, to be assigned a new ID and be recognized as a new data store and force you to re-register your vm.  It's pretty easy to do, but it may be necessary.

    -KjB

    VMware vExpert

  • NB200-12N - who to upgrade to 2 GB of RAM?

    Hello

    I have a NB200-12N and want to upgrade to 2 GB. The manual and the data sheet are conflicting:
    -On a single page, we read DDR2 800 MHz
    -an other PC2-4200
    -and then this bus 667 MHz.

    All three correspond to different types of RAM. What is the good?

    Another question, what size should I buy?
    -an additional 1 GB to add to the existing 1 GB
    - or a 2 GB and replace the existing 1 GB?

    Thank you
    Alain

    Used on your laptop memory is DDR2 800 MHz and module type SO-DIMM.
    I found some info you can use 2 GB RAM DDR - 800 module with the part number PA3669U-1M2G for RAM upgrade.

  • GarageBand unknown version

    I recently started using Garageband a few months ago and assuming there are the version provided with the iMac (retina 4 k, 21.5 in., end of 2015) 3.1 Ghz Intel Core i5, 8 GB with Iris Graphics Pro. #C0 * G78 series. If I decide to restore the sound library, I get a message that the selected files are not installed on the computer and ask to download with additional content. This will remove all existing instruments as well as all the loops already installed?

    Thanks for your time,

    -Mikkel

    < personal information under the direction of the host >

    and request to download with additional content.

    Download content extra will not remove the loops and instruments that are already installed, simply add additional content.

    You can see the version number of any application in the Panel 'A way'. Launch of GarageBand and go to the main menu bar ' > GarageBand on GarageBand. Which displays the version number.

  • HP Pavilion 2312 G6 AX RAM upgrade

    I want to add an additional 4 GB RAM module with my existing 4 GB. I called HP support and they said that the product could not be improved beyond 4 GB. I did a search online and found that the product does support up to 8 GB of RAM. How to spend it?

    Hello

    Yes, your machine supports 8 GB RAM

    2 the customer-accessible/extendable SODIMM slots:
    ● twin DDR3 - 1600 MHz memory Support
    ● Support of DDR3L-1600 MHz Dual Channel
    ● twin DDR3 - 1333 MHz memory Support

    Supports the following configurations up to 8 GB:
    ● 8192 MB total memory (4096 × 2) (no support for 32 bit OS)
    ● 6144 MB total memory (4096 × 1 + 2 048 × 1) (no support for 32 bit OS)
    ● 4096 MB total memory (4096 × 2 048 or 1 × 2)
    Total system memory of ● 2048 MB (2 048 × 1).

    Please use page #46 manual 3rd on the following link to find the part # and how add/replace RAM:

    http://h10025.www1.HP.com/ewfrf/wc/manualCategory?cc=us&LC=en&product=5358557

    Kind regards.

  • Keynote not remember last insert location

    Good day to all,

    When you insert a picture from the Photos App in Keynote (MBP), I need to access the album OK/etc to select the required photo. However, when adding additional photos or the replacement of an existing photo, taken from the album even in the Photos, I have to re-navigatre to the same album in the Photos App. Is there anyway I can get Keynote to remember the last insert/import location that I used. Re-sail again and again so is your time.

    Concerning

    Kevin

    Keynote 6.6.1 to Yosemite always shows the last used folder. If Photos, music or movies.

    Annoyingly, only a single image at a time can be imported.

Maybe you are looking for

  • Phase shift a channel and display

    Hello I'm working on a project for which I have to display the I-Q constellation plot and normalize the data to fit a circle of unit RADIUS. I'm able to do this, but the problem is sometimes the signal in one of the channels is very low and therefore

  • FindPattern and 64-bit

    HM, as nobody answers my questions from 32 to 64-bit, I'll keep wondering: Function FindPattern does not seem appropriate for 64 bit, because the starting index continues to expect a regular 'int '. 'Number of bytes' is defined as ssize_t, but this s

  • C00D116A: Cannot play DVD video

    HELP PLEASE

  • Fatal error: installation MapField demo on blackberry "BOLD"

    Hello world I have compiled the mapfiled demo application in v5.0.0.5 studio for Blackberry development. Obtain the signature of code required. Then I have to install the application on my Blackberry "BOLD" (build v4.6.0.301). Blackberry Desktop Mana

  • Volume done by exactly the titles of automatic leveling?

    I read in some places that it makes parts quiet parts top songs and strong quiet songs. I hope not because it is not sound like a useful feature. I hope that it analyzes your entire library and makes the most of the songs at roughly the same volume?