Cisco 1841 and a connection in fiber optics 400MbS

Similar Questions

• 55VL900A and BDX4300KY - TV is not output Dolby Digital fiber optic

  Just installed my new TV, 55VL900A - great picture, very happy. I have a BDX4300KY a drive blueray and Foxtel connected to the TV via HDMI.

  The TV has audio output optical fiber, which I run for my Yamaha DSP - A1 amp.

  The Blueray and Foxtel are defined to pass on Dolby Digital through HDMI.

  Problem 1: TV does not have Dolby Digital of the fiber optic connection.

  Problem 2: If I run audio blueray or foxtel fiber optics directly to my amp, there is a sync problem. The audio is delivered earlier than the image.

  I searched and found no results in my manual, or in the forum. Help, please.

  Thank you, Mike.

  Hello

  I put t have the same devices at home, but I use the optical cable for sound. It is connected to my blue ray and Technichs amp player. I use 5.1 home theater connected to the Technics. The sound is perfect.

  I put t know how it works on TV Toshiba but check please if something should be enabled there.
  > The TV does not have Dolby Digital of the fiber optic connection.
  See s operating manuals and do not forget the optical output must not be activated. Optical cable is connected to the amp in the optical port marked as TV in the back? Don't forget that bulks is set to TV chanel when you want to hear the sound of the TV directly. In my opinion, it should be best option for you if you will be able to make it work.
  > If I run audio blueray or foxtel fiber optics directly to my amp, there is a sync problem. The audio is delivered earlier than the image.
  Which is really strange. Can you please test it with cable audio normal cinch? It will be interesting to know if the same problem occurs again.

• Why fiber optic use 4 types of connectors? And what is single mode or multimode optical cable thinner?

  Why fiber optic use 4 types of connectors? And what is single mode or multimode optical cable thinner?

  Why fiber optic use 4 types of connectors? And what is single mode or multimode optical cable thinner?

  Hello

  To bookmark this site.  He may have more information for you. Wikipedia

  Joining lengths of optical fiber is more complex than to join the electric wire or cable. The ends of the fibers must be carefully cleavedand then spliced, either mechanically or by merging with heat. Fiber optic connectors for removable connections are also available.

  Scroll to the termination and splicing

• SRW2048 and a Cisco 1841

  I am trying to Setup VLAN between a 2 and a Cisco 1841 router SRW2048 switches. I have ports that connect the 2 switches to the other and the port that connect to router as junction ports. I set 2 VLANS. VLAN 1 is just the vlan by default everyone runs and vlan will be the area demilitarized. I have no configuration of access control lists to block traffic, but when I assign vlan 2 on the port that the server is, I can not ping to the gateway. I don't know what is happening, see below for the cleaned configs.

  1841:

  Current configuration: 4282 bytes
  !
  version 12.4
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime localtime show-time zone
  encryption password service
  !
  hostname QCSLOLURTR01
  !
  boot-start-marker
  start the system flash c1841-advsecurityk9 - mz.124 - 25B .bin
  boot-end-marker
  !
  logging buffered debugging 8192
  !
  AAA new-model
  !
  !
  AAA authentication login default group Ganymede + local
  the AAA authentication enable default group Ganymede + none
  !
  AAA - the id of the joint session
  clock timezone CST - 6
  clock to summer time recurring CDT
  IP cef
  !
  !
  property intellectual auth-proxy max-nodata-& 3
  property intellectual admission max-nodata-& 3
  !
  !
  no ip domain search
  IP domain name qcsupply.com
  !
  !
  !
  user name x

  Archives
  The config log
  hidekeys
  !
  !
  x IP ftp username
  x IP ftp password

  !
  !
  crypto ISAKMP policy 1
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  ISAKMP crypto key QCSLOLU address x.x.x.x No.-xauth
  !
  !
  Crypto ipsec transform-set esp-3des esp-md5-hmac ts1
  Crypto ipsec transform-set esp - esp-md5-hmac ts2
  !
  VPN-map 10 ipsec-isakmp crypto map
  defined peer x.x.x.x
  Set transform-set ts1
  match address 101
  !
  !
  !
  interface FastEthernet0/0
  Description QCSL OLU INTERNET CONNECTION
  IP x.x.x.x where x.x.x.x
  IP access-group denied-hack-attack in
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  NAT outside IP
  IP virtual-reassembly
  automatic duplex
  automatic speed
  No cdp enable
  card crypto vpn-map
  !
  interface FastEthernet0/1
  no ip address
  automatic duplex
  automatic speed
  !
  interface FastEthernet0/1.1
  encapsulation dot1Q 1 native
  IP 10.60.90.1 255.255.255.0
  IP nat inside
  IP virtual-reassembly
  !
  interface FastEthernet0/1.2
  encapsulation dot1Q 2
  IP 10.60.89.1 255.255.255.0
  IP nat inside
  IP virtual-reassembly
  !
  interface Serial0/0/0
  no ip address
  Shutdown
  !
  Router eigrp 100
  Network 10.60.89.0 0.0.0.255
  Network 10.60.90.0 0.0.0.255
  No Auto-resume
  !
  IP forward-Protocol ND
  IP route 0.0.0.0 0.0.0.0 x.x.x.x
  !
  no ip address of the http server
  23 class IP http access
  local IP http authentication
  no ip http secure server
  IP http timeout policy slowed down 60 life 86400 request 10000
  IP nat inside source map of route-nat interface FastEthernet0/0 overload
  IP nat inside source static tcp 10.60.89.10 80 80 extensible x.x.x.x
  IP nat inside source static tcp 10.60.89.10 expandable 443 443 x.x.x.x
  IP nat inside source static tcp 10.60.89.10 2021 x.x.x.x extensible 2021
  IP nat inside source static tcp 10.60.89.10 6100 6100 extensible x.x.x.x
  IP nat inside source static tcp 10.60.90.13 80 80 extensible x.x.x.x
  IP nat inside source static tcp 10.60.90.13 expandable 443 443 x.x.x.x
  IP nat inside source static tcp 10.60.90.13 1494 x.x.x.x extensible 1494
  !
  deny-hack-attack extended IP access list
  allow udp 0.255.255.255 x.x.x.x any eq snmp
  deny udp any any eq snmp
  deny udp any any eq tftp
  deny udp any any eq bootpc
  deny udp any any eq bootps
  deny ip x.x.x.x 0.15.255.255 all
  deny ip x.x.x.x 0.0.255.255 everything
  allow an ip
  !
  record 10.10.5.30
  access-list 23 allow 10.10.10.0 0.0.0.7
  access-list 99 allow 10.0.0.0 0.255.255.255
  access-list 99 allow x.x.x.x 0.0.1.255
  access-list 101 permit ip 10.60.90.0 0.0.0.255 10.10.0.0 0.0.255.255
  access-list 101 permit ip 10.60.89.0 0.0.0.255 10.10.0.0 0.0.255.255
  access-list 105 deny ip any host x.x.x.x
  105 ip access list allow a whole
  access-list 111 deny ip 10.60.90.0 0.0.0.255 10.10.0.0 0.0.255.255
  access-list 111 deny ip 10.60.89.0 0.0.0.255 10.10.0.0 0.0.255.255
  access-list 111 allow ip 10.60.89.0 0.0.0.255 any
  access-list 111 allow ip 10.60.90.0 0.0.0.255 any
  SNMP-server community no RO
  map of route-nat allowed 10
  corresponds to the IP 111
  !
  !
  RADIUS-server host x.x.x.x
  RADIUS-server key x
  !
  control plan
  !
  Banner motd ^ C

  x

  ^ C
  !
  Line con 0
  line to 0
  Modem InOut
  Discovery to automatically configure modem
  autohangup
  Speed 2400
  line vty 0 4
  location * Access Virtual Terminal allowed only from internal network *.
  access-class 99 in
  privilege level 15
  transport telnet entry
  line vty 5 15
  access-class 23 in
  privilege level 15
  transport telnet entry
  !
  Scheduler allocate 20000 1000
  end

  SRW2048 #1:

  Port 1: Trunk (to the router)

  Port 2: Trunk (SRW2048 #2)

  Prot 24: VLAN 2

  SRW2048 #2:

  Port 1: Trunk (of SRW2048 #1)

  Any ideas?

  Because the SRW is now part of Cisco Small Business, it would probably be best to ask the Cisco Small Business support community. You find people from Cisco over there.

  For SRW configuration, you added the two VLANS to your trunk ports? Configuration of a port in trunk mode adds automatically that all configured VLAN to the trunk.

  The server has a static IP address in the DMZ LAN?

• How to build a redundant fiber optic ring

  Hello everyone. I would like to connect 10 buildings with a redundant fiber optic ring and have a control to connect to the closet room build you on the ring to receive data from our process control systems located in the buildings of the ring. These are domain controllers systems that feed information to the bacbone on FTES. Can someone tell me a document that shows what I have to do and an example of architecture. We use S Catalyst 2960 switches or do I me 3750 s in all my buildings. Thanks in advance for any help.

  Hi Carroll,

  as L2 VLAN and VRF on L3 suggested donation is the best option to go with multiple isolated logical networks on a physical network

  Take a look at the link design guide for the isolation of path by using virtual and VRF LANs which below is very useful

  http://www.Cisco.com/en/us/docs/solutions/Enterprise/Network_Virtualization/PathIsol.html

  hope this helps

  don't forget to note the useful messages

• fiber optical sensor su19 110 115 a 126 vs nor usb 6008

  Hi expert... I am looking for idea or help on my project. I try to get the measure of mention nor USB 6008 sensor output. In fact, I'm new with nor peripheral usb n still study n the search on internet or n. forums I found an idea to connect the sensor by aoi, but I can't seem to get a measurement any. Is the sensor can connect directly to the device usb or need some custom wire diagram between them. Thanks in advance

  First of all, it is useful if you name the manufacturer of the sensor. A single part number means nothing to most of us.  You use the sensor fiber-optic Pepperl + Fuchs? Even better is to display the technical/manual plug of the sensor or links to them.

  The data sheet that I found for the sensor to Pepperl + Fuchs is not very well written, in my opinion. It seems that the outputs are impulses with dependent amplitudes of the voltage and the frequency or the timetable set by the mode of operation.

  If it's the device you use, the only way you have any possibility to decode the outputs with the USB-6008 box is to measure with an analog input and then process the data in the software. According to the supply voltage, you will probably need a voltage divider to reduce the output voltage of the sensor to a level compatible with the DAQ hardware.  You also won't be able to use the high speed of the probe because the heart rate exceeds the Nyquist limit. In standard mode, you mighte be OK, but you can use a single channel of the USB-6008 to stay in the Nyquist limit.

  Lynn

• -Cisco 1841

  Howdy,

  I have a Cisco 1841 with two WAN ports to use 0/FE0 FE 0/1

  First FE 0/0 has an MPLS connection with my internet provider. 2MB / 2MB DL/UL

  Second FE 0/1 has a MPLS internal with one of our server's storage providers. 1 MB / 1 MB DL/UL

  The thing is, I have a second Wired internet connection in a router low cost for emergencies. I want to centralize all services in the 1841.

  It is possible to configure the port for a third connection ADSL and load balancing between ADSL1 (FE 0/0) and ADSL2 (future port to THE) 2MB / 2 MB DL/UL

  ( ? )

  Or need another router?

  Thanks in advance,

  Kind regards

  Hi Miguel,.

  You will need the WIC-1ADSL for the WAN connection extra said.

  The port to THE is usually connected to an external modem for remote management.

  Sent by Cisco Support technique iPhone App

• VPN between 2 routers Cisco 1841 (LAN to LAN)

  Hello

  I need to connect two offices (two different LAN) using routers cisco 1841 at both ends.

  Currently the two cisco router are in working condition and refer the internet LAN clients. (making the NAT).

  Can someone please tell us what is the easiest way to set up a VPN between two sites, so that LAN users to an office to access mail servers electronic/request to the office LAN.

  I understand that I need IPSec Site to Site VPN (I think).

  Anyonce can you please advise.

  Kind regards.

  s.nasheet wrote:
  Hi ,
  I need to connect two offices ( two different LAN's) together using cisco 1841 routers at both end.
  Currently both cisco router are in working order and  acting as a internet gateway to the LAN clients. ( doing NAT).
  Can anybody please advise what is the easiest method to configure VPN between two sites so that  LAN users at one office be able to access  the  email/application servers at the other LAN office.
  I understand I need IPSec Site to Site VPN  ( i think).
  Can anyonce please advise.
  Regards.
  

  Yes, you need a VPN site-to site. Start with this link which gives a number of examples to set up a VPN S2S between 2 routers Cisco.

  http://www.Cisco.com/en/us/Tech/tk583/TK372/tech_configuration_examples_list.html#anchor16

  Jon

• How to use Layer 2 Ports on the Cisco 1841 router switch

  Hello

  I use the Cisco 1841 router with a single port layer 3 Fe0 and 8 Ports switched.

  I gave the IP on the Fe0 port which is connected to another router.

  Now I don't know how to use Layer 2 of the router switch ports.

  I tried to make one of the port as a Port of access by switchport mode access and connected my laptop and the same subnet given IP, but I can't ping my Fe0 IP port and vice versa, as I am also unable to ping my laptop router.

  Can someone explain to me how to use these ports on layer 2?

  Hi Muhammadatifmasood, take a look at the link below, I'm sure that you will find it useful.

  https://supportforums.Cisco.com/discussion/10919631/how-enable-routing-b...

  BenSamayoa

• VPN on Cisco 1841 router

  Hello

  I need to configure the vpn site to site on router cisco 1841, but the problem is that the router does not recognize the crypto comand.

  R1 #conf t
  Enter configuration commands, one per line.  End with CNTL/Z.
  R1 (config) #crypto?
  % Unrecognized command
  R1 (config) #crypto?
  % Unrecognized command
  R1 (config) #c?
  call call-history-mib id-carrier cdp
  chat script class-card clock SNC
  config-register connect plan control configuration

  R1 (config) #crypto isakmp policy 1

  ^
  Invalid entry % detected at ' ^' marker.

  R1 #sh worm
  Cisco IOS Software, 1841 (C1841-IPBASE-M), Version 12.4 (1 c), RELEASE SOFTWARE (fc1)
  Technical support: http://www.cisco.com/techsupport
  Copyright (c) 1986-2005 by Cisco Systems, Inc.
  Updated Wednesday 25 October 05 17:10 by evmiller

  ROM: System Bootstrap, Version 12.3 T9 (8r), RELEASE SOFTWARE (fc1)

  the availability of CS-Khatlon-opio-01 is 2 days, 23 hours, 13 minutes
  System returned to ROM of charging at 16:07:44 TJK Friday, November 7, 2014
  System image file is "flash: c1841-ipbase - mz.124 - 1C.bin.

  Cisco 1841 (revision 6.0) with 114688K / 16384K bytes of memory.
  Card processor ID FCZ102110NQ
  2 FastEthernet interfaces
  Configuration of DRAM is 64 bits wide with disabled parity.
  191K bytes of NVRAM memory.
  31360K bytes of ATA CompactFlash (read/write)

  Configuration register is 0 x 3922

  Please help, how to set up vpn?

  Hello

  According to this output is more than clear that you do not have a k9 license applied to this router, this license will enable the security features on your IOS, in this case, you will need a permit of k9 with an activation key, and then you will be able to have available on your device encryption controls. Once you have that we can work on configuring site to site.

  Do not forget to rate!

  David Castro,

  Kind regards

• Help setting up a laboratory at home using Cisco kit and a blank Superhub

  

  Hello world

  I just started my CCENT class and so I try to create a laboratory that is separate from my LAN House, initially using a blank Superhub and a Cisco 1841 router.  Please keep in mind that I am a beginner, so it may not make sense or be completely illogical...

  The superhub for those who don't know, is a renamed netgear, limit VMDG480.  It's basically a cable modem and router wireless combined.

  The normal daily LAN side of the network was the default installation to receive an IP address via DHCP from the superhub in range 192.168.0.1/24.

  At first, I thought I could put things in preparation for my lab installation, by configuring the LAN subnet using 192.168.0.0 and superhub of/16 mask rank for my 'everyday' network and 192.168.1.0 rank for my "laboratory at home." (Good or bad?...)

  Unfortunately, I'm unable to do so because the superhub only allows the last byte in the mask to be changed, so I changed the mask and it now reads 255.255.255.128, with the idea that I can always have 2 separate networks.

  In the photo above you can see devices on the right side are all directly related to the superhub and continue to work as usual.

  On the left side is where I've implemented a Cisco 1841 router and a laptop computer to test.

  The details of each device are;

  Blank Superhub
  LAN:192.168.0.1
  The DHCP scope: 192.168.0.2 - 192.168.0.126

  Cisco 1841
  Fast Ethernet 0/1: 192.168.0.126
  255.255.255.128

  Fast Ethernet 0/0: 192.168.0.129
  255.255.255.128

  PC2 (mobile wired connected to FE 0/0)
  IP: 192.168.0.200
  255.255.255.128
  Default gateway: 192.168.0.126 (the address IP of Cisco 1841)

  Someone would be kind enough to look at this and tell me where I'm wrong please?

  I thought about pulling the superhub completely, but I am bound to her by my ISP :(

  Hello

  It of a little early in your studies for this :) but implementation of your knees it should work:

  1841 router:

  int fa0/0 (interface connected to the hub)
  IP 192.168.0.126 255.255.255.0
  NAT outside IP
  No tap

  int fa0/1.2
  encapsulaton dot1q 2
  IP 172.16.0.1 255.255.0.0
  IP nat inside
  No tap

  int fa0/1 (interface connected to)
  No tap

  NAT configuration:

  access-list 1 permit 172.16.0.0 0.0.255.255
  IP nat inside source list 1 interface fa0/0 overload

  Add a default route:
  IP route 0.0.0.0 0.0.0.0 192.168.0.1 (so your router knows where to forward DNS queries to 8.8.8.8)

  Connect your 3560 to the second port on the router and configure a trunk on the switch port and add vlan 2:

  int fa0/0 (connected to the 1841 router)
  switch to trunk encapsulation dot1q
  mode trunk switch

  VLAN 2
  name Home_Lab

  Connect your PC to the second switchport and add vlan2:

  int fa0/1
  access mode switch
  access switch vlan 2
  No tap

  Finally, give your PC an address in the subnet of vlan 2:

  IP: 172.16.0.2
  Mask: 255.255.0.0
  Gateway: 172.16.0.1
  DNS: 8.8.8.8

  You should be able to ping the address of the router on the subnet in 172.16.x.x 192.x.x.x. I don't have a Virgin hub to test this, but it worked well with two 1841 routers.

• NAT router 1841 and 3550 switch help

  Hi experts, I need some help with setting up a network.  Network diagram is attached.

  I created 3 VLANs on the 3550 Switch and activated InterVLAN Routing.  I can't do a ping from one VLAN to another.  I've added static routes to networks VLAN on the router.  Is the only part I'm not sure where and how configure NAT?  For example, if it was just a standalone router Cisco 1841 I would just create list of access and NAT FA 0/0 outside and FA 0/1 on the inside.  It would be great if someone can give me an example or point me to the right direction.

  Router ISP--> Cisco 1841--> Switch Cisco 3550

  Cisco 1841 router:

  FA 0 / 0--> WAN Interface

  IP address: 30.20.10.2

  FA0 / 1 Interface LAN connected to the 3550 switch-->

  IP address: 10.0.0.1/24

  Cisco 3550 switch:

  FA 0 / 24--> to connect to the Cisco 1841 router

  IP address--> 10.0.0.2/24

  FA 0/1 - 0 / 10--> VLAN 1

  FA 0/11 - 0 / 20--> VLAN 2

  FA 21/0 - 0 / 23--> VLAN3

  Thank you

  Hello, it's the same thing, but in your access list, you need allow all of your internal address ranges. On your router and 3550 make sure routing everything is OK, you say you have connectivity.

  This means that your network 10 should be able to get to your 192 networks and vice versa.

  On your 3550, you can have a default route to the router. And your router should have roads to 192 networks via the address 10 of the 3550.

  Then the NAT configuration

  Int fa0/1
  IP NAT inside

  Int fa0/0
  NAT outside IP

  IP access-list standard MYNAT
  Permit 10.0.0.0 0.0.0.255
  Permit 192.168.1.0 0.0.0.255
  Permit 192.168.2.0 0.0.0.255
  Permit 192.168.3.0 0.0.0.255

  And then in your NAT statement

  IP NAT inside source list MYNAT interface fa0/0 overload

  Hope this helps

  Sent by Cisco Support technique iPhone App

• Cisco 1841 to Vigor VPN

  Hi all

  I desperately need help. I spent the last 48 hrs trawling internet try to find how to set up secessfully

  I have port ports 80 and 443 forwarded for 78.25.xxx.xxx to our 192.168.6.65 local mail server. But all im presented with is unable to display the page when I try and connect to the external IP address on the local network. But if I try this address outside the local access network, then it works fine?

  My other problem I have is that I would like to setup 7 vpn which all dial for this router. They are configured to use ipsec with a preshared key ike. The dial of the router are vigor 2600-2820 series and I was going to use the following configuration to the cisco but it crashes card crypto cm-cryptomap.

  If anyone can help me I would really really appreciate it.

  Network configuration
  IP PUBLIC IP PRIVATE
  HUB (CISCO 1841) 192.168.6.0 SITE 78.XX. XXX.48
  SITE SPOKE (VIGOR 2600) 192.168.88.0 85.XX. XXX.85

  # tried vpn config that did not work.

  crypto ISAKMP policy 1
  md5 hash
  preshared authentication
  life 3600
  ISAKMP crypto key 123 address 85.189.xxx.xxx (site of talk)
  Crypto ipsec transform-set esp cm-transformset-1-esp-md5-hmac
  Dimensions of tunnel mib crypto ipsec flowmib history 200
  MIB crypto ipsec flowmib size of 200 historical failure
  Crypto card cm-cryptomap-address FastEthernet0/0
  cm-cryptomap 1 ipsec-isakmp crypto map
  defined by peer 85.189.155.85 (site of talk)
  the value of the transform-set cm-transformset-1
  match address 100

  interface FastEthernet0/0
  cm-cryptomap crypto card
  access-list 100 permit ip 192.168.6.0 0.0.0.255 192.168.88.0 0.0.0.255

  Here is the config complete less info vpn that works perfectly with bonded adsl
  # FULL CONFIG #.

  Current configuration: 3938 bytes
  !
  version 12.4
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  BURTON hostname
  !
  boot-start-marker
  boot-end-marker
  !
  activate the FBI secret 5
  activate the password xxxxxxxxxxx
  !
  No aaa new-model
  IP cef
  !
  !
  property intellectual auth-proxy max-nodata-& 3
  property intellectual admission max-nodata-& 3
  !
  !
  name of the IP-server 62.121.0.2
  name of the IP-server 195.54.225.10
  !
  !
  Crypto pki trustpoint TP-self-signed-692553461
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 692553461
  revocation checking no
  rsakeypair TP-self-signed-692553461
  !
  !
  TP-self-signed-692553461 crypto pki certificate chain
  certificate self-signed 01
  308201A 5 A0030201 02020101 3082023C 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031325 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 30312E30
  69666963 36393235 35333436 31301E17 313031 31323431 34343930 0D 6174652D
  325A170D 2E302C06 1325494F 03550403 32303031 30313030 30303030 5A 303031
  532D 5365 6C662D53 69676E65 4365 72746966 69636174 652 3639 32353533 642D
  06092A 86 4886F70D 01010105 34363130 819F300D 00308189 02818100 0003818D
  BA51CDF7 D418D270 7DCE516E 1ADE6DF5 82FE4507 CD1EBE0A 4B6E4B15 9A3C20ED
  B1D19FC9 63D0B925 0A4611FF CE8D935C 264FC3FE DF8BFAC2 76EC38ED 68115F43
  20A68D85 C04A564E 8BDE86FE 127F79B4 8E123D9C 8430940C BCD5CDA4 ADAAE387
  FA1E14A6 ECF92197 0CF54E89 B33915E7 A4E01EC7 CE45DDF6 AA60D168 38C92E67
  02030100 01A 36630 03551 D 13 64300F06 0101FF04 05300301 01FF3011 0603551D
  11040A 30 08820642 5552544F 4E301F06 23 04183016 03551D 8014645E 3FDE4E90
  A8773580 81EE4217 F4821238 993A301D 0603551D 0E041604 14645E3F DE4E90A8
  77358081 EE4217F4 3A300D06 01040500 03818100 86F70D01 82123899 092A 8648
  B9B21771 6B8C0F9E C66B907A AC7A09BF 1FFCB332 0C7B6446 22483 HAS 32 5EE7D1FC
  128A 9224 30964615 E70FFE29 513455AB 6A1747C4 250070DF 4ABE123D 0A29DD8B
  E67A33F0 4E61AB87 9AE1D2DC 72741BE7 3A9AD79D 13B622B3 BCADCDAA 9D5EA74C
  567D AD429722 9AE90E13 7D80027F 4FA37A7F 65014 2852 HAS 45 43CB141C 36FCB96B
  quit smoking
  !
  !
  !
  !
  !
  !
  interface FastEthernet0/0
  Description $ETH - LAN$
  IP 192.168.6.40 255.255.255.0
  IP nat inside
  IP virtual-reassembly
  automatic duplex
  automatic speed
  !
  interface FastEthernet0/1
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  ATM0/0/0 interface
  no ip address
  no ip mroute-cache
  No atm ilmi-keepalive
  Bundle-enable
  DSL-automatic operation mode
  PVC 0/38
  aal5mux encapsulation ppp Dialer
  Dialer pool-member 1
  !
  !
  ATM0/1/0 interface
  no ip address
  no ip mroute-cache
  No atm ilmi-keepalive
  Bundle-enable
  DSL-automatic operation mode
  PVC 0/38
  aal5mux encapsulation ppp Dialer
  Dialer pool-member 1
  !
  !
  interface Dialer0
  the negotiated IP address
  NAT outside IP
  IP virtual-reassembly
  encapsulation ppp
  Dialer pool 1
  Dialer-Group 1
  PPP reliable link
  Authentication callin PPP chap Protocol
  PPP chap hostname [email protected] / * /
  PPP chap password 0 xxxxxxxx
  PPP ipcp dns request
  reorganizes the PPP link
  multilink PPP Panel
  PPP multilink sliding 16 mru
  period of PPP multilink fragment 10
  Panel multilink PPP interleave
  multiclass multilink PPP
  !
  IP forward-Protocol ND
  IP route 0.0.0.0 0.0.0.0 Dialer0
  !
  IP http server
  IP http secure server
  overload of IP nat inside source list 100 interface Dialer0
  IP nat inside source static tcp 192.168.6.65 25 interface Dialer0 25
  IP nat inside source static tcp 192.168.6.45 Dialer0 1723 1723 interface
  IP nat inside source static tcp 192.168.6.65 80 78.XX. XXX.61 extensible 80
  IP nat inside source static tcp 192.168.6.65 78.XX 443. XXX.61 extensible 443
  IP nat inside source static tcp 192.168.6.30 80 78.XX. XXX.62 extensible 80
  IP nat inside source static tcp 192.168.6.30 78.XX 443. XXX.62 extensible 443
  !
  access-list 100 permit ip 192.168.6.0 0.0.0.255 any
  Dialer-list 1 ip protocol allow
  public RO SNMP-server community
  !
  !
  control plan
  !
  !
  Line con 0
  line to 0
  line vty 0 4
  password xxxxxxxxxxxx
  opening of session
  !
  Scheduler allocate 20000 1000
  end

  Cryptography works fine it seems.

  The error you receive is I think because that side vigor is able to encrypt a subnet ip (range) that is not defined by Cisco.

  The force he sends down to Cisco and after decrypting the Security Association IPSEC is a fall because it does not part of interesting traffic.

  But, I guess you're already running.

• L2l VPN with NAT static to hide the IP internal on Cisco 1841 ISR

  I configured a VPN L2L on a Cisco 1841 ISR.  I'm statically from some of my internal hosts to IPS that are included in encrypted traffic.  Please note that not all internal hosts are underway using a NAT.  I am doing this for hidden some of the actual IP addresses on the inside network.  I confirmed that the VPN works as well as natives of VPN traffic.  I configured VPN L2L traditionally on the Cisco ASA 5500 Series devices, and this is my first attempt with HIA of 1841.  I want just the other to take a glance to see if I missed something, or could I effectively part of the configuration.  All comments are welcome.

  VPN-RTR-01 #show run
  Building configuration...

  Current configuration: 9316 bytes
  !
  version 12.4
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  encryption password service
  !
  hostname VPN-RTR-01
  !
  boot-start-marker
  boot-end-marker
  !
  ! type map necessary for vwic/slot-slot 0/0 control
  logging buffered 51200 warnings
  no console logging
  enable secret 5 xxxxxxxxxxxxxxx
  enable password 7 xxxxxxxxxxxxxxx
  !
  No aaa new-model
  IP cef
  !
  !
  !
  !
  no ip domain search
  property intellectual auth-proxy max-nodata-& 3
  property intellectual admission max-nodata-& 3
  !
  !
  Crypto pki trustpoint TP-self-signed-2010810276
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 2010810276
  revocation checking no
  rsakeypair TP-self-signed-2010810276
  !
  !
  TP-self-signed-2010810276 crypto pki certificate chain
  certificate self-signed 01
  30820246 308201AF A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 31312F30
  69666963 32303130 38313032 6174652D 3736301E 31393334 OF 30333131 170 3131
  30365A 17 0D 323030 31303130 30303030 305A 3031 06035504 03132649 312F302D
  4F532D53 5369676E 656C662D 43 65727469 66696361 74652 32 30313038 65642D
  31303237 3630819F 300 D 0609 2A 864886 01050003, 818, 0030, 81890281 F70D0101
  8100C3FF F5EADA3B BCB06873 5577DB24 2AD8ECBB 00D53F1A 37342E2E 5CC9202A
  7F128E51 016CD6EC D8734F4D 28BE8B0A FCD6B714 8D13585B 7844C09C 79BA8F13
  B75E4E98 25D91F02 A4773F66 83407A8B 85447 64 A6889DD9 6085857F 737F8A9F
  749F4297 8804C4F3 D28A6C33 F4137BBE 67F9B945 F239789E 1303AD6D DB98B7E2
  52B 50203 010001 HAS 3 1 130101 FF040530 030101FF 30190603 0F060355 6E306C30
  551 1104 12301082 0E535458 2D56504E 2 525452 2 303130 1 230418 1F060355 D
  3B 232987 30168014 2CBB9DD0 B34B7243 7F8095C8 7AFBEFE3 301D 0603 551D0E04
  1604143B 2329872C BB9DD0B3 4B72437F 8095C87A FBEFE330 0D06092A 864886F7
  010104 05000381 8100A 831 8E05114A DE8AF6C5 4CB45914 36B6427C 42B30F07 0D
  C5C47BC9 0110BCAA A985CB3F 5CBB855B B12D3225 B8021234 86D1952C 655071E4
  66C18F42 F84492A9 835DE884 341B3A95 A3CED4E8 F37E7609 88F52640 741D74D2
  37842 D 39 E5F2B208 0D4D57E1 C5633DEB ACDFC897 7D50683D 05B5FDAA E42714B4
  DD29E815 E9F90877 4 D 68
  quit smoking
  username privilege 15 password 7 xxxxxxxxxxxxxxx lhocin
  username privilege 15 password 7 xxxxxxxxxxxxxxx jsmith
  !
  !
  !
  !
  crypto ISAKMP policy 5
  BA aes 256
  preshared authentication
  Group 2
  lifetime 28800
  xxxxxxxxxxxxxxx key address 172.21.0.1 crypto ISAKMP xauth No.
  !
  !
  Crypto ipsec transform-set ESP-AES256-SHA esp - aes 256 esp-sha-hmac
  !
  card crypto SITES REMOTE VPN-ipsec-isakmp 1
  defined by peer 172.21.0.1
  game of transformation-ESP-AES256-SHA
  match address VPN-REMOTE-SITE
  !
  !
  !
  interface FastEthernet0/0
  no ip address
  automatic speed
  full-duplex
  No mop enabled
  !
  interface FastEthernet0/0.1
  encapsulation dot1Q 1 native
  !
  interface FastEthernet0/0.2
  Description $FW_INSIDE$
  encapsulation dot1Q 61
  IP 10.1.0.34 255.255.255.224
  IP access-group 100 to
  IP nat inside
  IP virtual-reassembly
  !
  interface FastEthernet0/0.3
  Description $FW_OUTSIDE$
  encapsulation dot1Q 111
  IP 172.20.32.17 255.255.255.224
  IP access-group 101 in
  Check IP unicast reverse path
  NAT outside IP
  IP virtual-reassembly
  crypto VPN-REMOTE-SITE map
  !
  interface FastEthernet0/1
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  IP forward-Protocol ND
  IP route 0.0.0.0 0.0.0.0 172.20.32.1
  IP route 10.16.0.0 255.255.0.0 10.1.0.33
  IP route 10.19.0.0 255.255.0.0 10.1.0.33
  IP route 10.191.0.0 255.255.0.0 10.1.0.33
  IP route 10.192.0.0 255.255.0.0 10.1.0.33
  IP route 192.168.20.48 255.255.255.240 10.1.0.33
  !
  !
  IP http server
  local IP http authentication
  IP http secure server
  IP http timeout policy inactive 600 life 86400 request 10000
  IP nat inside source map route NO_NAT interface FastEthernet0/0.3 overload
  IP nat inside source static 10.191.0.11 192.168.20.54 STATIC_NAT_7 card expandable route
  IP nat inside source static 10.191.0.12 192.168.20.55 STATIC_NAT_8 card expandable route
  IP nat inside source static 10.192.1.1 192.168.20.56 STATIC_NAT_1 card expandable route
  IP nat inside source static 10.192.1.2 192.168.20.57 STATIC_NAT_2 card expandable route
  IP nat inside source static 10.192.1.3 192.168.20.58 STATIC_NAT_3 card expandable route
  IP nat inside source static 10.192.1.4 192.168.20.59 STATIC_NAT_4 card expandable route
  IP nat inside source static 10.192.1.5 192.168.20.61 STATIC_NAT_5 card expandable route
  IP nat inside source static 10.16.1.6 192.168.20.62 STATIC_NAT_6 card expandable route
  !
  VPN-REMOTE-SITE extended IP access list
  IP 192.168.20.48 allow the host 0.0.0.15 10.174.52.39
  IP 192.168.20.48 allow the host 0.0.0.15 10.174.52.40
  inside_nat_static_1 extended IP access list
  permit ip host 10.192.1.1 10.174.52.39
  permit ip host 10.192.1.1 10.174.52.40
  refuse an entire ip
  inside_nat_static_2 extended IP access list
  permit ip host 10.192.1.2 10.174.52.39
  permit ip host 10.192.1.2 10.174.52.40
  refuse an entire ip
  inside_nat_static_3 extended IP access list
  permit ip host 10.192.1.3 10.174.52.39
  permit ip host 10.192.1.3 10.174.52.40
  refuse an entire ip
  inside_nat_static_4 extended IP access list
  permit ip host 10.192.1.4 10.174.52.39
  permit ip host 10.192.1.4 10.174.52.40
  refuse an entire ip
  inside_nat_static_5 extended IP access list
  permit ip host 10.192.1.5 10.174.52.39
  permit ip host 10.192.1.5 10.174.52.40
  refuse an entire ip
  inside_nat_static_6 extended IP access list
  permit ip host 10.16.1.6 10.174.52.39
  permit ip host 10.16.1.6 10.174.52.40
  refuse an entire ip
  inside_nat_static_7 extended IP access list
  permit ip host 10.191.0.11 10.174.52.39
  permit ip host 10.191.0.11 10.174.52.40
  refuse an entire ip
  inside_nat_static_8 extended IP access list
  permit ip host 10.191.0.12 10.174.52.39
  permit ip host 10.191.0.12 10.174.52.40
  refuse an entire ip
  !
  access-list 100 remark self-generated by the configuration of the firewall SDM
  Access-list 100 = 1 SDM_ACL category note
  access-list 100 deny ip 172.20.32.0 0.0.0.31 all
  access-list 100 deny ip 255.255.255.255 host everything
  access-list 100 deny ip 127.0.0.0 0.255.255.255 everything
  access ip-list 100 permit a whole
  Remark SDM_ACL category of access list 101 = 17
  access-list 101 permit udp any host 192.168.20.62
  access-list 101 permit tcp any host 192.168.20.62
  access-list 101 permit udp any host 192.168.20.61
  access-list 101 permit tcp any host 192.168.20.61
  access-list 101 permit udp any host 192.168.20.59
  access-list 101 permit tcp any host 192.168.20.59
  access-list 101 permit udp any host 192.168.20.58
  access-list 101 permit tcp any host 192.168.20.58
  access-list 101 permit udp any host 192.168.20.57
  access-list 101 permit tcp any host 192.168.20.57
  access-list 101 permit udp any host 192.168.20.56
  access-list 101 permit tcp any host 192.168.20.56
  access-list 101 permit udp any host 192.168.20.55
  access-list 101 permit tcp any host 192.168.20.55
  access-list 101 permit udp any host 192.168.20.54
  access-list 101 permit tcp any host 192.168.20.54
  access-list 101 permit ip 10.174.52.40 host 192.168.20.48 0.0.0.15
  access-list 101 permit ip 10.174.52.39 host 192.168.20.48 0.0.0.15
  access-list 101 permit udp host 172.21.0.1 host 172.20.32.17 eq non500-isakmp
  access-list 101 permit udp host 172.21.0.1 host 172.20.32.17 eq isakmp
  access-list 101 permit esp 172.21.0.1 host 172.20.32.17
  access-list 101 permit ahp host 172.21.0.1 172.20.32.17
  access-list 101 permit icmp any host 172.20.32.17 - response
  access-list 101 permit icmp any host 172.20.32.17 time limit
  access-list 101 permit icmp any unreachable host 172.20.32.17
  access-list 101 permit udp any host isakmp 172.20.32.17 newspaper eq
  access-list 101 permit udp any host 172.20.32.17 eq non500-isakmp
  access-list 101 permit tcp any host 172.20.32.17 eq 443
  access-list 101 permit tcp any host 172.20.32.17 eq 22
  access-list 101 permit tcp any host 172.20.32.17 eq cmd
  access-list 101 deny ip 10.1.0.32 0.0.0.31 all
  access-list 101 deny ip 10.0.0.0 0.255.255.255 everything
  access-list 101 deny ip 172.16.0.0 0.15.255.255 all
  access-list 101 deny ip 192.168.0.0 0.0.255.255 everything
  access-list 101 deny ip 127.0.0.0 0.255.255.255 everything
  access-list 101 deny ip 255.255.255.255 host everything
  access-list 101 deny host ip 0.0.0.0 everything
  access-list 101 deny ip any any newspaper
  access-list 102 deny ip 192.168.20.48 0.0.0.15 host 10.174.52.40
  access-list 102 deny ip 192.168.20.48 0.0.0.15 host 10.174.52.39
  access-list 102 permit ip 10.1.0.32 0.0.0.31 all
  !
  allowed NO_NAT 1 route map
  corresponds to the IP 102
  !
  STATIC_NAT_8 allowed 10 route map
  inside_nat_static_8 match ip address
  !
  STATIC_NAT_5 allowed 10 route map
  inside_nat_static_5 match ip address
  !
  STATIC_NAT_4 allowed 10 route map
  inside_nat_static_4 match ip address
  !
  STATIC_NAT_7 allowed 10 route map
  inside_nat_static_7 match ip address
  !
  STATIC_NAT_6 allowed 10 route map
  inside_nat_static_6 match ip address
  !
  STATIC_NAT_1 allowed 10 route map
  inside_nat_static_1 match ip address
  !
  STATIC_NAT_3 allowed 10 route map
  inside_nat_static_3 match ip address
  !
  STATIC_NAT_2 allowed 10 route map
  inside_nat_static_2 match ip address
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  exec-timeout 30 0
  line to 0
  line vty 0 4
  privilege level 15
  local connection
  transport input telnet ssh
  line vty 5 15
  privilege level 15
  local connection
  transport input telnet ssh
  !
  Scheduler allocate 20000 1000
  end

  VPN-RTR-01 #.

  Hello

  Configuration looks ok to me.

  yet you can cross-reference with the following link:

  http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a0080223a59.shtml

  I hope this helps.

  Kind regards

  Anisha

  P.S.: Please mark this thread as answered if you feel that your query is resolved. Note the useful messages.

• Can I use the SATA port connected to an optical drive to plug in a hard drive?

  I have a Pavilion e9270t desktop, Win7 Pro SP1, and I want to connect 3 HARD drive to the motherboard. Can I do this? Can I use the SATA port connected to an optical drive to plug in a hard drive?

  Thanks, CHemming

  CHemming,

  I've not seen UEIF support in the existing BIOS.

  If your demand on a 3T led, re - consider a maximum of 2 T.

  If you ask to have 3 hard disks, then you can do it without harassing the present cable of CD.

  The cage of your system hard disk will support 3 hard disks. Manual upgrade service

  All you need are the SATA data and power cables. Your Board has 4 SATA data ports.

  When you report back after inspecting your system for SATA power cables, I will move the cables and adapters, if necessary.