Download the firmware from the 3030 VPN concentrator?

Similar Questions

• BW policy on VPN concentrator

  I've got a 3030 VPN concentrator with 4.0.1 B. I OS release have implemented a policy of BW for the VPN site - to many. Is it possible to check/see if the policy is applied (for example, deleted if traffic over the limit)?

  Thank you, Meg

  Monitoring - statistics - bandwidth Mgmt should give you some details.

• Redundancy of VPN concentrator

  Hello

  I have some doubts on the VRRP process in VPN concentrators.

  (1) the shared address group (private and public) is the same as addresses real Ip of the master, correct?

  For example, if I have it set up like this:

  Master: public (10.10.10.1); private (20.20.20.1)

  Backup: public (10.10.10.2); private (20.20.20.2)

  Shared group address must be: public (10.10.10.1) and private (20.20.20.1), correct?

  (2) if I already have a configured VPN concentrator and I would like to had another one for redundancy, and I maintain the same IP address as before for the master, I don't need to change anything to the neighbors of the VPN concentrator, right?

  (3) if the master goes down, the backup will take over VPN connections, users will always use the same IP address that before to connect by VPN. However if I want to access the administration of backup should I always access the correct 20.20.20.2?

  Thank you.

  Best regards

  Norberto

  Yes, you are absolutely right with your 3 statements.

  With your second question, if you want to add another VPN hub for redundancy, you can actually use the other VPN concentrator configuration and simply change the ip address that you assign to the public and private interfaces is unique. Everything must be the same it is the shared group addresses, as well as the role as a slave instead of master.

  Here is more information about VRRP for your reference:

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2284/products_tech_note09186a0080094490.shtml

  Hope that helps.

• Failover with VPN concentrator

  Hi all

  We have unique VPN concentrator which is the single point of failure, so need your help to mitigate the same

  The topology diagram is attached

  Site A and Site B.

  Site B has internet gateways where we have existing VPN.

  The intention to introduce the site A & Concentrator VPN gateway VPN is set as well

  Our design is provided for in

  Connectivity between the two locations & other office is managed by BGP.

  Default route is pointing at the Internet gateway.

  Info by the Internet Segment.

  ·         We have the SP independent IP range

  ·         Switching between 2 SP to site B is obtained by using the iBGP and eBGP

  Challenge: VPN concentrator single Point of failure (the Cisco VPN concentrator 3000)

  Here are the design goals

  ·         Implement internet gateways to the Site - A which will have redundancy level of Portal Site

  ·         Place on the VPN concentrator, which will act as a switch between site

  o If the concentrator vpn site B is out of box A VPN site must support all traffic.

  Concentrator VPN active o replica of Site B

  Is it possible to achieve the objectives of design.

  Please help about the VPN concentrator... How I can set VPN concentrator in failover mode... Just as we do firewalls?

  Help, please

  Hi yogesh,

  Concentrator VPN supports failover through VRRP. Please find the following for your reference document:

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2284/products_tech_note09186a0080094490.shtml

  As for the addition of failover for VPN concentrator, you happen to have a spare hub VPN to run VRRP?

  Don't know if you know, however, VPN concentrator comes end of life and the last delivery date was November 2007, as a result, you will not be able to buy VPN concentrator more.

  Here's the EOL notificatin for your reference:

  http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5743/ps5749/ps2284/prod_end-of-life_notice0900aecd805cd5a0.html

• Is there a way to download the firmware from a GUI Labview for an Actel FPGA or an ARM processor?

  I don't know if it's possible, but I have a couple of test that must be accomplished where several firmware is requested to be downloaded on the pcb. So, whenever I need to open Flash Pro (microsemi) and download the firmware for the Actel FPGA and then come back to labview. I wonder if there is a way to do it since my labview Vi so firmware will download automatically?

  Thank you

  You should be able to make TCL scripts inside your Flash Pro software.  They have a macro generator which will just imitate what you do.  Save this TCL file.  You can then load Flash Pro via the Exec System with a parameter pointing to this script file.  Flash Pro will then run this script and close once.

  

• aid required for the image backup vpn concentrator

  Hi, I am unable to download the vpn concentrator ios image to the tftp server. is someone can pls tell me what is the procedure for that. I can't find good documentation on it. pls help someone.

  concerning

  Assane

  Assane,

  You try to save the image of the hub to the VPN concentrator. Like the 4.7.2.D or the version E or F of the code. If this is the case, it is not possible to copy the image file from the hub to the tftp server.

  You must download the CEC file.

  He had an answer to your question earlier, but it pointed you on how to make a backup of your CONFIGURATION file.

  If this answers your question, feel free to write it down.

• Update the firmware from E4200v2 to 2.0.37.131047

  I hope that I don't have a big mistake buying Cisco... I just bought 3 routers E4200v2. As I am preparing to install, I try to update the firmware of 2.0.26-> 2.0.37.  I downloaded the zip file from the site of Cisco technical support and when unzipped the file is named FW_E4200_2.0.37.131047.SSA. When I try to do a manual update of the Admin page, I immediately get an image file is incorrect error.

  I downloaded the file three times in total on 2 separate networks and have tried three different browsers to try the update, with the same error. Support chat sessions proved worthless, they seem very scripted and the last of them has always tried to sell me a support contract...

  I want to stay with the classic firmware, even if there is no current bugs. Someone at - it a 'good' copy firmware 131047? It seems to me that one on the Cisco site is broken.

  You can rename the file FW_E4200_2.0.37.131047.SSA in FW_E4200_2.0.37.131047.IMG or update the automatic firmware on the router page (this 2.0.37.131047 firmware will allow you to update manually to 2.1.38.138880).

• How can I download the firmware for another platform

  Hello. I am trying to download the update of firmware for WRT160N (HW ver3) for a router connected to a XP machine.

  I download a bin file from a Mac and the download page for show me, but I think that's a Mac - I need the (32-bit) version of Windows XP (exe file)?

  Anyone know the direct link to download XP?

  p.s. I can't connect the XP machine to the Internet, it should be uploaded on the Mac.

  Firmware is not executable.  You downloaded the bin file, which is the firmware file.  Access to your administration pages of routers and fine to the firmware upgrade section and follow the instructions, and that it points to the bin file.

• Can not download the latest firmware for RVS 4000

  I tried to download the latest firmware for a few weeks.  Download simply told to leave, and then times out after a few minutes.  The download page shows that 1.2.10 version was published on 02/09/2008 and I can download the information/notes very well.

  Probble because it is on an FTP server and the RVS4000 cannot FTP at all.  Once I got to spend 1.2 FTP now works fine. I had to download it from my office, rather than at home.  I must say, now FTP works fine.  They did a really great job on this version of the firmware.

• VPN concentrator to transmit user group information to the IAS server?

  All,

  the feeling that the answer will be no, but we have replaced our MS RAS server using a VPN 3030 using an IAS server for authentication on a Win2k3 domain. The question we have is that some people share files FCP with people from other groups. HIA just validates the user password and verifies that they are in a private network allowed virtual group, which is then allowing them access more than they should, is it all the same for the hub the information on an IAS to control server as well? If not, does anyone know how to check popular ID using the remote VPN access are in the right group to which they are connected?

  Sorry I think I did the above clear as mud!

  Do not know your question, but you can cause the IAS server to assign a group to a user by adding the attribute class to a specific IAS security policy. Add class = OU = groupname; (do not omit the semicolon) for the attributes RADIUS IAS policy against which a user will be auth, and this will have an impact to the 3030, which will assign them to the appropriate group.

  I hope this helps.

• ASA Anyconnect VPN do not work or download the VPN client

  I have a Cisco ASA 5505 that I try to configure anyconnect VPN and thought, I've changed my setup several times but trying to access my static public IP address of the external IP address to download the image, I am not able to. Also when I do a package tracer I see he has been ignored through the acl when the packets from side to the ASA via port 443, it drops because of the ACL. My DMZ so will he look like something trying to access the ASA via the VPN's going to port 443. Here is my config

  XXXX # sh run
  : Saved
  :
  ASA Version 8.4 (3)
  !
  hostname XXXX
  search for domain name
  activate pFTzVNrKdD9x5rhT encrypted password
  zPBAmb8krxlXh.CH encrypted passwd
  names of
  !
  interface Ethernet0/0
  Outside-interface description
  switchport access vlan 20
  !
  interface Ethernet0/1
  Uplink DMZ description
  switchport access vlan 30
  !
  interface Ethernet0/2
  switchport access vlan 10
  !
  interface Ethernet0/3
  switchport access vlan 10
  !
  interface Ethernet0/4
  Ganymede + ID description
  switchport access vlan 10
  switchport monitor Ethernet0/0
  !
  interface Ethernet0/5
  switchport access vlan 10
  !
  interface Ethernet0/6
  switchport access vlan 10
  !
  interface Ethernet0/7
  Description Wireless_AP_Loft
  switchport access vlan 10
  !
  interface Vlan10
  nameif inside
  security-level 100
  IP 192.168.10.1 255.255.255.0
  !
  interface Vlan20
  nameif outside
  security-level 0
  IP address x.x.x.249 255.255.255.248
  !
  Vlan30 interface
  no interface before Vlan10
  nameif dmz
  security-level 50
  IP 172.16.30.1 255.255.255.0
  !
  boot system Disk0: / asa843 - k8.bin
  passive FTP mode
  DNS lookup field inside
  DNS domain-lookup outside
  DNS domain-lookup dmz
  DNS server-group DefaultDNS
  Name-Server 8.8.8.8
  Server name 8.8.4.4
  search for domain name
  network obj_any1 object
  subnet 0.0.0.0 0.0.0.0
  network of the Webserver_DMZ object
  Home 172.16.30.8
  network of the Mailserver_DMZ object
  Home 172.16.30.7
  the object DMZ network
  172.16.30.0 subnet 255.255.255.0
  network of the FTPserver_DMZ object
  Home 172.16.30.9
  network of the Public-IP-subnet object
  subnet x.x.x.248 255.255.255.248
  network of the FTPserver object
  Home 172.16.30.8
  network of the object inside
  192.168.10.0 subnet 255.255.255.0
  network of the VPN_SSL object
  10.101.4.0 subnet 255.255.255.0
  outside_in list extended access permit tcp any newspaper object Mailserver_DMZ eq www
  outside_in list extended access permit tcp any newspaper EQ 587 Mailserver_DMZ object
  outside_in list extended access permit tcp any newspaper SMTP object Mailserver_DMZ eq
  outside_in list extended access permit tcp any newspaper of the Mailserver_DMZ eq pop3 object
  outside_in list extended access permit tcp any newspaper EQ 2525 Mailserver_DMZ object
  outside_in list extended access permit tcp any newspaper of the Mailserver_DMZ eq imap4 object
  outside_in list extended access permit tcp any newspaper EQ 465 Mailserver_DMZ object
  outside_in list extended access permit tcp any newspaper EQ 993 Mailserver_DMZ object
  outside_in list extended access permit tcp any newspaper EQ 995 object Mailserver_DMZ
  outside_in list extended access permit tcp any newspaper EQ 5901 Mailserver_DMZ object
  outside_in list extended access permit tcp any newspaper Mailserver_DMZ eq https object
  Note access list ACL for VPN Tunnel from Split vpn_SplitTunnel
  vpn_SplitTunnel list standard access allowed 192.168.10.0 255.255.255.0
  pager lines 24
  Enable logging
  timestamp of the record
  exploitation forest-size of the buffer to 8192
  logging trap warnings
  asdm of logging of information
  Within 1500 MTU
  Outside 1500 MTU
  MTU 1500 dmz
  local pool VPN_SSL 10.101.4.1 - 10.101.4.4 255.255.255.0 IP mask
  ICMP unreachable rate-limit 1 burst-size 1
  ASDM image disk0: / asdm - 647.bin
  don't allow no asdm history
  ARP timeout 14400
  NAT (inside, outside) static source inside inside static destination VPN_SSL VPN_SSL
  NAT (exterior, Interior) static source VPN_SSL VPN_SSL
  !
  network obj_any1 object
  NAT static interface (indoor, outdoor)
  network of the Webserver_DMZ object
  NAT (dmz, outside) static x.x.x.250
  network of the Mailserver_DMZ object
  NAT (dmz, outside) static x.x.x.. 251
  the object DMZ network
  NAT (dmz, outside) static interface
  Access-group outside_in in external interface
  Route outside 0.0.0.0 0.0.0.0 x.x.x.254 1
  Timeout xlate 03:00
  Pat-xlate timeout 0:00:30
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  AAA-server protocol Ganymede HNIC +.
  AAA-server host 192.168.10.2 HNIC (inside)
  Timeout 60
  key *.
  identity of the user by default-domain LOCAL
  Console HTTP authentication AAA HNIC
  AAA console HNIC ssh authentication
  Console AAA authentication telnet HNIC
  AAA authentication secure-http-client
  http 192.168.10.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ca trustpoint localtrust
  registration auto
  Configure CRL
  Crypto ca trustpoint VPN_Articulate2day
  registration auto
  name of the object CN = vpn.articulate2day.com
  sslvpnkey key pair
  Configure CRL
  Telnet 192.168.10.0 255.255.255.0 inside
  Telnet timeout 30
  SSH 192.168.10.0 255.255.255.0 inside
  SSH timeout 15
  SSH version 2
  Console timeout 0
  No vpn-addr-assign aaa

  DHCP-client update dns
  dhcpd dns 8.8.8.8 8.8.4.4
  dhcpd outside auto_config
  !
  dhcpd address 192.168.10.100 - 192.168.10.150 inside
  dhcpd allow inside
  !
  dhcpd address dmz 172.16.30.20 - 172.16.30.23
  dhcpd enable dmz
  !
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  authenticate the NTP
  NTP server 192.168.10.2
  WebVPN
  allow outside
  AnyConnect image disk0:/anyconnect-linux-64-3.1.06079-k9.pkg 1
  AnyConnect enable
  tunnel-group-list activate
  internal VPN_SSL group policy
  VPN_SSL group policy attributes
  value of server DNS 8.8.8.8
  client ssl-VPN-tunnel-Protocol
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list vpn_SplitTunnel
  the address value VPN_SSL pools
  WebVPN
  activate AnyConnect ssl dtls
  AnyConnect Dungeon-Installer installed
  AnyConnect ssl keepalive 15
  AnyConnect ssl deflate compression
  AnyConnect ask enable
  ronmitch50 spn1SehCw8TvCzu7 encrypted password username
  username ronmitch50 attributes
  type of remote access service
  type tunnel-group VPN_SSL_Clients remote access
  attributes global-tunnel-group VPN_SSL_Clients
  address VPN_SSL pool
  Group Policy - by default-VPN_SSL
  tunnel-group VPN_SSL_Clients webvpn-attributes
  enable VPNSSL_GNS3 group-alias
  type tunnel-group VPN_SSL remote access
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the rsh
  inspect the rtsp
  inspect sqlnet
  inspect the skinny
  inspect sunrpc
  inspect xdmcp
  inspect the sip
  inspect the netbios
  inspect the tftp
  Review the ip options
  inspect esmtp
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  call-home
  Profile of CiscoTAC-1
  no active account
  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
  email address of destination [email protected] / * /
  destination-mode http transport
  Subscribe to alert-group diagnosis
  Subscribe to alert-group environment
  Subscribe to alert-group monthly periodic inventory
  monthly periodicals to subscribe to alert-group configuration
  daily periodic subscribe to alert-group telemetry
  Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e
  : end

  XXXX #.

  You do not have this configuration:

   object network DMZ nat (dmz,outside) static interface

  Try and take (or delete):

   object network DMZ nat (dmz,outside) dynamic interface

• problem of traffic flow with tunnel created the network with a tunnel to a VPN concentrator

  Hi, I worked with Cisco and the seller for 2 weeks on this.II am hoping that what we are witnessing will ring a Bell with someone.

  Some basic information:

  I work at a seller who needs from one site to the other tunnel.  There are currently 1 site to another with the seller using a Juniper SSG, which works without incident in my system.  I'm transitioning to routers Cisco 2811 and put in place a new tunnel with the seller for the 2800 uses a different public ip address in my address range.  So my network has 2 tunnels with the provider that uses a Cisco VPN concentrator.  The hosts behind the tunnel use 20x.x.x.x public IP addresses.

  My Cisco router will create a tunnel, but I can't not to hosts on the network of the provider through the Cisco 2811, but I can't get through the tunnel of Juniper.  The seller sees my packages and provider host meets them and sends them to the tunnel.  They never reach the external interface on my Cisco router.

  I'm from the external interface so that my endpoint and the peers are the same IP address.  (note, I tried to do a static NAT and have an address of tunnel and my different host to the same result.)  Cisco has confirmed that I do have 2 addresses different and this configuration was a success with the creation of another successful tunnels toa different network.)

  I tested this configuration on a network of transit area before moving the router to the production network and my Cisco 2811 has managed to create the tunnel and ping the inside host.  Once we moved the router at camp, we can no longer ping on the host behind the seller tunnel.   The seller assured me that the tunnel setting is exactly the same, and he sees his host to send traffic to the tunnel.  The seller seems well versed with the VPN concentrator and manages connections for many customers successfully.

  The seller has a second VPN concentrator on a separate network and I can connect to this VPN concentrator with success of the Cisco 2811 who is having problems with the hub, which has also a tunnel with Gin.

  Here is what we have done so far:

  (1) confirm the config with the help of Cisco 2811.  The tunnel is up.  SH cyrpto ipa wristwatch tunnel upward.
  (2) turn on Nat - T side of the tunnel VPN landscapers
  (3) confirm that the traffic flows properly a tunnel on another network (which would indicate that the Cisco config is ok)
  (4) successfully, tunnel and reach a different configuration hosting
  (5) to confirm all the settings of tunnel with the seller
  (6) the seller confirmed that his side host has no way and that it points to the default gateway
  (7) to rebuild the tunnel from scratch
  8) confirm with our ISP that no way divert traffic elsewhere.  My gateway lSP sees my directly connected external address.
  (9) confirm that the ACL matches with the seller
  (10) I can't get the Juniper because he is in production and in constant use

  Is there a known issue with the help of a VPN concentrator to connect to 2 tunnels on the same 28 network range?

  Options or ideas are welcome.  I had countless sessions with Cisco webex, but do not have access to the hub of the seller.  I can forward suggestions.

  Here's a code

  crypto ISAKMP policy 1
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 2
  BA 3des
  preshared authentication
  Group 2

  Crypto ipsec transform-set mytrans aes - esp esp-sha-hmac

  Crypto-map dynamic dynmap 30
  Set transform-set RIGHT

  ISAKMP crypto key address No.-xauth

  interface FastEthernet0/0
  Description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE $ 0/0
  IP 255.255.255.240
  IP access-group 107 to
  IP access-group out 106
  NAT outside IP
  IP virtual-reassembly
  route IP cache flow
  automatic duplex
  automatic speed
  crypto mymap map

  logging of access lists (applied outside to get an idea of what will happen.  No esp traffic happens, he has never hits)

  allowed access list 106 esp host host newspaper
  106 ip access list allow a whole
  allowed access list 107 esp host host Journal
  access-list 107 permit ip host host Journal

  access-list 107 permit ip host host Journal
  107 ip access list allow a whole

  Crypto isa HS her
  IPv4 Crypto ISAKMP Security Association
  status of DST CBC State conn-id slot
    QM_IDLE ASSETS 0 1010

  "Mymap" ipsec-isakmp crypto map 1
  Peer =.
  Extend the 116 IP access list
  access - list 116 permit ip host host (which is a public IP address))
  Current counterpart:
  Life safety association: 4608000 kilobytes / 2800 seconds
  PFS (Y/N): N
  Transform sets = {}
  myTrans,
  }

  OK - so I have messed around the lab for 20 minutes and came up with the below (ip are IP test:-)

  (4) ip nat pool crypto-nat 10.1.1.1 10.1.1.1 prefix length 30 <> it comes to the new address of NAT

  !
  (1) ip nat inside source list 102 interface FastEthernet0/0 overload <> it comes to the interface by default NAT

  !
  IP nat inside source map route overload of crypto-nat of crypto-nat pool <> it is the policy of the NAT function

  !

  (6) access-list 101 permit ip 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255 <> defines the IP source and destination traffic

  !

  (2) access-list 102 deny ip 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255 <> does not NAT the normal communication

  (3) access-list 102 deny ip 10.1.1.1 host 172.16.2.0 0.0.0.255 <> does not re - NAT NAT

  (1) access-list 102 permit ip 172.16.1.0 0.0.0.255 any <> allows everyone else to use the IP Address of the interface for NAT

  !

  (5) crypto-nat route-map permit 5 <> condition for the specific required NAT
  corresponds to the IP 101 <> game of traffic source and destination IP must be NAT'td

  (7) access list 103 permit ip 10.1.1.1 host 172.16.2.0 0.0.0.255 <> crypto acl

  Then, how the works above, when a package with the what IP 172.16.1.0/24 source wants to leave the router to connect to google, say the source will change to IP interface (1).  When 172.16.1.0/24 wants to talk to172.16.2.0/24, it does not get translated (2).  When the remote end traffic equaled the following clause of NAT - the already NAT'td IP will not be affected again (3) when a host 172.16.1.0/24 wants to communicate with 172.16.2.20/24 we need a NAT NAT specific pool is required (4).  We must define a method of specific traffic to apply the NAT with a roadmap (5) which applies only when the specific traffic (6), then simply define the interesting traffic to the VPN to initiate and enable comms (7) corresponding

• BlackBerry Smartphones to install the Firmware from another provider?

  My operator: Rogers

  Device: 8900

  Environment: BES Express 5.0.1

  I need to install Device Software 5.0 to synchronize my public folders wireless.

  Rogers only has not the 5.0 firmware updated. However, I found it for the 8900 on Vodafone UK downloads.

  No damage in this load?

  Operating system device provided are "released" by specific carriers once that they are certified and trained to their support technicians, but still, you are able to load any carrier the same model by following the instructions below.

  Some users might worry that they will void their warranty of device by loading an OS from another carrier. There is really nothing to fear. Read more information on it here:
  http://www.port3101.org/power-users/296-BlackBerry-OS-upgrade-including-betas-myths-dispelled.html

  Make a backup of your device first, using Desktop Manager > backup. Close the office at the end Manager.

  1. download the OS files to the PC then install on the PC by running (double click) the downloaded file.
  2. go in c:\program files Research in motion\apploader and delete the file named "vendor.xml."
  3. plug in the BB and double-click on "Loader.exe." It is located in the same place as the above vendor.xml file.

• What has replaced the vpn concentrator?

  Greenhorn here, I was not to sit in this place.  We have three remote sites, sister of institutions, we share an app with.  Host us the app.  A site has a configuration of vpn concentrator, the other two use a leased from point to point line. They each have a router that connects to a single router.  They want to replace the lines leased by using a vpn.  Do the digging, I see that the hubs are EOL.

  So, what is used to replace the hub today?  What is a solution today from leased lines? They are all poor profit. My guess is that they will say look on Ebay for a hub if the solution is too expensive.

  Thanks Jim

  Jim

  The package of security (CISCO2901-SEC/K9 or CISCO2921-SEC/K9) is the convenient way to get the combination of the router, the software and licenses you will need. I don't think that you need something more elaborate than one of these security packages.

  I think one of these would be a good choice for you. It's been a while since I looked at the details of these routers. My recollection is that the 2921 offers more power, more interfaces and a few other benefits and would be attractive to many of us. But I think I understand your needs, I believe that the 2901 router cheaper and quite adequate for you.

  HTH

  Rick

• My matshta BD - MLT UJ230AS suddenly quit. Downloaded the firmware update. Win 7 pro 64

  Downloaded and updated firmware from sony istalled. No help.

  Hello

  Welcome to the community of Sony.

  Try to perform all the steps here: http://www.kb.sony.com/selfservice/documentLink.do?externalId=C1005868

  If the problem persists, perform a full system recovery. Restart the computer, keep pressing the F10 key continuously, press on enter key at the start of editing option, Recovery Wizard, select start and click on ignore VAIO Care rescue (if you do not want to back up data) to start the system recovery process.

  You can contact Sony Service support team for further assistance Team here: http://esupport.sony.com/US/p/service.pl

  Note: You can perform system recovery if you are using the same operating system installed at the factory.

  Kind regards

  Miguel