EA6500 NAT several IP addresses

Similar Questions

• Several "personal address book" in the Contacts

  As you can see from the screenshots, I have several "personal address book" in the Contacts. Right click on any address book of Contacts and remove it is gray. I have a gMail address book, a special group, I created and collected, too.

  So I have several abook.mab displaying in Windows Explorer; one is 56KO, others are 2kmb. If I move the files, they are recreated everytime I run the application of TB.

  It started when I restored a profile in a clean install of TB. How can I solve this further?

  No additional input or suggestion so I backed up my address book, uninstalled TB, reinstalled TB and imported the .csv backup. This solves the problem, as can be expected.

  Too bad, it was necessary that I had to create, download, and reset all.

• I have several email addresses that I read in Thunderbird and get repetitive spam. Copy of the message filter settings?

  I have several email addresses of function based for my business. I get spam. The same spam seems to come in many of my public email addresses. I have a spam filter based on the server, but make several kinds of spam through to my office. I would like to be able to maintain a list of filters to message for these separate email addresses, or to be able to copy my filter settings of my primary e-mail address to each message filter tool 4 other address e-mail. Is available or possible?

  Using filters static to combat spam is almost desperate. If you want to try it anyway...

  The file that stores the parameters of your filter is called «msgFilterRules.dat» Each account has its own "msgFilterRules.dat" file, which is stored in the 'Local' directory for the account in your profile. The Local Directory is specified at the bottom of the tools-> account settings-> settings of the server, just by the Browse button. Filters for local folders are stored in the directory Mail\Local folders in the profile.

• How to for NAT internal IP address so it only gets teeth when you go to a particular destination and is also the United Nations concerns

  Hi all

  I have the following 2 sites. A branch, a data center.  The two race NPA 8.3.

  (192.168.120.1 (L3SW) - ASA)-PUBLIC INTERNET-(202.xxx.xx.242) ASA

  DATA CENTER                                                                           BRANCH

  I need 192.168.120.1 to be able to do a ping 202.xxx.xx.242 for the purpose of the SLA, which means that I need to NAT to break the internet. However, I also need to be able to SSH to 192.168.120.1 during several VPN tunnels to other branches on private subnets.

  How can I configure a NAT to my ASA rule so that 192.168.120.1 tries to talk to 202.xxx.xx.242, NAT 192.168.120.1 to the internet, but all other destinations than 192.168.120.1 should talk to the service (IE LAN via VPN), do not NAT?

  Hello Dean,

  I would recommend a NAT twice basically is the same terminology as a 'political NAT', you can specify that your source host will be translated to some IP only when it is addressed to some destination or destinations, so, basically, you can create a network of the object with the IP address of the source, another network object with the public IP address you want to use to translate the 192.168.x.x address and then click the destination network object, so it will be like this:

  network of the IP_192.168.120.1 object

  Home 192.168.120.1

  network of the TRANSLATED_IP_FOR_192.168.120.X object

  host 99.99.99.99 -> an example

  Network IP_202.XXX of the object. XXX.242

  202.xxx of the host. XXX.242

  NAT static IP_192.168.120.1 TRANSLATED_IP_FOR_192.168.120.X destination (indoor, outdoor) static source IP_202.XXX. XXX.242 IP_202.XXX. XXX.242

  In this way traffic that comes 192.168.120.1 form through a VPN tunnel, it will not be matched this NAT statement, since this statements NAT says that he will only translated when switching to the 202.XXX. Address xxx.242, now you can run a package tracer and see how it goes,

  Please note and hides as correct this answer if it helped you, keep me posted!

  Thank you

  David Castro,

• PIX 501 with public several IP addresses

  Hi all

  I have the following configuration:

  audience of 6 IP addresses, for example: 123.123.123.1 - 6 255.255.255.248

  My provider, I have a Zyxel modem which has the 123.123.123.1 IP address, which is also the default gateway for my PIX.

  The PIX is connected to a modem Zyxel.

  The external interface of the PIX, 123.123.123.2 and the inside interface 192.168.1.1 255.255.255.0

  At my home I have several client computers and network servers 3.

  Client computers must be able to connect to the internet.

  Server should have the public IP 123.123.123.3 and 192.168.52.3 inside

  Server B must have public IP 123.123.123.4 and 192.168.52.4 inside

  Server C must have public IP 123.123.123.5 and 192.168.52.5 inside

  Server 3 are Web servers and should be accessible from the outside on ports 80 and 443.

  My current setup is:

  See the pixfirewall (config) # executes
  : Saved
  :
  6.3 (5) PIX version
  interface ethernet0 car
  interface ethernet1 100full
  ethernet0 nameif outside security0
  nameif ethernet1 inside the security100
  activate the encrypted password
  encrypted passwd
  pixfirewall hostname
  domain ciscopix.com
  fixup protocol dns-length maximum 512
  fixup protocol ftp 21
  fixup protocol h323 h225 1720
  fixup protocol h323 ras 1718-1719
  fixup protocol http 80
  fixup protocol rsh 514
  fixup protocol rtsp 554
  fixup protocol sip 5060
  fixup protocol sip udp 5060
  fixup protocol 2000 skinny
  fixup protocol smtp 25
  fixup protocol sqlnet 1521
  fixup protocol tftp 69
  names of
  object-group service tcp web
  port-object eq www
  EQ object of the https port
  OUTSIDE of the ip access list allow any host 123.123.123.3
  pager lines 24
  Outside 1500 MTU
  Within 1500 MTU
  IP outdoor 123.123.123.2 255.255.255.248
  IP address inside 192.168.1.1 255.255.255.0
  alarm action IP verification of information
  alarm action attack IP audit
  location of PDM 192.168.1.0 255.255.255.0 inside
  history of PDM activate
  ARP timeout 14400
  Global 1 interface (outside)
  NAT (inside) 1 192.168.1.0 255.255.255.0 0 0
  static (inside, outside) tcp 123.123.123.3 www 192.168.1.3 www netmask 255.255.255.255 0 0
  Access-group OUTSIDE in interface outside
  Route outside 0.0.0.0 0.0.0.0 123.123.123.1 1
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225
  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00
  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00
  Timeout, uauth 0:05:00 absolute
  GANYMEDE + Protocol Ganymede + AAA-server
  AAA-server GANYMEDE + 3 max-failed-attempts
  AAA-server GANYMEDE + deadtime 10
  RADIUS Protocol RADIUS AAA server
  AAA-server RADIUS 3 max-failed-attempts
  AAA-RADIUS deadtime 10 Server
  AAA-server local LOCAL Protocol
  Enable http server
  http 192.168.1.0 255.255.255.0 inside
  http 192.168.2.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  SNMP-Server Community public
  No trap to activate snmp Server
  enable floodguard
  Telnet 192.168.1.0 255.255.255.0 inside
  Telnet 192.168.2.0 255.255.255.0 inside
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  Terminal width 80
  : end
  pixfirewall (config) #.

  This acutally configuration only allows connections from the inside to the outside but not from the outside to connect to the server.

  I'm sure miss me something stupid, maybe someone could give me a hint?

  Mike

  Setup looks quite right, assuming that you only test connectivity to Server A (123.123.123.3) as it is the only one configured.

  I suggest that you make 'clear xlate' and 'clear the arp' and test again. I would check to see if your modem has the ARP entry for 123.123.123.3 and it should point to the ethernet0 PIX MAC address.

• Several public address on a Pix outside interface spaces

  I currently have a pix (6.3) with the external interface configured as part of a public ip address space of 27 bits. We are running out of addresses and need to buy another beach. Can I make this work using the pix existing and without alteration of the existing range in use? Basically, can I get a new address to my existing pix space and configure static for this space, even if the interface is assigned an ip address on another beach?

  YES, you can do quite easily.

  Example: your external interface is

  129.174.1.1/27. Now, you want to add another

  141.141.141.0/24 to your external interface.

  Is this correct?

  The technique is to use the Routing IP NAT Pool.

  In this example, you add a static route

  on the router upstream like this:

  IP route 141.141.141.0 255.255.255.0 129.174.1.1

  Now you can make static on the pix as NAT

  this:

  static (i, o) 141.141.141.0 192.168.1.0 netmask 255.255.255.0

  Easy right?

• IPSEC VPN from Site to Site - NAT problem with address management

  Hi all

  I have two Cisco ASA 5505 performing of IPSEC Site to Site VPN. All traffic inside each firewall through the VPN tunnel and I have full connectivity. From site A, I can connect to the inside address of the ASA at the site B and launch of the ASDM or SSH, etc.

  The problem I have is when I'm logged on the ASA site B management traffic is given the external address. I created this as interesting traffic to get it to go through the VPN but I need to use the inside address of ASA B. The following is possible:

  • If I can make the ASA Site B to use inside interface as its address management (I already have management access to the inside Interface)
  • I have NAT can address external interfaces to Site B before moving through the VPN tunnel management traffic so that it appears to come from Site B inside the address
  • I can NAT VPN traffic as it appears in the Site A for management traffic to Site B on the right address.

  The problem is that my PRACTICE Please also come from this address and I need the application before being on an internal address to even if my CA.

  Thanks for any help.

  Ian

  Thanks, I understand what you are trying to achieve now.

  However, I think that I don't have good news for you. Unfortunately PEIE request can be initiated of the SAA within the interface, as there is no option to start the query from the inside interface. With other features of management such as AAA, logging, you have an option to specify what ASA desired originally to demand from interface, but CEP doesn't have this option.

  Here's how you can configure under the trustpoint crypto, but unfortunately by specifying the interface doesn't not part of option:

  http://www.Cisco.com/en/us/docs/security/ASA/asa84/command/reference/C5.html#wp2262210

• How can I configure Thunderbird to several email addresses

  I'm on Eudora 7 to manage 6 on a Windows XP SP3 computer email accounts. I want to install Thunderbird on the same machine and import e-mail addresses. I have Setup Eudora to store the data files for each e-mail address in a different data directory. This allows me to have another icon on the desktop for each e-mail account. Click on an icon to start Eudora with the e-mail address data stored in a specific directory.

  What I don't know, is how to make Thunderbird import the different e-mail addresses of Eudora in Thunderbird and how to separate individual e-mail address data in Thunderbird.

  Any help would be appreciated.

  To back up a little here. When you install Thunderbird it will import your Eudora mail and settings (both in regards to Thunderbird). So I suggest that you first import your mail (it does not Eudora) and see if it made a mess of your installation or not. I'm not punting.

  You should end up with a folder in the pane of folders with Eudora and your structure of folders below that.

  The main difference of Thunderbird to Eudora of Thunderbird do not detach attachments and store them somewhere else.

  Note that I don't think the preference of Thunderbird to use the global Inbox was changed, so it is by default in the global inbox for multiple POP email accounts Menu (Alt + T) tools > account settings > server settings > button Advanced is where the parameter disable the use of the global Inbox by account is hidden.

• Router seems several MAC addresses

  My WRT54G MAC address of the router (as written on the label on the bottom) ends with F5. LELA shows the address MAC LAN like ending by F5. It shows the addrerss WAN MAC as ending in F6. My ISP used the F6 key to connect to their network. I have a wireless internet radio which can detect the router as ending with F7.

  Why is this? How can I know who is the 'real' MAC address?

  Each network on the router interface must have a unique MAC address... router has 3 logical network interfaces, you discovered... one is the WAN interface, which is also associated with the physical interface that connects to your ISP. Another is the LAN interface that is associated with the network which is jumpered to 4 LAN ports (which are interfaces on the switch that is built into the router), and the last of them is the wireless interface, which is connected to the adapter wireless physical built into the router. The router keeps track of where each device that is connected by using of these devices unique MAC addresses and sends traffic to the necessary interface based on his knowledge of the combinations of IP addresses and MAC addresses.

  'Real' address of the router can be one of three, according to the network from which you look at the router. It seems, based on your post, that Linksys has taken the MAC address of the LAN interface of the document as the 'router MAC address '. All three are 'real '... MAC addresses

• BlackBerry Smartphones Can I have out of several email addresses on one device?

  I have a BB 8700 g (t-mobile), but I'm ready to upgrade/change of provider.  Device mgr software is ver 4.7. I have and intend to keep, NON-enterprise service.  I have now sent E-mail to the device of multiple e-mail addresses, but when you reply, the answers come out an email address only (business).

  Is there any combination of device/software/service provider of BB that allows to choose the address of mail electronics outbound/return, with at least 2 possible addresses?  I am very interested to separate my business and personal e-mail responses.

  Thank you!

  JF

  I think I understand completely.

  1. you are on a personal account of BIS (whether enamel work, or who is not serious, just BIS).

  2. all BIS accounts include the ability to install and push TEN email addresses to a device.

  3. do not use "transfer" of your e-mail server for a single email address... it's like trying to carry chickens in a truck bed, it doesn't quite work.

  4. ALL these addresses you "passed" to an e-mail and pushed the need for BlackBerry to be individually Setup on your BIS account (see link above). You enter the email add and the pw, bam and fact.

  As you configure the BRI account, you will see where you can set reply address, etc.

  5 UNfoward all e-mails sent to the primary address one.

  6. you will get "Activated" messages for each e-mail account on the account of the BIS. After that, you can go to Options > advanced > default Services again and see them listed. As stated above, now set your default e-mail address to that favorite.

  In Messages > Options > Email reconciliation (this migth be slightly different on your device, but the glance here), you can delete it and reconcile the options to delete messages from the server, etc..

  You have the options to "send using the" now, the whole book of e-mail on the device. You can change them at will, in all cases, except to respond to an email as described previously.

  This will help you need? This capability is available on all BlackBerry devices... your 8700 and new devices. If you have the 8700 now, you'd love it "BOLD", but I'm not here to sell devices

• How to use a single Ethernet interface as a 802. 1 q trunk with several logical addresses in Windows XP?

  Here's my question (s).  I have a rack of equipment that is used in a lab environment (8 routers workgroup and workgroup switches 8).  I have that devices connected to a series of core (1 core router and 3 switches to base) devices.  On one of my basic switches, 24 port is configured as a trunk port, allowing 8 all working group devices to connect and use the TFTP services on a computer.  This is my issue starts.

  My computer is a Dell Optiplex running Windows XP Professional SP3.  It has two physical Ethernet NIC cards, being a Broadcom NetExtreme 57XX and the other is a Linksys EG1032.  On the computer I was using before, Linksys NIC was subdivided into logic miniports and authorized for 802. 1 q trunking base switch.  It's how each workgroup devices then used services TFTP on the PC.  I need help in this reconfiguration on the current computer.

  Can someone help me or point me in the direction of 'how to' articles?  Thanks in advance.

  Jim

  Hi Jim,.

  Your Windows XP question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the forum TechNet for assistance:

  http://social.technet.Microsoft.com/forums/en/itproxpsp/threads

  Hope the helps of information.

• Several addresses on EA2700

  I discovered several MAC addresses on my computer of 'control' / home EA2700. I don't know what causes it or how to remove them. Help would be appreciated.

  I discovered this while trying to find the iPod of my daughter who is connected, but does not appear on the list of devices. Therefore, I can't change the Parental control - that can be VERY problemmatic!

  Hope a solution will solve these two problems.

  

  Dear blurred,

  Suddenly, it is to me that this happened only 15 months ago. Solution? Turn off the main computer with more than one MAC address. Go to another computer on the same or different network, pull the list of devices on page SmartWiFi upward and remove the main computer with multiple MAC addresses. Powercycle the router and fire and then to the main computer. First try I was up to 3 addresses 9 MAC. Second trial up to only one address. Daughter of go - connected iPod and BOOM, he was on the list of devices. Checked Parental control - access all the time... that fixed too!

  MUCH easier than the resets of the factory, starting over, hanging out of hard and put wire in place from scratch.

• Can I use the address of the public by peers as PAT or NAT address also?

  With the help of an ASA 5505, I've only private local network IPs and a public IP address from my ISP for the address of the peer. Can I use this same internal peers like PAT or NAT for my private IP local IP address?  Remote VPN location policy is to not allow IP addresses private on their local network, so that they want public addresses to me. If possible, could you please show me an example of a config 5505 simple using the following IP addresses? (I need not the IPSec configuration, only the ACL/NAT config)

  I have four hosts who need to access a device at the remote location via an IPSec tunnel.  They are:

  local hosts:

  192.168.2.10, 11, 12, 13

  Say my public address peer is 205.188.15.34 and the remote peer is 175.10.144.52

  remote host:

  168.12.10.6

  Thanks for any help.

  jkeeffe wrote:
  Using an ASA-5505, I only have private IPs on the local LAN and one public IP address from my ISP for the peer address. Can I use that same peer IP address as a PAT or NAT for my internal local private IPs?  The remote VPN location policy is to not allow private IP address on to their local network, so they want public addresses from me. If that is possible, could you please show me a simple 5505 config example using the following IPs? (I don't need the IPSec config, only the ACL/NAT config)
  I have four hosts that need to access a device at the remote location via an IPSec tunnel.  They are:
  local hosts:
  192.168.2.10, 11, 12, 13
  Say my public peer address is 205.188.15.34 and the remote peer is 175.10.144.52
  remote host:
  168.12.10.6
  thanks for any help.
  

  Yes you can do it.

  the localhosts object-group network

  the object-network 192.168.2.10 host

  host of the object-Network 192.168.2.11

  etc...

  list the host 168.12.10.6 ip object-group localhosts allowed VPN access

  NAT (inside) 1 VPN access list

  Global 1 interface (outside)

  Crypto-map list would then look like this-

  VPNTRAFFIC ip host 205.188.15.34 access list permit 168.12.10.6

  One thing to note. The NAT example above is political NAT IE. If the source is-> 13 192.168.2.10 and the destination is 168.12.10.6 then the source to the public IP 205.188.15.34 NAT. However you may already have something like this in your config file-

  NAT (inside) 1 0.0.0.0 0.0.0.0

  Global 1 interface (outside)

  That is to say. you're natting all your addresses private to the public interface address for internet access in general. If you don't have that then there is no need to do NAT policy and you can't miss those lines that source addresses will be Natted anyway.

  the localhosts object-group network

  the object-network 192.168.2.10 host

  host of the object-Network 192.168.2.11

  etc...

  
  

  list the host 168.12.10.6 ip object-group localhosts allowed VPN access

  
  

  NAT (inside) 1 VPN access list

  Global 1 interface (outside)

  Jon

• several e-mail addresses

  Is it possible to add several email addresses in the Email 'for' widget forms so that more than one address receives the content?

  Thank you

  Hello

  Yes, separated by semicolons, here is the screenshot

  

• Address MAC WUMC710 problems when using MAC filtering

  I recently bought the point WUMC710-HQ AC wireless to connect to my router EA6500.  Generally, the WUMC710 seems to work.  I was able to connect to the router wirelessly on the 5 GHz band and flow EA6500 a NetFlix video with no problems.

  However, there is a major problem that comes makes no logical sense for me:

  When I turn on the wireless MAC address filtering of the EA6500, the WUMC710 does not connect to the EA6500router.

  Yet, I 8 eight other wireless devices on my network which connect very well to the EA6500 when the MAC address filtering is enabled.  Thus, the question seems to outright to WUMC710.

  The address printed on the product shipment to the ends of the box with numbers XX:1 d.

  This address matches the address printed at the bottom of the WUMC710 MAC. (normal)

  My EA6500 router recognizes this MAC address as the correct MAC associated with the WUMC710 (when MAC filtering is enabled).  But as soon as the MAC filtering is turned on, the WUMC710 does not recover to the router. (I checked the MAC address, that I walked into the filter at least a dozen times, and she entered correct - but all my other wireless devices connect OK).

  This is a point that seems strange on the MAC address associated to the WUMC710:

  When I am able to connect to the WUMC710, State--> tab Device illustrated the right address MAC I use to filter.  But when I check the status--> network wireless tab, it displays the MAC address wireless like: XX:1E.

  So, now, I try to get into this 'new' MAC address in the MAC of the router EA6500 filter just to see if it will work with this MAC address "without papers" of the wireless device.  At first, it seems to work.  The WUMC710 of blue light will come on indicating that a wireless connection has been established with the router.  BUT nowhere in the web interface of EA6500 says that the WUMC710 has a DHCP connection with the router.  And, if I connect my laptop directly to one of the WUMC710 Ethernet ports, there is no connection to the Internet via the router (as long as the MAC filtering is enabled).

  I did Factory Reset a few times now and no difference.

  Firmware is the factory default - it is there no update of the firmware available, yet.

  I spent several hours trying to understand what is happening with this device and go round and round in circles in trying different things.  I can only conclude WUMC710-AC is defective, or requires a firmware fix - but none are available.

  Am I missing something here?  Or Cisco does suggest a fix for the firmware for the WUMC710-AC?

  (I don't really like to run my network wireless MAC address filtering active wireless.)

  Kind regards

  Jeff

  Cisco-Linksys 2 support with me today confirmed what I thought it was a possible firmware bug, is actually undocumented features of the WUMC710, by design.  And they agreed that they will update the documentation for WUMC710 to take account of these features and system requirements.

  Just like a reference to new users of the WUMC710 AC wireless bridge, I will summarize here the requirements for WUMC710 wireless bridge to work properly with the router, Cisco-Linksys AC6500 Wireless, when MAC filtering is enabled.  If all goes well, this information will save some other people the many hours I spent to dig through the documentation and the FAQ to try to understand what it takes to connect successfully devices behind the bridge of WUMC710 to the AC6500 router - when the MAC address filtering is enabled:

  The following MAC address must be entered in the AC6500 router table filtering of MAC addresses to connect devices behind the bridge WUMC710 wireless to the Internet:

  1. The MAC address of the bridge wireless WUMC710 wireless.
  2. The address MAC LAN of the WUMC710 bridge.
  3. Addresses MAC LAN of each LAN device connected to the LAN Ports of the WUMC710 bridge.

  That in a few words.

  With this information, devices behind the WUMC710 of Internet connection (with the active MAC filtering) is a breeze.