firewall router

Similar Questions

• After the death of firewall router in an outtage power yesterday I replaced my router have restored internet access, but none of my corporate office offices can access our network printer/scanner.

  yerterday morning, that we had a power outage at my place of business. When power has been restored we can't access internet from any one of our desktop computers. After working with a material MFG co troubleshotter. our firewall router NETGEAR, it has been determined that the equipment was defective. They offered to replace the camera for only the shipping charges, I felt an acceptable solution. Then I was told that with bureaucracy, it would take two weeks to get the new unit. Well, my choice was then to set for two weeks and slowly go out of business or buying a new router. I have relpaced the unit with another mod. Netgear router and this quickly got back up again, at least if we could access our system of internal accounting and the internet. My problem is as it is now that I can't access our office network printer.scanner (kyoceraMita) of any one of my desktops. At this point, I'd appreciate any help. I own my business, but am not a computer guy of any measurment known to man. I have this idea, maybe it's a simple software for all fit everyone access to what they need, but I don't know what it is maybe. If sufficient information, in my view, that I could probably fix the problem myself without providing any benefits of outdoor programming.

  The problem now is that the router has changed, the addresses IP, subnet mask, default gateway address, network security wireless network wireless security password and other settings no longer correspond to the original router.  As you said that the SCP can all see each other, you need to see Kyocera and network user's guide 'unit' in order to find the IP address, subnet mask and other network setting the configuration parameters 'method '.

• ESXi and Vyatta as a firewall/router before

  Hello

  I'm looking for the solution network on ESXi with Vyatta as fron firewall/router configuration. Basically, I would like to define Vyatta, therefore all VPS traffic will go through it, so I could limit the bandwidth IPs ect null routed.

  Please note that I can't use NAT, I have public IP for access to the VPS. For now, I have two VLANs, please refer below because I'm not sure if it is actually possible with ESXi without any external hardware device.

  

  How many public IP addresses will be you?  To deal with the VMs you will configure the firewalls VM with a NETWORK adapter on the vSwitch with Internet connectivity, then a 2nd NETWORK card on a vSwitch "DMZ".  The vSwitch DMZ can be physical isolation (disconnected from any NETWORK adapter).  All traffic on the road to wil VMs through the firewall VM.

  The other question becomes how you access ESXi for management purposes.  Ideally, you do not directly connected to the Internet but place behind a firewall.  Ideally, it would be a separate device.   You could do it with a virtual machine, but you risk a complete access loss if the virtual machine is down.

  Dave

  VMware communities user moderator

  Now available - vSphere Quick Start Guide

  You have a system or a PCI with VMDirectPath?  Submit your specifications to Officieux VMDirectPath HCL.

• Need a recommendation for a second firewall router

  I have currently a second router connected to the LAN port of the #1 router/WiFi in order to create a firewall between the Local area network of my #1 WiFi router and a PC which is connected by a cable Cat5 to the second router. This second router has no need of WiFi and only needs to support a PC, to call the parent PC.  For proof of concept that I used an old router, GigaFast EE400 - R 10/100 Mbit / s, it works but I think it slows my PC parent.

  So, I would like to replace this old second router with something reasonable that is not slow things down, but provides a firewall between LAN and the parent PC.

  I thought maybe around $100 - maybe more if necessary.

  Router 1 # is a M142WR - Gen31 Verizon ActionTec provided

  It is not uncommon to see that the ISP supplied routers do not have the ability to assign static to the WAN interface, they only allow DHCP.

  What can be useful, it is if you can configure the DHCP server to assign customer-specific DNS servers, so that the DNS relay router is not used. Unfortunately, even once provided ISP routers are often locked, and you cannot make these settings.

  Yes, you can configure your computer to go to an external DNS instead of use the router of the client, it is sometimes quite effective, but the main thing is to get rid of the relay using a scenario of relay that you had as I've found it can be very slow.

  I only suggested Google like her I know by default. Speed DNS depends a lot on the network to which you are attached. It of a bit technical, but reference RCMP DNS will tell you this that the DNS the fastest that YOU can connect to. I know that BT router DNS servers are slow, but the BT DNS network is the fastest available for me.

• Firewall router ios commands

  In order to solve problems that result from a problem with a vpn connection, where the router contains an ios firewall, knowing the correct controls are essential. What are the proper commands that should be used for the display of information related to vpn problems? For example, on a pix commands show conn, isa to show her, see the ipsec sa, sh help etc exlate in the determination of the issues. What are some commands which correspond to these and others can be used on a router with a firewall ios?

  Take a look at this link to learn more about the Cisco IOS Firewall.

  http://Cisco.com/en/us/partner/products/sw/secursw/ps1018/tsd_products_support_series_home.html

  HTH

• RV120W ROUTER/firewall "cannot display the webpage".

  I have a small LAN using a T1 of One Communications line.  Static IP address.

  30 workstations.  Windows 2003 DHCP server.

  Installed new RV-120W firewall router last week replacing an old unit of Netgear.

  Configure VPN tunnel on the unit, have remote access for about 10 users.

  This part works well.  A little slow, but acceptable.

  My question: is internet connectivity on internal LAN in and out.  She's very agitated.

  Upload and download speed has been consistent (~2.5M/sec)

  External Pings see the very minimal loss.

  Users have seem intermittent loss of web streams and corrupt downloads.  web activity 90% is ok, but we continue then getting "cannot display the webpage error."

  NSLOOKUP displays the DNS, but occasssionally "TIMEOUT" occurs.

  I got the provider perform loopback tests and replace WIC on CISCO 1841 router T1, but I still see the behavior.

  I see by reading other forms, that it is an ongoing problem with the routers of RV.

  My settings...

  Public static IP / DNS on the router.

  Reverses the MTU to 1500.  I have adjusted downwards by increment to 1350.

  Windows Server 2003 has RV120W address as the router / gateway.

  T1 to CISCO 1841 ROUTER... to CISCO RV120W... to LAN CISCO SLM248G interrrupteurs (2).

  I do not configure all redirects the port.

  I continue the line tests on my end, but as I said this problem was not existing with Netgear unit.

  Please indicate any change of setting / suggestions.

  Hi Jason et al...

  In my view, the technician are now experiencing a UDP on the Rv120W question.

  The internal discussions on the issue of R & D and development seems to be;

  1. default on RV120W a UDP Flood attack control that limit 25 UDP by customer connections in one case there, IE to a particular instance of time a PC behind the router can establish only 25 UDP Transactions, if we exceed router drops packets UDP.

  2. we have a script that sends dns queries to search at a very high pace that the router deletes the entries in the UDP, in this way, that we accumulate the UDP entry in the router table (IE 25 entries)

  3. once 25 limit is reached, we are unable to resolve DNS queries, in addition to using the script or by using the browser.

  4. in real-world scenarios it could be a PC behind the router and open a website where all the elements on the Web page are related to the different website, if you open this type of Web site, it may have links to over 25 different site and clog the table routers UDP for the PC and the user may not able to solve queries DNS additional and impossible of browse all new Web sites. This inability to browse happens until the UDP entries on the router time dead and are deleted.

  5. this limit of 25 is because of the feature called raw block UDP on the router that is enabled by default.

  6. once we disable the block UDP Flood, router does not check 25 connections limit UDP and dns resolution is continuous, without interruption.

  This is a customers in the area could be to see breaks in the DNS resolutions and browse site failed.

  Some customers talked explicitly about DNS failures.

  Jason I see that you have placed a service call, so I hope that CCORAL who posted August 15 should be helping you.

  So people, if the technician finds the problem not a hardware issue requiring an RMA, the technician will intensify the call for our people of level 2 in the Irvine case, probably CCORAL.  You will get a help to solve this problem.

  The small business support center, should be aware of the problem. Please do not hesitate to show them this announcement, I am ready to discuss with them to get things moving.

  Yet once, if you have not already done, please contact the HWC and place a request for service and keep a copy of this number they give you as a reference (you can need). My apologies for the inconvenience that you all had.

  concerning

  Dave Hornstein

  Small businesses, channel system engineer

  Cisco - Research Triangle Park.  U.S..

  http://www.Cisco.com/en/us/support/tsd_cisco_small_business_support_center_contacts.html

• The captain El VPN Internet routing

  I was able to set up a virtual private network and can connect to it. But can not get external ip addresses.

  At one point, I was able to connect to outside the VPN network. I could check my IP to show that I was on my VPN network when I was somewhere else. I don't know why, but at some point it stopped working. The only thing I did at one point was to reboot the machine, but I don't think he was.

  I've followed this how-to:

  https://macminicolo.net/blog/files/setup-a-VPN-server-with-El-Capitan-Server%20. HTML

  Redirection of DNS servers are on 10.0.1.1, 127.0.0.1

  The VPN DNS is set to 10.0.0.1

  After that stuff stopped working, I ran the script:

  bash <(curl -Ls http://git.io/1UlbJQ)

  But that just copy my entires I made by hand, so I deleted everything that has been redone.

  I'm guessing there is something I am missing, or if there is a way for me to check if the routing is or is not happing maybe that would have me idea in how to get this back on track.

  Yes on the client, I send all traffic over VPN set. When you use the VPN, I can not access google.com.

  Nslookup works

  Ping does not work with external areas, also if I ping IP that it doesn't.

  The last time I saw a similar problem here report in these forums it was down the routing tables, as explained below.

  • You have all the traffic of customers being forced to go through the VPN to the office network, I can tell that you are able to communicate with devices on your corporate network
  • However, you can not contacted devices on the Internet once connected via VPN

  It's probably to the fact that your office network is a network firewall on that or Internet router and one of them is the default gateway Internet for your corporate network. So the traffic will go since your Mac client via VPN on the office network, on office of firewall/router network, via the firewall/router to Internet, via Internet on the remote site, then back across the Internet to your router/firewall, then... get lost because your router/firewall knows where to send it to reach your remote Mac VPN client is not on the network of the company.

  What you need to do is add a "static route" tell your firewall/router that all traffic destined to go to the network that you have defined for VPN clients should be "routed" via the VPN Mac server LAN IP address.

  Note: According to the guidelines of Apple VPN clients must be on a beach in separate to your LAN network, so if your LAN is 10.0.1.x/255.255.255.0 then your range of VPN client should perhaps 10.0.2.x/255.255.255.0

• WRT160N2 Firewall conflict with McAfee

  I have improved my McAfee on three computers.  Two of the 3 computers are fine, but it takes about 30 minutes to open Internet Explorer.  McAfee said it's my firewall router, which I doubt since both computers are fine.   Two computers are wired Windows XP, one of them has the propblem, the 3rd is a laptop, windows Vista on a wireless connection and it is fine.  Suggestions would be helpful.

  I accepted and do not think it was the router, as 2 three computers made fineand that I was able to connect to the EA, after uninstalling McAfee.  To make a long story short, the new McAfee software has a new tool of Manager network, and after several hours of terrible on the phone with McAfee, it has been determined that my Ram 3 MB computer didn't have enough RAM to run this Addin, so us have uninstalled who and all is well. Thank you all for your ideas.

• Router WRT320N to a wired BEFSX41 router connection problem

  Hello, I never thought it would be so difficult. I have problems to connect to a router (WRT320N) so it will be on the same network as my other cable firewall router (BEFSX41). The wireless router works fine because it connects to the internet via the BEFSX41 router. However, the two routers do not see each other and I can't connect two computers, a wired computer, the other laptop wireless to the same network.

  Wired BEFSX41 router uses 192.168.1.1 IP address and the router WRT320N wireless uses 192.168.0.1 IP address.

  Don't know what other information you need. I hope you can solve this problem for me.

  Thank you

  Mike

  For file sharing, it is always better to maintain the network in the same subnet... Connect the BEFSX41 on the Ethernet Port of the router WRT. (LAN-to-LAN connection)... Visit this link for that. If the IP address of the main router is 192.168.1.1 then, change the 2nd router's ip address is 192.168.1.2.

  Make sure that file and printer sharing is enabled... Also, make sure the computer are in the same workgroup...
  Default workgroup in Windows Vista has been renamed to WORKING group. In Windows XP, the default workgroup name is MSHOME...

• Router Port question

  I have a switch 6224 that is not configured with any VLAN special or routing. It comes as a layer 2 switch.  I have a Sonicwall TZ210 my firewall router connected to my ISP.  I'm running into some issues related to too many switches connected together.

  I wanted to make sure that my sonicwall is connected to the appropriate port on my switch.  The guy who set up it connected the sonicwall LAN port to the port on the switch 15.  It is not setup like any special port.  Shouldn't it be plugged into one of the ports 21-24.  I have a plugged into 24 GBIC that connects to another powerconnect switch 2427.

  Thank you

  Unless you have an optical fiber with a transmitter/receiver connection.  There is no physical reason why a cable must connect on a certain port.  You désigneriez the switchport mode configuration in order to establish functional connection.

  Can answer you with your show run output and a description of your physical environment so that we can better understand or what is happening.

• RV120W Wireless - N VPN Firewall - DHCP reservation

  Hello

  I have two or three sites with VPN Firewall-Router Wireless-N RV120W, I need the ip address of the client printers in reserve, but I do not see the option. could someone show how to book clients ip?... or this function isn't avialiable longer?

  Thank you

  Hi Eduardo, this function must be placed-

  Networking

  >

  LAN (local area network)

  >

  Public static DHCP (LAN)

  -Tom
  Please mark replied messages useful

• Blocking ICQ traffic on router 2620

  I needed to block all ICQ traffic coming out of my network. Did a search on the Internet and found that ICQ uses two port numbers as possible for the 4000 and 5190. I set up both of these ports and it seemed to do the trick BUT... I discovered that ICQ can also use HTTP, HTTPS, SOCKS4 and SOCKS5 as transport protocol and now I would like to know how to block these "extra" ICQ traffic I thought about:

  1 block TCP traffic on port 80/8080 with the string "http://login.icq.com".

  2. block ALL outgoing to www.icq.com, login.icq.com IP traffic (they can be resolved through DNS)

  Can someone tell me how I can do the task above? expecially option 1. Thanks in advance for your help. Are there other options I can use outside of the above?

  Your 2620 will be limited to help to stop this traffic. You could write a custom module of NBAR search in HTTP headers, but that's assuming that they actually login.icq.com in the http headers. They could not. You will need to check and see.

  Really ask you for content filtering. SurfControl is affordable and does it well and don't sit inline to the firewall/router.

  An IDS sensor can do that for you too. You have an engine inspection rish that can find almost anything in a RST packet, shun/block, etc.

  Blocking IPs is a pain in the neck and ICQ change / add over time.

  A simple and efficient method that works 99% is simply creating a fake icq.com on your internal DNS domain. Since your server DNS think its authority, it will not ask the real servers. Therefore, the ICQ clients won't be able to connect unless they point outwards DNS. If you allow only your internal DNS, the right to use Server outgoing UDP/53, requires customers to understand it's a DNS issue, get the name and the IP need and put them in the local hosts file. Of course, users should not have admin access to edit the hosts file. Of course, they also should not have admin access to install the ICQ software either... It's a tough battle. ;)

• IPSec woes - problems after the installation of firewall between IPSec endpoints

  Hi all

  I recently had to install some pix from our internet router to some internal routers in a branch. A small preview:

  router Internet <-->PIX pair FO <-NAT->routers <-->Switch Fabric

  Basically, internal routers used to have interfaces with IPs turned to the audience of our external block. I had 2 tunnels GRE IPSec running on one of them and had users who log in to the House through 1721 s. Since we have very little space, I had public address the PIX redirect internal routers and go from there.

  So, here's where I am--my tunnels show top/towards the top, but I can't talk about anything that either internally sent by routers. All this worked * prior * me having to redirect internal routers to get the firewall in. I'll post all three configs (firewall, router, router internal) to cleaned formats such as text attachments. Note, also, that I left the pix traffic large shipping open until I can solve this problem. I'll reapply my more restrictive ACL when this is fixed.

  Just as a point of reference:

  200.200.200.200 - static IP router (by ISP)

  100.100.100.100 - public ip address who * was * on our external interface of our internal router, which is now on the pix as a static to the new ip address of the router.

  172.18.201.0/24--Le internal network, I created to re - treat routers to be originally the inside interface of the pix

  Example of House is the remote router of 1721, the Interior router example is the internal router and firewall example is our pix 525 just installed.

  I would like to know if there is more I should include...

  Thanks in advance!

  -Tim

  The statement of the route on the pix will require the subnet mask:

  Route inside 100.100.100.100 255.255.255.255 172.18.201.4

  After you change the static method, remember to do a clear xlate on the pix: clear xlate local 172.18.201.4

  You don't need to assign the card encryption at int of closure. If you do, these are in global configuration on the router mode:

  card crypto mapname-address loobackx, where x is the number of loopback, and mapname is the name of your crypto card (homevpn, I think it was). If the local address is not the right option, simply enter the card encryption? to invite the global configuration and you should see text referring to the allocation of an IP as source for traffic using ipsec.

  Notes:

  1. on the router tunnel interface will use the same loopback interface as its source too. With the card encryption applied to the actual physical interface routing if you do not have to create maps of route to route to the closure to apply ipsec processing.

  This should take care of the GRE and IPSec traffic. Is there any other traffic should I consider?

  Take care to archive the current configs on the internal router and pix before you make these changes to restore more easily to the case where things go wrong.

• VAPP network edge firewall is not available?

  Hi there guys

  I hope someone can help me with this one. We are developing a point of Contact for our company to prove the business value of VCloud Director (VDC1.5). We have put in place everything but we have one last question with VAPP networks. According to our understanding, we can place an edge device Vshield between a paralytic and the Organization's network.

  We have implemented the scenario like that, but we can not activate the firewall option, that option remains grayed out depending on the attached screenshot.

  If we turn on the DHCP service, VM perimeter firewall is created, but even in this case the firewall option in the interface VCD remains grayed out.

  Firewall/routing options will become available when your VAPP network is "patched" to the Organization's network.  You can configure it by going to the networking of your VAPP tab and selecting a network of organizations in the connection drop-down list.  Without having to set up a connection, your network of vApp is only available inside your VAPP and only the DHCP of the on-board equipment features.

• Routing between 2 vswitches

  Hello

  In my lab at home, I have the following configuration:

  vSwitch0 - physical adapter connected to the router (192.168.1.x)

  vSwitch1 - no physical (10.0.0.x) cards

  All my VM to sit on vSwitch1. I had to do it this way to get a PXE boot works fine in my lab.

  My problem is that I can't connect to one of my machines on vswitch1 my 192.168.1 network.

  What is the best way to be able to do this? I know that I could probably hold a windows in there server and RRAS only, but it would be a waste of resources. Is there an easier way?

  Hello

  VSwitches of VMware are autonomous entities that do not allow for Stackable Switch. In order to connect two vSwitches you need to use a lightweight virtual machine that acts as a firewall/router. There are several that you can choose as Vyatta, Smoothwall, IPCop, etc..

  Or use your idea RRAS.

  The device, which he is never, has 2 vNIC, each connected to one of the vSwitches in use. I.e.

  A vSwitch => Portgroup A-online [vNIC A - VM - vNIC B]<=Portgroup><=vSwitch>

  The virtual machine becomes the router between the switches.

  Best regards

  Edward L. Haletky

  Host communities, VMware vExpert,

  Author: VMware vSphere and Virtual Infrastructure Security,VMware ESX and ESXi in the 2nd business edition

  Podcast: the Podcast for security virtualization of resources: the virtual virtualization library