RIPv2 / routing domain

Similar Questions

• PIX & tagged RIPv2 routes

  Hello!

  I noticed that the PIX cannot use RIPv2 routing updates which have marked lines (zero tag). These routing updates, I got this error message:

  107002: pkt RIP was due by 10.1.20.1: version = 2 on the interface outside

  What is the function or the bug?

  Hello

  You are on the money. The PIX does not install RIP v2 with set of routes. This is by design, but is probably something we could change quite easily (the FWSM currently accepts these roads). My guess is that no one has ever asked before. If it's something you want to see added, contact the local Cisco account team and see about getting a high to this improved feature. Sorry for the news, but I hope that this helps to answer your question.

  Scott

• VPN/routing HELP!

  I have an ASA 5505 can I VPN in, my problem is that I do not have access to my internal network.  Right now, I have my cable modem enter my ASA and my ASA goes to my Cisco 3660 router.  I think my problem is somewhere in the routing domain, but I don't really know what I'm doing... Help, please.

  The ASA config:

  : Saved : ASA Version 8.2(3) ! hostname ciscoasa domain-name wood.homeesrv.com enable password DQucN59Njn0OjpJL encrypted passwd 2KFQnbNIdI.2KYOU encrypted names dns-guard ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! interface Vlan1 nameif inside security-level 100 ip address 192.168.2.1 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address dhcp ! ftp mode passive dns domain-lookup inside dns domain-lookup outside dns server-group DefaultDNS name-server 8.8.8.8 name-server 8.8.4.4 domain-name wood.homeesrv.com access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 192.168.3.0 255.255.255.0 access-list VPNWoodHome_splitTunnelAcl standard permit 192.168.2.0 255.255.255.0 access-list WoodVPN_splitTunnelAcl standard permit 192.168.2.0 255.255.255.0 access-list Split_Tunnel_List standard permit 192.168.1.0 255.255.255.0 pager lines 24 logging enable logging asdm warnings mtu inside 1500 mtu outside 1500 ip local pool HomeVPN 192.168.3.0-192.168.3.10 mask 255.255.255.0 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 0 access-list inside_nat0_outbound nat (inside) 1 0.0.0.0 0.0.0.0 route outside 0.0.0.0 0.0.0.0 174.56.139.1 1 route inside 192.168.1.0 255.255.255.0 192.168.2.2 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy aaa-server VPN protocol radius http server enable http 192.168.2.0 255.255.255.0 inside http 192.168.1.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set reverse-route crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP crypto map outside_map interface outside crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP crypto isakmp enable inside crypto isakmp enable outside crypto isakmp policy 10 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 client-update enable telnet timeout 5 ssh timeout 5 console timeout 0 management-access inside dhcpd dns 8.8.8.8 8.8.4.4 interface inside ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept webvpn enable inside enable outside group-policy WoodVPN internal group-policy WoodVPN attributes dns-server value 192.168.1.14 8.8.8.8 vpn-tunnel-protocol IPSec webvpn split-tunnel-policy tunnelspecified split-tunnel-network-list value WoodVPN_splitTunnelAcl default-domain value wood.homeserv.com username Jonathan password WsMCHUiqvEuA9Gmb encrypted privilege 15 tunnel-group WoodVPN type remote-access tunnel-group WoodVPN general-attributes address-pool HomeVPN default-group-policy WoodVPN tunnel-group WoodVPN ipsec-attributes pre-shared-key ***** ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters   message-length maximum client auto   message-length maximum 512 policy-map global_policy class inspection_default   inspect dns preset_dns_map   inspect ftp   inspect h323 h225   inspect h323 ras   inspect rsh   inspect rtsp   inspect esmtp   inspect sqlnet   inspect skinny    inspect sunrpc   inspect xdmcp   inspect sip    inspect netbios   inspect tftp   inspect ip-options ! service-policy global_policy global prompt hostname context Cryptochecksum:20c3b97b24f2fadeb1154024bd995f03 : end no asdm history enable
  
  Cisco 3660 Router Config:
  Building configuration...
  Current configuration : 1096 bytes
  
  !
  
  version 12.4
  
  service timestamps debug datetime msec
  
  service timestamps log datetime msec
  
  no service password-encryption
  
  !
  
  hostname Router
  
  !
  
  boot-start-marker
  
  boot-end-marker
  
  !
  
  !
  
  no aaa new-model
  
  !
  
  !
  
  ip cef
  
  no ip dhcp use vrf connected
  
  ip dhcp excluded-address 192.168.1.1 192.168.1.19
  
  !
  
  ip dhcp pool 192.168.1.0/24
  
     network 192.168.1.0 255.255.255.0
  
     default-router 192.168.1.1
  
     dns-server 8.8.8.8 8.8.4.4 192.168.1.14 192.168.1.13
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  username woodjl privilege 15 secret 5 $1$FJyW$Ozgsn9oO0acvYSSeohvzX/
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  interface FastEthernet0/0
  
  ip address 192.168.2.2 255.255.255.0
  
  ip nat outside
  
  ip virtual-reassembly
  
  duplex auto
  
  speed auto
  
  !
  
  interface FastEthernet0/1
  
  ip address 192.168.1.1 255.255.255.0
  
  ip nat inside
  
  ip virtual-reassembly
  
  duplex auto
  
  speed auto
  
  !
  
  ip http server
  
  ip http authentication local
  
  no ip http secure-server
  
  ip http timeout-policy idle 600 life 86400 requests 10000
  
  ip forward-protocol nd
  
  ip route 0.0.0.0 0.0.0.0 192.168.2.1
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  control-plane
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  !
  
  line con 0
  
  line aux 0
  
  line vty 0 4
  
  !
  
  !
  
  end

  to do this: -.

  attributes of Group Policy WoodVPN

  no value in split-tunnel-network-list WoodVPN_splitTunnelACL

  value of Split-tunnel-network-list Split_Tunnel_List

  Add also: -.

  access-list inside_nat0_outbound extended permit ip 192.168.3.0 255.255.255.0 192.168.1.0 255.255.255.0
  
  Let me know if that helps.
  
  Manish 

• Installation certificate of 2nd by the same CA.

  Try to install a second certificate issued by the same CA. However, the new certificate replaces its predecessor.

  Registration certificate original Config:

  Crypto pki trustpoint ca.domain.null

  Enrollment url http://ca.domain.null:80

  use of ike

  IP address no

  fingerprints

  name of the object c = CA, st = State, l = city, o = Company, ou = old-1, or old-2 =, cn =router.domain.null

  crl revocation checking

  interface Loopback0 source

  rsakeypair router.domain.null 1024

  automatic registration of 90 regenerate

  Changes to the configuration of the registration certificate:

  Crypto pki trustpoint ca.domain.null

  name of the object c = CA, st = State, l = city, o = Company, or new-1 = or = new-2, cn =vpn - 1.router.domain.null,vpn - 1.router.domain.null = host name

  rsakeypair vpn - 1.router.domain.null 1024

  Note: Fields modified organizational unit (OU).

  Note: Specified another common name (prefixed "vpn-1").

  Note: Tried it with and without «hostname = vpn - 1.router.domain.null»

  Note: Specified another pair of RSA keys.

  Registration for the second (same CA) certificate:

  Router (config) #crypto pki register ca.domain.null

  %

  Certificate registration % at the beginning...

  % Create a challenge password. You will need to verbally provide this

  password for the CA administrator to revoke your certificate.

  For security reasons your password is not saved in the configuration.

  Please take note of it.

  Password:

  Re-enter the password:

  % Will include in the certificate subject name: c = CA, st is State, l = city, o = Company, OU = new-1, or is new-2, cn isvpn - 1.router.domain.null, name of host =vpn - 1.router.domain.null

  % Will include the name of the subject in the certificate: router.domain.null

  % Include the serial number of the router in the name of the topic? [Yes/No]: n

  Request a certification authority certificate? [Yes/No]: y

  % Certificate request to the certification authority

  % The command 'show the crypto certificate PKI detailed ca.domain.null' display the fingerprint.

  Note: The above statement shows "% will include the name of the subject in the certificate: router.domain.null.

  Note: The new certificate is created with the same name as the original certificate and replace.

  New certificate:

  Router (config) #do sh crypto PKI

  Certificate

  Status: available

  Certificate serial number (hex): 23

  Certificate use: general use

  Issuer:

  CN = ca.domain.null

  Object:

  Name: router.domain.null

  hostname = Router .domain .null

  c = CA

  St = State

  l = city

  o = Company

  UO = new-1

  UO = new-2

  CN =vpn - 1.router.domain.null

  host name =vpn - 1.router.domain.null

  CRL Distribution points:

  http://CA.domain.null/cgi-bin/pkiclient.exe?operation=GetCRL

  Validity date:

  start date: 14:10:41 this December 4, 2012

  end date: 04:24:14 EDT July 15, 2013

  renewal date: 22:16:52 EDT June 22, 2013

  Trustpoints Associates: ca.domain.null

  Note: The following remain the same when the new certificate is created, despite the entry of object name provided:

  Object:

  Name: router.domain.null

  hostname = Router .domain .null

  The original of the certificate is replaced with a new one and should not be found in the

  "sh crypto pki certificate" exit.

  Any ideas or solutions successfully install a second certificate issued by the same authority would be welcome.

  Best regards

  Mike

  Mike,

  (Hopefully) answer both of your questions.

  You can have different trustpoints with the same certificate of the issuer, no need to use two different cases.

  I actually wasn't 100% corrent in my previous intervention, trustpoints will also have associated reversal/shadow certs, so strictly speaking more than two.

  IRT. IKEv1 and identity, we have limited options.

  (1) auto (pick up method according to the type of connection)

  (2) address - provide the IP address associated with a card crypto instsance (i.e. the source of the cryptographic packages).

  (3) Hostname - hostname configured on the box. (FQDN)

  (4) DN - chosen DN of the certificate

  http://www.Cisco.com/en/us/docs/iOS-XML/iOS/security/A1/sec-CR-C4.html#GUID-D3C7A306-A689-4953-9146-D4F2F861C567

  In addition, you can configure user-name of full domain as identity.

  http://www.Cisco.com/en/us/docs/iOS-XML/iOS/security/S1/sec-CR-s1.html#GUID-E0956592-4754-4C48-9ACB-9AF58594E74D

  As far as IKE goes, you can have as many certificates as you want of cases as much as you want (in MM3 and MM4 both sides of the negotion will agree on the use of certificates to authenticate to each other).

  M.

• Controller of domain and DNS behind RRAS without VPN connected directly to the internet with a Cisco router

  I hava a ME Cisco 3400 with physical single port available for a cable connection.

  The ISP give me an IP address interface = 89.120.29.89 to act as a gateway to the IP Address of the host, which is provided for in the order 89.120.29.90.

  The host computer is a dual Xeon computer with two NICs for LAN and WAN.

  Fields of application: to install a windows 2008 R2 between public and private network server.

  Even though I know it's not recomanded, I put the DNS role and directories Active Directory roles installed on the same computer, the computer above, (I do not have enough computer for roles different place on different computers)

  The desired configuration:

  To have installed with his roles behind a WS2008R2 has RRAS. without a VPN.

  b with VPN

  and for WAN access for the client computers of the private LAN Windows 7 OS. (The basin of LAN address 192.168.0.1 - 255).

  First step : to have internet access in the browser (I use Google chrome) (without taking into account the DNS and AD)

  Network configuration:

  Map NETWORK WAN, at the top of the stack of liaison in the Control Panel/network connections and sharing:

  Host IP: 89.120.29.90

  Mask: 255.255.255.252

  Gateway: 89.120.29.89

  DNS: 193.231.100.130 my ISP name server address.

  OK, I can browse the internet.

  Second stage. (Consider DNS and Active Directories)

  DNS instaled role for this computer.

  AD installed as a global catalog.

  NETWORK WAN server that is directly connected to the Cisco router:

  Conection area 3

  Properties:

  Client for Microsoft Netwaork: not verified

  Network Load Balancing: not verified

  File and shared printer: not verified

  QoSPacketScheduler: not verified;

  Microsoft Network Monitor 3 pilot: not verified

  IPv4                                                     ;  checked

  Pilot a Link Layer Topology Mapper i/o: checked

  Link layer Discover responder: checked

  IPv4 tab

  Host IP: 89.120.29.90

  Mask: 255.255.255.252

  Gateway: 89.120.29.89

  DNS: 193.231.100.130 my ISP name server address.

  under the tab advanced

  IP settings : even that, tab IPV4 with automatic metric check;

  DNS tab :

  Add primary and connection suffixes DNS specific: not verified

  Add suffixes primary DNS suffixes parents: not verified

  Add this DNS suffixes: no

  Registry deals with this connection in DNS: not verified;

  Use this connection DNS suffix in DNS registration: not verified;

  WINS tab : enable search LMHOST: not verified

  Enable NetBios over TCP IP: don't check;

  Disable NetBios on TCP IP: checked;

  Connection to the local network 2

  Properties :

  Client for Microsoft Netwaork: checked

  Network Load Balancing: no

  File and shared printer: checked

  QoS Packet Scheduler: not verified;

  Microsoft Network Monitor 3 pilot: not verified

  IPv4 checked

  Pilot a Link Layer Topology Mapper i/o: checked

  Link layer Discover responder: checked

  IPv4 tab

  NETWORK LAN CARD: 192.168.0.101

  Mask: 255.255.255.0

  Gateway: 192.168.0.1

  under Advanced tab:

  IP settings : even that, tab IPV4 with automatic metric check;

  DNS tab :

  Add primary and connection suffixes DNS specific: checked

  Add suffixes primary DNS suffixes parents: not verified

  Add this DNS suffixes: no

  Registry deals with this connection in DNS: checked;

  Use this connection DNS suffix in DNS registration: checked;

  WINS tab : enable search LMHOST: not verified

  Enable NetBios over TCP IP: check;

  Disable NetBios on TCP IP: not verified;

  Install RRAS as NAT (NAT) under any condition imposed by DHCP(not installed) in ideea that RRAS will generate the private IP address of the DHCP allocator.

  In any case, for the beginning, I have a fix IP, do not get IP automatically.

  At this point, it gets the configuration simple posible for RRAS follows:

  3, LAN connection that corespond to the WAN interface IP:

  "NAT configured for the following Internet interface: Local Area Connection 3.
  The clients on the local network will assign the IP addresses of the following range:

  network address: 192.168.0.0. netmask 255.255.0.0.

  After Windows RRAS are open:

  The Network Interfaces tab:

  NICs are enabled and connected;

  UAL remotely & policies:

  Launch NPS,

  on the NPS server tab:

  Allow access to successful Active Directory directories:

  Properties: authentication: port 1812,1645

  kept port 1813,1646;

  on the accounting tab: nothing;

  under NPS policies:

  Grant permission for the RRAS server under builin\Administrator of the accounts;

  On strategy and the type of server unspecified (NAT do not exist as an entry in the drop-down list server dwn)

  under the static road: nothing;

  under the IPv4 tab or both are there(there IP) and are up

  under NAT

  Connection to the local network 3: public interface connected to the internet

  enable NAT on this interface:

  under the address pool: ISP addresses public;(two addresses)

  under the terms of service and the ports: Web server: http 80.

  (I have I have a static IP address for the client computer in mind, I set up a single customer).

  At the client computer :

  configured as domain customer and added to the users AD and computer AD

  logon to the domain:

  Local Area Connection

  Properties:

  Client for Microsoft Netwaork: checked

  Network Load Balancing: not verified

  File sharing and printer: checked

  QoS Packet Scheduler: checked;

  Microsoft Network Monitor 3 pilot: not verified

  IPv4                                                     ;  checked

  Pilot a Link Layer Topology Mapper i/o: checked

  Link layer Discover responder: checked

  IPv4 tab

  Host IP: 192.168.0.101

  Mask: 255.255.0.0

  Gateway: 192.168.0.1

  DNS: (auto-add the same to the local machine).

  under the tab advanced

  IP settings : even that, tab IPV4 with automatic metric check;

  DNS tab :

  Add primary and connection suffixes DNS specific: checked

  Add suffixes primary DNS suffixes parents: not verified

  Add this DNS suffixes: no

  Registry deals with this connection in DNS: checked;

  Use this connection DNS suffix in DNS registration: checked;

  WINS tab : enable search LMHOST: not verified

  Enable NetBios over TCP IP: checked;

  Disable NetBios on TCP IP: not verified;

  right now the 192.168.0.101 client cannot connect to internet through RRAS.

  ;

  This issue is beyond the scope of this site and must be placed on Technet or MSDN

  http://social.technet.Microsoft.com/forums/en-us/home

  http://social.msdn.Microsoft.com/forums/en-us/home

• Try to install Net Gear Wireless router to work with my laptop. It keeps telling me that my domain name is a question.

  I'M TRYING TO INSTALL A WIRELESS ROUTER FOR MY LAPTOP, THE ROUTER IS NETGEAR, I ALWAYS GET TO THE POINT CONNECTING DOMAIN IS THE ISSUE.

  original title: ARTICLE 871122 WZC

  I think you've got the third-party software installed on your laptop to configure the wireless adapter. Third-party software seems to have disabled the Wireless Zero Configuration (WZC) Microsoft service. You will need to reactivate it.

  Follow the steps below to activate the automatic configuration on your laptop.

  1. Click Start, click Run, type % SystemRoot%\system32\services.msc/s, and then click OK.

  2. double-click on Wireless Zero Configuration.

  3. in the startup type list, click Automatic, and then clickApply.

  4. in the Service status area, click Start, and then click OK.

  Software configuration of certain wireless adapters removes the automatic configuration service. If this is the case, you can try this fix by changing the registry value.

  WARNING: Editing the registry can be dangerous, use it at your own risk.

  1. click on start - run and type reg. And then click OK.

  2. browse this registry key: HKEY_LOCAL_MACHINE es\WZCSVC

  3. next, create a DWORD value and name it 'Start' and set it to 2.

• How to connect computers laptops xp wireless to a wireless router to connect to a domain

  I have a small office where there is a LAN infrastructure, structured in a field with Server 2003. Now I want new computers laptops xp installed to be able to connect to the domain via the router's wireless connection.

  What will be the default gateway of the wireless router and what settings should I do on the server. The server is configured as a DHCP server. Now, how computer users mobile xp will obtain the ip address issued, it will be the router wireless of Server 2003.
  How can I get this configuration works.

  You must apply to a newsgroup server.

  Windows Server forums:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

• Wireless router requesting domain username, password and logon

  I recently bought a router without wire - WBR - T2 - as my old netgear router has stopped working. I can connect via the ethernet fine connection and access the internet. But on my computer Vista laptop when I try to connect to the wireless network, what I asks me to enter a username, password and domain logon. The old netgear router has not asked for these. Any help if her I need information would be appreciated.

  Thank you
  Jon

  I don't know where you get the application for the user name, etc. Your computer is on a domain? In the meantime, here is general information about the implementation of a wireless network. See if anything here helps you.

  To configure the router:

  Have a computer connected to the router with an ethernet cable. Examples given are for a Linksys router. See the manual of your router or the router mftr's Web site. for the parameters by default if you don't have a Linksys. Open a browser such as Internet Explorer or Firefox and in the address bar type:

  http://192.168.1.1 [Enter] (it is default IP address of the router, which varies from router to router then check your manual)

  This will bring you to the login screen of the router. The default username is blank and the Linksys default password is "admin" without the quotes. Enter this information. You are now in the configuration of the router utility. Your configuration utility may be slightly different from mine. The first thing to do is to change the default password because * all * known default passwords for different routers.

  Click the Administration link at the top of the page. Enter your new password. MAKE A NOTE SOMEWHERE THAT YOU WILL NOT LOSE. Re-enter the password to confirm it, and then click Save settings at the bottom of the page. The router will reboot and show you the box of connection again. Do not fill in the user name and put it in your new password to enter the configuration utility.

  Now, click on the link wireless at the top of the page. Change the network name (SSID) wireless by default to something, you'll recognize. I suggest that my clients not use their surname as the SSID. For example, you might want to name your network wireless network "CastleAnthrax" or similar. ;-)

  Click on save settings and when you get the prompt that your changes were successful, click the wireless security link which is just beside the Basic Wireless Settings link (where you changed your SSID). Most computers purchased during the last 4 years have the wireless hardware that will support WPA2-Personal (also known as WPA2-PSK). This is the desired encryption level. If your wireless hardware is older, use WPA. Don't use WEP, because who is easily broken within minutes. So go ahead and set the Security Mode WPA2-Personal. Do this and enter a password. For example, you could use the password ' here be dragons, beware you scurvy dogs! The password is what you enter on all computers that are allowed to connect to the wireless network. MAKE A NOTE SOMEWHERE THAT YOU WILL NOT LOSE.

  At this point, your router is set up and if the computer that you use to configure the router will normally connect wireless, disconnect the ethernet cable and wireless of the computer should see your new network. Enter the password that you have created (exactly as you wrote it with all capital letters and punctuation) to join the network and start surfing.
  MS - MVP - Elephant Boy computers - don't panic!

• FULL ROUTING DNS DOMAIN NAME

  Hello world

  I have an FQDN object on our firewall, IP address of this Exchange every day so the firewall has a rule to allow access to it on a specified port number.

  Example:

  allowed to Access-list inside_access_in line 284 extended tcp host 192.168.0.25 eq 191.235.193.75 (database.windows.net) 1433 (hitcnt = 0) 0xeef0bf01

  It works very well, however I can not route traffic to the firewall of our series 6500 CORE switches if I do not know the IP address of the object.  I have a server that needs access to this purpose to FULL domain name.

  How to get traffic from our base at the firewall?

  CORE Cisco 6509 (s2t54-ipservicesk9-mz. Spa.150 - 1.SY2.bin)

  Firewall Cisco ASA 5540 v9.1 21 (5)

  If the IP address changes every day, so it seems that the use policy routing based on traffic for TCP 1433 forward could be the solution for you.

  HTH

  Rick

• The fields 'Name' and 'Domain' to 'DNS and routing configuration/host Identification' are always in gray

  In VI3, I used to change the settings of the host DNS (host and domain name) to the tab 'DNS and routing' - & gt; "Identification of home." Even more, if the DNS and DHCP are configured correctly in the environment, there is no need to set these values manually - they were discovered automatically. The story is defferent in vSphere 4. I still have the set of fields 'Name' by 'localhost' and 'Domain' field is empty. And I can't change them - they are grey.

  Seems that the host is still able to discover its hostname automatically. I see the proper name in the (left pane of vSphere Client) console tree. But these values are not met the 'DNS and routing' tab and I can't put them manually.

  This is normal and how do I use these fields now?

  Yes, you're right. It's a little strange, but it works this way in vSphere now.

  ---

  VMware vExpert 2009

  http://blog.vadmin.ru

• Network configuration of Roaming Wifi problem I just bought an Airport Extreme and I intend to use it as my router

  I just bought a refurbished Airport Extreme and I intend to use it as my router & combine with our old time Capsule of existing one to create a roaming Wifi network.

  The new Airport Extreme (renovated) is in my studio/Office - directly connected to our internet broadband wireless (WAN port)

  Our small ethernet is connected to my iMac [mid 2010 running OSX 10.11.5] & a PC and extends up to 2 other domains through an ethernet switch.

  This configuration works very well, our internet speed has improved slightly - better than our old T-Link router bit.  WiFi available throughout the House - better on one side.

  Time Capsule (2 TB) is connected by ethernet on the far side of the House, offer backup Time Machine and strong Wifi to this area.

  This time Capsule was an existing installation that went perfectly with the T-Link before I bought the Airport Extreme.

  I used the Airport utility to set everything up and it seems to work.

  The problem is:

  Combines the Capsule and extreme connected & active, the Internet gradually slows down and grinds to stop. -Wifi seems to follow suit, but is much more gradual.

  If I disable the Time Capsule, the internet connection is back to normal, Airport Extreme Wifi signal is strong and extends to almost all areas.

  I got to the departure of the two units configuration problems, so I reset both factory default and from that moment managed to do all this work - with the exception that the internet connection slows down.  Whenever I visit a different web site, it takes more time to load/link upward.

  I spoke with our ISP, the link to our tower is solid. The technology suggested that I put Wifi on each unit to use a different channel (2 frequencies & several channels each available).

  So far, this has not resolved the problem, I will continue to make adjustments.

  I googled this - most of the answers are not to date - usually 2012, 13, 14. and not directly related to my situation.  But I will continue my search.

  I'd appreciate if anyone here has any suggestions

  The new Airport Extreme (renovated) is in my studio/Office - directly connected to our internet broadband wireless (WAN port)

  What is the number and the model of the modem or modem/router that your ISP has provided you?

  Should we assume that you use a Mac with the help of a current or recent operating system?

  If you get out of the Capsule of time and leaves disabled for now, the network AirPort Extreme continue to run at full speed for a few hours and not slow down?

  We ask these questions because we must first confirm that the AirPort Extreme works properly until we can begin to troubleshoot the connection to Time Capsule.

• Tecra A9: Cannot join a domain or view Web sites wireless - Vista

  I'm having a problem with the network card wireless on this new installation of Vista.

  I can discover & connect to a wireless router, no problem, but when I try to join a domain or view most web pages does not have only ball.
  I can ping local and external addresses and web pages works without any problem at all.
  I tried to update the drivers from the website of toshiba wireless and when that has not made a difference on the site of intel, but nothing helped.

  If I plug in a network cable, everything works fine.

  I have a laptop running XP that connects to the same wireless router and has none of these problems.

  Help!
  Stu

  Seems that there is nothing wrong with your all wireless lan device. I think that there are some Vista settings, preventing certain pages internet working, perhaps built in the anti-virus program or firewall. Internet Explorer 7 has built in functions of security as well, so you can take a look at this.

  Perhaps the first thing you could try is to use another browser, like firefox and check the settings of the firewall.

• Time Capsule router problems

  Recently, my wireless network has had problems.  He became more and more slow.  My devices connect without problems and the signal is full but it takes significantly more time to do something about it.  My iMac doesn't seem to have problems but are my other devices (phone, Tablet, PS3, PS4).  Netflix is essentially very bad because it keeps buffering every 30 seconds and I have to run PS4 upgrades must run all night because they take 8 + hours to download.  I had questions about 5-6 months, which I was able to correct by closing all the way down, 20 minute wait and then turn the modem, the router, and then the computer.  I tried again twice, but he don't seem to have any effect.

  My modem is a Motorola Surfboard SB6141.

  My router is a time capsule, model A1409.

  iMac is a model 27 inch late 2009 10.10.5 running.

  The capsule is connected directly to the modem via Ethernet.  All other devices are connected to the wireless network.  Any advice would be greatly appreciated.

  Thank you!

  Something directly connect to the modem by ethernet. And do a test to see if download and shipping limits are together and working properly.

  You must turn off the modem at each change of customer... 5 minutes is probably enough, but this can take up to 15 minutes.

  If you have good speed then when you put the back... TC test via ethernet to TB... once again, you should get almost the same download and upload speeds as the test to the direct modem.

  Now, test your wireless... you say that the iMac has no problem... so please give us the numbers... It is difficult to work from vague descriptions...

  Then, I need to know the connection speeds and all possible information. Run diagnostics on the computer wireless.

  You should also do a factory reset full of the TC and reconfigure it as follows.

  Start from a factory reset. No files are lost on the drive hard in doing so.

  Universal factory reset

  Turning off the TC... That is, remove the power supply cord or the power at the wall outlet, wait 10 seconds... Hold the reset button... be nice... Turn on always even now in reset... and keep holding in for another 10 seconds. You may need assistance because it is difficult to hold in reset and power on. It will show the success quickly flashing led front. Release reset... and wait a few minutes for the TC to reset and return with the factory settings. If the front LED flashes quickly you missed and simply try again. The reset is quite fragile in these... Press the key while it is just click away and not more... I've seen people bend lever or even break. I use a toothpick as a tool.

  NB. None of your files on the hard drive of the TC are removed... This simply clears the settings of the router of the TC.

  The installer the TC.

  And then redo the configuration of the computer with the Mavericks - Yosemite - ElCapo. (MYELCAP)

  1. the use of very short names... NO APPLE RECOMMENDED names. Without the space and pure alphanumeric characters.

  for example TCgen5 for the base station and the name of the TCwifi wireless.

  If the problem is using wireless TC24ghz and TC5ghz with fixed channels as it also seems to help stop the nonsense. But it can be tried in the second round. IE, plan on a first and second series of changes to fix this... If all goes well... I note other steps can you tour2.

  2. use all passwords also consistent with 1. but maybe a little longer. IE 8 and 20 characters of mixed cases and numbers... no alphanumeric non-caracteres.

  3. If the TC is router, you can ignore this point. It is only a problem when the TC is bridged.

  If ensure that the TC is always the same IP address... you will need to do this on the main router using a dhcp reservation... or a bit more complex setup by using the static IP address in the TC. But it's important for deriving from intellectual property in all directions when MYELCAP do not remember his name for 5 min after a reboot done for poor network management.

  4. check that your share on the computer name does not change... Make sure that it is also in line with the above... short without space and pure alphanumeric... but this change will mess up your TM backup... so be prepared to make a new, full backup. Sorry... keep this one for the second round, if you want to avoid a new backup.

  5 attach the TC disc into the computer manually.

  In Finder, go, connect to the server in the main menu,

  Type in SMB://192.168.0.254 (or whatever ip of TC is that you made static. It's a default router 10.0.1.1 and I encourage people to stick with it unless you know what you're doing).

  You can use the name... SMB://TCgen5.local where you replace TCgen5 with your name of TC... local is the default domain of the TC and does not change.

  However the names are not so easy as... the IP address nor reliable. They are not at least not in Yosemite. The field can also be a problem if you are not clogged or wireless directly to the Treasury Board.

  6. ensure that IPv6 is set to link-local only in the computer. For example wireless open network, wireless and Advanced preferences / TCP/IP... and the difficulty of IPv6. link-local only. Do the same for the ethernet if you use it.

  It is a lot more jiggery pokery, you can try, but the above is a good start... If you still find not reliable... don't be surprised.

  You may need to do more work on the computer itself. for example, to reset the NVRAM/PRAM/SMC... helped some people. A clean installation of the operating system is also useful if you update installed.

• Server 2008 r2 domain through IP locations & Internet Connectivity when domain server (internet down instead)

  Sorry for the long title: p

  I recently picked up a non-profit operations in the city with offices in three locations in the city.

  We have a network domain server and exchange server at the main office where I work, and the computers in the other two offices are on the field.

  (I guess that VPN configurations in our routers keep everything connected, but maybe I'm wrong on this issue..)

  My problem is that when the internet at the office of the admin (where the servers are) breaks down, desktop to other locations have DNS problems and cannot connect to internet... and personal devices connected to WiFi that I provide to these places are struggling as well, being able to access only certain sites and sometimes no access at all.

  I think many computers to assign IP addresses, although I have added computers I have built and/or formatted and installed myself that work very well on the field.

  Why computers to the other localities are struggling to DNS and impossible to connect to the internet when the domain server is offline? What can I do to change this? I want our employees to always have internet access if the servers log.

  (Being a non-profit in this city it is the COMPUTER with most of the companies not having budget do not)

  The problem was the result of a secondary DNS server is not located in the router from the same place. My computer guy said Comcast as the secondary where the main DNS (my domain controller) server is not available... problem solved :)

• Routing and remote access - on three subnetworked, two subnet unable to reach to the internet!

  Hello

  Good evening everyone.

  I had a problem in Routing and remote access on windows 2003 server.  This server is already configured as a file server, domain server, and application server. Also configured as a router (thanks to access routing & remote) to connect the three different networks with each other. If this server has three NICs installed and each separate NIC network cards represent.

  three different networks are - 192.42.160.0/24, 192.42.161.0/24, 192.42.162.0/24

  Three cards of the NETWORK adapter installed on the server as with the IP - next

  NIC - 1 = 192.42.160.220, Sub - 255.255.255.0, gateway - No.

  NIC - 2 = 192.42.161.220, Sub - 255.255.255.0, gateway - 192.161.220.112 (this ip address for internet access then 4 g router IP)

  -3 = 192.42.162.220, NETWORK cards, Sub - 255.255.255.0, gateway - No.

  Now the question is I can get Internet & (also scathing in router ip 192.42.161.112) one network i.e. - 192.42.161.0/24, BUT when I try to access the internet from another two network (192.42.160.0/24 & 192.42.162.0/24) I can not access and in addition can not ping to internet router ip - 192.42.161.112...

  So, how do I access the internet to another two network also?

  I was already the configuration of static routing for all three network but I wasn't always successful. I don't really know what exactly static routing this should be done in access routing & remote area so that all three network can reach to the internet?

  Here is the result of the current track...

  D:\Documents and Settings\Administrateur > route print

  IPv4 routing table
  ===========================================================================
  List of the interface
  0x1 ........................... MS TCP Loopback interface
  0x2... 00 30 05 8f ad 5 c... Broadcom NetXtreme Gigabit Ethernet - Mi Teefer2
  niport
  0 x 3... 0E 00 c4 f8 a7 0c... Network Intel(r) PRO/1000 GT Desktop Adapter - Teefer2 M
  iniport
  0 x 4... 0E 00 0c a7 c5 85... Intel (r) PRO/1000 GT Desktop Adapter #2 - Teefer
  2 miniport
  ===========================================================================
  ===========================================================================
  Active routes:
  Network Destination gateway metric Interface subnet mask
  0.0.0.0 0.0.0.0 192.42.161.112 192.42.161.220 1
  127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
  192.42.160.0 255.255.255.0 192.42.160.220 192.42.160.220 20
  192.42.160.220 255.255.255.255 127.0.0.1 127.0.0.1 20
  192.42.160.255 255.255.255.255 192.42.160.220 192.42.160.220 20
  192.42.161.0 255.255.255.0 192.42.161.220 192.42.161.220 20
  192.42.161.220 255.255.255.255 127.0.0.1 127.0.0.1 20
  192.42.161.255 255.255.255.255 192.42.161.220 192.42.161.220 20
  192.42.162.0 255.255.255.0 192.42.162.220 192.42.162.220 20
  192.42.162.220 255.255.255.255 127.0.0.1 127.0.0.1 20
  192.42.162.255 255.255.255.255 192.42.162.220 192.42.162.220 20
  224.0.0.0 240.0.0.0 192.42.160.220 192.42.160.220 20
  224.0.0.0 240.0.0.0 192.42.161.220 192.42.161.220 20
  224.0.0.0 240.0.0.0 192.42.162.220 192.42.162.220 20
  255.255.255.255 255.255.255.255 192.42.160.220 192.42.160.220 1
  255.255.255.255 255.255.255.255 192.42.161.220 192.42.161.220 1
  255.255.255.255 255.255.255.255 192.42.162.220 192.42.162.220 1
  Default gateway: 192.42.161.112
  ===========================================================================
  Persistent routes:
  None

  Sorry if I'm not able to explain properly. Please let me know if you have to explain more about it...

  Thank you all.

  Mahesh

  Hello Manu,

  Please post this question in the forums TechNet for Windows Server 2003. They will be able to guide you further.

  http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home