RV042 router multiple WAN IP addresses assigned to different ranges of LAN IPs

Similar Questions

• RV220W - rules of access/redirection of port with multiple WAN IP addresses

  I just installed a Cisco RV220W - that works very well for outbound traffic, however for incoming it seems unable to work with multiple WAN IP addresses.

  We have a block of 6 WAN IPs assigned to us by our ISP, and I want to use each of them to expose certain ports on our servers to the outside world.

  I tried to do with rules (by using HTTP, for example) with the following parameters:

  Connection type: Inbound (WAN (Internet) > LAN (local area network))

  Action: Always leave

  Service: HTTP

  Source IP: Unique address

  Start:

  Send to the Server Local (DNAT IP):

  Use other WAN (Internet) IP address: disabled

  Status: Activated

  However, the port of the inaccessible Server/rest.

  I tried:

  • Restart the server with power power off again
  • implement the same port forwarding settings
  • triple-checking all the IP addresses used

  The only way that I have working is by changing the access rule so that it applies to any specific source rather than to another address... but this isn't a solution for us because we need to use specific IP addresses to the internal servers/ports specific.

  The interface of the router admin certainly suggests that this should be possible, but using it seems to break all incoming access!

  Any suggestion is welcome.

  You must use "ANY" as the source IP address, you publish your internal server to the internet and the internet means that the request comes from any source IP address (you don't know what it is, so that's all.

  Basically, you want any source IP to hit one of your WAN IP on port 80, and then your firewall will redirect the request to the internal private IP address of the server on the same port 80. And when the answer comes back internal server, the firewall will already have this translate entry in and reverse NAT won't happen (you must configure it, the default firewall function).

  I hope that I have answered your question.

  Please mark as correct, if you like the answer.

  Thank you

• Cisco SRP 521W with multiple WAN IP addresses

  Hi all

  I have an unusual scenario that may require the use of a SRP 521W-, the scenario is as follows:

  Temporary installation:

  • Cisco 857 ADSL router until the Ethernet Hand-off is installed
  • Several IPS delivered on the ADSL WAN service
  • Cisco 857 in Bridge Mode and connected to the WAN - SRP 521W port
  • Cisco 521W manages authentication and routing
  • Check Point Firewall system connected to SRP 521W LAN-1
  • Check Point Firewall has IP WAN 203.XXX.XXX.XXX
  • Cisco UC-540W connected to SRP 521W LAN-2
  • Cisco UC-540W has 203.XX WAN IP. XX. XX

  If you understand the situation described above, I'm curious to know if this is possible and if so how? I need a totally separate networks and the only thing they have in common is the Cisco SRP 521W.

  It is also worth noting that the SRP 521W is used because the ADSL service is only temporary, while the fiber build is complete and the carrier provides an Ethernet Hand-Off, then Internet service will change to this type of presentation and the ADSL router will be relegated in the dark loneliness world.

  I went through the router and have been playing around with the settings, the problem is that I have nothing in LABORATORY work more that can I would like to reproduce this environment and test it before deployment... SO I hope someone can help to shed light on this case in order to reduce the amount of trail and error, I have to meet to operate.

  For any help or suggestion is appreciated.

  See you soon,.

  David.

  Hi David,

  Is your PC provides you with all the public addresses within the same subnet?  that is the WAN IP of the router is part of the same subnet as the address 203.x.x.x?  Or well, is separately assigned WAN address?

  If the addresses are all part of the same subnet, I fear the SRP520 will not support what you are trying to do - this product does not support the concept of a single address on the WAN port forwarding/DMZ use.

  If the sunet inside is routed via the WAN address, then it should be possible to turn NAT and attack the VLAN local accordingly.

  PS: The SRP541 host multiple WAN addresses for port forwarding/DMZ.

  Kind regards

  Andy

• What does this mean and how to fix: the router address you entered is not compatible with your WAN IP address.

  I connect to an access provider via Airport Extreme, which is extended through two Airport Express.  When I try to edit anything in one of these devices, even a name, I get this message: "you have entered the address of the router is not compatible with your WAN IP address.  My connection seems to work, but there is clearly something wrong with her.  The Express has no DNS and will not update without the same message.  I have no idea what this is all about and will greatly appreciate the ideas.

  This means that WAN Setup does not or does not install across the network.

  The best way to solve this problem is beginning on...

  Reset all three at the factory and reconfigure each in turn. Do the extreme first and make sure it works... Then add the express.

  If you need help with that we will need to know which modem or modem router to your ISP gave you and possibly the type of services to wide band... and who is the provider.

  Give us screenshots of each installer as you do.

• Wireless and VPN RV042 router WRT54G

  Respected member, please help if you can! I have an ADSL with dynamic connected with the wrt54g router, I recently bought RV042 and want to connect the wire coming from wireless with ports. so, basically, I want to use RV042VPN for help after the router, is there a way I can use vpn behind with port using RV042 router wireless

  I can't be able to connect to the vpn as he seeks is not an ip or WAN/LAN.

  It may be possible if you're lucky. But I highly recommend not to connect the RV042 after the WRT. A VPN server must always have a public IP address. Running a VPN server behind a router NAT (such as WRT) makes it extremely difficult and often it won't work at all. Connect the RV042 directly to your modem, configure it to your internet connection. In this way the RV042 has the public IP and VPN should become much easier. Then implement the WRT as simple access point in your network by changing the address LAN IP of 192.168.1.1 to 192.168.1.2, disable the DHCP server, and connect a LAN port of the WRT on a LAN on the RV042 port.

• Site to Site VPN between ISR4331(Data Center) and 25 branches with RV042 and dynamic public IP address

  Hi, we just got router ISR4331. We will use this router to our datacenter as pummel hub. Not to mention that it will be the static IP address. Our goal is to connect 30 small offices to the Datacenter by VPN site-to-site. All of our offices a RV042 router and DSL connection, so dynamic public IP. How to accomplish this task. Before the VPN connection is stable and the need not to configure tunnels frequently.

  Thank you

  GM

  Hello

  Please check the config below:

  HUBS:

  crypto ISAKMP policy 1
  

   BA 3des
  md5 hash
  preshared authentication
  Group 2
  life 86400
  crypto isakmp secretkey key address 0.0.0.0 0.0.0.0 (Having said that the dynamic router HUB remote routers have public ip address)
  Describe your valuable traffic. Note that I have sepcified for both tunnels, but basically, it will be the same for the rest out for the destination. For example, I used 192.168.1.0/24 and 192.168.2.0/24. You will need to replace it with your existing installation.
  TUN1 extended IP access list
  ip permit 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
  TUN2 extended IP access list
  ip permit 192.168.1.0 0.0.0.255 192.168.3.0 0.0.0.255
  Create your strategy to Phase 2
  Crypto ipsec transform-set esp-3des esp-md5-hmac TS
  card crypto S2STUN 1-isakmp dynamic ipsec HUB_TUN
  crypto dynamic-map HUB_TUN 10
  

  86400 seconds, life of security association set

  game of transformation-TS

  match address TUN1

  !

  crypto dynamic-map HUB_TUN 11

  86400 seconds, life of security association set

  game of transformation-TS

  match address TUN2
  Now apply the card encryption to your WAN interface
  gi0/1 interface
  card crypto S2STUN
  Now configure on your remote routers
  Remote router 1
  crypto ISAKMP policy 1
  BA 3des

  md5 hash

  preshared authentication

  Group 2

  life 86400

  !

  ISAKMP crypto secretkey key address x.x.x.x (replace with your public ip address of the HUB)

  !

  TUNNEL TRAFFIC extended IP access list

  permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255

  !

  Crypto ipsec transform-set esp-3des esp-md5-hmac TS

  !

  crypto card TUN_TO_HUB 10 ipsec-isakmp

  defined peer x.x.x.x (replace with your public ip address of the hub)

  game of transformation-TS

  match address TRAFFIC TUNNEL
  !

  gi0/1 interface

  card crypto TUN_TO_HUB

  Remote router 2

  crypto ISAKMP policy 1
  
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  life 86400
  !
  ISAKMP crypto secretkey key address x.x.x.x (replace with your public ip address of the HUB)
  !
  TUNNEL TRAFFIC extended IP access list
  ip licensing 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
  !
  Crypto ipsec transform-set esp-3des esp-md5-hmac TS
  !
  crypto card TUN_TO_HUB 10 ipsec-isakmp
  defined peer x.x.x.x (replace with your public ip address of the hub)
  game of transformation-TS
  match address TRAFFIC TUNNEL
  !
  gi0/1 interface
  card crypto TUN_TO_HUB
  HTH.
  Evaluate the useful ticket.
  Kind regards
  Terence

• IP DHCP by SSID address assignment

  Hello

  I want to assign addresses IP of SSID on the 861W. I have two VLAN on the router on two different subnets and a DHCP pool for each subnet. AP I have two on each SSID and VLAN.

  However, when I associate it with different SSID, I get an ip address from a DHCP pool, instead of different pools. I want ip from different subnets with SSID.

  Any help is greatly appreciated.

  Here is the config of the AP:

  version 12.4

  no service button

  horodateurs service debug datetime msec

  Log service timestamps datetime msec

  encryption password service

  !

  host ap name

  !

  enable secret 5

  !

  No aaa new-model

  clock timezone IS - 5

  clock to summer time EDT recurring

  !

  !

  !

  dot11 ssid Public

  VLAN 1

  open authentication

  !

  Voice of ssid dot11

  VLAN 2

  open authentication

  !

  !

  !

  Cisco 7 password username

  !

  Bridge IRB

  !

  !

  interface Dot11Radio0

  no ip address

  no ip route cache

  !

  SSID Public

  !

  Voice of SSID

  !

  station-role root-access point

  !

  interface Dot11Radio0.1

  encapsulation dot1Q 1 native

  no ip route cache

  Bridge-Group 1

  Bridge-group subscriber-loop-control 1

  Bridge-Group 1 block-unknown-source

  No source of bridge-Group 1-learning

  unicast bridge-Group 1-floods

  Bridge-Group 1 covering-disabled people

  !

  interface Dot11Radio0.2

  encapsulation dot1Q 2

  no ip route cache

  Bridge-Group 1

  Bridge-group subscriber-loop-control 1

  Bridge-Group 1 block-unknown-source

  No source of bridge-Group 1-learning

  unicast bridge-Group 1-floods

  Bridge-Group 1 covering-disabled people

  !

  interface GigabitEthernet0

  Description the GigabitEthernet incorporated AP 0 is an internal interface connecting AP with the host router

  no ip address

  no ip route cache

  !

  interface GigabitEthernet0.1

  encapsulation dot1Q 1 native

  no ip route cache

  Bridge-Group 1

  No source of bridge-Group 1-learning

  Bridge-Group 1 covering-disabled people

  !

  interface GigabitEthernet0.2

  encapsulation dot1Q 2

  no ip route cache

  Bridge-Group 1

  No source of bridge-Group 1-learning

  Bridge-Group 1 covering-disabled people

  !

  interface BVI1

  customer_id GigabitEthernet0 dhcp IP address

  no ip route cache

  !

  IP http server

  no ip http secure server

  IP http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag

  1 channel ip bridge

  !

  !

  !

  Line con 0

  no activation-character

  line vty 0 4

  local connection

  !

  end

  To answer your previous post, you have no need create control2.

  I think that you need on the trunk of your gig0 on the router interface. Try:

  interface GigabitEthernet0 Wlan

  switch to trunk encapsulation dot1q

  mode trunk switch

  Let me know if this does not work.

  Jeff

• Name resolution fails when you are using multiple static IP addresses

  When multiple static IP addresses are set on my single Ethernet adapter, name resolution fails most of the time in both directions. It sometimes works, but this seems like only I can when he in thing to go back to the IP address of a specific subnet (changing the order of the IP addresses in the config?).

  Settings IPv4 of the Ethernet adapter (which I will refer to PC - 1, Win8) are generally the following:
  IP: 192.168.15.180/24
  IP: 192.168.1.254/24
  IP: 169.254.1.1/16
  Gateway: 192.168.15.1

  Check name resolution from another PC (which I will refer to PC - 2, Win7) on the 192.168.15.0 subnet via ping returns often to the other two survey periods. PC - 2 IPv4 settings are:
  IP: 192.168.15.182/24
  Gateway: 192.168.15.1

  PC - 2:
  c:\>ping PC-1
  Ping PC-1 [192.168.1.254] with 32 bytes of data:
  Request Timed Out

  The outcome here is, of course, the PC-1 sees a query of a computer name on 192.168.15.0 subnet and it returns the IP address for this subnet.

  In addition, and more to my main problem, PC - 1 does not return an IP address for our servers local (I'll call Server-1), returns the following error.
  c:\>Ping Server-1
  Ping request could not find host Server-1. Please check the name and try again.
  Ping the IP address directly works without problem.

  The two problems are solved when the two 169.254.0.0 192.168.1.0 and subnet subnet are removed from the PC-1, leaving only the statically assigned subnet 192.168.15.0. The issue can be reproduced on 2 PC (Win7) as well by assigning similar static IP.

  Does anyone have a suggestion or two to try?

  Hello
   
  The question is more suited in the TechNet forums. So I would say you mention the link and send the request in this forum for better support.
   
  http://social.technet.Microsoft.com/forums/en-us/w8itpronetworking/threads
   
  For any information related to Windows, feel free to get back to us. We will be happy to help you.

• Multiple WAN + several VLAN = hair loss

  Hello world

  We have a block of IP addresses of our ISP and I am using one for a network of comments, but I can not understand how to configure.

  X 2 (ending with 150 WAN IP address) should feed WAN X 0 (VLAN 1), and

  X 2 (ending with 151 WAN IP address) should feed WAN X 0: V2 (VLAN 2).

  I have already created the sous-interface side LAN and VLAN works very well internally.  I just need to know what NAT rules (or rules of firewall or sorcerers, etc.), I need to enter to the above plan work.

  Thank you!

  Hello

  Policy NAT below should help you accomplish what plan to do:

  Original source: X 0 subnet
  Translated source: X 2 (IP WAN ending by 150)
  Original destination: all
  Translated destination: Original
  Original service: no
  Translation service: Original
  The source Interface: X 0
  Destination interface: X 1

  Original source: X 0: subnet V2
  Translated source: X 2 (IP WAN ending with 151)
  Original destination: all
  Translated destination: Original
  Original service: no
  Translation service: Original
  The source Interface: X 0: V2
  Destination interface: X 1

  #IWork4Dell

• How to find the IP address assigned to Dev Alpha for use with blackberry-deploy?

  The Playbook, I use blackberry - deploy to install the .bar file. It requires the IP address assigned to the Playbook, which is available by clicking on an icon in the status bar in development mode.

  However, I don't see such an icon on the alpha of dev. Is it possible to find the IP address assigned to Alpha of Dev that I can use with blackberry-deploy?

  Answered my own question. Its network connects-> advanced-> Internet connection.

• RV180W of WLAN traffic is not routed to WAN

  My WIFI traffic is not routed to WAN.

  I can access LAN and plug to NIR all on the local network. But internet access is not possible. WAN LAN access is allowed.

  I have reset the RV180w to factory settings and also reflashed the firmware to make sure.

  To configure a static route to wlan to wan?

  The routing of the generated RV180 table

  Destination	Entry door	Genmask	Metric	REF	Use	Interface	Type	Flags
  127.0.0.1	127.0.0.1	255.255.255.255	1	0	0	Lo	Static	Upward, gateway, host
  172.16.0.0	0.0.0.0	255.255.254.0	0	0	0	BDG1	Dynamics	UPWARD
  85.0.84.0	0.0.0.0	255.255.252.0	0	0	0	eth1	Dynamics	UPWARD
  127.0.0.0	0.0.0.0	255.0.0.0	0	0	0	Lo	Dynamics	UPWARD
  0.0.0.0	85.0.84.1	0.0.0.0	0	0	0	eth1	Dynamics	Upward, gateway

  Hi Pete,.

  I read your case, it seems that the problem is not related. What I am referring is an external AP connected to the RV180W when the wireless is enabled on the RV180W. Devices that connect to the AP will not be able to access the internet. If the radio on the RV180W is turned off, the devices that connect to the AP can connect to internet.

  -Marty

• When you try to connect to my router using the IP address, he continues to ask for a password of windows security.

  When you try to connect to my router using the IP address, he continues to ask for a password of windows security.  I don't know what it is, I tried recording with every combination I can think.  Can anyone help?

  If you do not know the password of the router, then chances are good that you will need to reset it to the factory settings. Google your model and you should be able to find the instructions.

  I hope this helps.

• Captivate 4 - reports to multiple e-mail addresses

  Just upgraded to Captivate 4, and it seems that I can no longer enter multiple e-mail addresses separated upon entry into the quiz preferences/reporting/e-mail field in a semicolon. When I tried in Captivate 4, I got a message saying "Please enter valid email address to continue." Works well with Captivate 3. Can send you to an e-mail address with Captivate 4? Thank you!

  Hello

  I just tried with a semicolon and he agreed very well.

  What may be your nail are spaces. Try to use the semicolon and remove all spaces.

  See you soon... Rick

  Useful and practical links Captivate wish form/Bug report form Certified Adobe Captivate training SorcerStone blog Captivate eBooks

• On transmission button on a form is it possible to add multiple e-mail addresses?

  Is it possible to send a form to several people? And if so how can I go about it without having two separate email buttons?

  Help, please!

  Mustbeluck

  Yes, just put multiple e-mail addresses in the URL mailto, separated by semicolons of semi.  For example:

  mailto:[email protected]. [email protected]

  Concerning

  Steve

• ESX uses network adapter with the mac address that is different than virtual connect reports

  Hi all

  Our ESX environment consists of HP C7000 enclosure, virtual connect 1 gb ethernet with a mixture of BL480c and BL460c. We just bought some new BL460c G7 with NIC NC553i to replace some of the oldest BL480c. We have configured Virtual Connect to assign mac addresses. In vc management consoleI see the addresses assigned to the server, but when I start the server displays a different mac address for nic #2 that vc does. NIC #1 has the same mac address of console management vc and in the server BIOS. When I install ESX also sees the 'wrong' for #2 nic mac address. According to vmware nic #2 has not any network connected to what should be if it was really nic #2 (according to the vc management console).

  When I look at the mac addresses in the BIOS none of the network interface card have the mac address assigned by vc. VC firmware is 3.01. I have attached the photos I see information in the management of VC and BIOS console. Someone at - it for clues to what is happening and how can I solve it? Thanks in advance.

  Kind regards

  GB

  Please refer to:

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalID=1001167

  Note:   The ESX host uses following addresses starting with 00:50:56 (as opposed to the address embedded in the interface itself).

  To determine the MAC address of the interface Board of the ESX host, run the command:

  # ifconfig | grep-i hw

  The output looks like:

  vswif0 Link encap HWaddr 00:50:56:41:5 A: 59

  The MAC address is in the first line after HWaddr.  In this example, the MAC address is 00:50:56:41:5 has: 59.

  Note:   The ESX host uses following addresses starting with 00:50:56 (as opposed to the address embedded in the interface itself).

  You can also review the output information and the esxcfg-NICS - l order MAC addresses.