RV042G and several subnets

Hi!, I am trying to configure a RV042G to process at least 3 subnets, I see that it does not support 802. 1 q trunks, but on the interface of configuration page it gives the possibility to define a vlan for the port (static options: vlan1 vlan4 :/) but it is not possible to address IP Configuration for each vlan.)

How is it?, is a router that cannot route between subnets?, what are the VLAN used for then?

Kind regards.

Ciro,

Please see the following thread. This might give you a better idea of the functioning of the RV042 (G) about the VLAN and multiple subnets.

https://supportforums.Cisco.com/thread/2226281

-Marty

Tags: Cisco Support

Similar Questions

Linked clones and several subnets / VLAN

Hey all,.
In an environment with thousands of VMS, there at - it a better practical method to deal with the fact that some of the clones will be on different subnets or VLANS?
For example, imagine 500 clients need to be on a separate network other clones.
- Creation of another master VM model would cause more costs general administrative (maintenance of multiple masters)
- Manually move the special 500 VMS to their own network would be ok, but it would be lost during a refresh/rebuild because the master is always on the main network.
From what I've read so far, the best thing to do is a powershell script to change the special virtual machine VIRTUAL LAN after each refresh/redial.
I wanted to ask you, if there was a best practice for this problem in large environments.
Thank you
Drew

I think that it is an area where the view really fails and should probably be a feature request for future versions. I didn't know the established practice of the best, but I would probably lean towards the powershell script to make the changes as the easiest to maintain and operate.

several subnets by VLANS and ports link

Hello
I need some clarification.
Our iSCSI SAN storage (Dell MD3660i0 requires a separate subnet by port.
We require paths multiple access and balancing in VMware.
To achieve this in ESXi 5.1 we need binding ports... BUT the binding of ports is supported only if the vmks are all in the SAME domain in accordance with these two KBs broadcasting
VMware KB: Considerations for use binding software iSCSI ports in ESX/ESXi
VMware KB: When the use of several VMkernel ports with port required to access the storage of two or more tables on different br...
OK... probably so I simply put my all subnets in ISCSI storage in one VLAN and everything will be ok (one VLAN is after all a broadcast domain, both are stuff of L2)... This would respond to the requirements of KBs... If VMware means "area of distribution" in the true sense of the term.
So my question is can you configure the port in this way binding? It is supported by VMware?

VMware has come back to me (in fact the author of one of the kb/s I've referenced)

http://KB.VMware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalID=2038869

He confirmed that the terminology used in the KB is misleading and "broadcast domain", it actually means "subnet" so not layer 3 layer 2.

This means that you can NOT have multiple subnets in a broadcast domain (VLAN) AND use the SW iSCSI port binding.

BUT

He told me (he is very familiar with the Dell MD3660i iSCSI kit), you don't have to have binding of ports to achieve several Multipathing and load balancing. If you have a requirement for several subnets of your iSCSI SAN provider then just create multiple vmks on different subnets, and DO NOT make the port binding. The fact that they are on different subnets will be enough to achieve the multiple paths

It updates the KB to make this much clearer.

I hope this helps someone

ISA550 and multiple subnets?

Just picked up an ISA550 and have been playing with it a bit, but seem to get into trouble. I have two LAN subnets in my small business with about 10 hosts per subnet. I would use the ISA550 path between them (and the internet), but can't seem to figure out how. Is it as simple as the creation of two VIRTUAL LANs? The ISA550 allows to route traffic VLAN?

With my old RV042G, I had the option to configure several subnets within the configuration menu, but I don't see these surfaces with the 550. Any help would be appreciated!

> Is as simple as the creation of two VIRTUAL LANs? The ISA550 allows to route traffic VLAN?

Yes and Yes. As soon as a local VIRTUAL network is created, you can configure its IP subnet. ISA550 supports routing inter - VLAN.

Several subnets in the site to Site VPN

Hi guys,.
I would like to set up a site of tunnel VPN stie with several subnets. I could not find a configuration which is my problem. I hope you can help me with the solution.
You can find my design network attach to this subject.
This is my setup on the ASA:

(1) NAT excemption for network traffic, go to the Site to site VPN.
NAT (MGMTLAN, INT STSVPN) static source 192.168.10.0 192.168.10.0 static destination 192.168.31.0 192.168.31.0
NAT (inside, INT STSVPN) static source 192.168.15.0 192.168.15.0 static destination 192.168.38.0 192.168.38.0

(2) the Accesslist with traffic to encrypt
object-group network 192.168.10.0
object-network 192.168.10.0 255.255.255.0

object-group network 192.168.15.0
object-network 192.168.15.0 255.255.255.0

the 192.168.38.0 object-group network
object-network 192.168.38.0 255.255.255.0

the 192.168.31.0 object-group network
object-network 192.168.31.0 255.255.255.0

object-group network STSVPN-LOCAL
Group-object 192.168.10.0
purpose of group - 192.168.15.0

object-group network STSVPN-US
purpose of group - 192.168.38.0
purpose of group - 192.168.31.0

ACL_STSVPN-US allowed extended ip access-list object-STSVPN-LOCAL object group STSVPN-American

(3) proposal phase 1
IKEv2 crypto policy 10
aes-256 encryption
sha256 integrity
Group 14
FRP sha256
second life 86400

(4) proposal phase 2
Crypto ipsec ikev2 proposal ipsec IKEV2-IPSEC-ESP-AES-SHA
Protocol esp encryption aes-256
Protocol esp integrity sha-256

(5) group tunnel
tunnel-group 4.4.4.4 type ipsec-l2l
tunnel-group 4.4.4.4 General attributes
Group Policy - by default-GrpPolicy-STSVPN-US
IPSec-attributes tunnel-group 14.4.4.4
IKEv2 remote-authentication pre-shared key abcd
IKEv2 authentication local pre-shared key abcd

GroupPolicy
Group Policy GrpPolicy-STSVPN-US internal
Group Policy attributes GrpPolicy-STSVPN-US
value of VPN-filter STSVPN-US
Ikev2 VPN-tunnel-Protocol

(5) crypto card
10 CM-STSVPN crypto card matches the address STSVPN-US
10 CM - STSVPN peer set 4.4.4.4 crypto card
card crypto 10 CM-STSVPN set ikev2 proposal ipsec IKEV2-IPSEC-ESP-AES-SHA
interface card crypto INT-STSVPN CM-STSVPN
Crypto ikev2 enable INT-STSVPN

/////////////////////////////////////////////////////////////////////

The router configuration:

(1) part SA

proposal of crypto ikev2 ki2. PROP
encryption aes-cbc-256
sha256 integrity
Group 14
IKEv2 crypto policy ki2. POL
proposal ki2. PROP
ikev2 KR1 encryption keys
peer ASALAB
address 2.2.2.2
pre-shared key local abcd
pre-shared key remote abcd
Profile of crypto ikev2 ki2. TEACHER
match one address remote identity 2.2.2.2 255.255.255.255
address local identity 4.4.4.4
sharing front of remote authentication
sharing of local meadow of authentication
door-key local KR1

(2) Transformset

Crypto ipsec transform-set TS. VPN2, esp esp - aes hmac-sha256-256
tunnel mode

(3) access-list

IP ACL extended access list. VPNIKE2
IP 192.168.31.0 allow 0.0.0.255 192.168.10.0 0.0.0.255
IP 192.168.38.0 allow 0.0.0.255 192.168.15.0 0.0.0.255

(5) crypto card

crypto CM card. 30 VPN ipsec-isakmp
defined peer 2.2.2.2
the transform-set TS value. VPN2
group14 Set pfs
ki2 ikev2-profile value. TEACHER
match address ACL. VPNIKE2

//////////////////////////////////////////////////////////////////////

This configuration is correct to allow both subnets on each side of the VPN tunnel to communicate with each other.

192.168.31.0 subnet cannot communicate with 192.168.10.0
192.168.38.0 subnet cannot communicate with 192.168.15.0

Hello Jay,

I went during the configuration of the two aircraft and noticed a few errors on the configuration of the SAA. Details here:

(1) the access list configured for VPN traffic is named ACL_STSVPN-US, however the address for correspondence configured on the map encryption uses a group of objects name instead:

address for correspondence card crypto 10 CM - STSVPN STSVPN-US

You must change this setting to avoid any problems with the negotiation of traffic:

no matching address card crypto 10 CM-STSVPN STSVPN-US

10 CM-STSVPN crypto card matches the address ACL_STSVPN-US

(2) you also have the same error on the configured vpn filter. However, you could not use the access list ACL_STSVPN-United States for VPN filter since the ASA will filter incoming packets only. In this case the appropriate ACL will be configured for remote network (ROUTER) to local networks (ASA). It will look something like this:

access-list VPN_filter extended permitted ip object-STSVPN-US group LOCAL STSVPN

access-list VPN_filter extended permitted ip object-STSVPN-US group LOCAL STSVPN

Group Policy attributes GrpPolicy-STSVPN-US
VPN-Filter VPN_filter value

Keep in mind that the VPN filter is in the rules that determine whether to allow or deny packets of data tunnelees coming through the device security, based on criteria such as the source, destination, and Protocol address address. If you want to use the IP Protocol, the filter will not make a difference.

(3) group 14 of the PFS is configured on the router crypto map, but not on the SAA. You need to even add it in the card encryption ASA or remove it from the router.

ASA:

card crypto 10 CM-STSVPN set group14 pfs

Router:

crypto CM card. 30 VPN ipsec-isakmp

No group14 set pfs

Hope this help you to raise the tunnel,

Luis.

Have problems with the IPSec VPN Client and several target networks

I use an ASA 5520 8.2 (4) running.

My goal is to get a VPN client to access more than one network within the network, for example, I need VPN client IPSec and power establish tcp connections on servers to 192.168.210.x and 10.21.9.x and 10.21.3.x

I think I'm close to having this resolved, but seems to have a routing problem. Which I think is relevant include:

Net1: 192.168.210.0/32

NET2: 10.21.0.0/16

NET2 has several subnets defined VIRTUAL local network:

DeviceManagement (vlan91): 10.21.9.0/32

Servers (vlan31): 10.21.3.0/32

# See the road

Code: C - connected, S - static, RIP, M - mobile - IGRP, R - I, B - BGP

D - EIGRP, OSPF, IA - external EIGRP, O - EX - OSPF inter zone

N1 - type external OSPF NSSA 1, N2 - type external OSPF NSSA 2

E1 - OSPF external type 1, E2 - external OSPF of type 2, E - EGP

i - IS - L1 - IS - IS level 1, L2 - IS - IS IS level 2, AI - IS inter zone

* - candidate by default, U - static route by user, o - ODR

P periodical downloaded static route

Gateway of last resort is x.x.x.x network 0.0.0.0

C 192.168.210.0 255.255.255.0 is directly connected to the inside

C 216.185.85.92 255.255.255.252 is directly connected to the outside of the

C 10.21.9.0 255.255.255.0 is directly connected, DeviceManagement

C 10.21.3.0 255.255.255.0 is directly connected, servers

S * 0.0.0.0 0.0.0.0 [1/0] via x.x.x.x, outdoor

I can communicate freely between all networks from the inside.

interface GigabitEthernet0/0

Description * INTERNAL NETWORK *.

Speed 1000

full duplex

nameif inside

security-level 100

IP 192.168.210.1 255.255.255.0

OSPF hello-interval 2

OSPF dead-interval 7

!

interface Redundant1.31

VLAN 31

nameif servers

security-level 100

IP 10.21.3.1 255.255.255.0

!

interface Redundant1.91

VLAN 91

nameif DeviceManagement

security-level 100

IP 10.21.9.1 255.255.255.0

permit same-security-traffic inter-interface

NO_NAT list of allowed ip extended access all 172.31.255.0 255.255.255.0

IP local pool vpnpool 172.31.255.1 - 172.31.255.254 mask 255.255.255.0

Overall 101 (external) interface

NAT (inside) 0-list of access NO_NAT

NAT (inside) 101 192.168.210.0 255.255.255.0

NAT (servers) 101 10.21.3.0 255.255.255.0

NAT (DeviceManagement) 101 10.21.9.0 255.255.255.0

static (inside, DeviceManagement) 192.168.210.0 192.168.210.0 netmask 255.255.255.0

static (inside, servers) 192.168.210.0 192.168.210.0 netmask 255.255.255.0

static (servers, upside down) 10.21.3.0 10.21.3.0 netmask 255.255.255.0

static (DeviceManagement, upside down) 10.21.9.0 10.21.9.0 netmask 255.255.255.0

access list IN LAN extended permitted tcp 192.168.210.0 255.255.255.0 any

access list IN LAN extended permit udp 192.168.210.0 255.255.255.0 any

LAN-IN scope ip 192.168.210.0 access list allow 255.255.255.0 any

LAN-IN extended access list allow icmp 192.168.210.0 255.255.255.0 any

access list IN LAN extended permitted tcp 10.21.0.0 255.255.0.0 any

access list IN LAN extended permitted udp 10.21.0.0 255.255.0.0 any

LAN-IN scope 10.21.0.0 ip access list allow 255.255.0.0 any

LAN-IN extended access list allow icmp 10.21.0.0 255.255.0.0 any

standard access list permits 192.168.210.0 SPLIT-TUNNEL 255.255.255.0

standard access list permits 10.21.0.0 SPLIT-TUNNEL 255.255.0.0

group-access LAN-IN in the interface inside

internal VPNUSERS group policy

attributes of the VPNUSERS group policy

value of server DNS 216.185.64.6

Protocol-tunnel-VPN IPSec

Split-tunnel-policy tunnelspecified

Split-tunnel-network-list value of SPLIT TUNNEL

field default value internal - Network.com

type VPNUSERS tunnel-group remote access

tunnel-group VPNUSERS General attributes

address vpnpool pool

strategy-group-by default VPNUSERS

tunnel-group VPNUSERS ipsec-attributes

pre-shared key *.

When a user establishes a VPN connection, their local routing tables have routes through the tunnel to the 10.21.0.0/16 and the 192.168.210.0/32.

They are only able to communicate with the network 192.168.210.0/32, however.

I tried to add the following, but it does not help:

router ospf 1000

router ID - 192.168.210.1

Network 10.21.0.0 255.255.0.0 area 1

network 192.168.210.0 255.255.255.252 area 0

area 1

Can anyone help me please with this problem? There could be a bunch of superfluous things here, and if you could show me, too, I'd be very happy. If you need more information on the config, I'll be happy to provide.

Hello Kenneth,

Based on the appliance's routing table, I can see the following

C 10.21.9.0 255.255.255.0 is directly connected, DeviceManagement

C 10.21.3.0 255.255.255.0 is directly connected, servers

C 192.168.210.0 255.255.255.0 is directly connected to the inside

And you try to connect to the 3 of them.

Politics of Split tunnel is very good, the VPN configuration is fine

The problem is here

NO_NAT list of allowed ip extended access all 172.31.255.0 255.255.255.0

NAT (inside) 0-list of access NO_NAT

Dude, you point to just inside interface and 2 other subnets are on the device management interface and the interface of servers... That is the question

Now how to solve

NO_NAT ip 192.168.210.0 access list allow 255.255.255.0 172.31.255.0 255.255.255.0

no access list NO_NAT extended permits all ip 172.31.255.0 255.255.255.0

NO_NAT_SERVERS ip 10.21.3.0 access list allow 255.255.255.0 172.31.255.0 255.255.255.0

NAT (SERVERS) 0 ACCESS-LIST NO_NAT_SERVERS

Permit access-list no.-NAT_DEVICEMANAGMENT ip 10.21.9.0 255.255.255.0 172.31.255.0 255.255.255.0

NAT (deviceManagment) 0-no.-NAT_DEVICEMANAGMENT access list

Any other questions... Sure... Be sure to note all my answers.

Julio

Slow APEVIA CYBERPOWER, 4-core, Windows 7 Home premium-slow two start and several popups asking me to change the settings

I followed all the directions to Norton Support staff, but windows won't let me access the 'C:\Users\Chris>chkdsk. My machine is slow and several companies have informed me serious problems. (In the black box) of "Start - Search says chkdsk " access denied because you don't have enough privileges. " You have to invoke this utility running in elevated mode. I used the system and Defragmenter tools. The "USER ACCOUNT" of my control panel lists ' Chris as administrator, still will not allow me access! Neither I nor Tech Norton can understand this one. CAN ANYONE?

My problem is that now I'm quite cash and poor credit and I can not find a freeware without scanner is not a costly record for the fix. Now I wonder if they still exist. Can someone help an old man handicapped with nothing in his life to do than to play Flight Simulator-X.

Signed

Out-Of-Commission-Without-Some-Help.

I bought a computer from them 4 years ago and my experience was not very good. I had to replace the motherboard and power supply and while I was there I replaced the RAM sticks because they were not compatible with the jury as well the only thing original is the case, and the microphone on the front panel is not working still I have not tried yet the helmet.

I don't know what the problem with your machine, but it is possible that it is hardware or software partners. I suggest that you post in the forums there is someone out there can help you out. If your machine is still under warranty I contact them or take it to a reputable repairshop. Just to let you know I was really sick and I couldn't return my machine within a period of one month return policy, and they told me to come any time to get my computer fixed.

I rode it five times and was always a problem. The only solution was to fix it myself.

Microsoft tools for restore the disk framentation system, and several others are missing. Is there a way to recover/reload?

My computer crashed so I had to use my recovery disks that are about 8-10 years. When I reinstalled Windows service pack 2, the system recovery tools and several other microsoft tools not have installed on my system. Is it possible to recover these tools? The command prompt tells me that they are not on my system and get help from the Server Manager in the service (Net HelpMSG 2185) option. Can you tell me what that means and if/how I can do this? I can't find a tab from the system restore on my computer. I guess that's because I have more access to these tools. My messages when I try to update things like Windows Media Player tells me that I can't set a date of restoration and that if I lose my installed programs that they can not be recovered. Guess that means I have to use my recovery again disks?

<(Microsoft tools="" for="" the="" system="" restore,="" disk="" framentation,="" and="" several="" others="" are="" missing.="" is="" there="" a="" way="" to="" retreive/reload="" these="" tools?="" (assessories,="" system="" tools)="">

Hey, take a look at the article and try the steps

http://www.softwaretipsandtricks.com/Forum/Windows-XP/17333-System-Restore-tab-missing-XP-Pro.html

See you soon!

I downloaded Windows 10 and it deleted my Adobe Acrobat and several other programs. I need to download again, but does not have the product key.

I downloaded Windows 10 and it deleted my Adobe Acrobat and several other programs. I need to download again, but does not have the product key.

Hi Dean,

To locate your Acrobat serial n refer to find the serial number of your product Adobe quickly

Download Acrobat X, see Download Adobe Acrobat products. Standard, Pro | DC, XI, X

It could be useful!

Rayyan

Catalogues and several PC

Hello. I am new to CC & confused about catalogues and several PC. My catalog (5.5 GB) resides on the C: drive to my desktop PC, like the installation of Lightroom. My pictures are on an internal hard drive F:. I also have Lightroom installed on my laptop. The two computers are on the same network. What is the recommended method to access the catalogue of my laptop and have all changes reflected on two computers? I have read many articles and posts on this topic, but I'm still confused.

Hi davida31228700,

We do not recommend to store the catalog on the network even if you can have images stored on networks.

If you want to have the same work in the computer, you can have your catalog on a disk external with the images so that you can use same catalog back and foam between the two computers.

Check the below thread for more information: Re: Sync Lightroom catalogs between two different computers

Concerning

Sarika

can you have a version of CS and several version of the software installed for example Lightroom CC both?

can you have a version of CS and several version of the software installed for example Lightroom CC both?

Yes, you can have multiple versions installed.

Please see this link:

Download previous versions of Adobe Creative applications-

Download previous versions of Cloud Creative applications

You can have both CC and CS6 installed through creative cloud. You can also leave the old purchased software installed.

00497 PLS: do not mix between row and several rows (in BULK) list

Hello

I have a requirement to send an array of data via mail,

so use execute statement after opening the connection and use the following code PLSQL, who is not running.

My code goes like this.

0 10 20 30 40 50

1 CREATE OR REPLACE PROCEDURE SEND_TABLE_DATA (FROMAD IN VARCHAR2,

2 TOAD IN VARCHAR2,

3 SUBJECT IN VARCHAR2,

4 MESSAGE IN VARCHAR2,

5 DOCID IN VARCHAR2,

6 DOCDT IN DATE,

PRODOAID 7 IN NUMBER)

8 AS

BATCHNO 9 VARCHAR2 (32767).

NUMBER OF PCSBOX 10;

NUMBER AMOUNT 11;

12 SMTPHOST VARCHAR2 (255): = ' XXX.XXX. X.XXX ";

13. A UTL_SMTP. CONNECTION;

BEGIN 14

15A: = UTL_SMTP. OPEN_CONNECTION(SMTPHOST,25);

16 UTL_SMTP. HELO (A, SMTPHOST);

17 UTL_SMTP. MAIL (A, FROMAD);

18 UTL_SMTP. RCPT (A, TOAD);

19 UTL_SMTP. OPEN_DATA (A);

20 UTL_SMTP. WRITE_DATA (ONE, CHR (13) |) CHR (13) | CHR (13));

21 UTL_SMTP. WRITE_DATA (, ' Date: ' |) TO_CHAR (SYSDATE, ' DD/MM/YYYY HH24:MI:SS'). CHR (13));

22 UTL_SMTP. WRITE_DATA (, ' from: ' |) FROMAD | CHR (13));

UTL_SMTP 23. WRITE_DATA (, ' from: ' |) TOAD | CHR (13));

24 UTL_SMTP. WRITE_DATA (, ' subject: ' |) TOPIC | CHR (13));

25 UTL_SMTP. WRITE_DATA (ONE, MESSAGE |) DOCID | "Documented on ' | DOCDT | CHR (13));

26 UTL_SMTP. WRITE_DATA (A, CHR (13) |) CHR (13) | CHR (13));

UTL_SMTP 27. WRITE_DATA (A, "it's for your information" |) CHR (13));

28 UTL_SMTP. WRITE_DATA (, ' BATCHNO ' |) ' -- '||' PCSBOX ' |' --' ||' AMOUNT '. CHR (13));

29 IMMEDIATE EXECUTION

30 ' SELECT

31 A.BATCHNO, B.PCSBOX, B.AMOUNT

33 SCHEMA1. TABLEX, SCHEMA2. TABLEY B

34. WHERE THE

35 A.BATCHID = B.BATCHNO AND B.PRODOAID =' | PRODOAID

36. IN BULK COLLECT INTO BATCHNO, PCSBOX, AMOUNT;

37 FOR indx IN 1.BATCHNO. COUNTY

LOOP 38

UTL_SMTP 39. WRITE_DATA (A, BATCHNO (indx) |) ' -- '|| PCSBOX (indx) |' --' || Amount (indx) | CHR (13));

40 END LOOP;

UTL_SMTP 41. WRITE_DATA (A, CHR (13) |) CHR (13) | CHR (13));

UTL_SMTP 42. CLOSE_DATA (A);

UTL_SMTP 43. QUIT (A);

44 EXCEPTION

45 THEN THAN OTHERS THEN

UTL_SMTP 46. QUIT (A);

RAISE 47;

FIN 48;

49.

SELECT * FROM USER_ERRORS

NAME TYPE SEQUENCE LINE POSITION TEXT ATTRIBUTE MESSAGE_NUMBER

SEND_TABLE_DATA	PROCEDURE	3	37	1	PL/SQL: Statement ignored	ERROR	0
SEND_TABLE_DATA	PROCEDURE	2	37	24	PLS-00487: Invalid reference to the variable 'BATCHNO '.	ERROR	487
SEND_TABLE_DATA	PROCEDURE	1	36	25	00497 PLS: do not mix between row and several rows (in BULK) list	ERROR	497

Thanks in advance

Concerning

Pradeep.

> 29 IMMEDIATE EXECUTION

> 30 ' SELECT

> A.BATCHNO, B.PCSBOX, B.AMOUNT 31

> 32 OF

> 33 SCHEMA1. TABLEX, SCHEMA2. TABLEY B

> WHERE 34

> A.BATCHID = 35 B.BATCHNO AND B.PRODOAID =' | PRODOAID

> 36 BULK COLLECT INTO BATCHNO, PCSBOX, AMOUNT;

BATCHNO PCSBOX and AMOUNT variables are defined as scalar variables. Check the definition here

> 9 BATCHNO VARCHAR2 (32767).

NUMBER OF PCSBOX > 10;

> 11 AMOUNT NUMBER;

You cannot use COLLECT LOOSE on scalar variables. The variables must be defined as a TYPE of COLLECTION to make in bulk to collect.

RV042G and DHCP server

Hello

The RV042G takes by acting as a DHCP server on several local networks virtual (or alone)?

Im going to set up three separate VLAN (no routing between the two) and want the router to provide addresses on all three VLAN (different subnets). The RV042G will do the job?

Appreciate any input

/ Claes

Paindivine,

Please refer to this previous post.

https://supportforums.Cisco.com/discussion/11576126/RV042-multiple-subnets

ISA550W and several addresses IP WAN

I've been search in documentation and have not seen anything on the 550 for several public IP configuration. I guess you can configure it to use a subnet as apposed to an IP address. Is this correct?

If this is not the case, how to configure the ISA550W multiple public IP addresses?

Thank you

Yes, you can configure the ISA550W for multiple IP addresses by the introduction of a subnet instead of a single IP address.

Sent by Cisco Support technique iPhone App

Selection extended DHCP and several VLANs

I have a switch that has 2 VLANS: vlan 2 and vlan 3 - and both computers are connected to the switch where each PC is a member of one of VLAN.

PC2 = VLAN2

PC3 = VLAN3

The switch is connected to a router that acts as a DHCP server with several 3 DHCP scopes for each of VLAN, basically a simple configuration "router on a stick". This question has been confusing me for some time: How does the router knows what dhcp scope to assign an IP address to a particular computer?

Let's say PC2 is now trying to get an IP address from the DHCP server, I know initially that he will send a DHCP DISCOVER broadcast to the router message and I assume that the router will know the VLAN demand coming as well based on the information contained in the package. But how the router discerns what scope to assign IP address to PC2 especially if I need PC2 to have an IP address in the subnet 192.168.2.0 and NOT 192.168.3.0 or vice versa? The controls of such a choice?

IP dhcp pool vlan1

DHCP excluded-address IP 192.168.2.1 192.168.2.10

DHCP excluded-address IP 192.168.3.1 192.168.3.10

!
IP dhcp pool vlan2
network 192.168.2.0 255.255.255.0
test.com domain name
Server DNS 192.168.2.1
default router 192.168.2.1

!

IP dhcp pool vlan3
network 192.168.3.0 255.255.255.0
test.com domain name
Server DNS 192.168.2.1
default router 192.168.3.1

THX sc.

Hi Sherwin,

It's will be very simple. I guess that on the router configuration stick will have something like below.

FAS int 0/0.2

encapsulation dot1q 2

IP 192.168.2.1 255.255.255.0

FAS int 0/0.3

encapsulation dot1q 3

address 192.168.3.1 IP 255.255.255.0

Now when a PC that is connected to the VLAN 2 send a DHCP broadcast this program is received by the interface that belongs to the same broadcast domain (VLAN 2). This broadcast is received by the Fas 0/0.2 and this has encapsulation dot1q sub interface 2 and so it will be part of the same broadcast domain (VLAN 2). If the router will search if there is no DHCP scope configured for the ip range on the interface sub Fas 0/0, 2. Now, router knows the 192.168.2.0 extended DHCP and assign the IP range of this scope to any PC in the VLAN2.

I hope this helps.

Concerning

Najaf

Please rate when there is place or useful!

RV042G and several subnets

Similar Questions

Maybe you are looking for