Site to another with RVS4000 and 2621
Hey people. I had originally a vpn site-to site between my pix 515e and RVS4000, but I wanted to put my router on the edge of my network for greater control of the quality of Service. I have managed to set up the tunnel, but can not pass all traffic to the tunnel. The RVS4000 said the tunnel is mounted, and when I do a "isakmp crypto to show his" on the 2621, I see a QM_IDLE which I think it's good.
My architecture is:
LAN - RVS4000 (public static ip) - internet - 2621 (public dynamic IP (dhcp ()) - LAN
Here's a copy of my config 2621. My guess is I left something, but can't put my finger on. Any help is appreciated. Thank you!
version 12.3
horodateurs service debug datetime msec
Log service timestamps datetime msec
encryption password service
!
hostname core_router
!
boot-start-marker
boot-end-marker
!
!
No aaa new-model
IP subnet zero
IP cef
!
!
IP domain name craig.net
8.8.8.8 IP name-server
IP-server names 8.8.4.4
!
IP multicast routing
Max-events of po verification IP 100
!
!
!
!
voip phone service
Fax transmission protocol g711ulaw
H323
SIP
!
!
!
!
!
!
!
!
!
password username privilege 15 7 XXXXXXXXXXX craigrobertlee
--More-- !
!
property intellectual ssh time 60
property intellectual ssh source interface FastEthernet0/1
property intellectual ssh craigkey name of the rsa key pair
!
class-map correspondence-everything VOIP_TRAFFIC
game group-access 101
!
!
Policy-map VOIP_POLICY
class VOIP_TRAFFIC
bandwidth 1000
class class by default
Fair/fair-queue
!
!
!
crypto ISAKMP policy 10
BA 3des
md5 hash
preshared authentication
Group 2
ISAKMP crypto key XXXXXXXX address 174.79.X.X no.-xauth
ISAKMP crypto keepalive 2800
!
!
Crypto ipsec transform-set esp-3des esp-md5-hmac SET1
!
Crypto map ROGERS 10-isakmp ipsec
set of peer 174.79.X.X
set the 60 security association idle time
game of transformation-SET1
match address 102
!
!
!
!
Null0 interface
no ip unreachable
!
interface FastEthernet0/0
DHCP IP address
NAT outside IP
Speed 100
full-duplex
card crypto ROGERS
out of service-policy VOIP_POLICY
!
interface FastEthernet0/1
the IP 192.168.0.1 255.255.255.252
IP nat inside
automatic duplex
automatic speed
!
interface Dialer1
no ip address
No cdp enable
!
overload of IP nat inside source list 100 interface FastEthernet0/0
no ip address of the http server
no ip http secure server
IP classless
IP route 192.168.1.0 255.255.255.0 192.168.0.2
IP route 192.168.2.0 255.255.255.0 192.168.0.2
IP route 192.168.3.0 255.255.255.0 192.168.0.2
!
!
access-list 10 permit 192.168.1.254
access-list 11 allow 192.168.1.10
access-list 12 allow 192.168.0.0 0.0.255.255
Note access-list 12 SSH_ACL
access-list 100 permit ip 192.168.0.0 0.0.255.255 everything
Access-list 100 Craig_Home_IP_Network note
access-list 101 permit udp any eq 5060 any eq 5060
Note access-list 101 VOIP_ACL
access-list 102 permit ip 192.168.0.0 0.0.3.255 192.168.15.0 0.0.0.255
Note access-list 102 ROGERS_IP_NETWORK
access-list 110 deny ip 192.168.0.0 0.0.3.255 192.168.15.0 0.0.0.255
access-list 110 permit ip 192.168.0.0 0.0.3.255 all
not run cdp
!
sheep allowed 10 route map
corresponds to the IP 110
!
craighome1 RO 11 SNMP-server community
location of Server SNMP Gear closet
Server enable SNMP traps snmp authentication linkdown, linkup warmstart cold start
Enable SNMP-Server intercepts ATS
Server enable SNMP traps xgcp
Server enable SNMP traps ISDN call-information
Server enable SNMP traps ISDN layer2
-More - Server enable snmp traps ISDN chan-not-available
Server enable SNMP traps ISDN ietf
Server enable SNMP traps hsrp
config SNMP-server enable traps
entity of traps activate SNMP Server
Server enable SNMP traps config-copy
Server enable SNMP traps envmon
Server enable SNMP traps bgp
Server enable SNMP traps pim neighbor-rp-mapping-change invalid-pim-message of change
Server enable SNMP traps ipmulticast
Server enable SNMP traps msdp
SNMP Server enable rsvp traps
SNMP traps-frame relay enable server
Server enable SNMP traps subif frame relay
Server enable SNMP traps rtr
Server enable SNMP traps syslog
SNMP enable traps stun Server
Server enable SNMP traps dlsw
Server enable SNMP traps bstun
SNMP-Server enable traps dial
Server enable SNMP traps dsp registered card
Server enable SNMP traps atm subif
-More - Server enable snmp traps pppoe
Server enable SNMP traps ipmobile
SNMP-Server enable traps isakmp policy add
Server enable SNMP traps isakmp policy delete
Server enable SNMP traps isakmp tunnel beginning
Server enable SNMP traps isakmp tunnel stop
SNMP server activate ipsec cryptomap add traps
SNMP server activate ipsec cryptomap remove traps
SNMP server activate ipsec cryptomap attach traps
SNMP server activate ipsec cryptomap detach traps
Server SNMP traps enable ipsec tunnel beginning
SNMP-Server enable traps stop ipsec tunnel
Enable SNMP-server holds too many associations of ipsec security
traps to enable SNMP-server voice poor-qov
Enable SNMP-Server intercepts dnis
SNMP-server host 192.168.1.10 version 2 c craighome1
!
!
!
!
!
Line con 0
local connection
-More - line to 0
line vty 0 4
access-class 12
exec-timeout 0 0
local connection
entry ssh transport
line vty 5 15
access-class 12
exec-timeout 0 0
local connection
entry ssh transport
!
NTP-period clock 17180394
Server NTP 192.43.244.18
!
end
Hi Robert,.
You use the ACL 100 to NAT when you use ACL 110 or route card sheep, it seems that you wanted to work around NAT, but I forgot to apply it.
That's what you have:
overload of IP nat inside source list 100 interface FastEthernet0/0
That's what you should get instead:
overload of IP nat inside source list 110 interface FastEthernet0/0
or
IP nat inside source map route sheep interface FastEthernet0/0 overload
Have fun
Raga
Tags: Cisco Security
Similar Questions
-
Looking for adobe certified companies that can create a web site of muse with java and PHP for me
Looking for adobe certified companies that can create a web site of muse with java and PHP for me
Relationship problems he...
1: nothing like the Adobe Certified companies
2: sites of Muse do no PHP support.
-
I have Windows 7 family on a laptop. I just downloaded the latest version of Firefox (v25) and Google as default search engine. Any site I enter in Google, I get the message 'Not reliable' site. I typed in BBC, Firefox etc. The message is:
This connection is Untrusted
You asked Firefox to connect safely on www.google.com, but we cannot confirm that your connection is secure.
My virus checker is Norton.
I read that the support forum and my date and time are correct. I have IE and Chrome with Google like search engine by default and is not the message when you access the BBC, Firefox etc.
This is the first time that Firefox has been downloaded to the laptop.
Please someone has an idea what is causing the problem.
I had installed BrowserSafe. As soon as I uninstalled Firefox worked properly.
Thank you very much for the advice.
-
Is my client using the web browser editor can change the position of text and images, the site was built with muse and at first, tell him that he could change the text and images, but he can't change the location of contents of Th.
Now he wants to paste and copy directly from the web browser Publisher Word and wants to change all of the place itself.
Does someone have an answer or another solution?
Philippe
First of all, to answer your question about moving content. No, that is not supported.
Then, never advised him to stick to Word what for the web. Word adds a lot of very strange code that can break your page completely. Tell him if he has a Word to add to the site to paste into Notepad or any other text editor, copy and paste to Muse.
-
Problem with youtube and other video sites
I have a problem with youtube and other video sites:
Everything is up-to-date (flash, FF, my plug ins.) but I get crashes when loading the video. I can hear the sound but I see only the first frame of the video.
I've reinstalled flash/firefox or tried updating them again for about 4 times now and my cookies/cache has also been errased which i usually don't do. If i enter FF's safe mode it also freezes.
I hope someone can help, I looked for answers on google before and I tried everything I saw, but it did not help.
GRTS,
agrashI had the same problem, I uninstalled the plugin Flash player (Adobe Flash Player 11.0.1 152) and the problem is solved. I installed the plug-in again and the problem came back. So right now I have no flas Player liked-in, but I don't have too much problem. I hope that I will not find another problem, but it seems that everything is OK.
-
It began to appear in the first inch of each merchant site I visit with the new version, "Congratulations!" Every $5 spent at JCPenney saves you a chance to win a $500 gift card. I have run scans and nothing appears not infected, but I don't get that annoying block in Internet Explorer. I uninstalled and reinstalled firefox and when I did, the first thing is present at his inauguration was a message that says: "you have joined the shop now...". "something or another and I had to click OK, it was a microsoft OK message. How can I get rid of this?
URL of affected sites
http://www.BestBuy.com, target.com, any site of retail trade
Your problem can be caused by Malware. You can run and update according to free anti-virus software:
1. Malwarebytes (free version) - http://www.malwarebytes.org
2. Spybot Search & Destroy - http://www.safer-networking.org
3. Spyware Terminator - http://www.spywareterminator.com
In addition, there are a number of forums, you can use to help get rid you of your infection. It is:
-
Windows media player does not automatically open a video file on a Web site but I save it and open the file with Windows media player to play the video or audio recording. I used to be able to play any video or audio file in any site!
Hello
Try resetting the default associations for WMP and IE.
How to set default Associations for a program under Vista
http://www.Vistax64.com/tutorials/83196-default-programs-program-default-associations.html
How to associate a file Type of Extension to a program under Vista
http://www.Vistax64.com/tutorials/69758-default-programs.htmlIf necessary:
How Unassociate a Type of Extension file in Vista - and a utility to help
http://www.Vistax64.com/tutorials/91920-unassociate-file-extention-type.html
Restore the Type Associations by default Vista file extensions
http://www.Vistax64.com/tutorials/233243-default-file-type-associations-restore.html
How to view and change an Extension of filename on Vista
http://www.Vistax64.com/tutorials/103171-file-name-extension.html====================================
Also follow these steps:
Follow these steps to remove corruption and missing/damaged file system repair or replacement.
Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup
Start - type in the search box - find command top - RIGHT CLICK – RUN AS ADMIN
sfc/scannow
How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Then, run checkdisk - schedule it to run at next boot, then apply OK your way out, then restart.
How to run the check disk at startup in Vista
http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html------------------------------------------------------------
Then, if necessary:
Have you recently installed another player?
Reset your associations for WMP and IE.
How to set default Associations for a program under Vista
http://www.Vistax64.com/tutorials/83196-default-programs-program-default-associations.html
How to associate a file Type of Extension to a program under Vista
http://www.Vistax64.com/tutorials/69758-default-programs.html---------------------------------------------
Do this to reregister the Jscript.dll and Vbscript.dll files.
Start - type in the search box - find command top - RIGHT CLICK – RUN AS ADMIN
type or copy and paste-> regsvr32 jscript.dll
Press entertype or copy and paste-> regsvr32 vbscript.dll
Press enterRestart and if all goes well, it will run now.
--------------------------------------------------------------
Have you recently added stores or ANY application from Stardock?
Using 64-bit Vista?
Can you think of recent things you did in WMP which could be the cause? You added another
reader recently or an add-on for WMP?When I try to use Windows Media Player 11, the program does not start, or some UI elements
are empty - a Mr Fixit
http://support.Microsoft.com/kb/925704/en-usMaybe something here
http://msmvps.com/blogs/chrisl/articles/17315.aspx
and here
http://msmvps.com/blogs/chrisl/Archive/2004/10/30/17399.aspxCheck here the news of WMP11
http://zachd.com/PSS/PSS.htmlI hope this helps.
I hope this helps.
Rob - bicycle - Mark Twain said it is good.
-
problem with Ezvpn and VPN from Site to Site
Hello
I want to set Ezvpn and VPN Site to another but the problem is that the EasyVpn that would only work at the Site to the Site does not at all
I have set up 1 card for two VPN with different tagged crypto
I had execlude the traffice to NOT be natted to, and when I remove the Ezvpn site to another work well
crypto ISAKMP policy 100
BA aes
md5 hash
preshared authentication
Group 2
!
crypto ISAKMP policy 10000
BA aes 256
preshared authentication
Group 5
key address 123456 crypto isakmp (deleted)ISAKMP crypto client configuration group easyvpn
easyvpn key
domain ezvpn
pool easyvpn
ACL easyvpn
Save-password
Split-dns cme
MAX User 9
netmask 255.255.255.0
!Crypto ipsec transform-set esp - aes 256 esp-sha-hmac vpn
Crypto-map dynamic easyvpn 10
Set transform-set dmvpn
market arriere-route
!
!
address-card crypto easyvpn local Dialer1
card crypto client easyvpn of authentication list easyvpn
card crypto isakmp authorization list easyvpn easyvpn
client configuration address card crypto easyvpn answer
easyvpn 100 card crypto ipsec-isakmp dynamic easyvpn
easyvpn 1000 ipsec-isakmp crypto map
defined by the peers (deleted)
Set transform-set vpn
game site addressinterface Dialer1
the negotiated IP address
IP mtu 1492
NAT outside IP
IP virtual-reassembly
encapsulation ppp
Dialer pool 1
PPP authentication chap callin pap
PPP chap hostname
PPP chap password
PPP pap sent-name to user
easyVPN card cryptoDSL_ACCESSLIST extended IP access list
deny ip 100.0.0.0 0.0.0.255 101.1.1.0 0.0.0.255
deny ip 100.0.0.0 0.0.0.255 70.0.0.0 0.0.0.255
IP 100.0.0.0 allow 0.0.0.255 any
refuse an entire ip
easyvpn extended IP access list
IP 100.0.0.0 allow 0.0.0.255 70.0.0.0 0.0.0.255
IP extended site access list
IP 100.0.0.0 allow 0.0.0.255 101.1.1.0 0.0.0.255Best regards
The sequence number of card crypto for the static mapping crypto (site to site vpn) should be higher (ie: sequence number must be lower) than the ezvpn (map dynamic crypto).
In your case, you must configure as follows:
map easyvpn 10 ipsec-isakmp crypto
defined by the peers (deleted)
Set transform-set vpn
game site addressmap easyvpn 150 - ipsec-isakmp crypto dynamic easyvpn
Hope that solves this problem.
-
Strange sensitive problem with downloading of site in a subdomain - Tablet and phone look bad
I need help! I transferred my site with the desktop versions, Tablet and phone. I had this problem before when downloading a Muse of the site in a specific subdomain (under another domain host and web). I tested several times in Muse and all three versions are perfect. But if you take a look at the version Mobile and tablet, you will see what I mean. The site is located off the coast to the left on both and is not proportioned correctly. Is it because it's under a subdomain. As I mentioned I had happen before downloading a site to a specific subdomain. What would be a problem? I really love to help with this.
Here's the URL:
The office is very well so if someone could look at the other it would be great.
Thank you!
BRITISH COLUMBIA
This url does not work, you can publish the site as a place to test BC and then provide us the url.
Thank you
Sanjit
-
Try to add a page to a pages document. It worked until now but just finished page 13 with text and photos and cannot add another page, using macbook pro with El Capitan and the most recent version of the Pages.
You have placed your beam to insert at the end of your text on page 13 and then apply Insert menu: Page Break? In the v5.6.2, Pages I just add a new page to a section of four pages to this approach.
-
problem with Safari and the opening of sites
problem with Safari and the opening of sites
Please describe the problem in more detail?
Try to reset the settings of Safari:
1. open Safari
2. click on the Safari menu at the top (to the right of the Apple logo)
3. Select the Preferences/Privacy tab
4. click on remove all data from the Web site
5. close Safari.
Remove cache Safari files:
1. click on finder
2. look for the menu GO to top
3. click on GO and hold down the option key. This will show a user library folder.
4. click library and find the Caches folder
5. in the folder caches com.apple.Safari Ouvrezledossier
6. move the Cache.db file Trash.
This should solve the problem. If it does not help, try to disable the Safari extensions
1. open Safari
2. click on the Safari menu at the top (to the right of the Apple logo)
3. Select Preferences
4. find the Extensions tab
5 disable all extensions of
6. relaunch Safari
-
Have Windows 7 running on Parallels Desktop with a Mac. Get "setup.exe is not a valid Win32 application" when trying to download a program with Windows Explorer. I can download from these sites with Vista and XP with other computers. Now, I can't download the programs that are supposed to solve the problem! including FoxFire
Try to download from this site:
- Firefox 8.0.x: http://www.mozilla.com/en-US/firefox/all.html
-
Using Firefox 4 and Windows 7. Whenever I have to start Firefox from a shortcut to a Web site, what happens with the following error "there was a problem sending the command to the program". The requested site is loaded after that. without any problem.
If a shortcut is used while Firefox is already open the error will not occur.
For me, the problem was the FoxClock extension. Once I disabled it, the problem was gone.
Hope this helps.
Olivier
-
Safari on my MacBook Pro retina 9.0.3 15-inch Version 10.11.3 do not show images on some Internet sites. They appear for a fraction of a second then disappear with a question mark in the Center. The same sites work fine on Chrome and Firefox.
I suggest you only begin by taking the measures recommended in this support article.
-
Original title: Auto updates
My automatic updates program is disabled. When I try to turn it on, I get this message "the site has encountered a problem and cannot display the page you are trying to view. Automatic updates forever, why was off and why he now won't come back?
Bill T
E-mail address is removed from the privacy *.
Hi Bill,
This problem can be caused if the automatic updates service may be missing in the Services snap-in.
1. is the Service Pack 3 installed on your computer?
2. what anti-virus software you use in your computer?
Follow the steps below:
Method 1:
To resolve this issue, follow these steps:
- Click Start, click run, type explore, and then click OK.
- Look for the following folder:
%windir%\System32\inf
Note The %windir%\System32 placeholder represents the path of the WINDOWS System folder. Typically, C:\WINDOWS is the path of the WINDOWS System folder.
The inf folder is a hidden folder. To view the inf folder, follow these steps:
a. on the Tools menu, click on Folder Optionsand then click the view tab.
b. in the list of Advanced settings , click to display the hidden files and folders under hidden files and folders.
c. click applyand then click OK.
3. double-click on the inf folder, right-click in theand then click install.
4. click on Browse. Look for, and then click the \ServicePackFiles\i386 %windir%\System32folder if the following conditions are met:
- You install Windows XP SP3 from a CD Windows XP SP3 which included as part of the basic installation of SP3.
- You have downloaded and installed Windows XP SP3 from the Microsoft Web site.
- Windows XP SP3 was included with the computer.
Note If the files from the Service Pack folder is not present on the computer, you can copy the files from a Windows XP SP3 slipstreamed installation CD.
5. click OK to copy the files.
6. change the setting on the computer to not display the hidden files and folders. To do this, follow these steps:
- On the Tools menu, click Folder Options, and then click the view tab.
- In the list of Advanced settings , click show not the hidden files and folders under hidden files and folders.
- Click applyand then click OK.
7 restart the computer and check.
Method 2:
Follow the steps in the link below.
You receive an error message "Windows Update has encountered an error and cannot display the requested page" when you try to install an update:
http://support.Microsoft.com/kb/883614
For reference:
How to configure and use automatic updates in Windows:
http://support.Microsoft.com/kb/306525
If you need further assistance on this topic, let know us and we will be happy to help you.
Maybe you are looking for
-
The printer will scan to the Mac and print from the Mac, but there is no copy/print to the printer. It is on a wireless network.
-
Re: upgrade Windows 10.
Hello, I have a doubt, I want to know if you can do a clean install of windows through the ISO 10 provided by microsoft. I have a pavillion 500 215el. Thank you.
-
I have a problem with the sound on the computer.
Hi- Just got a new laptop Toshiba Sattelite. It works pretty well agree that the sound is extremely quiet. What should I do?
-
My old motherboard gave the soul, and I have now installed a Gigabyte GA-880GM-UD2H with an AMD Phenom 6 processor and 4 GB of RAM. The 2 HD is a Maxtor Sata 1 300 GB ones. One is divided into 2 equal partitions, the other has a single partition. Du
-
When I print from Windows Live Mail, the left margin is far more than the first letters of each line are missing. Where can I go to change the left margin on Windows Live Mail?