SRP527 W
Hello
On Cisco SRP527w cloning mac address works on Wan?
my ISP need an address mac specific for adsl2 +.
Thank you
Alessio
Hello Alessio,
Yes, the SRP527 supports this for the ADSL PVC.
Kind regards
Andy
Tags: Cisco Support
Similar Questions
-
Hello
I wish that my router SRP527 to manage the VLAN 2.
1 for my whole LAN and WIFI connections to employees, one for external access to Internet by WIFI SSID guest clients.
-J' have this router Cisco SRP527W acting as a bridge between my network and the Internet.
-J' have a second router used for VPN between my LAN and 2 external agencies connections.
-My LAN uses 192.168.0.0 / 255.255.255.0 network
-External agency 1 uses 192.168.1.0 / 255.255.255.0 network
-2 external agency uses 192.168.3.0 / 255.255.255.0 network
The Cisco router using VLAN 2:
-The VLAN 1 (port LAN 4 and 1 SSID)-> 192.168.0.254 / 255.255.255.0
-THE VLAN 3 (SSID 2)-> 10.33.0.254 / 255.255.255.0
The Cisco router uses 2 static routes:
-Agency 1: 192.168.1.0 / 255.255.255.0-Gateway 192.168.0.249 >
-Agency 2: 192.168.3.0 / 255.255.255.0-Gateway 192.168.0.249 >
The VPN router for external agencies is to use 192.168.0.249 / 255.255.255.0.
When the router SRP527W intervlan routing activated, everything works. I can ping my external agencies. However, external clients using WIFI comments can also ping my internal LAN.
Intervlan routing separate VLANS and VLAN 1 disable 3 correctly, but I cannot ping my external agencies more and I don't know why?
Behind my Cisco router:
-Switch Gigabit HP 1 (servers, router VPN are connected)
-2 switches (HP and Accton) both related to the gigabit switch and where all of my clients are connected.
No connection trunk and vlan are defined on my switches.
The CISCO Hotline has not found the answer. I have the latest version of the firmware. Can you help me determine why disable intervlan routing stop link between my LAN and external agencies?
Thank you
Hi Adrien,.
If intervlan routing is disabled, traffic is allowed only to pass traffic between the LAN and WAN interfaces, not LAN to LAN.
You want to know that the new product SRP527W-u includes support for wireless access, so it might be more appropriate for your condition. (The code that enables this feature is not supported by the SRP527W that you have.).
Kind regards
Andy
-
Installation of SRP527 of voip?
I bought a srp527 to replace the router provided by my ISP, I implemented the internet side and it works OK
I now need to configure the side phone router, I got the phone number, the user name and the password of my ISP, but I don't see anywhere on the config pages to go into details?
Ken
Hi Ken,
First of all, make sure that you log on with the user name "admin" - by default the password "admin".
From there, you will see a tab "Voice".
From there, click on the 1 line (or whose voices never port you use), scroll down and fill in the necessary fields in the proxy and registration and subscriber information sections.
As a general rule, you must only complete the Proxy, the fields ID and user password. For more information, see page 95 of the Administrator's Guide.
Hope that helps,
Andy
-
Questions of implementation of VPN IPSec 887-> srp527
Hey people,
I have a few problems to an ipsec tunnel between a cisco 887VA router and a cisco srp527w router.
I have a few books and some example materials. I worked through many combinations of what I had and I'm still a bit hard.
I look at the results of debugging and it seems that policies do not correspond between devices:
05:44:37.759 Jul 23: ISAKMP (0): received packet of 500 Global 500 (R) sport dport XXX.XXX.XXX.XXX MM_NO_STATE
broute1 #.
05:44:57.079 Jul 23: ISAKMP: (0): purge SA., his 85247558, delme = 85247558 =
broute1 #.
05:45:17.031 Jul 23: ISAKMP (0): received packet of XXX.XXX.XXX.XXX dport 500 sport 500 global (N) SA NEWS
05:45:17.031 Jul 23: ISAKMP: created a struct peer XXX.XXX.XXX.XXX, peer port 500
05:45:17.035 Jul 23: ISAKMP: new position created post = 0x8838C3F8 peer_handle = 0x800021CF
05:45:17.035 Jul 23: ISAKMP: lock struct 0x8838C3F8, refcount 1 to peer crypto_isakmp_process_block
05:45:17.035 Jul 23: ISAKMP: 500 local port, remote port 500
05:45:17.035 Jul 23: ISAKMP: (0): insert his with his 87 84664 = success
05:45:17.035 Jul 23: ISAKMP: (0): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH
05:45:17.035 Jul 23: ISAKMP: (0): former State = new State IKE_READY = IKE_R_MM1
Jul 23 05:45:17.035: ISAKMP: (0): treatment ITS payload. Message ID = 0
Jul 23 05:45:17.035: ISAKMP: (0): load useful vendor id of treatment
Jul 23 05:45:17.035: ISAKMP: (0): provider ID seems the unit/DPD but important shift 0
Jul 23 05:45:17.035: ISAKMP: (0): load useful vendor id of treatment
Jul 23 05:45:17.035: ISAKMP: (0): provider ID is DPD
05:45:17.035 Jul 23: ISAKMP: (0): no pre-shared with XXX.XXX.XXX.XXX!
05:45:17.035 Jul 23: ISAKMP: analysis of the profiles for xauth...
05:45:17.035 Jul 23: ISAKMP: (0): audit ISAKMP transform against the policy of priority 1 0
05:45:17.035 Jul 23: ISAKMP: type of life in seconds
05:45:17.035 Jul 23: ISAKMP: life (IPV) 0 x 0 0 x 1 0 x 51 0 x 53
05:45:17.035 Jul 23: ISAKMP: DES-CBC encryption
05:45:17.035 Jul 23: ISAKMP: SHA hash
05:45:17.035 Jul 23: ISAKMP: pre-shared key auth
05:45:17.035 Jul 23: ISAKMP: default group 1
05:45:17.035 Jul 23: ISAKMP: (0): free encryption algorithm does not match policy.
05:45:17.035 Jul 23: ISAKMP: (0): atts are not acceptable. Next payload is 0
05:45:17.035 Jul 23: ISAKMP: (0): no offer is accepted!
Jul 23 05:45:17.035: ISAKMP: (0): phase 1 SA policy is not acceptable! (local YYY. YYY. YYY. Remote YYY
XXX.XXX.XXX.XXX)
05:45:17.035 Jul 23: ISAKMP (0): increment the count of errors on his, try 1 of 5: construct_fail_ag_init
Jul 23 05:45:17.035: ISAKMP: (0): could not build the message information AG.
Jul 23 05:45:17.035: ISAKMP: (0): send package to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_NO_STATE
05:45:17.035 Jul 23: ISAKMP: (0): sending a packet IPv4 IKE.
05:45:17.035 Jul 23: ISAKMP: (0): the peer is not paranoid KeepAlive.
05:45:17.035 Jul 23: ISAKMP: (0): removal of reason HIS State "Policy of ITS phase 1 not accepted" (R) MM_NO_STATE (peer
XXX.XXX.XXX.XXX)
Jul 23 05:45:17.035: ISAKMP: (0): load useful vendor id of treatment
Jul 23 05:45:17.035: ISAKMP: (0): provider ID seems the unit/DPD but important shift 0
Jul 23 05:45:17.035: ISAKMP: (0): load useful vendor id of treatment
Jul 23 05:45:17.035: ISAKMP: (0): provider ID is DPD
05:45:17.035 Jul 23: ISAKMP (0): action of WSF returned the error: 2
05:45:17.035 Jul 23: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
05:45:17.035 Jul 23: ISAKMP: (0): former State = new State IKE_R_MM1 = IKE_R_MM1
05:45:17.039 Jul 23: ISAKMP: (0): removal of reason HIS State "Policy of ITS phase 1 not accepted" (R) MM_NO_STATE (peer
XXX.XXX.XXX.XXX)
05:45:17.039 Jul 23: ISAKMP: Unlocking counterpart struct 0x8838C3F8 for isadb_mark_sa_deleted(), count 0
05:45:17.039 Jul 23: ISAKMP: delete peer node by peer_reap for XXX.XXX.XXX.XXX: 8838C3F8
05:45:17.039 Jul 23: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
05:45:17.039 Jul 23: ISAKMP: (0): former State = new State IKE_R_MM1 = IKE_DEST_SA
Here is a slightly adjusted version of my run-fig (came out I was sure that no one would need things) and attached are screenshots of IPSec and IKE Policy of the srp527w strategy
version 15.1
hostname broute1
!
logging buffered 65535
information recording console
!
No aaa new-model
!
iomem 10 memory size
clock timezone estimated 10 0
Crypto pki token removal timeout default 0
!
!
IP source-route
!
!
!
!
VDSL controller 0
operation mode adsl2 Annex A
!
property intellectual ssh version 2
!
!
crypto ISAKMP policy 1
BA 3des
preshared authentication
lifetime 28800
ISAKMP crypto key PRE_SHARED_KEY_FOR_IKE (I_THINK) REMOTE_HOST hostname
!
!
Crypto ipsec transform-set JWRE_BW-1 esp-3des esp-sha-hmac
!
!
!
IPSec-isakmp crypto 10 JWRE_BW-1 card
defined peer XXX.XXX.XXX.XXX
game of transformation-JWRE_BW-1
match address 101
!
interface Loopback0
no ip address
!
ATM0 interface
Description - between node ADSL-
no ip address
no ip route cache
load-interval 30
No atm ilmi-keepalive
!
point-to-point interface ATM0.1
no ip route cache
PVC 8/35
TX-ring-limit 3
aal5snap encapsulation
PPPoE-client dial-pool-number 1
!
!
interface Vlan1
Management Interface Description
address IP AAA. AAA. AAA. AAA 255.255.255.0
IP mtu 1452
IP nat inside
IP virtual-reassembly in
no ip-cache cef route
IP tcp adjust-mss 1420
!
interface Dialer1
Description BETWEEN NŒUD ADSL-
MTU 1492
the negotiated IP address
no ip redirection
no ip unreachable
no ip proxy-arp
NAT outside IP
IP virtual-reassembly in
encapsulation ppp
Dialer pool 1
Dialer-Group 1
PPP chap hostname ADSL_USERNAME
PPP chap password 7 ADSL_PASSWORD
PPP ipcp dns request accept
No cdp enable
card crypto JWRE_BW-1
!
recording of debug trap
access-list 101 permit ip 192.168.7.0 0.0.0.255 10.0.1.0 0.0.0.255
Dialer-list 1 ip protocol allow
Some specific questions:
(1) on the PSR in the example I used (and I have a few PRS-> RPS VPN work) I see you enter the pre-shared key, I do not see in the examples I've used something on the IKE pre-shared key on the box of IOS. Does anyone have examples where you use the pre-shared for IKE? I wonder if it is my main problem as clearly says the newspaper there is no pre-shared key :|
(2) I used a mash of names between different sections mish as on ESP the naming convention is not the same thing; IE: what parts of the IPSEC negotiation come from IKE policy and including the IPSEC policy section section. The names really matter across different ends of the VPN?
(3) I noticed when I run this command in the(config-crypto-map): #
defined peer FQDN
It is converted to:
defined peer XXX.XXX.XXX.XXX
Should it? I want the camera to watch the FQDN that this particular host using DDNS and do not use a static IP address.
I could ask 1 million questions, but I'll leave it for there, if anyone can see anything out (or can answer Q1 in particular) please let me know.
Thanks in advance for your time and help people.
B
The IKE policy doesn't seem to match, you must configure the corresponding IKE policy on the router as follows:
crypto ISAKMP policy 10
the BA
sha hash
preshared authentication
Group 1
lifetime 28800
For the preshared key, use the address instead of the host name:
crypto isakmp key address
Maybe you are looking for
-
I changed my password and before I finished I was locked out of my iPod Gen 5
Today I realized that I had not changed my password for a while so I went to change. I had to enter my current password to change then I tried and got it wrong. The screen displays the numbers for let me try again, but he also said something like a f
-
One of my 2 screens Thunderbolt keeps the blink of an eye
I have a mac pro 6.1 with 2 poster-one Thunderbolt after a period of inactivity, then stops as the other remains on. I have to restart the computer to get both back working. That is what it is? is it something 'settings' or something wrong with one
-
Hellocan someone help me to make a page that serves as a page of data entry for me?(I mean, have a free space for the user to type friendship asName:...Date:...age:... etc..., and also I need to know how to record these data which are a mixture of fi
-
display duplicate in a multicolumn listbox
Hello Sorry for my bad English, I am French I would post a double in a multi-column box number if I want to convert a double number to a string. The function to convert a number to a decimal string accepts the double, but he converts them in full. So
-
Could not print black after installing new ink cartridge
I installed the new black cartridge on my deskjet 3520. This is the original hp ink cartridge. also reinstalled the software of hp deskject. It shows even good condition here. but just no matter if I try to copy/printing, the printer started working