SRP527W

Similar Questions

• SRP527W setting DHCP address and source firewall rules

  In my quest to find a decent ADSL router for VoIP, I found the SRP527W and so far it has been the best performer of a range of boxes from netgear, thomson, and zyxel.  However, I have two questions:

  (1) how to troubleshoot DHCP leases on the LAN address

  (2) how to specify source ip in the firewall rule

  Note:

  I currently have 1 computer on the LAN, VLAN1 interface

  * 192.168.15.100

  and

  2 IP phones on the LAN, VLAN100 interface

  * 192.168.100.100

  * 192.168.100.101

  Address three assigned by the DHCP server lease times with approximately 20 days.

  I would like to repair the three devices DHCP leases, for example if some port forwarding rules can be made with confidence that the rules will not point to another device in the future.

  from PVC0-> 192.168.15.100, Port 3389 for remote desktop

  of PVC0-> 192.168.100.100 ex.port 5881 to int.port 80 for voip phone web-gui

  from PVC0-> 192.168.100.101 ex.port 5882 to int.port 80 for voip phone web-gui

  Ideally, I would like the rules to act like that, limiting myself only to access these ports (from my remote site)

  PVC0 interface where the source is ip 12.34.56.78-> 192.168.15.100, Port 3389 for remote desktop

  PVC0 interface where the source is ip 12.34.56.78-> 192.168.100.100 ex.port 5881 to int.port 80 for voip phone web-gui

  PVC0 interface where the source is ip 12.34.56.78-> 192.168.100.101 ex.port 5882 to int.port 80 for voip phone web-gui

  I hope that makes sense, I appreicate any help you can give.

  Kind regards

  Paul

  Hi Paul,.

  Thank you for using the Cisco support community.

  With regard to two questions:

  1. Yes - it is possible to configure static DHCP assignments.  Use the DHCP Server rule configuration page and click the 'Show DHCP booking' button to assign.

  2. Unfortunately, it is not possible to configure rules to address source for the SRP520 list.  (This is possible on the SRP540 for further reading).

  Kind regards

  Andy

• NAT on SRP527W (distant)

  Hi all

  Implementation of ACB (on a 1841) for customer specific traffic through a SRP527W. Now the CPR strategy seems to work - I debugged and confirmed I get policy matches and ACB is correctly forward traffic to the SRP527W.

  Problem I'm having, is that I can't achieve anything beyond the public IP address on the LAN interface. I came to the conclusion that the SRP527W is happy to provide NAT functionality because it is directly connected IP subnet. A client machine on the subnet (10.10.10.0/29) comes out OK, but as soon as the customer is behind another router, I can't access the Internet.

  I confirmed routing everything is OK and can ping from a client using the 192.168.2.x on the LAN and the WAN of the PRS interface, but not beyond.

  Can anyone confirm if my NAT theory is true?

  Firmware is 1.01 (17). Interestingly, the Administration menu does not provide an option to upgrade (or backup, restore or any one would expect to find another date and time). It was a unit of Telstra-provided with DSL service.

  Kind regards

  Russell

  Hi Russell,

  It is a limitation known to the SRP520, which we are trying to address in future releases/products.

  BTW - you do not see these additional menus that you log on with user account (cisco).  All features are available via the administrator (admin) account.  The account admin, the default password is 'admin' - not sure that Telstra would be locked down or not.

  If you need the new code for this device, please contact Telstra.

  Kind regards

  Andy

• VPN - SRP527W <>Cisco 857 established but no tx fraffic side SRP

  I have now established between SRP527w and cisco 857 ACE, but if I ping from a multitude of Cisco to a host on the side of the PRS I get only rx traffic in the tunnel, the stats keep tx 0 and ping is not answered.

  My tunnel is to send a voice call in IPSEC tunnel keeping DSCP bits, it communicates vlan voice SRP with Cisco lan.

  I have the SRP 2 VLAN:

  1 vlan for data on ports 1, 2, and 4

  1 voice vlan ports 1,2,3,4.

  I connect a netbook to port 3 and I can connect to the internet, but I can't reach by ping across the tunnel

  Perhaps the traffic of the vlan is voice natted with the ip address of data vlan?

  I need all traffic must go through the tunnel without being natted on the cisco side I have a policy to avoid the nat but don't know if SRP have no problem about it too.

  All gateways are ok

  Any idea greatly appreciated, thank you very much

  Hi, manual,.

  The RPS not NAT via the tunnel, which shouldn't be a problem.

  You try to ping a client in the remote subnet, or IP address to the VLAN RPS at the other end of the tunnel?  (Could you try both please?)

  See you soon

  Andy

• Problem creating a VPN IPSec with SRP527W

  Hello.

  I have a Setup like this:

  192.168.15.0/24 SRP527W <->internet <->ROUTER [172.16.16.1] <1:1 nat="">pfSense (raccoon vpn server) [172.16.16.2] 192.168.55.0/24

  I set up a VPN between the SRP and pfsense connection but the connection is not established because that timeout of the phase 1. According to racoon on the remote side does not.

  Before that, I've properly established a VPN between the SRP and another box of pfsense, but with a public IP address. The same host, I have an another vpn to the pfsense box (172.16.16.1) works correctly.

  These parameters of the PRS:

  IKE policy:

  Exchange mode: aggressive

  Permit ID: manual

  Remote ID: 172.16.16.2

  Encryption: 3DES

  Authentication: MD5

  DH: Group 2

  PSK: mysharedkey

  DPD: disabled

  IPSec policy:

  Policy type: police car

  Remote end point: IP ADDRESS

  IP: 172.16.16.2

  Life expectancy: 7800

  Set local subnet and remote according to the above (192.168.x.x) Network Setup.

  How can I check what is the problem? I struggled for several hours now and have failed to go out again! Any help really welcome!

  Thank you

  Lorenzo,

  The router to 172.16.16.1 allows all traffic to the pfsense VPN server when specific NAT is enabled or you have create access rules? My guess is that the router is blocking the traffic.

  -Marty

• Telstra SRP527W - can it run the firmware - U?

  Hello

  I bought a SRP527W.  In watching the news for her, it's a SRP527W-K9-G4-TLS

  This is the model with 128 MB of DRAM and 64 Mb Flash "Telstra".

  Does anyone know if it can run the firmware - U?  This is the firmware for these RPS 1.2.x?

  Would be happy if it can, but I can't flash it in case it breaks.  There the equipment upgraded, but not the 'U' in the name of hardware.

  Routers - TLS are likely to have the 1.2 firmware loaded on them.  However, doing so almost certainly will affect any agreement supported, that you have in place with Telstra, not to my knowledge, they have made the 1.2 firmware in their managed networks.

  In addition, the upgrade from 1.1 to 1.2 is not transparent as it was not intended to be applied in the field.  If you do this, you need factory default the router before and after the update.

  See you soon,.

  Dave.

• VOIP for SRP527W configuration

  Hi Forum,

  I recently bought the SRP527W router, I suggest he has the necessary equipment, built in to allow me to make VOIP calls. Thing is, where do I put the settings for this? I was told by the ISP, I need three pieces of information, the SIP being akl.italk.co.nz, [email protected] / * / and password. I'm not too technical on routers, I managed to make the internet work, just the phone I'm not having much luck with.

  If anyone could offer any suggestions, I would be grateful.

  Best regards, Ian.

  Software version:

  1.01.09 (001)

  The voice Module version:

  1.0.13 (20100407)

  Product name:

  SRP527W

  Ian

  In order to configure the port of voice on SRP527w login "admin".

  Go to the voice and then choose the line that you want to configure, set line allow to 'YES' then go on the Proxy and registration.

  Insert the proxy and the outgoing proxy (if necessary)

  All use proxy out to "Yes" (if necessary)

  Now to provide information, full name, user ID and password assigned by your provider.

  Best regards

  Rogelio

• conecting the 7921g wireles phone to a srp527w?

  Hello

  Anyone know if it is possible to integrate a voip wireless cisco 7921g (sccp protoclol) with a small bussiness Srp527w (sip Protocol) gateway, even if if is by conecting another device (such as an access point) between the two? I know skiny is owned by cisco and sip is a protocol open source, so I don't understand why cisco does not implement the skinny Protocol in its Srp527w.

  Thank you

  Hi Javier, the reason is, most of the Cisco small business product line does not support exclusive protocols of Cisco with the exception of the CDP. 7921 phone is considered a "business phone" and is supported by Cisco TAC, not the HWC.

  ESP is considered a SAI that can register for analog phones to a SIP provider while also using local telco access integrated as a DSL termination and maintenance as a router.

  As mentioned previously, you should have no problem to wireless connect the phone to the RPS. But you will have problems using the signalling Protocol.

  Andrew Hickman has perhaps some information better than me. I'll hit up and see if there is a more clear information, better than what I provided.

  -Tom
  Please mark replied messages useful

• VLAN SRP527W do not talk to each other

  Hello everyone,

  I'll keep it simple for the sake of the discussion.

  I have a SRP527W router that is connected to a switch L2 (a TP-Link... I know, it's not a Cisco...). and a PC and a printer connected to the switch. Now, I want to have the PC and the printer on 2 VLANS.

  I created 2 VLANS on the PSR (192.168.1.0/24 and 192.168.2.0/24) and I assigned the Lan 1 port at a time. The RPS is a DHCP server so I have SRP 192.168.1.1 and 192.168.2.1 installation provides IP addresses to the 2 VLAN.

  I have Setup VLAN 1 and 2 switch, 2 port assignment in the VLAN 1 and VLAN 2 3 port (port 1 is the trunk and connects to the SRP).

  When I start the PC and the printer they get their correct addresses from VLAN respective (PC: 192.168.1.30 and printer: 192.168.2.30) but for the sake of Odin, I can't see the printer from the PC. ESP was Inter VLAN routing active. Moreover, the switch has address 192.168.1.2

  What I am doing wrong?

  Thanks for the ideas, you can provide.

  -Mike * start things in the Office *.

  No problem at all, don't send me an email. We can get something set up maybe tomorrow.

  -Tom
  Please mark replied messages useful

• Cisco SRP527w cannot find the user management tab

  Hello

  Can someone help me? I just bought a new Cisco SRP527w and I'm all new to this type of material. I can't find the tab for user management that I'm changing the default password.

  Also, I can't access the internet. My rj45 of the ADSL modem is connected to the WAN/LAN port with parameters IP static. What missed here? your help is very appreciated.

  Hi Ronald, if you are clicking on all other tabs and it still seems only the setup of the wizard, you must change your internet browser. Try Firefox or IE. This should solve that.

  -Tom
  Please evaluate the useful messages

• Cisco SRP527W-U feature question

  Hi, I have a configuration issue with respect to the Cisco SRP527W-U.

  We want to set it up as follows, 1) we have a termination ethernet for the WAN 2) we have 2 VLAN different, ranging from 2 different switches.

  Can we have the default gateway for LAN 2 subnets and a default route via a 30 for our WAN. Can I use the 4 switchports for this?

  switchport VLAN 2 (Switch 1 LAN) 1

  switchport VLAN 3 (Switch 2 LAN) 2

  switchport 3 VLAN 4 (link to the data center with 30 switch)

  Kind regards

  Scott

  Hi Scott Brien

  This model works as a layer 3 router, you can route the vlan and routing static, and another making works like

  Static routing

  Routing Information Protocol (RIP) versions 1 and 2

  (GRE) Generic routing encapsulation

  Point to point Tunneling Protocol (PPTP) - taken in charge on the primary WAN interface

  Layer 2 Tunneling Protocol (L2TP) - taken in charge on the first WAN interface

  Based on the routing strategy

  So, you can have the default gateway for your 2 LAN subnets and a default route via a 30 for your WAN

  If this answer is satisfactory to you, please mark it as response.

  Thank you

  Greetings, Johnnatan Rodriguez Miranda

• [Solved] RV082 - SRP527W site-to-site VPN - routing table?

  Hello

  I am trying to create a VPN IPSEC link between 2 offices. The VPN connection is created, and I can connect but only one way.

  Customers in the Office B seems to have a routing problem. Can you help me?

  Details :

  Office:

  -Router SRP527W.

  -Network client: 192.168.0.0 / 24

  -Internal address: 192.168.0.254 / 24

  B office:

  -RV082 router (behind another router)

  -Network client: 192.168.6.0 / 24

  -Internal address: 192.168.6.253 / 24

  -Internal address that goes to the Router 1: 192.168.5.253

  internal address of the Router - 1: 192.168.5.254

  Page layout:

  Office---> SRP527W---> INTERNET<----- global="" router=""><------ rv082="">< office="">

  192.168.0.254 192.168.5.254 5,253 6.254

  Details VPN:

  Office:

  -remote type SUBNET = 192.168.6.0 group / 24

  -local group = SUBNET 192.168.0.0/24

  -Address ID = 82.127.XXX.XXX

  B office:

  -remote type = SUBNET 192.168.0.0/24 Group

  -local group = SUBNET 192.168.6.0 / 24

  -IP address = 192.168.5.253 (accessed from the Internet through the 1st router with the IP 37.1.XXX.XXX)

  Facts:

  A desktop, I can ping everything in 6.0 addresses.

  Office B, I cannot ping anything in 0.0 subnet addresses. The router itself with the diagnostic page, works of ping 192.168.0.1? But no other ping. Curious...

  The desktop computer B routing table shows the following:

  Active routes:

  Destination network mask network Adr. Gateway Adr. interface metric

  0.0.0.0 0.0.0.0 192.168.6.253 192.168.6.10 10

  127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1

  192.168.6.0 255.255.255.0 192.168.6.10 192.168.6.10 10

  192.168.6.10 255.255.255.255 127.0.0.1 127.0.0.1 10

  192.168.6.255 255.255.255.255 192.168.6.10 192.168.6.10 10

  224.0.0.0 240.0.0.0 192.168.6.10 192.168.6.10 10

  255.255.255.255 255.255.255.255 192.168.6.10 192.168.6.10 1

  255.255.255.255 255.255.255.255 192.168.6.10 3 1

  255.255.255.255 255.255.255.255 192.168.6.10 1 40005

  Default gateway: 192.168.6.253

  ===========================================================================

  Persistent routes:

  None

  Tracert from computers to Office B shows that the packages have arrived at 192.168.6.253, and then it never achieved anything.

  The problem is related to the architecture of Office B?

  See the files attached to a layout of Office B and the routing of the router table to Office B.

  Thank you.

  Enable NAT - T on the RPS and configure the remote ID as 192.168.5.253 in the IKE policy.

  Not sure about the RV and if supporting NAT - T.  It can automatically detect the NAT - T, or need to be configured (in this case, you configure the local identification)

  Andy.

• Adjust margin SNR on Cisco SRP527W-U?

  I have a new srp527w-u Cisco router which works fine even if it is the synchronization at a lower rate than my billion (6 Mbps vs 8.5 mbps for billions on the same line).

  I had twisted the way billions back to connect with a 4db SNR margin, and almost certainly, that's why it has the highest rate (by comparison, the cisco is synchronized with a 12 dB snr margin). Is it possible that I can configure it to use a SNR margin? I know that this could reduce the stability of the connection but I would at least be able to give it a try if possible.

  Thanks for any help!

  Hi Louis,.

  This level of configuration is not possible with the SRP500.

  Andy

• SRP527W with Split Tunnel

  Hi guys,.

  I just sent a SRP527W that I had lying around for a while.

  Everything about the unit works as well as can be expected, however I have an obligation to perform split tunneling for VPN users.

  Currently, the only way that receives the VPN client is a default route. I noticed that on site-to-site VPN and tunnels GRE, you can specify safe routes, but I can't find anything that relates to remote VPN users. This can be done on IOS without problem, but would be good for the RPS.

  I'm under the latest firmware 1.01.26, so if I have not forgotten anything it would be probably for a future version?

  See you soon.

  Bryce

  Hi Bryce,.

  Nothing is overlooked, it is not possible to set up split tunneling for the VPN of the RPS server.

  Kind regards

  Andy

• Nat SRP527W-U problem

  Hello

  I have nat rules for the troubled peripheral parameter SRP527W-U with the latest firmware 1.2.4 (003). The latest firmware 1.2.4 introduced the ability to create rules specific nat through "ACL policy rules. I try to use this 'new' not available in older versions to get my network configuration made. The configuration I want to do is to have two vlan different. In the vlan1 I want nat point_to_point interface and PC in the vlan2 I want to use Tar so each computer will be accessible via the public ip address.

  I configured two different PVC on the device we are going to say:

  ADSL_PVC0:

  Encapsulation: PAI

  multiplexing: LLC

  type of QoS: UBR

  Automatic detection VPI/VCI: disable

  virtual circuit VPI:8 VCI:35

  IP settings:

  IP: 2.2.2.2 (it isn't my real ip address that's just an example)

  subnet mask: 255.255.255.252

  Gateway: 2.2.2.1

  MTU: automatic

  ADSL_PVC1:

  Encapsulation: PPPoA

  multiplexing: VC

  type of QoS: UBR

  Automatic detection VPI/VCI: disable

  virtual circuit VPI:8 VCI:40

  PPPoA settings:

  user name: [email protected] / * /

  past: xxxxxxx

  connection: keep alive

  MTU: automatic

  in the Internet_setup_menu, I chose:

  Default system via ADSL_PVC0 route

  voice by default ADSL_PVC1 road

  After that I enabled under menu interface_setup-> LAN-> VLAN_settings two different VLANS:

  vlan1 (default vlan):

  private_lan:

  ID: 1

  subscription_type: DHCP_server_pool

  DHCP pool: DHCPRule_1 (VLAN1)

  voice: off

  Members: LAN_port1, LAN_port3, LAN_port4, SSID1

  VLAN2 (vlan public):

  public:

  ID: 2

  subscription_type: DHCP_server_pool

  DHCP pool: DHCPRule_2_public_ip (VLAN2)

  voice: off

  Members: LAN_port2, SSID2

  and I put two different rules of the DHCP:

  DHCPRule_1

  VLAN 1

  ip address local address/subnet 192.168.1.1/24

  mode DHCP: dhcp server

  GW: 192.168.1.1

  DNS proxy: enabled

  DHCPRule_2_public_ip

  VLAN 2

  local ip address/subnet 3.3.3.1/27

  mode DHCP: dhcp server

  GW: 3.3.3.1

  DNS proxy: disabled

  DNS1: 8.8.8.8

  After that, I put under menu network_setup-> nat-> global_nat:

  address translation:

  NAT: disabled

  Instead, I added this policy under nat_bypass:

  policy nat_lan

  activated: Yes

  inside the interface: vlan1

  outside interface: ADSL_PVC0

  IP address: 2.2.2.2/30

  If I try to join a pc on the lan port 1 I am able to get the ip via DHCPRule_1 configuration I can ping 192.168.1.1 gw but I'm not able to ping 8.8.8.8.

  If I try to join a pc on the lan port 2 I am able to get the ip via DHCPRule_2_public_ip configuration I ping 3.3.3.1 gw and I am ABLE to ping 8.8.8.8 and safe surfing on the web.

  Side wan I am able to reach the router via the ip address different pubblic two assigned to the PVC ADSL_PVC0, ADSL_PVC1

  If I try to activate the nat under global_nat of course, I am able to browse the web, and the device uses the public ip address of the pvc ADSL_PVC0 NAT 'myself. "

  I tried configuration multiple times and I tried to apply many different configurations "flavor", but I'm still having trouble getting the configuration made. From my point of view, there is some sort of bug related to nat or something missing in this configuration.

  Any help will be really appreciated.

  Thanks in advance for your answer.

  Hi Paolo,.

  The default mode of operation for the RPS is to have active NAT.  If the global NAT setting is disabled, then the RPS will run in mode routing only (no NAT never).

  For your configuration, leave the global NAT setting as active and create a rule to bypass NAT for traffic in VLAN 2 (effectively ensure that this traffic is routed and not translated).

  Rules-based routing policy allows you to set your local traffic PVC must use.

  Hope that helps.

  Andy