virtual vSwitchs & VM with several local networks

Similar Questions

• ASA 5505 VPN remote cannot access with my local network

  Hello guys, I have a problem with my asa 5505 remote VPN access to the local network, the VPn connection works well and connected, but the problem is that I can't reach my inside connection network of 192.168.30.x, here's my setup, please can you help me

  ASA Version 8.2 (1)

  !

  !

  interface Vlan1

  nameif inside

  security-level 100

  192.168.30.1 IP address 255.255.255.0

  !

  interface Vlan2

  nameif outside

  security-level 0

  IP 155.155.155.10 255.255.255.0

  !

  interface Vlan5

  No nameif

  no level of security

  no ip address

  !

  interface Ethernet0/0

  switchport access vlan 2

  !

  interface Ethernet0/1

  !

  interface Ethernet0/2

  !

  interface Ethernet0/3

  !

  interface Ethernet0/4

  !

  interface Ethernet0/5

  !

  interface Ethernet0/6

  !

  interface Ethernet0/7

  !

  passive FTP mode

  inside_nat0_outbound list of allowed ip extended access any 192.168.100.0 255.255.255.240

  pager lines 24

  asdm of logging of information

  Within 1500 MTU

  Outside 1500 MTU

  IP local pool vpn-pool 192.168.100.1 - 192.168.100.10 mask 255.255.255.0

  ICMP unreachable rate-limit 1 burst-size 1

  don't allow no asdm history

  ARP timeout 14400

  Global 1 interface (outside)

  NAT (inside) 0-list of access inside_nat0_outbound

  NAT (inside) 1 0.0.0.0 0.0.0.0

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

  timeout tcp-proxy-reassembly 0:01:00

  dynamic-access-policy-registration DfltAccessPolicy

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown cold start

  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

  Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac

  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac

  Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

  Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac

  Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac

  Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac

  Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

  Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac

  life crypto ipsec security association seconds 28800

  Crypto ipsec kilobytes of life - safety 4608000 association

  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set

  Crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  outside_map interface card crypto outside

  crypto ISAKMP allow outside

  crypto ISAKMP policy 10

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  dhcpd outside auto_config

  !

  a basic threat threat detection

  Statistics-list of access threat detection

  no statistical threat detection tcp-interception

  WebVPN

  Mull strategy of Group internal

  attributes of the Group mull strategy

  Protocol-tunnel-VPN IPSec

  username privilege 0 encrypted password eKJj9owsQwAIk6Cw xxx

  VPN-group-policy Mull

  type mull tunnel-group remote access

  tunnel-group mull General attributes

  address vpn-pool pool

  Group Policy - by default-mull

  Mull group tunnel ipsec-attributes

  pre-shared-key *.

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  type of policy-card inspect dns preset_dns_map

  parameters

  message-length maximum 512

  Policy-map global_policy

  class inspection_default

  inspect the preset_dns_map dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the rsh

  inspect the rtsp

  inspect esmtp

  inspect sqlnet

  inspect the skinny

  inspect sunrpc

  inspect xdmcp

  inspect the sip

  inspect the netbios

  inspect the tftp

  !

  global service-policy global_policy

  context of prompt hostname

  Yes, you will need to either configure split tunnel so that internet traffic goes out through your local Internet service provider, GOLD / directed by configuration current you are tunneling all traffic (internet traffic Inc.) to the ASA, then you will need to create NAT for internet traffic.

  To set up a tunnel from split:

  split-acl access-list allowed 192.168.30.0 255.255.255.0

  attributes of the Group mull strategy

  Split-tunnel-policy tunnelspecified

  Split-tunnel-network-list value split-acl

  I hope this helps.

• VPN access to several local networks virtual asa8.3

  you are looking for assistance. This one goes batty.

  I have ASA 5510 8.3 running

  It serves as a router, firewall and vpn.

  the underlying network works fine.

  When I connect via VPN, I can only access my reseau.41 and not on the reseau.42. When I try to do a ping.42 I get this error:

  5 October 18, 2010 00:33:13 192.168.42.11 3389 rules asymmetrical NAT matched for flows forward and backward; Connection for tcp src Outside:192.168.43.200/2916 dst servers:192.168.42.11/3389 refused due to path failure reverse that of NAT

  If I flip through these rules in order to config then I can acceder.42 through the vpn but pas.41

  NAT (servers, all) static source any any destination static obj-vpnpool obj-vpnpool
  NAT (iscsimgmt, any) static source any any destination static obj-vpnpool obj-vpnpool

  I'm confused because it's all a new config and I used the wizard in asdm and couldn't access squat (perhaps he does not know how to manage the VLAN)?

  the ASA may well ping of all networks.

  devices on the network can ping each other fine

  just via ipsec vpn, I can't access both networks.

  thoughts?

  Please configure a more specific NAT statements as follows:

  object obj-iscsimgmt network
  192.168.42.0 subnet 255.255.255.0
  

  
  

  NAT (servers, Outside) source static obj-servers obj-servers destination static obj-vpnpool obj-vpnpool
  NAT (iscsimgmt, Outside) source static obj-iscsimgmt obj-iscsimgmt destination static obj-vpnpool obj-vpnpool

  And pls Remove the following:

  NAT (servers, all) static source any any destination static obj-vpnpool obj-vpnpool
  NAT (iscsimgmt, any) static source any any destination static obj-vpnpool obj-vpnpool

  Then "clear xlate" after the changes described above.

  Hope that helps.

• share internet to a wireless lan with a local network to another computer

  Hello

  I have a labtop and pc have a lan card and an adsl modem which have wireless

  I want to connect my pc to the internet with this way

  Connect to my labtop with the lan cable and my labtop is connect to the internet with wireless audio

  Note: I save my username and password on my modem to connect to the internet

  Note: I can not connect the pc to the modem due to a problem

  How can I use my labtop and the lan connect this pc to the internet?

  Hello

  This is usually done by ICS, http://support.microsoft.com/kb/306126/en-us

  However, I do not understand why you cannot connect through your Modem/Router. Wireless ADSL modem with are actually a Modem, wireless card Combo, and should be able to connect several computer independently to the Internet.

  Jack - Microsoft MVP, Windows networking. WWW.EZLAN.NET

• On the configuration of local network for M40 series

  Dear Toshiba

  I downloaded the driver of LAN of your site and installed.

  I always have a problem with my network integrated port to work with my local network, despite I can use the DSL cable with the same port and internet access.

  the integrated network is enable with Device Manager and when I checked with your "Toshiba Pc Diagonistic" utility, the result with the 'network' is "Fail".

  all recommendations

  Hi Mohamed

  Well, I m bit confused. I'm going by what you have created a Local network.
  In this case, the TCP/IP protocol must be installed. Additionally if the IP address is not automatically applied, you have to put (also the subnet mask, gateway).
  However, you can try to use the fix in the Local area connection status.
  In this case, you should in order to make a right click on the connection to the Local network-> status and repair.

  Besides if this procedure doesn't solve this problem, please give us more detailed information.

  Best regards

• Set up a wall of fire on a group of work when it is connected to a local network

  I work at a large company that has a LAN with internet connected to it. In my Office I have 3 PC connected to a same workgroup but different from other working groups.

  I want to set up a firewall on my workgroup to prevent external access to my files. How can I do? or is it possible to set up a password for my workgroup?

  My PC is running xp2 professional win.

  Help me with that.

  Working groups do not provide any type of security on a network.  A computer in any working group can access a computer in any working group.  There is no firewall or passwords for the working groups.

  I recommend that you ask the people who run the company LAN how to do what you want.  They will know if it is possible and to ensure that what you are compatible with the local network.

  Boulder computer Maven
  Most Microsoft Valuable Professional

• Physical cards VSS with multiple virtual local network settings

  I intend to make my hosts vsphere to run virtual machines located on several VLANs. I know that in the world of physical switch, I do uplink switchport trunk and value rising swich as trunk so I can receive the traffic of multiple VLANs. But I don't know where to put uplink physical way of trunk cards. I can only define vmnetwork as trunk (vlan id 4095). How can I reach my goal? Just create several VMNetwork with the id vlan that I wan to accommodate and make virtual machines to connect to these VMNetwork? No parameters in layer vss physical map?

  Just create several VMNetwork with the id vlan that I wan to accommodate and make virtual machines to connect to these VMNetwork? No parameters in layer vss physical map?

  That is right. VLAN tagging is controlled at group and vmkernel port level. You don't have to set anything on the uplink.

• I can connect to my network, but with access "local only".

  Access to the "Local" network only
  I can connect to my network, but with access "local only".  Internet became more intermittent (not sure if that is related or if I guess it) and did not work in several weeks.  Desktop computer is plugged into the router, but have the same problem when it is plugged into the DSL modem.  Other computers on the same router (wireless or other) work very well.  Recently, I removed Mcaffee and installed MS security essentials.  I uninstalled mcaffee of programs and settings then used the mcaffee removal tool to lighten the rest.  I uninstalled and reinstalled MS security essentials.  I thought it might be a firewall issue, but I get error 0x6D9 when I try to start it.  I tried all the steps in the following post, nothing helps.  Any other suggestions?

  ______________________

  You can follow the steps below and check if that helps you solve the problem.

  Method 1

  Try to power cycle the router and the computer and check if it helps.

  On the PC:

  1. Save your work and restart the machine.

  On the router or modem (if wireless printing):

  1. Unplug the router and the modem.
  2. Wait 30 seconds.
  3. Plug in the modem and wait for it to come to the ready state.
  4. Plug in the router.

  After you put cycle check the connection between the router and the computer.

  Method 2

  If the steps above do not help, you mayreset TCP/IP stack. To reset access the link below and either click on "Fix it for me" or follow the instructions to fix it yourself:http://support.microsoft.com/kb/299357
   
  Disable the IP helpdesk:
  1 hold the Windows key and type R, type "services.msc" (without the quotes) and press enter
  2. scroll down to the IP assistance service, right-click on it and select Properties
  3. in the drop-down list box that says "Automatic" or "Manual", set it to disabled and then click 'apply '.
  4. then click on "Stop" to stop the service from running in the current session
  5. click on OK to exit the dialog box

  Method 3

  Disable IPv6 and remove IPv6 virtual cards:
   
  Try to uninstall IPv6 on all interfaces, the removal of virtual cards of IPv6 and reset the TCP/IP stack. To remove the IPv6, go to the properties for each network adapter, and deselect the check box next to the Protocol "Internet Protocol version 6 (TCP/IPv6), which will turn off, or select it and click on uninstall, which withdraw power off the computer.» Then go into Device Manager and remove any 4to6 adapters, adapters miniport WUN or tunnel adapters.
  NOTE: You should do this for each network connection, even if they are disabled.

  Method 4

  Disable the DHCP Broadcast Flag:
  Link: http://support.microsoft.com/default.aspx/kb/928233
  Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:
  http://support.microsoft.com/kb/322756.  How to back up and restore the registry in Windows
   
  Windows Vista cannot obtain an IP address from certain routers or some non-Microsoft DHCP servers
   
  To resolve this issue, disable the DHCP BROADCAST flag in Windows Vista. To do this, follow these steps:

  
  1. Click Start, type regedit in the search box, and then click regedit in the list programs.
  2. If you are prompted for an administrator password or for confirmation, type your password, or click on continue.
  3. Locate and then click the following registry subkey:
  4 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ {GUID}
  5. in this registry path, click the (GUID) subkey that corresponds to the network adapter that is connected to the network.
  6. on the Edit menu, point to new, and then click DWORD (32-bit) value.
  7. in the new area #1, type DhcpConnEnableBcastFlagToggle and press ENTER.
  8. right click on DhcpConnEnableBcastFlagToggle, then click on modify.
  9. in the value data box, type 1 and then click OK.
  10. close the registry editor.
   
  By setting this registry key to 1, Windows Vista's trying to get an IP address using the BROADCAST flag in DHCP Discover packets. If that fails, he will try to obtain an IP address without using the BROADCAST flag in DHCP Discover packets.
  You can also try uninstalling and reinstalling the driver for the wireless card.

  ________________

  Thanks for any help!

  Hello

  All changes to the software or hardware of the computer?

  Method 1:

  Visit the link below and follow the steps.

  Of network connectivity status incorrectly as 'Local' only on a Windows Server 2008 or Windows Vista-based computer that has multiple network cards

  http://support.Microsoft.com/kb/947041

  Method 2:

  Update the NIC drivers and check.

  Network adapter problems

  http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-network-adapter-problems

• GAL/LACP with several VIRTUAL LANs

  Hello

  I have two switches SG-200-50. I created three VLANS on one and define the place of the other - there is no requirement for routing between VIRTUAL LANs. However, I want to trunk between local networks VIRTUAL using with LACP LAG. For example, A button 1-22 ports VLAN 1 and then 23-24 is the junction for this. 25-34 is VLAN2 and trunking is 35-36. VLAN 3 is 37-48 and 49-50 trunking. I seemed to be able to get 1 VLAN, the default, trunking but no VLAN 2.

  I have a few questions:

  1. the SG-200 will allow you to the trunk several VIRTUAL LANs for another switch?

  2. If so - how? I've lived the documentation and it does not mention explicitly "multiple" VLAN with DELAY.

  3 circuits is possible by a LAG (say 6 ports) happening all the VLANS on the switch?

  So the main question is that I want to achieve is possible on this switch. The reason why I'm doing it is of course of redundancy. Carrying one VLAN on both switches is preferable. I just need trunk correctly between them.

  See you soon! Any thoughts appreciated.

  Scott

  Hi Scott,.

  You had questions, which I copied in red. :

  1. the SG-200 will allow you to the trunk several VIRTUAL LANs for another switch?  Absolutely

  2. If so - how? I've lived the documentation and it does not mention explicitly "multiple" VLAN with DELAY.

  I have attached the Administrator's guide.  The OFFSET rules are defined at the bottom of page 82 of the attached document.

  The 200 series supports four lags, or in other words four groups aggregagted of links.

  3 circuits is possible by a LAG (say 6 ports) happening all the VLANS on the switch?  Yes as indicates it page 83 administrator guide.

  Assign up to eight ports active members to the static LAG.

  So the main question is that I want to achieve is possible on this switch. The reason why I'm doing it is of course of redundancy. Carrying one VLAN on both switches is preferable. I just need trunk correctly between them.

  Personally, I prefer to the trunk on gal differently, especially when you are trying only to achieve redundancy and higher aggregate bandwidth between switches.  It is also relevant to the 300 series as the product of the 300 series is just a richer product.

  You want; "I want to trunk between local networks VIRTUAL using with LACP LAG. For example, A button 1-22 ports VLAN 1 and then 23-24 is the junction for this. 25-34 is VLAN2 and trunking is 35-36. VLAN 3 is 37-48 and 49-50 trunking. It seemed to me be able to obtain VLAN 1, the default value, trunking but no VLAN 2. »

  What about using the ports numbers higher for the uplink between switches, I have no particular reason to use these ports except that they are on the right side of the switch.

  A B switch

  ports ports

  VLAN 1 1-24, 47-48 1-24, 47-48

  VLAN2 25-34, 25-34

  vlan3 35-46 35-46

  LAG ports 49-50 49-50

  The advantage of this is that now you have two ports of the traffic load balancing between switches of series two 200.  I could have more if I want, but I want to keep my simple example.

  Create a static OFFSET, by the sound of it you did already.

  I just used my 300 series switch (SF300 - 48P) as a demo, as I don't have a series 200 switch.  Configuration should be roughly about the same.  In my case, I have four ports GiG GE1 to GE4.  I will use GE1 and GE2 as my two members of a group LAG 1.  May sound a bit confusing, but follow below.

  Added two ports for the DELAY, note in the example below GE1 and GE2 are not connected to another switch, so they showup as ports of Eve;

  Also my 300 series switch supports eight groups of LAG, so captures the numbers 1 to 8 as shown in the following screen.

  

  Now that my LAG is created, you'll notice in the screenshot below that VLAN1 is added automatically to the LAG 1 as unmarked frames.

  Note: circled point, I selected LAG in this menu drop-down and then click Go.

  Note: 1 in the Red rectangular box represents GAL Group 1, which consists of GE1 and GE2

  

  Now, I add 2 VLAN group LAG 1 by selecting 2 VLAN selected then LAG and then click go, the following screen came.

  

  I clicked on the button marked radio in the rectangle above, to allow VLAN 2 send labeled on group GAL 1 ethernet frames.

  And so on for the other VLANS I migth.

  My methodology or train of thought, was to allow of vlan1 to just send frames unmarked on the Group LAG 1, but any other VLAN later is marked on the Group 1 GAL.

  You should be able to do exactly the same thing on the other switch 200 series.

  in my example, as I then simply take some CAT6 or CAT5e cables and connect GE1 on a 200 series switch to other Ge1 200 series

  I connect then GE2 on a 200 series switch to other Ge2 200 series.

  Now I have the aggregation of links and balancing working between switches.

  Hope this helps

  Best regards, Dave

• Have problems with the IPSec VPN Client and several target networks

  I use an ASA 5520 8.2 (4) running.

  My goal is to get a VPN client to access more than one network within the network, for example, I need VPN client IPSec and power establish tcp connections on servers to 192.168.210.x and 10.21.9.x and 10.21.3.x

  I think I'm close to having this resolved, but seems to have a routing problem. Which I think is relevant include:

  Net1: 192.168.210.0/32

  NET2: 10.21.0.0/16

  NET2 has several subnets defined VIRTUAL local network:

  DeviceManagement (vlan91): 10.21.9.0/32

  Servers (vlan31): 10.21.3.0/32

  # See the road

  Code: C - connected, S - static, RIP, M - mobile - IGRP, R - I, B - BGP

  D - EIGRP, OSPF, IA - external EIGRP, O - EX - OSPF inter zone

  N1 - type external OSPF NSSA 1, N2 - type external OSPF NSSA 2

  E1 - OSPF external type 1, E2 - external OSPF of type 2, E - EGP

  i - IS - L1 - IS - IS level 1, L2 - IS - IS IS level 2, AI - IS inter zone

  * - candidate by default, U - static route by user, o - ODR

  P periodical downloaded static route

  Gateway of last resort is x.x.x.x network 0.0.0.0

  C 192.168.210.0 255.255.255.0 is directly connected to the inside

  C 216.185.85.92 255.255.255.252 is directly connected to the outside of the

  C 10.21.9.0 255.255.255.0 is directly connected, DeviceManagement

  C 10.21.3.0 255.255.255.0 is directly connected, servers

  S * 0.0.0.0 0.0.0.0 [1/0] via x.x.x.x, outdoor

  I can communicate freely between all networks from the inside.

  interface GigabitEthernet0/0

  Description * INTERNAL NETWORK *.

  Speed 1000

  full duplex

  nameif inside

  security-level 100

  IP 192.168.210.1 255.255.255.0

  OSPF hello-interval 2

  OSPF dead-interval 7

  !

  interface Redundant1.31

  VLAN 31

  nameif servers

  security-level 100

  IP 10.21.3.1 255.255.255.0

  !

  interface Redundant1.91

  VLAN 91

  nameif DeviceManagement

  security-level 100

  IP 10.21.9.1 255.255.255.0

  permit same-security-traffic inter-interface

  NO_NAT list of allowed ip extended access all 172.31.255.0 255.255.255.0

  IP local pool vpnpool 172.31.255.1 - 172.31.255.254 mask 255.255.255.0

  Overall 101 (external) interface

  NAT (inside) 0-list of access NO_NAT

  NAT (inside) 101 192.168.210.0 255.255.255.0

  NAT (servers) 101 10.21.3.0 255.255.255.0

  NAT (DeviceManagement) 101 10.21.9.0 255.255.255.0

  static (inside, DeviceManagement) 192.168.210.0 192.168.210.0 netmask 255.255.255.0

  static (inside, servers) 192.168.210.0 192.168.210.0 netmask 255.255.255.0

  static (servers, upside down) 10.21.3.0 10.21.3.0 netmask 255.255.255.0

  static (DeviceManagement, upside down) 10.21.9.0 10.21.9.0 netmask 255.255.255.0

  access list IN LAN extended permitted tcp 192.168.210.0 255.255.255.0 any

  access list IN LAN extended permit udp 192.168.210.0 255.255.255.0 any

  LAN-IN scope ip 192.168.210.0 access list allow 255.255.255.0 any

  LAN-IN extended access list allow icmp 192.168.210.0 255.255.255.0 any

  access list IN LAN extended permitted tcp 10.21.0.0 255.255.0.0 any

  access list IN LAN extended permitted udp 10.21.0.0 255.255.0.0 any

  LAN-IN scope 10.21.0.0 ip access list allow 255.255.0.0 any

  LAN-IN extended access list allow icmp 10.21.0.0 255.255.0.0 any

  standard access list permits 192.168.210.0 SPLIT-TUNNEL 255.255.255.0

  standard access list permits 10.21.0.0 SPLIT-TUNNEL 255.255.0.0

  group-access LAN-IN in the interface inside

  internal VPNUSERS group policy

  attributes of the VPNUSERS group policy

  value of server DNS 216.185.64.6

  Protocol-tunnel-VPN IPSec

  Split-tunnel-policy tunnelspecified

  Split-tunnel-network-list value of SPLIT TUNNEL

  field default value internal - Network.com

  type VPNUSERS tunnel-group remote access

  tunnel-group VPNUSERS General attributes

  address vpnpool pool

  strategy-group-by default VPNUSERS

  tunnel-group VPNUSERS ipsec-attributes

  pre-shared key *.

  When a user establishes a VPN connection, their local routing tables have routes through the tunnel to the 10.21.0.0/16 and the 192.168.210.0/32.

  They are only able to communicate with the network 192.168.210.0/32, however.

  I tried to add the following, but it does not help:

  router ospf 1000

  router ID - 192.168.210.1

  Network 10.21.0.0 255.255.0.0 area 1

  network 192.168.210.0 255.255.255.252 area 0

  area 1

  Can anyone help me please with this problem? There could be a bunch of superfluous things here, and if you could show me, too, I'd be very happy. If you need more information on the config, I'll be happy to provide.

  Hello Kenneth,

  Based on the appliance's routing table, I can see the following

  C 10.21.9.0 255.255.255.0 is directly connected, DeviceManagement

  C 10.21.3.0 255.255.255.0 is directly connected, servers

  C 192.168.210.0 255.255.255.0 is directly connected to the inside

  And you try to connect to the 3 of them.

  Politics of Split tunnel is very good, the VPN configuration is fine

  The problem is here

  NO_NAT list of allowed ip extended access all 172.31.255.0 255.255.255.0

  NAT (inside) 0-list of access NO_NAT

  Dude, you point to just inside interface and 2 other subnets are on the device management interface and the interface of servers... That is the question

  Now how to solve

  NO_NAT ip 192.168.210.0 access list allow 255.255.255.0 172.31.255.0 255.255.255.0

  no access list NO_NAT extended permits all ip 172.31.255.0 255.255.255.0

  NO_NAT_SERVERS ip 10.21.3.0 access list allow 255.255.255.0 172.31.255.0 255.255.255.0

  NAT (SERVERS) 0 ACCESS-LIST NO_NAT_SERVERS

  Permit access-list no.-NAT_DEVICEMANAGMENT ip 10.21.9.0 255.255.255.0 172.31.255.0 255.255.255.0

  NAT (deviceManagment) 0-no.-NAT_DEVICEMANAGMENT access list

  Any other questions... Sure... Be sure to note all my answers.

  Julio

• Several external networks on a single vswitch

  I am trying to understand (among others) if I need more a vmkernel on the same vswitch. It is related to a question I posted last week, but I understood some things since. Here is the configuration (slightly reduced for reasons of this discussion).

  2 vSphere 5.5 hosts, each with:

  1 vmnic connected to external switch capable of trunk ports (vSwitch0); It is currently the management network

  1 vmnic connected to the switch for vmotion (vSwitch1)

  1 vmnic connected via switch private iscsi array; the private switch VLANs separated for iscsi (vSwitch2)

  VMotion and iscsi works very well, so I am concerned mainly with the external networking. Currently, all virtual machines are on VLAN not signposted. We will change to 2 VLAN tagged on different subnets - 10.1.10.x and 10.2.20.x. The VMs will have to talk to each other so that on different hosts. So, does that mean that I need 2 vmkernels on vSwitch0 - one for the 10.1 subnet and one for subnet 10.2? Then the Group at a port by vmkernel and matched vlan id for group of ports and vmkernel?

  OR

  I really only need a single vmkernel on vSwitch0 with 2 groups of different ports for the different VLANS? IE, VMs with different networks than network mgmt will be able to communicate through the external switch to virtual machines on other host?

  Also, I expect that external ports must be set to allow 1 marked and tagged 10 labeled 20 - is that correct?

  So, does that mean that I need 2 vmkernels on vSwitch0 - one for the 10.1 subnet and one for subnet 10.2? Then the Group at a port by vmkernel and matched vlan id for group of ports and vmkernel?

  No.... you need not multiple VMkernel can use different virtual machine networks in your ESXi host.

  I really only need a single vmkernel on vSwitch0 with 2 groups of different ports for the different VLANS? IE, VMs with different networks than network mgmt will be able to communicate through the external switch to virtual machines on other host?

  Yes, just use the existing VMkernel management interface and create two groups of ports, one for each VIRTUAL local area network. Yes, VMs of different VLAN in network management will be able to communicate, BUT your physical switch must be configured to allow traffic from multiple VLANs.

  Also, I expect that external ports must be set to allow 1 marked and tagged 10 labeled 20 - is that correct?

  It should work.

• vSwitch ESXi 5.1 workaround to virtual machines (direct access to the network)

  Hello world!

  I have a server running properly the 5.1 ESXi hypervisor and got inside the physical grid active router with DHCP. How can I configure the vSwitch on ESXi 5.1 work not managed on the network, without VLAN and have direct access to the network?

  Just to clarify, I would like to first of all virtual machines VMware Workstation works - if it is possible to run several virtual machines and define all NICS (Network Interface Card) as connected by a bridge, that is to say. Each VM gets the specific configurations of IP to the external router.

  Since now, thank you very much for the help!

  Best regards

  Eduardo

  With ESXi the vSwitches work comparable to Bridged networking, so there is really nothing special to do.

  André

• How do I create standard vSwitches in a HA cluster where the virtual machine switches to the same network?

  I have a lab put in place with 2 hosts 5.5 ESXi and vCenter.  I want to create a situation where each virtual machine must have a dedicated network card.  If I create vSwitchABC on host 1, what should I do on host 2?  Create vSwitchABC on that host too and connect it to the same physical switch?  Which will allow the host 1 failure and the virtual machine to arrive on host 2 on the network because the same vSwitch names?

  Thank you!

  Welcome to the community-Yes, you need to create a vswitch on host 2 has a virtual machine port group with the same name on host 1 connection on the same subnet as connected to the host - 1

• The local network settings for arbitrarily lose connectivity with ADSL modem

  Hi all

  I have a SAGEM 1500WG ADSL modem for internet connection and a laptop Satellite A100 (PSAA9). I noticed that arbitrarily, the ALARM led on the modem of DSL connection worked again (according to the lights on the modem) and the real problem was that I couldn't ping my modem. The problem was inside my local network. I can't be sure that what happened outside my LAN because I could not reach even the modem.

  The only solution is to reset the modem. After 4-5 months of use, I have concluded that, whenever this was happening, I used Azureus to download a movie and this download was pretty slow (for example because my counterpart have fast connection). Also, I was connected with wire and NOT using the modem wireless. This means that: the problem never appeared when the wireless or Azureus works and download a significant amount of data.

  I wonder if the LAN driver has any firewall installed on it. Or if she has any function that transforms the power driver LAN offshore when there are very few or no data go through it for a certain period of time.

  Or East-Azureus has any odd décor that reminds you of something above?
  The combination I think is problematic is "adapter LAN + Azureus work + very little data being downloaded. Maybe I'm a little confused. Anyone who has experienced the same problem or can come up with an idea will be extremely useful.
  Thank you very much.
  Lambros

  Hello

  Don t think that there is a problem with the LAN settings or the LAN driver on the device!
  Your data transmission to low and transfer depends on your service provider Internet (ISP) and the server.
  Your Azureus application does not for me, but in my easy it s a transfer of connection and the data of the software simply PEAR-pear file also depends on the number of users and the connected clients

• Laptop wireless with NETGEAR router Home Windows Vista detects on the local network and internet

  We have a laptop Toshiba Satellite L505-S6946 with Windows Vista on it. We bought a router Netgear Wireless G WGR614V10 a few months ago and installed ok. It worked fine for a few months. Now the network connection to the bottom rhs shows tray icon: 'Local only' for the connection of the SSID, we have implemented. Technical support Netgear has determined that the router works fine. But they noted that the router might get a static IP address in his settings of the adapter wireless Vista. And they said that something should be changed in Vista to a direct connection with the modem works fine for internet access, but it's bulky. Someone please do you suggest to fix this error? Thank you!!!

  Hello

  A message in the small window that says connected wireless does not mean that you really have a valid functional connection.

  Linking the means of router you can enter the IP base of the router in an address bar in one go, being able to connect, see and configure the router menus (extended to the wireless router manual should explain how to do).

  If it will not connect to your wireless router, journal newspaper from any computer that can connect to the router wirelessly with a wire, disable wireless security, make sure that the wireless SSID broadcast is enabled and try to connect with no. wireless security.

  Enable security wireless after you eat to make a functional connection.

  ----------------------------

  The wireless card drivers much also install utility wireless of the seller.

  Make sure that if there are teas from Wireless Utility of seller does not work with the native Windows wireless utility (Service WLAN).

  ----------------

  Firewall software can block traffic Local to the network that you are trying to use because it is not set to the network Zone Trust.

  Make sure you firewall No. preventing / blocks wireless components to join the network.

  Some 3rd party software firewall continue to block the same aspects it traffic Local, they are turned Off (disabled). If possible set up the firewall correctly, otherwise totally uninstall and get rid of its remaining processes that permit the own local network traffic flow.

  If the 3rd party software is uninstalled, or disables, make sure Windows native firewall is active .

  party like Hello and NetMagic 3rd network managers can block local traffic too.

  ---------------------------

  Stack TCP/IP (network IP number) of work should look like.

  Right-click on the wireless network connection card, select status, details and see if she got an IP address and the rest of the settings.

  http://www.ezlan.NET/Win7/status-NIC.jpg

  Description is the data of the card making.

  The physical address is MAC of the card number.

  The xx must be a number between 0 and 255 (all xx even number).

  YY should be between 0 and 255

  ZZ should be between 0 and 255 (zz all the same number.)

  The date of the lease must be valid at the present time.

  * Note 1. IP that starts with 169.xxx.xxx.xxx isn't valid functional IP.

  * Note 2. There could be an IPv6 entries too. However, they are not functional for Internet or LAN traffic. They are necessary for Win 7 homegroup special configuration.

  Jack - Microsoft MVP, Windows networking. WWW.EZLAN.NET