<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Cisco forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/equip,cis</link>
<description>Cisco forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Mon, 09 Nov 2009 19:36:46 EDT</pubDate>
<lastBuildDate>Mon, 09 Nov 2009 19:36:46 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>SA 500 Firewalls</title>
<link>http://www.dslreports.com/forum/remark,23310013</link>
<description><![CDATA[Has any one looked at these? I stumbled across them on Cisco's website when I was seeing if there was any thing new coming out.

http://www.cisco.com/en/US/products/ps9932/prod_models_comparison.html

I all most feel out of my chair when I saw the features and the pricing.

Now I wonder what they get for support on these?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23310013</guid>
<pubDate>2009-11-08 12:36:18</pubDate>
</item>

<item>
<title>PKI _VS_CA</title>
<link>http://www.dslreports.com/forum/remark,23306885</link>
<description><![CDATA[I am looking into additional security for our vpn, we currently use rsa and not renewing our contract as the cost of fobs and maintenance.
We are implementing 2 form authentication with sms notification from ldap, if you cell number isnt in the list your do not get it. We want to add a certificate with our vpn users also. We currently have a asa 5510 w/aip and 8.2 running. I am looking for pros and cons of this, users are connecting via cisco vpn, or the OSX 10.6 built in cisco client. If we go the cert route who issues these, geotrust? verisign? Can someone please point me in the right direction please]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23306885</guid>
<pubDate>2009-11-07 15:38:49</pubDate>
</item>

<item>
<title>VPN Trouble with ASA 5520</title>
<link>http://www.dslreports.com/forum/remark,23298023</link>
<description><![CDATA[Hi guys, I have a lab going and have a remote access vpn tunnel set up between a 871 and the ASA, the tunnel is up on both ends and i can of course hit the outside ips. The issue is that the two inside networks cannot communicate. I have the policy set to tunnel everything between the two and there are no firewalls. I do a sh route an the ASA just doesn't seem to be showing a route for the internal ip of the 871.

Any ideas on this?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23298023</guid>
<pubDate>2009-11-05 17:55:17</pubDate>
</item>

<item>
<title>[Config] ASA 5510 Fire wall Bug</title>
<link>http://www.dslreports.com/forum/remark,23297576</link>
<description><![CDATA[ASA 5510 Firewall 
Cisco Adaptive Security Appliance Software Version 8.0(3)6 
Device Manager Version 6.0(3)58

About a month ago the firewalls memory usage was about 
136 MB The only recent change that has taken place since then is installing Cisco anyConnect X64 vpn software and even then the memory usage appeared to be stable at 136MB.

The problem:
The memory usage today is 146MB, cisco says it's due to a bug in the IOS which is 8.0.3(6) and they said going to 8.0.4 would solve the problem, And whats happening is a bug.

Does this sound right, what else could be happening.????

Thanks]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23297576</guid>
<pubDate>2009-11-05 16:22:00</pubDate>
</item>

<item>
<title>cisco 1751 &#x26;amp; AT&#x26;amp;T 6 Mbs DSL Service</title>
<link>http://www.dslreports.com/forum/remark,23314411</link>
<description><![CDATA[Hello, 

I am almost ready to give up on this but I thought I would give it one more try here, and hopefully find some help...
I have a Cisco 1751 pre-installed with  IOS version C1700-K9O3SY7-M (This is the IP/ADLS/FW/IDS PLUS IPSEC 3DES )with WIC-1ADSL 1-port ADSL WAN Interface Card. I have AT&T DSL service (6Mbs down /768 up).
I looked and found different config types on the cisco and other network sites but none of them worked so far.
All that I am trying to accomplish is :
1)Use the 1751 as my DSL ROUTER / FIREWALL for DHCP and NAT to my local network (192.168.100.0/24),and port forward 3389, 22, 80 to 192.168.100.x...
I found and modified this config but the 1751 is still not picking up an IP from the DSL WAN side.
 Here is the config i have so far.

! version 12.3
service timestamps debug datetime msec 
service timestamps datetime msec 
! 
hostname DSL_ROUTER
! 
ip subnet-zero 
! 
ip dhcp excluded-address 192.168.100.1
!
ip dhcp pool pool name HOME
 
 network 192.168.100.0 255.255.255.0
   default-router 192.168.100.1
! 
interface FastEthernet0 
 ip address 192.168.100.1 255.0.0.0 
 no ip directed-broadcast 
 ip nat inside 
 no ip mroute-cache
! 
interface ATM0 
 no ip address 
 no ip directed-broadcast 
 no ip mroute-cache 
 no atm ilmi-keepalive
 pvc 1/150 
  encapsulation aal5mux ppp dialer 
  dialer pool-member 1 
 !
 hold-queue 224 in 
! 
interface Dialer0 
 ip address negotiated 
 no ip directed-broadcast 
 ip nat outside 
 encapsulation ppp 
 dialer pool 1 
 dialer-group 1 
 ppp pap sent-username username xxxxx@att.net password password

! 
ip nat inside source list 1 interface Dialer0 overload
ip classless 
ip route 0.0.0.0 0.0.0.0 Dialer0 
no ip http server 
! 
access-list 1 permit 192.168.100.0.255.255.255.0
dialer-list 1 protocol ip permit
! 
end

Thanks in advance for your help.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23314411</guid>
<pubDate>2009-11-09 12:12:36</pubDate>
</item>

<item>
<title>Initial Configuration of ASA5505&#x27;s</title>
<link>http://www.dslreports.com/forum/remark,23299754</link>
<description><![CDATA[Hey,

I was hoping somebody here can help me with an easy issue I am facing. I am directly connecting two ASA 5505 devices on their outside ports and plan on creating a VPN tunnel. However I am running into problems even before I configure the VPN.

I ran the initial factory config then configured the IP addresses as follows:

ASA1 (outside): 10.128.84.101
ASA1 (inside):   10.179.5.254
comp1 (inside) : 10.179.5.5

ASA2 (outside): 10.128.86.9
ASA2 (Inside):   10.179.1.254
comp2 (inside) : 10.179.1.5

At the moment I have them both connected on eth0/0 which is the outside interface configured on VLAN 2. Before I configre the VPN tunnel I want to be able to ping between the two computers on the opposite inside interfaces, however I can't seem to get this to happen. I tried to configure static routes but nothing seems to work. 

I pasted my config below, I would appreciate any help.

ASA Version 7.2(4)
!
hostname ciscoasa
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 10.179.5.254 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 10.128.84.101 255.255.255.0
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
icmp permit any inside
icmp permit any outside
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 10.179.5.0 255.255.255.0
nat (inside) 1 0.0.0.0 0.0.0.0
nat (outside) 1 0.0.0.0 0.0.0.0
route inside 10.179.1.0 255.255.255.0 10.179.5.254 1
route outside 0.0.0.0 0.0.0.0 10.128.86.9 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0

!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:dc413c0ca1b179de74d953e9a32146a3
: end]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23299754</guid>
<pubDate>2009-11-06 00:03:44</pubDate>
</item>

<item>
<title>[HELP] ASA 5505 w/ Verizon DSL</title>
<link>http://www.dslreports.com/forum/remark,23309161</link>
<description><![CDATA[Hello all,

I'm pretty decent in the world of Cisco but I'm having trouble getting traffic to flow out with a ASA 5505 on Verizon DSL.  I have a static IP with Verizon and I'm using their Westfall 7500 modem/router as a routed bridge into my network.

The data flow goes likes this: Westfall 7500 > Cisco Catalyst Switch > ASA 5505

The switch has a inside and outside VLAN.  The router and the outside interface on the ASA reside in the outside VLAN, everything else is on the inside VLAN.

At this point I have a very basic configuration, I think the issue may reside in one of two areas:

1) The outside interface is set to the static IP that Verizon gave me
2) I'm routing the outside interface to the Verizon gateway, basically my static IP but it ends in .1 (route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.1)

Should I be routing the outside interface elsewhere? Are there any other issues that anyone can think of?

Just as a side note, all the speed/duplex settings seem to match, I've had trouble with that in the past...

Thanks]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23309161</guid>
<pubDate>2009-11-08 06:44:24</pubDate>
</item>

<item>
<title>trying to replace DSL w/Cable modem</title>
<link>http://www.dslreports.com/forum/remark,23312158</link>
<description><![CDATA[I had a setup where my router was talking to DSL modem from BellSouth - was working fine and it passed connection up to wireless....all was sweet. BellSouth(now ATT) got stupid and shut off my DSL when I pushed the land line phone number to a cell phone. I set this all up myself and it was easy enough.Now I am on Comcast with a Cisco 2100 single port cable modem. I figured no sweat, plug and play. The downstairs router will pick up the ip address being offered (the laptop did when the Comcast guy was here). The laptop continues to work fine, but neither of my routers will talk to it. I even reset one to factory default (I can always reload DDWRT on it).So what am I doing wrong (the wife is giving me the I told you so routine)??? ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23312158</guid>
<pubDate>2009-11-08 21:42:28</pubDate>
</item>

<item>
<title>[HELP] LLDP Multicast storm</title>
<link>http://www.dslreports.com/forum/remark,23299647</link>
<description><![CDATA[Anyone here ever seen when a device is plugged into a switch, it causes an LLDP multicast storm?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23299647</guid>
<pubDate>2009-11-05 23:36:42</pubDate>
</item>

<item>
<title>CIsco 2950 slow network transfers</title>
<link>http://www.dslreports.com/forum/remark,23309300</link>
<description><![CDATA[Hello all.
I have a 2950 catalyst 100MB switch.  Connected to it I have my workstation, my WHS box. Linux box and a VMWare ESXi box.  They're all in the same vlan.  The other vlan is my IP phone, my vmware ESXi server (on another interface), and wireless.

In any case, on both vlans and with speeds on the NICS and the ports switched to the same (i.e. 100 MB full, auto negotiate), I'm getting very slow network transfer speeds with it comes to SMB transfers and NFS transfers.  I'm only getting about 8 MBs.  I am thinking I should be getting faster than that.  I've been googleing but to no avail.  Anyone run into this before? 
--
'A government big enough to give you everything you want, is strong enough to take everything you have.' 
Thomas Jefferson
]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23309300</guid>
<pubDate>2009-11-08 08:47:57</pubDate>
</item>

</channel>
</rss>
