Newbie here. Searched the forum and can't find an answer.
Situation, a 5505 between the inside network (192.168.130.x) and the "outside" network (192.168.135.x) - they are LAN's that have their own IPs, the outside network consists of wireless equipment so we only want to let port 80 through so they can connect to an internal web server to deliver content to the wireless PDAs on the outside.
(In an ideal world, we'd also like to set up a NAT on the outside interface so that none of the wireless traffic gives away any of the internal IP addresses in the chatter.)
We've managed to get it so that anything on the inside interface works fine and a response comes from the wireless devices ... however, nothing on the outside can initiate a conversation with anything on the inside. The outside interface on the 5505 won't even respond to ping, even after defining any-any rules on everything.
The router has a "basic" licence, and I am wondering if there is a restriction. The manual says...
Transparent Mode - Up to two active VLANs
Routed Mode - Up to three active VLAN's. The DMZ VLAN is restricted from initiating traffic to the inside VLAN.
So ... is this the case please, and if so, how do I switch the router in to transparent mode? Or how do I configure the router to do what is needed as outlined above, please? - or are we going to have to get a higher licence?
Thank you for responding. I have to admit that after no response for a while, I turned to a few other people and got the issue sorted. It turned out to be PAT upsetting various things that were happening.
Apologies for not updating the thread but I thought that with this amount of time, it had sunk without trace.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...