-
يه مشكل با لينك سيسكو
سلام خدمت همه دوستان
آقا من يه جفت لينك سيسكو 350 دارم
اوني كه در ساختمان ما هست اي پي 10.110.5.242 هست
اوني هم كه اونور هست اي پي 10.110.5.243 داره
حالا زماني كه من رنج آي پيم 10.110.5.0 هست هر 2تا راديو رو ميتونم ببينم و پينگ كنم
ولي زماني كه رنج آي پيم 172.16.0.0 ميشه، فقط اوني كه تو ساختمان خودمون هست رو ميتونم ببينم
اما اونا راحت ميتونن مارو ببينن!
در صورتي كه من هيچ مشكلي با هيچ كدوم از رنجهاي آي پي 10.110.5.0 ندارم
يكي از دوستان گفت بايد براش رول تعريف كني
ولي من نميدونم چي بايد تعريف كنم توي راديو خودم
مواردي كه نياز هست براي تعريف رول :
dest network
gateway
subnet mask
اين dest network چيه؟
-
كسي نمي خواد چيزي بگه؟
راستي يه سوال
مي خواستم براي جلوگيري از ورود افراد ناشناس به شبمه از طريق راديو ما
اون اعتبار سنجي كنم
ميخواستم ببينم براي اعتبار سنجي ار روي روتر از چه پروتكول و پرتي استفاده ميشه و
تنظيم اون روي روتر به چه صورت هست
(يعني راديو 2 كه ميخواد لوگ بكنه، اول از روي روتر تائيد بشه)
مرسي
-
Second question i didn't understand, can you give more details pls,
regarding the first one, did you configure any defualt gateway on the wireless side? if you want to bridge your networks, you need no defualt gateway, most users use the wireless links to bridge there networks like your case you have two building and you need to interconnect, therefor you need no defualt gateway. try removing the route (if any) and test then, it should work if you ping the remote side.
Security to be considered, best of what know, you need two levels of security (more is better) trying to enable 128 WEP, have strong key in and change it on daily or weekly bases, and try having SSID in strong method as well. then you can also have mac addresses as well, but best of all, if you have routers, then use VLANs and have the wireless connected to a vlan seperately from the Lan, then even if someone is connected to your wireless he cannot see your lan segment (though he can sniff your traffic if not encrypted) if security is a concern for you, then easy way to do it is:
Have in Hand a Win2k/Linux with CIPE or VPN, win vpn is easier so let's see what we do:
Wireless 1 > Windows 1 (ethernet 1) ip 10.1.1.1 (cross cable)
Windows 1 (ethernet 2) > Building 1 10.2.1.1 (hub /switch)
Wireless 2 > Windows 2 (ethernet 1) ip 10.1.1.2 (cross cable)
Windows 2 (ethernet 2) > Building 2 10.2.1.2 (hub /switch)
in your windows (both) make a dialon demand interface in routing and remote access and configure both windows to have VPN interface to communicate together, and route all traffic 10.2.1.0/24 or your IP's to each other. this well give doub le security, 128 from windows, and 128 from wireless.
Good Luck!