Can't connect to remote mini
I have a headless remote Mini in which I was hoping to reduce bandwidth consumption by following the knowledge base note HT3789 (http://support.apple.com/kb/HT3789), "Mac OS X v10.6: Disabling mDNSResponder will disable DNS" which is a method to stop Bonjour service advertisement.
Now I can't connect to the Mini via SSH, screen sharing, sftp, smtp or anything else.
Any thoughts?
I took it to the Genius Bar and after checking/confirming that the hard drive was ok they reinstalled the OS. All seems ok now. I was then able to shut off Bonjour advertising without creating any problems.
I don't know what caused the Mini to become unbootable but I suspect when I rebooted it after the first attempt at shutting off advertising a critical boot file got damaged.
Unfortunately, after all that hassle, I still have the original high-traffic problem that seems to be related to port 5353.
Message was edited by: msbohn
Similar Messages
-
Can I connect my iPad mini to a data projector using a lightning to 30-pin adapter connected to a 30-pin to VGA connector? Or will this only work with a lightning to VGA connector?
The lightning to 30 pin adapter does not support video as per the item description in the Apple online store:
http://store.apple.com/us/product/MD823ZM/A/lightning-to-30-pin-adapter
This adapter lets you connect devices with a Lightning connector to many of your 30-pin accessories.* Supports analog audio output, USB audio, as well as syncing and charging. Video output not supported.
You will need to the Lightning to VGA adapter directly
http://store.apple.com/us/product/MD825ZM/A/lightning-to-vga-adapter?fnode=3a
Or the Lightning Digital AV Adapter
http://store.apple.com/us/product/MD826ZM/A/lightning-digital-av-adapter
If the projector supports HDMI input. -
Can I connect a MKP min AKAi with my Ipad mini retina ?
Can I connect a MKP min AKAi with my Ipad mini retina ?
Are you using a powered USB hub as recommended by the unit's manufacturers?
http://www.noterepeat.com/products/akai-professional/mpd-and-mpk-series/39-conne cting-usb-audio-interfaces-midi-controllers-and-keyboards-to-the-ipad -
Can I connect my iPad Mini to my computer to tap into my internet stick (T-Mobile) devise for internet?
That depends entirely on your computer. Some computers have the ability to share out their internet connection wirelessly to other devices
Consult your computers Manual or Help file for details.
The iPad can only connect to the internet wirelessly. So if you can get your computer to share its connection wirelessly you should be able to connect the iPad. -
Can't connect to SL mini after laptop update to Lion
Situation:
- Mac Mini on Snow Leopard 10.6.8 (mini-old)
- Mac Mini on Lion 10.7.4 (mini-new)
- Macbook Pro on Lion 10.7.4, update from Snow Leopard 10.6.8 since yesterday
I used to be able to connect file sharing and screen sharing from the laptop to both mini's. Since the update to Lion on my laptop, I can't connect to mini-old from the laptop.
- file sharing from laptop to mini-old before the lion update -> worked
- screen sharing from laptop to mini-old before the lion update -> worked
- file sharing from mini-new to mini-old -> works
- screen sharing from mini-new to mini-old -> works
- file sharing from laptop to mini-new -> works
- screen sharing from laptop to mini-new -> works
- file sharing from laptop to mini-old after lion update, with guest -> works
- file sharing from laptop to mini-old after lion update, with registered user -> endless pinwheel, no error in console
- screen sharing from laptop to mini-old after lion update -> endless pinwheel, no error in console
- ssh user@mini-old from laptop to mini-old after lion update -> works
So I can safely assume the settings on mini-old are ok (haven't been changed in many months).
I've tried deleting the caches with OnyX on the laptop, but that didn't help.Update: 'several' minutes = 10
Same goes for the file sharing.
I've tried the screen sharing a 2nd time to see if it speeds up, but it doesn't. :-( Don't know yet what's going on, because the connection from the mini-new is instantly.
FYI: all three are on the same local network, so no remote 'across the internet' issues.
Anybody? -
After iTunes update, can't connect to remote speakers via Airport Express
I updated to iTunes 10.1.2.17 the other day, and ever since then, I can't connect to my stereo via my Airport Express. I get this message: "An error occurred while trying to connect to the remote speaker 'Airport Express'. The network connection failed."
My Airport Express firmware is up to date and I have not changed any settings since the iTunes update.
Anyone else have/had this problem? Any ideas?I run Vista and I had the same problem after updating to the latest version of iTunes: Apple TV would indicate "Loading Library" for ever and nothing would happen. This had never happened before.
I tried different tricks like turning on/off home sharing on both iTunes and Apple TV (didn't work), unplugged/plugged Apple TV (didn't work), restore Apple TV (didn't work).
Eventually the solution was actually very simple: go to Firewall settings and make an exception for iTunes. I don't know why that was not necessary before the update, but it made the trick. -
Can't connect to mac mini leopard shares or screen share
i'm having problem connecting to a mac mini that is on my network (running leopard 10.5.8) and is wired to the network via an AEBS.
previously when my MBP was also running 10.5.8 i had no problems using screen sharing and connecting to 2 shares on it using "afp://10.x.x.x/sharename", or browsing to them via finder.
i did a clean install of SL on the MBP and now even though the mac mini shows up in finder, when i select it it just sits there trying to connect and eventually the beach ball appears and fails saying it can't connect to it.
when i try to connect to the shares using command-K, again it won't connect to the shares.
if i try to connect to them using the samba share that is also configured on the mac min then is does connect to them.
i can ping the mac mini using network utility.
any ideas what the problem is? everything worked fine before i wiped and installed SL.
!http://www.simon-gray.co.uk/images/network.jpg!HI,
Make sure screen sharing is turned on and you have set up sharing permissions on the computer whose screen you want to share.
To set up screen sharing:
Choose Apple menu > System Preferences and click Sharing.
Select the Screen Sharing checkbox.
To specify who can share your screen, select one of the following:
All users: Select this if you want to allow any user with a user account on your computer to share your screen.
Only these users: Select this if you want to restrict screen sharing to specific users.
Click Add + at the bottom of the Users list and select a user from Users & Groups (accounts you have set up in Accounts preferences), Network Users (users on your network), or your Address Book. Or click New Person and enter a name and password to create a sharing account. Then select that user from the list and click Select.
Click Computer Settings and set the following options:
Anyone may request permission to control screen: Select this to allow anyone on your network to request to share your screen.
VNC viewers may control screen with password: Select this and enter a password that VNC viewer applications can enter in order to control your screen.
It’s recommended that you not set a password if you only share this computer’s screen using the built-in screen sharing viewer in Mac OS X.
Carolyn -
How can I connect the remote server which is installed with oracle
Now my computer is in my home,in my computer there is installed with the oracle 9i client,the server is also installed with oracle 9i,which is in my company.Now I want to use sql*plus to connect the database of the server through the internet work.I have created one listener service name in my home computer,but can't test successfully and the sql*plus can't connect the database.Who can tell me how to do it?Thank you!
Technical questions need to be addressed to one of the technical forums-- Products | Database | Database - General in this case.
Unless you are VPN-ing in or the DBA's at your company have configured Oracle Connection Manager to allow you to connect through the firewall to the database, however, I doubt this will work. If they have configured Connection Manager, you'll have to ask them to provide you with connection information. 99.9% of the time, you do not want people to access a database via the internet.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC -
Osx 10.4.11 can't connect with ipad mini
i'm using old Mac os 10.4.11, is it possible to connect with ipad mini ... which version of the itunes requested at least .... seems i cannot update itunes to the latest version ... please help if anyyone get any idea ..thanks
As stated in the iPad mini system requirements (on the box and Apple website), you need a Mac running Mac OS X 10.6.8 or later to use the iPad mini with it:
http://www.apple.com/ipad-mini/specs/
Time to buy a new Mac. -
ITunes Error -3256 can't connect to remote speakers
iTunes is behaving erratically. I get a -3256 error when the app tries to connect to remote speakers via an AirPort Express.
Restarting iTunes allows me to connect. iTunes then works until my computer goes to sleep. When I wake the computer it hangs with the -3256 error again. Restart iTunes and it negotiates the network connection perfectly.
I ran AirTunes with no problem for years until version 8 of iTunes was released.
I'm running iTunes 8.0.2I'm having the same problem with my macbook pro (OS 10.5.6, iTunes 8.0.2) but NOT with my imac flatpanel 15". I get "An error occurred while connecting to the remote speaker "Stereo". An unknown error occurred (-3256)." Restarting iTunes does NOT work for me.
My airport is administered by the older imac flatpanel. My girlfriend's computer - an older macbook pro - does NOT have this problem. Has anyone gotten an answer yet on this?
Is this a known bug since so many of us seem to be seeing it? -
ITunes can't connect to remote speakers PLUS Airport Express p/word problem
I am running iTunes 7.4.1 and have previously been able to play iTunes through remote speakers via an Airport Express . After upgrading iTunes some time ago, I am unable to connect to the AE any more. The AE shows as an option in my iTunes window, but when I select it from the drop down option box bottom right, it just doesn't choose it.
I have read other discussions pertaining to this, and have followed all of those solutions, but to no avail.
I have done a hard reset on the AE restoring it's factory settings thinking I should just start again, and it has been renamed "Base Station Oa369f" so I know this has worked, but when I try to reconfigure it through Airport Utility, it asks for a password. I tried it's old password, and also tried the generic one "public" as stated in the AE setup guide, but it rejects both.
I am keen to figure this out as I'm about to buy a new printer and another AE so I can print wirelessly, but don't want to have the same issues if it's an AE bug that can't be fixed, I would be left with no printer!
I know this is two quite separate problems, but if anyone has any ideas for either I would be really grateful.
Thanks very muchI have exactly the same problem which has been driving me nuts for the last couple of days. However I am able to access the dropdown list of speakers. I have mine set to multiple speakers, and now it WILL play through my Airport Express again, but only when playing through the internal speakers at the same time. When I try to play solely through the Airport Express it just hangs.
Come on Apple, you need to be regression testing your upgrades far better than this, for something so basic to go wrong. -
Can't connect to Mac Mini (ML Server)
I have a Mid-2009 Mac mini that's running the latest Mac OS X 10.8 Server. It's connected to my TV via HDMI.
For a long time, I had no issues connecting to it via Screen Sharing, SSH or AFP but recently all three will mysteriously fail. I know the machine is working because I stream iTunes content to my Apple TV and it's hosting a couple of web sites that it serves up just fine. The only attached peripheral is a Drobo S (2nd Gen) attached via FW 800. Drobo Dashboard and the firmware are completely up-to-date.
When it stops working, I have no alternative but to A) wait until I get home and B) force the machine off and reboot it. After a reboot, Screen Sharing, AFP and SSH all work fine for a while. It seems to conveniently fail when I'm away and need to get to it.
Note that it fails on all three protocols from outside AND inside. So this isn't a network routing or port forwarding issue. I'm a Mac IT professional with 15 years under my belt, so I think I know what I'm doing in that regard. Like I said it's worked fine for years and it's only been lately that these failures have been happening.
I can't seem to identify any rhyme or reason for this. It's a fairly clean installation with almost no 3rd party software installed on it.
Any help or suggestions would be greatly appreciated."Screen Sharing is currently being controlled by the Remote Management Service"
I've been fidgeting between the Server.app server Settings tab and the Screen Sharing checkbox in System Preferences Sharing pane all day.
I had tried "Share Screen" via Finder. After I tried "Share Screen" via Server.app from my client computer I noticed the above warning message when Screen Sharing in the server's System Preference Sharing pane was highlighted. I'm not sure which is cause or effect.
Everything is checked on the server "Settings" tab in Server.app on the server. Only "FIle Sharing," "Remote Login" and "Remote Management" are checked on the Sharing pane in System Preferences on the server.
Everything is checked on the server "Settings" tab in Server.app on the client. In this case, "Allow remote administration using Server" is checked and grayed out. "Screen Sharing" is checked on the Sharing pane in System Preferences on the client. (It may not have anything to do with a successful screen share connection, but it is on.)
Everything is now working better than expected. Thanks to you both for your help! -
Can't Connect to Mac Mini Server 10.8
I want to use Screen Sharing to run a headless Mac Mini Server (late 2012) running Server.app under Mountain Lion.
From my Mac Mini I can connect to my iMac on the same LAN and use Screen Sharing, but I can't do the opposite, which is what I need to do. This is very frustrating because the support for this key feature is just plain awful.
Yes, screen sharing is checked under File Sharing preferences on the Mac Mini Server. And yes, both the display and the computer are set to never sleep on the Mac Mini Server.
What must I do to connect to my Mac Mini Server from my iMac so I can run the Mac Mini Server headless?
Thanks in advance for your time and consideration."Screen Sharing is currently being controlled by the Remote Management Service"
I've been fidgeting between the Server.app server Settings tab and the Screen Sharing checkbox in System Preferences Sharing pane all day.
I had tried "Share Screen" via Finder. After I tried "Share Screen" via Server.app from my client computer I noticed the above warning message when Screen Sharing in the server's System Preference Sharing pane was highlighted. I'm not sure which is cause or effect.
Everything is checked on the server "Settings" tab in Server.app on the server. Only "FIle Sharing," "Remote Login" and "Remote Management" are checked on the Sharing pane in System Preferences on the server.
Everything is checked on the server "Settings" tab in Server.app on the client. In this case, "Allow remote administration using Server" is checked and grayed out. "Screen Sharing" is checked on the Sharing pane in System Preferences on the client. (It may not have anything to do with a successful screen share connection, but it is on.)
Everything is now working better than expected. Thanks to you both for your help! -
Can't Connect with Remote Desktop, It worked before!
Hello. We currently bought alot of seats of Remote Desktop to connect to computer not located in the office. During the time spent here at this office, all the remote desktop connections worked fine. Once the machines were moved up to the new business location, we tried to connect to the machine. We changed the IP's to the ISP new ip, which the server then port forwarded the correct ports to the specific ip for those machines.
We open up Remote Desktop on the computer, with the scanner, and type in the ip address where the computers are going to be stored. Once the ip is in, we can see the computers have been located on the scanner. When then select a computer we want to observe/control/curtain and typied in the username and password, which are all correct. It then says " connecting to "theipaddress" for about 1 min, then displays an error message saying "Connection failed to ipaddress".
something that ive noticed, is that in the scanner window the icon is grey, instead of its little blue monitor and only displays the ip address in the name field, but not the computer name like it did when we ran it thru the lan. question is what are we doing wrong.
can someone please tell us the correct ports to open on what side
what are the ports on the server side that need to be opened on the router/server?
are there any ports on the client side that need to be opened on the router/server?
please help me.both udp and tcp, but the problem you're having may be the same one that stumped me for a couple of hours.
You can't communicate with a machine that has gone into deep sleep mode. If the screensaver is running, you're okay ... but once that cuts out and the screen goes blank, it's out of touch.
In ARD 3 you can tell whether or not it's available by the colour of the little 'monitor' icon to the left of the the listing in the Scanner or All Computers windows.
Grant -
I can Ping FW inside interface but can not connect to remote resources
dear all
i configer my asa 5520 through ASDM to enable VPN Connection , i follow the cisco steps and it works fine and the anyconnect version 3.1 in Windows 8 - one day troubleshoot for this point only - can connect and have an IP address from the range , but i have something wrong in NAT may be because all guides talking about old ASDM ( NAT Exempt) but i am confeused to apply it on the new ASDM.
i can ping the inside interface from my labtop which using anyconnect , but i can not access anything else inside my network
Please anyone has a solution , please describe it using ASDM , thanks for help
This is my configuration
interface GigabitEthernet0/1
description
nameif SRV_ZONE
security-level 50
ip address 192.168.1.1 255.255.255.0
interface GigabitEthernet0/2
description
nameif TRUST_ZONE
security-level 100
ip address 172.17.200.1 255.255.255.0
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
interface Management0/0
nameif MGMT
security-level 0
ip address 10.10.10.1 255.255.255.0
dns server-group DefaultDNS
domain-name xxx.xxx.xxx
object network obj-192.168.1.11
host 192.168.1.11
object network obj-xxx.xxx.xxx.xxx
host xxx.xxx.xxx.xxx
object service obj-tcp-source-eq-25
service tcp source eq smtp
object network obj-192.168.1.12
host 192.168.1.12
object network obj-xxx.xxx.xxx.xxx
host xxx.xxx.xxx.xxx
object network obj-192.168.1.0
subnet 192.168.1.0 255.255.255.0
object service obj-tcp-eq-25
service tcp destination eq smtp
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network obj-0.0.0.0
host 0.0.0.0
object network obj_any-01
subnet 0.0.0.0 0.0.0.0
object network obj-172.17.8.8
host 172.17.8.8
object network obj-172.17.0.0
subnet 172.17.0.0 255.255.0.0
object network obj_any-02
subnet 0.0.0.0 0.0.0.0
object network obj_any-03
subnet 0.0.0.0 0.0.0.0
object network obj_any-04
subnet 0.0.0.0 0.0.0.0
object network obj_any-05
subnet 0.0.0.0 0.0.0.0
object network obj_any-06
subnet 0.0.0.0 0.0.0.0
object network obj.172.17.8.115
host 172.17.8.115
object network obj.xxx.xxx.xxx.xxx
host xxx.xxx.xxx.xxx
object service http
service tcp source eq www destination eq www
object network obj.xxx.xxx.xxx.xxx
host xxx.xxx.xxx.xxx
object service https
service tcp source eq https destination eq https
object service newservice
service tcp source eq pop3 destination eq pop3
object network mail
host 172.17.8.8
description mail
object network 192.168.1.11
host 192.168.1.11
description smtp
object service smtpnew
service tcp source eq 587 destination eq 587
object network VPN_RANGE
description VPN ACCESS RANGE
object network VPN_PoOL
subnet 172.17.16.0 255.255.255.0
description vpn
object-group network DM_INLINE_NETWORK_1
network-object host 192.168.1.11
network-object host 192.168.1.12
object-group network Eighth_Floor
network-object 172.17.8.0 255.255.255.0
object-group service WEB_SERVICES
service-object tcp destination eq www
object-group network ENT_SERVERS
network-object host 192.168.1.11
network-object host 192.168.1.1
object-group network DM_INLINE_NETWORK_2
network-object 172.17.200.0 255.255.255.0
network-object 172.17.8.0 255.255.255.0
object-group service DM_INLINE_TCP_2 tcp
port-object eq www
port-object eq https
port-object eq smtp
object-group service web tcp
port-object eq www
port-object eq xxx
port-object eq ftp
port-object eq xxx
port-object eq xxx
object-group service xxx_Web_and_Email
service-object object http
service-object tcp destination eq pop3
service-object tcp destination eq smtp
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
object-group protocol DM_INLINE_PROTOCOL_1
protocol-object udp
protocol-object tcp
object-group protocol DM_INLINE_PROTOCOL_2
protocol-object ip
object-group protocol DM_INLINE_PROTOCOL_3
protocol-object ip
access-list DMZ_access_in extended permit ip 192.168.1.0 255.255.255.0 172.17.0.0 255.255.0.0
access-list DMZ_access_in extended permit ip 192.168.1.0 255.255.255.0 any
access-list justice_splitTunnelAcl standard permit 10.100.100.0 255.255.255.0
access-list xxx-VPN_splitTunnelAcl remark vpn
access-list xxx-VPN_splitTunnelAcl standard permit 172.17.16.0 255.255.255.0
access-list xxx-VPN_splitTunnelAcl standard permit any
access-list cap extended permit tcp any host xxx.xxx.xxx.xxx eq smtp log
access-list cap1 extended permit tcp host 192.168.1.11 any eq smtp
access-list SRV_ZONE_nat_outbound extended permit tcp 192.168.1.0 255.255.255.0 any eq smtp
access-list SRV_ZONE_nat_outbound extended permit ip host 192.168.1.11 any
access-list TRUST_ZONE_access_in extended permit ip host 172.17.88.108 any
access-list TRUST_ZONE_access_in extended permit object-group DM_INLINE_PROTOCOL_2 10.10.3.0 255.255.255.0 any
access-list TRUST_ZONE_access_in extended permit object-group DM_INLINE_PROTOCOL_3 10.10.50.0 255.255.255.0 any
access-list TRUST_ZONE_access_in extended permit ip 172.17.8.0 255.255.255.0 any
access-list TRUST_ZONE_access_in extended permit ip 172.17.200.0 255.255.255.0 any
access-list TRUST_ZONE_access_in extended permit ip 172.17.0.0 255.255.0.0 host 192.168.1.12
access-list TRUST_ZONE_cryptomap extended permit ip xxx.xxx.xxx.xxx 255.255.255.248 any
access-list outside_access_in extended permit tcp any host 192.168.1.11 eq smtp
access-list outside_access_in extended permit tcp any host 172.17.8.8 eq www
access-list outside_access_in extended permit tcp any host 192.168.1.12 object-group web
access-list outside_access_in extended permit tcp any host 172.17.8.8 eq pop3
access-list outside_access_in extended permit ip 172.17.16.0 255.255.255.0 any inactive
access-list vpn remark vpn
access-list vpn standard permit 172.17.16.0 255.255.255.0
pager lines 24
logging enable
logging trap informational
logging asdm informational
logging host TRUST_ZONE 172.17.8.100
mtu INT_ZONE 1500
mtu SRV_ZONE 1500
mtu TRUST_ZONE 1500
mtu MGMT 1500
ip local pool VPN_POOL 172.17.16.100-172.17.16.254 mask 255.255.255.0
ip verify reverse-path interface INT_ZONE
ip verify reverse-path interface SRV_ZONE
no failover
icmp unreachable rate-limit 1 burst-size 1
icmp permit any SRV_ZONE
icmp permit any TRUST_ZONE
asdm image disk0:/asdm-635.bin
no asdm history enable
arp timeout 14400
nat (SRV_ZONE,INT_ZONE) source static obj-192.168.1.11 obj-xxx.xxx.xxx.xxx service any obj-tcp-source-eq-25
nat (SRV_ZONE,INT_ZONE) source static obj-192.168.1.12 obj-xxx.xxx.xxx.xxx
nat (SRV_ZONE,INT_ZONE) source dynamic obj-192.168.1.0 interface service obj-tcp-eq-25 obj-tcp-eq-25
nat (INT_ZONE,SRV_ZONE) source static any any destination static 192.168.1.11 obj-172.17.8.8 service obj-tcp-source-eq-25 obj-tcp-source-eq-25
nat (TRUST_ZONE,INT_ZONE) source static VPN_PoOL VPN_PoOL destination static VPN_PoOL VPN_PoOL
object network obj_any
nat (SRV_ZONE,INT_ZONE) dynamic obj-0.0.0.0
object network obj_any-01
nat (SRV_ZONE,MGMT) dynamic obj-0.0.0.0
object network obj-172.17.8.8
nat (TRUST_ZONE,INT_ZONE) static xxx.xxx.xxx.xxx service tcp www www
object network obj-172.17.0.0
nat (TRUST_ZONE,SRV_ZONE) static 172.17.0.0
object network obj_any-02
nat (TRUST_ZONE,INT_ZONE) dynamic interface
object network obj_any-03
nat (TRUST_ZONE,SRV_ZONE) dynamic interface
object network obj_any-04
nat (TRUST_ZONE,INT_ZONE) dynamic obj-0.0.0.0
object network obj_any-05
nat (TRUST_ZONE,SRV_ZONE) dynamic obj-0.0.0.0
object network obj_any-06
nat (TRUST_ZONE,MGMT) dynamic obj-0.0.0.0
object network obj.172.17.8.115
nat (TRUST_ZONE,INT_ZONE) static obj.xxx.xxx.xxx.xxx service tcp www www
object network mail
nat (TRUST_ZONE,INT_ZONE) static obj-xxx.xxx.xxx.xxx service tcp pop3 pop3
nat (TRUST_ZONE,INT_ZONE) after-auto source static obj-172.17.8.8 obj-xxx.xxx.xxx.xxx service https https
access-group outside_access_in in interface INT_ZONE
access-group DMZ_access_in in interface SRV_ZONE
access-group TRUST_ZONE_access_in in interface TRUST_ZONE
route INT_ZONE 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx 1
route TRUST_ZONE 10.10.0.0 255.255.0.0 172.17.200.254 1
route TRUST_ZONE 10.11.0.0 255.255.0.0 172.17.200.254 1
route TRUST_ZONE 10.12.0.0 255.255.0.0 172.17.200.254 1
route TRUST_ZONE 10.13.0.0 255.255.0.0 172.17.200.254 1
route TRUST_ZONE 172.17.0.0 255.255.0.0 172.17.200.254 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication enable console LOCAL
aaa authentication http console LOCAL
aaa authentication ssh console LOCAL
aaa authentication serial console LOCAL
http server enable
http 172.17.8.0 255.255.255.0 TRUST_ZONE
http 172.17.8.155 255.255.255.255 TRUST_ZONE
http 172.17.8.45 255.255.255.255 TRUST_ZONE
http 10.10.10.2 255.255.255.255 MGMT
http 192.168.1.12 255.255.255.255 SRV_ZONE
http 0.0.0.0 0.0.0.0 INT_ZONE
http 172.17.200.0 255.255.255.0 TRUST_ZONE
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto dynamic-map pol 1 match address TRUST_ZONE_cryptomap
crypto dynamic-map pol 1 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto map INT_ZONE_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map TRUST_ZONE_map0 1 ipsec-isakmp dynamic pol
crypto map TRUST_ZONE_map0 interface TRUST_ZONE
crypto map INT_ZONE_map0 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map INT_ZONE_map0 interface INT_ZONE
crypto ca trustpoint ASDM_TrustPoint0
enrollment self
fqdn SEC-xxx-FW1
subject-name CN=SEC-xxx-FW1
no client-types
proxy-ldc-issuer
crl configure
crypto ca trustpoint ASDM_TrustPoint1
enrollment self
subject-name CN=SEC-xxx-FW1
keypair sslvpnkeypair
crl configure
crypto ca certificate chain ASDM_TrustPoint0
certificate 31
57f4e52e 6b851966 77515d62 c209a0df 1c32ce94 bb90cbce 497cfd04 6745ea85
efb75f85 2ae1ad35 344d94ab 915e01ab d3292626 ac697a52 b4ed6632 d3ed2332 ae
quit
crypto ca certificate chain ASDM_TrustPoint1
certificate e6054352
c64f3661 30f14c3d 06b5f039 9f14560d 3b154fd1 42782268 7531689e 8e547d91
85e88415 e326f653 74733a6c a3f5c935 f7e83f56 f6
quit
crypto isakmp enable INT_ZONE
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 65535
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 INT_ZONE
ssh 172.17.8.0 255.255.255.0 TRUST_ZONE
ssh 10.10.10.2 255.255.255.255 MGMT
ssh timeout 5
console timeout 0
management-access TRUST_ZONE
vpn load-balancing
interface lbpublic INT_ZONE
interface lbprivate INT_ZONE
priority-queue INT_ZONE
tx-ring-limit 256
threat-detection basic-threat
threat-detection scanning-threat
threat-detection statistics host number-of-rate 3
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ssl trust-point ASDM_TrustPoint1 INT_ZONE
webvpn
enable INT_ZONE
svc image disk0:/anyconnect-win-2.1.0148-k9.pkg 1
svc enable
tunnel-group-list enable
group-policy xxx-VPN internal
group-policy xxx-VPN attributes
dns-server value xx.xx.xx.xx xx.xx.xx.xx
vpn-tunnel-protocol IPSec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value xxx-VPN_splitTunnelAcl
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol webvpn
group-policy GPNEW internal
group-policy GPNEW attributes
dns-server value 172.17.8.41
vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
default-domain value xxx.xxx.xxx
address-pools value VPN_POOL
username VPNAM password xxx encrypted
username VPNAM attributes
service-type remote-access
vpn-group-policy xxx-VPN
tunnel-group xxx-VPN type remote-access
tunnel-group xxx-VPN general-attributes
dhcp-server 172.17.8.41
tunnel-group xxx-VPN ipsec-attributes
pre-shared-key *****
tunnel-group pol type ipsec-l2l
tunnel-group pol ipsec-attributes
pre-shared-key *****
trust-point ASDM_TrustPoint0
tunnel-group SSLClientProfile type remote-access
tunnel-group SSLClientProfile general-attributes
address-pool VPN_POOL
default-group-policy GPNEW
tunnel-group SSLClientProfile webvpn-attributes
group-alias SSLVPNClient enable
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect ip-options
inspect pptp
service-policy global_policy global
prompt hostname context
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:78a941e3f509dec8f3570c60061eedaa
: endthanks god
i solve the problem
the problem is in NAT
i creat an object with the ip address host from VPN pool and name it vpn
then i do the nat from inside to that host as the following picture...
trust zone is the inside zone
vpn is the outside vpn host...
thanks and hope it helps anyone else...
Maybe you are looking for
-
New update not working in dubai. Using hotspot shield it is not working. Now skype is worst. Pls help.
-
How to get Auction No. from RFX in SAP SRM strategic sourcing
Hello experts, We are using SAP SRM7.0 strategic sourcing. We are converting the RFx to Auction. All the thing we needed is if there is any function module to get the auction number with the RFx number. I've tried with a few but couldn't found. Thank
-
On a PC I would just open Roxio and copy disc....so simple.
-
Microsoft Bluetooth Notebook Mouse 5000
I have a Toshiba Satellite M60, supposedly Bluetooth capable and have just purchased this mouse and have followed the mouse's instructions but it will not communicate with my laptop. Bluetooth software on the laptop says that Bluetooth is not ready.
-
Oracle apps performance tunning
Hey could u any one tell me where i will get the Oracle Apps Performance Tunning on Module wise like OM/AP/AR. how to verify that my oracle Apps[11.5.10] instance running fine on linux based !! i need check list Oracle Apps Performance !!