Port forwarding between two servers from Same subnet

 Hi,
We have a Cisco ASA 5520 Version 8.4(3). There exists a site to site VPN tunnel between us and a client and the client sends us the data to our local host/server 10.x.x.20 on port 52944. So 10.x.x.20 gets data on port 52944. We want to forward this data to a test server 10.x.x.21( same subnet IP) on port 52945. so basically I want to forward traffic from 10.x.x.20:52944 to 10.x.x.21:52945.
Is this possible. I am a new bee to the networking and still learning. Excuse me if this sounds silly. 
I know we can add one more ACL in the VPN tunnel and add this test server IP in the ACL. but, then I have to ask the clinet to change their ACL too. I dont want to do this. So I want to wrok around it. Any help or suggestions is much appreciated.
Thanks in advance :)
This is my first ticket in the support community.
cs

VMs have nothing to do with it, as long as there's network communication between the servers.
As I said, there must be a service or application listening on that port for it to respond. For example, try this:
C:\> telnet
When the telnet prompt opens, type in:
open mail.messaging.microsoft.com 25
If it works, you should see this:
220 CH1EHSMHS035.bigfish.com Microsoft ESMTP MAIL Service ready at Thu, 7 Feb 2013 00:57:33 +0000
That means that Microsoft's mail servers are LISTENING on port 25 and it responded. And note, telnetting to port 25 is a non-default telnet port, because port 23 is the default telnet port. When you type in a space and then a port number, you're telling
the telnet client to use that port.
That is the SAME THING if some sort of application or service is listening on port 8444 on that other server you're trying to telnet to. If there is no app or service listening, it will just time out.
And no, installing the TELNET service on that sercver will NOT answer to any port other than 23. The telnet service by default, uses TCP 23, unless you specify otherwise.
So once again, what service or app on that server is supposed to be listening on 8444?
Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
This post is provided AS-IS with no warranties or guarantees and confers no rights.

Similar Messages

  • Cannot get Telnet to work between two servers on same subnet

    I need to test if communication is open on port 8444 between two servers.
    I installed telnet client on a Server 2008 R2 server and telnet server on a Server 2008 SP2 server.  I also manually started the Telnet service that was set to disabled on the SP2 server.  I disabled the Windows firewall on both servers.  They
    are both on the same subnet so they don't need to go through any routers and I can ping successfully.
    When I try to telnet to the remote server by typing telnet "ip address" 8444, I get an error that says "Could not open connection to host, on port 8444:  Connection failed.
    I tried other ports like port 80 and got the same error.
    What else is needed to get this to work?

    VMs have nothing to do with it, as long as there's network communication between the servers.
    As I said, there must be a service or application listening on that port for it to respond. For example, try this:
    C:\> telnet
    When the telnet prompt opens, type in:
    open mail.messaging.microsoft.com 25
    If it works, you should see this:
    220 CH1EHSMHS035.bigfish.com Microsoft ESMTP MAIL Service ready at Thu, 7 Feb 2013 00:57:33 +0000
    That means that Microsoft's mail servers are LISTENING on port 25 and it responded. And note, telnetting to port 25 is a non-default telnet port, because port 23 is the default telnet port. When you type in a space and then a port number, you're telling
    the telnet client to use that port.
    That is the SAME THING if some sort of application or service is listening on port 8444 on that other server you're trying to telnet to. If there is no app or service listening, it will just time out.
    And no, installing the TELNET service on that sercver will NOT answer to any port other than 23. The telnet service by default, uses TCP 23, unless you specify otherwise.
    So once again, what service or app on that server is supposed to be listening on 8444?
    Ace Fekay
    MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
    This post is provided AS-IS with no warranties or guarantees and confers no rights.

  • WRT160Nv2-Problem with Single Port forward to multiple servers with same internal port numbers.

    On my network I have 3 systems that I've set up as RDP hosts.  And need to get to all three of them externally.  So I'm trying to do the following single port forwarding.
    RDP 1   Forward 4000 to port 3389 for 192.168.1.11
    RDP 2   Forward 4001 to port 3389 for 192.168.1.12
    RDP 3   Forward 4002 to port 3389 for 192.168.1.14
    When I hit "Save Changes" I get the error "Port range already exists".  So it's good that it won't let me overlap ports generally, but at the same time, I'm trying to send them to different IP address.  There should be no overlap in this case.  Please advise
    I'm trying this on the WRT160Nv2 with firmware 2.0.02, which I had just bought this weekend.

    kevj,
      Thanks for your suggestion.  I have now upgraded the firmware to 2.0.03 build 7.  But I am still seeing the error message
    As I mentioned previously, I'm trying to single port forward to multiple machines in the following way:
    Machine 1:   Forward 4000 to port 3389 for 192.168.1.11
    Machine 2:   Forward 4001 to port 3389 for 192.168.1.12
    Machine 3:   Forward 4002 to port 3389 for 192.168.1.14
    The error appears to be generated by the fact that 3389 is selected for multiple external port numbers, but the same internal port number.  The router I believe isn't taking into account that the similar internal port numbers aren't taking into account the different internal ip address I'm trying to send this to.
    This would be a standard sort of practice for running a live HTTP server on one machine, and a new beta HTTP server behind the router on a secondary machine on the same internal port, but different external port numbers for test purposes from the outside.
    Please advise
    Thank you.

  • How to access a Network Share between two servers in same data centre

    I have two dedicated servers (both Windows 2012 Server) hosted in a data centre somewhere.   I want to share a folder on one server with the other server, but it's obviously not as straight forward as one might think.  My servers are called "Maximus"
    and "Apprentice".
    On Maximus I shared a folder by right clicking on it and choosing "Share with... / Specific People", I then typed in the name of a local user account which also exists on Apprentice with the same name and password.  (so each server has a local
    user account with the same name and password).
    So then on Apprentice, I was hoping I could access the share (while being logged in as this user with whom the folder was shared) by simply typing  "\\ipaddress\sharename" into the address bar in file explorer.  Unfortunately it comes
    back with "Windows can not access [ip address]".
    Now, I do have a website setup on the IP address for Maximus.  This is actually the reason I want to create this share.  I need the second server for load balancing and need to share IIS config as well as the website itself.  (So I will need
    two shares eventually, but for now I'm just trying to get one to work).  I don't know if the fact that the ip address is pointing to the website is causing me problems here or if it's something else.
    Are there any network gurus out there who can tell me what the issue is and how to resolve it?

    I can ping both servers in either direction, but I believe I may have found the problem.  Apparently my host is blocking port 445 which Windows wants to use to connect to the share and they will not unblock it.
    Is there a way to connect to the share through a different port?  
    To my knowledge, you cannot change the port. However, you can try disabling your security software for testing. If this fixes the problem then you need to adjust your security software configuration so that traffic on this port is not blocked or filtered.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • How e-mail is routed between two servers

    Hi ,
    Please anybody tell me how e-mail is routed between two servers , from the software point of view as well as hardware point of view .
    And how Java mail API related to that .
    Thanks,
    Kiz

    If you're looking for a simple answer there isn't one. Here's a place to start.
    http://community.roxen.com/developers/idocs/rfc/rfc974.html

  • What happen when we connect Two PC with IP from Same subnets

    Scenario 2nd : What happen when we connect Two PC with IP from Same subnets. PC1 -192.168.10.1/24 PC2 - 192.168.10.2 on a two different L2 Switch on different vlans which are connected via a LAN cable.
    All ports are access ports
    Interview Question : No More Info.
    Pc1<SwA>------<SwB>PC2
    Q.1 Will they communicate If yes what will be packet/frame flow.
    Q.2 If not where will be the packet/frame drop. ? Why.
    I need step by step if possible plz how the packet moves , vlan taggings n all internal works that happens behind .. plz 
    thnx in advnce ....

    Hi Abhishesk,
    The PCs should communicate each othet.
    Since there is no trunk port involved, there is not tagging involved.
    Since both the PCs are into the same subnet. PC1 will not need default gateway for the communication with PC2. So PC1 will start with sending ARP request for PC2 MAC address.
     Since all the ports in SW1 are in same VLAN, the ARP should reach all ports including the switchport where SW2 is connected to.
    Sw2 has got a complete different access port on ALL the switchports. Sw2 will receive the ARP from Sw1. Remember that there is no tagging for the frame. Hence Sw2 will again send the ARP packet to all the ports which belong to same VLAN wherein the packet is received. ie, Sw2 will send the ARP packet to all the ports in Sw2. PC2 will also get the the ARP.
    The ARP reply will make it way back using the same logic.
    Now both the PCs can start the actual packet exchange.

  • Port Forwarding To Two Macs with Port 22 limitations

    This is another port forwarding/port 22 issue and I've look around and not seen an answer to my specific problem.  I work for a business that has an in-house ad system that runs on a Mac Mini.  I have been accessing that Mac Mini remotely because we set up port forwarding through the Linksys rounter that is at the business using port 22.  This is the only port that works for this connection to the mini and the software.
    We are now adding a second Mac Mini to send the ads to a different set of monitors.  I can't set up port forward to the new mini on the same port so I don't know how to connect to this mini remotely.  Is there a way to get into the first mini through port 22 and then somehow communite to the second one through the first?  Is there another way to do port forwarding...or have the linksys router switch from one mini to the other when a request comes in?  There will only be one remote computer trying to reach either Mac Mini so there will never be simultaneous traffic coming in.  Any help would be appreciated!
    The linksys router is critical to the business becasue a host of other devices are forwarded though it as well.
    Thank you.

    klara wrote:
    Having set up my IP camera with HH4 successfully, I've now got another one and would like to set it up as well. I gave it a unique, static IP address which my router can see fine. When I try to set up port forwarding, I get a message saying:
    "The game or application you’ve selected conflicts with an application (IP Cam 1) you’ve already assigned to another device. Please remove the other application or select the same device."
    I am not being given the option to select the same device.
    I'm now wondering if port forwarding to two identical devices actually works in principle with HH4? Has anyone else done this?
    If in the Home Hub 4 A you go to
    Advanced Settings
    Firewall
    Port Fowarding
    Manage Games and Applications 
    You get the following statement:
    "Each game or application can be assigned to only one device on your home network"
    I would think that the only way round your problem is to have each Camera running a different application or the same application with a different name.  
    Does the remote browser app need to know the application name  or just the device name ?
    If you think about how Port Forwarding needs to function you need a way whereby  the remote user needs to be able to tell the Hub what Camera to talk to.  

  • Port forwarding to two devices with HH4

    Having set up my IP camera with HH4 successfully, I've now got another one and would like to set it up as well. I gave it a unique, static IP address which my router can see fine. When I try to set up port forwarding, I get a message saying:
    "The game or application you’ve selected conflicts with an application (IP Cam 1) you’ve already assigned to another device. Please remove the other application or select the same device."
    I am not being given the option to select the same device.
    I'm now wondering if port forwarding to two identical devices actually works in principle with HH4? Has anyone else done this?
    Solved!
    Go to Solution.

    klara wrote:
    Having set up my IP camera with HH4 successfully, I've now got another one and would like to set it up as well. I gave it a unique, static IP address which my router can see fine. When I try to set up port forwarding, I get a message saying:
    "The game or application you’ve selected conflicts with an application (IP Cam 1) you’ve already assigned to another device. Please remove the other application or select the same device."
    I am not being given the option to select the same device.
    I'm now wondering if port forwarding to two identical devices actually works in principle with HH4? Has anyone else done this?
    If in the Home Hub 4 A you go to
    Advanced Settings
    Firewall
    Port Fowarding
    Manage Games and Applications 
    You get the following statement:
    "Each game or application can be assigned to only one device on your home network"
    I would think that the only way round your problem is to have each Camera running a different application or the same application with a different name.  
    Does the remote browser app need to know the application name  or just the device name ?
    If you think about how Port Forwarding needs to function you need a way whereby  the remote user needs to be able to tell the Hub what Camera to talk to.  

  • Port Forwarding to two computers.

    I want to open ports for an application that I use on two different computers. I have been able to forward the port to on (static) ip and everything works fine. But when I use the application on another computer the port is closed. On my previous router I could say port map to 192.168.0.* and all computers would have the port open, and the app would be fine on either computer. The AEBS does nor recognize the *.
    When I set up the same port forward to two different ip addresses with the same ports open I get an error that the port mapping already exists. Is there a way just to have the port open for any computer on the network?
    How would I allow incoming traffic to a specific port on either computer? Normally the application is only used on one computer at a time.
    Carlos

    Lighthouse?
    http://codelaide.com/blog/products/lighthouse/

  • No ping between host in the same subnet

    Hello,
    I have a question about the ASA and the ARP traffic in IOS 9.1.2 for ASA 5585-X and multicontext. I have discovered a curious behaviour about the traffic ARP in the my CLUSTER of ASA's. When I try to send a ping between host in the  same subnet and these host have as Gateway the interface of the ASA (ASA is his router) don't works, if I mark the check to enable the comunications between host connected to the same interface this cotinues without work. The only way to get my aim (ping between host), I need to implement and Access Rule allowing the traffic IP between my origin network and destination the same network.
    I think that this is some feature of ASA that filter the ARP Request but I don't understand!!! Can I help me, please?
    Thanks.

    Hi,
    Your firewall should not see any traffic between the hosts on the same subnet.
    If it is seeing traffic between the hosts then its likely that Proxy ARP on the ASA is the problem. Proxy ARP is enabled on the ASA by default on all interfaces. This essentially means that when the host connecting to the other host on the same subnet sends an ARP request the ASA might reply to that ARP request instead of the actual destination host. This is why traffic might get forwarded to the ASA instead of the actual host.
    If you want to disable the Proxy ARP on some ASA interface then you can use
    sysopt norpoxyarp
    Where you replace the with the actual name you have given to the interface on the ASA. This disables the Proxy ARP
    - Jouni

  • Stock Transfer Between two plants within same company code

    Hello,
    We are using scenario-'Stock transfer between two plants within same company code. Scenaro is like Plant A is receving plant and Plant B is delivering Plant.
    Plant A release PO for 100 nos to Plant B
    Plant B issues 100 nos (via delivery) to Plant A
    But Plant A receives only 50 nos physically so they do Goods receipt for 50 nos , but document got generated for 100 nos (when plant B issues material).
    Now Plant A do not want to receive remaining 50 nos physically, but wants to reduce material document which got created when goods issue posted by plant B
    Now stock in transis (mb5t) is 50 nos.
    How to reduce this material document. or any another alternative solution for this?
    Thanks,
    Shailesh

    Hi There
    Reversal of partial is not possible ,
    But you can use the Mov Type 557 and 558 to do the adjustments in Stock in transit qty
    Few more details on STO adjustments
    Hi There
    it can be settle in many ways,,,
    1. Receive the goods as 100 and Scrap the 50 nos from the received plant,,- If the receiving plant is responsible
    2.Revert the PGI/Transfer movement(Vl09) and send the 50 nos again from the supplying plant- of the Supplying plant is responsible,
    3.Also we have the movement type 557 and 558 without doing the above two steps you can correct the qty from stock in transit itself,,
    4. also you can check the below similar thread
    STO - material lost during tranfer from plant A to plant B
    5. If above are not ok, then receive the goods as 100, And raise the STO as your plant as supplying plant and receiving plant is (Supplied 50 nos less) plant,, Do the process without sending the material.. in this way that 50 nos can be adjusted,,
    6.Here is some more details
    557 Issue from stock in transit (adjustment posting)
    Only use this movement type (also the reversal movement type) under the following circumstances:
    Using movement type 557, you can correct purchase-order-independent stock in transit if
    - a good receipt cannot be posted to a purchase order without stock in transit, even though there is still stock in transit according to the purchase order history
    - stock in transit still exists, even though there are no open stock transfer orders for the particular material
    This movement type may ONLY be used in the cases mentioned above after careful analysis, to correct stock in transit that has rounding errors.
    This movement type may not be copied.
    Note!
    Before using this movement type, note the following:
    - 392205 Analysis stock in transit / Correction if split valuation
    Possible special stock indicators:
    E, Q
    7. As previous post says if you have the note for this issue you can use that also
    You can use any one of the way to solve the issue, Hope it helps
    Cheers
    Senthil P

  • ACE module client and real servers on same subnet

    I am working on a ACE load balancing implementation,which has following requirement? Can someone let me know if this can be implemented and how?
    Configuration
    test context
    real server vlan 233
    real server subnet - 167.6.233.x
    VIP vlan - 539
    VIP subnet - 167.6.238.128/25
    production context
    real server vlan 232
    real server subnet - 167.6.232.x
    VIP vlan - 538
    VIP subnet - 167.6.238.0/25
    Load balancing is coinfigured in routed mode with ACE as gateway for test and prod real sever subnets (233 and 232 subnets).
    Test and production servers are mixed in these subnets. So we need to configure source NAT to access the test servers in the production subnet (232) and vis versa.
    Here are the scenarios and questions
    1. clients need to access the real servers in prod subnet (232) through VIP configured in test context (vlan 539) - this is done by SNAT at vlan 539 and working.
    2. real servers in test subnet (233) needs to access real servers in same subnet (233) through VIP configured in test context (vlan 539) - this is done by SNAT at vlan 233 and working
    3. real servers in prod subnet (232) need to access the real servers in test subnet (233) through VIP configured in test context (vlan 539) - this appears to be working fine without any additional configuration
    4. real servers in test subnet (233) needs to access another real servers in prod subnet (232) through VIP configured in test context (539)  - this is not working
    5. real servers in test subnet (233) needs to access another real server which is not on one of the subnet (167.6.56.x) behind ace - this is not working.
    Can we implement the scenarios 4 and 5?

    Hi Suresh,
    I see it's a bit complex and we do not have the config at hand.
    However for the scenario 4 if you apply the policy already applied on vlan 539 on the interface vlan233 then the ACE should catch the packets and apply the policy (i.e. forward the packets to the serverfarm you want)
    Alessandro
    If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

  • How to check relation between two tables in same database

    How to check relation between two tables in same database using Oracle SQL developer. Version 2.1.1.64

    Hi,
    Try this,
    SELECT   cons.owner AS child_owner, cons.table_name AS child_table,
             cons.constraint_name constaint_name,
             cons.constraint_type constraint_type, col.owner parent_owner,
             col.table_name parent_table, col.column_name column_name
        FROM dba_cons_columns col, dba_constraints cons
       WHERE cons.r_owner = col.owner
         AND cons.r_constraint_name = col.constraint_name
         AND col.owner = 'MY_USER'
    ORDER BY child_table;Thanks,
    Shankar

  • How to Break the cluster between Two servers

    Hi Experts,
    Since Iu2019m new to BOBJ XI R2.I would like to know how to break the cluster between two servers.
    Description :
    So far we took the copy of QAS Server1 to the new QAS server2 (Through Mirroring Tool ). Now those two servers are cluster together, I can see QAS server1 CMS Name, Cluster Name, cluster member name in QAS Server2 (CMC-> Setting -> Cluster).
    Besides in QAS Server1 CMS Name and Cluster name are pointing to the QAS Server1, except Cluster Member (This is still have two members Server1 and Server2).(CMC-> Setting -> Cluster).
    In QAS Server1 and QAS Server2 (CMS-> Servers), I can able see both server name under Machine Name tab.
    I would like to make those two servers as independent servers. There are two different data source for those two servers. I want to remove the cluster in both servers.
    Right now QAS Server1 is running and QAS Server2 is stopped.
    If i create/modify a group under new Mapped NT Member Groups in QAS server2 ,it is getting reflecting in QAS server 1.
    Could you please tell me the steps to resolve this problem.
    BO Version: BO XI R2
    Regards,
    Sridharan

    Hi,
    Maybe the external CMS is still 'attached' to your SIA node. Please go to the CCM (Central Configuration Manager) and stop the SIA (Server Intelligent Agent). On one of the tabs you can see if there is an external CMS part of your environment. Delete it and restart the SIA. Retry if you can delete the services now from within your CMS. It may well be that you have to stop both environments and delete each others CMS via the CCM to get it working. If you have not changed any permissions for your Administrator account the security model will not be the one causing this.
    Hope this helps...
    Martijn van Foeken
    Focuzz BI Services
    http://www.focuzz.nl
    http://nl.linkedin.com/in/martijnvanfoeken

  • Substring between two words from a clob

    How to extract a string between two words from a clob variable in PL/SQL?

    My requirement is to extract the soap envelope from a clob. In the below code l_response returned from the http request is a clob with the below format. I need to extract all the text that is between '<s:Envelope' and 's:Envelope>'. That means I need to get rid of the first 5 lines and the last line from the l_response. Can you please help me with the logic?
    --uuid:18cb22a2-11cc-43f4-bfea-c213da179d30+id=157
    Content-ID: <http://tempuri.org/0>
    Content-Transfer-Encoding: 8bit
    Content-Type: application/xop+xml;charset=utf-8;type="application/soap+xml"
    <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action s:mustUnderstand="1">http://tempuri.org/IUpdateService/QueryUpdateLogRecordsResponse</a:Action><a:RelatesTo>urn:uuid:413f419c-f489-44ea-bd12-dff6f24a4d71</a:RelatesTo></s:Header><s:Body><QueryUpdateLogRecordsResponse xmlns="http://tempuri.org/"><QueryUpdateLogRecordsResult xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns:x="http://www.w3.org/2001/XMLSchema"><XObject.m_element i:type="x:string" xmlns="">&lt;QueryResult Count="2" NextStart="0" PreviousStart="0" Id="{AD62FD77-AFBE-4362-BBEF-695DA5D92640}"&gt;&lt;Columns Count="33"&gt;&lt;Column AttributeName="Id" 
    … 5 pages later…
    DateModified="2014-07-06 07:34:41.9129549-07:00" /&gt;&lt;/Records&gt;&lt;/QueryResult&gt;</XObject.m_element></QueryUpdateLogRecordsResult></QueryUpdateLogRecordsResponse></s:Body></s:Envelope>
    --uuid:18cb22a2-11cc-43f4-bfea-c213da179d30+id=157—
    DECLARE
       l_request             VARCHAR2 (4000);
       l_http_req            UTL_HTTP.req;
       l_http_resp           UTL_HTTP.resp;
       v_buffer              VARCHAR2 (32767);
       n_next_start_record   NUMBER (20) := 1;
       l_response            CLOB;
    BEGIN
       -- Call webservices. Works fine
       l_request :=
             '--uuid:e4c19840-745d-45b2-90ca-12d71be4cfd9+id=2'
          || CHR (13)
          || CHR (10)
          || 'Content-ID: <http://tempuri.org/0>'
          || CHR (13)
          || CHR (10)
          || 'Content-Transfer-Encoding: 8bit'
          || CHR (13)
          || CHR (10)
          || 'Content-Type: application/xop+xml;charset=utf-8;type="application/soap+xml"'
          || CHR (13)
          || CHR (10)
          || CHR (13)
          || CHR (10)
          || '<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing"><s:Header><a:Action s:mustUnderstand="1">http://tempuri.org/IUpdateService/QueryUpdateLogRecords</a:Action><a:MessageID>urn:uuid:413f419c-f489-44ea-bd12-dff6f24a4d71</a:MessageID><a:ReplyTo><a:Address>http://www.w3.org/2005/08/addressing/anonymous</a:Address></a:ReplyTo><a:To s:mustUnderstand="1">http://dexdb5/DexNETWebServices_4_0_0_4/UpdateService.svc</a:To></s:Header><s:Body><QueryUpdateLogRecords xmlns="http://tempuri.org/"><context xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns:x="http://www.w3.org/2001/XMLSchema"><XObject.m_element i:type="x:string" xmlns="">&lt;OnlineContext SystemId="'
          || g_system_id
          || '" SessionId="'
          || g_session_id
          || '" UserId="'
          || g_user_id
          || '" /&gt;</XObject.m_element></context><xQueryRequest xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns:x="http://www.w3.org/2001/XMLSchema"><XObject.m_element i:type="x:string" xmlns="">&lt;QueryRequest Start="'
          || p_next_start_record
          || '" Count="'
          || g_records_count
          || '" Distinct="0" OrderBy="" Condition="(oUpdateLog.DateCreated &amp;gt;= '''
          || p_last_load_time
          || ''')" ColumnInfo="1" /&gt;</XObject.m_element></xQueryRequest></QueryUpdateLogRecords></s:Body></s:Envelope>'
          || CHR (13)
          || CHR (10)
          || '--uuid:e4c19840-745d-45b2-90ca-12d71be4cfd9+id=2--';
       l_http_req :=
          UTL_HTTP.begin_request (g_query_updatelog_records_url, 'POST', 'HTTP/1.1');
       UTL_HTTP.set_header (l_http_req, 'MIME-Version', '1.0');
       UTL_HTTP.set_header (
          l_http_req,
          'Content-Type',
          'multipart/related; type="application/xop+xml";start="<http://tempuri.org/0>";boundary="uuid:e4c19840-745d-45b2-90ca-12d71be4cfd9+id=2";start-info="application/soap+xml"');
       UTL_HTTP.set_header (
          l_http_req,
          'VsDebuggerCausalityData',
          'uIDPo5F/qXRc4YJImqB6Ard30cQAAAAAAjIXinpIVUulXLJOsSG7yyv7Lf2yHgpHlIxvc6oeqaAACQAA');
       UTL_HTTP.set_header (l_http_req, 'Content-Length', LENGTH (l_request));
       UTL_HTTP.write_text (l_http_req, l_request);
       DBMS_LOB.createtemporary (l_response, FALSE);
       l_http_resp := UTL_HTTP.get_response (l_http_req);
       BEGIN
          LOOP
             UTL_HTTP.read_text (l_http_resp, v_buffer, 32767);
             DBMS_OUTPUT.put_line (v_buffer);
             DBMS_LOB.writeappend (l_response, LENGTH (v_buffer), v_buffer);
          END LOOP;
       EXCEPTION
          WHEN UTL_HTTP.end_of_body
          THEN
             NULL;
       END;
       UTL_HTTP.end_response (l_http_resp);
       l_response := DBMS_XMLGEN.CONVERT (xmldata => l_response, flag => 1);
       -- Extract the soap envelope from clob. Issue because of the 32767 characters limitation
       SELECT    DBMS_LOB.SUBSTR (                  -- Problem here
                    l_response,
                      INSTR (l_response, 's:Envelope>', -1)
                    - INSTR (l_response, '<s:Envelope'),
                    INSTR (l_response, '<s:Envelope'))
              || 's:Envelope>'
         INTO l_response
         FROM DUAL;
          -- Parse the xml. Works fine once the above issue is fixed
          SELECT xt.nextstart
            INTO n_next_start_record
            FROM XMLTABLE (
                    xmlnamespaces ('http://www.w3.org/2003/05/soap-envelope' AS "s",
                                   'http://tempuri.org/' AS "data"),
                    's:Envelope/s:Body/data:QueryUpdateLogRecordsResponse/data:QueryUpdateLogRecordsResult/XObject.m_element/QueryResult'
                    PASSING xmltype (l_response)
                    COLUMNS nextstart NUMBER (20) PATH '@NextStart') xt;
       DBMS_OUTPUT.put_line ('NextStart ' || n_next_start_record);
    END;

Maybe you are looking for