Use VPN connection as a listen network interface in Web Application proxy

I have a test environment: domain in hyper-v with Sharepoint and Office Web Apps servers (all under Windows 2012 - Windows 2012 R2).
Because my home ISP does not permit some inbound ports (80,443) in a gate machine (under Windows 2012 R2) I create a vpn connection (by "setup a new connection or network") to my outside vpn server. On this vpn server the ports forwarding is configured
and work fine (f.e. default IIS site is visible).
I try to public my Sharepoint 2013 Foundation in Internet over this vpn connection and faced with the problem - WAPx (Web application proxy) does not bind to this vpn connection, only to traditional network interfaces.
The question is how to make listening WAPx the VPN interface?

Hi,
Thank you for posting in Windows Server Forum.
Please check beneath thread and article might helpful in your case.
Configure a reverse proxy device for SharePoint Server 2013 hybrid
http://technet.microsoft.com/en-us/library/dn607304(v=office.15).aspx
Forcing VPN users through a proxy
http://social.technet.microsoft.com/Forums/en-US/5a6a502d-4583-4c51-8486-3af982ba92da/forcing-vpn-users-through-a-proxy?forum=winserverNIS
What’s New in 2012 R2: People-centric IT in Action - End-to-end Scenarios Across Products
http://blogs.technet.com/b/in_the_cloud/archive/2013/07/17/people-centric-it-in-action-end-to-end-scenarios-across-products.aspx
Hope it helps!
Thanks,
Dharmesh

Similar Messages

3 WRV200 routers to create a 3 node WAN using VPN connections

I have looked through some of the other posts to see if this question had been asked before, and I didnt see anything.
I have 3 WRV200 that I want to install in 3 cities.
I want each router to have its own Internet connection from the local ISP.
I then want each router to connect to the other 2 routers and create a 3 node WAN using VPN connections.
This is what I think I need. I am hoping somone will correct me.
WRV200-CA
192.168.1.0 - CA Local LAN
192.168.1.1 Default Gateway
255.255.255.0 Subnet Mask
192.168.1.10 Static Assigned for Printer
192.168.1.11 Static Assigned for Printer
192.168.1.12 Static Assigned for Printer
192.168.1.13 Static Assigned for Printer
192.168.1.101 - 120 DHCP addresses for workstations
WRV200-NYC
192.168.2.0 - NYC Local LAN
192.168.2.1 Default Gateway
255.255.255.0 Subnet Mask
192.168.2.10 Static Assigned for Printer
192.168.2.11 Static Assigned for Printer
192.168.2.12 Static Assigned for Printer
192.168.2.13 Static Assigned for Printer
192.168.2.101 - 120 DHCP addresses for workstations
WRV200-LI
192.168.3.0 - LI Local LAN
192.168.3.1 Default Gateway
255.255.255.0 Subnet Mask
192.168.3.10 Static Assigned for Printer
192.168.3.11 Static Assigned for Printer
192.168.3.12 Static Assigned for Printer
192.168.3.13 Static Assigned for Printer
192.168.3.101 - 120 DHCP addresses for workstations
I know how to get the public IP address that is assigned to the broadband modem by each of the ISPs.
Do I have to connect to each of the other public IP addresses to create this 3 location WAN?
I dont think this is the best way since the IP address might change since it is assigned by the ISP via DHCP.
Should I create a 192.168.4.0 network with a 255.255.255.248 subnet mask. and give each router its own address within the .4 network? Im not sure where to do this if its different from the local LAN IP addresses listed above.
Do I have to have 2 cable modems at each location in order to create a point to point connection with the other 2 routers?
It seems like I should be able to send 2 seperate VPN signals over the same cable modem in order to connect with the other 2 routers.
If 192.168.x.x is non routable, how is a PC at 192.168.1.101 going to route through to the local cable modem and connect to the cable modem that is in NYC, and then print to the printer located at 192.168.2.11
Ultimately I want to:
1. print to any printer at any of the 3 locations.
2. Remote Desktop into any workstation at any of the 3 locations.
3. Connect to the Internet via a public WiFi hotspot and use my laptop that would have some type of software that would allow me to connect to any of the 3 LANs.
Thank you in advance.

Appendix D of the RVS4000 admin guide has an example of configuring a site-to-site VPN tunnel between 2 routers that have dynamic WAN IP addresses. For your scenario, you can configure a site-to-site tunnel between each pair of WRV200 routers.
http://www.cisco.com/en/US/docs/routers/csbr/rvs4000/administration/guide/RVS4000_AG_OL-22605.pdf

Chart Interface In web application designer?

Hi experts:
I want to know if there is chart interface in web application designer?when i click a node in the chart ,it can triggle a js to jump to another page to show the detail? how I can do it?
I think there do have method to implement,as when I put the mouse on the node of the chart ,the "javascipt:;" shows in the status bar of the IE ,I don't know where can I write the JS ?
Best Regards
chan.

Hi Chan,
1. You type tcode RSBBS in BW system
2. Under Query Tab, there is 'Sender' field. You input the the origin query.
3. Click 'Create' button, you choose the report type that you want to jump into. In you case, if you want to jump into a web template, choose 'BW Web Application'
4. In 'Report' field, choose the destination query/web template.
For more details, please look at this link
http://help.sap.com/saphelp_erp2004/helpdata/en/c9/bc2d38c4b3f205e10000009b38f8cf/content.htm
Hope it will help.
Cheers,
Mona

VPN Connection Seen As Public Network In Windows 8.1 & No Way To Change It?

Hello,
I have a perfectly working VPN setup in Windows 7 however since I have got a Windows 8 computer and subsequently upgraded it to 8.1 when I connect to the VPN it assigns the connection as Public and I cannot view any of the network shares.
As I understand it, in Windows 8 you could go into the network section of Change PC Settings, right click over the VPN and enable sharing which would convert the public network type to private however there is no longer this option to enable sharing in 8.1
So I'm left with having to disable the public firewall and then connect to the VPN where it works perfectly but is a bit of a pain.
I'm hoping someone can help me to change the network type of the VPN connection from Public to Private, unfortunately the laptop runs Windows 8.1 Home Premium so I do not have access to gpedit.msc
Hope someone can help.
Regards,
Mike

Hi Mike,
Based on my knowledge, we can use the following method to change the network type of connection from Public to Private.
Set Network to be Private in Windows 8 and 8.1 in Registry
1.Press Win + R keys to open the Run dialog, type regedit, and press Enter.
2.In Registry Editor, navigate to the location below:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles
3.Expand Profiles, click on each long GUID number subkey, and look at its PofileName string value in the right pane to see if it has the current network name (ex: Network) until found.
4.When you find the correct PofileName for your network name, double click/tap on the Category DWORD value in the same right pane to modify it.
5.Type in a new Data value number for the network location you want, and click/tap on OK.
Network location      Data value
Public                                0
Private                            1
Domain                            2
6.When finished, please reboot your computer.
Hope this helps.
Regards,
Kelvin hsu
TechNet Community Support

How to use Integrated 10/100 Base-T networking interface

I am new to Solaris, in fact I just installed it. I assumed that I would be able to connect to the internet immediately, but that isn't the case. I have an HP a1610n media center pc, and it comes with an Integrated 10/100 Base-T networking interface. Do I need to install a driver to use this network interface?

Can Solaris 'see' your device? this tool wil let you know. [Sun Device Detection Tool 2.1 |http://www.sun.com/bigadmin/hcl/hcts/device_detect.jsp]
If it doesn't see the controller, there are links on the device detection tool page that should help you find a driver - if one's available - for your NIC.
john

How can I use VPN connection to access my Outlook email?

My company doesn't support iPhone's so I can't get any help from them -- here is my problem:
We run Outlook 2003 and they won't tell me the server name for Outlook. I have been able to connect to our Cisco VPN and access internal webpages, etc. Is there anyway I can use this VPN connection to retrieve my Outlook email?
Or is there anyway I can identify the server name I need to allow the iphone to connect to my Outlook?
Any help would be much appreciated.

Yes, it is possible to connect via VPN. However,if IT hasn't set up ActiveSync on the internal Exchange server, this won't work anyway.
The server name for your Exchange server is in the configuration of Outlook, so you can find it and use that to connect. But that doesn't mean that things are set up correctly to have this work.
To find your server name, (this is for Outlook 2007), Tools->Options and double-click on the account under the Email tab. The server name is next to "Microsoft Exchange server" on that screen.

Using DB COnnect for SQL to BW interface

Hi All,
When we are connecting an Oracle DB to BW using DB Connect we need the following parameters
1) Oracle DB SID to connect
2) Host Name
3) Listener Port
4) User id /password
What parameters do we need to a SQL to BW DB Connection.
Thanks
Rashmi.

Hi,
Check this doc.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/2f0fea94-0501-0010-829c-d6b5c2ae5e40
Regards.

VPN connections: impossible to ping network's machines

Hello,
I have configured a Cisco 857 device. I can connect to the internet. I can also establish VPN connections remotely.
However, once I have established a VPN connection, I cannot ping any system on the company LAN.
I have seen several posts on these forums but I couldn't configure properly my router.
I attach my config. Is it possible to know what corrections I should do?
My LAN IPs are 10.0.0.x with a subnet mask 255.0.0.0.
For my remote clients, I have now configured it to use 255.0.1.x.
Thanks and regards,
MaC

I can see in your configuration that you use
split-tunneling, which is fine.
However, I think you need add the following
line in the configuration so that your router
will NOT NAT traffics when going from 10.0.0.0/8 to 255.0.1.x/24:
no access-list 120
access-list 120 remark SDM_ACL Category=18
access-list 120 deny ip 10.0.0.0 0.255.255.255 192.168.1.0 0.0.0.255
access-list 120 deny ip 10.0.0.0 0.255.255.255 255.0.1.0 0.0.0.255
access-list 120 permit ip 10.0.0.0 0.0.0.255 any
That way, the traffics from 10.0.0.0/8 will not be NATted when going to
255.0.1.0/24 for the VPN.
CCIE Security

Can't connect to Oracle XE instance from Java web application

I'm a long-time Java developer but can't figure this out.
I've been pouring over the forum for over a week and can't
find the solution that will let me connect.
Hardware: Intel/Vista.
DB: Oracle Express 10G.
Application: Java web application (Jakarta Struts)
Application Server: Tomcat 5.5
I copied the latest JDBC driver from OTN into my app server's "/LIB" directory.
I get no driver errors. ("ojdbc14.JAR)"
I can connect locally from my TOAD client, using SYSTEM/PASSWORD/XE.
My listeners seem to be OK.
Depending on which connection string I use from my Java application,
I get one of two messages.
"ORA-01017: invalid username/password; logon denied"
OR
"Io exception: The Network Adapter could not establish the connection"
------------ lsnrctl status ---------------------------------------------------
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "XEXDB" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
Service "XE_XPT" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
Service "xe" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
The command completed successfully
------------ SOURCE CODE ------------------------------------------------------
OracleDataSource ods = new OracleDataSource();
ods.setURL(" jdbc:oracle:thin:@localhost");
conn = ods.getConnection("system", "password");
//ods.setURL("jdbc:oracle:thin:@rsosborn-PC:1521:XE");
//conn = ods.getConnection("system", "password");
String query = "select * from books;";
Statement st = conn.createStatement();
ResultSet rs = st.executeQuery(query);

Using the code you supplied I was able to reproduce your errors. I've adjusted it accordingly and can connect to one of my 10.2 test databases.
import java.sql.*;
import oracle.jdbc.*;
import oracle.jdbc.pool.*;
class Conn {
public static void main (String args []) throws SQLException
    Connection conn = null;
    OracleDataSource ods = new OracleDataSource();
    // ods.setURL(" jdbc:oracle:thin:@localhost:1521:TEST");
    // conn = ods.getConnection("scott", "tiger");
    ods.setURL("jdbc:oracle:thin:@localhost:1521:TEST");
    conn = ods.getConnection("scott", "tiger");
    Statement stmt = conn.createStatement();
    ResultSet rset = stmt.executeQuery("select BANNER from SYS.V_$VERSION");
    while (rset.next())
        System.out.println (rset.getString(1));   // Print col 1
    stmt.close();
}There are several different ways to configure OracleDataSources:
http://download.oracle.com/docs/cd/B19306_01/java.102/b14355/urls.htm#BEIDBFDF
So, hopefully it's just a mismatch config.

What i use to develop complex tree and table in my web application?

hi guys
simply most of my work in my web application will be depend on:
1-tree
2-table
i need this tree and table deal with database table (or even tables) must be able to do every thing like add node/row/column, delete, update, drag-n-drop, various object nodes/cells like check-box, list, images...etc
i used JTree and JTable then stoped because i faced problems in dealing with applet/database, and i really didnt see this is perfect way to do that even i agree that JTree and JTable are excellent objects. i also start using ajax tree but i didnt see it robust to have all this complicated work with database.
by the way i need also master-detail UI table, but its easy to get this if i have good and flexable table object.
my rest pages developed by jsp, servlet, javascript, html...etc
so any suggestion to how i build this tree and table? i also heared about JSF, is it serve me?
thanks

so if the only way to use JTree and JTable,There are other ways, but they're not Java and might be more complicated.
are there
any links you have discussing dealing database with
applet by keep applet away from direct connection to
my database?I'm not aware of links, but it's common sense. You don't want to expose the DB server to the internet, and instead contact a server for authentication that then forwards the request to the DB.

Accessing AM Client Interface from Web Application

Hi,
I am trying to access some client interface methods that I developed on my application module from a backing bean on my web application and have trouble doing so.
Some background on the problem,
Basically when logging into our application from the front-end, we have to authenticate the user against some custom security code. Part of this code is to validate the user against the Oracle database (i.e. valid oracle db user, and password is valid password to log onto Oracle database). To do this, I developed Client Interface methods on an Application Module. When using the BC Tester in jdev 11g (the latest release), these methods work 100% and validation occurs. On our logon page, I bound these methods to the page definition file. When I then try in the backing bean to call this method, using the code from the ADF 11g Dev guide as below, the DataControl on the action is null at point 3. It does seem to find the action find. I have also tried to actually use the "setParams" method on the action, and then tried the execute(), invoke() + getResult(), and doIt() + getResult() methods, of which none seems to work. All these go past the execute/invoke/do part, but the return value on the execute, as well as the return value from the getResult calls are null.
public String commandButton_action() {
// Example using an action binding to get the data control
public String commandButton_action() {
// 1. Access the binding container
DCBindingContainer bc = (DCBindingContainer)getBindings();
// 2. Find a named action binding
JUCtrlActionBinding action = (JUCtrlActionBinding)bc.findCtrlBinding("SomeActionBinding");
// 3. Get the data control from the iterator binding (or method binding)
DCDataControl dc = action.getDataControl();
// 4. Access the data control's application module data provider
ApplicationModule am = (ApplicationModule)dc.getDataProvider();
// 5. Cast the AM to call methods on the custom client interface
StoreServiceAM service = (StoreServiceAM)am;
// 6. Call a method on the client interface
service.doSomethingInteresting();
return "SomeNavigationRule";
Can somebody perhaps tell me what I am doing wrong, or of a better approach to resolve this problem. If any more info is needed, please let me know.
I did think about binding the action directly to the logon button on the jsf page, but unfortunately there is additional logic/code that is currently in the backing bean that I do not want to move down into the business components, and some code like the lines below that can not be moved.
HttpSession session = (HttpSession)externalContext.getSession(true);
session.setAttribute(SecurityFilter.SESSION_ATTR_USER, securityDto.getUsername());
session.setAttribute(SecurityFilter.SESSION_ATTR_SECRET, securityDto.getPassword());
session.setAttribute(SecurityFilter.SESSION_ATTR_ROLES, securityDto.getRoles());
return "logonSuccess";
Will really appreciate any help.
Tx
Drikus

Hi,
I managed to find some sort of work around.
I actually dragged and dropped the Client Interface for the custom method from the datacontrol onto my jsf page and created an additional button. I then ran the application and everything worked. Afterwards I went back to my jsf page and removed the newly added button again and removed the newly added methods from my page definition file as well. When I run the application now, the exact same code that I used previously, now seems to work. I changed it to use the findDataControl method as Frank suggested, and that also works now.
What i can not figure out though, is what exactly the the dropping of that dataControl method and removing it again changed on my application to make it work now. Can somebody please try this and see if they can find the answer. I have done a small little sample application where I can replicate the problem exactly which I can provide the steps to if needed.
Drikus.

I am using Firefox for Mac (v 3.6.11, Mac OSX 10.6.4) and need to use the Function keys (specificlaly Ctrl-F7) in a web application. I can't seem to get it to work the same as in Firefox on PC.

I am using a web application that requires the use of the F7 key. Actually, to be more precise, I need the functionality that you would get on a PC if you hit Ctrl-F7 while in this web application in Firefox. I have changed the Mac's settings to allow standard use of the function keys (rather things like volume up/down, etc.) However, when I try to use Ctrl-F7 it appears to be using the function that is built into Firefox browser rather than the web application running within Firefox. (FYI, nothing happens when I try Cmd-F7 or Alt/Option-F7 either).

Leliforever, cheek you list of installed add-ons, the Ask toolbar can be installed without the users knowledge.
For checking other extensions that may cause this, follow the procedure in this link - https://support.mozilla.com/kb/Troubleshooting+extensions+and+themes

Is it possible to use Firefox to debug javascript files when running a web application using visual studio 2010

I am trying to debug a ASP.Net web application within visual studio 2010 using Firefox. I am able to set breakpoints in my C# code and they work but if I set a breakpoint in a javascript file then these do not work when using Firefox. Is there any way to do this?

Of course you can. I use the VS2010 built-in Javascript debug tool a lot, not only for IE, but also for firefox.
I encountered the "break point not working" issue several times, according to my experience, following is the solution to this problem, give them a shot:
1. There maybe errors in your javascript code, have a close look at your code, try to find the errors or eliminate this possibility.
2. Sometimes you have to refresh the page once after the page is loaded the first time. This solves the problem most of the time.

Server name cannot be resolved using VPN connection

I've just installed Windows Server 2012 and Exchange 2013. I previously was using Windows SBS 2008 with Exchange 2007 and I was able to connect to the server via VPN and create an Outlook account and connect to the Exchange server no problems.
Now with the WS2012 and Exchange 2013 everything is working fine but when I connect to the VPN from outside the network and try to create a new Exchange account in Outlook, I get the error "The name cannot be resolved. The connection to Microsoft Exchange
is unavailable. Outlook must be online or connected to complete this action."
When I'm on the VPN I can ping both server name and IP address no problems so that isn't the issue. I've searched the net and tried multiple things including turning off firewall on both sides.
To clarify my setup I have two WS2012 servers. One is DC and VPN server, other is Exchange 2013 server which has both CAS and Mailbox roles.
I have a suspicion that the issue is to do with certificates. I don't have a valid bought SSL certificate, I am just using self-signed certificate. Can anyone verify that this is the issue or could it be something else?
Thanks.

Hi,
Since you don't have a valid SSL certificate, you can try to manually configure Outlook to connect to your Exchange server by the following steps:
Go to your Outlook mail settings from Start > Control Panel > Mail > Show Profiles > Add.
If you cannot locate the Mail icon in Windows Control Panel, turn on Classic View (click
Classic View on the left side of the Control Panel window).
Specify your Profile Name and click OK.
On the Auto Account Setup page, select Manually configure server settings or additional server types and then click
Next.
On the Choose Service page, select Microsoft Exchange or compatible service and click
Next.
On the Server Settings page:
- Specify your Server FQDN as Exchange server name (you can find it in HostPilot® Control Panel >
Users & Services > Advanced Settings).
- Type your Exchange Mailbox Username (email address).
- For the Offline use option, make sure that Use Cached Exchange Mode is selected.
- Click the More Settings button and switch to Connection tab.
- In Outlook 2013 you can specify the time period for which email items will be kept offline.
Select the Connect to Microsoft Exchange using the HTTP option and click the
Exchange Proxy Settings button.
-Specify Exchange proxy settings.
-Type the URL for your proxy server in the Use this URL to connect to my proxy server for Exchange field.
You can find the correct URL in HostPilot > Users & Services > Advanced Settings.
-Make sure that both the options On fast networks and On slow networks are checked.
-In the Proxy authentication settings box, choose Basic Authentication.
If you want to have Outlook save your password, read the Knowledge Base article on
How do I save my Outlook Password? for more information.
Click OK, then Apply, then OK
to return to the Add New Account window. Click Check Name.
If you have set everything up properly, you will see a window requesting authentication.
Enter the complete primary email address as the username, and enter the password for the mailbox.
If you have entered the username and password correctly, the username will now be underlined, and the entry in the Microsoft Exchange Server field will also be underlined.
Note: If your server is Exchange 2013 the server name will get underlined and will resolve into a name that looks like
[email protected].
Such a conversion is expected behaviour for Exchange 2013 mailboxes.
Click Next, then Finish, then OK to save changes.
Start Outlook and log in, using the same credentials as in step 9.
▲ Vote if Helpful / Mark if Answer
MCSE: Messaging 2013 Charter / Private Cloud / Server Infrastructure
MaximumExchange.ru

Setup router to router VPN connecting 2 windows domain networks via 2 RV042 routers

I am using 2 RV042 routers. I have created a point to point VPN with Remote Security Group Type= Subnet, using the default IPSec settings.
Under advanced settings- Aggressive Mode, Keep Alive enabled.
Location A- SBS 2011 standard, Servername=SBSServer, Domainname = Smallbusiness.Local, IP address 10.1.10.50
DHCP range 10.1.10.100 to 10.1.10.175. DNS and Print services. No WINS.
Location B- Server 2008 R2, Sername=SBSServer, Domain name=Smallbusiness.Local, IP address 192.168.10.50
DHCP range 192.168.10.100 to 192.168.10.175, DNS, Print Services and Remote Desktop Services. No WINS
I am wondering 2 things. Can I setup the VPN tunnel to route traffice between the 2 networks without changing the server names. Leaving the servernames the same. I have it setup that way but also had netbios broadcast enable. If I disable netbios broadcast will that be enough for these networks to be independent of each other. I was hoping not to have to rename the domain and there are advantages to having the same user and domain name when mapping drives between networks. I have not needed to authenticate those drives or provide credititals for printing either.
2) Should I change the domain name so that each network has a unique domain name or, if I change the servername of the 2008 R2 server will that essentially solve my network issues, the primary issue being that location b has clients that occasionally can not find the 2008 R2 domain controller. After a restart the usually resolve to the correct domain controller.
Essentially what I am asking is what are the best practices to connect 2 separate Windows domain networks via a VPN and have those networks capable of file sharing to the each others domain server and printing to the network printers at both loations.
Should I have separate domain names-
Should I have separate server and computer names-

"reserved not zero on payload" generally means your pre-shared keys don't match. Try removing the "crypto isakmp key ...." line and retyping it in again on both sides. In particular DON'T cut/paste it from one router config into another, this quite often puts a space character onto the end of the key, which the router interprets as part of the key and they therefore don't match.

Use VPN connection as a listen network interface in Web Application proxy

Similar Messages

Maybe you are looking for