ACE NAT configuration - is it possible to use a different source PAT IP per rserver in a serverfarm?

Hi,
I've a quick question regarding using PAT (port address translation) on an ACE module specifically for the purpose of load-balancing requests to a cluster of Exchange CAS servers.
Each CAS server needs to see requests from the same source IP which can be achieved by using source NAT / PAT but due to the scale of this Exchange deployment a single NAT pool with one PAT'd IP will not provide enough ports (i.e. there may well be more than ~64,000 ports required at any one time).
Is it possible to configure PAT on the ACE so that each individual rserver will see requests from a unique source PAT address, i.e., each rserver sees a different source PAT IP, i.e., in order to provide ~64,000 ports per source PAT IP <-> CAS server pair as opposed to ~64,000 ports shared between all the CAS servers?
If so, does anyone have any configuration examples (based on a single-armed configuration)?
TIA

Hi Tia,
I don't think we can do this. We can easily configure a different nat pool per serverfarm but not per rserver.
--Olivier

Similar Messages

Is it possible to build two different L2TP/IPSec tunnels per subnet or per user?

Dear colleagues
I wondered whether anyone could help with this one.
Is it possible to build two different L2TP/IPSec tunnels per subnet or per user on a Cisco router or any other third party manufacturer? The idea behind is to allow different access to resources to different support technicians. Your help is much appreciated.

Sure, the ASA can use LDAP/AD information to select what access list should be applied for that specific user or group of users logging into the VPN. You can use whats called DAP or just LDAP Attribute Maps.

Is it possible to use same data source for two info cube

Hi,
My Problem is in BW we can not have value of material at storage location level.In R/3 also value is maintained at plant level.
Then we searched and we found out one hot to doc for summarized display of stock values on storage location level.
Problem is that we have gone live in last December and we are using " 0AFMM_C02 " and it contains around 1,81,26,000 records. and according to note we have to use
"0IC_C03".
Both the cube uses same data sources for the data.So, how to get the data for "0IC_C03".
and how to delete the data of existing info cube.And is it possible to delete data selectively from the info cube.
Pls. help.
Regards,
viren.

Hi,
You can't create update rule from PSA.You can create from the infosource or from ODS or from cube to cube or ODS to ODS.
In your scenario, what you can do is create update rules from the ODS to the new cube and then transfer the data from there. Or from the Infosource create rules to the new data target and then upload the full data and then set up the delta.
Third option is to create update rules from the existing cube to the new cube and then load all the data one time. Then you can deactivate the update rules as that was needed only for 1 time data transfer.
Cheers,
Kedar

Can I configure my network settings to use two different proxy configurations?

At work, I have a proxy server, but away I do not. I would like the correct proxy settings to load in each case. Currently, I use two different locations. This works acceptably, but I have to open my network settings and manually switch locations when my location changes. I have experimented with creating multiple ethernet ports. I can create a location with two ethernet ports, but I can't find a way to cause the correct one to activate. The first port in the search order is loaded even if the proxy is not found.
Please let me know if you can help with this. Thank you.

I'm not sure of another way to do what you want, but there should be a Location menu in the Apple menu. You don't need to open the network prefs to change locations.

Is it possible to use a different Adobe account to the one you downloaded the software with on a machine with it not screwing with another versions on that account?

I have 2 adobe accounts, one is my CS5 student license on my mac and one is as a CC trial on this PC.
The trial has run out and I want to buy the CC subscription for my PC but I cant because I signed up with a wrong email address for this account so cant log in to buy it and Adobe customer services are taking over 24 hours to get back to me.
For reference heres a better idea of my situation:
https://forums.adobe.com/message/7480974#7480974
Is it possible to buy the CC on my account associated with the account/software on my Mac onto this computer? (On that account I have already done the 30 day trial and also had it for under 30 days before cancelling CC and going back to CS5).
Or is it only possible to install the software with the specific account you signed up with? As when I have access to my Mac I would like to still use my CS5 on that but CC on this PC.(I really don't want to risk somehow screwing it up so I cant use my CS5)
Thanks a lot
V

In case the email is incorrect & it can not be verified then you can abandon that Adobe id, if you have purchased CC with incorrect Email, then you need to get the CC cancelled & buy a new CC with correct Email ID.
Please personally inbox me the incorrect Email ID for further investigations.
Regards
Rajshree

It is possible to use two different accounts with a single Windows PC?

My wife and I use two personal iPhone 5, with two different appleID. At home we only have a windows 7 PC connected via iCloud with my iPhone 5 and my iPad (with the same appleID). I wish I could also connected the iPhone 5 to my wife, but i can't do it! It is possible? If it is, how should I do? I installed the program iCloud accepts only one appleID...
Thank you in advance who can help me!

Setup 2 user accounts on your PC, one for your wife and one for you. Enter the relevant Apple ID into each user user account.

About asa V8.4 nat service port use destination or source

hi ,
my inside web-server 192.168.1.1 8080 nat outside ip add 61.X.X.X 8080 .
object service real_svc8088
service tcp destination eq 8088
object service mapped_svc8088
service tcp destination eq 8088
nat (inside,ouside) source static local-1-1 remote-lan4 service real_svc8080 mapped_svc8088
is my object service use service tcp destination eq 8088 or service tcp source eq 8088?
i think service tcp destination eq 8088 is right,but not right。
why ?
sorry ,write error.
all port is 8088
nat (inside,ouside) source static local-1-1 remote-lan4 service real_svc8088 mapped_svc8088

Hi,
Again, you mention port TCP/8080 but your configurations mention TCP/8088
There are 2 different ways to accomplish the Static PAT (Port Forward) configuration
The more typical that I use is
object network STATIC-PAT
host 192.168.1.1
nat (inside,outside) static service tcp 8080 8080
The one you are using should look like this
object network MAPPED-IP
host
object network LOCAL-IP
host
object service TCP8080
service tcp source eq 8080
nat (inside,outside) source static LOCAL-IP MAPPED-IP service TCP8080 TCP8080
I already mentioned the reason to use "source" instead of "destination".
First look at the format of the actual NAT command
nat (sourceint,destinationint) source static destination static service
The NAT configuration has its source parameters after the "source static" section. So if we want to modify the "source" sections REAL/MAPPED ports/services then we mention "source" in the "object service".
The "source" and "destination" in the "nat" command doesnt refer to the direction of the connection. I am not sure how to clearly describe it.
The main thing is not to mix up the "nat" commands "source" and "destination" with the same thing in the ACL/access-list configurations.
Your example
hostname(config-service-object)# service tcp source eq www destination eq ssh
Doesnt really mean anything by itself. It just defines the source and TCP/80 and destination as TCP/22. It depends where you use it.
If you used it in an ACL then it would mean that the source port for that rule would be TCP/80 and the destination port would be TCP/22 which I dont see as logical for an ACL rule. It doesnt seem logical to be used in a NAT configuration either.
If you used it in a NAT configuration then it would define the "source" real or mapped service as TCP/80 and the "destination" real or mapped service as TCP/22. Whether it means real or mapped again depends on where you have used the "object service" that contains this information. I mean if you have used the "object service" as the mapped or real "object" (Refer to the above format of the NAT configuration)
Hope this helps
Please do remember to mark replys as the correct answer if they answered your question.
- Jouni

[CS3 JS SDK] Possible to Use HTTP URLs for Links?

I am attempting to use JavaScript to implement a connector from CS3 (InDesign/InCopy in my case) to our content management system. Our CMS provides an HTTP-based API. By using the HttpConnection object (from the Bridge code, see posts on "httpwebaccess library") I can access our repository using HTTP URLs and, for example, get an InDesign document or INX file (and the UI support in CS3 scripting makes it possible for me to build all the UI components I need without having to write a true plugin).
However, what I *can't* seem to do is create Link objects that use a URL, rather than a File, to access resources.
My goal is to be able to store in our repository InDesign documents that use URLs to other resources in the repository for links (e.g., to graphics and InCopy articles).
However, as far as I can tell from the scripting documentation and my own experiments, the URL property on Link is read-only in JavaScript (even though the scripting API HTML indicates it's a read/write property) and Link instances can only be constructed using File objects.
My question: have I missed some trick in the scripting API (or elsewhere) that would allow me to create links that use URLs instead of files (and having done so would InDesign resolve those URLs?)? Our repository does support WebDAV, so that might be an option, but it would depend on mounting WebDAV services in consistent places on client machines, which is dicey at best, given the weak nature of the WebDAV clients on both Windows and OS X).
Or are my only options to either copy linked resources to the client's local file system (or a shared network drive) or implement a plugin that implements my desired behavior for links?
And if the answer is a plugin, will that even work?
This is in the context of CS3. Has the Link mechanism changed at all in CS4 such that I could do what I want in CS4 where I cannot in CS3?
Thanks,
Eliot

Hi,
It is not possible to use HTTP URLS in CS3. You will have to create a plug-in to use Custom Data Links.
I think it is possible to use HTTP URLs in CS4 as per the User Guide.
Regards,
Anderson

Css is it possible to use two VIPs with one source group?

I have separate VIPs defined for balancing dns and radius. Both services are being balanced behind the CSS between two servers running both services. Is there a way, using source groups, to have the outbound dns udp lookups go out the associated dns VIP and a client's returning radius udp traffic sourced from the associated radius VIP?
Just a note for clarity: both services defined for dns and radius have the same ip addresses. I can only define one of the services(i.e. dns) in a single source group which automatically associates the other service (i.e. radius) to that group.

If I understand your question correctly, you want to have the same real server respond with a different source address based on with VIP was used to get to it.
You can only put on instance of the server's ip address into a source group. That is you can't add the service name used for one rule into one group, and the service used in the other rule into another group, since the CSS only looks at the source address when it is determining to use the source group based on the service named in it. In order to have the same server use two different source groups, you would need ACL clause with the sourcegroup option, like
permit any 10.0.0.1 eq 53 dest any sourcegroup
permit any 10.0.0.1 dest any sourcegroup
Michael

Using a different user(other than default PI user) with adapter module

Hi,
We are having a custom adapter module built to interact with a Hardware Security Module(HSM). This custom adapter module by default uses a PI user configured in the system. However, we are not able to pass commands to HSM because of insufficient authorizations to this PI user. Now, we do not exactly know the permissions required for the user to access HSM. We have asked the HSM support team about the same. However, I wanted to explore the possibility of using a different PI user to work with the adapter module and eventually pass commands to HSM.
We have an admin user configured which has all the necessary authorizations. Is it possible to use this admin user created on PI system to work with adapter module so that it passes commands to HSM?
Thanks,
Ravi Desai

We have given the necessary authorizations to PI user.

Use two different printer services in one web template?

Hi!
Is it possible to use two different help services for printing in the same web template (for the same table item)?
Print1:
<param name="HELP_SERVICE" value="HELP_SERVICE_PRINT"/>
<param name="HELP_SERVICE_CLASS" value="ZCL_RSR_XLS_HELP_WINDOW_PRINT"/>
Print 2:
<param name="HELP_SERVICE" value="ZPRINTING"/>
<param name="HELP_SERVICE_CLASS" value="ZBW_PRINT_HELP_SERVICE"/>
I was thinking that you maybe could change the param name values for the "Help_service" and the "help_service_class" at runtime using the properties for the table item, so that you could choose which one to use, but I havne't been able to do that so far.
Does anyone have an idea?

This is not a problem. Just put the print service for the print to excel on an object other than the table web item. As long as these print services exist on any web item, you should be able to invoke them. I've tested this with putting the "Print with Excel" service on the Navigation Block Web Item and the other print service on the table web item. Hope that helps!
Prakash

Use 2 different fonts in a dynamic text field with tf.htmlText?

i've got a dynamic text field on the screen and all of my
fonts embedded. is it possible to use 2 different fonts when
dynamically setting the fields text with the htmlText property?
i've tried the <font> and the <textformat> tags and
neither work. I can set it once via a texformat object, but that's
it.
thanks

you're answering all of my questions today aren't you? :)
right, i think this will be hard since my data is all comming
from XML and i have no way to specifically set text ranges as
different fonts within a string.
i've told the developers to just use images for the special
characters.

Using a different computer to put music into Ipod

i was wondering if its possible to use a different computer to put some new songs into my ipod without losing all my previous music. i ask this question because a friend of mine who used my computer to put some songs from my library to her ipod lost all her previous music and i dont want that happening to me. Any input would be greatly appreciated
Windows XP Pro

it should work if you plug your ipod into the computer u usually use and then select manually manage your songs. then plug into other computer

CIsco ISE use two different local certificates for EAP

Hi Experts,
ISE 1.2.1.198
It is possible to use two different local certificates on cisco ISE, generated by two different root CA, for EAP?
Example:
1 - Microsoft CA for notebooks
2 - Different CA (public, openssl, other) for mobiles
And, in case it is possible, which will be the first one presented from the server to the client for EAP-TLS authentication?
Thanks
Andrea

Thanks for your reply,
i think i'll go for another pair of PSN for the mobiles
Andrea

Can I sync apps to my ipad using two different computers + itunes

Hey guys,
I'm having a bit of a problem. I have two computers (windows laptop + windows pc) which I use both for buying apps (my ipad isn't always connected to our internet), recently I bought an app on my pc and then when syncing it asked for me to 'Erase and sync'. So I did this and the app installed fine, but all my other apps were reset.
Is it possible to use two different computers to buy apps and sync with my ipad without having to erase and sync?

Thanks for your reply,
Im a bit disapointed with this though, seems sort of impratical.. I dunno what to do now, what computer to stick with :/

ACE NAT configuration - is it possible to use a different source PAT IP per rserver in a serverfarm?

Similar Messages

Maybe you are looking for