Allow VPN client to connect from the inside to another remote network
Hi, if I have a Cisco VPN client software on the inside of network and client is to connect to a remote network, over the internet. What ports need to be opened and on the outside interface/inside/both?
Thanks.
Basically, all you need is UDP port 500, NAT-T will do the rest.
Connections are initiated from the inside and while everything is allowed in that direction, this should work by default.
If you have an access-list that limits traffic from inside to outside, you might need to allow this traffic.
Regards,
Leo
Similar Messages
-
Remote access VPN client gets connected fails on hosts in LAN
Hi,
VPN client gets connected fine, I have a inter VLAN routing happening on the switch in the LAN so all the LAN hosts have gateway IP on the switch, I have the defult route pointing to ASA inside interface on the switch, the switch I can reach after Remote Access VPN is connected how ever I cannot ping/connect to other hosts in the LAN and if I make the gateway point to the ASA then that host is accessible, any suggestions? I really want to have gateway to be the Switch as I have other networks reachable through the Switch (Intranet routing)Hi Mashal,
Thanks for your time,
VPN Pool(Client) 192.168.100.0/24
Internal Subnets 192.9.200.0/24(VLAN 4000) and 192.168.2.0/24 (VLAN 1000)
=============
On the Switch
=============
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.2.5 to network 0.0.0.0
172.32.0.0/24 is subnetted, 1 subnets
C 172.32.0.0 is directly connected, Vlan101
C 192.168.200.0/24 is directly connected, Vlan2000
C 192.9.200.0/24 is directly connected, Vlan4000
S 192.168.250.0/24 [1/0] via 192.9.200.125
S 192.168.1.0/24 [1/0] via 192.9.200.125
C 192.168.2.0/24 is directly connected, Vlan1000
S 192.168.252.0/24 [1/0] via 192.9.200.125
S* 0.0.0.0/0 [1/0] via 192.168.2.5
===============
On ASA
===============
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 172.32.0.2 to network 0.0.0.0
C 172.32.0.0 255.255.255.0 is directly connected, outside
C 192.9.200.0 255.255.255.0 is directly connected, inside
C 192.168.168.0 255.255.255.0 is directly connected, failover
C 192.168.2.0 255.255.255.0 is directly connected, MGMT
S 192.168.100.2 255.255.255.255 [1/0] via 172.32.0.2, outside
S 192.168.100.3 255.255.255.255 [1/0] via 172.32.0.2, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 172.32.0.2, outside
We don't need route print on the PC for now as I can explain what is happening I can get complete access to the 192.168.2.0/24 (VLAN 1000) but for 192.9.200.0/24 (VLAN 4000) above from the switch I can only ping IP's on the switches/pair but cannot have any tcp connections, which explains the default route being pointed on the switch is on VLAN 1000, now my issue is How do I get access to VLAN 4000 as you can see these two are on different Interfaces/zones on the ASA and please note with default gateway pointing to ASA I will have access to both the VLAN's it is only when I move the gateway pointing to Switch I loose tcp connections to one VLAN depending on the default route on the being pointing to on the switch.
So we are left to do with how to on the switch with default route. -
VPN Client Tunnel Connection Pix506E
Situation: Trying to connect to PiX 506e for vpn client tunnel. The tunnel shows the following when using the sho isa sa command:
qm_idle 0 0
then after about 3-4 minutes the client workstaiton is receiving error: Reason 412: the remote peer is no longer responding
The same workstation on the same internet connection from the home office is able to connect to an ASA 5505 vpn client with no problems.
I have enabled: nat traversal on the pix506e and tried serveral options on the client side.
The Pix506E also has site to site vpn tunnels that are working without any problems.
Pix Software version: 6.3.5
Any ideas?Try to connect from a different internet connection and see if you are having the same issue.
Also, turn on the logs on the vpn client and see why it's failing. -
Hi,
I am Shanmugavel, SharePoint developer,
I am facing the below SharePoint 2013 deployment issue while deploying using VS2012.
If i will deploy the same wsp or existing wsp
(last build) using direct powershell deployment, the solution adding properly, but the same timeout exception coming while activation the features. Please find the below error.
I tried the below activists:
1. Restarted my dev server, DB server.
2. tried the same solution id different server
3. tried existing wsp file (last build version)
4. Deactivated all the features, including project Active deployment configuration.... but still i am facing the same issue.
I hope this is not coding level issue, because still my code is not start running, before that some problem coming.
Please help me any one..... Last two days i am struck because of this...What you need to understand is the installation of a WSP does not do much. It just makes sure that you relevant solution files are deployed to the SharePoint farm.
Next comes the point when you activate the features. It is when the code which you have written to "Activate" certain features for your custom solution.
Regarding the error you are getting, it typically means that you have more connections (default is I guess 100) open for a SQL database then you are allowed to.
If you have a custom database and you are opening a connection, make sure you close it as well.
Look at the similar discussion here:
The timeout period elapsed prior to obtaining a connection from the pool. This may have occurred because all pooled connections were in use and max pool
size was reached[^]
I would suggest further to look at the
ULS logs[^] to get better insight.
Manas Bhardwaj's Stream : www.manasbhardwaj.net -
What do I need to open a connection from the Linux box to the Oracle server
Hi all,
I want to access oracle database from java application running on Linux.
The database is installed on a Window 2000 machine. What do I need to install before I can open a connection from the Linux box to the Oracle server on Windows 2000 ?
Do I need Oracle Client ?
Thanks,
QuoiHi Quoi,
http://myjdbc.tripod.com/basic/jdbcurl.html
Talks abt how to write a jdbc url and the jar + config required to connect to db. Also has a sample program to connect.
Regards
Elango. -
A Thread manages a connection from the outside--help me to finish it
**RUN THIS CODE AND HELP ME--- THANKS A LOT**
EchoClient is thread which manage a connection from the outside.
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.ServerSocket;
import java.net.Socket;
import java.util.Random;
public class EchoClient extends Thread {
private ServerSocket listenSocket = null;
private Socket manageSocket = null;
private int[] port = new int[9999];
private BufferedReader in;
private PrintWriter out;
private int line;
private int count;
// No needed to mention
//private ClientNode[] clientArray = new ClientNode[9999];
private ManageClient[] manageClient;
private final int CONNECTED = 1;
private final int CONNECTING = 11;
private final int DISCONECTED = 2;
public void run() {
try {
manageClient = new ManageClient[9999];
listenSocket = new ServerSocket(903);
manageSocket = listenSocket.accept();
while (true) {
in = new BufferedReader(new InputStreamReader(manageSocket
.getInputStream()));
out = new PrintWriter(manageSocket.getOutputStream());
line = in.read();
// if Client send a variable(CONNECTING)
// Server will send to Client a variable(CONNECTED) and port
//to open a ChatFrame with that port
if (line == CONNECTING) {
System.out.print("have recieved");
out.print(CONNECTED);
//randomize a port to send to client
port[count] = (int) Math.ceil(Math.random() * 9999)
//creat a manageClient(Thread) to manage a seperate
// connection with a seperate Client
manageClient[count] = new ManageClient(port[count]);
manageClient[count].start();
out.print(port[count]);
count++;
} catch (Exception e) {
e.printStackTrace();
public static void main(String[] args) {
EchoClient e = new EchoClient();
e.start();
}And a Login Frame which will send to server a varialble (CONNECTING) which requires to connect and keep waiting for a variable to Open a ChatFrame with a new port
import java.awt.FlowLayout;
import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.Socket;
import javax.swing.JButton;
import javax.swing.JFrame;
import javax.swing.JPanel;
import javax.swing.JTextArea;
public class Login extends JFrame {
public ChatFrame chatFrame;
private final int CONNECTED = 1;
private final int CONNECTING = 11;
* @param args
public Login() {
// TODO Auto-generated method stub
setSize(50, 150);
JButton loginButton = new JButton("Login");
JPanel p = new JPanel();
p.setLayout(new FlowLayout());
p.add(loginButton);
add(p);
loginButton.addActionListener(new ActionListener() {
@Override
public void actionPerformed(ActionEvent e) {
loginServer();
public void loginServer() {
try {
Socket connectSocket = new Socket("127.0.0.1", 903);
while (true) {
BufferedReader in = new BufferedReader(new InputStreamReader(
connectSocket.getInputStream()));
PrintWriter out = new PrintWriter(connectSocket
.getOutputStream());
out.print(CONNECTING);
System.out.println("At here");
//(***position***)
int line = in.read();
System.out.println("At here1");
if (line == CONNECTED) {
int port = in.read();
chatFrame = new ChatFrame(port);
chatFrame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
chatFrame.show();
connectSocket.close();
} catch (Exception exp) {
exp.printStackTrace();
public static void main(String[] args) {
Login login = new Login();
login.show();
login.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
}and this is ManageClient Thread...
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.ServerSocket;
import java.net.Socket;
public class ManageClient extends Thread {
private ServerSocket ssClient;
private Socket sClient;
private int port;
public ManageClient(int port) {
this.port = port;
public int getPort() {
return port;
public void run() {
try {
ssClient = new ServerSocket(getPort());
sClient = ssClient.accept();
while (true) {
BufferedReader in = new BufferedReader(new InputStreamReader(
sClient.getInputStream()));
PrintWriter out = new PrintWriter(sClient.getOutputStream());
String s = in.readLine();
if (s != null)
out.print("have recieved");
} catch (Exception e) {
e.printStackTrace();
}my problem...
At firts EchoClient will run.. and then Login but when I click to the Login button it has just only did before int line = in.readLine();(*** postion ***)
I don't know why it doesn't continue. It stops here and the login button is still visible(cause code has not finish)..
That's my problem...
Somebody help me
Edited by: rockfanskid on Oct 17, 2007 4:25 AMSomebody helps me to finish this project...
thanks for racing this thread -
Log shows numerous "Allow sshd-keygen-wrapper connecting from"
Recently my security logs have been showing the message "Allow sshd-keygen-wrapper connecting from ...." which has me concerned because this started happening about 3 weeks ago, and at the same time, I had a credit card compromised... too long a story to go into...
My question is, has someone been "allowed" into my computer? I have the firewall set properly and have turned off "remote login" etc. Prior to this morning, there were the occasional messages "Allow sshd-keygen-wrapper connecting from " but this morning when I came on, someone had been attempting it for at least 50 tries, every few seconds...for over half hour... all from the same IP (which came back to "Asia Pacific")
I do not find any evidence of viruses, trojans or other activity, but am wondering if someone is actually getting into my computer and how I can stop them if they are getting in? I have tried doing all the security changes recommended on other discussion groups and blocked incoming access for all but the most essential services. Does anyone have information on what this means? Thank you.I'm no expert on log messages but I'm not sure you've been been hacked. It's possible they have just been trying to get in and have been unsuccessful. The credit card thing may be coincidental or (I'm clutching at straws here) perhaps some online company got hacked and had your credit card number and IP tied together in their stolen database. More likely you are just a random victim with regards to the attempts to get into your computer; they found your IP address by trial and error.
-
Solving a maze with 4 exits from the inside
Hi, I'm working on an algorithm that solves a maze from the inside, and seeks out 1 of the 4 exits on the sides, and after getting 1, it goes to the next until it has them all. The maze is always 22x22, and you only have 400 steps. I asked my teacher about using a recursive method to solve it, and he said that is probably the best way to go. But, the catch is that you don't know where the walls are, and they change every time. The rat (I'm trying to get a rat to all four exits) starts in the 4x4 box in the middle that has between 1 and 5 exits (it's different every time a maze is generated). The rat can see how far away a wall is, and you are allowed to store the positions in an array if you wish. He can also build walls and get his current x and y position.
Here's an example of what a maze looks like:
http://farm4.static.flickr.com/3528/3201086335_4556d4aed7_o.jpg
I think that's everything, any help would be greatly appreciated =]code continued...
// recursivly find the best path-of-travel
public int[] recursePath()
// if in an exit, kill the recursion process
if(x==0||x==21||y==0||y==21) {int[] bestPath = new int[1]; return bestPath; }
// x- and y- counters are to signify how many units in each direction
// from the current real x, y that the algorithm is at
int curX = x+xCounter;
int curY = y+yCounter;
// the maximum number of moves = the closestExitRange, plus however
// many fewer/extra moves are needed so it lands EXACTLY on the exit,
// minus the number of places generated so far.
moveCount = closestExitRange + neededExtraMoves - spacesMoved;
// give the bestPath a length if it is the first time running algorithm
if(spacesMoved==0) bestPath = new int[moveCount];
while(spacesMoved<moveCount)
// if the algorithm will not land in an exit in EXACTlLY
// x number of moves, edit x acordingly, and reset algorithm.
// if there are not enough moves to make it to the exit, crear variables,
// add 1 to extra moves, check again.
if( spacesMoved==moveCount-1 && ((curX>1 && curX<20) || (curY>1 && curY<20)) )
neededExtraMoves++;
xCounter=0;
yCounter=0;
spacesMoved=0;
bestPath = new int[moveCount];
recursePath();
// if there are not too many moves, crear variables,
// subtract 1 from extra moves, check again.
else if( spacesMoved<moveCount && (curX==0 || curX==21 || curY==0 || curY==21) )
neededExtraMoves--;
xCounter=0;
yCounter=0;
spacesMoved=0;
bestPath = new int[moveCount];
recursePath();
// look in all directions, and find the highest value, and
// move in that direction
int moveDir = findFurthestWay(lookNorth, lookEast, lookSouth, lookWest);
if(moveDir==NORTH) { yCounter--; bestPath[spacesMoved] = NORTH; }
if(moveDir==SOUTH) { yCounter++; bestPath[spacesMoved] = SOUTH; }
if(moveDir==WEST) { xCounter--; bestPath[spacesMoved] = WEST; }
if(moveDir==EAST) { xCounter++; bestPath[spacesMoved] = EAST; }
// curX = x+xCounter;
// curY = y+yCounter;
spacesMoved++;
recursePath();
//bestPath = new int[moveCount];
return bestPath;
// find the path that has thegreatest line of sight (in order n, e, s, w)
public int findFurthestWay(int a, int b, int c, int d)
int greatestNumber = 0;
if(a>greatestNumber) greatestNumber = a;
if(b>greatestNumber) greatestNumber = b;
if(c>greatestNumber) greatestNumber = c;
if(d>greatestNumber) greatestNumber = d;
// NORTH=1, EAST=2, SOUTH=3, WEST=4
if(a==greatestNumber) return NORTH;
if(b==greatestNumber) return EAST;
if(c==greatestNumber) return SOUTH;
if(d==greatestNumber) return WEST;
return 0;
// reset recursePath vars.
public void resetCounters()
xCounter = 0;
yCounter = 0;
spacesMoved = 0;
neededExtraMoves = 0;
moveCount = 0;
bestPath = new int[moveCount];
// record the positions of the walls
public void storeWallLocations()
// Store the locations of the walls
if(lookNorth!=100) wallLocations[x][y-lookNorth][0]=true;
try{wallLocations[x][y-lookNorth-1][2]=true;} catch(Exception e){}
if(lookSouth!=100) wallLocations[x][y+lookSouth][2]=true;
try{wallLocations[x][y+lookSouth+1][0]=true;} catch(Exception e){}
if(lookWest!=100) wallLocations[x-lookWest][y][3]=true;
try{wallLocations[x-lookWest-1][y][1]=true;} catch(Exception e){}
if(lookEast!=100) wallLocations[x+lookEast][y][1]=true;
try{wallLocations[x+lookEast+1][y][3]=true;} catch(Exception e){}
} -
I have a new MAC MINI and I want to install a second monitor. I have one connected to the HDMI and it works. I can't get a signal to the other one. It is connected from the thunderbolt to its HDMI port. How can I make it work?
Could be a bad cable or bad Thunderbolt port.
You have 90 days of free telephone support on a new device. You can call them at 1-800-MY-APPLE. Have your Mini's serial number handy
You can also make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar -
Open script cannot get connection from the brower helper after 15 seconds.
Error:
===
Open script cannot get connection from the brower helper after 15 seconds. Do you want to continue waiting for the browser to load?
Please Note:
========
1. I have tried this only on IE
2. I am running OATS on a Remote desktop
Situation:
======
Trying to stop the recording
Try to get xpath of an object using Inspect Path
Setup details
========
Windows XP 5.1 Service Pack 3, x86
OpenScript 12.1.0.1.383
Internet Explorer 8.0.6001.18702
FireFox 13.0.1
Mitigation steps done till now:
==================
1. Disabled windows firewall
2. Disable XSS filter setting
3. Restarted the ATS services (3 of them)
4. Run the Open Script Diagnosis Tool (PS: There are 3 errros even after running it. The 3 errros are listed in the workspace_log log file snippet below...)
Error in worspace_log:
=============
To Change setting:
Go to Tools > Internet Options and Choose Security Tab
Select the Zone to modify and Press Custom level
Find Enable XSS filter Setting - Select Disable and click Ok
!ENTRY oracle.oats.scripting.diagnosisTool.api.DiagnosisExecutor 4 0 2012-07-09 17:08:52.594
!MESSAGE Failure found when diagnosing Oracle EBS/Forms Load Testing Forms LT Diagnoser
!ENTRY oracle.oats.scripting.diagnosisTool.api.DiagnosisExecutor 4 0 2012-07-09 17:08:52.594
!MESSAGE Did not auto-fix the problem.
!ENTRY oracle.oats.scripting.diagnosisTool.api.DiagnosisExecutor 4 0 2012-07-09 17:08:52.594
!MESSAGE Suggestion for fixing: Please change your Java proxy setting to Use Browser Settings
Aprreciate help on this.To resolve this, you need to reconfigure the "Oracle Application Testing Suite Helper Service" (OATSHelperSvr) to start as a user who has privledges to run open script tests rather than the default SYSTEM user.
Reconfiguring the OATSHelperSvr Service:
1. Open the services panel (Start > Run > services.msc)
2. Find the Oracle Application Testing Suite Helper Service
3. Right Click > Properties then select the Log On Tab
4. Specify an interactive user that has rights to run OpenScript (test by logging in as that user and running tests):
5. Click OK
6. Restart the service after dialogs are closed by Right Click > Restart
7. You should now repeat this process for the "Oracle Application Testing Suite Agent Service" (eLoadAgentMon) Service (Two services in
total)
You should now retry running the test in Oracle Test Manager -
I bought a brand new iPad 3 and an Apple TV, both connected to the same wpa protected wifi network from home. It worked for a day, but when I woke up, the Apple TV couldn't be found anymore by either iPad, MacBook or iPhone. Anybody a solution for this?
Thanks for the swift reply, I have been looking online and a loose plug seems to be somewhat of an issue with many, I hope mine is actually a problem and not what others are experiencing. It's taken me this long to even reach out for the simple fact I HATE being a complainer but this is just horrible.
Do you have an iPad 3 as well? And is yours not experiencing any issues close to mine?
Thanks again! -
I have an Ipod touch 2nd generation 8gb. Metal peice fell out from the inside where the home button is and I lost it. Put the screen plug in and put the screen on and it would turn on but it won't unlock or respond to anything I try to do. PLEASE HELP ME!!!!!!!!!!!!!!!!!!!
Look her and it may give insite on what is missing. Otherwise:
Apple will exchange your iPod for a refurbished one for $99. Likely not worth it for a your iPod. They do not fix yours.
Apple - iPod Repair price
A third-party place like the following maybe less. Google for more.
iPhone Repair, Service & Parts: iPod Touch, iPad, MacBook Pro Screens
Repair it yourself if you are up to it
iPod Touch Repair – iFixit -
i'm running10.8.5. I have tried to install a programme but can't because it is from an unidentified developer. the box says-Your security preferences allow installation of only apps from the Mac App Store and identified developers.how do i install the programme
macjack gave you the easiest solution. Need to have admin privilieges to change this option.
-
How to Destory connections from the Pool?
Hi,
I would like to know if it is possible to destroy/refresh a connection id from the DBPool using just a javacode that either refresh the whole pool or just one specific connection.
We are using a DB cluster environment and once one of the Database Servers goes down, the connection continues to point to the old DB Server. We are testing if the connection is still pointing to a valid DBServer (using a simple <i>select getdate()</i> statement (the DBMS is SQLServer 2000). The problem is that even if we close the connection object in the JavaCode, the physical connection still points to the old DB IP address, and we want to kill that connection from the DBPool.
We know that once the connection id is destoyed(using the DESTROY_CONN command of the J2EE engine), a new connection is created for the right DB Server.
We are using the following versio of EP:
6.0.2.37.0.Enterprise_Portal_Support_Package_2
Thanks.Hi,
There is no difference in calling a transaction from module pool and report . The statement
Call transaction tranaction name works similarly in both the cases . The only thing you need to take care is your program flow in Module pool.
For calling transaction set the parameters of the transaction and on using the call transaction statement it will call the transaction withe the set values. use skip initial screen option to execute it from your program. This entire code needs to be written in PAI event where you will be handling your OK codes.
Hope this helps. -
Application that allows to paste images copied from the web..
hey guys.
im looking for an application that allows to paste images copied from the web..
ive tried a few but they only paste the next... anyone help?
cheers.im assuming paste them on your phone to use as wallpaper etc?? if that's all you want to do, you don't need an app for that... when you find an image you like touch and hold for 3 or 4 sec. a dialogue box will appear asking you if you want to save the image, email it, etc... select save and it will appear in its own folder under photos as "saved images or photos"...
hope it help
Maybe you are looking for
-
"There was an error in the iTunes Store" Error -50
Hi: I've been having a lot of internet-related problems on my Mac these past couple of months. The newest one is this, I keep getting an error trying to connect to the iTunes store. It appears at random times when I try connecting to the iTunes store
-
Photoshop CC 2014 won't start but I see Photoshop.exe running in Task Manager!
I just updated Photoshop CC 2014 today - October 6, 2014, and it won't start. I does not give any warnings or errors. Windows 7 Pro. If I check Windows Task Manager, I see Photoshop.exe running, but it never opens on my desktop.
-
XMLhttprequest doesn't work in safari
i have a website and it works fine in Internet Explorer, but the website doesn't work in Safari. i use xmlhttprequest to get data from the database and that data i want to put in an selectbox. i have multiple selectboxes and the first one i don't use
-
How do I tell if the license and serial have been activated on CS4?
How do I tell if the license and serial number have been activated on CS4?
-
Hi All, I am trying to test the sendeer HTTP URL , when i add the URL in IE and try to open the page , it asks me to enter the userid and pwd details of the XI server . Once i have added the details and press enter , the page doesnt get directed anyw