Analyzer 7 Across the WAN using NAT addresses

We have acquired several companies that have their own internal ip addresses that are duplicates of some of our internal ip addresses. To overcome this we use Network Address Translation (NAT). However, we cannot get Analyzer to work with these NAT addresses. The users receive the logon page, but the "domain" box is empty. We have tried adding entries to the remote DNS's that map the NAT addresses to our servers, but this hasn't worked. Does anyone have any suggestions? Thanks!

Similar Messages

CWA redirect issue and access across the WAN

Hello,
I am trying to get CWA working on my wireless ISE setup and am having an issue where the guest portal redirect is pointing to the wrong port. My setup is as follows:
The PSN has two connections - Gig 0 is on our management VLAN 172.24.x.x Gig 1 is on our guest network VLAN 10.190.x.x
Using a laptop I connect to the guest ssid and guest portal times out as it is pointing to 172.24.x.x instead of the guest vlan 10.190.x.x
We do not want guest traffic on the corp network for obvious reasons.
One more question - Is it possible to have guest access work across the WAN? For example, we have the admin box in Detroit and a PSN in Chicago. Detroit's guest network is routed through a tunnel to Chicago currently.
Some more info:
Here is from the radius authentication details -
cisco-av-pair=url-redirect=https://172.24.24.41:8443/guestportal/gateway?sessionId=ac18180a000024a45151d92d&action=cwa
How do I force it to 10.190.x.x and how does ISE get 172.24.24.41 for the redirect address? DNS? I guess I am unfamiliar with how cisco-av-pair attribute is determined. Any help will be greatly appreciated.

Have you ran anything such as MTR on a Linux box (or WINMTR equivalent on PC)? If so, can you find a trend in loss or high latency on a specific hop on the path? I would ensure you adjust the ICMP payload size to a higher size such as 1000Bytes and adjust the ping interval to every two seconds or so. This ensures you are not running into an issue where the provider is rate limiting your pings, which is not uncommon for some providers, if the pings (ICMP messages) are terminating on their endpoints.
Do you have QoS policies applied on interfaces on either end of these pings / traces? If so, do you have assurance that ICMP messages will not be impacted by queue based dropping or shaping latency? One solution is, move traffic from your ICMP traffic with the source or destination of your ICMP ping and trace endpoint in a priority queue with adequate bandwidth (should be a very low requirement). This may not make sense since your bandwidth utilization is low, but shaping of busy flows can actually occur long before congestion, depending on your design.
Another item that may give you better insight is running and monitoring / graphing IP-SLA probes between your routers on each end. You could then trend issues and give graphed evidence to your provider. They could then compare your lossy and high latency periods to their appliance interface, memory, and CPU loads to see if they can find a correlating trend. It can be a hard battle to get ISPs to not only admit they have issues, but allocate resources to isolate and resolve these issues. Good SLA probe data showing that their paths are not meeting delivery standards speak much louder that pings to them.

Use of 5508 WLC across the WAN as MC for unified access

I came accross a remark that Cisco 5508 cannot be used for a MC role/functionality accross the WAN for Cisco 3850/3650 switches in the branch locations (acting as MA). The reason was some 10 ms transit time limits,..But i could not find any such mention in any of the documentation...Does any user have some link to this or perhaps a practical implemention experience.

From CA design perspective, it is making no sense to put a MC at a central office for a branch MA switch stacks. Typically a branch you may have 1 SPG & you better off MA/MC functionality within the same SPG.
If you have more than one SPG at your branch, then it is good idea to have a discrete controller at branch to do MC functionality (inter SPG roaming to be handled by MC). Instead, if you keep MC at central office these user roaming decision will be taking un-acceptable amount of time depend on the WAN link propagation delays.
Refer BRKCRS-2889-Converged Access System Architecture
Here are two snapshots from above presentation to explain this
HTH
Rasika
Pls rate all useful responses ****

Creating connection using NAT address

Can we use ServerSockets to create a connection to a server using the NAT address ? If yes, then does it require something different ?

Do you want to connect an external machine to a machine behind your NAT router? Or is this completely internal? If it's interal you should be able to use the machine's private ip address.

How do i move a sprite across the stage using the arrow keys on my keyboard?

I'm a high school student and i love director. I recently have become interested in game development, and i am completely lost in how to move a sprite across the stage. I have tried toying around and google hasn't been very helpful. An example of something i found is
on keyUp
if (_key.keyCode = 124) then sprite(4).locH = sprite(2).locH -25
if (_key.keyCode = 123) then sprite(4).locH = sprite(2).locH -25
end keyUp
I don't understand why this wont work.
HELP

This code moves sprite 2 to a position relative to sprite 4. If sprite 4 is not moving, then sprite 2 will always move to the same position, so it will not appear to move at all.
Perhaps this code makes more sense:
on keyUp
if (_key.keyCode = 124) then sprite(2).locH = sprite(2).locH +25
if (_key.keyCode = 123) then sprite(2).locH = sprite(2).locH -25
end keyUp

Set the rating across the network using iTunes???

Hello,
I have a PC with all my music on it. Since I keep this PC on all the time, I keep iTunes open on it, and share the library over the network.
When listening to the library on my PC with the iTunes on my powerbook, I can't change the ratings at all. Is there a way to do this w/o having to go on Remote Desktop Controller? It seems like an overly complicated process, when it could be a lot simpler.
Thanks

Below I've copied the relevant info from the original thread about this hack, but first let me point out that there are two pieces of software that can do some of what many people want to do with their networked iTunes (these may not yet be updated to work with iTunes 5).
1) NetTunes reviewed here:
http://www.macworld.com/weblogs/macgems/2005/08/nettunes/index.php
2) SyncOTunes reviewed here (10th down the list):
http://www.macworld.com/2005/08/features/softwarebargains/index.php
And here is the hack developped to share a Library on multiple machines - use at your own risk!):
(snip)
Have you tried using aliases to your library file?
Say your iMac library is the "Master". Make sure that there's some way that you can tell which library is which (ie not exactly the same playlists), or else you won't be able to tell if this trick worked.
From you iBook, load the iMac and, go into the iMac's Music folder->iTunes
Do you see two files, one called "iTunes Library" and one called "iTunes Library.xml"? control-click and select "create alias" for each file.
On your iBook's Music folder, move the 2 iTunes Library files into the trash (but don't empty the trash yet!). Then move the two alias files you created into that folder. Then rename the files to take out the " alias" at the end (notice the space), so that the files names are exactly the same as the original.
Now open iTunes on your iBook... Does it load the playlists from your iMac?
If not, you may be out of luck. Go back and put the original Library files from the trash to the right folder to retrieve your iBook library.
Let me know how it works out...
(snip)
Success!!!
I just tried it here and it works!
Well, it works to allow two computers to share the same library files (make sure they both have the same version of iTunes, and set the permissions for the library files to allow everyone read and write access).
But I'm having the same problem as you are with regards to sharing the smae library files between two users on the same computer. I've tried changing the permissions on the various folders, but no luck.
(snip)
I do it the way Sara describes. One small point is that you may only need to create an alias on your iBook for the iMac's iTunes Library file and not the .xml file. I think if the Library alias points to the iMac correctly, any changes to the .xml file will be written to the iMac .xml file, which is what you'd want.
I think you have an additional step you need to take, since you want to serve the music from an external HD connected to your iMac. I don't know if Sara has that configuration. You may not be able to see anything on your external HD from your iBook (unless Tiger has changed that--I am on Panther). To cure that, you can use an application like Sharepoints
http://www.hornware.com/sharepoints/
which increases your control over what volumes you can share over AFS or SMB. What's relevant here is it will allow you to share your external HD. It's worked well for me. Sometimes, for some reason my iMac forgets that it's supposed to be making its external HD available to my iBook (but never while my iBook is actually connected with the HD), and I have to restart my iMac to make the HD share-able again, but otherwise, it's worked fine.
Hope this helps you over your hurdle.
Jayson
Let me know if you have any questions.
Cheers,
Sara.

Deploying a large client partition over the WAN.

Hi there,
I have a straight forward question on deployments. Here is the scenario:
I have a large number of machines (around 200) onto which I have to
deploy our client partition. The catch is this:
a) these machines (NT4.0 Workstations) are on a WAN, (64K line)
b) the client partition is huge (about 12MB),
c) and we would like to do regular upgrades to the system.
I looked at Applets and it is not going to buy us anything. What would
have helped is if Forte could compress the distribution files before
sending them across the WAN. As far as I know, this is not a feature of
Forte (we are using 3.0.G.2). I guess there must be something that I'm
overlooking.
Is there anyone out there willing to share his knowledge on this subject
with us?
Regards.
Jaco Fouche
==============================================
Jaco Fouché - MD Systems (PTY) Ltd
LOCAL INTERNATIONAL
Tel: 011 454 3760 +27 11 454 3760
Fax: 011 454 3780 +27 11 454 3780
Cell: 082 451 3242 +27 82 451 3242
Internet: [email protected]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Hi there,
I have a straight forward question on deployments. Here is the scenario:
I have a large number of machines (around 200) onto which I have to
deploy our client partition. The catch is this:
a) these machines (NT4.0 Workstations) are on a WAN, (64K line)
b) the client partition is huge (about 12MB),
c) and we would like to do regular upgrades to the system.
I looked at Applets and it is not going to buy us anything. What would
have helped is if Forte could compress the distribution files before
sending them across the WAN. As far as I know, this is not a feature of
Forte (we are using 3.0.G.2). I guess there must be something that I'm
overlooking.
Is there anyone out there willing to share his knowledge on this subject
with us?
Regards.
Jaco Fouche
==============================================
Jaco Fouché - MD Systems (PTY) Ltd
LOCAL INTERNATIONAL
Tel: 011 454 3760 +27 11 454 3760
Fax: 011 454 3780 +27 11 454 3780
Cell: 082 451 3242 +27 82 451 3242
Internet: [email protected]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Inter-pbx sig' bandwidth over the WAN

need to interconnect two similar pbx's across a wan.Using PRI. i vaguely recall reading the signalling channel (CCS) needs to be uncompressed. Is this configured or default. Any examples ?

See this doc for what (I think) you are looking for:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1834/products_feature_guide09186a00800e9761.html#wp1019465
Aaron

Edge deployment using Public Addresses.

I find acquiring information on my particularly question difficult to find so I am posting here.
Microsoft technet discusses a suggested egde topology with single consolidated edge and Public Ip addresses.
From my understanding would be to assign the 3 public Ip addresses directly to the External facing NIC of the edge server.
SO this would mean that the external facing subnet of the DMZ would have to be a public assigned subnet. Therefor the Firewalls interface within this subnet would also have to be a public address.
I would like to ask if anyone has set this up on a cisco ASA before?
I understand its better to use NAT in a single server scenario. BUT. I see that when using the planning tool and create a NATed edge network, it asks for the Reverse Proxy to have a Public IP address. Which would mean that I would therefor need 2 External
DMZ subnet zones.
Can anyone clarify this for me?
Thanks.

Hi kinesm,
AS for your questions.
1. Which means that the Interface of the external firewall that sits within the DMZ would ALSO require a public IP address within that subnet.
It’s easy to understand. You need two Public IP addresses at least , one for Edge in DMZ(Recommend three IP addresses), one for Firewall. You should know if a server in DMZ, all the traffic
should through the firewall.
Also the two Public IP addresses should be in the same subnet.
For example:
222.222.222.222
255.255.255.248
222.222.222.223
255.255.255.248
(222.222.222.216 ~ 222.222.222.223 are in the same subnet)
2. Also why in the planning tool when I tell it I will be using NAT addresses, why does it assign a PUBLIC IP address for the Reverse Proxy?
It’s a TMG or ISA server with Reverse Proxy.
Best regards,
Eric

File Sharing in virtualbox using NAT

I have Win2K installed as a guest machine in virtualbox. I have no problems accessing the Internet using NAT with the NIC set to DHCP.
Will I be able to access the Arch host (and vice-versa) using NAT networking or will I have to setup bridge-networking? I know there is a wiki on virtualbox, but it didn't seem to cover this other than giving more detailed instructions on bridge-networking. At this point I only want to know if file sharing is possible using NAT before spending too much time on it. If its not possible I may go back to VMware-server which seemed to get broken after the last kernel upgrade.
Thanks

Although you have allowed open access to all users to save files in that directory, it's a pointless excersise as you have no system in place to allow one user to overwrite another users files. There's more to multiuser file access than simply making a place where you can all save files. Files created by each user have a unique user ID attached, and without a Group system in place for your users, OSX will (correctly) deny overwrites. You're going to need to learn about the unix filesystem and the chgrp function, and establish your users as being members of a Group before they can all overwrite each others files. It's much too large a topic to get into here, but a spot of research will sort you out. A word of caution though - filelocking is not a trivial subject and you probably want to consider other options - what happens if someone screws up a project and overwrites it 'behind the back' of another user?

Multi-Master Replication over the WAN

DS verison: 5.1 sp1
Did any one implement multi-master replication across the WAN or different IP subnets?

Sun does mention about DS 5.2 being better than DS 5.1 in WAN based Muli-Master replication with respect to replication performance. I wanted to see if any one out there had implemented (or even played with this topology in their labs) it with out any major hickups.
Thank you!

404 : While accessing the portal with IP address

Hi,
When i acces the portal using server ip address (http://ip/irj/portal") instead of servername i am getting 404 error.
Do i have to do any setting to acess the portal using IP address?
Regds,
Srinivas.

Hi Srinivas
Try putting the port of your portal
http://<ip>:<port>/irj/portal
good luck
Joshua
Message was edited by: Josue Cruz

Hi , i think i will have a look an te AVI tools, what i am most interested in is looking at sending voice across the internet in real time.

Hi Kyle, what i am looking at is sending voice in real time across the internet using labView functions i dont want to bring in another application and make things more complicated.

I am not sure exactly what you are asking. If you have a previous post which Kyle answered I would suggest just posting back to it.
However if you want to send data across TCP in LabVIEW there are some TCP VIs that are quite easy to use. You open a connection, write and read from that connection, and then close it. However data send over TCP using the TCP VIs is sent as a string, not as "voice" however I am not sure what data type you are currently using.

Communication across different subnets using DatagramSocket class

Hi All
I've written a simple client-server program to send broadcast messages across the network and receive them back after some processing. The problem is that the messages sent by the program are not received across the subnets i.e. my program broadcasts messages only on the one subnet. I am using DatagramSocket class. Is there any way to communicate across the subnets using DatagramSocket class or will I've to use the some other class like MulticastSocket?
Thanks in advance
Neeraj

neejain wrote:
The problem is that the messages sent by the program are not received across the subnets
Your router/gateway is probably set up to drop udp. This is usually done by network administrators to prevent things like broadcast storms across large networks. If you have admin access to the router, you should be able to change it to allow routing of udp.
God bless,
-Toby Reyelts

Trying to set up Directv GenieGO using Airport Extreme. Getting error message: DHCP range entered conflicts with the WAN IP Address of your base station. How do I resolve the conflict.

Trying to configure an Airport Extreme manually. After I enter the IP Address of the GenieGo along with the rest of information required I am getting the following error message when I click update:
DHCP range entered conflicts with the WAN IP address of your base station.
How do I resolve the conflict?

You cannot use the same range on LAN and WAN if you are routing.. it must be different.. and you should not be routing at all.
The AE should be in bridge mode. NO DHCP settings at all.

Analyzer 7 Across the WAN using NAT addresses

Similar Messages

Maybe you are looking for