ASA Software architecture Doc.

where can i find ASA documents related software architecture ?(inclued pictures)-_-
I have serched almost all of cisco.com , but couldn't find......

Son,
See the below links for what you are after:-
http://www.cisco.com/en/US/customer/products/ps6120/products_installation_and_configuration_guides_list.html
http://www.cisco.com/en/US/customer/products/ps6120/prod_configuration_examples_list.html
HTH>

Similar Messages

Tomcat software architecture

do you know where i can find tomcat's software architecture? architecture that is a drawing not words? If possibel do you also know where i can find the ejb or rmi software architecture? Dont know where the correct forum to place this so sorry if it is wrong thanks!

One option is to download the tomcat source and use one of these
tools to generate your own diagram:
http://www.cse.ucsc.edu/classes/cmps115/Fall02/tools/tools.html
This diagram...
http://www.onjava.com/onjava/2001/12/12/graphics/tc1.gif
...from this article...
http://www.onjava.com/pub/a/onjava/2001/12/12/openjms.html
...is probably too simplistic for your needs.
If class loader information is what you wanted to understand better,
there is a fantastic :-) ASCII diagram here:
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/class-loader-howto.html
Other than that, it appears to me your best bet is the Tomcat docs...
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/introduction.html
...including the API:
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/catalina/docs/api/index.html
No architectural diagrams, but you may want to make a request
to the Tomcat documentation folks (refer to the bottom of the
the "introduction" link above). Be sure to give more detail
about what kind of diagram(s) you think would be most helpful
(since your post was a little light on those details).
Good luck!

Software architecture to utilize XML DB

Hi,
We're using currently using Toplink 9.0.4 with an Oracle 9i DB.
I'm interested to find out what level of support there is in Toplink for the "new" XML DB features (in the Oracle 10g database for example).
The material I've seen so far on the Toplink developer preview suggests that Toplink will manage mappings from an object model to a XML representation.....but that XML representation is purely an "in-memory" - i.e. it does not generate the "SQL" to store objects in an XML DB.
There seems to be a gap in the way XML data is managed and the way Java domain models (and persistence ) are typically architected.
The way we craft our services at the moment is based upon Java objects which encapsulate a request. Changing the contents of a request (e.g. adding a new attribute), breaks existing implementations that utilize that service (because of Java's serialization model).
I'd like to define a service which takes a lump of metadata (passed as a generic object model, e.g. XML), but also allows that metadata to be evolving/variable/dynamic . The initial service implementation would look up a Java business object based upon the request information...include any transaction "attributes" from the request and persist it. Nothing new there, but what if I want to allow clients to attach "custom attributes" to their requests. The traditional model of request --> Java Business Object --> relational database seems to break down. Java Business Objects aren't typically very good at handling dynamic addition of properties.
Does there exist a software architecture that allows for Java Business Object "properties" to be dynamically attached and persisted.
It seems that the big push on XML is heading towards that goal....but at the moment I can't see how the pieces would actually fit together ......
Apologies that my ramblings are a bit wild!
Regards
Mike

TopLink 10.1.3 added XML support in three ways.
- Object-XML mapping - Support was added to be able to map Java object to XML documents. This allows for in-memory two-way conversion between object and XML, and usage with XML messaging and web services.
- Oracle XDB XML Type - Support was added to store a plain XML attribute of a Java object mapped in relational TopLink to an Oracle XDB XML type field.
- EIS - Support was added to allow mapping Java objects to XML records and Interactions in a non-relational EIS system through a JCA adapter that supports XML records.
From the sounds of things you may wish to:
Use TopLink OX to map your XML messages to your Java object model. For the dynamic XML content you could use a Transformation mapping in TopLink OX to store this dynamic content in a plain XML field in the object. You could then use Oracle XDB and the TopLink XMLType mapping to store this dynamic XML content in an XMLType field in the database.

Correct software architecture

Hello.
I´m designing a complex application and I don´t know what software architecture is the best. I have been reading the "LabVIEW Intermediate I: Succesful Development Practices" manual. Lesson 3 gives the reader a lot of options for software architecture selection, but, although it gives a lot of explanations, I can´t find the correct one (maybe I should use a combination of some of them).
The application runs in a PC. This application communicates with 4 controllers via CAN and with another one via Ethernet.
Both communications are very asynchronous because I have to read a lot of data but send only a few.
I have to receive a lot of data from the first controllers (CAN connection) and display a graph containing all data. Reception must be as fast as possible without losing any data. During graphic displaying time is important but not critical. In the other hand, is critical not to lose any data. I mean it is critical to collect all data although they aren´t displayed in "Real time".
I have to send some data to the controllers via CAN but in this case, transmision rate can be quite slow, so I guess it can run in another loop.
Communication with the other controller (via Ethernet) have a similar behaviour, but it don´t have to be as fast as CAN communication.
Finally, I have a User Interface where basically I change parameters and send them to controllers so there are no intensive processing or activity.
I have been thinking about using Master/Slave or Producer/Consumer architectures but I don´t know what architecture best fits my application.
Can you help me?
Thanks!

Personally, I would stick with the producer/consumer approach for this in order to seperate out the UI code from the rest.
Additionally, I would launch a background process (out-of-line via VI server, but I can't find any decent references at the moment) for each CAN so that the communication for each device can run in a seperate thread. This way if one blocks up or generates an error, it won't block the others. These VIs running in the background then send the acquired data via QUEUE to the main program.
I've used this approach in the past for communicating in parallel with many devices and have found it to be very good. The time required to get it up and running is maybe a bit longer, but in the end it's worth it.
So basically, 1 VI 1 device on the level closest to the hardware and then one UI VI which communicates with the others via QUEUEs.
That's my 2c, maybe someone else has a different approach.
Additionally, Sorry I can't give an example of what I mean, or a decent reference but y quick saerch of the forum didn't show me anything useful. With time it'll work, but I don't have too much time at the moment.
Hope this helps
Shane.
Using LV 6.1 and 8.2.1 on W2k (SP4) and WXP (SP2)

Java software architecture - discussion forum

Hello,
I am looking for a forum where you can discuss software architecture topics. There are so many questions and controversal discussions in this field. I did not really find a forum for that in particular.
A few days ago I posted a question in the RMI-forum (by the way: with no answers so far) where I wanted to know how to distribute data from one source to many receivers (on the same JVM and also on different JVMs). The receiver should be able to select the data they need (so it not always the same data which is send to the different listeners.
My idea/suggestion was, to create this interface for example
public interface DataReceiver extends Remote {
public boolean isRemoteObject() throws RemoteException�
public void transmitData(MyData data);
}With that interface I am able to use RMI to access Objects on other JVMs as well as Object on the same JVM which are only implementing this interface.
Now I implement an ArrayList with DataReceiver-Objects and if data changes I can call the transmitData(..)-method of all these objects.
Is this a good way to do this, or are there better solutions. I am open to any help here.
I think this is not only a RMI-topic, because maybe a JMS-solution would be maybe a better solution. And why use RMI at all? Maybe a network/socket solution is faster.
By the way: Does anyone have experience in building a trading system (for algorithmic trading) ?
thanks
tk

Hello duffymo...
duffymo wrote:
1) Speed
If I use the RMI/interface-solution you can directly use the methods of the interface without having some layer in between if you are in the same JVM. This should be faster as JVM. I have no idea what the situation is like if the receiver is not on the same JVM. How fast is the RMI/interface-solution? How fast is the JMS-solution?RMI? Same JVM? No you're not - each remote client runs in its own JVM. What are you talking about? If they'er all in the same JVM, there's no need for RMI. That's just JavaBeans and events.o.k....from the start....some clients are on the same machine AND some are on different ones. Speed is essential here, especially for the clients on the same machine (components of the server itself). In using this interface you could manage clients no matter whether they are local objects or remote objects. The object that have to notify the clients even do not have to know whether the clients are on the same JVM or the data is forwarded via RMI (or sockets).
If the objects are local the "notification" is just a method call (therefore very fast) and if they are remote you have a pure RMI remote object call. Which also should be faster than JMS.
JMS, by definition, is asynchronous. The publisher sends off the message and doesn't wait for any response. It also doesn't worry about who responds, because it's up to subscribers to indicate their wish to receive the message.yes, so there is a lack of control, what I said. There many tasks where you need this, but there also many tasks where you cannot use MOM.
I have no idea why you're so worried about speed in that case....because this is the requirement !!!! I mentioned it several times. We are talking here about milliseconds. Each detour of the data flow or every data-copying (within the memory or even worse to a database/HDD) takes valuable time.
2) Control
the RMI/interface-solution provides more control. How can you say "more control" when you admit that you don't know JMS?You can get the idea of MOM (i.e. JMS) very fast I think. And I dealt with the topic for some time. I am working in the computer science for 17 years now, believe me, I am able to learn.
I�ve explored the acknowledge-methods of JMS and they all are very slow. You can not use this in a system where speed matters. And you get no direct feedback. (If receiver A and B subscribed to some data, how to find out that both got the data? The sender do not know its receivers and this is one source of the lack of control)
And: If you send the data via a method call, you can get a return value and exceptions. You are free to do (almost) eveything you want. Do you really want to say, that with JMS you have this kind of control?
The sender knows all the clients and can check, whether they have really received the message or not. Maybe even provide some feedback. Can you provide this with JMS?The whole idea behind publish/subscribe is that the publisher doesn't have to know.
JMS can be set up to guarantee delivery.Yes....BUT: I want to find the best solution to a GIVEN problem.
I think here speed is really what matters. And that is the main reason against using JMS. Therefore I think I do not have to deal with JMS any more. The idea of JMS is nice, and I will use surely use it in the future for some other projects, but here - I think - I cannot use it.
and something to "guarantee delivery" ... this is not always a good thing. In some cases the receiver do not want to receive "old data". It depends on the task to accomplish.
3) Messages
in the RMI-Interface-solution I can send almost all kind of objects to the client (serializable). As I can see you can also send java-objects via JMS, but it seems to be more complicated (messages have to match a standard (header, properties, body)...).Read more about JMS. Ditto for it if you send an ObjectMessage.???
And I said.....?????
I think the RMI/interface-solution is not easy. For example you have to use threads (incl. thread-pool) to send all the messages almost at the same time. On the other hand I think it is not too difficult and maybe worth the effort.RMI isn't easy, and it's brittle. Change the interface and all the clients change.yes, I agree. I faced a lot of problems with RMI. But then provide some alternatives. JMS seems to be too slow (and I do not have the time for coding an interface on the socket basis).
I think it is difficult and not worth the effort. JMO, of course.
JMS is done for you. You don't have to maintain that code.except the performance problem
The most important points are here reliability and speed. JMS is more reliable than anything you'll ever write, and it's fast enough."fast enough" .... how can you decide. I can tell you, it is not fast enough.
and reliable: yes I would prefer JMS here. really! I have to admit while reading the specs I began to like JMS. really. There are some chat-functions to implement. This should be very ease with JMS.
I think going down an RMI road for this would be foolish. I wouldn't do it.Maybe there are some other solutions. I will keep looking. And I will check the frameworks stefan.schulz mentioned.
I am very sorry, but I think this is a justified question. And this comment is not very nice at all. There are so many different areas in the Java-World, and no one can be expert in every field. I think this is what all the forums are about. Share knowledge and help others. It's not intended to be mean or demeaning. I don't know if you're aware that excellent commercial trading systems exist, written by people that wouldn't have to ask about RMI or JMS to do it. The fact that you have to ask suggests to me that you aren't one of those experts. If you're doing this as a learning exercise, I'd say go for it. Do it both ways in that case and learn for yourself. Just be realistic about the end goal: it won't be a system that will be used in production anywhere.I am in the financial business for almost 8 years now. And there are many different areas and roles. You have no idea what the systems are like, that I usually design (and they are very, very successful). I think your comments are rather unrefined. And maybe you should think about beeing a little bit more open-minded. You cannot prejudge everything.
Software development is very complex because of all the tools and methods in this field. Knowing when to use a tool/framework/method... is as important as knowing when NOT to use a tool/framework/method/...Yes, and knowing your limitations is also very important.what is the purpose of this last sentence?!
I really want to know!
You are the one, who wrote
JMS is more reliable than anything you'll ever write, and it's fast enough.Without knowing anything about the system (that is not true: I mentioned several times that speed is very important).
Without knowing anything about me...
I really appreciate your contribution here (it really helps), but I stick to it: it is not very nice to goof on someone.
regards
tk

Software architecture for multiple device interface

Hi everybody!
I'm quite new at LabVIEW and I have a question regarding software architecture.
I have to program a software for controlling 3 motorized stage, a camera and a pump. I have separately programmed VI's that control each of them and now I would like to merge them in a single program and I don't know what is the best way to do it.
So far my sub-VIs are made of "event-based" structure that reacts when the users click on pushbuttons. Should I simply put all my sub-VIs (i.e. multiple event structures) in one big while loop? Is it the best way to do it? I've been looking for a while for references about that but I couldn't find any relevant ones and I would really appreciate your help. Also if you know good references please share them to me.
Many thanks!
Bests,
Julien

If you could give me more details or send me a link to references about it it would be awesome.
Sure, have a look at the attachement and see if it could be extended for your use?
It is a fairly simple implementation. I use it for reading for a number of different InputStream devices, such as FPGA DMA FIFO's, sockets, files, etc..
Br,
/Roger
Attachments:
LV2009 InputStreams.zip ‏1694 KB

What version of ASA software supports Netflow for traffic analyzing?

What version of ASA software supports Netflow for traffic analyzing. The version of software we are running on the PIX is 7.2.4. Bottom line, I need to know if it’s able to send any “netflow” data to an analyzer. I have not found anything that states it supports it.
Any help or guidance is appreciated.
Thanks!

What version of ASA software
supports Netflow for traffic analyzing. The version of software we are
running on the PIX is 7.2.4. Bottom line, I need to know if it’s able
to send any “netflow” data to an analyzer. I have not found anything
that states it supports it.
Any help or guidance is appreciated.
Thanks!
Hi,
Till now only Cisco ASA 5580 Series uniquely addresses the challenge of high-performance security event handling through advancements in Cisco's NetFlow v9 technology.
check out the below link
http://newsroom.cisco.com/dlls/2008/prod_012208.html
Hope to help
If helpful do rate the valauble post
Ganesh.H

Best practices, software architecture question

I'd like to offer a challenge to everyone in good software architectural design principles. Here is a mocked up version of some code that I've been working with, grossly over-simplified for this example. Take a look at the following classes and see if you can determine what the parentComponent will be for the JOptionPane that is displayed in the HardDriveController's constructor:
public abstract class Controller {
    private JFrame parentFrame = null;
    public void setParentFrame(JFrame parent) {
        this.parentFrame = parent;
    public JFrame getParentFrame() {
        return parentFrame;
public class MyGUI extends JFrame {
    private CPUController cpuController = null;
    public MyGUI() {
        setSize(300, 300);
        setVisible(true);
        cpuController = new CPUController();
        cpuController.setParentFrame(this);
    public static void main(String [] args) {
        new MyGUI();
public class CPUController extends Controller {
    private RAMController ramController = null;
    public CPUController() {
        ramController = new RAMController();
public class RAMController extends Controller {
    private BusController busController = null;
    public RAMController() {
        busController = new BusController();
public class BusController extends Controller {
    private HardDriveController hardDriveController = null;
    public BusController() {
        hardDriveController = new HardDriveController();
public class HardDriveController extends Controller {
    public HardDriveController() {
        JOptionPane.showMessageDialog(
                getParentFrame(), "Hey! We're inside the HardDriveController!");
}Did you figure it out? If you said the parentComponent will be null, then you are correct. The logic behind the code had intended to set the parentComponent to refer to MyGUI, but of course, the code does not behave as expected. Now this seems simple enough, but the legacy code I'm working with is full of many examples like this. Notice how MyGUI creates an instance of CPUController which creates an instance of RAMController, which creates an instance of BusController, etc...In some cases, I see a "Controller" class that is 8 or 9 "levels" deep with respect to one controller creating another, creating another, etc.
Let's say that I want the JOptionPane in the above example to have its parentComponent refer to the instance of MyGUI. The following code is one means of passing the reference down to the HardDriveController, while still using the getParentFrame() method in HardDriveController:
public class MyGUI extends JFrame {
    private CPUController cpuController = null;
    public MyGUI() {
        setSize(300, 300);
        setVisible(true);
        cpuController = new CPUController(this);
    public static void main(String [] args) {
        new MyGUI();
public class CPUController extends Controller {
    private RAMController ramController = null;
    public CPUController(JFrame frame) {
        setParentFrame(frame);
        ramController = new RAMController(frame);
public class RAMController extends Controller {
    private BusController busController = null;
    public RAMController(JFrame frame) {
        setParentFrame(frame);
        busController = new BusController(frame);
public class BusController extends Controller {
    private HardDriveController hardDriveController = null;
    public BusController(JFrame frame) {
        setParentFrame(frame);
        hardDriveController = new HardDriveController(frame);
public class HardDriveController extends Controller {
    public HardDriveController(JFrame frame) {
        setParentFrame(frame);
        JOptionPane.showMessageDialog(
                getParentFrame(), "Hey! We're inside the HardDriveController!");
}Note that the reason I'm calling the Controller class's setParentFrame() method in each extended class's constructor is that I want to ensure that any call to getParentFrame() in these classes will return a reference to MyGUI, and not null.
After this long description, I want to ask all you Java gurus the following question: What is the best means of offering the JOptionPane a reference to MyGUI? My solution passes a JFrame reference all the way down from the CPUController to the HardDriveController. Is this an "acceptable" solution, or is there a more elegant means of getting a reference to MyGUI to the JOptionPane (for example, modifying the MyGUI class to follow the singleton pattern)? Thanks for your input.

Proflux, One thing I failed to mention is that this is a very old codebase and the likelihood of the object graph being reworked is slim to none. I agree with you 100% that the dependency doesn't feel right. But I have to live with it. I mentioned the idea of using a singleton pattern. Here's a mock up of how that would look:
public class FrameRetriever {
    private static FrameRetriever instance = null;
    private HashTable frameHash = new HashTable();
    private FrameRetriever() {
    public static getInstance() {
        if(instance == null) {
            instance = new FrameRetriever();
        return instance;
    public void addFrame(JFrame frame)
        frameHash.put(frame.getTitle(), frame);
    public JFrame getFrame(String frameTitle)
        return (JFrame) frameHash.get(frameTitle);
public class MyGUI extends JFrame {
    private CPUController cpuController = null;
    public MyGUI() {
        setTitle("Test GUI");
        setSize(300, 300);
        setVisible(true);
        FrameRetriever.getInstance().addFrame(this);
        cpuController = new CPUController();
    public static void main(String [] args) {
        new MyGUI();
public class HardDriveController extends Controller {
    public HardDriveController() {
        JFrame parentFrame = FrameRetriever.getInstance().getFrame("Test GUI");
        JOptionPane.showMessageDialog(
                parentFrame, "Hey! We're inside the HardDriveController!");
}My only concern with this solution is that it couples the HardDriveController to MyGUI because we need to know the frame's title in order to get the frame instance. But at the same time, I won't have to add constructor arguments to any "in between" classes for the sole purpose of passing a reference down the object graph. Any thoughts?

Difference between n-layer software architecture and MVVM design pattern?

hello everyone,
I am not clear with this concepts of Software architecture pattern and design pattern.
I am developing an wpf application using MVVM. Now, my question is, does MVVM come under n-layered architecture?
or n-layer architecture and MVVM both are different?
Regards,
Rakesh.N
Rakesh murthy

"
Now my question is, i want to process the data which i get from database. where should i write that processing logic after getting the data from database? in model classes? or in view model classes?
The model is however the data comes from wherever it comes from.
If there is any processing after you get it then that would be in the viewmodel.
The viewmodel adapts your data to the view.
If it needs any adapting then the viewmodel does that, not the model.
EG here
protected async override void GetData()
ThrobberVisible = Visibility.Visible;
ObservableCollection<CustomerVM> _customers = new ObservableCollection<CustomerVM>();
var customers = await (from c in db.Customers
orderby c.CustomerName
select c).ToListAsync();
foreach (Customer cust in customers)
_customers.Add(new CustomerVM { IsNew = false, TheEntity = cust });
Customers = _customers;
RaisePropertyChanged("Customers");
ThrobberVisible = Visibility.Collapsed;
That logic is in a viewmodel.
in this context , in which layer the viewmodel and model classes are put under in n-tier architecture?
They're in two of the n layers/tiers.
Or they're in one.
Depending on how someone decides to classify a layer or a tier.
There is no absolute definition.
Why would you care?
Hope that helps.
Technet articles: Uneventful MVVM;
All my Technet Articles

What's the difference between 8.0 and 9.3 Cisco ASA software?

Is anyone show me the link with features of 8.0 and 9.3 Cisco ASA software? And what's the catch?

9.2(2.8) is what is known as an interim release of the software. Per Cisco interim release notes:
"They contain bug fixes which address specific issues found since the last Feature or Maintenance release. The images are fully supported by Cisco TAC and will remain on the download site only until the next Maintenance release is available. If you do not have a specific problem which is resolved by an Interim release, we recommend that you use the Feature or Maintenance release images.
Important: These images were not fully regression tested. Each individual fix was unit tested, and the image has had a limited amount of automated regression testing to confirm a baseline of functionality. Keep this testing status in mind if you decide to run them in a production environment. We strongly encourage you to upgrade to a fully tested Maintenance or Feature release when it becomes available."
Interim release notes are not generally published on the general product support page but if you go to the downloads page, there is usually a link to the release notes specific to the interim release.
Here is a link to the ASA 9.2(2.9) interim release notes. They describe the individual bug fixes rolled up in that release.

Multiple Vulnerabilities in Cisco ASA Software - Adivisory ID

Hello,
looking at this advisory: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa, in Software Versions and Fixes table all fixes releases are interim ones while mine is an ED release (9.1.5). Do you think I have to upgrade to the adviced interim release 9.1(5.12) ?
Thanks

If you're running a 5500 series and require a fix now then, yes - 9.1(5.12) is the version you should upgrade to.
You could also examine each vulnerability for applicability to your configuration and either decide it is not applicable or critical and/or implement compensating controls outside the ASA itself.
Finally, you could also accept the risk and leave your system unpatched.

Multiple Vulnerabilities in Cisco ASA Software Upgrade

Hello,
Has anyone upgraded their ASA's IOS to the recommended version as mentioned in this link -->
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa?
I have upgrade my 8.2 & 8.6 softwares to the new release versions (as recommended by Cisco), but whenever I use the reload command, my I get the following error:
*** --- START GRACEFUL SHUTDOWN ---
Shutting down isakmp
Shutting down webvpn
Shutting down sw-module
Shutting down File system
*** --- SHUTDOWN NOW ---
Write failed: Broken pipe
Any ideas as to why this is happening and any suggestions to answer this issue?
Thanks,
Arun

We will need to investigate this further.
Allow me sometime or if it is urgent please open a TAC case.
Mike

NAT / PAT config conversion from PIX v6 to ASA Software 8.3 and above

Hi folks,
I'm currently working on converting some PIX firewall configs to ASA and wanted to check I was on the right track, as I don't currently have the ASA's so doing the configs up front!
Everything seems straight forward in the conversion and I've used the pixtoasa tool for some of it, but NAT is implemented differently on 8.3, the PIX was running v6 and I'm used to doing mainly static one to one NAT in ASDM.
The scenario that the PIX has 3 NAT groups which are mapped to 3 separate addresses, where multiple hosts are behint the NAT / PAT. Current config of the PIX is as follows (obviously the names are defined further up the config so this is an extract of the PIX):
global (outside) 1 10.50.50.38
global (outside) 2 10.50.50.39
global (outside) 3 10.50.50.49
nat (inside) 0 access-list no-nat-all
nat (inside) 2 Host_1 255.255.255.255 0 0
nat (inside) 2 Host_2 255.255.255.255 0 0
nat (inside) 2 Host_3 255.255.255.255 0 0
nat (inside) 1 Host_4 255.255.255.255 0 0
nat (inside) 1 Host_5 255.255.255.255 0 0
nat (inside) 1 Host_6 255.255.255.255 0 0
nat (inside) 1 Host_7 255.255.255.255 0 0
nat (inside) 3 Network_3 255.255.255.0 0 0
ASA Config
After a fair amount of reading up on this topic, I'm looking at changing the ASA config in software version 8.3 to the following - Also is it easier to just do this in ASDM? Looks pretty easy from youtube videos but rather have something to put on the box when I arrive at site NAT wise as opposed to working it out there!
Define NAT Objects (outside IP addreses)
object network NAT_1_outside_10.50.50.38
host 10.50.50.38
object network NAT_2_outside_10.50.50.39
host 10.50.50.39
object network NAT_3_outside_10.50.50.49
host 10.50.50.49
exit
Define NAT Objects (inside IP addreses)
object-group network NAT_1_Objects
network-object Host_4 255.255.255.255
network-object Host_5 255.255.255.255
network-object Host_6 255.255.255.255
network-object Host_7 255.255.255.255
nat (inside,outside) dynamic NAT_1_outside_10.50.50.38
object-group network NAT_2_Objects
network-object Host_1 255.255.255.255
network-object Host_2 255.255.255.255
network-object Host_3 255.255.255.255
nat (inside,outside) dynamic NAT_2_outside_10.50.50.39
object-group network NAT_3_Objects
network-object Network_1 255.255.255.0
nat (inside,outside) dynamic NAT_3_outside_10.50.50.49
Any assistance with this would be appreciated.
cheers
Malcolm

I cannot make heads or tails of what your trying to accomplish in plain english first before looking at router setup.
If your talking about hosting servers behind the router on your private LAN (asssuming one public WANIP). Then one uses ACLs to control external users by individual OR GROUP and static NAT to port forward users to the correct server. One does not worry about groups of users for this direction of nat rule.
If what your saying is that you have a LAN and 3 different groups of users on the LAN that need to go to specific external IP addresses (external servers) then once again I would say you should ACLs to limit-authorize users and simply use NAT for port translation purposes. So conceptually speaking allow all lan users static nat, and then only allow group 1 hosts access to first external IP, group 2 hosts to second external IP, and group 3 hosts to third external IP. Note you will have to add a deny rule in firewall in general because normally higher to lower security interface is allowed by default.
Am I close......... before going any further need more details on the requirements nevermind setup.

Recommended ASA software for VPN ?

Hello -
We’re in the process of migrating our legacy VPN concentrators over to a pair of ASA5540s. The VPN connections we use today are L2L, RA, & easy VPN. I don’t want to jump up to 8.3 or higher just yet, due to the differences in the NAT, group-objects and ACL policies.
Would it be recommended to use an 8.2 code as standard for VPN endpoints?
Thanks -
John

You can very well use 8.2 .Right 8.3 onwards changes are there the way we configure NAT but its not very complicated to ignore latest version just because of NAT.
Just have a look on the link-http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.html.
You might miss some new aded features but if not using those then its all right to go for 8.2
Thanks
Ajay

Azure based software architecture

Hi,
I would like to create a web based application. It would be a kind of statistics. The user can upload files into the software, the data is processed and later the UI displays the processed data.
I realized that I need a web role for the website. A worker role to process the files. A database to store the processed data.
What I do not really know which communication channel to use. I've checked the service bus but the message is limited to 64 kb (48). There is a blob storage as well for larger files.
Should the web instance save the files into a blob and then notify the worker role via service bus that there is a new file to be processed?
Sorry for the beginner question but I would like to make sure that I start with the best architecture.
Could you please review my architecture and let me know whether it should be changed or not?
Thanks in advance.

uploading to blob storage and writing to a queue to notify a worker role or even an Azure WebJobs should be fine.
if you would like to look at common cloud design patterns, i suggest you have a look at :
Cloud Design Patterns

ASA Software architecture Doc.

Similar Messages

Maybe you are looking for