ASA5510 - Accessing Anyconnect via other local Interface
Hello - I hope someone can help.
I have a scenario where there is an ASA5510 configured as follows:
Interface0 = Outside
Interface1 = LAN
Interface2 = DMZ
Interface3 = unused
Running ASA version 8.2[1]
All network operations are fine, as are the IPSEC tunnels to other branch offices, and the incoming SSL VPN accessed via the IP address assigned to the external adapter.
My problem is that I have a device on the DMZ that needs to access the AnyConnect service hosted on the external adapter so that it can access LAN resources. When I try accessing it, I see the following errors appearing in the debug log:
3
Dec 03 2012
12:10:50
710003
[DMZ client address]
51031
[AnyConnect ExternalAddress]
443
TCP access denied by ACL from [DMZ client address]/51031 to DMZ:[AnyConnect ExternalAddress]/443
If you look closely, it suggests an ACL issue from the DMZ client to the external AnyConnect IP address BUT it suggests the Anyconnect IP address is on the DMZ interface.
Has anyone seen this before?
Thanks in advance for any help.
In this scenario, you will have to enable Anyconnect on the DMZ interface for letting DMZ users to establish an Anyconnect tunnel and allow access of LAN resources since from DMZ or any other LAN interface you cannot directly VPN on External interface.
For reference, check https://supportforums.cisco.com/message/3801168#3801168 as similar discussion has happened in it as well.
Regards,
Anuj
Similar Messages
-
I have a National Lottery online account but for a while now i cannot access it from my MacBook. I can access it via other pc's and laptops and via my iphone. I have been on to the NL helpline and they say the issue is with cookies and my MacBook. Help!
Hi Josh,
Thanks for taking the time to contact us here a Novation for technical support. Lets continue to correspond via email so we can get your issue resolved.
Thanks.
Mike Towns -
Accessing bean using its Local interface
Hi,
I have a problem accessing a bean using its local interface in J2EE1.3 environment on J2EE test server. I have two beans, one trying to access other, residing in two different ears. During deployment, after I select "Local" interface option in EJB-refs tag of the standard deployment tool of J2ee, it does not show me the bean-name in the "Enterprise Bean Name" combo-box. When I put the name of the actual bean in the box and try to deploy it, gives the null-pointer exception for the above tag as it does not find the corresponding ejb to be referred.
Is it necessary to have a client bean and actual bean to be in the same ear for local interface access? The specifications says that both the beans must be in the same container that does not mean same ear, right????
Thanksi am having the exact same problem now.
did anyone solve this.(you can email [email protected]) -
How do I access RunState via the C interface?
I'm utilzing TestStand by controlling it via a C++ program and TestStand as a COM module. I haven't been able to find how to access the RunState property. Thanks.
-G-Hey Grasshopper,
I'm not certain, but it sounds like you are building a User Interface in C++ to operate your sequences, much like the one you can find at C:\Program Files\National Instruments\TestStand 3.1\OperatorInterfaces\NI\Full-Featured\C++ using MFC. If this is the case, then the way to get access to the RunState property is by utilize UIMessages. You should be able to do a search on the forums or in the Developer Zone and find some more information and sample code about UI Messages, but in a nutshell, you'll send a message to the User Interface that you are building by utilizing the ActiveX adapter (Action Step) in a TestStand sequence (The Method is PostUIMessageEx and can be found in the Thread class). When you send the data you will want to send ThisContext via the ActiveX parameters. You will then use the ApplicationMgr Control in your UI to register the UserMessage event and then create a function to be called when this event does occur. In this function, you can get the Sequence Context from the ActiveX parameter and at that point can handle it just like any other code module to get and set items within your locals, runstate, or whatever you want. That should give you a start, let me know if you into major issues.
Adam B. -
How to administer an Access database via web-based interface?
There are times when I need to edit a database record to do something my CMS wasn't designed to do, so I have to manually edit it. Normally I just ftp the Access mdb file to my pc, make edits, and reupload the mdb file and hope nobody updated the database in the meantime. Does anyone know of a web-based database admin system that will allow me to edit Access data? Sure would be nice if I could install something on the server that would allow me to edit any datasource there and not have to have a separate, customized interface for each datasource.
Thanks for looking, BillI would recommend naming that page with an extension that the web server will not serve. Rename it to use it and then rename it back when done.
Or just put access restrictions on it via the web server, so one needs to authenticate to the system before using it.
Or stop using Access and use a decent DB: Access is not appropriate to be used as a DB for a web application. But that might not be an option.
Adam -
Hi,
the EJB 2.0 allows multiple entity beans to have container-managed relationships among themselves. It accomplishes this by introducing a local model which uses local interfaces, in addition to a remote model that uses remote interfaces.
Now my question: Is it possible to have a relationship between a EJB of one container and a EJB of another container over remote interface? I do not like to use a local interface for that task.
so far,
ChristianYou asked: Is it possible to have a relationship between a EJB of one container and a EJB of another container over remote interface? I do not like to use a local interface for that task.
First, via a local interface you will never be able to access an EJB in another EJB container (as others already said).
But second: Maybe you want to let your EJB interfaces to extend both the EJBObject and the EJBLocalObject interfaces?
But most of all I do not understand why you "do not like to use a local interface for that task.". I would be quite happy if I could use local EJB interfaces as often as possible because access to them is said to be 2.000 times faster than via normal/remote interfaces, see my topic
"Inter-EJB calls 2000 times faster by using LOCAL EJBs - great! But how?" that I posted today.
Good luck,
Thomas. -
Vi with access via both user interface and external communication
Hi,
Maybe a little bit too general but I'll risk it:
It concerns a project to stear a tensile machine. Data acquisition is relative straightforward via a few analogue and digital channels.
The interaction of the operator with the tensile machine can be done at two levels:
1. Directly via an user interface on the computer next to the machine. Here I would typically use a state machine in combination with event structures.
2. Remotely, via TCP protocol. Here different clients (external program, written in C) should be able to connect to the LabVIEW program and send simple commands such as 'read force', 'write force', 'read status', ...
It is relatively easy to setup a small daemon that accepts TCP connections from multiple clients. Furthermore I would put the commands from the clients into a message queue (using a producer/consumer structure).
I was wondering what the best method is to allow both the user interface and the external clients to stear the machine (e.g. using an event structure to respond to interactions via the user interface, and create user events from the commands of the clients to access the same actions).
Steven
LV8.5Hi VPS,
one way could be to build your TCP receiver in one while loop and your event structure in another while loop. if you want to send a command from the event structure you can send this over tcp to the TCP receiver.
Another way could be to use a queue or notifier to send the commands from the event structure and the TCP receiver to another while loop which work with the received commands.
Mike -
WLC 5508 Cant get access via the Mgmt Interface
Hello everybody,
i have a wlc 5508 (version 7.0.98.0) , if i'm pinging the service port interface or try to get access via this interface, everythings is fine, but if cant get access via the management interface. (but its pingable)
the crazy thing is, that the LAP joined successful ti the wlc, but the Upgradetool (converting an AP to an LAP) doesnt work, because the tool cant reach the mgmt interface of the wlc.
there are no ACLs, which are blocking the traffic between wlc and my computer
Does anyone has an idea, what i've configured wrong???
regrads,
RoccoInterface Name Port Vlan Id IP Address Type Ap Mgr Guest
wlan1 1 16 172.16.2.10 Dynamic No No
management 1 2 172.16.1.10 Static Yes No
wlan2 1 220 172.16.3.10 Dynamic No No
service-port N/A N/A 10.75.100.99 Static No No
virtual N/A N/A 1.1.1.1 Static No No
and my Pc is in the 172.16.4 subnet
i have no access to the switch port, where the controller is connected to, but i know that this port permits access to the vlans which are used -
Managing ASA5510 using ASDM via internal interface
Hello
I am currently managing an ASA5510 using ASDM through the management port but I would like to manage the ASA through the internal port.
My concern is that I thought I remembered reading someplace that if you setup an internal port for management that it can't be used for anything else. Is this correct?
I only configured one internal port and it is the path to my LAN. I would hate to configure the port for management only to find that I disconnected my firewall from my internal network in the process. Can I use my one and only configured internal port for both ASA management and route from my LAN thru the ASA firewall?
I currently have the management port set to 192.168.1.1 and my internal interface is 10.1.1.1. If I open ASDM and connect thru the management port and select Configuration/Device Management/Management Access/ASDM/HTTPS/Telnet/SSH
select "ADD"
select access type "ASDM/HTTPS"
select interface "internal"
IP Address "10.1.1.0"
Mask "255.255.255.0"
Will that give me access to ASA management thru my internal network but cripple my network access to the ASA?
Sorry if this is confusing... I don't know how else to phrase it.
Thanks
EdHi
it sounds like a better plan than opening up for each and every unit on the inside :).
But if you have a old laptop or something like that I would state that setting that up with a syslog server and use that to manage the firewall would be a even better option.
that way you would get logs and a management station.
there are several syslog servers that are free and I like to use grep that is also free to filter information.
http 10.1.1.52 255.255.255.255 inside
will make the 10.1.1.52 the only server to work with asdm
but you will have to remove the old http 10.1.1.0 255.255.255.0 inside statement.
If you find the answers helpful please rate.
good luck
HTH -
ClassCastException by using Local Interface of EJB in other, but local EAR
Hi,
I get a ClassCastException if I try to cast the EJSWrapper-Class returned from local EJB Lookup to the interface it implements.
The environment I use is WSADIE 5.1.1 with integrated Testenvironment.
I have defined two EARs. One with a Web-Application and one wich contains the EJB to call from the WebApp. Both run in the same appserver instance wich means both run in the same JVM and i should be able to use Local Interface of the EJB.
The EJB should use Libraries from the Server Environment while the WebApp uses newer Libs than the Server Environment offers(eg axis-rpc,wsdl4j,saaj). The Classloader-Policy of the EAR with the WebApp is set to PARENT_LAST while the Classloader-Policy of the EAR with the EJB is set to PARENT_FIRST.
I do a Lookup by using an EJB-Local-Reference. The returned object is an EJSLocalStatelessHome-Object, wich implements my LocalEJBInterface. But if i try to cast to Object to this interface a ClassCastException occurs.
The Classes of the EJB are packaged as follows:
EJBName.jar contains the EJB-Impl class, the Serverside Implementations for RMI/IIOP interaction an EJSWrapper classes. This jar is packaged with the EJB-EAR.
EJBClient.jar contains the Local- and Remote-Interface classes and the Stub-classes for EJBHome and EJB-Implementation. This jar is packaged wich both EARs, because of the interfaces, wich are needed in both projects.
The Classloader of the EAR with the WebApp has no access the jar with the EJB-Impl, the generated Ties- and EJSWrapperclasses because it is located in only the EJB-EAR. But the interface-class is contained in the WebApp-EAR as described above.
The exact Exception is as follows:
java.lang.ClassCastException: com/ibm/wsrf/EJSLocalStatelessBPEAdapterHome_c2546ef5 incompatible with com/ibm/wsrf/BPEAdapterLocalHome
java.lang.Throwable.<init>(Throwable.java)
java.lang.Throwable.<init>(Throwable.java)
java.lang.ClassCastException.<init>(ClassCastException.java:53)
org.tempuri.ResourceDiscoveryService.DiscoverySoapHttpBindingImpl.getResourceEPR(DiscoverySoapHttpBindingImpl.java)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java)
... The EJSLocalStatelessBPEAdapterHome_c2546ef5 implements the BPEAdapterLocalHome interface.
Please, can anyone give me a hint how to solve this problem?
Thanks in advance, MichaelProblem solved!
The different EAR contained each an own copy of the jar with the local and remote interfaces of the EJB. The Problem is caused by the separate classloaders of the EARs in an application server. Each EAR Classloader loads his own version of the interface classes. Is the same class loaded by different classloaders, the JVM handles this classes as different classes. An example if you create an instance of a class in one classloader and try to reference the created instance by the same class from another classloader, the association will fail, because of different classloaders in the same JVM.
The solution in an application server where you have deployed two projects and want to use local interfaces is, store the interfaces(and only the interfaces) in an directory, where it is found by the parent classloader of the EAR classloaders. Remove the Jar with the interface from the EARs. The EAR Classloaders will then search in the their parent classloader for the interfaces. The interfaces will be loaded by the parent classloader and will recognized as compatible by the JVM.
Greetings, hope this helps help others!
Michael -
Problem accessing local interface methods
Hi all,
I have problems accessing local interfaces of entity beans in OC4J.
My application consists of a session bean as a facade for two local entity beans.
Everytime I try to execute methods on the local interfaces for the entity beans, I receive an exception: "java.lang.InternalError: Illegal removing from cache".
When debugging the application everything seems to be fine until the method calls on the local interfaces (lookups, create methods etc OK). I can even see that the local interface method is acually executed when performing a System.out...! But the method doesn't return to the client (session bean). Instead I revieve the exception above.
I found a similar problem on the orion mail archive (http://www.mail-archive.com/[email protected]/msg17754.html). But there they seem to have problem with removing beans. For me, removing beans works fine too.
Any suggestions would be appreciated.
/johan
[email protected]Hi all,
I have problems accessing local interfaces of entity beans in OC4J.
My application consists of a session bean as a facade for two local entity beans.
Everytime I try to execute methods on the local interfaces for the entity beans, I receive an exception: "java.lang.InternalError: Illegal removing from cache".
When debugging the application everything seems to be fine until the method calls on the local interfaces (lookups, create methods etc OK). I can even see that the local interface method is acually executed when performing a System.out...! But the method doesn't return to the client (session bean). Instead I revieve the exception above.
I found a similar problem on the orion mail archive (http://www.mail-archive.com/[email protected]/msg17754.html). But there they seem to have problem with removing beans. For me, removing beans works fine too.
Any suggestions would be appreciated.
/johan
[email protected] -
Accessing the local interface of an EJB
Hello.
I am using Jdeveloper 11G and it's integrated application server. Using the Jdeveloper wizards, i created a simple stateless session EJB which has both a local and a remote interface (code listed below). I then used the "Create test client" option to create a simple test client.
The way these classes and interfaces are set up by the wizards, i am using the remote interface. However, i would like to lookup the local interface and use that instead. But i just can't figure out how to lookup the local interface of the EJB. I have tried pretty much every variation i can think of but still no success. Is there anyone out there who can give me a hand? Is there a way to see the lookup name in the integrated WLS server?
My remote interface looks like this:
@Remote
public interface SessionEJB {
and the remote one:
@Local
public interface SessionEJBLocal {
And my EJB class:
@Stateless(name = "SessionEJB", mappedName = "NewTestApplication-SessionEJB")
public class SessionEJBBean implements SessionEJBLocal, SessionEJB {
My test client does this lookup that works fine:
public class SessionEJBClient1 {
public static void main(String [] args) {
try {
final Context context = getInitialContext();
SessionEJB sessionEJB = (SessionEJB)context.lookup("NewTestApplication-SessionEJB#model.SessionEJB");
}Hi,
Your lookup in your client would look something like
SessionEJBLocal sessionEJB = (SessionEJBLocal)context.lookup("NewTestApplication-SessionEJB#SessionEJBLocal ");
The part before the # in the lookup is your mapped name from your session facade, and after the # you have your package, like com.oracle. and ending it with your local interface name.
Just remember that if your client is not actually running inside the application server container (which with the generated test client it wouldn't be, its a java standalone app with a main method), you will not be able to use the local interface, and you would have to look up remote interface. This can be done in exactly the same way as the above line of code, just replacing the local interface parts with the remote interface's. Hope this helps.
Drikus
Edited by: Drikus Britz on Jun 3, 2009 8:46 PM
Edited by: Drikus Britz on Jun 3, 2009 8:50 PM -
Netflix access fails via ATV2 yet all other access works
All of a sudden I can't access Netflix via the ATV2. I can via my iMac and 2 other laptops within the house.
I can access all other media (youtube for example) via the ATV2 so I know it isn't a wireless or connectivity issue.
I even reset my password and logged in via iMac yet ATV2 still fails.
What gives?I am having the exact same problem. I can use everything but Netflix. Apple had me reset settings, then a restore, and then finally I took the ATV2 to the Apple Store in Memphis where they wiped everything and started over. It worked in the Apple Store, but when I got home, same old problem. I can stream on my MacBook Air, but not ATV2. I'm about ready to scrap it and buy a Roku.
-
Accessing Local Interface EJB from Web Container Oracle App Server 9.0.4
Hi,
I am developing a struts based small application, which calls a EJB which uses Local Interface from Struts ActionClass.
I am getting NameNotFoundException. The exact exception is s mentioned below.
05/03/29 16:15:49 javax.naming.NameNotFoundException: LoginRSL not found
The deployment descriptors are as mentioned below.
=============
ejb-jar.xml
<?xml version = '1.0' encoding = 'windows-1252'?>
<!DOCTYPE ejb-jar PUBLIC "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 2.0//EN" "http://java.sun.com/dtd/ejb-jar_2_0.dtd">
<ejb-jar>
<enterprise-beans>
<session>
<description>Session Bean ( Stateless )</description>
<display-name>LoginRSL</display-name>
<ejb-name>LoginRSL</ejb-name>
<local-home>loginApp.model.LoginRHome</local-home>
<local>loginApp.model.LoginL</local>
<ejb-class>loginApp.model.LoginRSL</ejb-class>
<session-type>Stateless</session-type>
<transaction-type>Container</transaction-type>
</session>
</enterprise-beans>
<relationships/>
<assembly-descriptor>
<container-transaction>
<method>
<ejb-name>LoginRSL</ejb-name>
<method-name>*</method-name>
</method>
<trans-attribute>Required</trans-attribute>
</container-transaction>
</assembly-descriptor>
</ejb-jar>
orion-ejb-jar.xml
<?xml version = '1.0' encoding = 'windows-1252'?>
<!DOCTYPE orion-ejb-jar PUBLIC "-//Evermind//DTD Enterprise JavaBeans 1.1 runtime//EN" "http://xmlns.oracle.com/ias/dtds/orion-ejb-jar.dtd">
<orion-ejb-jar>
<enterprise-beans>
<session-deployment name="LoginRSL"/>
</enterprise-beans>
</orion-ejb-jar>
I also tried adding following code to web.xml
web.xml
<ejb-local-ref>
<ejb-ref-name>LoginRSL</ejb-ref-name>
<ejb-ref-type>Session</ejb-ref-type>
<local-home>LoginRHome</local-home>
<local>LoginL</local>
<ejb-link>LoginRSL</ejb-link>
</ejb-local-ref>
It is quite evident that it is not able to lookup the JNDI name.
Can someone throw light on this? If someone has working sample of this, can you mail it to [email protected]?Nipun,
WebLogic and OC4J are not the same thing. That's like saying Oracle and SQL Server are the same thing -- or C++ and Java are the same thing.
I recall a posting to a forum (don't remember if it was this one), where the poster was complaining that some feature of the application server he had previously used, was not supported by OC4J. Turned out that the feature he was referring to, contradicted the J2EE specification -- which is why it wasn't available in OC4J. In other words, he didn't like the fact that OC4J was more compliant with the J2EE specification than his "other" application server. Go figure!
So, if you haven't already done so, I suggest you verify that this feature of WebLogic is something that complies with the J2EE specifications -- before expecting OC4J to support the same feature.
And if it's not clear, from the specifications, then every vendor is free to implement this feature (or not).
So if it turns out that WebLogic is a more appropriate application server for you -- then why not just stick with it (and forget the others)?
Good Luck,
Avi. -
Problem with Local Interfaces (WSAD 5)
I built an Entity Bean with Local Interface and a Remote Interface (apperently they both have the same JNDI name in WSAD)
and when I look up for the name from other Session Bean (same EJB group) and I try to cast it to the local interface there is a classCastException.............
HELP MENidhi
I had the same problems as you that went away. If you have both remote and local interfaces defined, and your remote inerface can be accessed via JNDI lookup using (say) "ejb/sessionbean/stateless/HelloHome", then you can access the local intercafe using "local:ejb/ejb/sessionbean/stateless/HelloHome".
The URL http://localhost:9080/UTC/initialize?port=2809 is very useful to browse the JNDI tree. Just expand "Local EJB beans" and position your mouse over the item of interest. The JNDI lookup name will echo in the bottom (solid) frame of the browser. The only problem is that the jndilookup name will appear (mistakenly) as local:/ejb/ejb/stateless......, just get rid of the first forward-slash to make it look like local:ejb/ejb/stateless....
Hope this helps
Somnath
Maybe you are looking for
-
my macbook pro keeps freezing when I am on the internet. How can I find out what the issue is and fix it?
-
"Node &1 with predecessor 0 in hierarchy "&3" not found"
Hi, sometimes I am facing error "Node &1 with predecessor 0 in hierarchy "&3" not found" when I filter my result set to single values of one characteristic's hierarchy. I read SAP note 713630 but it doesn't fit because we are on BW3.5 / Support Packa
-
WIRELESS CONNECTION NOT ALLOWED
My WRT160N router will not allow me to connect via WI-FI. On the Linksys EasyLink Advisor...it will not even allow me to select "Wireless Connection" as an option under "Select a Connection Method. HELP!
-
TabIndex for DateFields broken
I am having a problem with tabbing skipping "DateFields" even though tabIndex has been properly set. I've searched online and found a number of others stating the same issue but with no resolution. AS2.0 Flash 7/8 Publshed from Flash CS3 Mac OSX, Fir
-
Sapdba gives error after new QAS system build from PRD
Hello All, I brought up a new QAS system by copying oracle and sap executables, followed by restore from online backup. The system is up and running and sap is also up. When i try to execute sapdba, I get the follwoing error: <b>/usr/lib/pa20_64/dld