Change path inside and outside areas in vector mask

Hey all PS/CS lovers,
     That's probably an easy one, yet, being rather new to this, I have to ask.
     So I have this vector mask on a layer, and while singing along to the Beatles I'm editing paths on it. Well, all it is is a rectangle to reframe a photo, nothing crazy. But that rectangle is too big to my taste - so I just draw another, smaller one inside it and plan on deleting the first one.
     But ! The second, smaller rectangle is viewed as a takeout from the first one (so its inside is considered "black" mask-wise, i.e. cut out, and its outside is "white", i.e. kept in). Thus, when deleting the first, bigger one, the entirety of the picture appears, except for the part I want in the middle, that's cut out ! Yes - that's the opposite of what I want.
     Now, I tried using the path selection tool and changing the fill color of the rectangle, but you can't ... So, how do you invert inside and outside of a closed path ? Thanks in advance !
Charles

So, how do you invert inside and outside of a closed path ?
Select the Path with the Path Selection Tool and in the Options Bar change the Path Operations setting.

Similar Messages

I am writing a book and need to have the margins alternating left and right pages, so that there is sufficient margin for the binding. I have tried different inside and outside margins, the same inside and outside margins, facing pages, changing the maste

I am writing a book and need to have the margins alternating left and right pages, so that there is sufficient margin for the binding. I have tried different inside and outside margins, the same inside and outside margins, facing pages, changing the master, and I cannot get the margins to alternate at print time. The larger margin is always on the left. Can anyone please help me on this, as I have spent hours and lots of ink.

Set up as facing pages with a larger inside margin.

Problem of routing between inside and outside on ASA5505

I have a ASA5505 with mostly factory default configuration. Its license allows only two vlan interfaces (vlan 1 and vlan 2). The default config has interface vlan 1 as inside (security level 100), and interface vlan 2 as outside (security level 0 and using DHCP).
I only changed interface vlan 1 to IP 10.10.10.1/24. After I plugged in a few hosts to vlan 1 ports and connect port Ethernet0/0 (default in vlan 2) to a live network, here are a couple of issues I found:
a) One host I plugged in is a PC, and another host is a WAAS WAE device. Both are in vlan 1 ports. I hard coded their IP to 10.10.10.250 and 10.10.10.101, /24 subnet mask, and gateway of 10.10.10.1. I can ping from the PC to WAE but not from WAE to the PC, although the WAE has 10.10.10.250 in its ARP table. They are in the same vlan and same subnet, how could it be? Here are the ping and WAE ARP table.
WAE#ping 10.10.10.250
PING 10.10.10.250 (10.10.10.250) from 10.10.10.101 : 56(84) bytes of data.
--- 10.10.10.250 ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss
WAE#sh arp
Protocol Address Flags Hardware Addr Type Interface
Internet 10.10.10.250 Adj 00:1E:37:84:C9:CE ARPA GigabitEthernet1/0
Internet 10.10.10.10 Adj 00:14:5E:85:50:01 ARPA GigabitEthernet1/0
Internet 10.10.10.1 Adj 00:1E:F7:7F:6E:7E ARPA GigabitEthernet1/0
b) None of the hosts in vlan 1 in 10.10.10.0/24 can ping interface vlan 2 (address in 172.26.18.0/24 obtained via DHCP). But on ASA routing table, it has both 10.10.10.0/24 and 172.26.18.0/24, and also a default route learned via DHCP. Is ASA able to route between vlan 1 and vlan 2? (inside and outside). Any changes I can try?
Here are ASA routing table and config of vlan 1 and vlan 2 (mostly its default).
ASA# sh route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 172.26.18.1 to network 0.0.0.0
C 172.26.18.0 255.255.255.0 is directly connected, outside
C 127.1.0.0 255.255.0.0 is directly connected, _internal_loopback
C 10.10.10.0 255.255.255.0 is directly connected, inside
d* 0.0.0.0 0.0.0.0 [1/0] via 172.26.18.1, outside
interface Vlan1
nameif inside
security-level 100
ip address 10.10.10.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
interface Ethernet0/0
switchport access vlan 2
All other ports are in vlan 1 by default.

I should have made the config easier to read. So here is what's on the ASA and the problems I have. The ASA only allows two VLAN interfaces configured (default to Int VLAN 1 - nameif inside, and Int VLAN 2 - nameif outside)
port 0: in VLAN 2 (outside). DHCP configured. VLAN 2 pulled IP in 172.26.18.0/24, default gateway 172.26.18.1
port 1-7: in VLAN 1 (inside). VLAN 1 IP is 10.10.10.1. I set all devices IP in VLAN 1 to 10.10.10.0/24, default gateway 10.10.10.1
I have one PC in port 1 and one WAE device in port 2. PC IP set to 10.10.10.250 and WAE set to 10.10.10.101. PC can ping WAE but WAE can't ping PC. Both can ping default gateway.
If I can't ping from inside interface to outside interface on ASA, how can I verify inside hosts can get to outside addresses and vise versa? I looked at ASA docs, but didn't find out how to set the routing between inside and outside. They are both connected interfaces, should they route between each other already?
Thanks a lot

Set up a Foscam wireless webcam through BaseStation 7.71 inside and outside of my home network.

I bought a X10 wireless Security Camera last year and it took me months to figure out how to set it up to access the video both inside my home and through my iPhone remotely, even on my Mac at my office. I thought I would provide my process of getting this done to help those trying something similar. Yes the X10 camera works as a Foscam Camera. I am very happy with the result. The biggest challenge was Port Forwarding the Apple Basestation but now that I figured it out, it is easy.
"How I set up a Foscam wireless webcam through Apple Hardware and software to work inside and outside of my home network seemlessly."
What you need:
-Foscam or compatible camera, (iPad or iPhone or Mac or better all three)!
-Service Provider Router.
-Apple Base Station, Extreme or Express. 7.71
-'ip scanner' (software for Mac, app for iPad/iPhone.
-CCTV Camera pros port scanner app for iPhone.
First REMOTE ACCESS
Go to www.dyndns.org and set up an account. For about $20/yr you can have 30 host websites. Write down the user name and password as you will need it later.
You need this service to have a stable website to see your camera outside your network later as 'ip' addresses can change but this site will remain stable.
Then after you log back in, create a 'host website' from the menu. When you are creating the host site, dyndns will give you lots of web address choices or you can create your own. Just pick one. Also, you will need the 'ip' of the server where the camera will be. Luckily the dyndns website tells you this, just select it. Write down the web address, click create and you are done this part.
Next you need to set up the camera.
CAMERA SET UP
Using an Ethernet cable, connect your Apple Base Station to your web cam.
You will need to run 'ip scanner' to see the 'ip' address for the web cam. Write down the 'ip'. Select it, then select "open device in". Pick browser.
A web page will be launched and you are given 3 choices. I picked the middle, 'push browser'. You are then asked for the user name and password for the camera. By default the user is 'administrator' and there is no password. Just click log in. You now will see a menu along the left, at the bottom it should say 'device management'. Select that. Another page will show and there are several important things to do here.
1. Alias - give a name to the camera.
2. Set the time from a server.
3. Users - set a user and password. Write this down as you will need it.
4. Basic network. Either check to 'Obtain IP from DHCP Server' or specify an IP you want to stay the same. You need the subnet and main DNS server and the Gateway (same thing like 192.168.0.?or 10.0.0.? or 172.16.0.?)
Decide on a port you want use. Write this down. The camera will reboot, you will need to log in. In the browser enter IP then : the port#. Like 192.168.0.?:80 you will need the camera user name and password.
5. Wireless-scan for the nearby network list. Pick your network, enter your password, click submit. It will reboot.
6. UPnP-check to use.
7. DDNS Service (this allows remote viewing) pick DynDns.org
Enter your DynDns user name and password.
Enter the long DynDns Host website you wrote down. Click Submit. It will reboot.
APPLE Basestation set up
Run Airport Utility on Mac or iPad or iPhone.
Tap basestation, tap edit, tap advanced, tap Port Settings, tap 'new entry', in description enter a name, enter HTTP port number you picked when setting up the camera in all 4 spots: public and private UDP and TCP. Enter the IP address you picked in the camera setup. Click done and again until the Basestation updates.
Run the CCTV app, pick 'tools', pick 'Port forwarding Checker'. Enter the port you selected to see if it shows open then you are good. If not go back through the steps.
Set up Foscam App on the iPad and iPhone.
Run App, tap Add Camera,
Label- enter a name
User- Camera user name
Password- Camera
Local camera address-the IP address eg 192.168.0.?
Port- the one you specified.
If it connects you will see the chain turn green.
Remote address- the long one from DynDns.
Port- the one you specified.
If it connects you will see the chain turn green.
Tap done.
If everything is entered correctly it will all work.
Trouble shooting, make sure the IP address for the camera is listed correctly in the Apple Router. If it changes on the network, just go into the Airport Utility and update that. Also make sure the dyndns address is correctly listed in the Camera set up.
If questions, just let me know.

Ok.. you have to work out the way you are going to access the TC..
There are basically three methods..
1. Direct access using AFP.. you need a static public IP and the TC as the main internet router.. then you need to turn on internet access and password the hard disk. The college has to have port 548 open.
If you do not have a static public IP then you can use ddns service but there is no client in the TC.. so you will have to figure out a way to update the service.
2. Use BTMM with icloud. This is the Apple method. It actually uses vpn..(the vpn is locked to apple use only but it is not available to end user).. The requirements are 7.6.1 firmware and lion or ML on a Mac computer. I am not sure of the ports because the link to the Apple cloud is separate from the vpn to your home system.
3. VPN.. that means you need to bridge the TC and use a decent quality vpn modem / router or combo thereof.
VPN are not for the faint of heart.. it can take a lot of work to get running but offers the best security.. you will need to change the network equipment in your house more than likely.. using a pc / mac as a vpn server is possible.. but messy.
There are also easy ways to at least access the home computer.. teamviewer for example. This is likely blocked by the college though.
Double NAT is where you put a router on a private IP behind another router on a private IP.. that makes port forwarding close to impossible.

I got an iPhone 4 a week ago. I synced my iTunes once and now I want to change what albums and playlists are on my phone. When I try to do this, iTunes threatens to remove all my apps. Of course, Apple's support is no help.

I got an iPhone 4 a week ago. I synced my iTunes once and now I want to change what albums and playlists are on my phone. When I try to do this, iTunes threatens to remove all my apps. Of course, Apple's support is no help. I know there has to be a way to add and remove whole albums and playlists like on the music tab on the device, so please don't tell me to uncheck/delete everything from my iTunes that I don't want and re-sync. That is not helpful and not the issue. How do I get around it threatening to remove all my apps?

On the MacBook, go to System Preferences > Security & Privacy > Privacy > Advanced > Disable remote control

Fcpx 10.2 export changed the shape and position of my shape masks. Ideas?

Fcpx 10.2. Upon export it changed the shape and position of my shape masks. It also created "cordoroy" looking screens where some photos had been. Looking for help.

Hi Tom,
Thanks for the response. My project is 1280x720 29.97 fps. Here's a shot of the corduroy. The first time I exported using the "export" choice. I rebooted and exported again choosing "master" file. The settings were the same on both- 1280x720, 29.97, H.264. The corduroy went away the second time. The masks are still off. I'm using them throughout my project. They are closer to center on both of the quicktime movie outputs than on my screen in the project. I could send pics.

Internal Order: Change Co Code and Controlling Area

Hi,
We have setup internal order -> <i><b>customised</b></i> order type, to store data regarding our projects. The setup involves choosing a Controlling Area which will inherit the Company Code (1:1 mapping between controlling area & co code) once we Create the Order (transaction KO01).
The field Company Code is greyed out and not maintainable.
There is no posting involved. Just for storing data related to the projects (cost centre is defined though).
A problem occurs when our client asked to change the company code field from A to B. I used transaction KO02 and tried to change it from "Environment" -> "Set CO area" but the change is not reflected later once I go into the Master Data screen.
Since the Company Code field is already greyed out in the Master Data screen, I also can't make changes there.
I tried changing the Screen layout (i.e. Order layout) of the field selection in IMG, but also not working.
Does anyone has any other ideas? Many thanks in advance.
Kind regards,
Nik

Since, you have one to one relationship between company code and controlling area, you will not be able to change the company code in order master.
If there are multiple company codes attached to same controlling area, then you need not enter company code in the order master. For this you will need to make company code as optional field in the field status for order type.This will facilitate posting from multiple company codes (attached to same controlling area) to the same order.
If company code is entered and some postings takes place then system will not allow you to change the data.
Regards
Rakesh Pawaskar

Duplicate files inside and outside of iphoto

Hi there
When I first set up my new mac I had a folder of about 20Gb of photos organised into different folders, transfered from my old PC. I started to import them into iPhoto one folder at a time. After a couple of folders were imported - each with subfolders mainly organised by year, I realised that iPhoto was duplicating the folders into the iPhoto library. I then changed the import setting to keep the photos in their original location for the import and relocated the remaining photos.
I thought all was well but now I have about 8Gb of duplicated photos; one set inside of iPhoto with metadata, faces, events, locations tagged, rotated and cropped, and the other set out in a central photo storage file just as standard files.
My question is how can I now get rid of the duplicates outside of iphoto so that I only have single versions of the photos, the images inside of iphoto being the master file to keep. Are there any clever programs or is the manual method the only way to go?

You need to decide what app you want to use to manage your photos.
IPhoto and Lightroom (and Apple's Aperture) are all variations on a theme. Though they work in different ways they are all Digital Asset Managers. They all want to import your photos, ”own“ or manage them for you, while also giving you some (in the case of iPhoto) or a whole lot (in the case of Lr or Aperture) processing power as well.
The process you're attempting - where Lightroom and iPhoto share the originals - will not work really.
Why?
Edits and processing done in Lr will not be available to iPhoto. It simply will not know about changes you make there. So when you go to use these images elsewhere all you will see are the originals or edits you have made via iPhoto.
The reverse is also the case. No edits made in iPhoto will be available in Lr.
This includes metadata like keywords and so on.
For iPhoto to have access to the Lr processed images you will need to export them from Lr and then import them to iPhoto.
My personal suggestion is that you use the more powerful application to manage your pics.
I don't think there's a migration path from iPhoto to Lr. (There is from iPhoto to Aperture). I would suggest that you start over from scratch and export the originals from iPhoto (File -> Export: Kind - Original) and then import to Lr.
There is at least one plug-in that will facilitate moving selected pics from Lr to iPhoto for sharing etc and it can be found here
http://www.suffix.be/blog/lightroom-iphoto-export
There may be others - Google is your friend
I really dislike the way iPhoto hides all the images making it very difficult to access an image with a different program.
It's not at all difficult. Want to access the images in a Photo Editor?
You can set Photoshop (or any image editor) as an external editor in iPhoto. (Preferences -> General -> Edit Photo: Choose from the Drop Down Menu.) This way, when you double click a pic to edit in iPhoto it will open automatically in Photoshop or your Image Editor, and when you save it it's sent back to iPhoto automatically. This is the only way that edits made in another application will be displayed in iPhoto.
However this will +not work+ for Lightroom as it is not a Photo Editor, as mentioned above.
Other than that, your iPhoto Library is available in every Open... dialogue in the entire OS.
There are many, many ways to access your files in iPhoto:
*For Users of 10.5 and later*
You can use any Open / Attach / Browse dialogue. On the left there's a Media heading, your pics can be accessed there. Command-Click for selecting multiple pics.
Uploaded with plasq's Skitch!
(Note the above illustration is not a Finder Window. It's the dialogue you get when you go File -> Open)
You can access the Library from the New Message Window in Mail:
Uploaded with plasq's Skitch!
*For users of 10.4 and later* ...
Many internet sites such as Flickr and SmugMug have plug-ins for accessing the iPhoto Library. If the site you want to use doesn’t then some, one or any of these will also work:
To upload to a site that does not have an iPhoto Export Plug-in the recommended way is to Select the Pic in the iPhoto Window and go File -> Export and export the pic to the desktop, then upload from there. After the upload you can trash the pic on the desktop. It's only a copy and your original is safe in iPhoto.
This is also true for emailing with Web-based services. However, if you're using Gmail you can use iPhoto2GMail
If you use Apple's Mail, Entourage, AOL or Eudora you can email from within iPhoto.
If you use a Cocoa-based Browser such as Safari, you can drag the pics from the iPhoto Window to the Attach window in the browser.
*If you want to access the files with iPhoto not running*:
For users of 10.6 and later:
You can download a free Services component from MacOSXAutomation which will give you access to the iPhoto Library from your Services Menu. Using the Services Preference Pane you can even create a keyboard shortcut for it.
For Users of 10.4 and later:
Create a Media Browser using Automator (takes about 10 seconds) or use this free utility Karelia iMedia Browser
Other options include:
1. *Drag and Drop*: Drag a photo from the iPhoto Window to the desktop, there iPhoto will make a full-sized copy of the pic.
2. *File -> Export*: Select the files in the iPhoto Window and go File -> Export. The dialogue will give you various options, including altering the format, naming the files and changing the size. Again, producing a copy.
3. *Show File*: Right- (or Control-) Click on a pic and in the resulting dialogue choose 'Show File'. A Finder window will pop open with the file already selected.
Regards
TD

Why is align stroke inside and outside not working correctly.

I'm trying to add a stroke that's aligned to the outside of my path. It appears to be offsetting the stroke *and* moving achor points at the same time. It does the same kind of thing when I align the stroke to the inside. It is fine when i align the stroke to center. Please see my screenshots. The one that is offset to the top-left is the align-inside one. Why is this happening? How do I fix it? Help!

It's also here

Cleaning iceBook Insides and Outside

Greetings:
In my Amiga 2000 days you could literally clean your keyboard with you in the shower! How things have changed! I'd like to to know what products or common cleaners are safe to clean the shell of your iBook, and the best way to clean the keyboard with crud and tiny dead critters under the keys? Also, since I can't tell whether any dust bunnies accumulated inside it, how can clean out the guts without cracking the case?
Thanks for any tips!
James Greenidge

To clean the case, including the wrist rests, try a _Mr. Clean Magic Eraser_. Turn off the iBook. Unplug it from the adapter and _remove the battery_. Dampen just one end of the Mr. Clean Magic Eraser and squeeze any excess water out of it so that it is barely damp. Use it to remove dirt and smudges from the case and wrist rests of the iBook.
If the keys are very dirty, I might risk running the Mr. Clean Magic Eraser over them, too.
Allow the iBook to dry completely (overnight) before reinserting the battery and turning it on again.
As far as any further deep cleaning of the keyboard, that could be a risky proposition. There's no way to "clean out the guts without cracking the case." There are small vacuum cleaners made for electronics that may help clean out the keyboard. You could try putting a nylon stocking over the end of your vacuum cleaner hose to reduce suction a bit (and prevent sucking the keys off and into the vacuum cleaner) and using that on the keyboard as an alternative.
A Q-Tip dampened with warm water could be tried between the keys, but I've never tried that, myself, and would resort to it only if the keyboard were so dirty that I was contemplating replacing it.
Good luck.

How to allow a subnet for a number of hosts to surf internet and ping from inside and outside in ASA in GNS3?

after tried to setup access list, it return drop in packet tracer and can not ping outside router too
is there an configuration example to show allow a subnet of class C IP address to surf internet in Cisco ASA ?
assume all works in GNS3, expect initial network setup too
inside outside
router A 192.168.1.2 <--->switch <---> 192.168.1.1 ASA 192.168.1.4 <---> switch <---> router B 192.168.1.3
ASA version: 8.42
when i try the following command,
ASA
conf t
interface GigabitEthernet 0
description INSIDE
nameif inside
security-level 0
ip address 192.168.1.1 255.255.255.0
no shut
end
conf t
interface GigabitEthernet 1
description OUTSIDE
no shutdown
nameif outside
security-level 100
ip address 192.168.1.4 255.255.255.0
no shut
end
conf t
object network obj_any
subnet 0.0.0.0 0.0.0.0
nat (inside,outside) dynamic interface
end
conf t
access-list USERSLIST permit ip 192.168.1.0 255.255.255.0 any
access-group USERSLIST in interface inside
end
Router A
conf t
int fastEthernet 0/0
ip address 192.168.1.2 255.255.255.0
no shut
end
Router B
conf t
int fastEthernet 0/0
ip address 192.168.1.3 255.255.255.0
no shut
end
ASA-1# packet-tracer input inside tcp 192.168.1.1 1 192.168.1.4 1
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.1.0 255.255.255.0 inside
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: inside
output-status: up
output-line-status: up
Action: drop
<--- More --->

current config can not ping, one of packet tracer allow all, another packet tracer drop
can not ping between Router A and Router B
ASA-1# packet-tracer input inside tcp 192.168.1.2 1 192.168.3.3 1
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.3.0 255.255.255.0 outside
Phase: 2
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 3
Type: NAT
Subtype:
Result: ALLOW
Config:
object network DYNAMIC-PAT
nat (inside,outside) dynamic interface
Additional Information:
Dynamic translate 192.168.1.2/1 to 192.168.3.4/311
<--- More --->
<--- More --->
Phase: 4
<--- More --->
Type: IP-OPTIONS
<--- More --->
Subtype:
<--- More --->
Result: ALLOW
<--- More --->
Config:
<--- More --->
Additional Information:
<--- More --->
<--- More --->
Phase: 5
<--- More --->
Type: FLOW-CREATION
<--- More --->
Subtype:
<--- More --->
Result: ALLOW
<--- More --->
Config:
<--- More --->
Additional Information:
<--- More --->
New flow created with id 14, packet dispatched to next module
<--- More --->
<--- More --->
Result:
<--- More --->
input-interface: inside
<--- More --->
input-status: up
<--- More --->
input-line-status: up
<--- More --->
output-interface: outside
<--- More --->
output-status: up
<--- More --->
output-line-status: up
<--- More --->
Action: allow
<--- More --->
ASA-1# packet-tracer input outside tcp 192.168.3.3 1 192.168.1.2 1
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.1.0 255.255.255.0 inside
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: inside
output-status: up
output-line-status: up
Action: drop
<--- More --->
Drop-reason: (acl-drop) Flow is denied by configured rule
<--- More --->
ASA-1#
ASA-1# sh run |
: Saved
ASA Version 8.4(2)
hostname ASA-1
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface GigabitEthernet0
description INSIDE
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
interface GigabitEthernet1
description OUTSIDE
nameif outside
security-level 0
ip address 192.168.3.4 255.255.255.0
interface GigabitEthernet2
shutdown
no nameif
no security-level
<--- More --->
no ip address
<--- More --->
<--- More --->
ftp mode passive
<--- More --->
object network DYNAMIC-PAT
<--- More --->
subnet 192.168.1.0 255.255.255.0
<--- More --->
access-list 101 extended permit icmp any any echo-reply
<--- More --->
access-list 101 extended permit icmp any any source-quench
<--- More --->
access-list 101 extended permit icmp any any unreachable
<--- More --->
access-list 101 extended permit icmp any any time-exceeded
<--- More --->
access-list ACL-OUTSIDE extended permit icmp any any
<--- More --->
pager lines 24
<--- More --->
mtu inside 1500
<--- More --->
mtu outside 1500
<--- More --->
icmp unreachable rate-limit 1 burst-size 1
<--- More --->
no asdm history enable
<--- More --->
arp timeout 14400
<--- More --->
<--- More --->
object network DYNAMIC-PAT
<--- More --->
nat (inside,outside) dynamic interface
<--- More --->
access-group ACL-OUTSIDE in interface outside
<--- More --->
timeout xlate 3:00:00
<--- More --->
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
<--- More --->
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
<--- More --->
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
<--- More --->
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
<--- More --->
timeout tcp-proxy-reassembly 0:01:00
<--- More --->
timeout floating-conn 0:00:00
<--- More --->
dynamic-access-policy-record DfltAccessPolicy
<--- More --->
user-identity default-domain LOCAL
<--- More --->
no snmp-server location
<--- More --->
no snmp-server contact
<--- More --->
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
<--- More --->
telnet timeout 5
<--- More --->
ssh timeout 5
<--- More --->
console timeout 0
<--- More --->
threat-detection basic-threat
<--- More --->
threat-detection statistics access-list
<--- More --->
no threat-detection statistics tcp-intercept
<--- More --->
<--- More --->
<--- More --->
prompt hostname context
<--- More --->
no call-home reporting anonymous
<--- More --->
call-home
<--- More --->
profile CiscoTAC-1
<--- More --->
no active
<--- More --->
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
<--- More --->
destination address email [email protected]
<--- More --->
destination transport-method http
<--- More --->
subscribe-to-alert-group diagnostic
<--- More --->
subscribe-to-alert-group environment
<--- More --->
subscribe-to-alert-group inventory periodic monthly
<--- More --->
subscribe-to-alert-group configuration periodic monthly
<--- More --->
subscribe-to-alert-group telemetry periodic daily
<--- More --->
crashinfo save disable
<--- More --->
Cryptochecksum:8ee9b8e8ccf0bf1873cd5aa1efea2b64
<--- More --->
: end
ASA-1#

Replacing subPathItems in a vector mask

It seems one can fairly easily replace a Layer’s Vector Mask with another one’s, but I fail to see if I can simply replace the Vector Mask’s subPathItems with a new array.
A pathItem’s subPathItems being read only this seems improbable, but still …
And on a related note: Do any of you know if one can create a Vector Mask without first creating a pathItem proper?
Because currently I have the Scripts create Paths, create Solid Color Layers with the Paths selected and then delete the Paths again, which seems to be a longish route.
Thanks for any input.

You can create a empty vector mask with a script.
    var desc13 = new ActionDescriptor();
        var ref10 = new ActionReference();
        ref10.putClass( charIDToTypeID('Path') );
    desc13.putReference( charIDToTypeID('null'), ref10 );
        var ref11 = new ActionReference();
        ref11.putEnumerated( charIDToTypeID('Path'), charIDToTypeID('Path'), stringIDToTypeID('vectorMask') );
    desc13.putReference( charIDToTypeID('At '), ref11 );
    desc13.putEnumerated( charIDToTypeID('Usng'), stringIDToTypeID('vectorMaskEnabled'), charIDToTypeID('RvlA') );
    executeAction( charIDToTypeID('Mk '), desc13, DialogModes.NO );
But as you pointed out pathItems are read only so it doesn't do much good unless you want the script to create a blank vector mask for the user to edit after the script is done.
Because you can't edit an existing path, the way you are creating vector masks is the only way I know. New path, mask from path, remove path.
The only way I know to 'edit' an existing path with scripting is to read the existing path converting into SubPathInfo and PathPointInfo which can be edited. Then delete the old path and create a new one from the edited data.
For a vector mask you add the extra steps. i.e. you read/convert the vector mask's path data, delete the mask, create a new path with the edited points, make a mask from that new path, then delete the new path.

ASA 5510 traffic from inside to outside

Hello,
I'm working on a basic configuration of a 5510 ASA.
inside network of 192.168.23.0 /24
outside network 141.0.x.0 /24
config is as follows:
interface Ethernet0/0
nameif OUTSIDE
security-level 0
ip address 141.0.x.0 255.255.255.0
interface Ethernet0/1
nameif INSIDE
security-level 50
ip address 192.168.23.1 255.255.255.0
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
access-list OUTSIDE_access_in extended permit icmp any any
access-list OUTSIDE_access_in extended permit tcp any interface OUTSIDE eq https
access-list INSIDE_access_in extended permit icmp any any
global (OUTSIDE) 1 interface
nat (INSIDE) 1 192.168.23.0 255.255.255.0
access-group OUTSIDE_access_in in interface OUTSIDE
access-group INSIDE_access_in in interface INSIDE
route OUTSIDE 0.0.0.0 0.0.0.0 141.0.x.57 1
In the LAB When I plug a laptop into the outside interface with address 141.0.x.57 I can ping it from a laptop from the inside interface and I can even access the IIS page. However, when I connect the ISP's firewall into the outside interface with the same address that I used the testing laptop with, I cannot seem to be able to access the outside world.
I can ping from the ASA's outside interface (x.58, to the ISP's x.57), but I cannot ping from the inside 192.168.23.x to it or access anything.
So traffic between inside and outside interface is not going through when in live setup. However, when in the lab it works fine.
Any ideas please?

Version of FW:
Cisco Adaptive Security Appliance Software Version 8.2(1)
Device Manager Version 6.3(1)
Output of Packet-Trace Command is:
SDH-PUBLIC-ASA(config)# packet-tracer input INSIDE icmp 192.168.23.10 8 0 1xpacket-tracer input INSIDE icmp 192.168.23.10 8 0 141.$
Phase: 1
Type: ACCESS-LIST
Subtype:
Result: ALLOW
Config:
Implicit Rule
Additional Information:
MAC Access list
Phase: 2
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow
Phase: 3
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in   141.0.x.0      255.255.255.0   OUTSIDE
Phase: 4
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group INSIDE_access_in in interface INSIDE
access-list INSIDE_access_in extended permit icmp any any
Additional Information:
Phase: 5
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 6
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect icmp
service-policy global_policy global
Additional Information:
Phase: 7
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
Additional Information:
Phase: 8
Type: NAT
Subtype:
Result: ALLOW
Config:
nat (INSIDE) 0 192.168.23.0 255.255.255.0
match ip INSIDE 192.168.23.0 255.255.255.0 OUTSIDE any
    identity NAT translation, pool 0
    translate_hits = 104, untranslate_hits = 0
Additional Information:
Dynamic translate 192.168.23.10/0 to 192.168.23.10/0 using netmask 255.255.255.255
Phase: 9
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
nat (INSIDE) 0 192.168.23.0 255.255.255.0
match ip INSIDE 192.168.23.0 255.255.255.0 OUTSIDE any
    identity NAT translation, pool 0
    translate_hits = 107, untranslate_hits = 0
Additional Information:
Phase: 10
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 11
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 141, packet dispatched to next module
Result:
input-interface: INSIDE
input-status: up
input-line-status: up
output-interface: OUTSIDE
output-status: up
output-line-status: up
Action: allow

Inactive Vector Mask - CS5

I created a vector mask, selected the area I wanted to work with, previewed it as I was refining my shape. It was all fine. However, I am not sure what I did that now both the inside and outside of the shape are greyed out and I can no longer see my vector mask as I orignally saw it. I am not sure if there is something I can do to have my vector mask again. Thanks in advance.

See if the overlap mode (path operation) has changed or you combined paths that weren't combined before.
Select the Path Selection Tool and in the tool options bar you'll see 4 overlap modes.
(the paths(s) need to be selected for the buttons to be active)

Bug related to making a vector mask in 2014 release of Photoshop CC?

I am following these instructions:
1. Create a work path.
2. Save the work path.
3. Select the layer I want to mask.
4. Select the saved path in the Paths panel.
5. Choose Layer>Vector Mask>Current Path.
The result is a vector mask the HIDES the contents inside the selected path.
I expected the contents inside the path to be the visible area, as it was in previous versions.
(See the attached screen capture to see the result I'm getting.

What is your current setting of this?
-Noel

Change path inside and outside areas in vector mask

Similar Messages

Maybe you are looking for