Cisco device supporting NAT for SCTP

Hello,
I can't think of a more proper category for posting this one. I'd like to know if there is a cisco router (or other device for that matter) which may offer NAT service for packet using the SCTP protocol, i.e. translate IP address and SCTP port contained in the packet (Source or Destination) into those configured on the device by the user.
Packet received by Device: Source IP a.b.c.d Source SCTP port: X1 Dest IP
translate the Destination IP and Port of SCTP packets sent from PCU to IP and Port set on Windows PC and vice versa.

Hello,
I can't think of a more proper category for posting this one. I'd like to know if there is a cisco router (or other device for that matter) which may offer NAT service for packet using the SCTP protocol, i.e. translate IP address and SCTP port contained in the packet (Source or Destination) into those configured on the device by the user.
Packet received by Device: Source IP a1.b1.c1.d1 Source SCTP port: X1 Dest IP w1.x1.y1.z1 Dest SCTP port: Y1
Packet exiting Device: Source IP a2.b2.c2.d2 Source SCTP port: X2 Dest IP w2.x2.y2.z2 Dest SCTP port: Y2
I thank you in advance for your responses.

Similar Messages

Non-Cisco devices support in LMS 4.1

Hi! How i could import third party MIB file for my devices? Is there any guide/manual for working with non-cisco devices?

Specifically which module are you talking about?
The most flexibile module is HUM which has support for third party devices
Most modules do not support non cisco devices, compelte list is here:
http://www.cisco.com/en/US/products/ps11200/products_device_support_tables_list.html
Regards
Farrukh

Device Support Packages for MARS 6.0.x

I am wondering if device support packages have been previously developed and posted for Radware Linkproof devices and Sidewinder Firewall devices

Hello Stephen
These are the only packages available (to my knowledge). This is besides the devices inherently supported in MARS.
http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=MARS&topic=Package%20Sharing&CommCmd=MB%3Fcmd%3Ddisplay_messages%26mode%3Dnew%26location%3D.2cc0474b
Regards
Farrukh

*** Conflicting device support info for DFM 3.2 ***

Hellows... ;-)
The helpful folks at TAC have been trying to troubleshoot one of my last and biggest pending items, which was the perceived inability of DFM to manage the devices on our network. This was a rather puzzling issue, as the other LMS components (CS, CM, RME, etc.) had no apparent issues whatsoever doing everything I asked them to do. After countless hours trying to troubleshoot DFM discovery errors ("questioned" with SNMP timeout despite the fact that all other LMS modules manage the same devices perfectly fine), an alert TAC engineer finally asked whether or not these devices were, in fact actually supported by DFM 3.2 - low and behold, a can of worms opened up!
The best current guess is rather confusing to me: There is a Cisco document out there suggesting that NONE of our devices are among those supported by DFM, while I did find another Cisco document that somewhat contradicts that notion. I’d like to think that this must be confusing (or at least very little known) to TAC as well, since nobody over there considered this a potential culprit for the first almost three weeks of troubleshooting around the globe during countless WebEx sessions. We basically went through everything imaginable (process monitoring with full debugging, complete removal and new installation of DFM only, complete clean-up and re-initialization of all module databases – and in the process tearing down most of my configurations and settings –, to a midnight conference call with developers in India).
The end result appears to be that DFM functionality will not be available to me – please confirm. What are the alternatives? Any rhyme or reason to Cisco not supporting these device types? Any plans to ever do so?
I run a variety of devices on my network, most of them being 3560G, 3560E and 6504E switches, pretty much bread-and-butter variety of basic Cisco devices. Why on earth would there even be a question that these are or are not supported by all LMS modules?
Argument AGAINST support in DFM 3.2:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/3.2/device_support/table/lms32sdt.html#3.2table
Argument IN FAVOR of support in DFM 3.2:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_device_fault_manager/3.2/device_support/table/dfm3_2os.html
According to that list, our 6504E with IOS is fully supported by DFM 3.2 with LMS 3.2, and so are the 3560G and 2950 series switches, the 2500 series router. However, the 3560E series switches are not listed as supported.
Are we seeing ghosts here or have other people had device support issues with DFM?
Thanks,
Matthias

Okay. I have a feeling the DFM Servers may be in a bad state. If you haven't done so already, install the consolidated patch for CSCtb87449 from http://tools.cisco.com/support/downloads/go/ImageList.x?relVer=3.2.0&mdfid=282640771&sftType=CiscoWorks+Device+Fault+Manager+Patches&optPlat=Windows&nodecount=2&edesignator=null&modelName=CiscoWorks+Device+Fault+Manager+3.2&treeMdfId=268439477&treeName=Network+Management&modifmdfid=&imname=&hybrid=Y&imst=N&lr=Y . Then REBOOT the server.
When the server comes back, try to rediscover your devices. If that fails, post the DFM.log and DFM1.log under NMSROOT/objects/smarts/local/logs.

Cisco 2921 destination NAT for transparent proxy

Hi All,
I can successfully destination-nat all outbound port 80 and 443 connections to a remote proxy server without issue, provided I use a PBR first to push any of these connections off to a Linux box.
In iptables its easy:
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to <proxy ip>:80
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j DNAT --to <proxy ip>:443
iptables -t nat -A POSTROUTING -o eth0 -d <proxy ip> -j SNAT --to <linux box IP>
I am however, trying to work out a way to do this without the need of a Linux box, except it seems at this stage that the Cisco 2900 series (IOS 15.0(1r)M16) is incapable of doing this. I just wanted to confirm from some of the experts in here if this is actually the case.
So to reiterate - I'm trying to intercept any outbound packets with destination port tcp 80 or 443 and change the destination IP to point to the remote proxy server.
The source address also needs to be changed to that of the outside interface of the router it is exiting (obviously).
Any ideas guys? I'm stuck.
Cheers,
Jordan.

Sounds like you need a route-map to change the next IP hop?
This would be the best way to do it which will also verify the remote proxy server is available as well.
ip sla monitor 1
type echo protocol ipIcmpEcho <ip address of your proxy server>
timeout 3000
frequency 3
ip sla monitor schedule 1 life forever start-time now
track 123 rtr 1 reachability
interface FastEthernet0/1
ip address <x.x.x.x x.x.x.x>
ip policy route-map REDIRECT-TO-PROXY
ip access-list extended webtraffic
! Deny traffic from your proxy server from redirecting
deny tcp host <ip address of your proxy server> any eq www
deny tcp host <ip address of your proxy server> any eq https
permit tcp <your ip network> <subnet mask> any eq www
permit tcp <your ip network> <subnet mask> any eq https
route-map REDIRECT-TO-PROXY permit 10
match ip address webtraffic
set ip next-hop verify-availability <ip address of your proxy server> 1 track 123
If you don't already have a NAT rule setup to translate this traffic to the outside here is an example of that:
Here is how my router is configured.
interface FastEthernet0/0
ip address dhcp hostname home-rtr-1
ip nat outside
interface FastEthernet0/1
ip address 10.235.x.x 255.255.255.252
ip nat inside
ip nat inside source list 10 interface FastEthernet0/0 overload
access-list 10 permit <your ip network> <your ip subnet>
HTH

Does ASR5000 support Radius for management?

Hello,
I'm trying to find out if Cisco ASR5K supports radius for management purposes? I have been able to find references to TACACS+ but nothing for radius.
thanks,
Aqdas

You may have already figured out. To the continuity of the thread, I am providing this answer.
ASR5K supports only TACACS+ AAA (so far) for management user access.
Regards
Aneesh

What is WebEx Support Manager for Firefox/Netscape/Chrome? I didn't install it!

I found a new program - Cisco WebEx Support Manager for Firefox/Netscape/Chrome v 6.5.4917 installed on June 29, 2009 , which I did NOT install! This program showed up after installing Revo Uninstaller for the first time today (July 3, 2010)! Is this part of Firefox? Or did a hacker install this onto my computer without my consent?
== This happened ==
Not sure how often
== I had to Clean Install Windows or my internet security program!

No, it's not a part of Firefox. It may be a plugin type of program for non-ActiveX browsers to provide functionality that ActiveX provides in IE.
http://www.webex.com/what-is-webex/index.html
You might want to ask them how it may have appeared on your computer.
http://support.webex.com/support

Apple mobile device support uninstall

I followed the directions to removing iTunes. I've been uninstalling Apple Mobile Device Support now for more than 2 hours. Is this normal? How do I work around this if it stays "stuck" like this. I was sucessful in uninstalling iTunes and Apple Software Update.. Can someone help?

I have been trying to uninstall all night. It would not uninstall. Finally I chose "repair" and then when that was done I uninstalled and it finally worked...

Cisco devices that support Multicast traffic?

Folks,
I am looking for list of Cisco devices that support Multicast traffic. Does anyone know how to get this information?
Thanks,
Nagesh

Cisco Feature Navigator

Cisco 4500 Chessis Switch with sup 7l-e supports VSS for long distance upto 40 Km

Hello Team,
hope you will find this massage in good health and spirit.
As per my understanding, Cisco 4507R+E with Sup-7L-E will supports VSS for long distance upto 40 Km, i have a scenario that there are two Data Centre of a Company at different graphical location (distance is 2 Km), both have separate network devices but distributed servers connectivity and all servers accessed from both location (some servers are placed in location 1 and some servers are at location 2), both location has separate ISPs link with segregation of internet connectivity (some users using internet from ISP-1 and other are using ISP-2), Core Switches of both location connected to each other via fiber (company fiber not ISP), at this moment Core Switches are configured with multi-group HSRP and next upgrade to VSS.
My concern is if Virtual Switch link (VSL) goes down (which will configure on company fiber link) what is the behavior of Switches, both are in Master mode and working standalone or behavior are different, please confirm and suggest for better.
Regards,
Ammar Ud-Din

does anyone reply me on this......

I am trying to update my iTunes to 10.5.1 so that I can upgrade my 3GS phone but am getting the following error message when trying to install the itunes:Install step failed: Run pre upgrade script for apple mobile device support. Contact software manufac

I am trying to update my iTunes to 10.5.1 so that I can upgrade my 3GS phone but am getting the following error message when trying to install the itunes: Install step failed: Run pre upgrade script for apple mobile device support. Contact software manufacturer for assistance. I am on a MacBook pro running 10.5.8 OS. Has anyone seen this before and how can I get it resolved.
Thanks for your help in advance....

Did you ever figure out the problem? "Contact Software Manufacturer"?? That sounds ominous... I've got the same issue and I'm pretty durn aggravated right about now....
Thanks!

Itunes update wont install --error is "run prescript for apple mobile device support"

I am running 10.5.8 and trying to update Itunes to 10.6. It hangs on the install and says "run prescript for apple mobile device support"....I've tried numerous times and it always reverts to this message. Ideas?

Sidenote--Itunes compatibility is my curent version of OS. I have an IPAD 3 that wont sync because of old verison of itunes

When will Adobe Reader for Mobile Devices support 3D PDF files?

When will Adobe Reader for Mobile Devices support 3D PDF files?

There are two basic varieties of LiveCycle XFA...Static XFA and Dynamic XFA, which are very different in terms of their future for potential support in Adobe Reader for iOS. Which variety of XFA are you using?
Static XFA uses the PDF markup language for content and form fields, so users can view the documents in Adobe Reader for iOS, but we currently do not properly handle filling, saving, and submitting those forms. I have improving our handling of Static XFA on my roadmap, but cannot offer any specific date yet (sorry, policy plus actual uncertainty). I know that there are some other apps that partially support Static XFA, though I do not know how complete their support is. If you can even open the XFA document in Adobe Reader for iOS, it is likely Static XFA.
Dynamic XFA is effectively a JavaScript application packaged inside a PDF wrapper, which generates layout and form fields via code and requires a significant engine to support this. Support for Dynamic XFA is unfortunately not currently on our roadmap for iOS due to the nature of the technology, and our concern that any implementation we try likely will not pass Apple's restriction against installing something that allows other "apps" to be downloaded and executed from within it. The LiveCycle team is exploring solutions for our enterprise customers wanting to use Dynamic XFA from mobile devices as part of their server offering, but I cannot offer any insight here. To my knowledge, there are no applications that handle Dynamic XFA other than Adobe Reader for the desktop platforms (Windows, Mac, Linux).
Dennis

ISE version 1.0 - Unable to get management access for cisco devices

Hi All,
I want to manage all cisco devices with read and write privilege with ISE 1.0.
Is this functionality is available in this version?
I configured the 2960 switch. On switch redius test is successful. When I telnet to the switch, it ask for username and password. But message is authorization fail. But on ISE shows authentication is successful.
Is it configuration issue or this feature is not available in this version?
Regards,
Hanumant

Hanumant,
You will have to create an authorization profile to send back the privilege level for the user:
Here is the attribute (cisco-av-pair) you will have to send back:
shell:priv-lvl=xx

My MacBook Air is in a support profile for one of my Apple IDs while all my other devices are in a support profile for a different one of my Apple IDs; how can I combine under one?

My MacBook Air is in a support profile for one of my Apple IDs while all my other devices are in a support profile for a different one of my Apple IDs; how can I combine under one?

Actually, this can be done without merging Apple IDs, as I found just by trying this out: I went into the support profile for the Apple ID that had only my Mac listed. I then chose to disassociate the Mac from that Apple ID. I signed out and signed in using my other Apple ID (the one with all my other Apple devices). I chose to add/register a new device, entered my Mac's serial number, and now it is associated with all my other Apple devices under a single Apple ID. No merger of Apple IDs required.

Cisco device supporting NAT for SCTP

Similar Messages

Maybe you are looking for