Connecting Multiple Remote Sites with VPN Passthrough

I have several Win2003SBS sites requiring VPN passthrough from remote clients some using the VPN Connectoid supplied with the SBS (on the RWW - "Download Connection Manager". The requirement is for an DSL modem router with at least 10 tunnels which also supports GRE. The device should support ADSL2 as a minimum and SDSL is preferred.
A more detailed diagram is attached. Access to the Web Server will be required from both the LAN and WAN sides later.
Any suggestions please?

3700 Series multiservice access routers supports GRE, SDSL, ADSL.Refer the following URL for more information
http://cisco.com/en/US/products/hw/routers/ps282/products_data_sheet09186a00800921f0.html

Similar Messages

Deploying unity connection at remote site with CUCM at central site

I am planning to deploy Unity connection at remote site while the CUCM is at central site only. Will appreciate of someone can shd some light on this, has anyone already deplyed same scenario , any specific requirements to take care of please ?
Thanks in advnace,
AB

AB,
Yes, having your Unity Connection server at a different location than your CUCM is supported.
I cannot really help you with specifc requirements as it largely depends on exactly how you intend to deploy it and what features you intend to enable. Clustering, Digital Networking, Unified Inbox, etc.. all have their own additional requirements the whole of which would not fit into a message board post.
However, specific bandwidth and latency requirements are listed in the "System Requirements for Cisco Unity Connection Release 8.X. http://www.cisco.com/en/US/partner/docs/voice_ip_comm/connection/8x/requirements/8xcucsysreqs.html
The SRND and the System Requirements should get you on the right track. I would encourage you to read both documents fully and then come back with any specific design questions you may have.
-Steven

Connection from remote sites (Frame Relay WAN) to AS/400 dissapears

Hello,
We have the following problem appearing in our environment:
All connections from remote sites dissapears unexpected from AS/400. After 2-3 minutes remote users get normal connectivity again.
The environment is the the following:
Frame Relay/ATM WAN (Frame Relay on remote sites and ATM in datacenter) comes to Cisco 7204VXR router which connected to LAN switch with 10/100/1000 ports. AS/400 with Fast Ethernet interface also connected to the similar LAN switch. CEF is enabled on the router, IOS version 12.4.3a. We have ETHSTD *ALL parameter set on AS/400. Remote users uses TCP/IP and Telnet but there are a number of 5494 controllers wich uses SNA.
We got the problem for the first time after we enabled CEF on the router.
I suspect that the cause of problem is Ethernet frames of different standards due to ETHSTD *ALL, but can neither reproduce the problem nor understand why it behaves so.
Have anybody had similar problem?
I would be very thanksfull if somebody can help me to solve it.
Thank you in advance.
//Mikhail Galiulin

Hi Martin,
Cisco 7200 itself can access AS/400 as well as all other hosts in the same with AS/400 LAN. There is no any outage in communications which goes to another LAN segment via Netscreen firewall while the communication via Cisco is down. Only those hosts which connected via Cisco are experiencing the problem. I can not say where the traceroute from AS/400 stucks (there are other people who maintain the machine and they never could catch the exact moment of outage).
To turn off CEF I treat as the last option actually and unfortunatelly there is no guarantee that software upgrade will help (we have 12.4.3a now).
So first of all I'm trying to understan WHY it happens because I can not see any systematics in the problem appearance. It can happen 3 times under 2 days and then dissapear for 1-2 months...
//Mikhail Galiulin

Register APs at remote site with WLCs at the core via Metro E.

All,
I have problem with register APs at the remote site with WLCs at the core.
All of my WLCs are on main site; and the majority of APs are on same subnet and same site with the WLCs. This works just fine.
However I have a remote site with connected to the core via metro E. And I am unable to make the APs at this site register to the controllers at the core.
On remote site APs and PCs are on subnet. And PCs are work just fine. I have the DHCP scope options 43 set for the ip address of the WLCs.
Metro E interfaces are on 192.168.0.0 /24.
Clients (PCs and APs) at remote are on 192.168.56.0 /24
I have the configuration on the Metro E and and remote site on the attachment.
Thank in advantage.

To get APs registered, make sure AP is getting an ip address and can ping WLC
Once this is verified, run the following debugs on WLC CLI and attach it to the thread:
- debug mac addr
- debug capwap OR lwapp events enable
- debug capwap OR lwapp errors enable
- debug pm pki enable
To stop debug
- debug disable-all
In case you have 'console' access to remote site AP, capture AP boot up and then run "debug ip udp" on AP CLI
To stop this debug
AP# undebug all

Java.sql.SQLException: Connection to remote site no longer valid

Hi
Somebody can help me with this ?
java.sql.SQLException: Connection to remote site no longer valid
Sometimes this error message appears in the moment when the next code execute, the database is Informix 10
public BeanOutParametersSMS siantelSMS(BeanArgumentsSMS bean)
throws SQLException, NumberFormatException,
NullPointerException, Exception {
String sql = "execute procedure SP_SMS_MKT(?,?,?,?,?,?,?,?,?)";
CallableStatement cs = null;
ResultSet rs = null;
BeanOutParametersSMS out = new BeanOutParametersSMS();
String salesForce = "";
try {
cs = connection.prepareCall(sql);
s.setString(1, bean.getAction());
cs.setString(2, "R0" + bean.getRegion());
cs.setString(3,bean.getCveclientesms());
cs.setString(4,bean.getPuerto());
cs.setString(5,bean.getCveproducto());
if (cs.execute()) {
rs = cs.getResultSet();
if (rs.next()) {
out.setActionInvoked(rs.getString(1));
out.setCode(rs.getString(2));
out.setPuerto(rs.getString(3));
out.setCveproducto(rs.getString(4)); etc ....
note. The stored procedure connecting with two databases (informix 10 & informix 9)

Where do you close the connection and statement/result set?

Remote Site with its own CUCM Sub#2 and Router network failed and the site didnt keep its phones active, need some assistance

I have a Pub and 2 Sub's. Sub #1 is with the Pub, at the main site it is our TFTP server, Sub #2 is at a remote site with about 100 users along with a router and 2 PRI's for outbound calls. We had a network failure between the main site and the remote site and all phone lost their registration with the system until we were able to get the network back up. Currently the network is up in a crippled state on a 1 T-1 link while we troubleshoot the bigger issue with our 6mb pipe, however Sub #2 and its associated router arent talking with the PUB or other Sub. I'm still getting alerts every 30 minutes stating they are the server is down. I'm sure once the network is corrected this will bring everything back on line. My question is how can I prevent in this in the future. I need this site to be stand alone if the network goes down again. I was told by our vendor that if we had a subscriber at each site then we would need SRST licensing. I know something needs to be configured to make it all work, I'm just not sure what.

I already have a group at the site but it includes both the Pub and Sub from the main site as well as the Sub from the remote site. I would only have to remove the Sub from the main site, problem is I currently only have 1 TFTP server it runs on SUB #1, should I make SUB#2 a TFTP server as well and the phones are setup for DHCP at the main site, I'm going to need to have a DHCP server setup at the remote site as well. Correct?

Backup IPSEC connection multiple remote Internet egress sites won't allow multiple any encryption domains

Hi Folks,
I have currently setup an ASA at a remote site in the middle of the USA which tunnels all traffic back to our West coast HQ to use its Internet connection. It works great. However, I also want to have another tunnel to our East Coast HQ to use its Internet connection should a failure occur on the West Coast. I'm bascially using the "any" remote network as a default route to the Internet via the IPSEC VPN tunnel.
The ASA gives me a warning in ASDM if I have multiple connections setup that over lap. I.E. I have Local Network: 10.0.0.1 Remote Network: any. I cannot repeat this for a different connection profile as a backup.
Is there anyway the ASA can support having multiple "any" tunnels to primary and backup sites?

Gave up and called TAC.
Its easy to setup backup peer's for IPSEC tunnels, first off, can't use IKEv2 (boo) had to go back to IKEv1, have to use keep alives.
Never could get the recommended "originate only" on the remote sites working correctly, but at "bidirectrional" worked fine, doesn't matter because I'm using a dynamic IP at the remote sites, the head ends will never initiate the VPNs (I don't have the "static IP" box checked).
Anyway, in ASDM go to Site to Site VPN section, then Advanced, create a tunnel group for each peer primary and backup. then in the Crypto Maps section select the static entry you are working with, in the Peer settings below put the new backup peer and click add.
Best practice is to have the remote sites use originate only and headends be answer only so the headends don't initiate the tunnels and cause a "loop"
Now to mess around with the EIGRP routing to finish this all off. If anyone has hints let me know, my devices don't support IP SLA or else I would have been done with this already :(

Issue with Serial Connection between remote sites

I'll try to keep this brief. If you need any additional information, let me know.
Basically, we have a 56K connection to one of our remote sites (it's all that's available). We recently purchased a new 2911 router and are consolidating a couple of routers into just this one. We purchased a 56K CSU/DSU WIC to go with the new 2911 router. This WIC is replacing a Cisco 1602 with an onboard CSU/DSU. The remote is also a 1602.
Here is the output from the sh int Serial 0/2/0 on the new router with the WIC. I just reset the counters and started the process over and things are working great, but what's odd is that the connection will be just fine for perhaps a day and then start to go downhill. The total output drops starts to shoot up as do the carrier transitions and interface resets, but not quite as much.
interface Serial0/2/0
description YANKTONSG_LAN
ip address 192.168.134.1 255.255.255.0
service-module 56k clock source line
service-module 56k network-type dds
no ip route-cache
end
And here is the sh int Serial 0 from the remote router as well as the config for the Serial interface.
interface Serial0
ip address 192.168.134.2 255.255.255.0
no ip directed-broadcast
no ip route-cache
service-module 56k clock source line
service-module 56k network-type dds
I repeatedly called the provider to have them check the circuit at the remote location and that has tested out just fine. Any ideas of what I could start looking at?
Thanks!

hi Spently,
Thanks for your posting!
According to your description, I have confused about your service bus, it seems that this issue is more related to Service Bus for Windows Server.
I recommend you could post this issue on Azure Pack forum(https://social.msdn.microsoft.com/forums/azure/en-US/home?forum=windowsazurepack ) for better support.
If I am misunderstanding your meaning, please let me know free.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Connect to existing site with DreamweaverMX 2004 (Was: DreamweaverMX 2004)

How do I connect to my exisiting website with the DreamweaverMX 2004? I just got a new computer and the people who did my website no longer work on website designing. They have left me on my own!

MX 2004 is a mighty old relic. It's probably not going to run right if at all on a modern operating system.
If you download a 30 day trial of CS6 or CC, you might have better luck.
http://www.adobe.com/products/creativecloud/free-trial.html
The first step is to define your Local Site folder. Go to Site > New site.
Tell DW where you would like to keep site files on your local hard drive. See screenshots.
Then click on Servers & tell DW what your remote site log-in details are:
Root Directory is what your web host told you to use for your HTML files. This varies by host and could be public_html or www or htdocs or none. If unsure, check with your hosting provider.
More options: check the settings recommended by your hosting provider.
Hit Test button to connect. If all is good, hit Save.
In the DW Files Panel (F8), click on Remote Server. Click the green DOWN arrow to GET files from the server.
Switch to Local View, and edit your site pages...
Nancy O.

DW CS3- Cant Connect To Remote Site

Hi
Ive encountered a very fustrating problem.
The new Dreamweaver refuses to connect to any remote sites.
It imported my site list, with FTP info, user names and
passwords...but when I try to connect, I get a big error message
telling me that my info is wrong, or my settings are wrong, or that
the remote server is unplugged, etc etc.
This happens with every site on my list, and it happens when
I try setting up the site info from scratch.
Using the same info, I can connect using Dreamweaver MX 2004,
so I know the basic info is correct.
Does anyone have a guess what's wrong here? Has there been
some fundamental change to site management Im unaware of?
Any help is much appreciated!

Send me your connection info offlist, and I'll try to get you
going.
forums at great-web-sights dot com
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.dreamweavermx-templates.com
- Template Triage!
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
http://www.macromedia.com/support/search/
- Macromedia (MM) Technotes
==================
"yakcat" <[email protected]> wrote in
message
news:f32kcr$ruh$[email protected]..
> Hi
>
> Ive encountered a very fustrating problem.
>
> The new Dreamweaver refuses to connect to any remote
sites.
>
> It imported my site list, with FTP info, user names and
passwords...but
> when I
> try to connect, I get a big error message telling me
that my info is
> wrong, or
> my settings are wrong, or that the remote server is
unplugged, etc etc.
>
> This happens with every site on my list, and it happens
when I try setting
> up
> the site info from scratch.
>
> Using the same info, I can connect using Dreamweaver MX
2004, so I know
> the
> basic info is correct.
>
> Does anyone have a guess what's wrong here? Has there
been some
> fundamental
> change to site management Im unaware of?
>
> Any help is much appreciated!
>
>
>

Intercom service for multiple remote sites

We are deploying 180 remote locations with IPT. Each site is connected via a WAN. We have a centralized CallMgr (4.1(3)). Each site will be configured with SRST.
Each site will need to be able to intercom other phones within the site. (so intercom will stay within each site).
Is there a service that will work? asp or jsp.
How well will that service scale?
Is there any third party apps that will provide this service?
Thanks
Trae

There are 3rd party apps out there, Berbee's Informacast is one product I've seen but there's others.
Most (if not all) of the intercom products utilise multicasting to do the audio distribution, so generally that's stopped at your LAN border (your network guys may have it setup otherwise though).
There's an intercom example in the SDK you may want to take a look at, but you'll be looking at further dev work yourself to get something beyond the simple example.
cheers

Connecting 3 RVS 4000 with VPN

Hello,
i want to connect in a triangle 3 RVS 4000 Router with VPN
i have configured 3 routers, which are able to connect to the Internet. Each of them are configured as a gateway.
i have created 2 tunnel on each router. But the vpn connection can't be established,
here is the configuration of router1 the other are configured in the same way, only the remote group setup is different
Do i have to open also some ports for the VPN , if yes which one and were
Thanks fpr your help and response
HP.Meyer

Hello,
Are you trying to ping the IP address of the clients behind the routers or the computer name? You will need to use the IP addresses only unless you add the names to the LMHOSTS file in your PCs. Also, if there is any antivirus or third party firewall software running on those clients it will block the PC from replying to pings from an untrusted subnet. For example you ping from R1 with 192.168.100.1 to a PC behind R2 that has 192.168.101.x. Because the antivirus or firewall software on the PC sees that the ping request is coming from a different subnet it will block the response. You will need to either disable any security software or add the untrusted subnet to the trusted list in that software. Sometimes it is best to test by pinging something that does not have any software, such as a printer or print server.
Please keep us updated.

How to mount a remote folder with VPN

Dear All,
I setted up a mac mini server with VPN. It goes through a rooter and I open some ports to be able to connect with VPN.
From max MacBook pro, I installed the VPN profile and I can connect the VPN to my remote server. The remote server has a public static adresse.
Now I am connected with VPN, but I can not moiunt a remote folder. I press command+K and I entered:
afp://username@ip-adresse/Groups
But it return an error message
"There was a problem connecting to the server "46.xx.xxx.xx".
The server may not exust ot it unavailbale at this time. Check the server name ot IP address, check your network connection, and then try again
But the server is up and reachable!
Thank a lot for your advises.
Cheers

I even tryed with
afp://ip-adress
after being connected with VPN,
Should do something else from my router?
When I go to my Macbook system preference and the to network and look at my location, I can see a green label to the VNC and and a IP adress is provided my the VNS server which belong to the pool I configured and out of the local pool

Multiple Web Sites with Personal Domain Names - Overview

I have read through the last 10 pages of these discussions and have almost worked this out, but I need some help.
Problem:
I want to publish and edit two separate web sites with their own, individual, personal web addresses
from the same user account on the same Mac using iWeb '08 (2.0.2) and my .Mac account
_So far:_
I have purchased and registered the two domain names (with Cheap-DomainRegistration.com)
I have configured the CNAME to point to web.mac.com, and "Set up a Personal Domain" in iWeb successfully, but using a separate Mac for each web site.
The two sites work great.
_What (I think) I need to know:_
(excuse me for copying these posts out, but I can't find a way to link them to this post)
1) Should I be using iWebSites as suggested by Old Toad (posted Jan 24 in response to StAnNe's "Multiple Websites--HELP!!!")?
I use iWebSites to manage multiple sites.. It lets me create multiple sites and multiple domain files.
2) Should I be using Mireille's approach (also posted Jan 24 in response to StAnNe's "Multiple Websites--HELP!!!")?
Yes you are correct in the thought that with a family pack you can use different accounts and that is the easiest way to upload with one click to .mac. But it is still possible to publish differents sites to one .mac account if that is all one has. Even if the sites are in one domain file each purchased mysite.com domain name purchased can be pointed to a different page in the site
Look at it this way
Original Poster has
site1 page 1 page 2 and so on
then he/she has brothersite page 1 and so on.
They each have a domain name purchase wherever
then site1domain.com is forwarded to site 1 page1
and brotherdomain.com is forwarded to brothersite page 1.
Even though both sites are in the same file they do not have anything to do with each other.
This is one possibility there are others but for a novice user this could be the way to go for simplicity.
(Mireille, if you're there, can you clarify what you said - thank you)
3) Would I use Roddy's fix (posted Jan 23 in response to canadensis' "Publishing Multiple Websites?")?
Here's an example of how you can separate two websites that are on the same domain file.
Quit iWeb
Create a new folder on your desktop and call it "iWeb Sites".
Inside this folder create two more - Website A, Website B.
Go to Home Folder/Library/Application Support/iWeb and copy your domain file - command C
Paste this into folders A and B - command V - and also paste a copy of it somewhere else - like in Docs - in case you make a mistake!
Double click the domain file in the folder Website A - this will launch iWeb.
In the left column, delete site B, save and quit iWeb.
Double click the domain file in the folder Website B to launch iWeb.
Delete website A, save and quit.
Drop the iWeb sites folder into your Home Folder.
If you want quick access to this folder you can highlight it and do command L to create an alias to leave on the desktop.
From now on, to launch any site in iWeb you open its folder in the iWebsites folder and double click the domain file.
This is not necessary when you are working on only one site as iWeb saves the domain file of the last site you were working on to Home Folder/Library/Application Support/iWeb. When you open the iWeb application, the last site you worked on will be launched.
Summary:
I'm not sure if some of the answers in previous discussions allow for personal domain names, which is what I need.
I would be very grateful for any suggestions as I'm getting bogged down.
Many Thanks,
Jeff

When you said, "you don't need to do CNAME for both sites…", would this method still allow me to use personal web addresses for both sites?
Yes. With "Ordinary Forwarding" you normally just type your .Mac url (web.mac.com/username/sitename) into a form at the place where you have your name.
I thought I was using 'web.mac.com' as the 'www' CNAME (alias) for my personal domain name (web address), so that when someone typed in my personal domain name they would 'go' to the domain registration location, which would then pass it on to the .Mac server, where my web site is hosted.
That's exactly right. It's just not the only way to do that. Ordinary Forwarding is another way, but it differs in terms of what appears in the address bar of the browser. Either you will see web.mac.com/username/.... or, if you add "masking", you will see your personal name for all pages. The CNAME method results in a address bar that reads www.myname.com/sitename/pagename.html.
Am I way off?
All help gratefully received,
Jeff

Connect to FTP site with Apache commons net FTP client through Proxy

Hello,
I am trying to run this simple code to connect to FTP site through a proxy.
import org.apache.commons.net.ftp.FTP;
import org.apache.commons.net.ftp.FTPClient;
public class MyTest {
public static void main(String[] args) {
String ftpHostName = "ftp.xxx.com";
int ftpPort = 21;
String ftpUserName = "myUserName";
String ftpPassword = "myPassword";
System.setProperty("socksProxyHost" ,"10.148.0.131");
System.setProperty("socksProxyPort", "1080");
FTPClient ftpClient = new FTPClient();
try {
System.out.println("connecting");
ftpClient.connect(ftpHostName, ftpPort);
System.out.println("connected");
System.out.println("loging in");
boolean successLogin = ftpClient.login(ftpUserName, ftpPassword);
if(successLogin)
System.out.println("success login");
else
System.out.println("fail login");
catch (Exception e) {
e.printStackTrace();
finally {
try {
System.out.println("loging out");
ftpClient.logout();
System.out.println("disconecting");
ftpClient.disconnect();
catch (Exception e) {
e.printStackTrace();
I am getting the following error:
C:\temp\ftp\test>java.exe -cp ./commons-net-ftp-2.0.jar;. MyTest connecting
java.net.SocketException: Malformed reply from SOCKS server
at java.net.SocksSocketImpl.readSocksReply(SocksSocketImpl.java:87)
at java.net.SocksSocketImpl.connectV4(SocksSocketImpl.java:265)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:437)
at java.net.Socket.connect(Socket.java:519)
at org.apache.commons.net.SocketClient.connect(SocketClient.java:176)
at MyTest.main(MyTest.java:23)
loging out
java.lang.NullPointerException
at org.apache.commons.net.ftp.FTP.sendCommand(FTP.java:471<ftp://FTP.java:471>)
at org.apache.commons.net.ftp.FTP.sendCommand(FTP.java:534<ftp://FTP.java:534>)
at org.apache.commons.net.ftp.FTP.sendCommand(FTP.java:583<ftp://FTP.java:583>)
at org.apache.commons.net.ftp.FTP.quit(FTP.java:794<ftp://FTP.java:794>)
at org.apache.commons.net.ftp.FTPClient.logout(FTPClient.java:697)
at MyTest.main(MyTest.java:39)
I am able to do this using a different FTP client library, ftp4j-1.5.1<ftp://ftp4j-1.5.1> using the following code:
import it.sauronsoftware.ftp4j.FTPClient;
import it.sauronsoftware.ftp4j.connectors.SOCKS4Connector;
public class MyTestFtp4J {
public static void main(String[] args) {
String ftpHostName = "ftp.xxx.com";
int ftpPort = 21;
String ftpUserName = "myUserName";
String ftpPassword = "myPassword";
FTPClient ftpClient = new FTPClient();
ftpClient.setConnector(new SOCKS4Connector("10.148.0.131", 1080));
try {
System.out.println("connecting");
ftpClient.connect(ftpHostName, ftpPort);
System.out.println("connected");
System.out.println("loging in");
ftpClient.login(ftpUserName, ftpPassword);
System.out.println("success login");
catch (Exception e) {
e.printStackTrace();
finally {
try {
System.out.println("disconecting");
ftpClient.disconnect(true);
catch (Exception e) {
e.printStackTrace();
So I know the proxy settings are correct.
The java version I used to compile and run my apps is 1.6.0_06 Does anyone can help figure out what is wrong when I use the Apache commons net FTP client?
Thank you
Jon

Is the old AirPort Extreme base station (AEBS)
configured so that the option to distribute IP
addresses is DISABLED? If so, configure the new AEBS
to act as a bridge.
Are you suggesting I use a set-up with TWO AEBSs? Set up a bridge (not sure how) and then use the old AEBS to connect to the DSL modem and broadcast to the new Extreme which will then be the router to the other computers on the network?
Do you have any port mapping or default host enabled
on the old AEBS?
I do not understand, not do I see these options in the Base Station utitlity; perhaps they are in the FTP options--but that, I'm sorry to say, is not obvious to my inspection.
Duane, can you give me a few more basic instructions? Thanks
iMac 17

Connecting Multiple Remote Sites with VPN Passthrough

Similar Messages

Maybe you are looking for