Connection doesnt work from remote computer

Hi
I have Oracle XE installed on a computer and my application (Excel application, VBA code) is working well with oracle xe.
i want to run the application from a remote computer.
I opened my application on a rempote computer and it could not connect to oracle xe..
I installed the Oracle XE client on the remote computer but still the application cant connect to the oracle server from the remote computer.
this is my connection string:
sCon = "Provider=MSDAORA;Data Source=xe;User Id=myUser;Password=myPw;"
the computer on which oracle xe express is located is called "Hagar1".
how can i connect to the oracle from the remote application?
thanks,
Hagar
Edited by: user641508 on 04-Dec-2008 10:26
Edited by: user641508 on 04-Dec-2008 10:27

the remote client doesn't know how to get to hagar1, simplest fix is add the entry to the tnsnames.ora file, run a tnsping hagar1 to find the location of the client oracle_home/network/admin/tnsnames.ora file and add:
hagar1 =
   (DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = TCP)(HOST = xe_hostIP_or_name )(PORT = 1521))
    (CONNECT_DATA =
      (SID = XE)
)Edited by: clcarter on Dec 6, 2008 10:53 AM add code tag

Similar Messages

Get-DfsrBacklog cmdlet doesn't work from remote computer (pssession)

Hi there!
I try to manage our Server 2012 R2 boxes from a Windows 7 remote machine using PowerShell. For some reason the cmdlet "Get-DFSRbacklog" seems not working remotly. The same cmdlet work when logging in locally to the server(s) with the
same credentials. UAC is turned off on the target machines and i have local admin permissions on this servers using my domain account.
What i do is:
Enter-PSSession <servername>
Get-DfsrBacklog -SourceComputerName <servername> -DestinationComputerName <servername>
Then i receive the following error:
Get-DfsrBacklog : Could not retrieve the backlog information. Replication group: "*" Replicated folder: "*" Source
computer: <servername> Destination computer: <servername> Confirm that you are running in an elevated Windows PowerShell
session and are a member of the local Administrators group on the destination computer. The destination computer must
also be accessible over the network, and have the DFSR service running. This cmdlet does not support WMI calls for the
following or earlier operating systems: Windows Server 2012. Details: WinRM cannot process the request. The following
error with errorcode 0x8009030e occurred while using Kerberos authentication: A specified logon session does not
exist. It may already have been terminated.
Possible causes are:
-The user name or password specified are invalid.
-Kerberos is used when no authentication method and no user name are specified.
-Kerberos accepts domain user names, but not local user names.
-The Service Principal Name (SPN) for the remote computer name and port does not exist.
-The client and remote computers are in different domains and there is no trust between the two domains.
After checking for the above issues, try the following:
-Check the Event Viewer for events related to authentication.
-Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or
use HTTPS transport.
Note that computers in the TrustedHosts list might not be authenticated.
   -For more information about WinRM configuration, run the following command: winrm help config.
    + CategoryInfo          : ProtocolError: (zursf1003:String) [Get-DfsrBacklog], DfsrException
    + FullyQualifiedErrorId : Get-DfsrBacklog.CimException,Microsoft.DistributedFileSystemReplication.Commands.GetDfsr
   BacklogCommand
Any ideas?

This article
suggests that you're logged into your Win7 management machine with local credentials. You should try the Get-DfsrBacklog command with domain credentials:
Client is in a domain: Attempting to connect to a remote server by using implicit credentials that are the local administrator's credentials on the client. Instead, use domain credentials that are recognized by the domain of the target server, or right-click
the server entry in the Servers tile, click Manage As, and then specify credentials of an administrator on the target server.
Sam Boutros, Senior Consultant, Software Logic, KOP, PA http://superwidgets.wordpress.com (Please take a moment to Vote as Helpful and/or Mark as Answer, where applicable) _________________________________________________________________________________
Powershell: Learn it before it's an emergency http://technet.microsoft.com/en-us/scriptcenter/powershell.aspx http://technet.microsoft.com/en-us/scriptcenter/dd793612.aspx

Cannot connect to DB from remote computer (ORA-12545)

Hello all,
Please help, I am stumped. I am trying to connect to a database located at my work from at home.
I am running into the following issue (see command and error below):
ansichart@ansivm:~/src/perl$ sqlplus aspxdba/********@aspxp2
SQL*Plus: Release 11.2.0.3.0 Production on Thu Jul 18 21:15:09 2013
Copyright (c) 1982, 2011, Oracle. All rights reserved.
ERROR:
ORA-12545: Connect failed because target host or object does not exist
Here is my tnsnames.ora file (I have the service_name censored out for privacy reasons):
ansichart@ansivm:~/src/perl$ cat $ORACLE_HOME/network/admin/tnsnames.ora
aspxp2 =
(DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = TCP)(HOST = orarac9-scan)(PORT = 1521))
    (CONNECT_DATA =
      (SERVICE_NAME = *****************)(UR=A)
I have verified that I can establish a TCP connection to this DB server on the port specified, using the same info from the TNSnames.ora file (see below):
ansichart@ansivm:~/src/perl$ nmap -sT -p 1521 orarac9-scan
Starting Nmap 5.21 ( http://nmap.org ) at 2013-07-18 20:53 CDT
Nmap scan report for orarac9-scan (10.1.13.115)
Host is up (0.0088s latency).
PORT     STATE SERVICE
1521/tcp open oracle
Nmap done: 1 IP address (1 host up) scanned in 0.09 seconds
ansichart@ansivm:~/src/perl$
I have another terminal opened up to a server at work and I can connect to the DB with sqlplus just fine. I verified that the record for this database on the tnsnames.ora file is the same as it is at work.
In conclusion, I can connect to the Database at work, but I cannot at home, even though I am using the same connection information and verified that port 1521 is accessible on this Database server from at home. So why can't I establish a DB connection?
Any ideas?
Thanks,
Ben

676d3153-d812-4300-9e6a-b1dc87a2ebfe wrote:
ERROR:
ORA-12545: Connect failed because target host or object does not exist
This simply means "hostname unknown". In other words, the hostname used for the connection could not be resolved to an IP address.
I have verified that I can establish a TCP connection to this DB server on the port specified, using the same info from the TNSnames.ora file (see below):
You are verifying hostname orarac9-scan only. You are not verifying that the hostname supplied by the Oracle SCAN Listener can be resolved by your platform.
As you are connecting to a SCAN listener, it will do its magic (load balancing/round robin/whatever) and return a redirect to your client driver - telling it where to find the service name the client requested.
So your client driver gets a hostname and port in return. It then attempts to connect to that to establish your Oracle client-server session. If the RAC has been setup with the typical RAC hostnames, your client will get hostnames like orarac9-vip1 and orarac9-vip2 returned. Likely as FQDN too.
This means your platform needs to be able to resolve these hostnames. It does not. Thus the error.
In your platform's /etc/hosts file, define the complete list of RAC hostnames (SCAN, Public and VIP hostnames).

Connection to Oracle from remote computer in local network

I have local network with two computers: WinXP with Oracle 10g and Vista with Oracle Client tools. I need to connect to the Oracle 10g from the client PC with sqlplus and with Enterprise Manager Console. Sqlplus returns ORA-12154 error, EM console returns ORA-12541 error.
Is the problem in configuration of listener.ora, tnsnames.ora and sqlnet.ora on the server side and on the client side? They look like this:
Server side:
# tnsnames.ora Network Configuration File: C:\oracle\product\10.2.0\db_1\network\admin\tnsnames.ora
# Generated by Oracle configuration tools.
ORCL =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.0.0.9)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = orcl)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.0.0.9)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = orcl)
# sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
# listener.ora Network Configuration File:
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = C:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.0.0.9)(PORT = 1521))
Client side:
# tnsnames.ora Network Configuration File:
ORCL =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.0.0.9)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = orcl)
# sqlnet.ora Network Configuration File: C:\oracle\product\10.2.0
SQLNET.AUTHENTICATION_SERVICES= (NTS, EZCONNECT)
NAMES.DIRECTORY_PATH= (TNSNAMES)
Are these files configured fine? Or do I have to configure also something else? When I do tnsping 10.0.0.9 from the client, the result is OK. So what is wrong? Thanks a lot for help, Petr.

Sqlplus returns ORA-12154 error, EM console returns ORA-12541 error- Make sure that "TNSNAMES" is listed as one of the values of the NAMES.DIRECTORY_PATH parameter in the Oracle Net profile (SQLNET.ORA)
- Verify that a TNSNAMES.ORA file exists and is in the proper directory and is accessible.
- Check that the net service name used as the connect identifier exists in the TNSNAMES.ORA file.
- Make sure there are no syntax errors anywhere in the TNSNAMES.ORA file. Look for unmatched parentheses or stray characters. Errors in a TNSNAMES.ORA file may make it unusable.
HTH

Printing doesn't work from remote computer.

I used to be able to print from my windows laptop to my linux printer.
I recently upgraded stuff to get a new xorg and am now having problems.
Printing works fine locally. Here's the debug log from cups.
I see httpgets getting nothing, but I don't know how to find out why.
How can I track down the problem?
d [29/Aug/2006:08:49:16 -0700] copy_attribute(0x824f038, 0x80963a0[job-sheets-supported,4,42])
D [29/Aug/2006:08:49:16 -0700] ProcessIPPRequest: 5 status_code=0
d [29/Aug/2006:08:49:16 -0700] ProcessIPPRequest: Adding fd 5 to OutputSet...
d [29/Aug/2006:08:49:16 -0700] WriteClient: Removing fd 5 from OutputSet...
d [29/Aug/2006:08:49:16 -0700] ReadClient: 5, used=0, file=-1
D [29/Aug/2006:08:49:16 -0700] ReadClient: 5 POST / HTTP/1.1
d [29/Aug/2006:08:49:16 -0700] decode_auth(0xb7ba6008): Authorization string = ""
d [29/Aug/2006:08:49:16 -0700] decode_auth: 5 username=""
d [29/Aug/2006:08:49:16 -0700] IsAuthorized: con->uri = "/"
d [29/Aug/2006:08:49:16 -0700] FindBest: uri = "/"...
d [29/Aug/2006:08:49:16 -0700] FindBest: Location / Limit 7f
d [29/Aug/2006:08:49:16 -0700] FindBest: Location /admin Limit 7f
d [29/Aug/2006:08:49:16 -0700] FindBest: best = "/"
d [29/Aug/2006:08:49:16 -0700] IsAuthorized: auth = 0, satisfy=0...
d [29/Aug/2006:08:49:16 -0700] POST /
d [29/Aug/2006:08:49:16 -0700] CONTENT_TYPE = application/ipp
d [29/Aug/2006:08:49:16 -0700] ReadClient: 5 con->data_encoding = length, con->data_remaining = 131, con->file = -1
d [29/Aug/2006:08:49:16 -0700] ProcessIPPRequest(0xb7ba6008[5]): operation_id = 4005
d [29/Aug/2006:08:49:16 -0700] get_printers(0xb7ba6008[5], 1)
D [29/Aug/2006:08:49:16 -0700] ProcessIPPRequest: 5 status_code=0
d [29/Aug/2006:08:49:16 -0700] ProcessIPPRequest: Adding fd 5 to OutputSet...
d [29/Aug/2006:08:49:16 -0700] WriteClient: Removing fd 5 from OutputSet...
d [29/Aug/2006:08:49:16 -0700] ReadClient: 5, used=0, file=-1
d [29/Aug/2006:08:49:16 -0700] ReadClient: httpGets returned EOF...
D [29/Aug/2006:08:49:16 -0700] CloseClient: 5
d [29/Aug/2006:08:49:16 -0700] CloseClient: Removing fd 5 from InputSet and OutputSet...
THanks.

Cups has done their usual great job of upgrading, breaking things, and not mentioning it.
What version of cups. 1.2.0 broke samba, though that was fixed.
Also, the new default cupsd.conf only allows printing from local host. In addition to the advice given above you can increase the debug level, changing LogLevel from info to debug2.
Samba logs might also be helpful.
FWIW, we have an Arch box doing some print serving, but I haven't upgraded it in awhile. (I upgrade on test machines first, and saw that there were some problems with cups, so I've left it alone--also on production machines, there's a lot of truth to the adage, "If it ain't broke, don't fix it."
One thing to try, in regards to troubleshooting, is to go into cupsd.conf and allow All in the <Location> directive and see if that helps. If it fixes the problem, you can then tighten it up. (Also put allow before deny.) I ~think~ (I only have on box with a brand new cupsd.conf--on the others, I'm using pre 1.2.0 configs, and on the new one, I've already edited it so I don't have a sample) that by default, it puts allow first, has allow from localhost, and so by default, everything else is denied.
Is the Windows box using ipp or samba. That is, did you add the printer to the Windows machine with \servernameprintername?
Good luck--Cups came by its nickname of C(an't)U(sually)P(rint) S(tuff--or other, more vulgar words) honestly. Gotta love their manpages too, it's the only one I've come across where they mention an option without telling what it does---their lpadmin page lists the -x option with no explanation--for the curious, -x will delete a printer.
Sorry, I get to talking about cups and I have to rant.

My password on the itunes store doesnt work from my phone

My password on the app store and itunes store doesnt work from my phone but works on my computer. What am i doing wrong or what can i try differently?

make shure that you have the same user name on your phone and on the computer

Executing powershell script from remote computer using RSAT

Hi.
I want to execute powershell script on AD server from remote computer (in the same domain). I installed and tested RSAT - it is working fine. But i cant execute PS from c# code.
ps.Commands.AddCommand("Import-Module").AddArgument("ActiveDirectory");
ps.Invoke();
ps.Commands.AddCommand("Get-ADOrganizationalUnit -Filter 'Name -like \"*\"'");
var res = ps.Invoke();
And i get exception:
An unhandled exception of type 'System.Management.Automation.CommandNotFoundException' occurred in System.Management.Automation.dll
Additional information: The term 'Get-SBNamespace' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.

Hi
CapitanPlanet
For the
CommandNotFoundException, it means the command cannot be found.
On the other hand, your issue is about the PowerShell, if you still have the issue, I suggest that you should post it in the
PowerShell forum for efficient response.
Here are some useful information, please check
Powershell
commands from C# not working (System.Management.Automation.CommandNotFoundException)
Powershell, Service Bus For Windows Server Programmatically: Command found, module could not be loaded
https://msdn.microsoft.com/en-us/library/dn282152.aspx
Best regards,
Kristin
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How can I transfer work from one computer to another?

How can I transfer work from one computer to another?

Welcome to the forum.
I can think of three basic ways to accomplish what you wish to do:
Use the Project Archiver to archive your Project (and check the box to gather the media files), to an external HDD. Probably the easiest way to do it.
Copy the Project and ALL media files to an external HDD, but be prepared to relink the media files to the Project, as the drive letter (part of the Absolute Path) will have changed.
Edit loosely, and Share to an AV file, which will be Imported into a New Project on that second computer. Or, edit VERY tightly, and do the same. I like the first, as removing, replacing Transitions, etc., can be much more difficult, unless that "tight edit" is 100% done.
Good luck,
Hunt
Message was edited by: Bill Hunt to correct formatting

HT1430 wi-fi connection doesnt work, even can not put it ON. What to do? at the store guys told that they can change my iphone for 300 euros....

wi-fi connection doesnt work, even can not put it ON. What to do? at the store guys told that they can change my iphone for 300 euros....

Read this it might help http://support.apple.com/kb/ts1559

JDBC connect from remote computer fails

Hi all,
I have successfully installed the XE server and I can connect over JDBC from clients running locally on the machine where the XE server is installed.
However when I try to connect from a remote computer using the same client I get an error saying: The Network Adapter could not establish the connection
I can ping the machine with XE installed and all firewalls on the machines are turned off.
Any ideas on the subject of JDBC remote connect to XE server? Or is it simply that it is not supported?
Appreciate all the help I can get.
Thanks,
/Anders

On my machine I have the listener bound to local interface.
Listener.ora has hostname in it, and this is the listener status:
As status shows the hostname is resolved to localhost, on this machine I am unable (with this configuration) to share the db to other machines (I do not have oracle client on my other pc, but telnet is unable to connect to port 1521).
Changing hostname to ipaddres solves.
[andrea@bones ~]$ lsnrctl status
LSNRCTL for Linux: Version 10.2.0.1.0 - Beta on 15-DEC-2005 21:28:51
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=bones)(PORT=1521)))
STATUS of the LISTENER
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 10.2.0.1.0 - Beta
Start Date                15-DEC-2005 21:28:40
Uptime                    0 days 0 hr. 0 min. 11 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Default Service           XE
Listener Parameter File   /usr/lib/oracle/xe/app/oracle/product/10.2.0/server/network/admin/listener.ora
Listener Log File         /usr/lib/oracle/xe/app/oracle/product/10.2.0/server/network/log/listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost.localdomain)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost.localdomain)(PORT=8080))(Presentation=HTTP)(Session=RAW))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "XE" has 1 instance(s).
Instance "XE", status READY, has 1 handler(s) for this service...
Service "XEXDB" has 1 instance(s).
Instance "XE", status READY, has 1 handler(s) for this service...
Service "XE_XPT" has 1 instance(s).
Instance "XE", status READY, has 1 handler(s) for this service...
The command completed successfully
[andrea@bones ~]$

PIX 501 config - access to internal network not working from remote VPN users - everything on the inside is OK

One other thing - I had a problem with the key pairing so I rebuilt the rsa 1024 and the unit started working. Unfortunately I reloaded without the config in place and now I cannot get it to work again. Any help will be greatly apprecaited although I did review a dozen other posts of people having similar problems and for some reason there is never any conclusion as to the solution and I am not sure why.
Some other info from the client end:
I just ran the stats on the client and packets are being encrypted BUT none are decrypted.
Also Tunnel received 0 and sent 115119
Encryption is 168-bit 3-DES
Authentication is HMAC-SHA1
also even though the allow LAN is selected in the Cisco VPN client it states the local LAN is disabled in the client stats
also Transparent tunneling is selcted but in the stats it states it is inactive
I am connecting with the Cisco VPN Client Ver 5.0.07.0440
This config works. It is on the internal net 192.168..40.x and all users obtain dhcp and surf the web. It has required ports opened.The problem is that you can connect remotely via the VPN and you receive an IP address from the remote-vpn pool but you cannot see any machines on the internal network. The pix is at 40.2 and you cannot ping the pix and the pix from the remote PC connecting via the VPN and youcannot ping the remote PC from the PIX console when the remote is connected and receives the first IP address in the VPN pool of 192.168.40.25
I need to see the internal network and map network drives. I have another friend that is running the same config and it works but his computer is on a linksys wireless and has an IP of 192.168.1.x and the IP he receives from the VPN pool is 192.168.1.25 so I do not know if the same network is allowing this config to work even if there is an error in the config. In my present case I obtain the ip of 192.168.40.25 from the VPN pool and my connecting pc on 192.168.1.x I really am not sure how the VPN virtual adapter works. I am assuming it routes all traffic from your connecting PC to and from the virtual adapater but I really do not know for sure.
Other people have had similar issues with accessing the internal network from the VPN. One solution was the split-tunnel, another was the natting and another had to do with the encrption where there and an issue with the encrypt and ecrypt which was stopping the communicaton via the VPN.
I still cannot seem to find the issue with this config and any help will be greatly appreciated.
This is the config
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password somepassword
hostname hostname
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
object-group network internal_trusted_net
network-object 192.168.40.0 255.255.255.0
object-group icmp-type icmp_outside
icmp-object echo-reply
icmp-object unreachable
icmp-object time-exceeded
icmp-object source-quench
access-list OutToIn permit icmp any xxx.xxx.xxx.0 255.255.255.248 object-group icmp_outside
access-list no_nat_inside permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list split_tunnel permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list OutToIn permit ip any any
access-list outbound permit ip any any
(NOTE: I had many more entries in the access list but removed them. Even with the above two allowing everything it does not work)
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside xxx.xxx.xxx.xxx 255.255.255.248
ip address inside 192.168.40.2 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpn_client_pool 192.168.40.25-192.168.40.30
pdm history enable
arp timeout 14400
global (outside) 1 interface
I had this statement missing from the previous posted config but even with the nat (inside) 0 access-list no_nat_inside it still does not work.
nat (inside) 0 access-list no_nat_inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group acl_outside_in in interface outside
access-group outbound in interface inside
route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.168.40.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community $XXXXXX$
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set 3des_strong esp-3des esp-sha-hmac
crypto dynamic-map clientmap 50 set transform-set 3des_strong
crypto map vpn 50 ipsec-isakmp dynamic clientmap
crypto map vpn client configuration address initiate
crypto map vpn client configuration address respond
crypto map vpn client authentication LOCAL
crypto map vpn interface outside
isakmp enable outside
isakmp identity address
isakmp client configuration address-pool local vpn_client_pool outside
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup remote-vpn split-tunnel split_tunnel
vpngroup remote-vpn idle-time 10800
vpngroup remote-vpn password ANOTHER PASSWORD
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh 192.168.40.0 255.255.255.0 inside
ssh timeout 30
console timeout 60
dhcpd address 192.168.40.100-192.168.40.131 inside
dhcpd dns xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd enable inside
username AUSER password PASSWORD privilege 15
terminal width 80
****************** End of config
I have been searching docs and other people's postings trying to obtain the info to make this work. It appears pretty much boiler plate but I believe my problem is in the natting. I am using a range in the internal network for the VPN pool and I have tried switching this to other networks but this has not helped. Unfortunately I have been unable to get the PDM to work and I believe this is a PC config thing and I did not want to waste the time on it. I read a post where a person using the PDM interface with the same problem (not being able to access the internal network) was able to go to a section in the VPN wizard and set the Address Exeption Translation. They said they originally set the VPN subnet when they did not have to. Many of the other blogs I read also stated that if the natting is not proper for the VPN pool- that it will not work but I am confused by the examples. They show as I do the complete range for an access-list called no_nat_inside but I believe it should only have the VPN pool IP range and not the entire network since the others do require natting - not sure if my thought process is correct here. Any help will be greatly apprecaited. Also this morning I just tried a boiler plate example from CISCO and it also did not do what I need for it to do. And I also connect a PC to obtain an IP to see if I can see it - no good. The PC can ping the PIX and viceversa but no one can ping the remote PC that connects via the CISCO Remote VPN client even though it receive an address from the vpnpool. Also include LAN is checked off on the client. This was mentioned in anther post.
Thank you once again.

Hi,
PIX501 is a very very old Cisco firewall that has not been sold for a long time to my understanding. It also doesnt support even close to new software levels.
If you wanted to replace the PIX501 the corresponding model nowadays would be ASA5505 which is the smallest Cisco ASA firewall with 8 switch port module. There is already a new ASA5500-X Series (while ASA5505 is of the original ASA 5500 Series) but they have not yet introduced a replacing model for this model nor have they stopped selling this unit. I have a couple of them at home. Though naturally they are more expensive than your usual consumer firewalls.
But if you wanted to replace your PIX firewall then I would probably suggest ASA5505. Naturally you could get some other models too but the cost naturally rises even more. I am not sure at what price these are sold as used.
I used some PIX501 firewalls at the start of my career but have not used them in ages since ASA5505 is pretty much the firewall model we use when we need a firewall/vpn device for a smaller network/branch site.
Here is a PDF of the original ASA5500 Series.
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80285492.pdf
Here is a PDF of the new ASA5500-X Series
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf
I am afraid that its very hard for me atleast to troubleshoot this especially since I have not seen any outputs yet. Also the very old CLI and lack of GUI (?) make it harder to see what the problem is.
Could you provide the requested outputs?
From the PIX after connection test
show crypto ipsec sa
Screen captures of the VPN Client routing and statistics sections.
- Jouni

Printing only works from one computer

I have an Epson Stylus C60 connected to the USB port on my Airport Extreme. There are two computers on the network, a PowerBook G4 and a MacBook Pro. Both computers connect to the network very reliably and have internet access. The problem is that the MBP cannot print to the connected printer. The G4 has always printed fine.
The MBP sees the printer as a Bonjour printer, and I can add it to the printer list without problem. When I try to print, I get a message in the print queue that there is a communications error with the printer.
In the airport configuration window, the printer is recognized and remote printing is enabled. Any idea why printing only works from the G4?

Thanks for your help. Yes, the driver is a universal binary and the printer works great when plugged directly into the computer. I just can't figure out why it won't work over the airport.
Any other ideas?

No more connections available to this remote computer...Urgent Help for File server...

Hi Guys,
I need urgent help regards to our school File server which is having "No more connection to this remote computer error"
on SMB Shares where I usually authenticate with a domain username it used to work fine since till 3 weeks ago.
Now I can browse the SMB shares with only IP... Netbios gets straight away this error message from non-domain joined pc's where the computer needs to connect to the SCCM distribution point on this file server.
Strangely, Domain joined pc's does not have this problem at all they can use Netbios or IP no problem at all. But someone from a standalone laptop or desktop who needs to access shares through netbios gets this message.
Can someone help me please?
I did check DNS yet there is no problem on DNS I checked PTR record for the server to make sure it is not turned in to multihome accidently but nothing at all.
I also did a NETMON where I captured the data from server and the client I get these errors:
205 4:54:35 PM 16/12/2013
7.3299179 10.2.1.96
10.2.0.13 TCP
TCP:Flags=......S., SrcPort=49312, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=1771710719, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
{TCP:22, IPv4:21}
206 4:54:35 PM 16/12/2013
7.3299668 10.2.0.13
10.2.1.96 TCP
TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=49312, PayloadLen=0, Seq=2167618331, Ack=1771710720, Win=8192 ( Negotiated scale factor 0x8 ) = 2097152
{TCP:22, IPv4:21}
207 4:54:35 PM 16/12/2013
7.3301468 10.2.1.96
10.2.0.13 TCP
TCP:Flags=...A...., SrcPort=49312, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=1771710720, Ack=2167618332, Win=16425 (scale factor 0x2) = 65700
{TCP:22, IPv4:21}
208 4:54:35 PM 16/12/2013
7.3301468 10.2.1.96
10.2.0.13 SMB
SMB:C; Negotiate, Dialect = PC NETWORK PROGRAM 1.0, LANMAN1.0, Windows for Workgroups 3.1a, LM1.2X002, LANMAN2.1, NT LM 0.12, SMB 2.002, SMB 2.???
{SMBOverTCP:23, TCP:22, IPv4:21}
209 4:54:35 PM 16/12/2013
7.3307974 10.2.0.13
10.2.1.96 SMB2
SMB2:R NEGOTIATE (0x0), GUID={8447F237-5219-D48A-40C0-29092450C68E}
{SMBOverTCP:23, TCP:22, IPv4:21}
210 4:54:35 PM 16/12/2013
7.3314064 10.2.1.96
10.2.0.13 SMB2
SMB2:C SESSION SETUP (0x1) {SMBOverTCP:23, TCP:22, IPv4:21}
211 4:54:35 PM 16/12/2013
7.3318815 10.2.0.13
10.2.1.96 SMB2
SMB2:R - NT Status: System - Error, Code = (22) STATUS_MORE_PROCESSING_REQUIRED SESSION SETUP (0x1), SessionFlags=0x0
{SMBOverTCP:23, TCP:22, IPv4:21}
212 4:54:35 PM 16/12/2013
7.3324012 10.2.1.96
10.2.0.13 SMB2
SMB2:C SESSION SETUP (0x1) {SMBOverTCP:23, TCP:22, IPv4:21}
215 4:54:35 PM 16/12/2013
7.3339977 10.2.0.13
10.2.1.96 SMB2
SMB2:R - NT Status: System - Error, Code = (109) STATUS_LOGON_FAILURE SESSION SETUP (0x1)
{SMBOverTCP:23, TCP:22, IPv4:21}
216 4:54:35 PM 16/12/2013
7.3341805 10.2.1.96
10.2.0.13 TCP
TCP:Flags=...A.R.., SrcPort=49312, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=1771711788, Ack=2167619070, Win=0 (scale factor 0x2) = 0
{TCP:22, IPv4:21}
217 4:54:35 PM 16/12/2013
7.3357089 10.2.1.96
10.2.0.13 TCP
TCP:Flags=......S., SrcPort=49313, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=2943201172, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
{TCP:27, IPv4:21}
218 4:54:35 PM 16/12/2013
7.3357422 10.2.0.13
10.2.1.96 TCP
TCP:Flags=...A..S., SrcPort=Microsoft-DS(445), DstPort=49313, PayloadLen=0, Seq=3718656547, Ack=2943201173, Win=8192 ( Negotiated scale factor 0x8 ) = 2097152
{TCP:27, IPv4:21}
219 4:54:35 PM 16/12/2013
7.3359768 10.2.1.96
10.2.0.13 TCP
TCP:Flags=...A...., SrcPort=49313, DstPort=Microsoft-DS(445), PayloadLen=0, Seq=2943201173, Ack=3718656548, Win=16425 (scale factor 0x2) = 65700
{TCP:27, IPv4:21}
220 4:54:35 PM 16/12/2013
7.3359768 10.2.1.96
10.2.0.13 SMB2
SMB2:C NEGOTIATE (0x0), GUID={8213462D-2600-D1B1-11E3-65FC4BCDE707}
{SMBOverTCP:28, TCP:27, IPv4:21}
221 4:54:35 PM 16/12/2013
7.3364173 10.2.0.13
10.2.1.96 SMB2
SMB2:R NEGOTIATE (0x0), GUID={8447F237-5219-D48A-40C0-29092450C68E}
{SMBOverTCP:28, TCP:27, IPv4:21}
222 4:54:35 PM 16/12/2013
7.3369702 10.2.1.96
10.2.0.13 SMB2
SMB2:C SESSION SETUP (0x1) {SMBOverTCP:28, TCP:27, IPv4:21}
223 4:54:35 PM 16/12/2013
7.3373474 10.2.0.13
10.2.1.96 SMB2
SMB2:R - NT Status: System - Error, Code = (22) STATUS_MORE_PROCESSING_REQUIRED SESSION SETUP (0x1), SessionFlags=0x0
{SMBOverTCP:28, TCP:27, IPv4:21}
224 4:54:35 PM 16/12/2013
7.3377060 10.2.1.96
10.2.0.13 SMB2
SMB2:C SESSION SETUP (0x1) {SMBOverTCP:28, TCP:27, IPv4:21}
227 4:54:35 PM 16/12/2013
7.3390552 10.2.0.13
10.2.1.96 SMB2
SMB2:R - NT Status: System - Error, Code = (109) STATUS_LOGON_FAILURE SESSION SETUP (0x1)
{SMBOverTCP:28, TCP:27, IPv4:21}
Regards,
Gokhan

Solution has been found,
After doing bit of a backtrack, site DC's were out of sync with PDC with time.
Also Time service was shutdown on PDC which has been enabled and pointed to the Australian pool ntp IP address.
Everything is back on track now.
Regards,
Gokhan Cil

What am I doing wrong that I can't connect to a very remote computer?

Maybe I just don't understand the definition of "remote" but I can connect to computers on my local Ethernet network, but when I attempt to connect to my dad's computer a thousand miles away, I get a "disconnected" or "offline" comment. He has Safari and Mail active, and we are looking at each other through iChat, so I KNOW he's online.
He's 84 years old, and the communication is killing me, but I've had him turn on all the permissions in Sharing, so I can't figure out why I can't get on his machine. He's got a new iMac/Intel box, and I'm running a G5; we're both running 10.4.7.
When I "edit" his information, very often the address turns from the number I've entered to "0.0.0.0." and I can't change it. Our IP numbers are only different by 50 in the last set, which seems odd to me, but I'm ignorant!
According to the Sharing panel, the IP address is supposed to begin with "afp://" but that gets stripped out when I enter it - in fact, sometimes (but not always) it won't let me enter the slash marks.
I'd appreciate any info you guys can give me.
Thanks!

what's this about 'consumer hubs'?
i've tried almost every trick i've read, short of doing a complete dump and re-install of all software. i just can't get connected to someone over the internet. could it be their service provider doing the blocking?
as i've only tried connecting to one other person's computer in one area of the globe it's difficult to say what the problem is.
here's a thought for apple - have a dummy site (for us dummies) that we can access using ard, thusly allowing us to test our own settings to make sure the problem doesn't reside with us.
any help would be great.

Cannot log into T61 from remote computer with wired network and Windows Explorer.

Hi,
I am using a T61 7662-cto with Windows 7 Professional
When the T61 is connected on the home network with the wired network, I am not able to log into it remotely from another computer. On my second computer, I see the T61 with Windows Explorer but instead of getting the login window, it appears a Network Error with the message:
“Check the spelling of the name. Otherwise, there might be a problem with your network.” With a error code 0x80070035, “The network path was not found.” I tried the “Diagnose” button but it doesn’t give solution.
When the T61 is wireless connected, there is no problem. I can access it from my second computer.
I never have problem to connect to the second computer from the T61 with any connection type . I just updated the Intel Wireless LAN (bg, abg, abgn) for Windows 7 – ThinkPad, with the drivers required but it changes nothing.
http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-73611
Do you have a hint for this issue why the wired network gives problem?
Thanks

Open this post, go to the flagged message. On its right is a button
to turn off the flag.
I went to the site. The only problem I had was one has to sign in
to see anything. Even the main page had a very large ''Please
Sign In'' covering the window.
Many site issues can be caused by corrupt cookies or cache.
* Clear the Cache and
* Remove Cookies<br> '''''Warning ! ! '' This will log you out of sites you're logged in to.'''
Type '''about:preferences'''<Enter> in the address bar.
* '''Cookies;''' Select '''Privacy.''' Under '''History,''' select Firefox will '''Use Custom Settings.''' Press the button on the right side called '''Show Cookies.''' Use the search bar to look for the site. Note; There may be more than one entry. Remove '''All''' of them.
* '''Cache;''' Select '''Advanced > Network.''' Across from '''Cached Web Content,''' Press '''Clear Now.'''
If there is still a problem,
'''[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode]''' {web link}
While you are in safe mode;
Type '''about:preferences#advanced'''<Enter> in the address bar.
Under '''Advanced,''' Select '''General.'''
Look for and turn off '''Use Hardware Acceleration'''.
Poke around safe web sites. Are there any problems?
Then restart.

Connection doesnt work from remote computer

Similar Messages

Maybe you are looking for