Determing IP Address Ranges for Setting up a VPN

Following the directions that I've found here ... I'm attempting to setup a VPN for my company to share documents.
I am using a mac mini, which is connected to a router, and the router to a cable modem.
In order to set up the VPN using L2TP over IPsec, I need to enter both a Starting and Ending IP Address.
I have found only a single IP address for the mac mini, and when going into system profiler have found various other addresses and am not sure how to properly setup the IP Address Range.
Some of the categories shown in the System Profiler are:
IPv4 Addresses, IPv4 Configuration Method, Interface Name, Router, Subnet Masks, IPv6 Configuration Method, DNS Server Addresses, etc.
However, I only see 1 single IP Address.
Any help would be greatly appreciated.
~ JJL

OK, that's good, you have all you need.
You are probably going to need to read up on the management of the base station as this is going to be your NAT router (remember that from my earlier post?) and your internet firewall. Management will be via a web browser, on a computer directly connected to base station's ethernet port. There will be a default IP address to put into the web browser to reach the management page. This IP address can probably be found by opening the Network prefs on one of your airport computers and looking to see what the 'Router' IP is set to (I'm presuming that the base station is still in its default function). It will also be in the base station documentation.
The base station will act as your DHCP server (we could alternatively use the server but lets keep it as the base station - no real difference). There will be a management page for this where you can specify its own IP address and also what range you want to distribute to other computers. For example...
192.168.1.1 for base station
192.168.1.2 to 192.168.1.40 for DHCP
Remember, we do not want to hand out all the IP addresses by DHCP because we need to keep some back for the server's static IP and the VPN users. So maybe we keep...
192.168.1.100 for the server
192.168.1.200-219 for L2TP vpn
192.168.1.220-239 for PPTP vpn (if this is also needed for PCs and the like).
Via management screen, confirm that NAT routing on the base station is enabled (this allows all LAN computers to access internet via your base station which is now your 'Internet Router'.
Confirm that the firewall on the base station is enabled. This protects your LAN (on the private side of the router) from all other traffic on the internet (the public WAN).
Switch off both the modem and the base station.
Connected the modem to the WAN port of the base station (ordinary ethernet cable).
Keep modem off for 5 - 10 minutes (this clears any cached settings at the ISP end). Switch on the cable modem and wait a few minutes for it to settle.
Switch on the base station and reconnect to the management screen. There will probably be an Internet Wizard or some such thing in the management page to establish the connection with the modem.
When the connection to the modem is OK, you should be able to browse rest of internet from the computer you have directly connect to the base station
Restart any computers connected by airport. They should now also be able to browse internet.
Disconnect computer which is directly connected to base station.
The ethernet port on base station now gets connected to your switch.
The Server connects to the switch too.
You are probably going to need to give your server a new IP address, in the same network range as now being used elsewhere in your LAN. This is not quite as trivial as just changing it in the Network Prefs although you may well be able to get it going fine doing just that (to be honest, I'm not sure I want to add that bit into this already lengthening post
If you want to just change the IP address in Network Prefs just now, remember that the Router field will be the IP address of your base station. The DNS server (in server network prefs) will also be base station.
I have skipped past a bit regarding the server setup and also omitted how to get the vpn traffic from the WAN to the server (hint: port forwarding in router) but i think it is wise just to get the rest of the network up and running behind a secure router/firewall first.
-david

Similar Messages

Scenario – Multi Tenant ConfigMgr 2012 R2 and Same IP Address range for multiple customer

The service provider plans on managing customer’s workstation/desktop via ConfigMgr 2012 R2 CU3 which is hosted at Service Provider’s network however the Secondary Site (MP/DP Role) is hosted at customer’s physical location and on their network but
not joined to customers domain. The service provide plans to have a one-way trust with each customer initiated from service provider to each customer and have a copy of customer’s DNS by way of ADC hosted at service providers network.
Now the challenge is that we might end up having plenty of customers who will have same IP/subnet range such as 192.168.1.x and wanted to know the impact/issues around deployment. We may have challenges defining boundaries/boundary group for same IP range
or subnet for each customer because you can't have two boundaries with same IP range or Subnet. Also, since we have one way trust, we don't get the option to view customer's AD sites and services...
We are testing a scenario where we’ve defined the DNSSUFFIX on CM client so the client knows which MP to talk and MP presents with the nearest DP this works out quite well where you’ve defined IP boundary but haven’t tested anything with two or more customers
with same IP Range – hence not sure how the same IP/subnet range would work.
Wondering if we DO NOT define any boundary or boundary group so the client assume it's on slow or unreliable network and set the applications
Deployment Option to "Download content from DP and run locally" and still receives the application – I know this works in workgroup scenario but will this be a feasible option when dealing with multiple customers with same IP range ?
Please note that we are not planning on publishing MP or AD Schema on customer network but since we have a one way trust, we can do a discovery of customer’s AD forest.
Thoughts ?

Wondering if we DO NOT define any boundary or boundary group so the client assume it's on slow or unreliable network and set the applications
Deployment Option to "Download content from DP and run locally" and still receives the application – I know this works in workgroup scenario but will this be a feasible option when dealing with multiple customers with same IP range ?
This is a complex scenario which requires a lot of planning and even testing. Having no boundaries will work, but all DPs are treated as slow/remote then and it's not possible to define which one will be used then.
Torsten Meringer | http://www.mssccmfaq.de

Can i use same address pool for different remote access VPN tunnel groups and policy

Hi all,
i want to create a different remote access VPN profile in ASA. ihave one RA vpn already configured for some purpose.
can i use the same ip address pool used for the existing one for the new tunnel-group (to avoid add rotuing on internal devices for new pool) and its a temporary requirement)
thanks in advance
Shnail

Thanks Karsten..
but still i can have filtering right? iam planning to create a new group policy and tunnelgroup and use the existing pool for new RA and i have to do some filetring also. for the new RA i have to restrict access to a particualr server ,my existing RA have full access.
so iam planning to create new local usernames for the new RA and new group policy with vpn-filter value access-list to apply for that user as below, this will achive waht i need right??
access-list 15 extended permit tcp any host 192.168.205.134 eq 80
username test password password test
username test attributes
vpn-group-policy TEST
vpn-filter value 15
group-policy TEST internal
group-policy TEST attributes
dns-server value 192.168.200.16
vpn-filter value 15
vpn-tunnel-protocol IPSec
address-pools value existing-pool
tunnel-group RAVPN type ipsec-ra
tunnel-group RAVPN general-attributes
address-pool existing-pool
default-group-policy TEST
tunnel-group Payroll ipsec-attributes
pre-shared-key xxx

IP address range of Microsoft Location Services API

Hi,
I am developing a LOB windows 8.1 application. The windows 8 tablet device we are using needs to be locked down by IP address to the specific services that the application will use. I have not been able to find the IP address range for the Microsoft Location
Sevices API uses (Windows.Devices.Geolocation namespace).
Does someone know where on the MS website this sort of information is held as I can't seem to find this information anywhere?
Thanks

Probably you can find more information from here:
https://msdn.microsoft.com/en-us/library/windows/desktop/dd464636(v=vs.85).aspx
As I understand system have a location service and when the app calls the service, the service query the location automatically.
If you still have questions about location service, perhaps ask at desktop forum is a better choice:
https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/home?forum=windowsgeneraldevelopmentissues
--James
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Setting up a VPN server on second internal hard drive

Forgive me if my jargon is off ... this is my first attempt at setting up a VPN.
GOAL: My company needs various employees to access our server from remote locations.
My personal computer is a Power Mac G5 Quad. Today I purchased a 500gb internal hard drive to serve as the company's "server".
I want to set things up so that employees can access this drive from anywhere on the internet.
I've read numerous documents on how clients connect to the server, but I haven't found anything on actually setting up a server so that others can connect to it.
Just to finally hash out my attempts at solving this ... I installed Chicken of the VNC and set that up on various employees' laptops. However, this VNC just lets them "control" my computer. I want them to be able to access one particular drive and share files there.
Any help, points in the right direction, advice, would be greatly appreciated!
Thanks so much.
~JJL

Try selecting a different ip address range for the VN. 192.168.0.x is a default for a lot of gear and I read that it could cause problems in one of the Leopard setup docs. try something like 192.168.x.y where x is more than 0 or 10.x.y.z again where x is More than 0
It really is worth downloading all the docs from the apple site and burning them to CD
http://www.apple.com/server/documentation/

When setting the split-days to "every 15 minutes," the week and comparison views show incorrect time ranges for the day

When I change the "split-days" interval time, under Options > Settings, to
15, or every 15 minutes, the week and comparison views don't show the correct
time range for the day.

For example, if I click View to display the calendar and then click Week to get
a weekly view, the time range displayed is from 6:00 a.m.
to 4:00 p.m. If I click Comparison to get a
comparison view, the time range displayed is from 12 p.m.
to 6:45 p.m.

In this example, should both of these views show the same time range, from
9:00 a.m. to 4:00 p.m.?
No, the two views will not necessarily show the same time range. The time
range for the comparison view will start at the beginning prefs time only
if you have something scheduled (on any day of the week) starting at that
time. For example, on one of the days during your week of comparison, if you
create an event that starts at 9:00 a.m. and then open the comparison view, the
time range displayed will start with 9:00 a.m.

Additionally, view times will expand past the configured settings if events
span past the time range. That is, if you have an event that spans from
5:00 p.m. to 8:00 p.m., the event will be reflected in the view, even though
your time range may be set to go only to 6:00 p.m.

Umm yes.
The settings are stored in ''prefs.js'', so you could swap various copies of this file in and out.
However, the system will load ''prefs.js'', then, if present, ''user.js'' , so you can set up just your changes in ''user.js'' .
The sort of line you need to look for is like this:
<code>user_pref("mail.server.server14.check_time", 10);</code>
You'll need to do some research to identify which of your accounts is which.
Search for the account's email address:
<code>user_pref("mail.identity.id10.useremail", "xenos@example.com");</code>
Use the id number to locate the account number:
<code>user_pref("mail.account.account29.identities", "id10");</code>
Use the account number to find the server number:
<code>user_pref("mail.account.account29.server", "server14");</code>
Finally, you can then use the server number find the account's time setting:
<code>user_pref("mail.server.server14.check_time", 10);</code>
This last entry may not exist, if you have never changed the setting from the default 10 minutes.
Do be careful with your typing and copy/pasting; if the file fails the syntax parser it will silently fail.
And make sure Thunderbird is shut down when you do the swap. If it's open, it may overwrite changes, and in any case, it only reads the settings file when it starts up.

Using Oriented Point for from-to address ranges

I am trying to use the oriented point functionality to place from and to address ranges on my map. I have a problem that for the Horizontal Align, when I set the From to "Start" and the To to "End", the connecting edges cause the numbers to overlap. (ie: edge 1's To overlaps edge 2's From)
Has anyone gotten this to work correctly?
I am using the 091229 build of Mapviewer 11.

The problem you have with using AD accounts for 802.1x auth as well as Network admin is mapping the groups. You can't map groups based on service being requested so unless all your Network Team accounts map to the same group you would have used for 802.1x then you have a problem
So the best option is probably to create seperate acccounts inside ACS for network admins, ( a shame I know since passwords will not be in step ).
As for deployment docs there is a white paper I co-authored that describes how to get the most out of T+ Network Admin access.
You can find it via Extraxi's web site
http://www.extraxi.com/TDA.htm
And Select the "Building Scalable T+ Device Mgmt link"

I want to use my icloud email address as a new apple ID. It was an additional email contact address I originally set up for my child. But now, I'd like to set her up on Family Sharing, using that email as her ID. Obviously, when I try to use it wh

I want to use one of my icloud email addresses as a new apple ID. It was an additional email contact address I originally set up for my child. But now, I'd like to set her up on Family Sharing, using that email as her ID. Obviously, when I try to use it when setting up a new apple ID, it says the email is already being used (Yes, by ME) and I need to select a different one. Can I somehow delete that email address in order to set up a new apple ID using it? Or is there another way to "re-use" that address for my child's new ID?

"Well, then I want to be able to merge that one and the one my purchases are on..."
This is exactly what I want to do but don't think I can:
I noticed the following :
If you attempt to create an Apple ID which is the same as your @icloud email address from the online facility, it does not allow you (can't use an Apple associated email address as your Apple ID). However - if you start a fresh device - such as a new iPhone, iPad (must be mobile it seems), and then create an iCloud account and Apple ID from the prompts when setting up the mobile device, it IS possible to have your Apple ID and @iCloud email address as the same. I know because I just did it!
Unfortunately for me, the result I got above is not for one of my own ID's but a friends, and I would VERY much like to do the same - my current Apple ID is a completely different email address from my iCloud account. Trying to get them the same in my situation is a major bother - I think that if I wipe a device (such as an iPhone5 that is mine) and try to setup as I did my friend's device, then I will get a conflict because the iCloud email I have ALREADY exists. This is my worry and I will not attempt this until I get the new iPad 4 soon to test this.
There is an inconsistency here between the two methods of creating Apple ID's and iCloud accounts.
Overall in my opinion, the Apple ID system as currently available from Apple is not designed very well, and should be addressed.
Best wishes -

How to set a date range for date field ?

Dear Experts,
Scenario:
I have a query in validating the date field in my BSP application. My application is for maintain infotype 0023 Other/Previous Employers online by employees in the company.
As per our design we are maintaining the all employment details of the employee both ( with in the current company / previous employment outside the company) in the same infotype.
Every employee will have a hiring date within the SAP HR system. We consider this date as the cutoff date between current and previous employment in our application. When the employee updating the details wia BSP page I need to check the following.
Record inside current company: Validation that, the user should only able to enter BEGIN DATE (BEGDA) greater than or equal HIRING DATE and END DATE(ENDDA) should be greater than FROM DATE (BEGDA).
Record outside current Company: Validation that, the user should only able to enter BEGIN DATE (BEGDA) less than or equal HIRING DATE and END DATE (ENDDA) should be greater than FROM DATE (BEGDA) and less than HIRING DATE.
Technical Requirement:
How to set a date range for date field, i.e. how we can limit the date range in a HTMLB date field? Can this it be achieved via standard functionality of HTMLB?
Following is the code to describe date field in my application.
 <htmlb:inputField id= "ENDDA_NEW_IN"
 type= "date"
 doValidate= "TRUE"
 showHelp= "TRUE"
 disabled= "FALSE"
 width= "183"
 style= "cssTextAreadate"
 value= "<%='99991231'%>"/>
Thanks a lot in advance for your assistance and help.
Cibinu2026
Edited by: cibin kuruvilla on Nov 12, 2008 11:13 AM

Hi,
This functionality is known to be very important and is a key part of the next major release of the JRC planned for the first half of 2008.
Regards,
Blair Wheadon
Product Manager, Crystal Reports

HT201320 I want to have all the facilities of my Ipad obtained for my e mail address, available for another e mail address belonging to my wife. Anyone know how I set this up please?

I want to have all the facilities of my Ipad obtained for my e mail address, available for another e mail address belonging to my wife. Anyone know how I set this up please? I am a new user and long in the tooth so any help would be much appreciated.

What do you mean by "facilities of my Ipad obtained for my e mail address"?
Do you mean you want to setup your wife's email account on your iPad? Or something else?

Can I set the address format for individual contacts?

I have some foreign friends and would like to set the address format for their individual cards correctly. I can't seem to find a way to do this. I will be taken aback if this can't be done - I think the old Claris contact product did that.
Anyone with any answer?
Bryan

Hi Bryan,
When in edit mode, can you right click on the address field and change the country format there? I'm not on a Mac at the moment to double check, but that's what you do in OS 10.4 so I'd be surprised if it were changed in 10.5.
Edit: Here's picture to demonstrate what I'm referring to:
!http://www.ampersandbox.com/imprint/change-address-format.jpg!

HOW TO set the input range for analog in (DAQ)?

How can I set the input range of a - NI DAQ USB 6259 - analog voltage input?
I wish to control it directly in my VI. Is it possible to set different ranges for different input channels?
Thank you,
Roberto

duplicate post

How can I set a date range for a Date/Time Field in LiveCycle ES2?

I need to set a specific date range for a form set up in LiveCycle ES2. Cannot see where i allows me to do that without a code entered.

Hi,
You can't set a start and end date for the date/time field, the best you can do is validate the range after the user has selected it.
An alternate is to make your own date / time field, like this sample http://adobelivecycledesignercookbookbybr001.blogspot.com.au/2013/05/an-alternative-date-p icker-for.html
Regards
Bruce

Set Up number range for OM Objects

Hi All,
I have set up Ext number range for Org Unit & Position.
example: Org Unit 50000000 - 599999999 and i have uploaded data till 50000999.
so it should be update current number as 50000999.
but in my scenario its not updating current number still is '0'
Please help me.
regards

Hi Waseem
I am agree with your reply as I am doing the same thng. Currently I am using External Number Range as I am going to upload data and later will change into Internal.
but my question is in Number Range Maintanace in Current Number should be update automatically or not.
Example Org Unit from 500000000 - 59999999 and we uploaded data till 50000900
so in Current it should show 50000900
NO From Number To Number Current Number EXT
EX 500000000 59999999 0
but in my case it is showing '0' in current number
so Please confirm me whether it should update automatically, if yes pls tell me how
regards,

Setting up number range for projects in cProjects

Hi,
I am new to cProjects & my apologies if my question may sound very naive. My client wants an alpha-numeric number range to be set up for numbering of projects. Is this possible & if yes how? Which is the object for setting the number range? (I believe the transaction in "SNRO")
Thanking you for taking a note of my querry.
Regards
Deepak

Sample Code Method SET_DEFAULTS_UPON_CREATION
Method IF_EX_DPR_ATTRIBUTES~SET_DEFAULTS_UPON_CREATION
*/ This method is called when creating a new project element (i.e. project definition,
*/ phase, task, etc) and can be used to fill in default values for standard as well
*/ as customer defined data fields.
*/ This implementation is provided to assign customer specific numbers to project
*/ elements.
*/ It's interesting to note that when this method is called, the external ID of the
*/ object has already been determined and assigned by the default numbering services
*/ class CL_DPR_NUMBERING_SERVICES. It is also interesting to note that if a user
*/ specified an ID for the object through the user interface, changing the identifier
*/ in this method will have no effect -- meaning the user specified ID will still be
*/ assigned to the object.
*/ Only the example for Project Definition is provided. For other project elements,
*/ insert similar code between the Beginning and End comments below. In addition,
*/ the filter for this BADI implementation must be updated to include any other
*/ project element for which custom number assignment is desired.
DATA:
 lr_parent TYPE REF TO if_dpr_common,
 lr_project TYPE REF TO cl_dpr_project,
 lr_approval TYPE REF TO cl_dpr_approval,
 lr_individual_approval TYPE REF TO cl_dpr_individual_approval,
 lr_phase TYPE REF TO cl_dpr_phase,
 lr_task TYPE REF TO cl_dpr_task,
 lr_checklist TYPE REF TO cl_dpr_checklist,
 lr_checklist_item TYPE REF TO cl_dpr_checklist_item,
 LV_NUMBER TYPE DPR_TV_EXTID,
 LV_NUMTEXT TYPE CGPL_EXTID,
 LV_INTERVAL TYPE NRIV.
FIELD-SYMBOLS:
 <ls_project_attrs> TYPE dpr_ts_project_int,
 <ls_phase_attrs> TYPE dpr_ts_phase_int,
 <ls_task_attrs> TYPE dpr_ts_task_int,
 <ls_checklist_attrs> TYPE dpr_ts_checklist_int,
 <ls_checklist_item_attrs> TYPE dpr_ts_checklist_item_int,
 <ls_approval_attrs> TYPE dpr_ts_approval_int,
 <ls_individual_approval_attrs> TYPE dpr_ts_individual_approval_int.
*/ Determine which project element (object category) is being processed
CASE flt_val.
 WHEN cl_dpr_co=>sc_ot_project.
 ASSIGN cs_attributes TO <ls_project_attrs>.
 lr_project ?= ir_common.
*/ Beginning of custom project number assignment.
*/ In this example, the default system numbering is manipulated to
*/ produce the Project Number...
*/ Get info regarding the number range for operative projects...
 CALL FUNCTION 'NUMBER_GET_INFO'
 EXPORTING
 NR_RANGE_NR = 'DO'
 OBJECT = 'DPR_EXTID'
* SUBOBJECT = ' '
* TOYEAR = '0000'
 IMPORTING
 INTERVAL = LV_INTERVAL
 EXCEPTIONS
 INTERVAL_NOT_FOUND = 1
 OBJECT_NOT_FOUND = 2
 OTHERS = 3.
 IF NOT SY-SUBRC IS INITIAL.
 RAISE EXCEPTION TYPE CX_DPR_FATAL_ERROR
 EXPORTING
 TEXTID = CX_DPR_FATAL_ERROR=>SC_INVALID_PARAMETERS.
 ENDIF.
*/ Strip off the year that has been appended to the object number
*/ by the default numbering services...
 write <ls_project_attrs>-project_id(20) to lv_number.
*/ Get the incremental number of the project from the number range...
 lv_number = lv_number - LV_INTERVAL-FROMNUMBER.
*/ Format the number according to customer specific requirements:
*/ In this example the number is PROJ-<inc num> where <inc num>
*/ is the incremental number of the project (i.e. for the 33rd project
*/ created, the <inc num> is 33).
 WRITE lv_number to lv_numtext no-zero.
 condense lv_numtext.
 CONCATENATE 'PROJ' lv_numtext INTO lv_numtext SEPARATED BY '-'.
 TRY.
 CALL METHOD LR_PROJECT->SET_PROJECT_ID
 EXPORTING
 IV_PROJECT_ID = lv_numtext.
 CATCH CX_DPR_OBJECT_UPDATE_ERROR .
 RETURN.
 ENDTRY.
*/ End of custom project number assignment.
 WHEN cl_dpr_co=>sc_ot_phase.
 ASSIGN cs_attributes TO <ls_phase_attrs>.
 lr_phase ?= ir_common.
*/ Beginning of custom phase number assignment.
*/ End of custom phase number assignment.
 WHEN cl_dpr_co=>sc_ot_approval.
 ASSIGN cs_attributes TO <ls_approval_attrs>.
 lr_approval ?= ir_common.
*/ Beginning of custom approval number assignment.
*/ End of custom approval number assignment.
 WHEN cl_dpr_co=>sc_ot_individual_approval.
 ASSIGN cs_attributes TO <ls_individual_approval_attrs>.
 lr_individual_approval ?= ir_common.
*/ Beginning of custom individual approval number assignment.
*/ End of custom individual approval number assignment.
 WHEN cl_dpr_co=>sc_ot_checklist.
 ASSIGN cs_attributes TO <ls_checklist_attrs>.
 lr_checklist ?= ir_common.
*/ Beginning of custom checklist number assignment.
*/ End of custom checklist number assignment.
 WHEN cl_dpr_co=>sc_ot_checklist_item.
 ASSIGN cs_attributes TO <ls_checklist_item_attrs>.
 lr_checklist_item ?= ir_common.
*/ Beginning of custom checklist item number assignment.
*/ End of custom checklist item number assignment.
 WHEN cl_dpr_co=>sc_ot_task.
 ASSIGN cs_attributes TO <ls_task_attrs>.
 lr_task ?= ir_common.
*/ Beginning of custom task number assignment.
*/ End of custom task number assignment.
ENDCASE.
ENDMETHOD.

Determing IP Address Ranges for Setting up a VPN

Similar Messages

Maybe you are looking for