Direct Access is working but how do I configure it for remote services, client management software, etc..

Good morning/afternoon/evening TechNet,
I've finally gotten a DA client connected to the corporate network utilizing an external network. I'm having a couple issues, one, not being able to ping the server from a computer that's on the same domain(I'm able to ping the DA client from the DA server).
I'm not sure if there is a firewall setting that needs to be open on the client for incoming echo requests? Second, we use a client management system called BMC and I would like the direct access server to be able to utilize the BMC server so that I can manage
the DA client whenever its on the network. I noticed on the DA server that "Step 3" offers an area where it allows you to add servers that will be used for direct access client management. Would I just need to populate the server in here and then
open appropriate firewall rules so that the DA server has access to them? Lastly, Trying to "mstsc" into the DA client what would I need to open up on both sides so that I'm able to do this?
Sorry about the horrible grammar but I've been up 24+ hours getting this awesome but pain in the butt Direct Access feature working.
Thank you as always!
-Liqsh0t

I'm afraid it's a bit more complicated than adding a server into the list in Step 3 :)
When a DirectAccess client is connecting into a corporate network that is IPv4 (I assume yours is, most are), it can reach into your IPv4 servers because the DA server is doing NAT64/DNS64 translations, turning all of your DirectAccess IPv6 packets into
IPv4 packets before they head inside the network. But even though this happens in the background without you really knowing about it, the key thing there is that all DirectAccess traffic is IPv6. This means the clients can only be contacted via IPv6. If you
have IPv6 inside your network, then you can route outbound fairly easily to your DA client computers. If you are all IPv4 inside as most companies are, then you have to either roll IPv6 out inside your network, at least partially, or you have to utilize ISATAP
inside your network in order to create a sort of "virtual IPv6 cloud" that runs on top of your IPv4 internal network. This enables your internal management systems (like the BMC servers and helpdesk computers for RDP access outbound) to have a connection
into the IPv6 world, which then enables them some routing capability to get out to the IPv6-connected DA clients. In addition to this IPv6 or ISATAP setup, you also need to configure WFAS rules on the DA clients so that they will allow this traffic.
There is some info on setting up ISATAP here: http://blogs.technet.com/b/jasonjones/archive/2013/04/19/limiting-isatap-services-to-directaccess-manage-out-clients.aspx
Otherwise one of the chapters in this book is also dedicated to the setup of a selective ISATAP environment, to be used for the purposes of DirectAccess outward management: https://www.packtpub.com/virtualization-and-cloud/microsoft-directaccess-best-practices-and-troubleshooting

Similar Messages

How do i configure REGISTRY for enterprise services

Hi,
Please let me know how to Configure Registry for enterprise services in SAP Discover system V2.
Regards,
Naveen

I'm afraid it's a bit more complicated than adding a server into the list in Step 3 :)
When a DirectAccess client is connecting into a corporate network that is IPv4 (I assume yours is, most are), it can reach into your IPv4 servers because the DA server is doing NAT64/DNS64 translations, turning all of your DirectAccess IPv6 packets into
IPv4 packets before they head inside the network. But even though this happens in the background without you really knowing about it, the key thing there is that all DirectAccess traffic is IPv6. This means the clients can only be contacted via IPv6. If you
have IPv6 inside your network, then you can route outbound fairly easily to your DA client computers. If you are all IPv4 inside as most companies are, then you have to either roll IPv6 out inside your network, at least partially, or you have to utilize ISATAP
inside your network in order to create a sort of "virtual IPv6 cloud" that runs on top of your IPv4 internal network. This enables your internal management systems (like the BMC servers and helpdesk computers for RDP access outbound) to have a connection
into the IPv6 world, which then enables them some routing capability to get out to the IPv6-connected DA clients. In addition to this IPv6 or ISATAP setup, you also need to configure WFAS rules on the DA clients so that they will allow this traffic.
There is some info on setting up ISATAP here: http://blogs.technet.com/b/jasonjones/archive/2013/04/19/limiting-isatap-services-to-directaccess-manage-out-clients.aspx
Otherwise one of the chapters in this book is also dedicated to the setup of a selective ISATAP environment, to be used for the purposes of DirectAccess outward management: https://www.packtpub.com/virtualization-and-cloud/microsoft-directaccess-best-practices-and-troubleshooting

How to set "Configuration Variant" for a sales order item using function

Hello All,
I use function module 'SD_SALES_DOCU_MAINTAIN' to create Customer Indep. Requirements but how to set "Configuration Variant" for a sales order item.
Is their any idea or sample code?

Hi Zhijun zhang,
<u>http://help.sap.com/saphelp_nw2004s/helpdata/en/c0/98038ce58611d194cc00a0c94260a5/content.htm</u>
<u>http://help.sap.com/saphelp_nw04/helpdata/en/c0/980374e58611d194cc00a0c94260a5/content.htm</u>
A variant is simply an SAP report where the parameters for running the report have been set by the user and then saved with unique name. This allows future retrieval and execution of the report faster without reentering the parameters. As a convention the variant name should start with with the digits 50 so searchs for LHU variants is easier and quicker.
The first link will guide you by screen shot wise.
Award points if it adds information.
Thanks
Mohan

Hi, a "General error"appears on my Final Cut Project when I try to save it. I read in this Community that the solution could be save on the desktop. It works, but how could I solve it in my External HD?

Hi, a "General error"appears on my Final Cut Project when I try to save it. I read in this Community that the solution could be save on the desktop. It works, but how could I solve it in my External HD?

Is the external formatted to Mac OS Extended?
Right click the external icon on the Desktop and select Get Info.
This will tell you the current format.
Al

How does the Passbook application work? How am I able to import my plane ticket, concert ticket etc into Passbook?

How does the Passbook application work? How am I able to import my plane ticket, concert ticket etc into Passbook?

Try the following to fix the iTunes Can't Connect issue that you are having:
Open Settings.
Open General.
Open Date & Time.
Switch the Set Automatically setting to Off.
Open Set Date & Time.
Set the date to a year ahead.
Go back to the Home screen and open Passbook.
Tap the App Store button. The App Store should load.
Go back to Date & Time and turn on Set Automatically.
Thanks to: https://discussions.apple.com/message/19622208#19622208

I purchased pages app but in iCloud it prompts me to purchase page. It shows it has been downloaded but how do I launch it for use?

I purchased pages app but in iCloud it prompts me to purchase page. It shows it has been downloaded but how do I launch it for use?

Documents in iCloud, whether uploaded automatically from an iOS device or via iCloud.com in a web browser from your Mac, are not available for sharing with others. You will need to use something like Dropbox or other public web-sharing site.

How to create custom infotype for training and event management

hai freinds can any one tell me how to create custom infotype for training and event managment with following fields
PS No PA0000-> PERNR
Name - PA0001 -> ENAME
IS PS.No. PA0001-> PS no. of Immediate Superior
IS name PA0001 -> ENAME
thanx in advance
afzal

Hi,
Your question is not clear for me. Since it is a TEM infotype, it could be a PD infotype.
If you wish to create a PD infotype, use transaction PPCI to create the infotype.
But before that you need to create a structure HRInnnn (where nnnn is the infotype number) with all the fields relevant for the infotype.
If you wish to create a PA infotype, use transaction PM01 to create the infotype.
But before that you may be required to create a strcuture PSnnnn (where nnnn is the infotype number) with all the fields relevant for the infotype.
Regards,
Srini

How Do I Configure SSL for RAC Installation.

Experts,
Requesting your inputs on configuring SSL for my RAC environment.
- Oracle DB version is 11.2.0.2
- RAC is with two nodes.
- Two nodes are : rac1.oracle.com and rac2.oracle.com
- RAC setup has SCAN feature configured. SCAN FQDN : racscan.oracle.com
- All clients talk to RAC DB using SCAN feature as shown below.
client applications -> racscan.oracle.com ---> rac1.oracle.com
---> rac2.oracle.com
- tnsnames.ora file on both RAC instances has hostname as "racscan.oracle.com" instead of their individual phyiscal host names.
How do I configure SSL for RAC:
1. Do I need to generate certificate request for individual hostnames or only for SCAN hostname ?.
2. If I generate a certificate based on SCAN hostname, how does SSL work since SCAN hostname is not a phyiscal host name ?
3. What is recommended strategy for configuring SSL for RAC environment ?
Thanks

The documentation on the creation of Oracle Wallets is not specific to RAC, and the RAC SCAN instructions for TCPS are very vague on the specific requirements for the certificates required in the wallets for proper operation. I too am struggling to get it to work. Does anyone have a more technical guide to the specific configuration of the certificates needed and what specific configuration file changes need to be made?
Also, the self signed documentation is getting REALLY old. Oracle, please stop giving instructions that demonstrate irresponsibility and show the proper method of certificate requesting and importing to wallets.
Edited by: user11338513 on Mar 21, 2012 2:23 PM

Hi All, Can I access Adobe reader internal variables in my pdf? for example location, file size, creator etc.

Hi All, Can I access Adobe reader internal variables in my pdf? for example location, file size, creator etc. I want to create a hyperlink in my pdf $Location/another.pdf?

Thanks Gilad.
let me rephrase my requirement. I have a group of pdf files where one pdf has hyperlinks to the other pdfs
parent.pdf
-- child1.pdf
-- child2.pdf
when I click on the child hyperlink I want the child.pdf to be displayed in another window/reader
If I have the hyperlink as file:./child1.pdf it does not work. It needs a complete path.
So when I create this file in MSWord first, Can I artificially create a placeholder for the directory and append the child.pdf?
suppose the properties say Location = /tmp/pdfs/
can I have in the hyperlink something like file:/$Location/child.pdf and when reader is used it substitutes the url
so I get file:/tmp/pdfs/child.pdf
Hope I explained this.
thanks
-Francis
OK, let me have a very simple requirement. Can I create a pdf and when I open it
there is one line that says - This File is in xxx directory.
where xxx is the directory name where the file is. If I have the file in /tmp then it should say This file is in /tmp directory
and if I copy it to /other then open it, it should say This file is in /other directory.

Was able to download and install Premier but can't install Photoshop Elements - getting multiple error messages (pirated software, etc). Any ideas?

Was able to download and install Premier but can't install Photoshop Elements - getting multiple error messages (pirated software, etc). Any ideas?

download from adobe.com or prodesigntools.com.
Downloadable installation files available:
Suites and Programs: CC 2014 | CC | CS6 | CS5.5 | CS5 | CS4, CS4 Web Standard | CS3
Acrobat: XI, X | 9,8 | 9 standard
Premiere Elements: 13 |12 | 11, 10 | 9, 8, 7
Photoshop Elements: 13 |12 | 11, 10 | 9,8,7
Lightroom: 5.7.1| 5 | 4 | 3 | 2.7(win),2.7(mac)
Captivate: 8 | 7 | 6 | 5
Contribute: CS5 | CS4, CS3
Download and installation help for Adobe links
Download and installation help for Prodesigntools links are listed on most linked pages. They are critical; especially steps 1, 2 and 3. If you click a link that does not have those steps listed, open a second window using the Lightroom 3 link to see those 'Important Instructions'.
window using the Lightroom 3 link to see those 'Important Instructions'.

How to assign the vendor for Pipeline material like Oil,power etc.

Dear All,
Can anybody tell me , how tp assign the vendor for Pipeline material like Oil,power etc.

Dear,
Create source list ME01 maintain vendor here if vendors are multiple.
Create Info record ME11for vendor and material combination
Regards,
R.Brahmankar

How long should it take for the iOS 5 iPhone software to update?

How long should it take for the iOS 5 iPhone software to update? Mine is taking a ridiculous amount of time, to the point where I need to stop it as i need to go out and need my phone !

Depends on how strong your wifi connection is.
you can try a reset hold down the home/sleep button together until you see the apple logo and then release.

I have a time capsule connected directly to fiber connection. I have connected a windows server directly to TC and configured it for remote desktop connection. From my interanet I can access srvr but not from my home. What config I need on TC?

I have a time capsule directly connected to fibre optic point out. All pcs and macs are connected wirelessly to the internet. I have connected a windows server pc to TC. When configured for Remote desktop connection, I can access windows server from within interanet but don't know how to access it from internet. I guess I need to change some settings in TC to get some ip adress for the remote desktop connection from my home. Anyone who can help me out? Appreciate it.
Narmin

I am a little lost now.. I have read again your title and your first post.. and they seem inconsistent.
In the title you state.
From my interanet I can access srvr but not from my home.
Interanet is not a word I know.. I assumed intranet...are you talking about internet or intranet? And just to be clear say WAN or LAN.. !! Is your home part of the interanet??
In the first post you state,
I can access windows server from within interanet but don't know how to access it from internet.
Now this is more normal.. the issue is not in the home at all, it is accessible from there but fails from internet. If this is correct, then you can do a few obvious things to determine where the problem is.
But first I need to know are you actually testing from a different internet connection to your home lan.. you are not just trying the public IP from inside the LAN as that will fail due to the TC not doing NAT Loopback.
I am also assuming the TC is the only router in the network, and has the public IP on the WAN interface.
And I am also assuming you have turned on the ping responder and you can actually ping your public ip from the internet and get a response. This helps no end in figuring out where there are issues. Strange but I have no idea if there is a ping responder in the TC WAN so you might need to forward that as well. Also if you have a dynamic public ip address are you using dyndns or no-ip or some other service to connect.
1. Test bypassing the TC.. plug the internet connection straight into the windows server,, and test if you have access. If yes, the TC is the problem.. if not, your setup on the windows server is wrong.. look at firewall in particular.
2. Assuming from test 1 the TC is the problem, Post the screen shots of the port forwarding setup for us to look at.. that is by far the easiest way to check it out.
There are lots of references to port forwarding in the TC.. eg
http://must-know-mac.blogspot.com/2008/07/how-to-port-forward-time-capsule.html
The things that generally go wrong are firewall on the computer that is accepting the port.
The ISP doesn't allow connections on a particular port. (not likely in your case)
The router is behind another router.. double NAT will kill any port forward.
Upnp has already allocated a port.. not an issue as TC doesn't use upnp although a reboot of everything after you set port forwards is well worth it.. amazing how things don't stick properly without a reboot.
IP on the receiving device is not static and so changes.
Not enough or right type of ports are opened. This is always messier than it looks as one port is often not enough for two way communications.

Downloaded new 4.0 today and decided to download and sync mobile to my HTC EVO 4g which seems to work but how do I make Firefox the homepage on phone?

Have had Firefox for years on my mac and works great. Downloaded today new 4.0 on desktop mac OS 10.6.7 and works great. Have sync and decided to follow instructions to download Firefox to my HTC EVO 4G. Seemed to download correctly and did get the 3 part key and entered fine. Firefox icon shows up with icon in list of All apps and will work if clicked upon.
But, how do I make Firefox my home page on my phone? When I select magnifying glass key on glass I go to standard google homepage I've had since day one. I'd like to go directly to Firefox as I do on the desktop.

Oops, I forgot a step between 7 and 8 ... before syncing the iPhone I need to explicitly send the document back to iTunes on the iPhone, or the changes won't come over at all ...
and then one more thing ... Numbers on iOS does NOT recognize a number of key features of the OSX app, such as conditional formatting ... so after editing my document on iOS and syncing it back to OSX on my Mac, all of those settings are lost (no more conditional formatting, have to do it all over again)
What am I doing wrong ?

After I right-clicked on an unwanted email in Microsoft Web Access and put a filter on it all my emails and the menus disappeared. I can re-access in IE but how do I restore what I have foolishly done in Firefox?

I was working through my emails in Microsoft Web Access when I came across an email from a sender who keeps spamming me. I right-clicked on this unwanted email, saw a filter option and (recklessly) chose it. ALL my emails and the menus disappeared. I can re-access my emails in MWA in IE but how do I restore what I have foolishly messed up in Firefox? When I get to my email page in MWA in Firefox I now see nothing but the movable vertical bar.

You should really read the manual.
"How do you restore from backup? "
Restore. When given the choice, choose to use backup.
"And how can I check to see if the pics and videos are on my computer somewhere first??"
They would only be where you put them. What program did you use to import them? Pics/vids taken with ipod are not part of the sync process at all. You should be importing them just as you would with any digital camera.
If you did not import them, then they are not on your computer.

Direct Access is working but how do I configure it for remote services, client management software, etc..

Similar Messages

Maybe you are looking for