Do client dhcp requests go through the lwapp tunnel

do client dhcp requests go through the lwapp tunnel?
for local not h-reap.
do they drop out of the lwapp tunnel and hit the dynamic interface and get forwarded to whatever the dhcp is for that vlan?

The WLC will dump the traffic out on the appropriate dynamic interface. This interface is how the wireless communicates to that particular vlan.

Similar Messages

Automatically add a users primary computer in an incident request submitted through the portal

Hi,
How could i automatically add a users primary computer in an incident request submitted through the portal in a way that is transparent to the user? Is this possible to set up in scsm 2012 R2?
If not, is it possible to set up an orchestrator runbook or something for this?

Hi,
Yes, you could do this with a Runbook in Orchestrator. There's some things to think about though.
- If the user have several primary computers, how would you know which one to relate to the incident?
- How can you be sure that the user is reporting an issue about his Primary Computer?
- Are you sure you want to relate the computer to an Incident even if the incident is about something else, like a mobile phone issue?
Regards
//Anders
Anders Asp | Lumagate | www.lumagate.com | Sweden | My blog: www.scsm.se

Navigiation through the Time Tunnel of Time Machine impossible :-(

Hello
I recognised a strange behavior when using Apple Remote Desktop with a Time Tunnel within Time Machine.
When I enter over VPN-Connection to a Server of a client and I am able to Enter Time Machine without any problem. Also to Navigation through all the saving in the left bar are possible but as soon as I go to the middle of the screen to copy file, "I lose the cursor". I see only the Cursor in the left Bar and in the Button Bar (cancel, today, restore).
I tested it with 2 server (Intel xerve 2.66 with 12 Gb Ram and an PowerMac G5 with 8Gb RAM). When I test it with my lokal server over 100mb ethernet it works fine.
I would suggest the simulation of the time tunnel background takes to many resource to send them over the VPN. We working with VPN Tunnels with fast Internet (VDSL 20000/1000 kps)
Any Idea how I can solve this problem?
Gérard

Wifi is the same.. all wifi networks are just that.. networks. There is no direct control of the hard disk.. it must have a smart OS (firmware) built into the unit that shares the hard disk over the network using AFP or SMB (mostly those two but there are other protocols, like FTP, HTTP, etc but Apple doesn't believe in anything else) Time Machine is only able to backup local drives.. that is a drive that is totally controlled by the computer. It matters not a wit, which interface you use, sata, esata, usb, fw400, fw800 or thunderbolt.. all of them are directly controlled by the computer.
Carbon copy cloner can copy files from one network drive to another. Finder can of course copy files.

Unable to print from HQ to Branch through the VPN tunnel between ASAs

We have site to site VPN configured between ASAs. The VPN tunnel is up and running as desired except for one printer in the subnet. the users in the Hq cannot print in the branch office printer. I have allowed the ip protocols for the printer subnet but still it is not working. When I do a packet trac the traffic for the printer is allwed through the tunnel.
Can anyone suggest what can be preventing from printing?

When other printers in the same subnet can be reached, I would first control the IP-settings of the printer. In my experience it's most likely a wrong subnet-mask or gateway.

Which packets go through the VPN tunnel

Guys,
I've just added a external server ip address to go through our vpn tunnel and then out the remote site internet connection.
How can I check that this is the path the packet is taking?
If I do a tracert then I can't see the path?
Thanks

Well, you could either monitor your logs on your VPN device (whatever that may be - not specified), as long as you have the appropriate logging level.
For a traceroute, assuming there's a routing device on the other end of the tunnel you would traverse, you should be able to see the last hop on your end being your VPN device, and then the router or the destination host, as the next hop (and that would indicate you're 'in' the tunnel).
A third option, and more challenging, is having a packet sniffer that knows the PSK, or has the ability to decrypt the session, and analyze the traffic from Wireshark or another packet analysis tool.
HTH!
-Chris

LWAPP - client roaming - DHCP request

I was thinking that by using WPA-PSK, client roaming producing a DHCP request when changing AP will not be sent by the controller to the DHCP server, which appears to be false.
Wanting to know : does CCKM (with leap) could stop this behavior, eliminating that DHCP request ? I know Radius request will not be send but what about the DHCP request ?

Agreed. You should not be getting a dhcp request when roaming. THe only time I've seen that happen is when the dhcp server does not support dhcp requests by proxy. In that case go to the cli and
config dhcp proxy disable
That will force the controller to show the client information in the dhcp request and not the virtual interface of the controller.
I don't think this is your problem however.

How do I access the remote(requesting) clients IP address through the Portal API?

How can I access the remote(requesting) clients IP address through the Portal API?
On our 4.5 - IIS system, we can acces it using the Request.ServerVariables("Remote_Addr") in the ASP pages.
We are deploying 5.0 on Java Portal and would like to be able to do this through the Portal's API so I can call it in one of our custom login Activity space or control etc.
I have looked documentation for the HTTPServletRequest object. It seems like we should be able to access it through one of the methods getRemoteAddr if we can get a handle to HTTPServletRequest object through the Plumtree's framework.
I think the XPRequest object encapsulates the HTTPServletRequest but I didn't see getRemoteAddr method listed in the Javadocs.
Is there a way to access the client's IP address through the Plumtree's framework?
I need to do this so we know the location of the user and in our business case we have fixed IP adresss which let us identify which location is user accessign the system from. We can't do this through preferences or profile because we have to use generic userid for the specifc group of users.
Any help on this would be appreciated.
Thanks.
Vanita

Hi, Vanita. For now, you can use
stringsClientIP = HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"].ToString();
Hope that helps!
Sarah

Is it possible to request Express Replacement Service (out of warranty) through the online support?

I fell in a river with my iPhone 4S in pocket and after trying the various tips for drying it out, etc, it will not turn back on at all and it is pretty clear it is kaput. I have determined my best option is to send it in to Apple for an out of warranty replacement, and I would really like to pay for the Express Replacement Service so I can get a new one ASAP (I live nowhere near an Apple Store, so that is not an option), but I do not see anywhere to request this through the online support method. Anyone know how one can request ERS online? I would just call in to request it, but I can't do that without a working phone.

If it has been less than 12 months, the "Deauthorize All" command will be grayed out. However, if you contact iTunes Customer Service, they can enable it for you.
Do not start a new account unless you really need it.
And yes, going forward, deauthorize a computer before doing any work on it. If the computer is working and accessible, you can authorize/deauthorize it as often as you wish.

DHCP request through accesspoint and router

This is how our setup is like:
Laptops => Cisco 1100 AP(static IP) => Wired LAN (Subnet 1) => Cisco Router => Wired LAN (Subnet 2) => DHCP server
What i would like is that the DHCP-request from our laptops is forwarded/relayed through the AP and Router to the DHCP-server and back.
We dont want to use the AP's internal DHCP server but centralise this.
At the moment i'v configured the AP through CLI and added the following command: ip dhcp-server xx.xx.xx.xx
Where xx is the IP of the DHCP server
On the Router i'v added the command ip helper-address xx.xx.xx.xx
Where xx is the IP of the DHCP server
Don't know if this is the correct way, but i do know it isn't working.
Some help is realy appreciated.
Grx,
Joris

You need at least the following connectivity for DHCP relay to work.
Between the DHCP relay agent and the DHCP server:
- UDP Port 67 <-> UDP Port 67
Between the DHCP server and the DHCP client:
- UDP Port 67 <-> UDP Port 68 (renewing/releasing a lease)
- ICMP echo (Most DHCP servers check if an IP is still free)
On the Cisco router you can use some debugging commands
to check that relaying works.
(This might produce a lot of output, careful on a production system.)
#term mon
#debug ip dhcp server packet
#debug ip dhcp server events
For Subnet 1 with the router's IP 10.0.0.1 and two configured
DHCP servers (192.168.0.1, 192.168.9.1) as "ip helper" a successfull
exchange looks like this:
DHCPD: DHCPREQUEST received from client 0100.aabb.bbcc.cc.
DHCPD: setting giaddr to 10.0.0.1.
DHCPD: BOOTREQUEST from 0100.aabb.bbcc.cc forwarded to 192.168.0.1.
DHCPD: BOOTREQUEST from 0100.aabb.bbcc.cc forwarded to 192.168.9.1.
DHCPD: forwarding BOOTREPLY to client 00aa.bbbb.cccc.
DHCPD: Forwarding reply on numbered intf
DHCPD: creating ARP entry (10.0.0.49, 00aa.bbbb.cccc).
DHCPD: unicasting BOOTREPLY to client 00aa.bbbb.cccc (10.0.0.49).
#undebug all
I would also try to ping the router's IP in Subnet 1 and a client
with a fixed IP in Subnet 1 from the server. (The DHCP server uses
this to check if a lease is actually free before handing it out)
Otherwise it's time for packet sniffing on the DHCP server
and the client. (snoop, tcpdump, ethereal)

DHCP requests through ASA

Hi ,
I have ASA5585 in routed mode (Check the attached diagram) , and my DHCP client on the inside , while the DHCP server is on the outside.
I know that ASA can be configured as a DHCP relay , but there is a condition
“DHCP clients must be directly connected to the ASA and cannot send requests through another relay agent or a router”
Is this means that the setup in the attached diagram cannot work ?
Is there any other way to make it work , without changing the ASA to transparent mode?

Hi,
I think the text above refers to a situation where you are actually using the ASA to Relay DHCP messages.
You couldnt therefore use the ASA to relay DHCP messages that were relayed by another device behind the ASA. Though I dont know why the DHCP messages would need to be relayed twice.
But as we can see in this case the L3 Switch is the device that handles the relay of DHCP messages to the actual DHCP server and the ASA doesnt have to do anything related to DHCP other than pass the unicast UDP traffic. Therefore you wouldnt be confiuring any DHCP related settings on the ASA and the above quote/limitation wouldnt apply to your setup
So it seems to me that you can leave out all the DHCP/DHCP relay configurations from the ASA and just allow the traffic originating from the L3 Switch
I might be able to lab this for you at some point at my home network if needed (Though naturally with different ASA model). Though I think we have several environments at work already that use an ASA5585-X (multiple context mode) where the customer Router uses "ip helper-address" to relay DHCP messages to a DHCP server located on a DMZ inteface of the ASA context.
- Jouni

DHCP client\server request validation?

Is there a way to have for example a client send a variable with it's BOOTP request that matches a DHCP server side variable to complete a trust relationship between client\server before handing out an address to the client?
Basically the client would have an option set say "wagon21" and the server would have to have that value present. Then any clients that do not have the "wagon21" in their request would not be given a DHCP address.

Hi,
According to your description, my understanding is that you want to implement the function: DHCP server assign IP address to specific DHCP-enabled client.
In general, a DHCP server is willing to assign IP address to all reachable DHCP enabled client that sends DHCPDISCOVER message. For Windows Server 2008 R2 and later version, DHCP Server can distribute DHCP leases based on MAC address by setting
Filters – Allow/Deny. Detailed introduction and configuration steps, you may reference:
https://technet.microsoft.com/en-us/library/dd759190.aspx
Note that:
1. If allow list is enabled, the DHCP server provides DHCP services only to clients whose MAC addresses are in the allow list
2. If deny list is enabled, the DHCP server denies DHCP services only to clients whose MAC addresses are in the deny list.
3. If both allow and deny lists enabled, the block list has precedence over the allow list. This means that the DHCP server provides DHCP services only to clients whose MAC addresses are in the allow list, provided that no corresponding matches are in the deny
list. If a MAC address has been denied, the address is always blocked even if the address is on the allow list.
Besides, you may configure DHCP user class, detailed information reference:
https://support.microsoft.com/kb/240247/?wa=wsignin1.0
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

OSX sends out Dhcp requests thru the wrong interface

I have setup an Xserve so far only providing file services over AFP. It is located in our computer room on a different broadcast domain. I use a separate machine as a DNS. I would like to use my Xserve's 2nd ethernet interface to provide Netboot/Netinstall services on a 192.168.x.x network for bulk imaging of our clients. I have enabled Dhcp and setup Netboot on the eth1 but the system.log shows that it is floding my computer room network sending dhcp requests from eth0.
I have checked the bootpd.plist file and the settings seem ok.

Check your terminology.
it is floding my computer room network sending dhcp requests from eth0.
The only way it would send any DHCP traffic on en0 would be if en0 was configured to use DHCP for its own configuration.
Running as a DHCP server is entirely passive - nothing happens until the server receives a request from a client on the LAN. Only at that point does the DHCP server send any traffic out over the wire.
In addition, 'flood' is a relative term. How much traffic are we talking here? Are you talking a few packets such as in the normal DHCP client request/refresh cycle, or are you talking hundreds of packets a second?

Time Capsule not passing wifi dhcp requests on the b/g network

Here's a weird one. Got two 1GB Time Capsules setup in bridge/extend mode. The Win2003 server is serving up DHCP on capsule 1 and I have wifi devices on capsule 2. Both laptops are using the N wifi spec and are getting an IP address from the Win2003 dhcp server. However, the iPhone is on the b/g network and it cannot get a dhcp request. I haven't tried the b/g network on capsule 1 yet but will. Has anyone seen this behaviour before? Would be annoying if I have to setup a 2nd dhcp server on the capsule 2 system. Essentially one capsule is in my basement and the other in my office upstairs. Any ideas?
Thanks, Joe

The reason you see conflicting conclusions is because we have to speculate about a lot of the details since Apple has not yet posted detailed specs, a user manual, or application tips.
Most of us are assuming the the wireless networking features of the Time Capsule will be similar if not identical to the existing Airport Extreme N base station. If that assumption is correct, your questions would be answered as follows:
1. yes, the TC could be used as an access point. It would have to be configured as a remote base station in a wireless distribution system (WDS).
2. and 3. yes, other clients on the network would be able to access the TC hard drive and printer
4. you could set things up the other way around - TC as the base station, and the older Airport Extreme as the remote base station.
5. for 802.11g connections, the older base station and its external antenna should give the older base station better range than the TC since power output for both models at the 802.11g standard should be similar.

Client request walk through ...

Hi,
Interesting to know the client request walk through.
Like what happens from the "*user submits the input URL in the client machine to the user getting the final output*".
Will be nice if full discussion goes on here.
Thanks & Regards,
SaiRam

Hi,
Please see this thread.
Full cycle ...
Re: Full cycle ...
Regards,
Hussein

HOW TO FIND THE PATH TRAVELLED BY THE CLIENT'S REQUEST PACKET

Hi,
I want to know is there any way by which we can know the entire path or the hops travelled by the client request packet to reach the web-server.Say suppose the client machine is part of a large network in a corparate where there is a a personlaized WAN. I want to know whther i can achive this using the servlets.
and i even want to know some information about the client's NIC Card Physical Address.If at all i use the HttpServletRequest.inetAddress() gives the public IP of the Client which is shared in the network.
Please suggest me a way by which i can do this.
Thanks in Advance!!!
Regards,
RAHUL

hey i m back
import java.net.Inet4Address;
import java.net.InetAddress;
import java.net.URL;
import java.util.Arrays;
import jpcap.JpcapCaptor;
import jpcap.JpcapSender;
import jpcap.NetworkInterface;
import jpcap.NetworkInterfaceAddress;
import jpcap.packet.EthernetPacket;
import jpcap.packet.ICMPPacket;
import jpcap.packet.IPPacket;
import jpcap.packet.Packet;
public class Traceroute {
     public static void main(String[] args) throws Exception{
          if(args.length<2){
               System.out.println("Usage: java Traceroute <device index (e.g., 0, 1..)> <target host address>");
               System.exit(0);
          //initialize Jpcap
          NetworkInterface device=JpcapCaptor.getDeviceList()[Integer.parseInt(args[0])];
          JpcapCaptor captor=JpcapCaptor.openDevice(device,2000,false,5000);
          InetAddress thisIP=null;
          for(NetworkInterfaceAddress addr:device.addresses)
               if(addr.address instanceof Inet4Address){
                    thisIP=addr.address;
                    break;
          //obtain MAC address of the default gateway
          InetAddress pingAddr=InetAddress.getByName("www.microsoft.com");
          captor.setFilter("tcp and dst host "+pingAddr.getHostAddress(),true);
          byte[] gwmac=null;
          while(true){
               new URL("http://www.microsoft.com").openStream().close();
               Packet ping=captor.getPacket();
               if(ping==null){
                    System.out.println("cannot obtain MAC address of default gateway.");
                    System.exit(-1);
               }else if(Arrays.equals(((EthernetPacket)ping.datalink).dst_mac,device.mac_address))
                         continue;
               gwmac=((EthernetPacket)ping.datalink).dst_mac;
               break;
          //create ICMP packet
          ICMPPacket icmp=new ICMPPacket();
          icmp.type=ICMPPacket.ICMP_ECHO;
          icmp.seq=100;
          icmp.id=0;
          icmp.setIPv4Parameter(0,false,false,false,0,false,false,false,0,0,0,IPPacket.IPPROTO_ICMP,
                    thisIP,InetAddress.getByName(args[1]));
          icmp.data="data".getBytes();
          EthernetPacket ether=new EthernetPacket();
          ether.frametype=EthernetPacket.ETHERTYPE_IP;
          ether.src_mac=device.mac_address;
          ether.dst_mac=gwmac;
          icmp.datalink=ether;
          captor.setFilter("icmp and dst host "+thisIP.getHostAddress(),true);
          JpcapSender sender=captor.getJpcapSenderInstance();
          //JpcapSender sender=JpcapSender.openDevice(device);
          sender.sendPacket(icmp);
          while(true){
               ICMPPacket p=(ICMPPacket) captor.getPacket();
               //System.out.println("received "+p);
               if(p==null){
                    System.out.println("Timeout");
               }else if(p.type==ICMPPacket.ICMP_TIMXCEED){
                    p.src_ip.getHostName();
                    System.out.println(icmp.hop_limit+": "+p.src_ip);
                    icmp.hop_limit++;
               }else if(p.type==ICMPPacket.ICMP_UNREACH){
                    p.src_ip.getHostName();
                    System.out.println(icmp.hop_limit+": "+p.src_ip);
                    System.exit(0);
               }else if(p.type==ICMPPacket.ICMP_ECHOREPLY){
                    p.src_ip.getHostName();
                    System.out.println(icmp.hop_limit+": "+p.src_ip);
                    System.exit(0);
               }else continue;
               sender.sendPacket(icmp);
}

Do client dhcp requests go through the lwapp tunnel

Similar Messages

Maybe you are looking for