Dynamic NAT connection table filling up?

I have a strange issue with a Bordermanager server. It is 3.9SP1 on a NW
6.5sp7 server. After the server has been running it stops passing traffic to
the Internet. I checked the NAT table and it has 5000 entries (the max I
believe) The entries are old, so it looks like it is not refreshing the
table. I think this may fall under a communication issue independent of
Bordermanager.
The traffic is what I expect, and is not overly high. Here is an entry, it
is almost 5 hours old.
19. 10.11.11.7 | 1336 | 56188 | 65.54.81.152 | 80| 10|17459
I have update TCP, clib, and NAT.NLM. Also updated to the newest HP drivers.
This is running on an HP 360DL G5.
I checked the set nat periodic cleanup, and it was st to 3 minutes, I
changed it to 2 minutes with no effect.
If I disable, and then re enable NAT it flushes the connection table, and
starts working fine.
I also posted this in the BorderManager forums.
Thanks,
Jim

This would best be dealt with in the BM forum. Just posting this reply to fend off the no-reply bot.

Similar Messages

Dynamic NAT parameters

Hi,
I have an application that is unhappy running via dynamic NAT. The app
developers are asking me if I can turn on sticky sessions in BM's dynamic
NAT. Are there any options for tuning dynamic NAT in BM that could help?
Cheers,
Devon

I just searched documentation and see that it's 5000 ports for tcp. That
will be easy to hit. The documentation says that it will just re-use the
oldest connections in a rolling fashion. I'm wondering whether that's
working properly or whether something else in the system is keeping the
state for longer.
Cheers,
Devon
>>> On 9/08/2007 at 11:21, Devon Heaphy<[email protected]>
wrote:
> Still testing, but it appears to. Part of the problem is that the
> application is very chatty and constantly opens new connections instead
> of
> using existing ones. I think the reason static NAT appears to work is
> that
> there are more source ports available for a given machine to use.
>
> Do you know the upper limit of dynamic NAT connections through BM?
>
> Cheers,
> Devon
>
>>>> On 7/08/2007 at 4:44, Craig Johnson<[email protected]> wrote:
>> In article <[email protected]>, Devon Heaphy
> wrote:
>>> I have an application that is unhappy running via dynamic NAT. The app
>>> developers are asking me if I can turn on sticky sessions in BM's
>> dynamic
>>> NAT. Are there any options for tuning dynamic NAT in BM that could
help?
>>>
>> No.
>>
>> Does it work via static NAT?
>>
>> Craig Johnson
>> Novell Support Connection SysOp
>> *** For a current patch list, tips, handy files and books on
>> BorderManager, go to http://www.craigjconsulting.com ***

Fill data in table( on view ) dynamically from internal table

Hi,
How can I populate a table on view with data from an internal table?
Thanks,
Ronita

Hi,
if you have an internal table named xyz.
Then create a structure in se11 for this internal table.
Then create a node with this structure with cardinality 0:n
Navigate into method WDDOMODIFYVIEW of view MAIN_VIEW. Insert coding for:
-     Create a new context node for the table
Hint: Use method Create_nodeinfo_from_struct of class Cl_wd_dynamic_tool.
-     Remove old dynamic table IE element from view , if one exists. If it exists, it is a child of group GROUP_1 and has the name TESTTAB.
-     Create a new UI element for a table named TESTTAB
-     Create an internal table, fill it with the data from the database table and bind it to the newly created dynamic context node.
METHOD wddomodifyview .
DATA:
UI Elements
    group_1       TYPE REF TO cl_wd_uielement_container,
    new_tab       TYPE REF TO cl_wd_table,
Context Nodes
    dyn_node      TYPE REF TO if_wd_context_node,
    tabname_node TYPE REF TO if_wd_context_node,
Node Info
    rootnode_info TYPE REF TO if_wd_context_node_info,
Data Reference (for internal table)
    stru_tab      TYPE REF TO data,
String (for table name)
    tablename     TYPE string.
FIELD-SYMBOLS:
    <tab> TYPE table.
create context node ***************************************************************
get node info of context root node
rootnode_info = wd_context->get_node_info( ).
Get the name of the table to be created
tabname_node = wd_context->get_child_node( name = 'TABLE_DATA' ).
tabname_node->get_attribute( EXPORTING name = 'NAME' IMPORTING value = tablename ).
translate tablename to upper case.
create sub node named TEST1 of structure (tablename)
cl_wd_dynamic_tool=>create_nodeinfo_from_struct(
    parent_info = rootnode_info
    node_name = tablename
    structure_name = tablename
    is_multiple = abap_true ).
get instance of new node
dyn_node = wd_context->get_child_node( name = tablename ).
remove "old" table UI element from view , if necessary ****************************
group_1 ?= view->get_element( 'GROUP_1' ).
group_1->remove_child( id = 'TESTTAB' ).
create new UI element table *******************************************************
new_tab = cl_wd_dynamic_tool=>create_table_from_node(
ui_parent = group_1
table_id = 'TESTTAB'
node      = dyn_node ).
fill context node with data *******************************************************
create internal table of (tabletype)
CREATE DATA stru_tab TYPE TABLE OF (tablename).
ASSIGN stru_tab->* TO <tab>.
Get table content
SELECT * FROM (tablename) INTO CORRESPONDING FIELDS OF TABLE <tab>.
Bind internal table to context node.
dyn_node->bind_table( <tab> ).
ENDMETHOD.
Edited by: Sridevi D on Apr 19, 2008 10:30 AM

Help with dynamic NAT and CSM 4.4 and ASA 8.3

Hello
I currently try to add a dynamic NAT rule into CSM 4.4 for a ASA 8.3 device, but I fails at the deployment with the error message:
Failed to generate delta config
The following commands have not been recognized by the Configuration Parser:
==========================
(inside,outside) source dynamic range-192.168.0.0_24 range-100.0.0.1_32 destination static any any
So let's asume we use the internal IP Range for the users is 192.168.0.0/24 and we received the public IP Address 100.0.0.1/32 from our ISP.
How do I have to do a normal dynamic NAT in CSM 4.4 for this case?
Traffic comes from inside and has to leave the outside with the changed source IP.
I would really appreciate a screenshot from CSM 4.4 which shows the correctly filled fields.
Thanks
Patrick

Matty
Not familiar with SIP so can't say for sure about that in terms of ports but some comments -
1) you don't show other interfaces but presumably the LAN interface(s) has "ip nat inside" enabled
2) the PBX subnet is 10.1.1.0/24 yet your static NATs are referring to 10.18.21.2 ?
3) following on from 2) your PBX_SUBNET acl is wrong, it should be -
ip access-list extended PBX_SUBNET
permit ip 10.1.1.0 0.0.0.255 any <-- note the last octet of the wildcard mask is 255.
Edit - also assuming that any internal subnets not directy connected to the router have routes setup for them so you router knows how to get to them.
Jon

How to configure inbound ruleset in dynamic nat.

Hi ,
I have a doubt on configure the inbound rules for dynamic nat. I want to allow my web server (172.16.101.115) able connect from outside with tcp/443.
How do I configure the inbound ruleset for allow public connect to my webserver with tcp/443 in dynamic nat.
Here I have draw a diagram and some configuration i have configure in my ASA 8.2. Please correct me if I was wrong config it.
Public IP: 10.10.10.28
Private IPs:
172.16.101.115
172.16.101.116
172.16.101.117
172.16.101.118
172.16.101.119
172.16.101.120
access-list Web_nat permit ip host 172.16.101.115 any
access-list Web_nat permit ip host 172.16.101.116 any
access-list Web_nat permit ip host 172.16.101.117 any
access-list Web_nat permit ip host 172.16.101.118 any
access-list Web_nat permit ip host 172.16.101.119 any
access-list Web_nat permit ip host 172.16.101.120 any
nat (firewall-dmz) 1 access-list Web_nat
global (firewall-outbound) 1 10.10.10.28
access-list fw-outbound-access permit tcp any host 10.10.10.28 eq 443 //allow outside connect to my external ip.
access-list fw-dmz-access permit tcp any host 172.16.101.115 eq 443 //allow my translation ip connect to my webserver with tcp/443.

Hi,
I am not sure what you are attempting to configure here.
But what the NAT configuration above does is do a Dynamic PAT for all the servers on the "firewall-dmz" to a single IP address towards the "firewall-outbound"
This Dynamic translation doesnt however enable connections to be initiated from behind the "firewall-outbound" interface. When your hosting a server which needs a NAT towards the users then the NAT type has to be Static NAT or Static PAT.
Static NAT will essentially use up one public IP address for just the single local host/server.
Static PAT will do a Port Forward from the public IP address and public port to the local IP and local port. And this is most commonly used with environments which only public IP address is the one that the ASA holds in its WAN interface.
A typical Static NAT configuration is this
static (inside,outside) 1.1.1.1 10.10.10.10 netmask 255.255.255.255
Where
inside = is the interface behind which the host is
outside = is the interface towards which the host is NATed
1.1.1.1 = is the public NAT IP address for the host
10.10.10.10 = is the local IP address of the host
A typical Static PAT configuration is this
static (inside,outside) tcp interface 80 10.10.10.10 80 netmask 255.255.255.255
Where
tcp = specifies the protocol for which the Static PAT configured
interface = specifies that we will be using the public IP address of the destination interface "outside" as the public IP address for this single Port Forward.
80 = first "80" specifies the public port visible to users behind the destination interface
80 = second "80" specifies the actual local port on which the local host is listening on
Hope this helps
- Jouni

Is there a way to do that? To use dynamic EJB connections?

Hello Developers,
I have developed a security web application using EJB,
Jaas with customer provider
I used DBSystemLogin module
I want to fined a way that the EJB connection change each time when the user login.
I used the HR as the main schema.
I created three schemas that I want to use them as users:
-Lina
-Salem
-Ahmad
I granted Roles to users on hr tables.
additional, created my own roles in data base and granted to my users:
ADMINISTRATOR  Lina - can see all records
EMPLOYEE Ahmad -can see the records added by this employee
CUSTOMER  Salem - can see the records belongs to this customer
In developer 10.1.3.3
I created Order Entity been using HR database connection, created session been,
Modified web.xml:
-security roles["ADMINISTRATOR","EMPLOYEE","CUSTOMER"])
-Loginconfig (Form-based authentication: login page, error page)
-Security constraints: ord on /faces/Orders.jsp to ADMINISTRATOR,EMPLOYEE,CUSTOMER.
I created Orders.jsp page contains order table.
Now, I want that when the user login as Lina to switch the EJB database connection to Lina, so the displayed order table achieves ADMINISTRATOR roles that created in database,means opening database session for user Lina and use it.
and so on for user salem and ahmad.
Is there a way to do that? To use dynamic EJB connections? To achieve authentication based connection? to implement the user database roles on the client side? To specify the database connection at run time?
That is possible using forms but I don’t want to use forms.
I want to reed the roles from database according to the user.
I hope to get answers soon,
thanks.

Does JNDI do this job?

Dynamic NAT & Dynamic/TCP + Dynamic/UDP filters

I've enabled dynamic NAT on BM38sp2a... Is it important to setup
dynamic/tcp and dynamic/udp filters if running ipflt? What are the
purposes of the two filters?
Jimmy

[email protected] wrote:
> I've enabled dynamic NAT on BM38sp2a... Is it important to setup
> dynamic/tcp and dynamic/udp filters if running ipflt? What are the
> purposes of the two filters?
>
> Jimmy
Please see my reply in the packet filtering forum.
Caterina
Novell Support Connection Volunteer Sysop

PcAnywhere and dynamic NAT

I have Bordermanager 3.51 that uses dynamic NAT on the public interface
connected to DSL with a static IP address. I have followed TID #
10024898 " Creating filter exception for PCAnywhere".
I have double checked settings of the filter exceptions but still cannot
remote access a internal host using PcAnywhere v 11.0. My question is
should I be using dynamic NAT or static nat or a static/dynamic nat
configuration ?
Thanks,
Karl

> In article <HmmFc.236$[email protected]>, wrote:
> > . My question is
> > should I be using dynamic NAT or static nat or a static/dynamic nat
> > configuration ?
> >
> If you want inbound pcAW traffic, you have two choices when NAT is
> involved: static NAT, or generic proxies. (Both are described in my
> BMgr / Filtering books at the URL below).
>
> You will not be able to get to an internal PC with just dynamic NAT
> enabled. There is no way to route the packets in then.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
Thanks Craig for your direction. I will check out the URL
Happy 4th !
>

Static/Dynamic NAT Conflict

My static NAT configuration is somehow conflicting with my dynamic NAT configuration. Am I doing something wrong?
ip nat inside source list 1 interface GigabitEthernet0/0 overload
access-list 1 permit 192.168.126.0 0.0.0.255
access-list 1 permit 10.18.0.0 0.0.255.255
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip nat inside source static tcp 192.168.126.4 20 xx.xx.xx.19 20 extendable
ip nat inside source static tcp 192.168.126.5 25 xx.xx.xx.19 25 extendable
ip nat inside source static tcp 192.168.126.5 80 xx.xx.xx.19 80 extendable
ip nat inside source static tcp 192.168.126.5 443 xx.xx.xx.19 443 extendable
ip nat inside source static tcp 192.168.126.7 3101 xx.xx.xx.19 3101 extendable
ip nat inside source static tcp 192.168.126.4 3389 xx.xx.xx.19 3389 extendable
ip nat inside source static tcp 192.168.126.7 5901 xx.xx.xx.19 5901 extendable
ip nat inside source static tcp 192.168.126.20 25 xx.xx.xx.20 25 extendable
ip nat inside source static tcp 192.168.126.20 80 xx.xx.xx.20 80 extendable
interface GigabitEthernet0/0
description Outside Interface
ip address xx.xx.xx.18 255.255.255.248
ip access-group Incoming in
ip access-group Outgoing out
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
no ip mroute-cache
duplex auto
speed auto
ntp disable
no cdp enable
hold-queue 32 in
hold-queue 100 out

Thanks for the help.
I tried modifying the access list as you suggested but ran into problems. The host at 192.168.126.4 is my DNS server and the updates prevented it from forwarding queries to external DNS servers. I think I am running into problems because I dont' know general rules for configuring dynamic NAT to accomodate client PCs and static NAT to accomodate servers at the same time. From the issues I am having it seems there are general rules for dividing the two classes of hosts which I just don't know. My external interface has a .18 address which all my client PCs get NAT'ed through and then I have static NAT entries NAT'ing to .19 and .20 for internal services such as DNS, SMTP, HTTP etc. I thought that would divide the two however certain 'things' conflict, such as XBOX Live connections. If I remove my static NAT entries then I can connect to XBOX Live.

[Question] Dynamic NAT on 2 different networks

Hi,
I just want to ask if its possible to have same dynamic translation within 2 different networks like:
interface gig 0/1
1.1.1.1 255.255.255.0 (LAN Connection w/ DHCP enabled)
inteface gig 0/2
2.2.2.1 255.255.255.0 (Wireless Connection w/ DHCP enabled)
Actually, the scenario was 1.1.1.1 is my LAN connection and 2.2.2.1 are my Wireless connection.
Hope this merits their favorable response. Thanks.

Hi,
Do you mean that you want both of the said LAN networks to use Dynamic NAT/PAT towards a third interface on the ASA?
If you simply want to use the same NAT/PAT address for 2 different networks on the ASA then you can use the following configurations as example
These are PAT translations to a single IP address. Using a NAT Pool would change the configurations slightly.
For ASA software 8.2 and below
global (outside) 100 3.3.3.1
nat (inside) 100 1.1.1.0 255.255.255.0
nat (wireless) 100 2.2.2.0 255.255.255.0
Where
outside,inside and wireless = Interface "nameif" on the ASA firewall
100 = Is just an ID number for the NAT configuration. You can use other one also
For ASA software 8.3 and after
object-group network PAT-SOURCE-NETWORKS
network-object 1.1.1.0 255.255.255.0
network-object 2.2.2.0 255.255.255.0
nat (inside,outside) after-auto source dynamic PAT-SOURCE NETWORKS interface
nat (wireless,outside) after-auto source dynamic PAT-SOURCE NETWORKS interface
Where
PAT-SOURCE-NETWORKS = Is an "object-group" where you can define the source networks for the NAT/PAT rule
Hope this helps Please if you found the information helpfull
Feel free to ask more if this didnt answer your question.
- Jouni

Dynamically pick the table names in data flow task SSIS

Hi All,
I want to create a SSIS package which loads the data to a table on the other server every day. I have around 250 tables to load everyday and source and destination table names are available in a metadata table, table names have to read from the metadata
table and data should be loaded. Is there a way that we can configure the source and destination table names dynamically in Data flow task?
I am newbie to SSIS can any help with the solution for this problem.

You can do that, not a big deal. The underlying problem is say suppose you constructed a ETL based on some x source and y destination and have put x(3 columns) as source and y destination(3 columns).. As you said if we have choice of dynamically pick the
table names.. ETL might fail when you face below situation
source x(3 columns) destination y (4 columns) and there will be no mapping as it is dynamic. Sometimes mapping also fails even if the source and destination have same number of columns. If you still want to do... follow below steps:
Create two variables:
1.variable1 , datatype string
2.variable datatype string
take one execute sql task, pick your source table names dynamically as you desired from metadata table \
"SELECT sourcetblname as Res FROM @metadata WHERE ID=1" in sql statement and then go to name the result name as Res (I meant same as table alias) and map it to variablename1
And in variable2 go to expression and write "Select * from "+@[User::variable].. and this will be your constructed dynamic command for oledb destination.
And connect that execute sql task to (Data flow task)oledb source and choose data access mode as sql command with variable,and choose variable2. below is the diagram.
- please mark correct answers

Dynamic NAT on selected machines

Hi
What is the best way to setup dynamic NAT if I only wanted it to function on
a group of 30 workstations.
I was considering putting these workstations into a seperate subnet, but
doesn't dynamic nat pick up all subnets on the private interface?
Any Ideas?
Thanks
Peter H

Peter,
> What is the best way to setup dynamic NAT if I only wanted it to function on
> a group of 30 workstations.
> I was considering putting these workstations into a seperate subnet, but
> doesn't dynamic nat pick up all subnets on the private interface?
indeed, this won't work.
You can use NAT for everyone, and then regulate the access with packet
filters. It's a limitation of the Netware nat, indeed.
Caterina
Novell Support Connection Volunteer Sysop

Dynamic Data Connection Parameter and Report Parameters

Post Author: despec
CA Forum: General
Hello to all,I am using a business view that is based on a dynamic data connection of 13 databases, each a different school. When I use the BV is a CXrystal Report (XI), it correctly, of course, uses the "read only" parameter for me to select a school. My problem arises when I try to enter a student name "list of values" parameter using that same dynamic data connection. After I select the "read only" school parameter, I then select that student name and immediately, the "read only" school parameter resets to "--". Therefore when I click okay, I get an error saying that my selection for the first parameter is invalid.Anyone have any suggestion on how I may be able to resolve this?Thanks,David

Hello,
Jsut a reminder this is not a Support Case Management system but for all to use.
Since you have BOE 3.1 you should have a valid support contract. Log into Service Market Place and create a case on line and a support Engineer will call you.
If you don't know how to then ask your Manager who is your SAP Account Super User and that person can add you to the list and give you a log in ID and password.
Thank you
Don

How to dynamically update the Table?

Hi All,
Hope somebody will help me out ot resolve my issue.
In my application, about 10 analog channels data coming in. Out of which two parameter needs to get updated dynamically on the table. (For each Rpm between 500-1000, in steps of 50, have to capture Pressure points & show it on the table.)
I seen there is one method called table method available which helps to set the value of a particular cell specified by corresponding row and column index.
I tried this. In row 0, col 0 & col 1 it put what value I specified by using that table method. when it goes to row 1, col 0 & col 1 also got updated but vanishing the above put row 0, col 0 & col 1 values. so at any point of time, I am able to see only the current row values.
Hope there should be some dynamic refreshing method available or else I dont know how to handle this situation. Pls. clarify.
Thanks,
Kousy

Hi,
Thanks.
But I am not able to update dynamically.
I just done slight changes to your update.vi. Just run Update_1.vi and after update
button is pressed, change the row, col index to see the update. please note
it is not able to update if matrix exceeds 3x4. i.e set row index=3
col index=0; new cell value = 10. it is not updating.. it might because of initialization
of 3x4 matrix values at the start.. ot the way I am trying out is bad?
By using Table method itself I got the solution what I want. I have attached that vi too.
just check out and reply if any flaw..
Thanks,
Kousy
Attachments:
update_1.vi ‏94 KB
Table Update.vi ‏96 KB

Uploading data from excel file to a dynamically created internal table

Hi,
I have a requirement where i have to upload data from an excel file into a database table. I would be able to determine the structure of the table only at runtime based on the user input.. so i have created an internal table dynamically.
Could you please tell me if its possible to upload data from an excel file to the dynamically created internal table using any function modules?
I thought of doing this by declaring a generic internal table of one field and then uploading the *.csv file into it and then splitting it based on "," and then assigning it to the field symbol referencing the internal table.. but my file length exceeds 132 characters and i'm only able to get data of lenght 132 char's in my internal table ( generic one).
Could anyone please show me a way around this.
Thanks in advance,
Harsha

Sure, check this out.
report zrich_0002.
type-pools: slis.
field-symbols: <dyn_table> type standard table,
               <dyn_wa>,
               <dyn_field>.
data: it_fldcat type lvc_t_fcat,
      wa_it_fldcat type lvc_s_fcat.
type-pools : abap.
data: new_table type ref to data,
      new_line type ref to data.
data: iflat type table of string.
data: xflat type string.
data: irec type table of string with header line.
data: tabix type sy-tabix.
data: file type string.
selection-screen begin of block b1 with frame title text .
parameters: p_file type rlgrap-filename default 'c:Test.csv'.
parameters: p_flds type i.
selection-screen end of block b1.
start-of-selection.
* Add X number of fields to the dynamic itab cataelog
do p_flds times.
    clear wa_it_fldcat.
    wa_it_fldcat-fieldname = sy-index.
    wa_it_fldcat-datatype = 'C'.
    wa_it_fldcat-inttype = 'C'.
    wa_it_fldcat-intlen = 10.
    append wa_it_fldcat to it_fldcat .
enddo.
* Create dynamic internal table and assign to FS
call method cl_alv_table_create=>create_dynamic_table
               exporting
                  it_fieldcatalog = it_fldcat
               importing
                  ep_table        = new_table.
assign new_table->* to <dyn_table>.
* Create dynamic work area and assign to FS
create data new_line like line of <dyn_table>.
assign new_line->* to <dyn_wa>.
file = p_file.
call method cl_gui_frontend_services=>gui_upload
    exporting
      filename                = file
    changing
      data_tab                = iflat
    exceptions
      file_open_error         = 1
      file_read_error         = 2
      no_batch                = 3
      gui_refuse_filetransfer = 4
      invalid_type            = 5
      no_authority            = 6
      unknown_error           = 7
      bad_data_format         = 8
      header_not_allowed      = 9
      separator_not_allowed   = 10
      header_too_long         = 11
      unknown_dp_error        = 12
      access_denied           = 13
      dp_out_of_memory        = 14
      disk_full               = 15
      dp_timeout              = 16
      others                  = 17.
loop at iflat into xflat.
    clear irec. refresh irec.
    split xflat at ',' into table irec.
    loop at irec.
      tabix = sy-tabix.
      assign component tabix of structure <dyn_wa> to <dyn_field>.
      <dyn_field> = irec.
    endloop.
    append <dyn_wa> to <dyn_table>.
endloop.
* Write out data from table.
loop at <dyn_table> into <dyn_wa>.
    do.
      assign component sy-index of structure <dyn_wa> to <dyn_field>.
      if sy-subrc <> 0.
        exit.
      endif.
      if sy-index = 1.
        write:/ <dyn_field>.
      else.
        write: <dyn_field>.
      endif.
    enddo.
endloop.
Regards,
Rich Heilman

Dynamic NAT connection table filling up?

Similar Messages

Maybe you are looking for