External Router, VPN, Configuration

Dear Community,
at our company we've bought a Cisco 876 Router with the Enterprise Feature Set.
Now I have to configure the System.
I would like to do the following:
Our Carrier has assignes us a transfer net for routing and a network for our router. In this Network for the router are official IP Adresses included, they should be usable via ports 2-4 on the router, port 1 should be a port which is directly attached to the internal network. This port should have an external ip address and a VPN & NAT Server on it so external users can connect via VPN and the internal network can connect to the external.
Any suggestions for this configuration.

Hi
i have configured Cisco 877 as VPN Server....what kind of help do you need ?
thanks & regards.

Similar Messages

External router and solaris intsallation

Hi,
I'm very new to solaris (and *nix world also) so, please, forgive me if this is a silly question, but I've installed solaris 10 express x86, with my pc connected via cross cable to an external router (properly configured). After installlation, I can't see my router.
Can someone help me, or give some good (and clear/simple...) resource to see?
thaks!
Pietro

Hi,
I'm very new to solaris (and *nix world also) so, please, forgive me if this is a silly question, but I've installed solaris 10 express x86, with my pc connected via cross cable to an external router (properly configured). After installlation, I can't see my router.
Can someone help me, or give some good (and clear/simple...) resource to see?
thaks!
Pietro

External Router and Firewall

I have just been informed by Apple Care that my entire implementation for my Xserve is off base. We only got to this problem when Kerberos wouldn't work. I had judiciously followed the manual and had my Ether1 and 2 ports set up to do external (1) internal (2), provide DHCP, NAT, VPN the whole nine yards. Ran gateway assistant, got my FQDN, promoted to open directory. And now I am told by my Apple Care guy that this is not at all the way to go; that I need to have an external router with firewall and assign the static IP to it and then run the server interally only. Let me just say I took the 4 day server essentials class and that was noticably lacking in the discussion. So I guess what I am asking today is what an ideal router/firewall product would be suggested. I'd prefer it be rack mounted. I also need a product that the company is going to support. So suggestions are greatly appreciated.
I guess I am back to square one on this. Full reinstall. Sigh.

1. Run OD and AFP on the fixed IP Master. This should
be your strongest, fastest server and must have a
real fixed IP address, not allocated by DHCP. You
need an FQDN for this IP address entereted in your
internal DNS.
WES: I believe I am hearing you say that the VPN/Firewall server (the weaker one) would now carry the static IP address on ethernet1; and have say 192.168.2.1 as it's manualy set internal IP on ethernet2; say 192.168.3.1. The better server would have it's IP manually set to, say 192.168.3.1.
2. Run internal DHCP and DNS services on the Master
also.
WES: I am not sure why one would run DHCP and DNS here though? I figured that was a simplier process to accompish off the weaker server.
3. On your firewall machine (the Replica, maybe
running Tiger Server 10-user) run your webpages &
VPN.
WES: But as I understood it, one had to run this off of the machine with the FQDN. Same as mail. More below....
4. Put Mail on a completely separate box in your
DMZ.
WES: I'm not sure I follow you here. I am out of boxes. Actually I'll have to buy another one if I got this route at all. I don't have nearly a large enough operation to justify three servers -- maybe not two -- except for this problem.
One advantage of using a Tiger Server Master/Replica
over a cheap firewall box is that you have redundancy
available for all your Tiger Server apps (DHCP, DNS,
etc). You also have an automatic backup of all user
accounts/passwords and you don't need to configure
separate VPN accounts/profiles for your users.
WES: Yes that makes sense.
Plus, if you're serious about VPN, 'proper' routers
start to get real expensive if you need concurrent
connections.
WES: There is another issue that I am a bit uncertain about. Where I got into trouble here was trying to get Kerberos to work. However, I am not sure that in the end that's a service I'm going to need. If VPN encrypts all traffic over the internet is Kerberos necesssary. I DON'T need it in house as there isn't an internal security issue of any kind. Maybe I am shooting for something I don't need...which brings us to...I am still confused about the Apple Care guy's comment that with the set up as it is, he could essentially raid my OD. He rattled off a lot of cool talk that made me think he was right but I have never found any reference to this. Can anyone explain to me -- one box acting in this capacity for a small office with a public IP -- being that open to a security risk. Puzzles me.

Using External Routing Service to Route the task

Hi,
I am using External Routing Service to Route the task and have placed the jar file at
/oracle/app/product/fmw/Oracle_SOA1/soa/modules/oracle.soa.ext_11.1.1
I have modified the Manifest.mf file for "oracle.soa.ext.jar" as
Manifest-Version: 1.0
Ant-Version: Apache Ant 1.7.1
Created-By: 17.0-b17 (Sun Microsystems Inc.)
Implementation-Vendor: Oracle
Implementation-Title: Oracle SOA EXT
Implementation-Version: 11.1.1
Product-Name: Oracle SOA EXT
Class-Path: ./routing/lib/jaxrpc.jar ./routing/lib/axis-update.jar ./routing/lib/axis.jar ./routing/lib/log4j-1.2.11.jar ./routing/lib/orabpel.jar ./routing/lib/bpm-services.jar ./routing/lib/xmlparserv2.jar ./routing/lib/wsdl4j-1.5.1.jar ./routing/lib/commons-discovery-0.2.jar ./routing/workflow.routing.jar
Product-Version: 11.1.1.4.0
Specification-Version: 11.1.1
Extension-Name: oracle.soa.ext
but it's failing to get the ExternalRoutingService.class and throws exception
Missing class: ExternalRoutingService
     Dependent class: oracle.bpel.services.workflow.task.impl.RoutingSlipInterpretor
     Loader: weblogic.utils.classloaders.GenericClassLoader@2080514773
     Code-Source: /oracle/app/product/fmw/Oracle_SOA1/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar
     Configuration: /oracle/app/product/fmw/Oracle_SOA1/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar
I tried adding the workflow.routing.jar to classpath (as this jar contains the ExternalRoutingService.class) and then gives error for IAssignmentService saying class not found IAssignmentService.class

Hi Pranay,
Did you find solution for this?
I am also facing same issue.
Thanks
Balaji

Parallel participants blocks in External Routing Service

I'm trying to configure an External Routing service (it implements IAssignmentService interface) as described in Developer's Guide for Oracle SOA Suite[1].
The assignment stage configuration needed: one or more parallel participants blocks in the same stage, each one configured with different participants and voting rules.
The CustomAssignmentService below shows my custom External Routing Service: when I try to add two or more parallel participants, only the first one it is assigned to the task.
I haven't found documentation: how can I implement parallel participants blocks in External Routing Service?
Product version: SOA Suite 11.1.1.6
References:
[1] http://docs.oracle.com/cd/E28389_01/dev.1111/e10224/bp_hwfmodel.htm#BABCFHCC
----------- CustomAssignmentService.java ------------------
package br.com.iprocess;
import java.util.Map;
import oracle.bpel.services.workflow.metadata.routingslip.model.*;
import oracle.bpel.services.workflow.metadata.routingslip.model.Participants;
import oracle.bpel.services.workflow.metadata.routingslip.model.ParticipantsType.*;
import oracle.bpel.services.workflow.task.IAssignmentService;
import oracle.bpel.services.workflow.task.ITaskAssignee;
import oracle.bpel.services.workflow.task.model.Task;
import oracle.bpel.services.workflow.IWorkflowConstants;
public class CustomAssignmentService implements IAssignmentService {
private final String OUTCOME_APPROVE = "APPROVE";
private final String OUTCOME_REJECT = "REJECT";
public Participants onInitiation(Task task, Map propertyBag) {
return createParticipant(task, propertyBag);
public Participants onReinitiation(Task task, Map propertyBag) {
return createParticipant(task, propertyBag);
public Participants onOutcomeUpdated(Task task, Map propertyBag,
String updatedBy, String outcome) {
return null;
public Participants onAssignmentSkipped(Task task, Map propertyBag) {
return null;
public java.util.List getAssigneesToRequestForInformation(Task task,
Map propertyBag) {
return null;
public java.util.List getReapprovalAssignees(Task task, Map propertyBag,
ITaskAssignee infoRequestedAssignee) {
return null;
public Participants createParticipant(Task task, Map propertyBag) {
ObjectFactory objFactory = new ObjectFactory();
Participants participants = objFactory.createParticipants();
participants.getParticipantOrSequentialParticipantOrAdhoc().add(addParticipantsGroup1(objFactory));
participants.getParticipantOrSequentialParticipantOrAdhoc().add(addParticipantsGroup2(objFactory));
return participants;
private Parallel addParticipantsGroup2(ObjectFactory objFactory) {
Parallel parallelParticipant = objFactory.createParticipantsTypeParallel();
ParallelCompletionCriteriaType vote = objFactory.createParallelCompletionCriteriaType();
ParameterType defaultOutcome = objFactory.createParameterType(OUTCOME_REJECT);
defaultOutcome.setType("STATIC");
vote.setDefaultOutcome(defaultOutcome);
String defaultPercentage = "51";
ParameterType percentageOfOutcome = objFactory.createParameterType(defaultPercentage);
percentageOfOutcome.setType("STATIC");
vote.getOutcomePercentage().add(percentageOfOutcome);
parallelParticipant.setAllResponders(vote);
Resource resource = objFactory.createResource();
resource.setValue("manager1, manager2");
resource.setIsGroup(false);
resource.setType("STATIC");
parallelParticipant.getResourceOrRoutingSlip().add(resource);
Resource resource2 = objFactory.createResource();
resource2.setValue("manager3");
resource2.setIsGroup(false);
resource2.setType("STATIC");
parallelParticipant.getResourceOrRoutingSlip().add(resource2);
return parallelParticipant;
private Parallel addParticipantsGroup1(ObjectFactory objFactory) {
Parallel parallelParticipant = objFactory.createParticipantsTypeParallel();
ParallelCompletionCriteriaType vote = objFactory.createParallelCompletionCriteriaType();
ParameterType defaultOutcome = objFactory.createParameterType(OUTCOME_REJECT);
defaultOutcome.setType("STATIC");
vote.setDefaultOutcome(defaultOutcome);
String defaultPercentage = "51";
ParameterType percentageOfOutcome = objFactory.createParameterType(defaultPercentage);
percentageOfOutcome.setType("STATIC");
vote.getOutcomePercentage().add(percentageOfOutcome);
parallelParticipant.setAllResponders(vote);
Resource resource = objFactory.createResource();
resource.setValue("operator1, operator2, operator3");
resource.setIsGroup(false);
resource.setType("STATIC");
parallelParticipant.getResourceOrRoutingSlip().add(resource);
return parallelParticipant;
}

I'm trying to configure an External Routing service (it implements IAssignmentService interface) as described in Developer's Guide for Oracle SOA Suite[1].
The assignment stage configuration needed: one or more parallel participants blocks in the same stage, each one configured with different participants and voting rules.
The CustomAssignmentService below shows my custom External Routing Service: when I try to add two or more parallel participants, only the first one it is assigned to the task.
I haven't found documentation: how can I implement parallel participants blocks in External Routing Service?
Product version: SOA Suite 11.1.1.6
References:
[1] http://docs.oracle.com/cd/E28389_01/dev.1111/e10224/bp_hwfmodel.htm#BABCFHCC
----------- CustomAssignmentService.java ------------------
package br.com.iprocess;
import java.util.Map;
import oracle.bpel.services.workflow.metadata.routingslip.model.*;
import oracle.bpel.services.workflow.metadata.routingslip.model.Participants;
import oracle.bpel.services.workflow.metadata.routingslip.model.ParticipantsType.*;
import oracle.bpel.services.workflow.task.IAssignmentService;
import oracle.bpel.services.workflow.task.ITaskAssignee;
import oracle.bpel.services.workflow.task.model.Task;
import oracle.bpel.services.workflow.IWorkflowConstants;
public class CustomAssignmentService implements IAssignmentService {
private final String OUTCOME_APPROVE = "APPROVE";
private final String OUTCOME_REJECT = "REJECT";
public Participants onInitiation(Task task, Map propertyBag) {
return createParticipant(task, propertyBag);
public Participants onReinitiation(Task task, Map propertyBag) {
return createParticipant(task, propertyBag);
public Participants onOutcomeUpdated(Task task, Map propertyBag,
String updatedBy, String outcome) {
return null;
public Participants onAssignmentSkipped(Task task, Map propertyBag) {
return null;
public java.util.List getAssigneesToRequestForInformation(Task task,
Map propertyBag) {
return null;
public java.util.List getReapprovalAssignees(Task task, Map propertyBag,
ITaskAssignee infoRequestedAssignee) {
return null;
public Participants createParticipant(Task task, Map propertyBag) {
ObjectFactory objFactory = new ObjectFactory();
Participants participants = objFactory.createParticipants();
participants.getParticipantOrSequentialParticipantOrAdhoc().add(addParticipantsGroup1(objFactory));
participants.getParticipantOrSequentialParticipantOrAdhoc().add(addParticipantsGroup2(objFactory));
return participants;
private Parallel addParticipantsGroup2(ObjectFactory objFactory) {
Parallel parallelParticipant = objFactory.createParticipantsTypeParallel();
ParallelCompletionCriteriaType vote = objFactory.createParallelCompletionCriteriaType();
ParameterType defaultOutcome = objFactory.createParameterType(OUTCOME_REJECT);
defaultOutcome.setType("STATIC");
vote.setDefaultOutcome(defaultOutcome);
String defaultPercentage = "51";
ParameterType percentageOfOutcome = objFactory.createParameterType(defaultPercentage);
percentageOfOutcome.setType("STATIC");
vote.getOutcomePercentage().add(percentageOfOutcome);
parallelParticipant.setAllResponders(vote);
Resource resource = objFactory.createResource();
resource.setValue("manager1, manager2");
resource.setIsGroup(false);
resource.setType("STATIC");
parallelParticipant.getResourceOrRoutingSlip().add(resource);
Resource resource2 = objFactory.createResource();
resource2.setValue("manager3");
resource2.setIsGroup(false);
resource2.setType("STATIC");
parallelParticipant.getResourceOrRoutingSlip().add(resource2);
return parallelParticipant;
private Parallel addParticipantsGroup1(ObjectFactory objFactory) {
Parallel parallelParticipant = objFactory.createParticipantsTypeParallel();
ParallelCompletionCriteriaType vote = objFactory.createParallelCompletionCriteriaType();
ParameterType defaultOutcome = objFactory.createParameterType(OUTCOME_REJECT);
defaultOutcome.setType("STATIC");
vote.setDefaultOutcome(defaultOutcome);
String defaultPercentage = "51";
ParameterType percentageOfOutcome = objFactory.createParameterType(defaultPercentage);
percentageOfOutcome.setType("STATIC");
vote.getOutcomePercentage().add(percentageOfOutcome);
parallelParticipant.setAllResponders(vote);
Resource resource = objFactory.createResource();
resource.setValue("operator1, operator2, operator3");
resource.setIsGroup(false);
resource.setType("STATIC");
parallelParticipant.getResourceOrRoutingSlip().add(resource);
return parallelParticipant;
}

Router to Router VPN with Overlapping internal networks

Hello Experts,
One quick question. How do I configure a Router to Router VPN with overlapping internal networks???
Both of my internal networks have ip address of 192.168.10.0 and 192.168.10.0
Any link or config will be appreciated. I've been looking but no luck.
Thanks,
Randall

Randall,
Please refer the below URL for configuration details:
Configuring an IPSec Tunnel Between Routers with Duplicate LAN Subnets
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800b07ed.shtml
Let me know if it helps.
Regards,
Arul
** Please rate all helpful posts **

Router-to-Router VPN Security

Hi there,
Should we worry about the the security on router-to-router VPN over internet (IPSec) ?
We have two offices.
Office A has Cisco 2811 router (internal, private) and ASA 5510 firewall.
Office B has Cisco 2821 router (internal, private) and ASA 5505 firewall.
Office B has private subnets that extend to 7 hops away. (running RIP)
If we want to set up a site-to-stie VPN between these two offices, should we set it up on ASA's or routers?
If we set up VPN on routers, does that mean we need to connect one interface to the internet on each router and suffer from Internet attacks?
How do we defend our routers then?
Thanks in advance!
-Andrew

Hi,
when it comes to site to site vpn I usually prefer routers. Whith a little bit of tweaking NAT and routing you should be able to operate a public address on the routers even if they are behind the firewall.
The advantage of IOS based VPN is e.g. the possibility of routing protocols through the VPN tunnels which would give another level of resiliency. Configure tunnel interfaces on the routers with a tunnel mode IPsec and a tunnel protection profile. You can then run e.g. EIGRP to find a possible alternate path if one of the tunnels fails. Its much easier than anything I can think of on the ASA.
Rgds, MiKa

Dynamic routing/assignment using IAssignmentService - External Routing

I'm trying to use external routing to dynamically calculate the approval stages and the participants. I'm trying to control the N number of stages and who the participants should be all dynamically depending on some conditions.
I can't find any documentation on Oracle site except for this: http://docs.oracle.com/cd/E21764_01/integration.1111/e10224/bp_workflow.htm#BABICJIJ but it doesn't go into details.

Thanks for your reply, but i guess i have not been successful in explaining my requirement clearly.
I am not interested in changing the routing pattern at the AQ level using Alter propogation.
My requirement is at one step above this while posting a message to the source AQ queue.
For eg: My Multi consumer table name: Publisher_Table
queues in my Publisher_Table: 1.Pub1
2.Pub 2
3.Pub 3 and so on
I need to post messages on pub1,pub2 etc...however while configuring the AQ adapter for enqueue opertaion i had to hardcode my queue name to Pub1(One among multiple queues created).
My query is whether i can have this queuename as a variable,so that at runtime i can change the target, instead of having to configure multiple aq adapters one for each pub queue.
Thanks
Gayatri

Can anyone describe the procedure of VPN configuration?

can anyone plz guide me in detail the procdure of vpn configuration.
Scenario;
Two different LANs with two cisco routers.
one IOS router has VPN full capabilty but other one only have VPN passthrough feature.
two different internet IPs on both independent LANs.
so, how can i configure it, plz guide me.thanks

See this link there are few examples you can reference - scroll down to IPSec on Router to Router
http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html

Can anyone tell the procedure of VPN configuration?

can anyone plz guide me in detail the procdure of vpn configuration.
Scenario;
Two different LANs with two cisco routers.
one IOS router has VPN full capabilty but other one only have VPN passthrough feature.
two different internet IPs on both independent LANs.
so, how can i configure it, plz guide me.thanks

See this link there are few examples you can reference - scroll down to IPSec on Router to Router
http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html

Blocking on external router

Hi,
i want to configure blocking on external router for some specfic signature, i already have access list on the outside interface to block some traffic and fragment packets with the name ACL_Router_External applied on interface outisde (G0/0)
when i configure blocking on IPS it create another ACL and applied to interface same interface in order to block.
how can i push ACL configuration from IPS to exisiting ACL (ACL_Router_External) ???
thanks

From the link that I posted, here are the steps that the IPS takes when building the ACL:
When the sensor starts up, it reads the contents of the two ACLs. It creates a third ACL with the following entries:
•A permit line for the sensor IP address
•Copies of all configuration lines of the Pre-Block ACL
•A deny line for each address being blocked by the sensor
•Copies of all configuration lines of the Post-Block ACL
The sensor applies the new ACL to the interface and direction that you designate.
In your case, you could use the ACL_Router_External as your Post-Block ACL. The IPS will add a permit for itself and a deny entry for the address being blocked. It will then append the existing ACL_Router_External entries that you already have configured before pushing the new combined ACL to the g0/0 interface.

RV042 basic VPN configuration

Hello there. I'm just wondering on how to use his RB042 VPN ROUTER. Can anyone help on how to setup the VPN?I'm kinda confused. What is the first thing to do until the last?
Posted by WebUser Al Albiar Taposok

Did you try google 'RV042 VPN configuration'?. It popped up with lot of step-by-config docs. if still can't find, PM me your email, i will send you one.
Thx
MS

Cisco sr520 VPN configuration and deployment

Hope one of the cisco genius' can help me out. I have a small business with one sr520 edge router. The network is up and running fine but I need to allow remote users to connect back to a vpn at the office in order to access user winxp Pcs using RDP remotedesktop.
I have searched the web and cisco forums and see there are quite a few vpn configurations but I found no clear setup guide for accomplishing what I understood to be pretty simple. "allow 5 outside users to connect back to the office and work as if they were sitting in the office"
Question:
1. What client software is needed on the remote client pc to connect back back to the sr520 vpn? Can I use the windows pptp vpn client or the built-in Mac client?
2. My router shows three items labeled vpn. VPN remote, VPN Server and SSL VPN...i have tweaked each of these screens but still not been able to connect an outside client. Is there a setup guide to explain the features of this router and how to use it.
3. after poking around the Cisco site for a vpn client i am wondering why do I need a support contract to use a feature of a router I just bought? Does Firmware and client software cost extra?
Thanks for any assistance you can offer...
Kevin Hall
Houston Tx

Hi,
Some users have reported that IPSecuritas works well with the Cisco Small Business routers.
http://www.lobotomo.com/products/IPSecuritas/
For the RV180 I would try to adapt the SA500 tutorial to make it work:
http://www.cisco.com/en/US/docs/security/multi_function_security/multi_function_security_appliance/sa_500/technote/note/SA500_mac_appnote.pdf
Please note that this client is not supported by Cisco. If you have questions or issues, please post here on the forum.
- Marty

How to import Lion Server VPN Configuration Profile into Profile Manager

Greetings All,
I'm working on configuring a Lion Server VPN (10.7.2) and I hit the following road block. I succesfully started the VPN server and profile manager. In fact, if I download the built-in "everyone" profile that has the pre-configured VPN to device such as an iPad things work just fine. However, I'd like to create other profiles with the same VPN configuration info so I can delegate more specifically to different groups and users. I was hoping I could simply import the VPN configuration profile that I saved in the Server dashboard when I setup the VPN service into profile manager somehow. The reason I'm going this route is because every time I try to just re-make the VPN profile it doesn't want to work. I'm not sure why, but I figure why re-invent the wheel if I don't have too. Any suggestions?

After a lot of investigating I haven't found a way to do this, I'm assuming it cannot be done.

Routing for configurable material

Hello PP gurs,
I want to create Routing for Configurable Material in SAP PP-PI or PP industries. How the object dependency is defined applied ?
This requirement is for Make TO Order scenario for Configurable Material.
At present I am working with resources only.
I want to create in such away So that while creating Production order system should ask select BOM & routing.
How can I define the Super BOM & Super Routing in Order?
Is it possible to calculate cost for this kind of requirement?
Please Give your Contribution from Whatever the Questions above....
Thanks & Regards,
Bhavik Dangi.

Dear,
In can explain youn w/ example
Let us say you have to manufactur CAR's(matyerial no in SAP is CAR). The coonfiguration options are - Paint, and tyre
Create a char inn CT04 as piant and tyre with value as below(data type = char)
Paint - white, red, blue and black
Tyre - Redial, Normal
Create materials like White-paint, Red-paint, Blue-paint, black-paint, Tyre-redial, tyre-Normal, Engine
Create a class in CL01 called CAR-CLASS , clas type 300 and assign the above Char to this class
Assign this class to Material CAR.
Create BOm with following items
Engine
White-paint
RED paint
Blue-paint,
black-paint,
Tyre-redial,
tyre-Normal,
Create a object dependency in CU40 type - selcetion condition to selcet red-paint material when in Sales order select paint red. and like this all others.
Selection condition for red paint is as below
Paint = 'red'
Like this for all others
Paint = 'white'
Paint = 'black'
Paint = 'blue'
Tyre = 'Normal'
Tyre = 'Redial'
Assign this object dependency to BOm items
Engine
White-paint -
>Paint = 'white'
RED paint -
>Paint = 'red'
Blue-paint, -
>Paint = 'blue'
black-paint, -
>Paint = 'black'
Tyre-redial, -
>Tyre = 'Redial'
tyre-Normal---->Tyre = 'Normal'
Now create a configuration profile
When you create a Sales order, system will pronmpt to enter the vlaues for piant and tyre
if you have selceted piant as red and tyre as normal, then the BOm will look like as below
Engine
RED paint
tyre-Normal
This is the configured BOM...what you have cretaed is supre BOM.
It is available in PP
For nmore information see blow
http://help.sap.com/saphelp_47x200/helpdata/en/92/58d455417011d189ec0000e81ddfac/frameset.htm

External Router, VPN, Configuration

Similar Messages

Maybe you are looking for