GSS-Communication on Second Interface

Hi,
I shall be deploying two GSS in two different locations.
Both GSS devices shall be placed on a DMZ using Private IP addressing with NAT to Public addresses to resolve DNS requests.
As replication is not supported using NAT, would it be feasible to configure the second Interface with an IP address on the inside Network which would be used for GUI Management and also GSS-Comunications. Are there  any security issues which this approach.
regards
Ian.

Hello Ian,
By default, the first Ethernet interface (eth0) is used for both interdevice communications and for communicating with ANM, which you use to manage your GSS devices.  You can use the gss-communications interface-config command to change it to eth1.  I'm not aware of any security issues with this approach.
Hope this helps,
Sean

Similar Messages

  • My question about second INTERFACE DESIGN

    i create one interface( main interface created by JFRAME)
    in main interface i want to click button
    then create second interface.
    i should use which class to build second interface?
    i tried JFrame but it doesnot work
    JFrame is top cotainer .and it need main() also
    thanks in advance
    please give some hints

    i tried JFrame but it doesnot work - JFrame is top cotainer .and it need main() alsoThat's not true - you can create a JFrame instance without it having its own main() method.
    When the user clicks the button, do this:JFrame secondFrame = new JFrame("Second Frame");
    secondFrame.add(....whatever you need to add to it - JPanels etc...);
    secondFrame.setBounds(100,100,400,300);
    secondFrame.show();

  • Use of the second interface

    Hi,
    I just configured the first interface of my C150 ESA with ip address, default gateway,listener, RAT and SMTP routes. I want my IronPort to handle mail for another domain with a totally independant netwotk (subnet and mail servers...). Can I configure the second interface the same way I configured the first one (obviously with all the good settings...;-)) ? Does it work? Is there no problem of IP or SMTP routing ?
    To be short, I want to do two "one interface configuration" scheme with my ESA (which has two physical interfaces) and not a "two interfaces configuration" scheme
    Thanks,
    Vincent

    Vincent - should be ok to do this. You have two options to do this:
    1. Use the 2nd NIC port and assign IP.
    2. Use the virtual gateway feature to get this 2nd IP address onto the network and then create a new listener on the virtual interface..this is much simpler and less work.
    Use the interfaceconfig CLI command or in the GUI to do this. Bind the new interface with it's unique DMZ ip onto the same network card as used for the previous interface (data 1 i assume).
    Option 2 is much easier
    :wink:

  • ISE portal guest on second interface

    Good morning,
    I have configured my switch and ISE with this template
    https://supportforums.cisco.com/docs/DOC-18325
    But i want the portal to second interface, if i change the advance attributes with the address
    https://ip(second interface):8443/guestportal/Login.action
    the posture status become not applicable and the redirect is not done. If i copy manually the url, i access to guest portal.
    Can you help me?
    sorry for my badly english.
    Best regards
    Paolo

    Hello!
    I think this link will help you!
    http://www.cisco.com/en/US/docs/security/ise/1.0.4/install_guide/ise104_app_e-ports.htmlhttp://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_app_e-ports.html
    From this page we can see that Guest\Sponsor portal can be only in GbEth0

  • MARS second interface can't be on same network?

    I am trying to enable the second interface (eth1) in Mars for management. The GUI won't let me set it to be on the same network as eth0. Why is this? Can I do it from the CLI? Maybe Cisco can do it in expert mode?

    See for discussion:
    http://groups.google.com/group/cs-mars-ug/t/3457ba30ac6e3ea3?hl=en-GB

  • Create Communication Component BS interfaces not loading

    Hello,
    I have created a communication component and assigned a business system in my new PI 7.1 system and unlike the other components I've create this Business System does not load with all the inbound and outbound interfaces.  When I open the Business System I see that both the inbound and outbound tab show 0 interfaces.
    Other Business Systems have loaded with the interfaces.  What might cause the interfaces for a business system not to load?
    Thanks,
    Matt

    Steps to recreate:
    1.  I create the design in IR using SWC SAP_SRM_SERVER_5.0 and COPICS_FTP_1.0.
    2.  I create a Receiver Determination in ID selecting Interface = DeliveryNotification_Out and Sender = SRM_SERVER_5.0.
    3.  I add COPICS_FTP_1.0 as the Configured Receiver.
    4.  I open the Configuration Overview and expand the arrow for the service COPICS_FTP_1.0.
    5.  Now the interface appears as DeliveryNotification_Out but I need to create the Receiver Agreement with COPICS_FTP_1.0 as COPICS_DeliveryNotification_In.
    6.  ...but PI does not allow me to change the interface.  When I try to create "New Specific" Receiver Agreement it autofills the incorrect interface and does not allow me to correct it. 
    What am I doing wrong?
    Thanks,
    Matt

  • Ni-fbus communications cannot connect interface

    I am using NI-FBUS Communications Manager 3.2 with a NI PCMCIA-FBUS Series 2 card in a Ricoh R/RL/... series PCMCIA adapter on a desktop computer.  I enabled the PCMCIA card via the Interface Configuration Utility.  When I start the Comm Manager, I get the following error message:
    NI_FBUS Communications Manager cannot connect interface 0 on the fieldbus board 1. Click OK to.....
    Windows sees the Ricoh adapter card and the Series 2 card as working properly.  If I install the Series 2 card in a laptop, the Comm Manager starts properly.  The same series 2 card and Ricoh adapter card has been used in another desktop computer also running XP SP2.
    How do I get this combination up and running?

    I tried the PCMCIA card and adapter card in another computer running XP and NI-FBUS Communications Manager 3.1.1.  The combination worked properly; the card was seen and the Comm Manager opened.  When Configurator was opened, the device attached to the link was seen.
    Is there a compatibility difference between Comm Mgr 3.1.1 and 3.2?

  • Industrial Communications for CANopen - interface create error

    Hello, 
    I am trying to run some basic examples, which I have found with example finder in directory - NI - Industrial communication for CANopen -> cRio -> FPGA bitfiles -> CANopen_cRio_heartbeat.vi.
    But the block "Interface create" gives me the error -2147136667. 
    I am working with cRio with NI 9881 module. The module is connected to Festo robot.
    Do you have please any idea what could cause this error ? 
    Text of Explain Error:
    Possible reason(s):
    You are trying to start an interface that is missing bus power for the transceiver. Some physical layers on NI-CANopen hardware are internally powered, but others require external power in order for the port to operate. This error occurs when starting an interface on hardware that requires external power when no power is detected. Supply proper voltage to your transceiver. Refer to the CANopen Hardware book of the NI-Industrial Communications for CANopen Help for more information.
    Cheers
    Ivo
    Solved!
    Go to Solution.

    Hello IvoK,
    The 9881 needs to be externally powered. You can do it with a CAN Breakout Box or with a CAN cable.
    Regards
    Mélinda B
    National Instruments France
    #adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
    Travaux Pratiques d'initiation à LabVIEW et à la mesure - Nouveau contenu
    34 sessions partout en Fra...

  • Use of second interface (eth1) on ISE

    Hi. I am seting up a two-node deployment of ISE (3315 - version 1.2.0.899). Both appliances will be connected to my two core switches.
    I would like to know if I just have to configure one ethernet interface (eth0) on each ISE server and then connect each eth0 to a different swithch. Or, in order to get more redundancy, should I configure both ethernet interfaces on each ISE appliance and then connect eth0 to switch 1 and eth1 to switch2 on both appliances?
    Thank you

    yes, you can do that , as all the ports can be used for replication and synchronization but for management is restricted to Eth0 only.

  • Trigger Second Interface for the same Creation event

    Hello all,
    I have to send my every created equipment to two different systems.
    I created Custom function Modules which create individual Idocs.
    I called these function modules in Methods and we created two custom Tasks to trigger workflow creation event.
    Problem is system is not accepting the second event triggering. It is showing
    'Feed back After error'
    'Deactivating' --- In Event Trace, and it is deactivating the second link in SWETYPV and first event is working fine.
    First Event was developed long back and we did for second event now.
    Did i miss something for my new Tasks?
    If i change the setting of Event delivery to '(always) Using Queue ' for second event in SWETYPV,
    It is not showing error but event trace is showing that second event is in Queue?
    How to process this Event?
    Thanks,
    Krishna.

    Hello,
    It was Checked already..
    still not working..
    Event Trace error was giving this error also..
    'Event EQUI CREATED for task TS90100007 not defined as start/end event'.
    Regards,
    Krishna.
    Edited by: Krishna on Sep 11, 2009 3:32 PM

  • Communication program blocks interface

    Hy,
    I am developing an application which consists in a communication between a client and a server.
    If no GUI is present, then the application runs perfectly.
    Now I put two windows: one for the client and one for the server, both putting information on JTextAreas about the operations the client/server are doing. For the beginning, I have a button that when I click it I want to start the server.
    If I press this button, the whole GUI is blocked by the "serverSocket.accept()".
    I want to make this application, running without blocking my GUI, (graphic indepent of logic). I suppose it's a problem of threads concurency, but I don't know how to fix it...
    Please help!

    [http://java.sun.com/docs/books/tutorial/uiswing/concurrency/index.html]
    [http://java.sun.com/docs/books/tutorial/essential/concurrency/index.html]
    [http://catb.org/~esr/faqs/smart-questions.html]
    To get better help sooner, post a SSCCE that clearly demonstrates your problem.
    To post code, use the code tags -- [code]Your Code[/code]will display asYour CodeOr use the code button above the editing area and paste your code between the {code}{code} tags it generates.
    luck, db

  • Inter-GSS Communication and KAL-AP

    Hi,
    I have 4 GSS installed in the network that load balance users to 3 data centers and in each of them I have a CSM module. The KAL-AP protocol is configured between all GSS and all CSM in order to retrieve the load value form each site. On the GSSM GUI, I am observing that other GSS devices report the availability of each site as "online" instead of indicating "Load xx". Is it a normal behaviour ? Only the GSSM-Primary displays the real load ?
    Thank you for any hints,
    Yves Haemmerli

    Check the following. It could be due to one of them.
    1/ Check the 'Balance Methods' under the 'DNS Rules' to be 'least loaded' and not 'round-robin' or 'ordered-list'.
    2/ If your 'Answer' is a 'VIP type', and it has 'VIP KeepAlive Type:' configured as 'none', then you would see an 'online'. Change that to something other than 'none'.
    For example, a VIP type configured with a 'KAL-AP type' will show you the 'load' value rather than just an 'online/offline'
    3/ The other possibility is that if you have configured the 'Answer' type as 'Name Server' rather than as 'VIP Type' then you would see the 'online' again.
    4/ If you still face the issue I would recommend to upgrade your version. On version 1.3.1.0.0, I am not seeing this issue.
    Hope this would solve your problem.
    thanks

  • Access interface related entries from within Receiver Communication Channel

    Hi,
    when i open the interface determintation that i created, i can see.
    Sender Details:
    Communication Component:Sys_Sample_One_D
    Interface: UserMasterQuery_Outb
    Namespace: urn:sample.com:I_Legacy_JDBC_Application
    Receiver Details:
    Communication Component:Sys_Sample_Two_D
    Interface:EmployeeEmailProcessing_Inb
    Namespace:urn:sample.com:I_Legacy_FileApplication
    Interface Mapping: UserMasterResultset_to_EmployeeEmail
    I created a Generic File Receiver communication Channel for my receiver BS: CC_FileReceiver
    In the target FileName field of the Communication channel, i would not like to hardcode any filename value, but my requirement is, the filename should be the same as the name of the Receiver Interface, that has been used in the message exchange.
    in my case, it should be something like EmployeeEmailProcessing_Inb.xml
    How can we access dynamically the interface related entries in the Communication channel, and how can we set those values in the Target Filename value of the File Receiver communication channel.
    in short, if i use the same communication channel for other scenario, the received filename should be different based on the receiver interface name that is executed.
    It would be even more better if i could access/set the receiver namespace value as part of the TargetFileName or TargetFileDirectory values.
    pls let me know how this can be possible.
    Thanks in advance,
    Madhu

    Hi Shabarish,
    thanks for your blog.
    After i saw the blog, the UDF can be created in ESR.
    DynamicConfiguration conf = (DynamicConfiguration) container.getTransformationParameters().get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
    DynamicConfigurationKey key = DynamicConfigurationKey.create(u201Chttp://sap.com/xi/XI/System/Fileu201D,u201CFileNameu201D);
    String MyFileName = a + "_" + b +".xml";
    conf.put(key, myFileName);
    At this point, i can see that the required value is stored in certain key in the DynamicConfiguration.
    In the blog, i could not see anything related to ID.
    My question is, what do we need to do ID,
    when we create the FileReceiver Communication Channel, in that we need to specify the mandatory field "Source File Name". what value do we need to enter here.
    Are there any additional things do we need to do in Communication Channel in ID.

  • Using TCP on the second ethernet interface

    Hello,
    I'm using a PXI 8109 running Pharlap.
    I'm trying to use the second ethernet interface of my PXI to send UDP and TCP packets. The primary interface is used to manage Veristand Channels.
    Here is the configuration of my two ethernet interfaces: 
    - eth0 (primary):
    IP : 10.0.0.3
    subnet mask : 255.0.0.0
    - eth1 :
    IP : 192.168.10.9
    subnet mask : 255.255.255.0
    For UDP, I have no problems, packets are sent to the second interface as I want. I think it work because there is a "network address" input on the "UDP Open" VI so the system can choose the right interface.
    For TCP, I use the "TCP Open a connection" VI but there is no this kind of input. And it is not working : I assume the system is trying to use the primary interface but it can't route packets... 
    For information, my two networks are physically independant.
    Can you help me finding out what's going on ? Is it possible to use TCP on the second ethernet interface ? 
    Many thanks,
    Regards,
    Laurent
    Solved!
    Go to Solution.

    Sorry but i don't understand your Input problem!!!
    Could you give me more details?
    The link below can maybe be help you:
    http://digital.ni.com/public.nsf/allkb/67F94BB93BCE32CF86257367006B3659?OpenDocument
    Best regards
    Aurélien Corbin
    National Instruments France
    #adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
    Cahiers de vacances de NI
    Présentations en ligne : 12 fondamentaux à réviser, du 9 juillet au 29 aoû...

  • Second ethernet interface ni a cache engine

    I'm trying to configure the second ethernet interface
    in a CE 505, version 2.51
    a "show hardware" command shows 2 ethernet interfaces, but when I go into configuration
    mode and try to set any parameter in the second
    interface, I get the error:
    "configure interface 1 denied"
    Thanks for any clue.

    Hi
    On a CE-505 you cannot use the second interface. This is a limitaion of the software on the device. Only if you had a content engine running version 3.x or 4.x can you use the second interface.
    Best Regards,
    Mark

Maybe you are looking for

  • Airport to network problem

    Now I have the right forum, I think, I can state my problem again. When I turn my computer off or put it to sleep, Airport loses connection with my BT Homehub. When I go to "Network" I find that Airport is on without a network selected. The security

  • Merging pages in same PDF

    hi all, I'd like to know if it's possible to merge the 2 pages in same PDF as a single page. Cause when I crop the pages with Tools->Crop, I got some weird look of the page even if I crop small portion of it, it still remains as single individual pag

  • FRM-40735: WHEN-CREATE-RECORD trigger raised unhandled exception ORA-01422

    when i am searching AR module and Receivables - > Transactions - > Transactions i am getting this FRM-40735: WHEN-CREATE-RECORD trigger raised unhandled exception ORA-01422. what to do?

  • CS5 and Cineform Converted Files

    I have been having trouble trying to Import files into a new CS5 Project Panel.  The files in question are my original digitized (from Mini-DV) .mp4 video tapes.  The problem is that when I choose to Import and select the original digitized file, the

  • Reg. alv's

    Hi all,   can anyone send me the best links for ALV programming. Thanks & Regards,        Ratna