GSS4480 and CSS using RFC 1918 addressing

We are in the process of testing out a load balancing/redundancy setup using the GSS4480 and a CSS11506. Right now the CSS is setup with RFC 1918 addressing and we NAT out to the internet using a Checkpoint firewall. If I setup my VIP answer file to poll the 1918 address of the CSS, then that will be the answer that is given out when a client requests a name lookup which won't work. There has to be a way to configure this or then all diagrams I have seen are using internet routable name spaces. Looking at the docs and playing with the GUI I don't see any way of configuring it to use RFC 1918 addressing behind the firewall and still give out internet routable domain names. The docs show's the GSS and CSS being behind firewalls. I guess I am just missing something. Can the CSS be configured to link the RFC1918 address to a public address for KAP-AP purposes? Also is there any issues with NATing to RFC 1918 addresses for the health probes to other GSS's. We would like the health probes to go out over the internet not over our back end. Thanks

our issue really isn't the DNS request as more it is the APP session between the GSS and CSS. We have 2 GSS devices that will be located at different data centers. Going by how the GSS docs say they work, the primary GSS synchronizes its database to the secondary when it comes online. With this the case we can't give our GSS(s) 1918 addresses since they'll be in different locations the secondary won't be able to reach the 1918 address of the primary. We have not proven this, but going on what the documentation says this is how it works. Now if we can configure our GSS(s) with 1918 addresses and just NAT their connection as they go out the FW and that's how they learn of each other then that issue becomes moot.
Going with our current problem here's the rest. Since the GSS(s) are outside the firewall they are polling CSS(s) that are located behind the firewall. All NAT is done on the FW so the CSS is completely 1918 addressed. The GSS is polling the circuit IP of the CSS which is a real address that the FW NATs to the 1918 address. The problem arises when the GSS queries the CSS the request is received, however it's for a real address and not a 1918 address.
We thought about duplicating all the content rules with the real addresses as the VIP; this works, but since the users aren't going through those rules the GSS is never going to get anything more than 2 on the load.

Similar Messages

  • Changing to non RFC 1918 addresses

    Is there anyway to change the DHCP scope to non RFC 1918 IP addresses on a time-capsule? The time-capsule limits you to 10net, 192.168net or 172net addresses. My company allows split tunnels on VPN if your home network uses one of their registered address spaces. I really don't want to break back out my old Linksys to act as the router and dhcp server.

    Sorry but this is not possible with any of Apple's base stations.

  • Mail and SMTP auth (RFC 1918 error) ?

    I've an iMac and a Macbook (both with Mac OS X 10.5.3). Both connected to Internet using Airport via my WiFi router (with NAT activated on this router). This behavior is working fine since almost 2 years.
    I was using (and I'm still using) Thunderbird (last version) to read and send my emails on the iMac, and Mac OS X Mail on the Macbook.
    Everything was fine until yesterday. My provider has change is SMTP server so that authentification is now required when sending message.
    So I've activated SMTP auth in Thunderbird and all is fine. And do the same under Mail (with password option). But it doesn't work with Mail, I've got a SMTP connexion error.
    When I choose the diagnostic button, I find that SMTP connexion (EHLO) is fine, then saying my IP address (192.168.x.x) is private according to RFC 1918 and ending the connexion (QUIT).
    I have the same error on my iMac, though it just work fine with Thunderbird.
    So it seems to me Mail can't connect because of this behavior. But I don't understand why my IP address in Mail dialog with my provider SMTP server is not NATed by my router, like all other IP traffic.
    And I don't know what to do to correct this problem.

    Well, as SMTP authentification is only required to forward mail to another domain, I try to send an mail to my wife who is on the same domain as myself. It work fine with authentification disabled using Thunderbird but don't work with Mail.
    As it use to work fine until I change the configuration, I try to delete my account informations and create a new one as it was 2 days ago (without SMTP auth) but it still doesn't work even if I've got no problem with Thunderbird.
    Anyone as an idea about all this mess ? My only clue is the Mail connection diag which show connect, helo (with my private IP), server response 550 RFC 1918 and quit. Even if I found this behavior very strange, the result of the diag is the same with or without SMTP auth actived. So I suppose it was already the same before when it was working fine...

  • HT3529 My Imessage is still down, and is using my email address?

    It only started to do this, this morning (10am EST) at first all messages were being sent via SMS, but now they are being sent via my email address.

    The music will be where you put it. 
    You only get one download, unless you are in the U.S., then you can open itunes store, click Purchased, under Quick Links
    May not be a good idea to leave your sons email address on a public forum.

  • My kids have iPads and have used my email address to set up ,I have tried to go to settings and change the send/receive email but it won't accept a new email address

    Please Can someone help

    I had the same problem. I couldn't figure out how, so I took my iPad 2 to the Apple Store that was near me and had the folks at the Genius Bar change it.

  • Exchanging itabs between C and ABAP using RFC

    Hello,
    how can I send an internal table from ABAP to a C or C++ client, modify it here and send that modified table back to ABAP?
    Thx for your help!
    Thomas

    Here is my coding. Does anybody have an idea why the pointer in line 151 is = NULL ?
    Thx
    Tom
    #include <stdio.h>
    #include <stdlib.h>
    #include <string.h>
    #include <saprfc.h>
    #include <sapitab.h>
    static RFC_RC remote_function (RFC_HANDLE handle);
    static RFC_RC install (RFC_HANDLE handle);
    RFC_HANDLE handle;
    typedef struct RFCSTRUCT {
      RFC_INT   seq;
      RFC_FLOAT m;
      RFC_FLOAT si;
      RFC_FLOAT sl;
      RFC_INT   id;
      RFC_INT   lo;
      RFC_FLOAT re;
    } rfcstruct;
    static RFC_TYPEHANDLE handleRFCSTRUCT;
    static RFC_TYPE_ELEMENT typeRFCSTRUCT[] = {
      /* name /         / type /  / length /        / decimals */
      { "SEQ",        TYPINT,     sizeof(RFC_INT),    0 },
      { "M",          TYPFLOAT,   sizeof(double),     16 },
      { "SI",         TYPFLOAT,   sizeof(double),     16 },
      { "SL",         TYPFLOAT,   sizeof(double),     16 },
      { "ID",         TYPINT,     sizeof(RFC_INT),    0 },
      { "LO",         TYPINT,     sizeof(RFC_INT),    0 },
      { "RE",         TYPFLOAT,   sizeof(double),     16 },
    #define ENTRIES( tab ) ( sizeofR(tab)/sizeofR((tab)[0]) )
    Main
    int main (int argc, char ** argv)
      RFC_RC rc;
      handle = RfcAccept(argv);
      rc = install(handle);
      if (rc != RFC_OK)
        RfcAbort(handle,"Initialization error");
        return(1); }
      do{
        rc = RfcDispatch(handle);
      } while (rc == RFC_OK);
      RfcClose(handle);
      return(0); }
    install()
    static RFC_RC install(RFC_HANDLE handle) {
      RFC_RC rfc_rc;
      rfc_rc = RfcInstallFunctionExt( handle,
                                     "FUNC",
                                     (RFC_ONCALL)remote_function,
                                      "nodocu" );
      if (rfc_rc != RFC_OK)
        return rfc_rc;
      return RFC_OK;
    remote function
    static RFC_RC remote_function (RFC_HANDLE handle) {
      RFC_RC rfc_rc;
      ITAB_H itab_handle;
      RFC_PARAMETER Exporting[0];
      RFC_PARAMETER Importing[0];
      RFC_TABLE Table[1];
      Exporting[0].name = NULL;
      Importing[0].name = NULL;
    rfc_rc = RfcInstallStructure(  "rfcstruct",
                                    typeRFCSTRUCT,
                                    ENTRIES(typeRFCSTRUCT),
                                    &handleRFCSTRUCT);
      itab_handle = ItCreate("ITAB", sizeof(rfcstruct), 0, 0);
      Table[0].name = "ITAB";
      Table[0].nlen = strlen("ITAB");
      Table[0].type = handleRFCSTRUCT;          
      Table[0].leng = sizeof(rfcstruct);
      Table[0].itmode = RFC_ITMODE_BYREFERENCE; 
      Table[0].ithandle = itab_handle;
      Table[1].name = NULL;
      rfc_rc = RfcGetData(handle, Importing, Table);
      if (rfc_rc != RFC_OK)
        return (rfc_rc);
      modify_table(itab_handle, handle);   
      rfc_rc = RfcSendData(handle, Exporting, Table);  
      return(rfc_rc);
      ItFree(itab_handle);
      RfcClose(handle);
    modity itab...
    modify_table(ITAB_H itab_handle, RFC_HANDLE handle) {
      int linenr;
      int lineleng;
      char table_data[8192]; 
      struct RFCSTRUCT *ptr=NULL;
      RFC_FLOAT a;
      RFC_FLOAT s;
      RFC_FLOAT sl;
      RFC_INT id;
      RFC_INT lo;
      lineleng = ItLeng(itab_handle);
      for (linenr = 1; ; linenr++)
        ptr = ( struct RFCSTRUCT  *) ItGetLine(itab_handle, linenr);
        /* HERE: POINTER IS ALWAYS == NULL - WHAT'S WRONG ??? */
        if (ptr == NULL) break;
        memcpy(table_data, ptr, lineleng);
      return; }

  • RFC 1918 & ACL

    Hi,
    I have some queries on RFC 1918
    1. Do I need to block RFC 1918 addresses on the internet edge router even if I am not using the private address space in my LAN/DMZEE?
    2. The RFC 1918 ip addresses are non routable on internet. Then how are they reaching one's network thru internet? Sometimes I see some logs on my firewall from internet with the source ip 10.x.x.x
    If its hitting my network thru address spoofing, is it not possible for my firewall to identify the real IP address?
    Thank You

    Hi
    1) Yes you should still use them as you should never be seeing these addresses coming from the Internet as legitimate traffic.
    2) A packet with a source ip address of 10.x.x.x will still reach your firewall. It is only when it tries to route back to that address that it fails. But often people sending these packets are not interested in the return traffic eg when they are issuing a snmp set commmand to a router.
    If they have spoofed the source no it is not really possible to trace the real address.
    HTH
    Jon

  • Suspected illegal use of email address

    Dear Skype Admin, I had problem signing in into skype 2 days ago and I tried to reset my login password today. After providing my email address, I have used the emailed link received attempting to reset my password. At the reset password screen, I was told that there are 2 skype accounts that linked to my email address. I am the email account holder of [e-mail removed for privacy and security] and has used this email address to register a skype account patlim2006. Could you please verify if the skype ID "mypat_1973" is legitimately created with my email address "[e-mail removed for privacy and security]". Kindly advise how could this be happening? Thnak you and regards, Patrick Lim 

    Hi,
    You can modify the function for send mail for PO , so it can check and get all multiples line in the vendor email address. Also in this function you can add several logic, to exclude line item for sending mail by using the Do not use indicator.Please try
    Regards
    w1n

  • HT204380 I need to track a thief, he has my daughters iPod touch, and is using my email account for FaceTime

    How can I track this guy! He has my daughters iPod touch, and now using my email address for face time. The iPod was lost in Dubai last month.

    The only way to locate/disable/erase any lost/stolen iPhone/iPod Touch is through Find My Phone or a similar app. However, this requires that Find My Phone be setup/activated, on your phone, before it was lost/stolen. You would then login at iCloud.com & try to locate it. This requires the phone be turned on & have an Internet connection. There is no other way to locate a lost/stolen iPhone. Apple can't/won't help you, nor will your carrier. Report the loss to the Police, your carrier & Insurance company. Change all of your passwords.
    If your carrier offers Blacklisting & they Blacklist the phone, it will be unusable as a phone.
    If locked with a passcode, all a thief or whoever finds it has to do is force the phone into recovery mode & restore it. While this deletes all data on the phone, it also removes the passcode so the phone can then be used as a phone or touch.

  • Business Address Services (BAS) and Where-Used ADRV/ADRVP

    Can someone point out any good sources of information on Business Address Services or possibly its predecessors either online or hard-print?  I've been through the help.sap.com information for BAS and all sorts of SAPNotes without finding what I'm looking for.
    In particular I'm trying to understand default SAP's usage of the Where-Used links in BAS that are stored in the tables ADRV and ADRVP.
    My Issue: If I create a Sales Document in SAP referencing a partner address stored in BAS there is no Where-Used ADRV record created.  So I cannot use the address number of the ADRC record to find which documents are referencing it via ADRV.
    steps to recreate:
    - Using existing Customer/Partners
    - Create Sales Document (Order) adding partners by selecting partner #'s and not manually overriding any address information.
    - Address of the partner is now linked in the Sales Document via VBPA-ADRDA=D and the ADDRNUMBER references the same ADRC address records that KNA1 points to.
    - There is no Where-Used record created in ADRV indicating that the Sales Document is linked to that address.
    - If I change or delete the ADRC record from KNA1 then I do not have the information available to take any special actions on linked Sales Documents.
    Note: If you manually override the address or use a one-time address when entering the Sales Document then the new address is linked via VBPA-ADRDA=E and a Where-Used record is created in ADRV.  Also any follow-on documents created with reference to the Sales Document will also have Where-Used records created in ADRV.  So in the case of changed or manually entered addresses ADRV does work as I would expect it to.
    I am observing this behavior in both R/3 4.6c and ECC 5.0.  Trying to understand why SAP is using or not using ADRV in these situations and whether the behavior can and should be changed.

    Can someone point out any good sources of information on Business Address Services or possibly its predecessors either online or hard-print?  I've been through the help.sap.com information for BAS and all sorts of SAPNotes without finding what I'm looking for.
    In particular I'm trying to understand default SAP's usage of the Where-Used links in BAS that are stored in the tables ADRV and ADRVP.
    My Issue: If I create a Sales Document in SAP referencing a partner address stored in BAS there is no Where-Used ADRV record created.  So I cannot use the address number of the ADRC record to find which documents are referencing it via ADRV.
    steps to recreate:
    - Using existing Customer/Partners
    - Create Sales Document (Order) adding partners by selecting partner #'s and not manually overriding any address information.
    - Address of the partner is now linked in the Sales Document via VBPA-ADRDA=D and the ADDRNUMBER references the same ADRC address records that KNA1 points to.
    - There is no Where-Used record created in ADRV indicating that the Sales Document is linked to that address.
    - If I change or delete the ADRC record from KNA1 then I do not have the information available to take any special actions on linked Sales Documents.
    Note: If you manually override the address or use a one-time address when entering the Sales Document then the new address is linked via VBPA-ADRDA=E and a Where-Used record is created in ADRV.  Also any follow-on documents created with reference to the Sales Document will also have Where-Used records created in ADRV.  So in the case of changed or manually entered addresses ADRV does work as I would expect it to.
    I am observing this behavior in both R/3 4.6c and ECC 5.0.  Trying to understand why SAP is using or not using ADRV in these situations and whether the behavior can and should be changed.

  • HT204053 I have an iPhone 4S and the new Apple TV, both setup with my email as the Apple ID.  I gave my wife an iPad 3 and set it up using her email address as the Apple ID.  Is a second iTumes Match subscription required for her to use our music from iCl

    I have an iPhone 4S and the latest Apple TV, both setup with my email address as the Apple ID.  I subscribed to iTunes Match so our music could be played from iCloud.  I gave my wife an iPad 3 and set it up using her email address as the Apple ID.  When I try to turn on iMatch so she can play our music from iCloud on her new iPad it tells me that she needs a subscription to iTunes Match.  Is it Apple's intent that we would need two iTunes Match subscriptions?  If not, how do I accomplish what I want to get done?

    The problem is that all services are bundled with your Apple ID ([email protected]):
    Your iCloud account (Mail, Contacts, Calendars, Reminders, Notes, Backups, etc.),
    also iTunes & App Store purchases (Music, Movies, TV Shows, etc.),
    and the iTunes Match services.
    (I guess that all your devices - yours and your wife's are connected to one iTunes library, right?)
    If you want that your wife gets her own iCloud account for Mail, Contacts, Calendars, etc. but gets also access to your media then you have two set up two things on her device:
    iCloud (Settings > iCloud) with her account (e.g. [email protected])
    and
    iTunes & App Stores (Settings > iTunes & App Stores) with your account (e.g. [email protected]).
    In this case she gets access to your library and could use the same iTunes Match account.
    (See also: Using one Apple ID for iCloud and a different Apple ID for Store Purchases http://support.apple.com/kb/HT4895)

  • I have an Airport Extreme as my router and am using time capsule to extend the network in my new house. My ISP is only providing me 4-5 ip addresses and wants me to set up my router to issue out new ip addresses for all my devices.How do I fix this?Help

    I have an Airport Extreme as my router and am using time capsule to extend the network in my new house. My ISP is only providing me 4-5 ip addresses and wants me to set up my router to issue out new ip addresses for all my devices.How do I fix this?Help.
    They said I need to change my settings to NAT settings. I haven't been able to figure out or find anything. I have also spoken to Apple Support on the phone for hours without being able to figure out how to do this ( i don't think he knew much either lol.) Please help me because I've got about 15-20 devices in my house that require to be connected to the internet and this is just making things ridiculously slow and painful for me.
    Thanks!

    It is on DHCP & NAT under router mode yet my isp is still the one issuing ip addresses to my devices instead of the router issuing them

  • Can my husband and I use the same e-mail address/AppleID for our 2 phones, our iMac, and our Macbook?

    Can my husband and I use the same e-mail address/AppleID for our 2 phones, our iMac, and our Macbook?
    We share an e-mail account and would like to use the same e-mail address for both our phones, as well as our computers at home. Is this possible?
    We both have itunes and apple ID's of our own right now, but since getting married, we are deleting these e-mail accounts and sharing one. How can we make this work?

    You may use the same Apple ID for iTunes and App Store purchases, but using different iCloud Apple IDs is recommended.
    If you use the same iCloud account on your iPhones it will sync all of your contacts, reminders, and notes automatically and it could be a pain. I don't know exactly how you would want to have the iCloud accounts set up on the Macs, because I don't know exactly how you use them. (I am assuming you share?). But you can do whatever you like, you can even keep the same iCloud accounts, etc but you may want to disable the syncing of certain items, because reminders for ones phone popping up on the others automatically would probably get annoying, but that is just me.

  • I have two Apple ID, how can I delete one and use the email address associates to the main one?

    I have two Apple ID, how can I delete one and use the email address associates to the main one?

    If you abandon one of the Apple IDs you will also basically be abandoning any content that you have acquired with that Apple ID. Content can only be updated and re-downloaded with the Apple ID that was used to buy it. Apple will not combine the content of Apple IDs and Apple will not transfer the content from one Apple ID to another Apple ID.

  • I just got my Mac and I used my family Apple ID. It had all of my parent's information, I added my e-mail.I wanted to make my own Apple ID, but I couldn't use the same e-mail address again! How do I delete this information so I can make my own Apple ID?

    I just got my Mac and I used my family Apple ID. It had all of my parent's information, I added my e-mail.I wanted to make my own Apple ID, but I couldn't use the same e-mail address again! How do I delete this information so I can make my own Apple ID?

    Wendy P-G wrote:
    I just got my Mac and I used my family Apple ID. It had all of my parent's information, I added my e-mail.
    It is not clear how or where you "added" your email, but you cannot create an Apple ID using an email address that is already associated with another Apple ID.
    If that is what you did, delete that email address from your family's Apple ID. You should be free to create a new one.
    Do all that by starting here: https://appleid.apple.com/
    Select "Manage your Apple ID". Log in with your family's Apple ID and then delete your own email address wherever it appears.
    Save Changes, log out, and create the new one using the same website. This time select "Create an Apple ID".
    Please don't forget your security questions, and be sure to specify a "rescue email address" that is separate from all other Apple IDs. You will avoid so many problems that way...

Maybe you are looking for