Have issue for access internal RDP server

Hi All
Problem again. Hope you all can help to solve.
I have internal server 10.200.13.1 for RDP access. But base on below config not are work.
Also if bypass this firewall can work.
: Saved
ASA Version 8.2(5)
hostname mkofficefw01
enable password XwzHd4VCVqrxvrzG encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Ethernet0/0
nameif HGC_BB
security-level 0
ip address 10.10.10.1 255.255.255.0
interface Ethernet0/1
description MK_Office_206
nameif MK_206
security-level 100
ip address 10.206.0.253 255.255.254.0
interface Ethernet0/2
description MK_Office_207
nameif MK_207
security-level 100
ip address 10.207.0.253 255.255.255.0
interface Ethernet0/3
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address 172.32.1.1 255.255.255.0
management-only
ftp mode passive
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
access-list mk206_inside extended permit ip any any
access-list mk207_inside extended permit ip any any
access-list HGC_outside extended permit ip any any
access-list inside_nat_206_outbound extended permit ip any 10.206.0.0 255.255.254.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.207.0.0 255.255.255.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.201.0.0 255.255.0.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.202.0.0 255.255.0.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.204.0.0 255.255.0.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.205.0.0 255.255.0.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.210.0.0 255.255.0.0
access-list inside_nat_206_outbound extended permit ip 10.206.0.0 255.255.254.0 10.200.13.0 255.255.255.0
access-list inside_nat_207_outbound extended permit ip any 10.207.0.0 255.255.255.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.200.0.0 255.255.0.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.201.0.0 255.255.0.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.202.0.0 255.255.0.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.204.0.0 255.255.0.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.205.0.0 255.255.0.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.210.0.0 255.255.0.0
access-list inside_nat_207_outbound extended permit ip 10.207.0.0 255.255.255.0 10.206.0.0 255.255.254.0
pager lines 24
logging asdm informational
mtu HGC_BB 1500
mtu MK_206 1500
mtu MK_207 1500
mtu management 1500
icmp unreachable rate-limit 1 burst-size 1
icmp permit any HGC_BB
icmp permit any MK_206
icmp permit any MK_207
no asdm history enable
arp timeout 14400
global (HGC_BB) 1 interface
nat (MK_206) 0 access-list inside_nat_206_outbound
nat (MK_206) 1 10.206.0.0 255.255.252.0
nat (MK_206) 10 0.0.0.0 0.0.0.0
nat (MK_207) 0 access-list inside_nat_207_outbound
nat (MK_207) 1 10.207.0.0 255.255.255.0
nat (MK_207) 10 0.0.0.0 0.0.0.0
access-group HGC_outside in interface HGC_BB
access-group mk206_inside in interface MK_206
access-group mk207_inside in interface MK_207
route HGC_BB 0.0.0.0 0.0.0.0 10.10.10.2 1
route MK_206 10.200.0.0 255.255.0.0 10.206.0.254 1
route MK_206 10.201.0.0 255.255.0.0 10.206.0.254 1
route MK_206 10.202.0.0 255.255.0.0 10.206.0.254 1
route MK_206 10.204.0.0 255.255.0.0 10.206.0.254 1
route MK_206 10.205.0.0 255.255.0.0 10.206.0.254 1
route MK_206 10.210.0.0 255.255.0.0 10.206.0.254 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
aaa authentication telnet console LOCAL
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto ca trustpoint _SmartCallHome_ServerCA
crl configure
telnet 10.0.0.0 255.0.0.0 management
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 HGC_BB
ssh 10.0.0.0 255.0.0.0 management
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
username maxline password AxVGTgY4NjA2d3H8 encrypted privilege 15
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
inspect icmp error
service-policy global_policy global
prompt hostname context
call-home reporting anonymous
Cryptochecksum:c8df6eda8684cac25cc5a0e927f9b39a
: end
Thank for your help !!!
Jacky

From which IP are you trying to access it?
Also what's the IP address you are putting into the RDP session? The real IP address for the server?
For Networking Posts check my blog at http://www.laguiadelnetworking.com/category/english/
Cheers,
Julio Carvajal Segura

Similar Messages

403 forbidden you don't have permission to access / on this server Error

I just deployed my server 2012 & exchange 2013. Serv#1 domain name is xyz.com. and Serv#2 exchange server: mail.xyz.com. My server is also hosting DHCP Server. After installing the servers, every time when i go to
my website - www.xyz.com (it is hosting by third party Webmaster) it give me error message: 403 forbidden you don't have permission to access / on this server Error. What can I do to result this problem.
Thank you for your help.
Cnet3383

Jim,
Thank you very much for responding on my question. My website is working fine. It only has problem with the segment of network within server 2012. And also, I found out that as soon as I stop the DNS server then i can access my website
without any problem. I am very sure the problem in the setting of my DNS Server. I have all A records are pointing out to internal private ip to Server 2012, Exchange Server, and also external ip to exchange server, and website. Here
is my DNS Mgr setting:
(Same as parent folder) Start of Authority (SOA) (204),serv.xxx.com,hostmaster.xxx.com Static
(Same as parent folder) Name Server Serv.XXX.com
Static (Server 2012 Name)
(Same as parent folder)
Host (A)
173.xxx.xxx.19 Static (Public IP)
(Same as parent folder) Host(A)
10.1.8.1 Static (Private IP)
(Same as parent folder) Host(A)
98.xxx.xxx.83 Static (My website public IP)
(Same as parent folder)MailExchange (MX)
Mail.XXX.com
Static
serv
Host(A)
10.1.8.1
Static
Mail Host(A)
10.1.8.10 Static
Please, let me know if you can figure out what is the problem.
Thank
Cnet3383

You don't have permission to access / on this server.403 forbidden

ou don't have permission to access / on this server.403 forbidden

Jim,
Thank you very much for responding on my question. My website is working fine. It only has problem with the segment of network within server 2012. And also, I found out that as soon as I stop the DNS server then i can access my website
without any problem. I am very sure the problem in the setting of my DNS Server. I have all A records are pointing out to internal private ip to Server 2012, Exchange Server, and also external ip to exchange server, and website. Here
is my DNS Mgr setting:
(Same as parent folder) Start of Authority (SOA) (204),serv.xxx.com,hostmaster.xxx.com Static
(Same as parent folder) Name Server Serv.XXX.com
Static (Server 2012 Name)
(Same as parent folder)
Host (A)
173.xxx.xxx.19 Static (Public IP)
(Same as parent folder) Host(A)
10.1.8.1 Static (Private IP)
(Same as parent folder) Host(A)
98.xxx.xxx.83 Static (My website public IP)
(Same as parent folder)MailExchange (MX)
Mail.XXX.com
Static
serv
Host(A)
10.1.8.1
Static
Mail Host(A)
10.1.8.10 Static
Please, let me know if you can figure out what is the problem.
Thank
Cnet3383

Cannot access internal web server from same lan

i cant resolve one problem in may 1921 ISR router, i have a web server in my internal lan , i set up static nat for accessing that web server from outside and it works fine but i cannot view that site from internal workstations can you suggest me what to do. i need packets to go out the outgoing interface of router and then come back and enter the static nat wich will direct to the web server is it possible?
static nat is
ip nat inside source static tcp <local web server adress> 80 <global address> 80
also i have set up dinamic nat for outgoing trafic
ip nat inside source list <access-list> interface <outgoing interface>
and it is working fine too.
on external interface i have nat outside
on internal interface i have nat inside

This is not working because your router has a direct to your web server that is not through the outside interface which is needed for nat to occur, for this to work you need to setup a loopback interface as nat outside and policy route traffic to there for your server traffic
Bu if your server is internal why do you need nat at all? Can you not use bind with views that might be simpler
M
Sent from Cisco Technical Support iPad App

You don't have permission to access ** on the server, HELP please

For the last months I've been working with Muse and updating my website through Muse without any problems.
I use my extern HTML for update pages in Muse, and usually this went without any problems too.
But if I test my new update, when I want to download a specific clip, it says: "You don't have permission to access ** on this server."
The files are in the correct place on my FTP, the link is correct and when I open the specific link in my browser without using my website, I CAN download the file.
How is it possible that this suddenly doesn't work anymore? Last time I updated this way was one week ago - without any problems.
Can anyone help, seeing I have done everything I usually do, and everything is in the correct place and the link does work.
Thanks

In my case I have to close/quit Muse. Then re-open the program. For me the problem goes away. This only happens occasionally.

Why all of a sudden am I seeing: FORBIDDEN You don't have permission to access / on this server.

I can normally access Firefox with no problem. Now when I try to connect to Firefox I see an error message that says: FORBIDDEN You don't have permission to access/on this server. What's up with that? How do I fix it?

Maybe the server is down for maintenance or updating.<br />
Can you post a link?

Do not have authorization for access with activity 03 on the InfoProvider

Hi,
I have developed new cube & ODS and created new Web Templates based on queries on these Infoproviders.
I have created new role and adde these templates to menu of this Role.
In Authorization profile i have used following Authorization objects.
S_RS_BTMP
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
S_RS_ODSO
In all these objects i hace selected activity 3.
Infoarea used for these new Cube & ODS is also added and for cube & ODS selection ihave used * (full authorization)
But when user is opening the web template it is showing error messahe
"You do not have authorization for access with activity 03 on the InfoProvider ZICXEROX."
Is there is any authorization object missing in the profile?
Regards
SSS

Dear SSS,
Have the same problem ' You do not have sufficent authorization for the infoprovider'. so could you please send the document from my mail id
[email protected].......
plaase very very urgent
Regards
Ahmed.

How do I view the computers I have authorized for access to my Itunes library. I do not want to do a blanket deauthorization. I want to asee what I have authorized.

How do I view the computers I have authorized for access to my Itunes library?I do not want to do a blanket deauthorization. I want to asee what I have authorized.

As far as I am aware, there is no way to do this. You have to de-authorize them individually from the computer you want to de-authorize, or de-authorize all and authorize just the ones you need.

RIM Twitter for BlackBerry Internal Twitter server problem error message

I have had this issue previously, it went away and now it's back; and can I remember how I fixed it... no.
I have a Bold 9700 running 5.0.0.680 and Twitter for Blackberry 1.0.1.7
Since updating to 5.0.0.680 I have been unable to login to Twitter via RIM's Twitter application. I receive the error message "Internal Twitter server problem."
I have tried the following to resolve;
Multiple battery pulls - no change
Flash back to 5.0.0.586 - no change
Flash back to 5.0.0.442 - no change
After flashing I have performed a full security wipe of the device to be sure its clean.
I am able to use UberTwitter and other social networking applications without any issues.
My BlackBerry is controlled via my companies BES. The Server version is 5.0.1 and I can confirm that the Value-added application policy is installed and has 'Disable organizer data access for social networking applications' set to No and 'Disable RIM Value-Added Applications' set to No for the policy applied to my device.
I am also one of the Administrators of this server.
What I would like to know is how to solve this issue. A search of the internet revels a number of similar issues, but these where apparently down to an issue with Twitter not the software. As I am able to access Twitter with no issues via other clients and see no issues reported on the status feed from Twitter I have run out of ideas.
I have also fired up a number of the BB simulators on a development machine and have been able to access Twitter via a simulated BlackBerry without an issues; making me think this is either a BES, device, or carrier issue.
Any help would be appreciated.
Thanks
Mark

Hey Mark,
Welcome to the BlackBerry Support Community Forums.
Are you still having trouble connecting to Twitter for BlackBerry?
Since you're on a BES just to do process of elimination, I would suggest performing a reset to factory so that will remove the IT policy. Follow the instructions in this KB article: www.blackberry.com/btsc/KB18998
Then test out logging into Twitter, if successful then we know it is it policy related. If you still receive the same error, let me know.
-ViciousFerret
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Like! for those who have helped you.
Click Accept as Solution for posts that have solved your issue(s)!

Issue while accessing a SQL Server table over OTG

Hi,
I have been learning oracle for about 1.5 years and am just starting to learn some OTG pieces. I am wondering about an issue. The issue is:
"We need help with an issue we are having while accessing a SQL Server table over OTG. We are getting the following error message in Oracle :
ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[Oracle][ODBC SQL Server Driver]Unicode conversion failed {HY000}
The column it is failing on is "-----------" in the view --------------- in the SQL Server database pointed to by the Oracle DB Link ------------------- thats created in the Oracle instances ---- and -----.
This was working before, but is now failing, we suspect its due to new multi-byte data being added to the base table in the above column."
I took out the details and added ---- instead. I am wondering your guys thoughts on fixing this issue and helping me learn along the way. Thanks

Hi Mike,
Thanks for the response, here are the details:
1. What is the character set of the Oracle RDBMS being used. What is returned by -
select * from nls_database_parameters;
NLS_CHARACTERSET
AL32UTF8
NLS_NCHAR_CHARACTERSET
UTF8
We get SQL_Latin1_General_CP1_C1_AS and 1252 as Collation Property and Code Page
The datatype of the column in question in SQL Server is nvarchar(100).
When I do a describe on the SQL Server view ( desc CK_DATA_FOR_OPL@------- ), I get the error below;
ERROR: object CK_DATA_FOR_OPL does not exist
Select * from CK_DATA_FOR_OPL@------ where rownum =1 does get me a row.
create table tmp_tab as
Select * from CK_DATA_FOR_OPL@----- where rownum =1;
desc tmp_tab shows the datatype of the said column in the table created in Oracle as NVARCHAR2(150).
Not sure why a column defined with size 100 in SQL Server should come across as 150 when seen over OTG. We see something similar in DB2 tables we access over OTG as well.
Edited by: 993950 on Mar 15, 2013 8:49 AM

Configure ODBC to access a CSV file on Linux for access from BI Server

How to configure an ODBC connection to a CSV file on Linux for access from the BI Server Repository physical layer
I am migrating a working windows OBIEE installation to Linux and can not seem to connect to csv files on Linux (from th BI server also running on the same Linux machine).
I am using SUse Linux Enterprise server / 10 (Slash 10) standard odbc drivers
My odbc ini file entries are:
[ODBC]
Trace=0
TraceFile=odbctrace.out
TraceDll=/app/oracle/product/10.1.3/OracleBI/odbc/lib/odbctrac.so
InstallDir=/app/oracle/product/10.1.3/OracleBI/odbc
UseCursorLib=0
IANAAppCodePage=4
[ODBC Data Sources]
AnalyticsWeb=Oracle BI Server
Cluster=Oracle BI Server
SSL_Sample=Oracle BI Server
idcbicsvfiles=Odbc Text driver
[idcbicsvfiles]
Description = Odbc Text driver
Driver = Odbc Text driver
Directory = /data/oracle/OracleBIData/idc
#ReadOnly = No
#CaseSensitive = No
#Catalog = No
ColumnSeperator = ,
#Trace = 1
#Tracefile =/data/oracle/OracleBIData/odbctrace.txt
#Username = oracle
#Password = ''
[AnalyticsWeb]
Driver=/app/oracle/product/10.1.3/OracleBI/server/Bin/libnqsodbc.so
Description=Oracle BI Server
ServerMachine=local
Repository=
Catalog=
UID=
PWD=
Port=9703
The csv files I want to use are in the directory /data/oracle/OracleBIData/idc to which I have set up a working and checked connection ([idcbicsvfiles]) on the linux machine itself.
The error message I get when I select view data in the physcial layer is:
[NQODBC][SQL_STATE: HY000][nQSError: 10058] A general error has occurred.
[nQSError: 43093] An error occurred while processing the EXECUTE PHYSICAL statement.
[nQSError: 16023] The ODBC function has returned ans error. The database may not be available, or the network may be down.
Please can anybody give me a clue on how to get this working e.g. a working odbc.ini file from your own installation (and/or a tip for the odbc driver choice/configuration)
P.S. I know this is not supported by Oracle but can not imagine, that nobody is using this.

Hi,
Chekc this...Re: Is there ODBC driver for excel flat file in Unix Box
Re: OBIEE to use a CSV file as a data source on Linux
Regards,
Srikanth
Edited by: Srikanth Mandadi on Oct 8, 2010 2:50 AM

How can I make one computer server at Home for access of SQL Server 2012/2008

Hi All,
Sorry for this basic question but I am zero in networking. I will be very grateful if someone guides what should I do to make one of my home PC as server. Scenario is as follows:
I want to give training to few students about SQL SERVER T-SQL.
I have one Laptop using SQL Server 2012 having Windows 7 Pro(Laptop Master-want to make this server). I have other laptop running Windows 7 pro and got SQL SERVER 2008. My students have mix of laptops including Windows XP, Windows Vista, Windows 7 and Windows
8. All students have SQL SERVER 2008 installed and working.
Q1: I actually want to make Laptop Master(explained in above paragraph) as server and want other laptops to access that master server in home network. I will install sample exercise database on server and students will be writing queries to access
data.
Q2: can I secure sample database from students who can copy sample database from server?
Q3: can students run queries remotely sitting their home?
Thanks in advance.
Kind Regards
A K
Adnan

Hi itsadnan,
According to your description, if you want to make your Laptop as Server, and your student can log in your SQL Server 2012 instance, you need to ensure that your computer and student’s computers are the same domain, and you enable TCP/IP, name pipes protocol
in SQL Server Configuration Manager, your SQL Server 2012 instance is allowed to connect remotely and your student install SQL Server Manager Studio 2012 as client tool in their computer, and you create the related login name for your students. For more information,
see:
http://blogs.msdn.com/b/walzenbach/archive/2010/04/14/how-to-enable-remote-connections-in-sql-server-2008.aspx
According to your requirement, in actual, since your students install SQL Server 2008 on their computer, you totally can ask your student to install the sample exercise database in their SQL Server. For example, there are many resource about sample database
in Website, which is helpful for student to learn database technology, such as
AdventureWorks databases for SQL Server 2008. From SQL Server Management Studio, they can attach an AdventureWorks database, then write queries to access data.
Since you have SQL Server 2008 in your other laptop, you can create the sample exercise database, and student can install this database via backup and restore, then write queries to access data and send to you for checking if it is right.
Note: Due to backwards compatibility, The students could not restore SQL Server 2012 database in their SQL Server 2008 instance.
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support

User used in SAP for accessing to unix server

Hi ..
I'm new on this topic ...
I'd like to know where is configured the user into SAP for accessing to UNIX.. i mean, in my understanding when a job is created into SAP for running a script located into server unix, Sap has to login to unix and it has through and user id, where is configured that ...
the case in question here is the following ..
we are testing the sent of infomation ...
1.- user creates the information from sap and it is delivered into a folder
2.- the owner of those files is a strange user into the server where they were delivered.
3.- this means that that user does not exist into the unix server where were delivered the information ...
i'd like to know, where is cofigured the user into SAP for accessing to unix to deliver the information ...
could you please let me know that ?
thanks.

Hi Daniela,
User is <SID>adm user, it's SAP Default user for communicating to Unix or any OS. When you install the system, <SID>adm is the adminstrator user.
For the 2nd item it is strange user, it could that the folder it is creating files might not the local file system, it is from diffferent server NFS mounted to this server. If the other system doesn't know about the <SID>adm it keeps a stange user as owner this files.
Even though that strange user doesn't exist, as long as your <SID>adm user has write access to this folder,it will create the file. But owner can be different.
Hope this answers. If yes, please assign points.
-Kalyan.

Help. How to configure ASA5515 as 'one armed router' for access to DHCP server on a different VLAN

Hi,
My setup
     router > ASA5515(ver8.6) > 4 SGE2010p switches
I want to put the guest WiFi users on a separate network. I have layer 2 switches and want to configure the ASA5515 as a 'router on a stick' setup for the guest vlan to have access to the DHCP server on the native vlan.
I have
1. created a sub-interface for the inside interface and enabled intra-interface traffic.
2. A static route on the ASA point the guest network to the switch.
What else do I need to configure on the ASA for inter-vlan routing?
ASA related config:
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 10.15.xx.1 255.255.252.0 standby 10.15.xx.2
interface GigabitEthernet0/1.2
vlan 100
no nameif
no security-level
ip address 10.100.xx.1 255.255.255.0
C    10.15.xx.0 255.255.252.0 is directly connected, inside
S    10.100.xx.0 255.255.255.0 [1/0] via 10.100.xx.2, inside

Thanks for the quick response Reza.
Actually that command is already there. Didn't include it in my post.
So I am guessing my ASA config is correct.
I am having trouble setting up the trunk ports on the layer2 SGE2010P switch for trunk port.
I am used to command line layer3 switches (CLI is wasy) but not familiar with these switches GUI. I am going through the config guide right now.
Could you help me with that too?
Not to bother you with a completely different issue though.
Thanks again!

Why do I need to install RSAT on Windows 8.1 for accessing Hyper-V Server 2012 R2?

Since Windows 8.1 has Hyper-V Platform and Hyper-V Manager built in to it, if I just enable the Hyper-V Manager on my Windows 8.1 client machine I should be able to access the standalone Hyper-V Server 2012 R2 (which I'm planning to install on my 2nd machine)
right?
Then why every article I found on this suggests to install RSAT on my client machine?

Hi Nero,
RSAT is used for these server/client can not enable hyper-v role to manage the corresponding hyper-v server .
Please refer to following supported OS list of
client hyper-v :
Windows 8 Pro 64-bit Edition
Windows 8 Enterprise 64-bit Edition
Windows 8.1 Pro 64-bit Edition
Windows 8.1 Enterprise 64-bit Edition
Best Regards
Elton JI
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Have issue for access internal RDP server

Similar Messages

Maybe you are looking for