Help with some NAT and ACL

Hi all,
We have been provided with a range of public IP addresses by our ISP. I want to configure some static NAT in and dynamic NAT out for our SIP based PBX. I also want to put an ACL on the outside interface so only my ITSP can talk to the public IP assigned to the PBX. I want all other hosts on my network to be able to NAT out using the WAN address assigned to the router.
Obviously the addresses are fictional!
4.4.4.3 – Default gateway to the internet
4.4.4.4 – Public IP of my router
4.4.4.5 – Public IP for the PBX
10.1.1.0/24 – PBX subnet
192.168.1.0/24 – LAN subnet
1.1.1.1 & 1.1.1.2 ITSP addresses
10.1.1.2 - PBX LAN Address
Can someone take a look at my config, would this work!?
Thanks
Matty
interface GigabitEthernet0/0
description *** Internet ***
ip address 4.4.4.4 255.255.255.192
ip access-group 111 in
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
ip nat pool PBX_POOL 4.4.4.5 4.4.4.5 netmask 255.255.255.192
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip nat inside source list PBX_SUBNET pool PBX_POOL overload
ip nat inside source static tcp 10.1.1.2 5060 4.4.4.5 5060 extendable
ip nat inside source static udp 10.1.1.2 5060 4.4.4.5 5060 extendable
ip route 0.0.0.0 0.0.0.0 4.4.4.3
ip access-list extended PBX_SUBNET
permit ip 10.1.1.0 0.0.0.255 any
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
access-list 111 permit ip host 1.1.1.1 host 4.4.4.5
access-list 111 permit ip host 1.1.1.2 host 4.4.4.5
access-list 111 deny ip any host 4.4.4.5
access-list 111 permit ip any any

Matty
Not familiar with SIP so can't say for sure about that in terms of ports but some comments -
1) you don't show other interfaces but presumably the LAN interface(s) has "ip nat inside" enabled
2) the PBX subnet is 10.1.1.0/24 yet your static NATs are referring to 10.18.21.2 ?
3) following on from 2) your PBX_SUBNET acl is wrong, it should be -
ip access-list extended PBX_SUBNET
permit ip 10.1.1.0 0.0.0.255 any <-- note the last octet of the wildcard mask is 255.
Edit - also assuming that any internal subnets not directy connected to the router have routes setup for them so you router knows how to get to them.
Jon

Similar Messages

Help with dynamic NAT and CSM 4.4 and ASA 8.3

Hello
I currently try to add a dynamic NAT rule into CSM 4.4 for a ASA 8.3 device, but I fails at the deployment with the error message:
Failed to generate delta config
The following commands have not been recognized by the Configuration Parser:
==========================
(inside,outside) source dynamic range-192.168.0.0_24 range-100.0.0.1_32 destination static any any
So let's asume we use the internal IP Range for the users is 192.168.0.0/24 and we received the public IP Address 100.0.0.1/32 from our ISP.
How do I have to do a normal dynamic NAT in CSM 4.4 for this case?
Traffic comes from inside and has to leave the outside with the changed source IP.
I would really appreciate a screenshot from CSM 4.4 which shows the correctly filled fields.
Thanks
Patrick

Matty
Not familiar with SIP so can't say for sure about that in terms of ports but some comments -
1) you don't show other interfaces but presumably the LAN interface(s) has "ip nat inside" enabled
2) the PBX subnet is 10.1.1.0/24 yet your static NATs are referring to 10.18.21.2 ?
3) following on from 2) your PBX_SUBNET acl is wrong, it should be -
ip access-list extended PBX_SUBNET
permit ip 10.1.1.0 0.0.0.255 any <-- note the last octet of the wildcard mask is 255.
Edit - also assuming that any internal subnets not directy connected to the router have routes setup for them so you router knows how to get to them.
Jon

Help with some flash and flare

I am trying to do some cool effects to logo and have beat my brain senseless and can not figure out how to do it. I have attached a link to a video trailer that contains some of the effects I am trying to achieve can somebody maybe steer me in the right direction of how to achieve these effects.
http://dezertpeople.com/clips/dp5/DP5trailer_V1lg.wmv
Thank You,
Bob.
Mac OS X (10.4)
Mac OS X (10.4)

Many of these effects can be accomplished with Motion and 3-D animation software. I use Lightwave and PiXELS 3D. The logo effects could be replicated using a combination of animated light sources, volumetric lighting, and particle effects.
If you are not familiar with 3D animation software t, they have a very steep learning curv, take a substantial amount of time to render unless you have a render farm, but can yield impressive results. Compositing software like Shake is often used to incorporate animations with motion video.
Hope this helps,
Dave F

Help with some effects and transitions?

Hello, i'm trying to do add some transitions to my video. I want to do a intro like this: http://www.youtube.com/watch?v=aBPV0f6c56s
I have already written the swords, the texts and the central anime minecraft guy with Anime Studio, but i need to do this 3 things:
1. Am expanding cirle opening
2. A light/flash as transition between the first animation and the next logo
(I have another question, but more difficult: I want to do a sun rays effect from an angle)
All of these effects-transitions are in the youtube video that i linked.
Can someone help me with one of these questions?
I have Adobe After Effects and Premiere Pro.
Thank you for the attention.

1. Dont know excactly what you want.
2. Filmflash transition is not default in Premiere. BCC has it for AE.
If you do not have bcc then look here.
http://www.youtube.com/watch?v=mIOAqO6Trvw
3. Sunrays: look for Redgiants Shine plugin.

A little help with some code and theory

Hey guys, I'm kinda new to this whole programming thing so
bare with me please. I have a little problem that I just can't seem
to get my hear around. I have a working on an inventory management
page. It keeps track of what software is installed where and how
many copies we have, and serials and such. Well, this page was set
up long before I started here and it wasn't too friendly. So I'm
editing it and adding some new features. Well one of them is
displaying the “available installs count” with the
search results.
Here is my problem. The way the system keeps track of what
software is installed where is by adding taking the appId from the
table it with all the app's information on it (the sn, name, max
installs, etc) and creating a new entry in another table that
indexs that appId and the workstation it is installed on. (along
with an Install id) well the only way to check to see how many
copies is installed is to get the record count for a particular
appId.
This is where I run into trouble. When a user searches for
apps the results page displays the apps that still have installs
available. So where the record count of getInstallCount for
whatever appId is less than the max installs. Well what is the best
way to do this since to get the record count of getInstallCount I
need an appID and the appID isn't found until I do the search
query. What I'm using now is this but it always returns 0 for
current Install Count. See the attached Snippet of code:
I see what it is doing. It is getting the isntallCount for
all appIds, but I dont' know how to narrow it down without doing
the search first, and I don't know how to do the search with out
getting the install count first. Any ideas or advice would rock
guys. Like I said I'm kinda new to this programming stuff but it is
awesome! Thanks!
Kevin

The w and wi are just table aliases that make it easier to
referrence those tables by column when joining multiple tables
(avoids having to prefix column names with the entire table name,
etc.) When doing a self-join (joining a table to itself), the use
of table aliases is
required, otherwise you would have no other way to tell
which column belonged to which "instance" of table.
The query itself is pretty simple. It is just using a
correlated subquery to select only those instances of
workstationApps where the count of appID instances in
workstationAppIndex is less than the amount specified in the
maxConcurrentInstalls for the same appID.
Also, I do see what you are doing with #form.searchType#, I
was just making sure that it was what you really intended to do.
Phil

Want a complete migration guide to upgrade 11.1.0.7 to 11.2.0.3 database using DBUA..We are implementing R12.1.3 version and then have to migrate the default 11gR1 database to 11.2.0.3 version. Please help with some step by step docs

Want a complete migration guide to upgrade 11.1.0.7 to 11.2.0.3 database using DBUA..We are implementing R12.1.3 version and then have to migrate the default 11gR1 database to 11.2.0.3 version. Please help with some step by step docs

Upgrade to 11.2.0.3 -- Interoperability Notes Oracle EBS R12 with Oracle Database 11gR2 (11.2.0.3) (Doc ID 1585578.1)
Upgrade to 11.2.0.4 (latest 11gR2 patchset certified with R12) -- Interoperability Notes EBS 12.0 and 12.1 with Database 11gR2 (Doc ID 1058763.1)
Thanks,
Hussein

Help with multiple nat translation on a Cisco Nexus 3548

Hi All,
I need a little help with a NAT configuration on a cisco Nexus 3548 version 6.0(2)A4(3).
What currently have is as follows:
internal network: 192.168.4.0/24
nexus router (routerA):
LAN Side: vlan104 interface 192.168.4.201/24
WAN Side: Eth1/48 interface 172.24.101.2/24
remote network: 159.43.48.32/27
remote gateway: 172.24.101.1/24
use ACL's to ensure that only specific traffic is allowed out and in.
allow a specific connection from a different internal network (192.168.3.0/24) to talk to port 159.43.48.34:1025
Clients on the internal network 192.168.4.0, need to be able to connect to services (port 14002, port 8101) running on 159.43.48.34, but they must be SNAT'ed through the WAN interface as coming from 159.43.65.81
Currently we have this working but the internal lan clients need to know how to get to 159.43.48.34/27 and therefore we need to route this network in our internal network.
What we really want is to do is provide an address such as 192.168.4.203 for internal clients to use for connectivity to the various services, and then this address would be SNAT'ed to 159.43.65.81 over the WAN. We still want to secure the traffic in both directions.
In the past i've been able to do this with inside and outside nat's and i haven't had to configure an interface on the router for the internal address, it has just been "stood up" by the nat rules. For example (this is how i've done it before):
LAN interface
ip nat outside
WAN interface
ip nat inside
ip nat inside source static159.43.65.81 192.168.4.203
ip nat outside source static 159.43.65.81 192.168.4.203
but, trying to implement this sort of config on the Nexus isn't working.
I am wondering if the Nexus behaves differently than ios based routers.
I'd appreciate any help to get this config working.
Thanks in advance,
Les

Les
The issue with an "ip nat outside ..." static is that from the inside routing is done before NAT.
So what happens is that the destination IP is 192.168.4.203 and the Nexus will do a route lookup, see it is directly connected so it won't forward the packet to the outside interface so it doesn't get translated.
If you enter "ip nat outside source static 159.43.48.34 192.168.4.203" then on IOS it adds a host specific route to the routing table for 192.168.4.203 as directly connected.
So you do a ping from a 192.168.3.x client it looks like it is working but actually the L3 device is simply responding and the packet never gets to the server.
Apologies for the long winded explanation but NXOS might behave differently and I wanted you to know what to look for.
So with IOS there is the "add-route" option at the end of the NAT statement and if you use this it would add a host specific route into the routing table like this -
192.168.4.203 255.255.255.255 159.43.48.34
this is a recursive route ie. the device must know how to get to 159.43.48.34 but your Nexus should.
What the above does is make sure any packets arriving at the Nexus for 192.168.4.203 get routed to the outside interface and so are translated.
So firstly see if that option is available with your NAT statement ie.
"ip nat outside source static 159.43.48.34 192.168.4.203 add-route"
if it isn't then try adding just the static statement without it and then have a look at the routing table. If it hasn't put in a host specific route showing as directly connected which it may not, as it may behave differently, then you can manually add a route ie.
192.168.4.203 255.255.255.255 <next hop IP>
note that the next hop IP doesn't have to be the server here it could just be the next hop from the Nexus switch. All you are trying to do is get the packet routed to the outside interface.
Hope that makes sense.
Edit - one thing I haven't tried is to use a different IP subnet for NAT ie. one that is still part of your internal range but unused and then having a route on the Nexus, in your case, pointing to the outside interface and you redistribute this subnet into your IGP. Then you add the NAT statement.
What may happen is it still adds a host specific route showing as directly connected but it may not because the Nexus wouldn't actually have a directly connected interface for that subnet.
I suspect it would though.
If it did work then it would still mean you didn't need to advertise the public IP internally.
If I get the chance I'll test it later today.
Jon

Ichat video works with some people and not others

Can someone help me? I can video Ichat with some people and not others. HOwever, if the people I can video ichat with put me in a three way chat with someone I can't Icaht video with, it works. Here is the first half of the error I get when I try to call someone with whom it doesn't work:
Date/Time: 2008-05-08 20:59:35.554 -0400
OS Version: 10.5.2 (Build 9C7010)
Report Version: 4
iChat Connection Log:
2008-05-08 20:59:21 -0400: AVChat started with ID 2203145046.
2008-05-08 20:59:21 -0400: scddean8: State change from AVChatNoState to AVChatStateWaiting.
2008-05-08 20:59:21 -0400: 0x1946a450: State change from AVChatNoState to AVChatStateInvited.
2008-05-08 20:59:24 -0400: 0x1946a450: State change from AVChatStateInvited to AVChatStateConnecting.
2008-05-08 20:59:24 -0400: scddean8: State change from AVChatStateWaiting to AVChatStateConnecting.
2008-05-08 20:59:32 -0400: 0x1946a450: State change from AVChatStateConnecting to AVChatStateEnded.
2008-05-08 20:59:32 -0400: 0x1946a450: Error -7 (0x1946a450 cancelled the connection.)
2008-05-08 20:59:32 -0400: scddean8: State change from AVChatStateConnecting to AVChatStateEnded.
2008-05-08 20:59:32 -0400: scddean8: Error -7 (0x1946a450 cancelled the connection.)
Video Conference Error Report:
950.806728 @SIP/SIP.c:2719 type=4 (900A002D/0)
[SIPConnectIPPort failed]
Video Conference Support Report:
0.000000 @SIP/Transport.c:2362 type=1 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK253ca464241b86c5
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 1 INVITE
Contact: <sip:[email protected]:16402>
User-Agent: Viceroy 1.3
Content-Type: application/sdp
Content-Length: 443
v=0
o=SDEAN 0 0 IN IP4 68.109.25.62
s=skiier526121
c=IN IP4 68.109.25.62
b=AS:2147483647
t=0 0
a=hwi:17412:2:2400
a=bandwidthDetection:YES
a=iChatEncryption:NO
m=audio 16402 RTP/AVP 110
a=rtcp:16402
a=rtpmap:110 X-AAC_LD/22050
a=rtpID:163897054
m=video 16402 RTP/AVP 126
a=rtcp:16402
a=rtpmap:126 X-H264/90000
a=RTCP:AUDIO 16402 VIDEO 16402
a=fmtp:126 imagesize 0 rules 20:160:120:320:240
a=framerate:20
a=rtpID:4247390608
0.130320 @SIP/Transport.c:347 type=2 (00000000/0)
[ACK sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK758f935e51030677
Max-Forwards: 70
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 1 ACK
User-Agent: Viceroy 1.3
Content-Length: 0
0.131540 @SIP/Transport.c:2362 type=1 (00000000/0)
[SUBSCRIBE sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 68.109.25.62:16402;branch=z9hG4bK3c1d470911bfc4fc
Max-Forwards: 70
To: u0 <sip:user@lip:16402>;tag=242696585
From: 0 <sip:user@lip:16402>;tag=1748993363
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 1 SUBSCRIBE
Contact: <sip:[email protected]:16402>
Event: conference
Expires: 3600
User-Agent: Viceroy 1.3
Content-Length: 0
0.258925 @SIP/Transport.c:347 type=2 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 68.109.25.62:16402;branch=z9hG4bK3c1d470911bfc4fc
To: u0 <sip:user@lip:16402>;tag=242696585
From: 0 <sip:user@lip:16402>;tag=1748993363
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 1 SUBSCRIBE
Contact: <sip:[email protected]:16402>;isfocus
Expires: 3600
User-Agent: Viceroy 1.3
Content-Length: 0
0.266139 @SIP/Transport.c:347 type=2 (00000000/0)
[NOTIFY sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK07f3cf2d27e5dc4f
Max-Forwards: 70
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 2 NOTIFY
Contact: <sip:[email protected]:16402>;isfocus
Event: conference
Subscription-State: active;expires=3600
User-Agent: Viceroy 1.3
Content-Type: application/conference-info+xml
Content-Length: 0
[<c-i v="0" st="f" en="sip:user@lip:16402">
c<h>i</h><m t="a"/><m t="v"/>
c<h>o</h><m t="a"/><m t="v"/>
c<h>o</h><m t="a"/><m t="v"/>
</c-i>
0.267647 @SIP/Transport.c:2362 type=1 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK07f3cf2d27e5dc4f
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 2 NOTIFY
User-Agent: Viceroy 1.3
Content-Length: 0
0.489410 @:0 type=1 (00000000/0)
[Bandwidth Detection]
[Received the first BWD packet from 24.9.170.64:16402]
0.809558 @:0 type=1 (00000000/0)
[Bandwidth Detection]
[Avg=98115.00, NSDev=6.54%]
1.049428 @:0 type=1 (00000000/1)
[Bandwidth Detection]
[Avg=1063830.90, NSDev=55.48%]
1.396681 @:0 type=1 (00000000/2)
[Bandwidth Detection]
[Avg=1218589.60, NSDev=19.06%]
1.555003 @SIP/Transport.c:347 type=2 (00000000/0)
[MESSAGE sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK7a3f72b46979010e
Max-Forwards: 70
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 3 MESSAGE
User-Agent: Viceroy 1.3
Content-Type: text/plain
Content-Length: 8
[SECUPD:0]
1.555264 @SIP/Transport.c:2362 type=1 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK7a3f72b46979010e
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 3 MESSAGE
User-Agent: Viceroy 1.3
Content-Length: 0
22.411383 @SIP/Transport.c:2362 type=1 (00000000/0)
[MESSAGE sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 68.109.25.62:16402;branch=z9hG4bK225017670f058825
Max-Forwards: 70
To: u0 <sip:user@lip:16402>;tag=242696585
From: 0 <sip:user@lip:16402>;tag=1748993363
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 2 MESSAGE
User-Agent: Viceroy 1.3
Content-Type: text/plain
Content-Length: 4
PING]
22.552977 @SIP/Transport.c:347 type=2 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 68.109.25.62:16402;branch=z9hG4bK225017670f058825
To: u0 <sip:user@lip:16402>;tag=242696585
From: 0 <sip:user@lip:16402>;tag=1748993363
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 2 MESSAGE
User-Agent: Viceroy 1.3
Content-Length: 0
23.667085 @SIP/Transport.c:347 type=2 (00000000/0)
[MESSAGE sip:user@lip:16402 SIP/2.0
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK0d3ce7637235b638
Max-Forwards: 70
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 4 MESSAGE
User-Agent: Viceroy 1.3
Content-Type: text/plain
Content-Length: 4
[PING]
23.667857 @SIP/Transport.c:2362 type=1 (00000000/0)
[SIP/2.0 200 OK
Via: SIP/2.0/UDP 24.9.170.64:16402;branch=z9hG4bK0d3ce7637235b638
To: 0 <sip:user@lip:16402>;tag=1748993363
From: u0 <sip:user@lip:16402>;tag=242696585
Call-ID: f7d46dbe-1d60-11dd-9664-c634114a4012@lip
CSeq: 4 MESSAGE
User-Agent: Viceroy 1.3
Content-Length: 0

I found the following comment the other day that goes some way to explaining why iChat might have problems with some NAT routers:
http://www.technologyevangelist.com/2007/02/ichatav_the_bestun.html#comment-53326
While it doesn't offer any solutions it might be worth firing off some iChat feedback to Apple referencing it. It seems like it might be a trivial bug for Apple to fix and could well alleviate many of the problems people are having.
In the mean time if your router is one that has SIP ALG you could try disabling it and forwarding all relevant ports to your machine.

Help with some beginner code

Hello, I am new to java and I need a bit of help with some code that I'm writing. here is the code:
import javax.swing.*;
public class Test{
     public static void main(String[] args){
     JOptionPane.showMessageDialog(null,"We will now build a block with *'s","Block",1);
     String input=JOptionPane.showInputDialog(null,"Type a number: ","Number",3);
     int number=Integer.parseInt(input);
     int count=0; int count2=0;
     for(count2=0; count2<number; count2++){
          for(count=0; count<number; count++){
          System.out.print("* ");
System.exit(0);
}Now, all I need is to build a block of *'s with the number that the user inputs. With the code that I wrote I get the correct number of *'s but not in the form of a block. They just print out in a straight line. I know this is a very simple task but could someone please help me out? What do I need to modify in my code so that the *'s print out arranged as a block like so:
**********

Your code only uses the print method which prints without a carriage return/line feed. So you need to add a line of code to print a carriage return/line feed. Where? well that is your task to work out.

Need help with Blog, Wiki and Gallery

Hi Team,
Need help with Blog, Wiki and Gallery startup. I have newly started visiting forums and quite interested to contribute towards these areas also.
Please help.
Thanks,
Santosh Singh
Santosh Singh

Hello Santhosh,
Blog is for Microsoft employees only. However, you can contribute towards WIKI and GALLERY using the below links.
http://social.technet.microsoft.com/wiki/
http://gallery.technet.microsoft.com/

What's the phone number I should call for help with my iPhone and ihome dock?

What's the phone number I should call for help with my iPhone and ihome dock?

http://www.ihomeaudio.com/support/

Help with photoshop quitting and AMD graphics

help with photoshop quitting and AMD graphics
im not a techy, but it appears i have to do someting with my amd graphics card - this might be why my software is crashing - ive no idea what to do though

Hi Chris
I have tried to go on the website, then i tried to download the automatic detect because i wasnt sure which driver i had or needed - but it has just downloaded a load of game software - which i dont want ( i dont think)
i have find out my laptop has a amd radeon HD 8750M card, but i dont know what im doing! i would hate to mess my computer up as i am in thailand with no one to help me!
its frustrating as i am paying for CC but cant use it!

Help with some ACLs for VACL

I need some help with acls for a vacl. Goal - have the 1.1.1.0/24 subnet only communicate with certain IP.
So, they cannot get out to anywhere else and no one except that IP can get in.
Here is what I have so far:
access-list acl1 permit tcp 1.1.1.0 255.255.255.0 host 1.2.3.4
access-list acl1 permit tcp host 1.2.3.4 1.1.1.0 255.255.255.0
access-list acl1 ip 1.1.1.0 255.255.255.0 any log
access-list acl1 ip deny any any log
vlan access-map vacl1 1
match ip address set acl1
action forward
exit
vlan filter vacl1 vlan-list 11
Will this work as I expect it to?
Thanks for any help

Hi,
I implemented this on my 6509 and it didn't work. I even modified it to look like the following and it didn't work (I could RDP to one of the boxes on that the subnet).
ip access-list extended rapt_acl
deny ip any any
deny tcp any any
deny udp any any
vlan access-map rapt_vacl 10
match ip address set rapt_acl
action forward
vlan filter rapt_vacl vlan-list 90
Any thoughts what I may be missing?

Hello I have a few questions and I need some help with my iTunes and iPod

Hello iTunes people.
I have a little problem with my iTunes. I actually almost know nothing about iTunes really. But I have had a 80 gig ipod .. ummm I think it's a iPod classic maybe. A long time ago I just downloaded iTunes. I think one of my tech friends already had put the program onto my PC so I did not even have to download it. Anyways I put my life's collection of mp3's onto iTunes and then syncs it with my iPod and it worked great. Here is my problem. I just recently bought a MONSTER PC. I have lovingly named it " ED209 " I downloaded iTunes for it and I have the most up to date version.8.1.1 is the most current version correct? Ok well here is my problem. What I want to do is I want to put everything that is currently on my iPod ONTO the iTunes library. I DO NOT want to import anything from the library or playlist or whatever you call it ONTO the iPod because there is nothing in the library. Now this is were its gets weird and possibly silly. A person I was chatting with on Facebook sort of made fun of me because she was like " Dude! Just push " Sync " But the reason I am paranoid is because THIS is the message I get....
" The iPod " Aaron's iPod " is synced with another iTunes library. Do you want to erase this ipod and sync with this iTunes library? "
HOLY COW!! That girl on Facebook was making fun of me but READ THAT. That exactly says ERASE the "iPod" and Sync with THIS library " It does not say put what is ON the iPod into THIS Library. It says it the other way around. Clear as day it says it will ERASE the " Ipod " it does not say " Fill the library with whats on your iPod "
Do I all of a sudden not understand English or something???? I know how to freaking read and from what it says is sounds a 100 percent like " we will ERASE youe iPod and put everything from this playist or library onto your iPiod" But there is NOTHING in my library? Am I mentally challenged or what?
I hope someone can help me here and I have another request. Could someone just tell me all the cool things I can do with iTunes and my iPod? I am trying to read the help files and the FAQ and whatever else Apple provides you with but it has SO MUCH crap that looks usless. I find myself reading a whole paragraph about some simple little section of s section of a section of a feature! Know what I mean. Someone give me the long and short of the neat things I can do with this stuff. I have windows Vista with a wicked computer that has like 6 gigs of ram and m iPod is a 80 GB Classic
help !!
PROTEUS

*What I want to do is I want to put everything that is currently on my iPod ONTO the iTunes library.*
1). Connect your iPod to your computer. When you get the message that it is linked to a different library and asking if you want to link to this one and replace all your songs etc, press "Cancel". Pressing "Erase and Sync" will irretrievably remove all the songs from your iPod.
2). When your iPod appears in the iTunes source list change the update setting to manual, that will let you continue to use your iPod without the risk of accidentally erasing it. Check the "manually manage music and videos" box in Summary then press the Apply button. Also when using most of the utilities listed below your iPod needs to be enabled for disc use, changing to manual update will do this by default: Managing content manually on iPod and iPhone
3). Once you are connected and your iPod is safely in manual mode there are a few things you can do to restore your iTunes from the iPod. iTunes will only let you copy your purchases directly from an iPod to the computer, you'll find details in this article: Copying iTunes Store purchases from your iPod or iPhone to a computer
For everything else (music from CDs, other downloads and including iTunes purchases) there are a number of third party utilities that you can use to retrieve the music files and playlists from your iPod. You'll find that they have varying degrees of functionality and some will transfer movies, videos, photos, podcasts and games as well. You can read reviews and comparisons of some of them here:
Wired News - Rescue Your Stranded Tunes
Comparison of iPod managers
A selection of iPod to iTunes utilities:
TuneJack Windows Only (iPhone and iPod Touch compatible)
SharePod Windows Only (iPhone and iPod Touch compatible)
iPod2PC Windows Only
iDump Windows Only
YamiPod Mac and Windows
iPod Music Liberator Mac & Windows
Floola Mac & Windows
iPodRip Mac & Windows (iPhone and iPod Touch compatible)
iPod Music Liberator Mac & Windows (iPhone and iPod Touch compatible)
Music Rescue Mac & Windows (iPhone and iPod Touch compatible)
iGadget Mac & Windows (iPhone and iPod Touch compatible)
iRepo Mac & Windows (iPhone and iPod Touch compatible)
iPod Access Mac & Windows (iPhone and iPod Touch compatible)
TouchCopy Mac & Windows (iPhone and iPod Touch compatible)
There's also a manual method of copying songs from your iPod to a Mac or PC. The procedure is a bit involved and won't recover playlists but if you're interested it's available on page 2 at this link: Copying Content from your iPod to your Computer - The Definitive Guide
4). Whichever of these retrieval methods you choose, keep your iPod in manual mode until you have reloaded your iTunes and you are happy with your playlists etc then it will be safe to return it auto-sync.
5). I would also advise that you get yourself an external hard drive and back your stuff up, relying on an iPod as your sole backup is not a good idea and external drives are comparatively inexpensive these days, you can get loads of storage for a reasonable outlay: Back up your iTunes library by copying to an external hard drive

I need some serious help with MPEG Streamclip and iMovie 11

Hello, everyone!
I hope that some kind soul here is able to help me. My sister-in-law asked me if I could help her re-edit a video that they made of a conference she gave because she didn't like the way some parts were edited. I oh-so-kindly (and perhaps stupidly) offered to help her out!
A little background: even though I studied audiovisual communications in college, I leaned (a LOT) towards the audio production part of it and, lately, photography, too. That means that I'm not very good at the whole creating-a-movie-in-iMovie thing, even though I know it's supposed to be easy.
So, here goes: I have a DVD from her which has the typical TS files for audio and video. I downloaded a program called MPEG Streamclip and then it said I needed to buy the QuickTime MPEG-2 Playback Component so that I could rip the DVD my sister-in-law gave me. I bought the component.
I've converted, done small, 1-minute tests, of the DVD with MPEG Streamclip to DV and also to MP4 (just in case). I do it, then import them to iMovie 11. I don't edit anything at all, just a test to see how it looks, so I immediately send the project to iDVD to see how it looks. It DOES NOT look good.
Compared to the DVD she gave me, which looks all smooth (picture-wise), mine has a certain amount (NOT HUGE) of pixelation. I can tell especially because there are some slides that were added to her project, so I can see the pixelated parts around the edges of the letters.
The DVD she gave me does NOT look HD. In fact, it looks SD (4:3), so I don't believe it's that.
If anybody here knows about this, what am I doing wrong? Am I not ripping it correctly using MPEG Streamclip? Am I not making the iMovie 11 project right? Am I burning in the "wrong way"?
If it's the MPEG Streamclip ripping that I'm doing wrong, what are the settings I should be using? What format should I be using so that it is VERY iMovie-friendly?
I want the final video that I would edit to look exactly as the one she gave me. That IS possible, right?
For extra information, if needed, I am running a MacBook Pro, 13", i7 with 4 GB of RAM and am running OS 10.6.6. I've been a Mac user since the OS 9 days.
Thanks in advance for anyone who helps me out.
Serge

Ok. Got it!!!
Z, thanks a lot!! Now things don't look pixelated and my test burn looks exactly like the dvd my sister-in-law gave me... except for ONE THING:
There are these graphics done in I-don't-know-what program with a cube transition. They look like when you do 3D cube transitions in virtual desktop, you know?
Anyway, HER dvd looks completely smooth when you see these transitions but MY dvd looks... well, not right. It looks a bit like the screen or the letters "tremble" or shake a bit. I hope you can understand what I'm saying.
I followed your advice to the letter and everything is perfect with the exception of those transitions (because after the transition passes and you see the slide with the writing, it looks completely smooth).
Do you know of something that I can do to help with this problem?
Thanks again!
Serge

Help with some NAT and ACL

Similar Messages

Maybe you are looking for