Hi all, need advice on OSPF and private vlans

Hi all.
I have a project to complete and need some help on the possible solution I can use.
Basically we have ospf area 0 and the users in question are in ospf area 7 and is a stub.
I need to route the traffic from these users out through area 0 through 3 core devices, onto an external firewall interface to be placed onto the vpn that sits on it. The firewall is not included in the ospf domain.
My thinking was that the firewall has a default route back into the ospf domain so dont need to worry about traffic coming in, however my job is to segregate these users and take them out of our core network and place them onto an external network via this vpn.
Not sure how to achieve this apart from static routing redistributed but surely this does not seperate their traffic only points the route to ospf?!
I was thinking I might have to use private vlans or policy routing but when I try policy routing the policy gets ignored due to normal forwarding.
Any help and advice would be greatly appreciated.
Cheers
Steve

Steve
Thanks, that helps.
GRE is defintely out because apart from the 6500 GRE tunneling is not supported on the Cisco switches.
It's good that area 7 is only for these users and not mixed up with other users.
So if i understand correcty the 4500 interface connecting to the 6500 is in area 0 and the interface connecting to the 3550 is in area.
Or is the 3550 connected to both areas and the 4500 totally in area 0 ?
Can you confirm the above ?
In terms of keeping them separate there are 2 possible choices. You can either -
1) use VRF-LIte, although i'm not sure whether the HP switch would support this. With VRF-Lite you are in effect creating virtual devices on the same physical device. This means each virtual device has it's own routing and forwarding table so it is quite secure because you would only populate the routing table with the routes needed so there would be no way for users to jump to thes rest of your networks.
The downside is that is can become quite complex to configure. If the 4500 is only used to connect are 7 to area 0 then that would not be a problem but the connection from the 6500 to the HP could and i don't even know whether the HP supports VRF-Lite functionality let alone how to configure it on that switch.
But it would, at least from the 4500 to 6500 to HP provide complete separation in terms of routing and forwarding. Once it got to the HP it wouldn't but that might not be an issue.
2) Use PBR (possibly together with acls). This is easier to configure ie. you configure PBR on the 4500 and the 6500 to get the traffic to the HP switch. But you do not get the actual separation you get with VRF-Lite ie. the traffic simply overrides the existing routing tables.
The other thing to bear in mind with PBR is that you also have to configure the return traffic as well so each device would need multiple PBR configs.
Again i don't know whether the HP supports PBR but it may not be an issue depending on what the routing is on the HP.
You could also use a combination of the above ie VRF-Lite between the Cisco switches and then PBR for the last hop to the HP device.
I should say i don't have a huge amount of experience with VRF-Lite but that should not necessarily stop you using it if it is what you need. There are lots of other people on here so i'm sure there will be other people who can help if i can't.
It still depends on how much separation is required. VRF-Lite is definitely seen as a way to separate traffic running across a shared infrastructure, PBR is not really seen in the same way. So it may well be worth going back to find out exactly what "segregating" user traffic means.
I don't want to confuse the issue but it's still not entirely clear what the actual requirement is.
Jon

Similar Messages

Need advice about coalesce and deallocate unused space

Hi experts;
Here looking for an advice about coalesce and deallocate unused space.
I got this tablespace with 87% full, one of the table in that tablespace has 1,150,325 records. I'm going to delete 500,000 records from that table, but to release the space used by those records I understand that I need to execute other procedure. I was reading about coalesce tablespace and deallocate unused space.
I found that apparently, both process can help me to free space. If you want to share with me your comments, about advantages or disadvantages about them, in order I can take the best solution?
Thanks for your comments.
Al

Hi
after deleted rows, the high water mark is still the same and so the size of the table. you need to bring down the water mark
here is what you need to do to bring down the high water mark. We do this monthly for performance purpose.
This is an EBS R12 system but the procedures are the same for EBS database or non EBS database.
After you purge or delete data in a table
1) alter table APPLSYS.WF_ITEM_ATTRIBUTE_VALUES move; <-- this operation will invalidate all indexes attache to the table
2)select owner, index_name, status from dba_indexes -- list all invalid object for user APPLSYS
where table_owner = upper('APPLSYS')
and
status NOT IN ('VALID','N/A');
3)spool idxrebuild.sql --generate script to rebuild indexes.
select 'alter index ' ||owner||'.'||index_name ||' rebuild online;' from dba_indexes
where table_owner = upper('APPLSYS')
and
status <> 'VALID';
4) run idxrebuild.sql -- to rebuild indexes. -- at this point if you check spaces on the table, it is still the same, you need to run #5
5)exec fnd_stats.gather_schema_stats ('APPLSYS'); --fnd_stat is for EBS system you can replace with the database equivalent command.
use this statement to count the block before and after the operation to see the different.
select DISTINCT(SEGMENT_NAME), count(blocks) "Total Block" from dba_extents
where
owner IN ('APPLSYS')
AND segment_name = 'WF_ITEM_ATTRIBUTE_VALUES'
Hope this help.

I need to create public and private keys for security certificate and I can't find the certificate. Where is it?

I purchased a security certificate, and the site tells me that it was successfully installed. I need to export the certificate so that I can create the public and private keys, but I cannot find the certificate to do so.

Thank you.

Need Advice-Adobe Connect and tracking student grades

I know that Adobe Connect can be used as a LMS, I need to know how to track grades for each student. Also each student has to pay for the class, How can I limit or control who logs in to the class. I dont want the link to be passed around for any one to use. I,ll take all the help I can get. Thanks for any help or advice.

The question is, how do I "track each individuals progress through your training, and you will be able to pull reports that show that." When I have the reports published to Adobe Connect, all I see are aggregate results. I can find no way to get individual results.

Need advice about Labview and NI certifications

Hi all I am a student. In the process of learning the LABVIEW. I've been working on it for about 3 to 4 months. From internet, examples, tutorials on NI site and now on forum also. Just thought why don't I should ask you people where to start and any books you think will help. My intentions are toward CLAD and then CLD. Any advice. Thanks in Advance.
If I am posting it on wrong board please tell me where to post.
Message Edited by Naqqash_IIEE on 03-13-2009 01:57 PM
Naqqash

As far as books are concerned my three favorites are:
LabVIEW for Everyone
The LabVIEW Sytle Book
A Software Engineering Approach to LabVIEW
I have taken both the CLAD and the CLD exam. A person who has a good understanding of the LabVIEW fundamentals will be able to pass the CLAD exam. To see if you have a good understanding of the fundamentals you should do as Smercurio suggests and take the example tests. To pass the CLD exam you have to have a good understanding of LabVIEW Style, and be able to implement it while writing a program that would normally take 8 hours in 4 hours. With the CLD if you take the available practice exams and pass them (you will have to grade them yourself, which is a good way to brush up on style) then you are probably ready to take the exam. It does not mean that you will pass it though. It seems to me that the time limit is the killer with the CLD.
CLA, CLED, CTD,CPI, LabVIEW Champion
Platinum Alliance Partner
Senior Engineer
Using LV 2013, 2012
Don't forget Kudos for Good Answers, and Mark a solution if your problem is solved.

Need advice about headphones and splitter for HP EliteBook

Hello,
I would like some advice about what headphones and headphones splitter I should use for an HP EliteBook. I am going on a plane trip with my kids, and I plan to get them both Leapfrog headphones. However, I need a headphone splitter so that they can both watch a movie on the same computer.
Does anyone have any suggestions for a splitter for an HP EliteBook? I tried Amazon but couldnt find anything.
Thanks
This question was solved.
View Solution.

Hi,
The following one is for more than 2:
http://www.officeworks.com.au/shop/officeworks/belkin-rockstar-headphone-splitter-bef8z274
and the following one is from Amazon:
http://www.amazon.com/Belkin-Speaker-and-Headphone-Splitter/dp/B00009WQSR
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Purchasing Rig for CS4 Need advice for GPU and RAM

I am a purchaser that has been assigned the task of buying a new machine to run Premier Pro (CS4 suite was purchased).
I will be buying a HP xw9400 but require a graphics card. What line of cards will Preimer take advantage of?
Does Premier need a great graphics card?
Will 4gb of ram be enough?

I hear you loud and clear! Anyone eager to snap up those old Pinnacle cards rusting away in my basement?
This is not benchmarked but a review of an HP xw6600 by Videomaker Magazine claims "and we could render a clip for YouTube (as H.264) in about double real time." Without the CX but with a pair of Xeon E5450's. Whereas the CX promises real time rendering.
I work with HDV and I think I will possibly look at CS4 with a $400 nVidia Quadro FX and native (CS4) video acceleration. And live with whatever performance I get.
CS3 encoding to MPEG2-DVD with four cores versus 8 cores on my system with my new PPBM3 benchmark is disappointing. The reason is that my testing has shown that for a good disk configuration with my 8-core system running at standard speed the MPEG2-DVD encode time is 75 seconds, disabling 4 cores the processing time only goes to 80 seconds in my I hear you loud and clear! Anyone eager to snap up those old Pinnacle cards rusting away in my basement?
This is not benchmarked but a review of an HP xw6600 by Videomaker Magazine claims "and we could render a clip for YouTube (as H.264) in about double real time." Without the CX but with a pair of Xeon E5450's. Whereas the CX promises real time rendering.
I work with HDV and I think I will possibly look at CS4 with a $400 nVidia Quadro FX and native (CS4) video acceleration. And live with whatever performance I get.
CS3 encoding to MPEG2-DVD with four cores versus 8 cores on my system with my new PPBM3 benchmark is disappointing. The reason is that my testing has shown that for a good disk configuration with my 8-core system running at standard speed the MPEG2-DVD encode time is 75 seconds, disabling 4 cores the processing time only goes to 80 seconds
Premiere Pro PPBM+v3 unpublished data
. Let us all hope that things Improve in CS4!

Need advice for XRaid and Xserve configuration

Hi,
sorry for my perhaps dumb question but I am new to XServe RAID and did not find an answer to my problem by searching the forum.
In my (university) department we will change our complete server infrastructure this year and I could persuade my colleagues to consider to switch to apple hardware.
Now the point is that the server installation should be redundant. Thus I would purchase two XServes and set them up as described in the "High Availability Admin" guide on the support pages of OS X Server. As data storage there would be a XServe RAID but the problem is that as I read in this forum you can attach it to only one server without additional equipment. That would mean that in a failure case it would be necessary that someone disconnects the fibre channel cables and plugs them into the second server acting as fail back -> no good.
Then I read about XSan but noticed that you need one (or better two!) additional servers for metadata. As the solution must not cost too much and there is no real need to access data from more than one server at the same time the XSan solution would be real overkill.
So next is a comment I found that it would be possible to use the fibre net switch to make this switching from the failed server to the backup one. Do all fibre switches support this option? How much do those cost? The only machines that would be connected are one XRaid with two cables and two XServes resulting in 4 needed ports.
Of course all different suggestions are welcome!

Thanks for the answers!
The first tip is interesting (and somewhat pricely more affordable). Unfortunately in a failure case by using the synced RAID there would be some data inconsistencies as the sync process would be made only in certain time intervals, e.g. every hour. When the primary server and its copy of the RAID comes back online there would be the problem to determine which copy of a file is to be kept.
To avoid this problem the time interval of the rsync could be shortened but how much process load does a nearly constant (lets say every minute rsync produce? The network load is not the problem as data could be transferred through the dedicated firewire connection between the two Xserves that is used for IP failover.
The second tip is what I had in mind. As right now I have to fiddle around with several linux servers I am not new to CLI so I will find out how to realize that. If not I will give the consulting team a try.
Are there certain FC switches that can be recommended or a certain brand? Primarily it should be low cost.
iMac G5 (iSight) 20" Mac OS X (10.4.5)

Need advice about passwords and the cloud

I had/have Power Book, won a mini and wanted to share limited things between the two. Stopped by an apple store while on vacation and a nice helper at the apple store set up apple email for me on the mini...BUT I think I have 2 separate passwords now and I don't know how to get the 2 items to share info. I don't have apple mail on the laptop and thats fine I just wanted a NEW email on the mini that I could use to send photos but didn't want teh 10K of emails off my laptop to drop into my mini so I was fine with the new email BUT want my calendars to show up on each device and photos....

You can't have 2 different passwords for the same account, so it may well be that you now have 2 accounts, please confirm this at:
My Apple ID

Need advice resizing pictures and saving selection

Hi
I take pictures of new employes and publish them to our intranet. Every time I take the picture from same distance and with same camera. I import the picture to Photoshop Elements 8.0 and resize it from 2592x4608 pixels to 800x1422 and then i make a rectangular selection that only shows neck and head. Then i cut the image to a new file and try to resize it to 100x145 pixels which is more appropriate for our intranet. Usually this method works but sometimes it can be very time consuming.
Is there a better way to accomplish the same task? Is it possible to make a selection which is exatly 100x145, save it and reuse next time?

Try using the crop tool. First select the tool and choose custom from the drop down menu; then type your dimensions into the boxes in the options bar. Type 72 into the resolution box.
Drag the crop tool over your image and then click in the middle of the rectangle outline and position your image so that head and neck appear in the crop outline.
Hit the checkmark to commit and save.

Getting started, need advice regarding PIN and gmail

I recently upgraded by phone to the Blackberry Z10, after months of nagging by Rogers (you would not believe how easy and inexpensive they made doing this - I paid a tiny fraction of what my colleagues paid, and my monthly bill is about the same as it was before). This is actually my first 'smart phone'. Previously I had used phones ONLY for talking. OK, when you stop laughing, you can call me a luddite, and we can carry on.
I had my nephew set up my phone (he is the family Blackberry guru), and we set up BBM using my personal gmail account (at least as I understood, or possibly misunderstood, him).
Now, first, every so often, this thing stops getting email, and I get an error that imap.gmail.com, port 993 is inaccessible, and it becomes accessible only if I go to the account settings and resave them. The latest this happened was this weekend. I hadn't noticed this at the time I sent an invite to BBM to a colleague, and he responded before I got my connection to gmail reestablished. Now, I see his response, with what looks like encoded data at the end of his reply, but his contact info has not appeared in my contacts list or when I open BBM contacts. Does that usually take a while to happen, or do I have to reinvite, and have him respond, again? In other words, does such a delay normally exist, if the current situation broken, or do I have to fix something (and if so, how)? Lastly, is it possible to free space on the phone by deleting emails from the phone without concomitantly deleting them from the gmail server?
Well, I lied. That wasn't the last question. I just remembered, he asked me for my BBM PIN. Is that my email address, that was entered to get that set up, or something else? If the latter, how do I find out what it is?
Thanks
Ted

I'm not 100% sure if this still works but give it a try. See if you can setup your GMail using ActiveSync. Go to Settings >Accounts and remove your GMail account. Then follow the instructions below.
http://www.blackberry.com/btsc/KB33472
If for some reason it doesn't work just go back and add your GMail account the normal way again. ActiveSync works better than IMAP but Google has said they are going to stop supporting it unless you pay for a Google Apps account. Mine is setup this way and works quite nicely and I don't pay anything.
As for your PIN you can find it by typing "mypin" (without the quotes) and hitting the space key in a BBM message or email. You can also find it in Settings >About >Hardware.
1. Please thank those who help you by clicking the "Like" button at the bottom of the post that helped you.
2. If your issue has been solved, please resolve it by marking the post "Solution?" which solved it for you!

Need advice about builds and reuse

I'm almost done with my first authoring on DVDSP 3.0.2 - this is a DVD that will be sent to replication. I willl likely make some minor changes to my project. Is it 100% safe to use the 'reuse' command when doing my final build after these changes? Or is it better to do a fresh build from scratch?
Thanx in advance
Bob

Thanks for the quick reply!
One more noobie Q - My replicator said he can take an image file from me. So I will use DVDSP to create it. I've never created an image file. Is it straightforward? Are there any options to be aware of?
As far as QC'ing the project - can I check the image file itself? or do I just check a DVD formatted from the build (before I create the image file).

Mixing public and private networks on the same switch

Hello Everyone,
I know this may get some security engineers in frenzy but wanted to know if there is a safe way to mix public and private networks on the same switch.
We have many remote offices that we want to add public wifi and a couple of other services that would be completely outside of our internal network. Each office has a 3750 with plenty of open ports. How can I safely create a vlan for public access on these switches which currently have our internal network on. I have read that people are doing this to save on the cost of purchasing a dedicated switch. Some people are using access lists and one person mentioned creating a private vlan for the public network. I looked up private vlan and it seemed bit confusing.
Is this recommended? If not what would be the safest way to do this?
Thanks Everyone

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
How "safe" is relative. If your running just one VLAN on a switch, that's would be the safest (basically the same as mixing traffic on the same wire - separation is done else where).
If you multiple VLANs on a switch, then you need to determine how likely someone might figure out a way to breach the VLAN barriers. (This isn't so easy on newer switches.) If the VLAN isolation is breeched, then you need to examine what does that imply from a security perspective (for example can someone now inject or receive other VLAN traffic).
For most purposes, I don't see mixing public and private VLANs, alone, on the same switch as much of a risk. More of a concern is what can be reached on either VLAN and how well it's protected.

Beginner need advice for PS table

Dear All,
Kindly advice the function and name of PS table that are normally use in PS module. Such as PRPS,PROJ,AUFC.
Many thanks in advance.
Nies

Hi,
Please find detail list of tables in SAP-PS.
Master Data:
PROJ Project definition
PRPS WBS elements
PRTE Scheduling data
PRHI WBS hierarchy
AUFK Orders/networks headers
AFKO Production Orders/networks
AFVC Network activities
AFVU Network activities
AFVV Network activities
RESB Network Components
MLST Milestones
Transaction data and totals:
RPSCO Project info database (cost, revenues)
RPSQT Project info database (quantities)
COSP Cost totals for external postings
COSS Cost totals for internal postings
COSB Total variances/result analysis
COEP Line items, actuals
COOI Line items, commitments
COEJ Line items, planned orders
BPGE Budget, overall cost
BPJA Budget, annual values
QBEW Project stock valuation
MSPR Project stock (incl. non-valuated)
AUFK Order master data
AFVU DB structure of the user fields of the operation
AFKO Order header data PP orders
EBAN Purchase Requisition
EBKN Purchase Requisition Account Assignment
JEST Individual Object Status
LFM1 Vendor master record purchasing organization data
EKKO Purchasing Document Header
EKPO Purchasing Document Item
CSKU Cost Element Texts
CSKT Cost Center Texts
ANLA Asset Master Record Segment
JCDS Change Documents for System/User Statuses (Table JEST)
COSP CO Object: Cost Totals for External Postings
COSS CO Object: Cost Totals for Internal Postings
COEP CO Object: Line Items (by Period)
BKPF Accounting Document Header
BSEG Accounting Document Segment
CSKS Cost Center Master Data
COBK CO Object: Document Header
CEPC Profit Center Master Data Table
PRPS WBS (Work Breakdown Structure) Element Master Data
PROJ Project definition
PRHI Work Breakdown Structure, Edges (Hierarchy Pointer)
TJ02 System status
BPJA Totals Record for Annual Total
Hope this will solve your problem.
Regards,
Rakesh Pradhan

Private vlans and 2960 and 3560 switch

Hi, I have a 3560 switch that supports private vlans. There are few computers connected to it and private vlans work fine. Now I need to connect a 2960 switch to 3560 switch. 2960 seems to have no private vlan configuration options but it can be private vlan edge? What is private vlan edge? If I put the computers on 2960 to a vlan that is isolated vlan in 3560 will the computers be able to communicate with themselves in layer2 on 2960 switch?

Example: I have network 10.0.0.0/24. Networks primary vlan is 2001, isolated is 2002 and community is 2003. These settings are on 3560. So if I put computers on 2960 switch to vlan 2002 and make the ports protected ports they will act as isolated ports and they can't communicate with ports that are on isolated vlan 2002 on 3560???
Can I also use the community vlan on 2960? is this possible because vlans 2002 and 2003 would be on the same network???

Hi all, need advice on OSPF and private vlans

Similar Messages

Maybe you are looking for