How to isolate traffic in one vpn

many type of traffic in one traffic mpls vpn.customer want to isolate these traffic. don't visit each other!
how can i do this!
thank you

This document describes the procedure to use PIX/ASA to configure VPN filter in L2L and Remote Access with Cisco VPN Client.
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtml

Similar Messages

How to route traffic across subnets when one NIC is a hyper-V virtual switch?

Having a bit of a problem with a hyper-V environment which does not seem to route network traffic on two different subnets between each other.
If it were a purely physical server with two NICs and a gateway set traffic would automatically be forwarded between the two different subnets.
However when one of those NICs is a hyper-V virtual switch this simple routing no-longer seems to work and no traffic gets forwarded between subnets?
Situation is:
Hyper-V server with two NICs
NIC 1 = 192.168.0/24 - main Internal company network.
NIC 2 (hyper-V virtual switch.) = 192.168.1/24 - connects to ADSL internet router
Virtualized Domain Controller.
One or two virtualiszed NICs as necessary
How then does traffic get routed between these two subnets? If RRAS has to be configured to do this where is the best place to do it, on the hyper-V host or on the virtualized domain controller?
Thanks,

Hi ,
You can create an internal virtual switch and configure an IP for it (I assume it is 192.168.1.2/24) .
After you enable RRAS in hyper-v host there will be two gateways for different subnets .
" NIC 2 (hyper-V virtual switch.) = 192.168.1/24 - connects to ADSL internet router "
The problem is here ,if these VMs need to access internet .
So , these VMs can not configure their gateway same as the IP of internal virtual switch , you may set VM's gateway as the ADSL internet router's IP meanwhile add a static route entry for every VM .
Please refer to the Syntax :
route add -p 192.168.0.0 mask 255.255.255.0 192.168.1.2
Hope this helps
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to configure DNS server to redirect all web traffic to one external website?

I'd like to use the DNS service on my OS X Server as a way to force all all web traffic to one specific, external website. Not quite sure how to go about configuring it, though - any recommendations?
(BTW, this is, obviously, not our primary DNS server; I intend to silently update the preferred DNS server for users who fail to complete their timesheets in order to force the issue)

Web clients don't generate uniquely-identifiable DNS queries; there's no SRV request or related traffic that you could select on and spoof. So if you do implement this, everything querying the spoofing DNS server will get the spoofed host, or you'll have to spot specific queries that are likely web queries; Facebook, Google, Bing, etc.
If you still want to implement this, then I'd probably replace the DNS server with a runt DNS server (maybe hack dnsmasq or maraDNS, or create yourself a trivial DNS server) and have that always return the specified IP address. This avoids having to hack BIND to be universally authoritative, which is probably on par with hacking a simpler DNS server to always return a fixed IP address, and the latter is probably easier to undo.
A firewall can spot TCP port 80 and port 443 traffic, unlike a DNS server. Firewalling outbound port 80 traffic is more typical of these requests, and either trap that traffic to a specific web page based on the capabilities of the firewall, or the web proxy approach that Camelot suggests. There are folks that tie access into the web proxies into external authentication and related; that'd be able to do what you want. Web proxies are usually combined with firewall blocks, as most sites want only the web proxy to have external access, too. But this is also rather more pieces than a DNS redirect, too.

How to enable traffic between VPN clients in Windows Server 2012 R2?

Hello,
I installed Remote Access role with VPN.
IPv4 Router is enabled: http://snag.gy/UAMY2.jpg
VPN clients should use static ip pool: http://snag.gy/REjkB.jpg
One VPN user is configured to have static ip: http://snag.gy/TWwq0.jpg
VPN server uses Windows Authentication and Windows Accounting.
With this setup, VPN clients can connect to server, get ip addresses and can see server via server's vpn ip. Server can connect to VPN clients too (Using client's vpn ips). But VPN clients can't communicate with each other.
For example, VPN server has ip 192.168.99.5
VPN Client 1 - 192.168.99.6
VPN Client 2 - 192.168.99.7
I am able to ping 192.168.99.5 from both clients, and able to ping 192.168.99.6 and 192.168.99.7 from server via remote desktop. But I am not able to ping 192.168.99.7 from client 1 and 192.168.99.6 from client 2.
If I trace route from 192.168.99.6 to 192.168.99.7 - I can see that packets goes to server (192.168.99.5) and next hop - request timeout.
What else should I configure to allow network traffic between VPN clients?

Hi,
To better analyze this issue, would you please post the routing tables on the two VPN clients? You can run "route print" at the command prompt to get the routing table.
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How to isolate one audio or video track?

How to isolate one audio or video track? My premiere pro cc will only allow me to grab all 8 audio tracks and the video tracks at once when i import it and bring them into the timeline. When I click on one it highlights them all.

It helps to indicate what version of Premiere you have and whether you're on Mac or Windows.
If you're on 7.0.1 or later, then disable the Linked Selection button in the Timeline. It's the button to the right of the magnet (Snap). If you frequently want to toggle between linked and unlinked selection, you can assign a shortcut to the command
Also, you can select any track item by holding ALT while clicking. To select multiple individual track items (e.g., A3, A5, & A7 for a given clip), hold ALT+SHIFT while clicking.
And I believe Sarthak meant "Unlink" rather than "Ungroup." A/V clips are linked by default, so Unlink is generally available. Ungroup will be available only if what's selected is a set of clips that you manually grouped.

How to share internet-connection over vpn

Hallo,
first, sorry for my bad english...
i have a mac mini 2011 with os x mavericks and os x server.
i use a vpn connection for my mobile clients. these clients need to connect to the internet with the same connection as the server.
how do i share the connection for my vpn clients?
thx
cgwaldt

Mr. cgwaldt:
I just ran some tests and confirmed the method. To mask your ip address via your vpn do the following.
1. Create a vpn connection to your server.
2. Use Finder to start your ScreenSharing.app. This app is located at /System/Library/CoreServices/ScreenShare
3. When you start the app, it will ask you for the ip address of the network computer. Enter the ip address of your server.
4. Log in with a registered account on that server.
5. Do all your work through the shared screen.
I have taken a screen shot. You will see two browsers in the screen shot. One is open on my local computer, and the other is open on the ShareScreen app. The one in the ShareScreen app shows the static IP address of my office. The one that is on my local machine shows the dynamic IP address provided by my mobile internet provider. Note, my advice in a previous post was not entirely correct; I am forcing all traffic through the VPN tunnel in this picture, and I expected my local machine to have the static ip address that is the same as the one in the ShareScreen app. Even with all network traffic going back to my home server, I run into the problem that you spoke of, but the solution is to use that connection to work from a home computer, and then the problem is solved.
Any work you do on your server using the ShareScreen app will use internet packets marked with your static IP address. The connection was not nearly as slow as I had thought it would be. There is a delay between the typing of text and the appearing of the text on the screen, but if you are good at typing, this should not slow you down.
In this example, the webpage that is showing 173.198.104.130 would be the one that you would use for your billing. That IP address is the static IP of my office, which is where the "Mavericks1" computer is located.
For this test, I used a mobile hotspot on an Android Ice Cream Sandwhich operating system running on an HTC Rizound celular phone. The connection speed is mediocre, and the delay was not bad. If you are working in a hotel or have access to a much better wireless connection, then the delay will probably be minimal at best.
I hope this helps.
-Jared

How can I connect to a VPN via PPTP?

Hello,
I am a foreigner living in Taiyuan, the capital city of Shanxi Province, in China. I bought my macbook the summer of 2006. It still works perfectly except I cannot connect to the internet here at the university.
The internet here is split into two parts: local, and international. The ethernet connection allows me to access Chinese websites, but nothing else. It sounds counterintuitive but really, that's how it is. In order to get the rest of the world, all computers have to connect to a VPN via PPTP. Once this is established, viola, you have internet.
My problem is I cannot seem to connect to the VPN. I have used Internet Connect, I have created a VPN via PPTP, and put in all the right numbers...
the VPN IP is 202.207.128.115
the username is tyut
the password is tyut
But when I try to connect, it just says it can't. Nobody at the university has been helpful because they've never used a Mac before, and besides which, they aren't used to using a computer in English.
Can anyone help me? Or does anyone know how to get in touch with Apple Services in China (in English)?

Yeah, but that's not the problem here. I'm an English teacher at Taiyuan University of Technology (the irony does not escape me). The other teachers have PCs and can get full internet in their apartment. Since I have a mac, it's much harder for the school technicians to help me.
This is what my log says from the VPN connection (which does connect now.)
Mon Oct 29 16:05:52 2007 : PPTP connecting to server '202.207.128.115' (202.207.128.115)...
Mon Oct 29 16:05:52 2007 : PPTP connection established.
Mon Oct 29 16:05:52 2007 : Using interface ppp0
Mon Oct 29 16:05:52 2007 : Connect: ppp0 <--> socket[34:17]
Mon Oct 29 16:05:52 2007 : local IP address 172.30.1.252
Mon Oct 29 16:05:52 2007 : remote IP address 172.30.1.2
But I still can't load any pages from the VPN connection, just the regular ethernet connection (local internet). It doesn't work if I use IP addresses instead. :-/ I unselected "send all traffic over the VPN connection" because if it's selected, I don't even get local internet.
Looking online I found a possible fix, but it's for Windows XP. I don't know how to find the same settings on the Mac...For Windows XP:
1. Click Start -> Control Panel
2. Click on the Network and Internet Connections icon and then click "Network Connections". If your Control Panel is in classic view, simply double click the "Network Connections" icon.
3. Right click on the new VPN connection and select Properties
4. Select the "Networking" tab
5. Verify that Internet Protocol (TCP/IP) is highlighted
6. Click on the Properties button
7. Within the Internet Protocol (TCP/IP) properties window, click on the "Advanced..." button. Within the Advanced TCP/IP Settings window, REMOVE the check mark next to "Use default gateway on remote network"
8. Click "OK" to close all open windows
Where would the "default gateway on remote network" be on a Mac?

NAM not seing traffic in one direction

Hi, I got a 6500 VSS with a NAM plugged directly. We are not allowed to manage the SPAM sessions from the NAM appliance 2204 Version 5 , so we configured directly in the 65K CLI. We are trying to do captures but we get traffic only in one direction (ingress).
SWTRMCORE#sh ver
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXH6, RELEASE SOFTWARE (fc1)
The NAM is plugged into port:
interface GigabitEthernet2/1/3
description Conexion Monitoreo NAM2204 Port1
switchport
logging event link-status
Span session is set as follows:
monitor session 1 source interface Po10 , Po11 , Po21 , Po31 , Po32 , Po39 , Po42 , Po43 , Po44 , Po45
monitor session 1 destination interface Gi2/1/3
When we did some testings, we made sure that traffic was in deed through the portchannels in the span session by doing tracerts and generating icmp traffic. Still unable to see traffic in one direction.

Hi,
You should have the L2L VPN ACLs as mirror images of eachtother always. In your above configuration they werent. I am not sure if this is something that should break the L2L VPN connection in the way you mention but certainly configuring the connection like this is not recomended.
Also notice that the "permit ip" statement already includes "icmp" so there is really no need to add an additional line to the ACL.
I would recomend defining the needed networks to the L2L VPN ACL with the "permit ip" statements and using other methods to control the traffic through those L2L VPN connections IF needed.
- Jouni

Configuring PPP options for only one VPN connection

How do you configure PPP options for only one VPN connection that is using L2TP over IPSec? The built-in VPN client in 10.4.9 is failing authentication because it won't talk MSCHAP-V2 (this is the only authentication protocol I can use) with the server. I am able to establish a connection if I add the following to /etc/ppp/options:
refuse-eap
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
However, these options will affect all PPP connections. The preference file that contains the network configurations (/Library/Preferences/SystemConfiguration/preferences.plist) also contains PPP options for each specific network service. After some searching around, I found that there are several keys that seem promising (MSCHAP2, etc.). But these keys take a string value and I have no clue what they should be. These keys are defined in SCSchemaDefinitions.h file.
Any ideas?
Mac OS X (10.4.9)

Hi Brian,
I just tried to check all of ADDT´s "includes" files for any internal references (read: "require" or "require_once" statements) to the file "tNG_config.inc.php". So far I can only see this file referenced in the file "tNG.inc.php" (within the "$KT_tNG_uploadFileList1" array).
So what could this mean ? Maybe you´ll have to make copies of the the original "tNG.inc.php" as well and save them as, say, "tNG.inc_ital.php" file plus make sure that these copies internally point to a different "tNG_config_ital.inc.php" file -- because it´s always the first mentioned file which gets referenced from e.g. an ADDT login page (see the "Load the tNG classes" - part)
I want to use ADDT’s User Registration Wizard and I have looked at all the neat stuff in the Control Panel/Login Settings
The Control Panel will always update the main "tNG_config.inc.php" file, so any further modifications will have to become manually applied to the custom files you´re creating.
Cheers,
Günter

More then one VPN connection?

I made a good start using VPN.
But when I try to create additional VPN connections.
But the links already established, interrupted.
So i can online have one VPN established...
How do i set the server up, so that i can have more?

Hi There
I have this exact same problem on L2TP VPN on Lion Server 10.7.3 and earlier (I've yet to try 10.7.4 - what version are you using?) What I've found is you can't have more than on client from the same IP so say if I connect to our VPN via an Internet connection if someone else connects on the same Internet connection they knock me off. But multiple connections are possible from different Internet connections at the same time. So I can have my laptop connected via my home Internet connection (adsl) and connect at the same time from my iPad on 3G but if I use my Laptop and iPad on the same home internet (adsl) whichever connects 1st knocks the other off - hope this makes sense.
It drives me mad as myself and another employee share the same internet connection (adsl) for a few weeks of the year there is no 3G signal. On our old 10.4 server via PPTP we could have as many VPN connections as we wanted (never went higher than about 5 at a time) from the same internet connection. Not sure if this is a limitation of L2TP or Lion Server have still not managed to get PPPTP to work on Lion server. Going to give 10.7.4 a go 1st when I'm feeling brave...
Ben

I need to know how to configure wi-fi and VPN on m...

I need to know how to configure wi-fi and VPN on my E61i.
everytime I search for any available WLAN,I find one(in my company)and when start browsing,it gives me(WLAN not found).
What should I do?

iOS: Connecting to the Internet

I have three videos to edit.How do I save each one so I can burn them together to a DVD?

I have three videos to edit. How do I save each one so I can burn them together to a DVD?

Use Share/Computer/AVI to output each video as a DV-AVI.
Then open a new project set up for DV and combine the three AVIs on that timeline. Voila!

HT204053 i RECENTLY PURCHASED ANOTHER IPHONE. MY INTERNET IS NOT WORKING. I JUST CREATED AN APPLE ID. WHAT'S NEXT? I NOW HAVE TWO DIFFERENT ACCOUNTS WITH DIFFERENT USER NAMES. HOW CAN I USE ONLY ONE ACCOUNT FOR ITUNES, ICLOUD APPLE ID ETC???

I RECENTLY PURCHASED ANOTHER IPHONE. MY INTERNET IS NOT WORKING. I JUST CREATED AN APPLE ID. WHAT'S NEXT? I NOW HAVE TWO DIFFERENT ACCOUNTS WITH DIFFERENT USER NAMES. HOW CAN I USE ONLY ONE ACCOUNT FOR ITUNES, ICLOUD APPLE ID ETC???

Welcome to the Apple community.
iTunes and iCloud and different accounts, you will need to delete both accounts from your device before adding the new details in their place.
For iCloud go to settings > iCloud, scroll down and hit the delete button. You can then sign back in using your correct details. For iTunes go to settings >store, tap your account ID and then sign out, you can then sign back in using your correct Apple ID.

How do I move up one folder while browsing Time Machine?

When I'm viewing a folder in Time Machine's "Star Wars" view, how do I move up one folder, to view the current folder's parent folder?
In Finder, I have several ways to do it: I could either hit CMD+Up Arrow, or CMD-click the title bar then click on the parent folder I want, or double-click the folder I want from the folder path in the bottom bar. But none of these methods work in Time Machine.

JUst like you would in the Finder. I use the Path button in the Finder's toolbar:
If you don't thave the Path button in the toolbar use the Customize Toolbar menu option in any Finder window to place it in the toolbar.
OT

How can i print just one page of photo book without printing the entire book

how can i print just one page of photo book without printing the entire book

Jim,
Take heart. We can help.
First turn on page view so you can see how the content of your sheet fits on the page(s). A Numbers document contains sheets (listed on the left) which in turn contain tables, charts, text, and graphics. Select the sheet you want to print on the left, then enable page view by selecting the menu item:
"View > Show Print View":
Now you should see your content and how it fits on one, or more, pages. If thie content is too big for one page use the controls and the bottom left of the window to expose the sheet controls:
Here a table is too big to fit on one page:
slide the "Content Scale" slider so the content fits:

How to isolate traffic in one vpn

Similar Messages

Maybe you are looking for