How to make VPN TCP session stateful?

I found if I set up interface rules for VPN, even from higer security level interface to lower security level interface, the TCP session is not stateful. I have to open relative ports on both interface. Is there anyway can make VPN connection TCP session stateful, just like using normal interfaces (like with out VPN?) ? Thanks!

here is the configuration on PIX,
group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value mydomain.com
address-pools value vpnpool group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value want-want.com
address-pools value vpnpool

Similar Messages

How many concurrent VPN client sessions available for cisco 2621XM?

I have cisco router 2621XM with IOS c2600-advipservicesk9-mz.124-11.T4.
I want to know, how many concurrent VPN client sessions can be available in this image.

here is the configuration on PIX,
group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value mydomain.com
address-pools value vpnpool group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value want-want.com
address-pools value vpnpool

How to make VPN client auto timeout when it still idle?

How to make VPN client auto disconnect when it still idle?
Hi,I found some user still connected the VPN evenif they dose not use the VPN resouse.
I try to set a "idle timeout" for the VPN configuration.
We use PIX515 8.0.3 and CISCO ACS 4.2 for the VPN's connection and authentication,and the user use cisco vpn client for the connection.
I have tried many methods,but all failured.
First,I configed "vpn-idel-timeout 5" on PIX.It can not worked.
so,I add Radius(CISCO VPN 3000/ASA/PIX 7.0+) attribute "[026/3076/050] Authenticated-User-Idle-Timeout" on CISCO ACS,It still not worked.
And I also add IETF RADIUS Attributes "[028] Idle-Timeout" on group setting on ACS,it always not worked.
i found in vpn client's statistics,it always has some byte sended or received, i thought it maybe IPsec keepalive message or Radius message.
This maybe the reason because the PIX or ACS think the vpn user is keep working.
Can someone tell me how to make a "idle time out"?
best regard.
Roger

here is the configuration on PIX,
group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value mydomain.com
address-pools value vpnpool group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value want-want.com
address-pools value vpnpool

How to make a tcp server in loop

Hello everybody!
I just want to know how to make a server keeping turning even when the client has deconnected.
My work is based on examples TCP Communicator - Active.vi and TCP Communicator - Passive.vi.
The problem with these VIs is that when the client deconnects, the server doesn't work any longer, and I want the server to be able to listen for other clients (one client in the same time).
How can I modify them to apply my will? If you have some examples it will be perfect!!
Thank you!
SebGAM

You could probably get away with putting a big While loop around the server code, but there is always the greatest TCP server example I have ever seen. It lives over at OpenG, the Open Source LabVIEW community. You can download and use it for free. There's even decent documentation right there online.
EXAMPLE - TCP Server at OpenG
Beware, the code is not easily understood by the novice LabVIEW programmer. All you need to know is that you should only modify the VI called "TCP Server Example.vi" and "TCP Server Example Connection Handler VI.vi".
Enjoy,
Daniel L. Press
PrimeTest Corp.
www.primetest.com

How to change the TCP session limit for Domain Controllers in TMG2010

I've many errors in TMG2010, that relates with too many TCP sessions, that are generated from my two domain controllers.
how can i change since settings?
Regards!
Lasandro Lopez

Hi,
create flood mitigation exceptions for the domain controllers:
http://technet.microsoft.com/en-us/library/dd441028.aspx
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

How to save a TCP session ID opened and use it in another VI?

what i want to achieve:
   open a TCP session in a VI, save the session ID to Teststand, then after certain process, write/read/close the same TCP session in another VI.
my question:
   1. how to pass TCP session ID between labview and Teststand
   2. how to use the same TCP session across different VIs.
thanks
Solved!
Go to Solution.

You could typecast the reference to a U32 and sent that u32 to Teststand.
Be aware that the VI that opens the reference should be kept active (=running) or LabVIEW might close the reference silently.
Ton
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be!

How do make inactive RFC sessions timeout after user logged off?

Hi,
In SM04 we can see many sessions of type RFC belonging to users who already logged off. These sessions seem to stay allive for hours if not days.
Exapmle:
700 HAMILTONAN                                09.45.35    1 RFC                     8
700 CHUAE                                     04.08.10    1 RFC                    50
700 LIMMA                                     02.18.12    1 RFC                    45
The standard icm timeout settings are set and works fine, but for some reason these assosiated RFC sessions seem to stay logged on.
Is there any parameter maybe or any other solution anyone is aware of to make these sessions log off if inactive?

Hi,
Its basis activity but still ,
Have a look at this parameter <i><b>rdisp/keepalive_timeout</b></i> it should be set to some seconds, after which if user stays idle system will force fully logged them off...
How to Change : RZ11 -> put the parameter name -> Change ...
Hope that helps.
Regards
Mr Kapadia

How to Make Multiplayer TCP Flash Game?

I have a game in the works, and though I got the UDP to work perfectly, I sadly later found out that that is simply just a lossy protocol. There's apparently (as far as my knowledge goes) nothing you can do to make it resend data if the data was not received successfully by the recipient.
So, I was wondering how to use TCP? I've heard it's possible, but I can't seem to find a single tutorial or any information anywhere on how to do it. I found on Adobe's site socket connections, and though I got the server to connect (I think), I have no clue how to send data to it, how to get other clients to connect to it, etc. Any help?
This is the script I've been using, and though it does connect... that's basically all it does, I don't know where to go from here...
package
    import flash.display.Sprite;
    import flash.events.EventDispatcher;
    import flash.events.Event;
    import flash.events.*;
    import flash.events.IOErrorEvent;
    import flash.events.ProgressEvent;
    import flash.events.ServerSocketConnectEvent;
    import flash.net.ServerSocket;
    import flash.net.Socket;
    public class TCP extends Sprite
        private var serverSocket:ServerSocket;
        private var clientSockets:Array = new Array();
        public function TCP()
            try
                // Create the server socket
                serverSocket = new ServerSocket();
                // Add the event listener
                serverSocket.addEventListener( Event.CONNECT, connectHandler );
                serverSocket.addEventListener( Event.CLOSE, onClose );
                // Bind to local port 8087
                serverSocket.bind( 8087, "127.0.0.1" );
                // Listen for connections
                serverSocket.listen();
                trace( "Listening on " + serverSocket.localPort );
            catch(e:SecurityError)
                trace(e);
        public function connectHandler(event:ServerSocketConnectEvent):void
            //Thesocket is provided by the event object
            var socket:Socket = event.socket as Socket;
            clientSockets.push( socket );
            socket.addEventListener( ProgressEvent.SOCKET_DATA, socketDataHandler);
            socket.addEventListener( Event.CLOSE, onClientClose );
            socket.addEventListener( IOErrorEvent.IO_ERROR, onIOError );
            //Send a connect message
            socket.writeUTFBytes("Connected");
            socket.flush();
            trace( "Sending connect message" );
        public function socketDataHandler(event:ProgressEvent):void
            var socket:Socket = event.target as Socket
            //Read the message from the socket
            var message:String = socket.readUTFBytes( socket.bytesAvailable );
            trace( "Received: " + message);
            // Echo the received message back to the sender
            message = "Echo -- " + message;
            socket.writeUTFBytes( message );
            socket.flush();
            trace( "Sending: " + message );
        private function onClientClose( event:Event ):void
            trace( "Connection to client closed." );
            //Should also remove from clientSockets array...
        private function onIOError( errorEvent:IOErrorEvent ):void
            trace( "IOError: " + errorEvent.text );
        private function onClose( event:Event ):void
            trace( "Server socket closed by OS." );

again: unless you're using a server that all players connect to, you should be using adobe's peer-to-peer networking (rtmfp).
ie, with multiplayer each player can communicate with a server and the server communicates with each player, or you use peer-to-peer communication. below is an excerpt from a book i wrote (Flash Game Development: In a Social, Mobile and 3D World).
Social Gaming - Multiplayer Games
With multiplayer games, data needs to be communicated among the players. When a player makes a move (changing the game state) the updated game state needs to be communicated to all the other players. In addition, that communication needs to occur in a timely manner.
With turn-based games (like card games) that communication among players can take as long as few seconds without degrading the game experience. With real time games (like shooter games), even a 250 millisecond delay in communicating game state leads to a significantly degraded player experience. Consequently, real time multiplayer games require substantial expertise to successfully develop and deploy.
There are two fundamentally different ways that communication among players can be accomplished. Players can communicate via a server (server-based games) or they can communicate directly from player to player (peer-to-peer) games.
Server Based Multiplayer Games
Generally, the code in each player’s Flash game handles the player’s input, transmits player data to the server, receives other players' data and displays the game state. The server receives player data, validates the data, updates and maintains game state and transmits each player’s data to the other players.
The code used on the server cannot be ActionScript so you will need to learn a server-side coding language like php or c#. Server-side coding is beyond the scope of this book so I will not cover server-based multiplayer games except to say you need to have advanced coding skills in, at least, two languages (ActionScript and a server-side language) to create these game types.
Peer-to-peer games
Since Flash Player 10, you can create multiplayer games without the need of an intermediary server to facilitate player communication. The Flash Player can use a protocol (Adobe's Real-Time Media Flow Protocol) that allows direct peer-to-peer communication.
Instead of using server-side code to handle the game logic and coordinate game state among players, each peer in the network handles their own game logic and game state and communicates that directly to their peers and each peer updates their game state based on the data received from others.
To use peer-to-peer networking each peer must connect with an Adobe server. Peer-to-peer communication does not go through that server (or it that would not be peer-to-peer) but peers must stay connected with the Adobe server in order to communicate with each other.
To communicate with the Adobe server you should use your own server URL and developer key. That URL and key can be obtained at http://www.adobe.com/cfusion/entitlement/index.cfm?e=cirrus.
Below is a simple tic-tac-toe game that uses Adobe's peer-to-peer networking to pair-up players. The NetConnection class is used to establish a connection to the Adobe server while the NetGroup class is used for peer-to-peer communication.
I used only a small part of the NetGroup methods for the tic-tac-toe game but there are more available if you are sharing data among many users and/or sharing large amounts of data.
The tic-tac-toe game is in support files/Chapter 11/multiplayer and is extensively commented

How to make ODI scenario sessions run mutually exclusive

We want to restrict the end user of the ODI scenario to be able to run only 1 instance of the scenario at once. Is it possible in ODI ? Basically we want the ODI scenario sessions to be mutually exclusive ? if one is running, and if user tried to run another one, it should not allow him to do so.
Please note that we are aware of how to handle parallel runs while coding for the same, but here we don't even want to get to a situation like that.
Thanks,
Ankit

Hi Ankit,
Trying to help...
Two solutions -
Solution 1:-
Create a dedicated agent for that particular execution and for that agent set the maximun number of execution as 1.
(so only one session will be executed at a time)
Solution 2:-
Create a log table/ (lock table) to maintain the status of the execution . (column - Session state)
When ever an execution starts change the satus of the log (lock) table column as "Running"
and once the session is completed change the status of the column as "Not Running"
And in the package (starting) put a condition variable to check the column - Session state of the table log table/ (lock table)
if its running exit the application , else continue.
Hope this helps.
Regards,
Rathish

How to make VPN work on Mountain Lion?

Hello!
I had VPN connection (L2TP over IpSec) setup on Lion OS - worked perfectly. But after upgraging to Mountain Lion when I try to connect - I get an error "The L2TP-VPN server did not respond. Try reconnecting. If the problem continues, verify your settings and contact your Administrator."
Certificate is the same, nothing have changed. Tried to set option "Allow all applications to access this item" in "Access control" section for the certificate - didn't help.
Any ideas what to try to resolve this issue? Thanks!

One problem at a time, please.
And do not compound them, mix them and then cry for help.
None of your problems have any relation. And neither has your assumption.
When iWeb tests the connection, it tries to write a file on the server.
When the test succeeds, iWeb is happy. That does not mean it is the right location to publish your website. It only test if it can write.
If iWeb cannot write, then it certainly isn't the right location.
Usually the pathname is the cause of the failure.
So check the pathname field.

How to make "check for multiple logons" mandatory in webdynpro application.

Hi SDN members,
Im having a problem with an application developed in webdynpro abap.
We require that end-user only have a session per computer (ip address),
I already tried to achieve this by configuring the webdynpro application throguh SICF and going to Error Pages -> Logon Errors --> System Logon and mark the checkbox Check for multiple logons.
This configurations give only a warning when the user logs multiple times, and show a checkbox letting the user decide to end or not the previous sessions.
How to make end previuos sessions mandatory ??
Regards,
Franklin Cedillo

You would have to enforce this at the application level. You can get the IP address of the current client from the framework - IF_WD_APPLICATION method GET_REMOTE_ADDRESS.
You could write an entry with the IP address into a temporary table during WDDOINIT. You could clear the entry in the WDDOEXIT. Also during the WDDOINIT, check to see if there is already an entry for this IP address. If so, then fire an exit nagivation plug to a static MIME object or BSP page that explains why the user can only be logged in once.

How to keep dvd burn session open

When i backup my photos for storage onto a DL DVD or on any cd/dvd the burner closes the session after the burn. Are there settings that can be changed to allow a burn session to remain open so i'm not wasting storage space?

There is nothing remotely resembling a standard for multi-session DVDs. That is probably why Apple provides no option for this at all.
The other poster included a link to instructions on how to make a multi-session CD. Those instructions won't work for a DVD.

How to make tcp have establish option's function or reflexive in ASA like icmp have echo reply

how to make tcp have establish option's function or reflexive in ASA like icmp have echo reply
rather than permit tcp in both side

An ASA firewall is stateful.
The reflexive access for TCP connections (or UDP flows) is allowed by default as the firewall checks for established connections prior to applying an access-list on traffic that arrives at an interface.
Excerpted from this document (emphasis mine):
"Here are the individual steps in detail:
Packet is reached at the ingress interface.
Once the packet reaches the internal buffer of the interface, the input counter of the interface is incremented by one.
Cisco ASA will first verify if this is an existing connection by looking at its internal connection table details. If the packet flow matches an existing connection, then the access-control list (ACL) check is bypassed, and the packet is moved forward.
If packet flow does not match an existing connection, then TCP state is verified. If it is a SYN packet or UDP packet, then the connection counter is incremented by one and the packet is sent for an ACL check. If it is not a SYN packet, the packet is dropped and the event is logged."

How do i get back my stateful session bean after it has been passivated

hi ,
How do i get back my stateful session bean after it has been passivated by container.
i'm confused that is it possible or not .......give me answer
i've one stateful sessionbean which i'm accessing throgh my normal java client . now what i'm doing is when i first time call a method it is running ......then i'm shutting down the server jboss .......it is calling my ejbPassivate() method ... at this particular time client program doesn't do anything.....
now after i restart my server i'm again calling back that business method with that last object reference.......it gives me the exception given below.....
java.rmi.NoSuchObjectException: no such object in table
java.rmi.NoSuchObjectException: no such object in table
     at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(Unknown Source)
     at sun.rmi.transport.StreamRemoteCall.executeCall(Unknown Source)
     at sun.rmi.server.UnicastRef.invoke(Unknown Source)
     at org.jboss.invocation.jrmp.server.JRMPInvoker_Stub.invoke(Unknown Source)
     at org.jboss.invocation.jrmp.interfaces.JRMPInvokerProxy.invoke(JRMPInvokerProxy.java:118)
     at org.jboss.invocation.InvokerInterceptor.invokeInvoker(InvokerInterceptor.java:227)
     at org.jboss.invocation.InvokerInterceptor.invoke(InvokerInterceptor.java:167)
     at org.jboss.proxy.TransactionInterceptor.invoke(TransactionInterceptor.java:46)
     at org.jboss.proxy.SecurityInterceptor.invoke(SecurityInterceptor.java:55)
     at org.jboss.proxy.ejb.StatefulSessionInterceptor.invoke(StatefulSessionInterceptor.java:106)
     at org.jboss.proxy.ClientContainer.invoke(ClientContainer.java:86)
     at $Proxy1.makeNewAcc(Unknown Source)
     at client.GanJavaClient.main(GanJavaClient.java:46)so pls tell me that is it possible to get back that session besn or not

Stateful session beans are not persisted across restart of the EJB server instance(s) hosting them. You can't treat a Session bean as one would an entity bean.
Chuck

How i can make VPN connection in my app really need

I need to make an app which thro VPN takes data from server
How To make a VPN connection?

https://developer.apple.com/library/ios/search/?q=vpn

How to make VPN TCP session stateful?

Similar Messages

Maybe you are looking for