IOS static destination Port NAT for Proxy-Service

HTTP Internet-traffic (tcp 80) from Clients connected to interface1 (10.0.0.0/8) sould be transfered/ scaned via Proxy-Server(192.168.0.1) on interface2 which acts on Port tcp 8080.
HTTP Traffic form the clients is routed via PBR to the Proxy.
But I don`t know how to nat the detination-port from the clients (tcp 80) to the service-port used by proxy (8080) WITHOUT natting the original source- and destination-address.

object network nec1100_cpu
 host 192.168.0.201
nat (inside,outside) static my-public-IP service udp 5060, 5080 5081
Or you can also do this in the same way.
object network nec1100_cpu
 host 192.168.0.201
nat (inside,outside) static my-public-IP 
Control udp port via the ACL on the outside interface.
Hope this helps.
thanks
Rizwan Rafeek

Similar Messages

  • [ALSB] turning on/off logging/tracing for proxy services

    Hi all,
    do you have any snippet for turning on/off logging/tracing for proxy services using WLST or JMX ?
    I've seen a previous thread about Enable/Disable Proxy Service using JMX and I'm looking for something similar.
    Regards
    ferp

    Thanks, but I mean using WLST or JMX code and not by ALSB console
    regards
    ferp

  • Proxy Service giving "Cannot Compute Effective WSDL for: Proxy Service"

    Hi,
    After updating the wsdl and schema, our proxy service is complaining with error : "Cannot Compute Effective WSDL for: Proxy Service " <ProxyService_Location_Name> when I launch a test console or access the Proxy Endpoint on IE.
    Proxy and Business Services are pointing to the same WSDL. From Business Service, I am able to launch the test console. . Before updating the wsdl and schema, it was working fine. We tried to check in JDeveloper to see whether there are any issues with WSDL or Schema, but they are working fine.
    Security Settings on Proxy Service are : Basic Authentication, User-Name Token Policy and also applied Transport Access Control. Security worked fine earlier before update.
    From log file :
    Root cause of ServletException.
    java.io.IOException: Can not compute effective WSDL for : ProxyService ********
    at com.bea.wli.sb.transports.http.ResourceRequestProcessor.securedInvoke(ResourceRequestProcessor.java:93)
    at com.bea.wli.sb.transports.http.ResourceRequestProcessor.process(ResourceRequestProcessor.java:65)
    at com.bea.wli.sb.transports.http.generic.RequestHelperBase.handleMetadataRequest(RequestHelperBase.java:181)
    at com.bea.wli.sb.transports.http.generic.RequestHelperBase.service(RequestHelperBase.java:83)
    at com.bea.wli.sb.transports.http.wls.HttpTransportServlet.service(HttpTransportServlet.java:127)
    at weblogic.servlet.FutureResponseServlet.service(FutureResponseServlet.java:24)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
    Any suggestions/ideas on why this error is happening is much appreciated.
    Thanks,
    Srithi

    There must be definitely some issue in the Policy Configuration, due to which it is not able to Compute Effective WSDL.
    Can you please do the following and capture the logs:
    - set the transports debug flag to true in the alsbdebug.xml in your domain directory :
    <java:alsb-transports-debug>true</java:alsb-transports-debug>
    <java:alsb-service-security-manager-debug>true</java:alsb-service-security-manager-debug>
    <java:alsb-service-validation-debug>true</java:alsb-service-validation-debug>
    <java:alsb-wspolicy-repository-debug>true</java:alsb-wspolicy-repository-debug>
    - set the WLS log level to debug
    - Then restart the servers
    This should give some additional details on the specific error.
    It is considered good etiquette to reward answerers with points (as "helpful" - 5 pts - or "correct" - 10pts).
    https://forums.oracle.com/forums/ann.jspa?annID=893

  • Reset the HTTP response code in OSB for proxy service

    Hi,
    I created a HTTP proxy service in ALSB with any XML message option. There are some business scnearios for which i need to send a custom error message in the HTTP body. I am replacing the $body variable with the error message and sending reply with success.As i am using reply with success it sends a HTTP response status code as 200 Ok.
    However based on different error conditions i want to send appropraite http response code. How can this be achieved?

    I would like to share the solution so that it would be useful to all the users of the forum.
    There is a http:http-response-code element in the $inbound variable which is optional element. You need to insert this element to the $inbound using the insert action. Here is the extract of the code:
    Insert [<http:http-response-code>401</http:http-response-code>] [ as last child of ] [./con:transport/con:response] in [inbound]
    Please note namespace con belongs to "http://www.bea.com/wli/sb/context".
    Edited by: [email protected] on Aug 12, 2009 10:47 PM

  • HTTP Basic authentication for proxy service and its wsdl?

    Hello:
    For some reasons I needed to configure the HTTP basic authentication on a proxy service at OSB 11g. Everything was OK until I realized that, additionally to the authentication when calling the service, the OSB also asks for credentials when I try to get that proxy wsdl file.
    My requirements are to secure the proxy service when is called only, not when retrieving the wsdl.
    Is this possible to configure on OSB / WLS? How?
    Greetings!
    Edited by: user4483647 on 02-sep-2010 12:59
    Edited by: user4483647 on 02-sep-2010 13:25

    If I'm not wrong, Basic authentication is Transport level feature. So passing User/Password in SOAPHeader doesn't make sense. SOAP message can only be sent when you have a HTTP Connection open. During opening of HTTP connection User/Password is required for basic authentication.
    http://www.student.nada.kth.se/~d95-cro/j2eetutorial14/doc/Security7.html#wp156943
    Edited by: mneelapu on Apr 2, 2009 2:09 PM

  • Which service type to use for Proxy Service

    I have a question regarding a Proxy service.
    I have a need for a local (transport local) Proxy service which is called by another proxy service.
    It is a synchronous service which has an XML incoming message and an XML outgoing message.
    I have the following questions:
    - Does it make a difference in performance when I choose a WSDL webservice or a Messaging service?
    - Which one would you choose and why?
    Thanx

    Does it make a difference in performance when I choose a WSDL webservice or a Messaging service?Hardly there would be any difference.
    Which one would you choose and why?I would choose XML type messaging type proxy because input and output are XML messages. I won't choose WSDL web-service because it should be used in case of SOAP packagaing only (in web-service context, to enable SOAP and WS support) to mock a web-service which has a WSDL (and a XSD) associated with it.
    Regards,
    Anuj

  • HP 6500n asking for proxy service everytime i enable Webservices

    I have configured my HP 6500+ for network and i can print from my computer onto this printer without any issues using the network connection.
    I have been trying to enable the webservices but it always keeps on asking me for proxy. I am in a home network with no proxy enabled. I can browse my internet with no issues.
    Anybody have any idea how can i resolve this issue. I have rebooted the printer,  tried resetting the printer back to defaults, have done semireset ... but no help

    If the steps given in the above post does not work, try these:
    1) First contact your ISP and get the DNS IP address details
    2) Print HP Network Configuration Page from the printer menu (Setup ==> Network ) and make note of printer IP.
    3) Open Internet Explorer browser and type the printer IP in the address bar and press Enter key.
    4) click on Network tab and click on Wired/Wireless. If printer is connected in Wireless, click on Wireless
    5) Goto Advance configuration tab
    6) Select Manual IP and enter the details. Same as it as from HP Network Configuration Page
    7) Select Manual DNS and enter the details which ur ISP provided
    8) Click Apply and save the settings and waitfor 2 min.
    9) Turn OFF and turn ON the printer
    10) Enable the WebServices
    Say "Thanks" by clicking the Kudos Star in the post that helped you.
    Please mark the post that solves your problem as "Accepted Solution"

  • Bug: export WSDL for proxy service

    done under workshop 10.3, rightclick on proxy, then osb/export wsdl contains the wrong location (in my case port 7001 instead of 8001)
    done with service bus web console the location is alright.
    please report and fix this.
    anyway does it belong to here or the workshop or soa forum? I feel free to xpost.
    the whole export is annoying because it goes to a zip. why would i want to zip a single wsdl file.
    thanks you for you attention,
    Barossa

    There must be definitely some issue in the Policy Configuration, due to which it is not able to Compute Effective WSDL.
    Can you please do the following and capture the logs:
    - set the transports debug flag to true in the alsbdebug.xml in your domain directory :
    <java:alsb-transports-debug>true</java:alsb-transports-debug>
    <java:alsb-service-security-manager-debug>true</java:alsb-service-security-manager-debug>
    <java:alsb-service-validation-debug>true</java:alsb-service-validation-debug>
    <java:alsb-wspolicy-repository-debug>true</java:alsb-wspolicy-repository-debug>
    - set the WLS log level to debug
    - Then restart the servers
    This should give some additional details on the specific error.
    It is considered good etiquette to reward answerers with points (as "helpful" - 5 pts - or "correct" - 10pts).
    https://forums.oracle.com/forums/ann.jspa?annID=893

  • IOS 5.0.1 bugs for location services

    Since I've updated to ios 5.0.1, every time I use safari, I see that location service is on. I go to settings to find out which app is using it, by the presence of the purple arrow, and it turns out that it is the compass calibration under system services.
    Why is this happening now? I guess I could just turn it off...seems strange. This didn't happen before the update.

    No, it will not. It must be the version specifically for the iPod Touch.  On top of that you must have a 3G or 4G iPod Touch in order to even install iOS 5 onto it.
    B-rock

  • Ports required for communication between Web servers and service applications (the default is HTTP)

    We're using SharePoint 2010, I'm the system admin for a SharePoint farm. We enabled SharePoint Search by adding a Search Service APplication. One of the crawl report timer job is failing every 5 minte with the error "Cannot connect to remote server".
    After digging around, we found that the server running the timer job tries to connect to the SearchAdmin.svc on the index server, over HTTPS / port 32844 However, communication over SSL via a non default port is blocked by our firewall.
    According to this article: https://technet.microsoft.com/en-us/library/cc262849.aspx the default is HTTP for communication
    between web servers. How is it possible that it's trying to connect over SSL?

    Hi,
    Quoted from
    https://technet.microsoft.com/en-us/library/cc262849.aspx#ServiceApp :
    You can change the protocol and port binding for each service application. On the Service Applications page in Central Administration, select the service application, and then click
    Publish.
    Here is an article for configuring Windows firewall port rules for SharePoint using PowerShell in case you need:
    http://www.xylos.com/default.aspx?id=1050
    Regards,
    Rebecca Tu
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Error: Unable to find the WSDL port defined for Service

    Hi,
    I am facing below  error while invoking partner's WSDL:
    Oracle.Fabric.Common.FabricInvocationException: Unable to find WSDL port defined for the service.
    Can anybody guide me what could be the exact issue?
    * I am able to ping that host.
    Thanks
    Richa

    Hi Puneet,
    I am able to access WSDL from the browser and value of Location in composite.xml is correct.
    Regards.

  • LANT-to-LAN using port NAT...

    I have a 3000 series Concentrator with two public interfaces. On one public interface, I have a LAN-to-LAN using static NAT to a Cisco IOS IPSec router...
    I would like to establish a LAN-to-LAN with the external (public) interface to the same IOS IPSec router...(no problem)
    I would like to NAT the external interface to the same translated network...
    It would look something like this:
    NAT LAN-to-LAN rule:
    Interface Source Net.: Translated --------------------> Remote Network
    2 public 10.1.x.x : 191.1.1.1 --------------------> 172.x.x.x
    3 external 10.2.x.x : 191.1.1.1 ----------------------> 172.x.x.x
    IPSec LAN-to-LAN
    Ethernet 2 pub 10.1.x.x peers 172.x.x.x
    Ethernet 3 ext 10.2.x.x peers 172.x.x.x
    Can I use port NAT for the above NAT scenario?
    I would like to NAT the two public addresses to the same "translated network".
    Thanks...

    Well, I guess I have to answer my own question...
    The Cisco VPNC does not allow more than one LAN-to-LAN connection to the same PEER...
    The port NAT rule would work just fine if the VPNC could have more then one LAN-to-LAN to the same PEER...

  • Not enough port fields in port forwarding for Linksys E4200

    I have always used netgear routers in the past. After a series of issues regarding configurations not working correctly I invested in what appeared to be a semi pro router, the cisco linksys e4200.
    I have a centralized server which I use to access a mass of different services such as mail, dns, VPN, FTP, Kerberos, http and many more. While I am not a massive networking nerd, this server setup is like my garage project. To access these services externally to my LAN as far as I understand I would need to configure port forwarding for each service to my server. Unfortunately the control panel for the linksys E4200 only offers about 15 custom port fields for forwarding, and some documentation I have read shows that with it's basic install my server could be using up to 60 ports at once.
    Is this router just not suitable for this sort of network. If so I will be very disappointed because I have spent a quarter of the price on netgear routers with more control than this.
    If anybody could assist with details and options I would greatly appreciate it

    Wrong forum, use "small business routers".

  • Cannot create Proxy service with JCA transport

    Hello everyone.
    I have some issues while trying to create ftp service with jca transport. I follow the instruction in this tutorial:
    http://blogs.oracle.com/MarkSmith/entry/osb_and_ftp_adapter_in_11g
    I stuck in Step 4, cannot create proxy service to use JCA file that I created by JDeveloper 11g (11.1.1.5). When I specify jca file for proxy service, a error message returned:
    <ALSB Console> <BEA-494002> <Internal error occured in OSBConsole : Transport exception occurred with the following message:
    Invalid JCA file for JCA proxy service. If you are creating a Proxy from a Business Service, please select a different transport type (for example, http). If not, JCA file must contain JCA activation spec properties.And these are my jca file content that created by JDeveloper:
    <adapter-config name="myJCA_FTP_service" adapter="FTP Adapter" wsdlLocation="myJCA_FTP_service.wsdl" xmlns="http://platform.integration.oracle/blocks/adapter/fw/metadata">
      <connection-factory location="eis/ftp/MyFtpAdapter"/>
      <endpoint-interaction portType="Put_ptt" operation="Put">
        <interaction-spec className="oracle.tip.adapter.ftp.outbound.FTPInteractionSpec">
          <property name="PhysicalDirectory" value="/home/FTP-shared/upload"/>
          <property name="FileType" value="ascii"/>
          <property name="Append" value="false"/>
          <property name="FileNamingConvention" value="osb_%SEQ%"/>
          <property name="NumberMessages" value="1"/>
        </interaction-spec>
      </endpoint-interaction>
    </adapter-config>Is there anyone who had tried to use JCA transport with Ftp adapter already? Please give me a suggestion.
    Any response is appreciated
    Regards, Cuong Pham

    To get to the basics.
    You use GET to read files from an FTP location - This can be done by an OSB proxy service only.
    You use PUT to write files to an FTP location - This can be done by an OSB business service only.
    So forget that you need a proxy service for PUT.

  • OSB Proxy service HTTP kerberos authentication

    Is it possible to use kerberos authentification in OSB Proxy service?
    I need it in following scenarios.
    First scenario. We have Sharepoint Portal with Windows SSO. Our Sharepoint developers can invoke webservice on OSB (proxy service) with transfering of kerberos ticket (they talk about process named impersonation). In OSB proxy service I want to know credentials which are passed in kerberos ticket. How to do it? My Weblogic and OSB Consoles already have kerberos auth.
    Second scenario. How can I pass kerberos ticket from proxy service to business service without knowing info in this ticket. Like passthrought for basic auth.
    PS I had read info here: http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/security/security_faq.html and paragraph about OSB SSO looks bad for this task...

    For weblogic console i had done several actions for enabling of kerberos auth... some of them are:
    - NegotiateIdentityAsserter was added to realm's providers,
    - web.xml of consle was configured in section ...<login-config><auth-method>CLIENT-CERT, FORM</auth-method>...
    etc...
    What actions i need to do for proxy service?
    PS Manoj sorry... wait... i missed your link before have not read info yet :) may be it will help...
    Edited by: Andrey L. on 17.03.2010 2:25

Maybe you are looking for