KVM Windows Guest access through VPN

It it possible to access a KVM windows guest through a VPN???
Thanks

Your inspections doesn't include http?

Similar Messages

Wireless Guest Access through 4404, bandwidth limiting.

We are currently running a Guest SSID on our network and pumping it out through a DSL line and it's working great. However, as we've expanded our LWAPP conversion and offering the Guest SSID to more area's, my DSL line has become very saturated and we're not in area that can get a bigger pipe. IS there a radius attribute that I can use through ACS that the 4404 controllers will recognize to limit the users bandwidth? In the past when using an opensource solution for guest access (ChiliServ and FreeRadius) I was able to use the WiSPr attributes:
WISPr-Bandwidth-Max-Down
WISPr-Bandwidth-Max-Up
and it worked pretty well. What does one do in this case? I know I can pass Airespace attributes with ACS, but I don't see anything that will minimize bandwidth unless I'm just not understanding the QoS tagging.

I am using webauth, but where does the role information go into the radius server, specifically ACS? In the document it states how to install the airspace vsa's. In ACS 4.2 I already have the airspace vsa's available i.e. airspace-qos-level. Is this the attribute that is needed to send the Role inforamtion? If not, can you please provide this attribute? That's all I'm looking for is as to what attribute is needed by the controller to receive the role information. from a per-user level or whatever. I do have the vsa's working since my original post and having upgraded the controller software (before it would stop sending traffic) so I can now pass the airspace-qos-level if this is the right attribute, but the most important thing about this attribute is that I only have Bronze to Uranium listed in ACS. If this is the attribute to send role information? How do I add more to this list as it is a drop down box not a text box where I can put in my own information.

Safe to expose samba fileserver publicly, or access through VPN?

I have a Mavericks server running filesharing and VPN services through OSX server 3.2.2. My users connect to the VPN from the internet, then access the fileserver from within the private network. Recently, some changes to the network broke the VPN for windows clients. But, if I open ports TCP 139 (SMB) and TCP 548 (AFP) windows users can still access the filerserver (bypassing the VPN).
Is it safe to bypass the VPN and expose the fileserver directly? I've been able to find some information on security issues in samba, but it all seems pretty dated.

This isn't even a discussion, locally. VPN. Any other way just invites the riffraff to poke at the open ports, and even if there's no exposed passwords and no weak passwords, you're still going to get piles of log chatter as they poke and prod, and you're still potentially open to the discovery of a vulnerability in the protocol.
L2TP/IPSec is reasonably secure, with either two-factor or some decently-gonzo settings. Traffic is also encrypted.
AFP data traffic was not encrypted, when last I checked. The contents of the served files can be exposed to anyone with a privileged network position.
Local preference and local recommendations: No open ports. None. Not unless there's an absolute need for specific ports to be open, such as a public-facing web server. Everything (else) is VPN, usually into the firewall (with an integrated VPN server) or into a dedicated VPN server. If you need public-facing ports open, put the host in a DMZ, and don't let any unintended traffic off that host either back to the Internet, or into your internal network.

App not working properly when access over vpn

hi,
Strange behavior of application when access through vpn. The application keeps on reloading endlessly. And other application renders completely but when the tab is clicked it will reload the whole page displaying the same tab. Is ADF has an issue when access over proxy?
Both application is build using ADF 11g and is implemented through regions.
Thanks in advance.

I think there something to do with PPR or calling the region or am I missing something? The page that keeps reloading has taskflow with activation is immediate but the refresh is set to IfNeeded. Then the page with tabs, the content of the tab are taskflows as well.
Thanks in advance.

Simplified guest access

Reading the Cisco Guest access deployment senarios again becomes a little unclear.
Lets assume 3 scenarios.
1 Small office
4 access points
1 2106 controller
This will give simpl guest access terminate the guest vlan in an adsl router and a web auth page and use the wlc to manage guest client access
2 Multiple small offices
2 offices each with 2 APs
2106 in each och office
The guest access woul have to be terminatin a 4402 12 as I cant use 3rd 2106 to terminate and originate the guest access? The 2106s locally will pass the guest access through.
3 Large enterprise.
5 4404 controllers
Would I simply use a 4402 to terminate and distribute the guest acccess as a central guest database.
I have deliberately not mentioned DMZ as to simp[lify the scenarios.
Thanks

First look at the traffic flow. If you have a decent conection back to the central location and this is the only internet connection, then tunneling traffic back via local or h-reap would be the best bet. If the offices have thier own internet dsl, adsl, etc, then maybe sending the traffic out at the local sites would be your best choice. It also goes hand in hand with how you will desing the wlan for their internal users and devices not including guest. You can design this many ways, but it will come down to if you place wlc's in each location vs. centralized deployment.

No guest access for Windows clients

Since installing the 10.4.11 OS X Server update, Windows clients can no longer browse the list of shares. Guest access is allowed in the Windows service, and one of the shares does have Guest access enabled. I went so far as to allow R+W for the unknown and unprivileged groups.
The logs show the windows user account failing authentication, which shouldn't even be necessary since Guest access should give them explicit access anyway. The Windows client gets prompted for a user name and password, which does authenticate properly if an actual account is entered. For some reason, this client's IT department is adamant about allowing guest access. Any clues?

Hi,
I know it is a common issue, but the answer you link to is very old and for Windows NT4 and Windows 2000.
I should be possible to enable NAT on the VPN server as described here:
http://technet.microsoft.com/en-us/library/dd458971.aspx
But I cannot get it to Work.
Thomas Forsmark Soerensen

User cannot connect through VPN (Windows 2008 R2)

Hello,
TechNet has been a major help for some resent server and network problems our office has been having.
There is one ongoing issue that no matter how much I try to fix, it wants to be stubborn and refuse to work properly.
We have a user who has the necessary permissions to VPN using our router's IP address. Just recently, she found that she was unable to VPN. This was the beginning of our technical issues as after rebooting the router, our main server, and our QuickBooks
server, we lost internet and access to the main server. Those issues have been resolved. However, the user is still unable to VPN.
I have looked up every error code that has been presented when trying to connect to VPN (807 and 800 are the most frequent), and unfortunately, none of the solutions suggested worked. These errors occur when connecting through the WAN Miniport. I am trying
to find out if I am overlooking something.
What has been tried:
Router rebooted
Created new user in Active Directory
Deleting VPN Users group and readding to user
Changing tunneling protocol to L2TP instead of PPTP. Then, created a rule in Windows Advanced Firewall to allow UDP 1701.
Creating new VPN connection.
Confirmed with ISP that there are no issues with router
I am not extremely familiar with Windows 2008 R2 and every fix I see online is extremely in depth with not much walkthrough information.
I greatly appreciate any support anyone might be able to provide.
Thank you!

Hi ,
According to your description, my understanding is that the client can’t access the VPN with error code 800 and 807.
I have noticed that it failed to ping the VPN server form the client. The VPN server should be connected from the client without VPN connection established. I suggest you to turn off firewall temporarily on both sides of client and VPN server, then
try to ping the IP address of the VPN server’s interface which is connected to extranet network.
If ping failed, there might be network connectivity problem. If ping successfully, check to see if the port is open for turning traffic. Detailed troubleshooting steps you may reference the link below:
I received error 800, which says the VPN server is unreachable:
http://technet.microsoft.com/en-us/library/cc772616(WS.10).aspx#BKMK_1
Troubleshooting commom VPN related errors:
http://blogs.technet.com/b/rrasblog/archive/2009/08/12/troubleshooting-common-vpn-related-errors.aspx
If this problem still exits, does other user successfully access the VPN? Or just specified device can’t access? Would you simply describe the deployment of the VPN, such TCP/IP settings, VPN type.
Best Regards,
Eve Wang

Can't connect to work server (windows) on MacBook Pro through VPN - via router

Due to the nature of my job now, I am working remotely.
The IT department hooked me up with a MacBook Pro that connects to our work server, which I know is Windows-based, via a VPN. The VPN connects just fine; however, when I go to connect to the server—it doesn't find it. It gives me:
The server “dc03” may not exist or it is unavailable at this time. Check the server name or IP address, check your network connection, and then try again.
Interestingly enough, the first time I used it (at Starbucks, then McDonald's) it worked, but at home it wouldn't. We isolated the issue to the router, since I could do it when plugged in, but no one could figure out what kind of settings were different or weird. I went to the store and bought 2 other routers. One worked, the Linksys, but the Belkin did. WHAT? So the cheaper one worked? This was the easiest solution, because still don't know the bottom line: why?
Now, a local spot in town that I frequent—one that used to allow me to connect to my work server—changed routers (the "newest, fastest" AVIS). So now, I cannot connect and get that same message.
My IT guys are stumped. I don't personally know enough about this side of technology to be of any use.
Does anyone have any idea what's going on?

What is the make & model of the new wireless router that you ISP has provided you? Are you able to administer it if needed?
For the MacBook Pro, try the following, in order, until (hopefully) resolved:
1a. Delete Preferred Network(s)
System Preferences > Network > Wi-Fi > Advanced > Wi-Fi tab
Under "Preferred Networks," delete the network(s) you regularly use from the list.
1b. Delete AirPort Keychain Entries
Launch the "Keychain Access" application located in Applications/Utilties.
In the windows on the left side: Select login for Keychains and "All Items" for Category.
Click on the "Kind" filter at the top, and look for any "AirPort network password" entries...and delete them.
1c. Add Preferred Network(s)
System Preferences > Network > Wi-Fi > Advanced > Wi-Fi tab
Add the preferred network(s) using the "+" button.
Restart or log out then back in.
2. Move System Configuration Files
(Note: You will have to reestablish your network connections settings.)
Go to /Library/Preferences
Move the SystemConfiguration folder to the desktop.
Restart your Mac. (Note: OS X will rebuild the files that are now sitting on your desktop. If this doesn't resolve the issue, you can move the folder back to it's original location.)

I am sharing my macbook pro over a network with windows 7, however through windows 7 I can access my whole computer instead of just the shared files!

I am sharing my macbook pro over a network with windows 7, however through windows 7 I can access my whole computer instead of just the shared files!

Hi Sig,
The issue is that i only want the shared folders to be accessed through windows 7.
Whats the point otherwise to have shared folders?
thanks..

Advice regarding house guest internet access through Airport Express

I would like to set up trouble-free (on my part and my house guests) access to the internet. Any thoughts or suggestions? It seems to me that if folks may have reasonable access to cable/satellite TV and telephone, or what have you, it is also reasonable to make available to them the internet. What is the best way to go about doing this? I have an existing home wireless system using Airport Express (may also work in a Netgear WG614 wireless router). Mostly, I am concerned with the technical aspects but would also like to hear from anyone regarding the legal/social ramifications. Any such solutions must take into account both Windows and Mac environments. Thanks.
17 in. iMac G5 ALS (1.8 GHz) Mac OS X (10.4.5) iMac G3 DV (400 MHz), Airport Express, 3rd gen iPod

Meme,
A nice touch, and one that made me choose one small hotel over another when I used to travel a lot.
I can't give a complete solution, but I can give you bits of info, which others will also do.
One thing that probably is a must, is to set Wireless Isolation. That is that although all the wireless clients can see the internet, they can't see each other. I'm not sure that the AE supports this, I honestly thought it did, but now I can't find it. The Netgear will support it.
Wireless encryption will be a must too, you may even want to make it a "closed network", so that the network does not advertise it's presence. Clients wishing to connect must specify ("key in") the network name and connect. That may be just a little too difficult for some business travellers. Back to wireless encryption, some may say to use some ultra-modern hi-tech secure encryption algorithm to be really safe, but these are enormous long passwords that your clients will have to key. Those with older computers may not support the latest encryption methods. Some may recommend WPA, I'd say WEP (more compatability) and a simple (non-dictionary) password, like "@pple" or "@irPortXPr3ss" or any easy to communicate word(s) with a few letters replaced by vowels or (printable) symbols. It is up to you how often you change the password.

Guest LDOM disk access through multiple IO domains

Hi All,
I am working on a configuration, wherein the boot disk to the Guest LDOM is being provided through an image file hosted on a VxVM diskgroup (vmdg1). The configuration has another copy of the same image file being provided through another VxVM diskgroup (vmdg2)l through another virtual disk service.
let me clear the configuration a little more in detail
A T-5240 server having 2 IO domains configured
Primary (Control domain + IO domain + Service domain) configuration
A VxVM diskgrop (vmdg1) having a boot image file
Secondary (IO domain + Service domain) configuration
A VxVM diskgroup (vmdg2) having a copy of the boot image file
these devices are exported through their respective virtual disk services with the same mpgroup name to a guest LDOM. The vdsisk is then assigned to the guest ldom which is using the volume through the primary service.
When the guest LDOM is started it starts with the disk export through the Primary domain. All writes happen fine. When the VxVM diskgroup is deported from the Primary the Guest LDOM still remains online as starts using the disk image path through the secondary domain.
I then bring the VxVM diskgroup and the mounts back online on the Primary domain and deport the diskgroup from the secondary domain to see if it failsback to the image through the Primary domain. The Guest LDOM now is in a hung state and does not allow access through the local console or through network logins.
Has anyone see such a problem? Also is it recommended to use disk based image as a backend device in mpgroups through "ldm add-vdsdev" ?
TIA,
Sudhir

As far as I know then only way to "re-balance" the I/O across the domains is to unbind/bind the guests. Not a great answer, but this could be done as part of the guests patching cycle.
I think there is an RFE to provide MPxIO-like features to guests.

I cannot access Content Library in iMovie - Content Library doesn't show on the iMovie screen and is greyed out when accessed through "windows" tab at the top. Also unable to update the projects/events (a suggested solution for a similar question).

I cannot access Content Library in iMovie - Content Library doesn't show on the iMovie screen and is greyed out when accessed through "windows" tab at the top. Also unable to update the projects/events (a suggested solution for a similar question). I haven't had this issue before, I have always used the content library on the screen but haven't used this for about a month. How can I make the Content Library available?

Thanks so much! I am backing up the entire computer now with an external hard drive - this should be fine right? And surely if I am backing up the whole computer these projects/videos will be backed up too? I wasn't sure how to do this any other way and I am clearly not great with tech issues. Once this is done and I am sure my projects/videos are safe I will do the delete and reinstall bit. Thanks for taking the time to help

Guest Access for Windows Services

Hi,
I need to access my shared files through a "Guest" access, without a password. I understand it is not a safe way to work, but I do not have a choice : I am using a device named mediagate, which is supposed to be able to read the shared files on my computer, and this device can only connect to my computer using a "Guest" access.
I understand OS X server could do that (refering to http://docs.info.apple.com/article.html?path=ServerAdmin/10.4/en/c4wn14.html), but I am using OS X tiger 10.4.4 workstation. Is there anyway for me to do that ? Otherwise, the mediagate I bough is totally useless...
Thanks for your help !
iMac G5 Mac OS X (10.4.4)

Hi Marco,
This behavior is a limitation that we are looking into providing a solution in a future update.
Thanks,
Robert
Robert Bruckner http://blogs.msdn.com/robertbruckner
This posting is provided "AS IS" with no warranties, and confers no rights.

Windows 7 and Wireless Guest Access

Dear All, one of my Customers uses 4400 based Guest Access Solution with L3 Webauth. With XP everything works Fine. Since the Migration to Windows 7, Guest Access is not working correctly. It takes a long time to get an IP Address via DHCP, sometimes it idles to 169.xxx. If an IP Address is provided, the Redirect will not work. Has anybody seen similar Problems with Win7 or a Solution?
Regards, Michael

Found a solution for the "Boot Camp x64 is unsupported on this computer model" message. Here is the link: http://www.techulous.com/hardware/how-to-apple-boot-camp-64-bit-for-windows-7-on -unsupported-macs.html
Everything works ( for ) now. Yay!

How to access the SAP Server Console? Through VPN

How to access the SAP Server Console? Through VPN
Sudhakar

Hi,
You need to contact your system admin as they will enable the port in ur system so that u can access client servers.It should also be allowed from client side also i mean access.
You will connect thru weblink with user name and pw and SAP with logon details.
Thanks
Suresh

KVM Windows Guest access through VPN

Similar Messages

Maybe you are looking for