NAT Service not Working

My ISP is one big huge failure, however, because it is the only game in town, we have no choice but to subscribe to their overly-expensive poor service. Well, that is no more. I recently bought a WiMax USB dongle, and it works on my iMac without any problems. However, I would like to setup my SL server as a gateway for my home network. For some reason, the dongle doesn't play well on SL Server. Here are the problems I am having:
1. In order to get the dongle to connect to my WiMax service, I have disable the ethernet connection (en1), start the dongle's utility software and let it connect, then re-enable my en1 connection. This would be ok, however, I have to manually put in the network information for en1 every time I do this.
2. I have DHCP, DNS, Firewall, and NAT services enabled. All but the NAT services work. SL Server assigns IP addresses to all clients; I can perform reverse lookups on my DNS service; and the firewall...well it is just being a firewall. I can't really check it because of problems I am having with NAT. Speaking of NAT, I assigned the WiMax dongle to the WAN interface, en1 as the LAN interface, and started the service. For about five minutes, I was in blissful heaven thinking about the day I would walk in my ISP's office and tell them what they could do with their crappy service. But my natural high suddenly ended when the NAT service stopped. I tried starting it, and the green light would come on for about .5 seconds and then go out. The service just won't start. I have reinstalled SL and performed all the updates three times, and I get the same results. I have tried the Gateway Setup Assistant, but NAT will not start.
The only additional information I can provide is that because the dongle manufacturer has not written 64 bit drivers for OS X SL or SL Server, I am running my SL Server in 32 bit mode.
I am prepared to return the dongle and get a WiMax router (switch the service from my dongle to the router) and a USB Ethernet adapter for my server. The router will bridge its connection to my SL server. However, I want to make sure that the problems I am experiencing can be fixed through helpful advice from the Apple community; or are related to the dongle and its driver in which case the problems will go away if I get the WiMax modem.
Any and all help is greatly appreciated.

I can confirm this behavior with my Snow Leopard Server 10.6.8. Booting into 32bit mode, NAT won't run. Booting into 64bit mode, everything works as expected.
An interesting point: When running in 32bit mode, the natd program works perfectly when run manually. It just doesn't work with any of the Apple GUI tools that control system services/auto-running/etc.
CraigBB

Similar Messages

  • Lion Server DNS service not working for locally created zones. Caching working fine.

    OS Lion Server DNS service not working for local zones. Was fine under Snow leopard server but Lion server upgrade has severely broken my DNS and web sites. Zones look fine under Server Admin but keep getting "query failed (SERVFAIL) for xxxx at /SourceCache/bind9/bind9-42/bind9/bin/named/query.c:3921" in the logs. BTW - Server Admin cant seem to see the log file either.
    Surely someone actually tested that DNS still worked on Lion?

    I upgraded from Snow Leopard Server to Lion Server on day 01.  I hit the same issue where, after the upgrade, my Lion Server stopped serving names for my private local domain.
    I finally took a few minutes to figure out what was wrong.  After turning on debug logging and looking through the logs, I found my particular issue, now resolved.
    The issue I had was, when the domain initially was setup when I installed Snow Leopard Server, for some reason it created a zone just for the server (in my case, something like zone "s-01.mydomain.priv"), and a separate zone for all the other machines (zone "mydomain.priv", containing all the private IPs for my local domain).  I never messed with it because it worked, but generally I would have put all of them in the same zone.
    My zone "mydomain.priv" had a nameserver and mail exchanger entry for my server, s-01.mydomain.priv.  I could see this in the Server Admin app on the DNS bubble, Zones tab, mydomain.priv selected, and the General Info panel.  This was fine in Snow Leopard.  This was failing the zone load in the updated bind for Lion Server, though.  The issue was that the "mydomain.priv" zone was referencing the s-01.mydomain.priv server, which was not defined in the "mydomain.priv" zone but rather in the "s-01.mydomain.priv" zone.
    My fix:
    1. In Server Admin, add the server to the zone "mydomain.priv".  I put an A record (Add Machine) in the "mydomain.priv" zone for my server named s-01.mydomain.priv.
    2. shut down DNS on the OS X Lion Server (hit the Stop DNS button on Server Admin).
    3. edit /etc/named.conf by hand, removing the specialized zones that contianed just the server.  In this case, it would be the section titled 'zone "s-01.mydomain.priv"' and the section titled 'zone "3.10.1.10.in-addr.arpa"'.  Your in-addr.arpa zone name will change based on whatever your server IP address was.  My internal one happened to have s-01.mydomain.priv mapped to 10.1.10.3.
    4. Once the specialized zones for just the server were removed, I started the DNS up again.  Instead of serving four zones as it had in OS X Snow Leopard Server, it now servers two zones.  And, now, it is resolving my local machines for the mydomain.priv zone.
    YMMV.  I did note that it wasn't totally necessary to do step 3, but I never really understood the need for the specialized domain, and keeping it around would have a copy of data that would just confuse things.
    Hope that helps.  That's been the only hiccup I've noticed updating to OS X Lion Server thus far.

  • "no serializer is registered..." error with a web service not working

    I'm using JDeveloper 10.1.3
    EJB 3.0
    I'm having issues with the web service not working after I create a client for it. The web service works fine up until I generate the proxy on the other side.
    ERROR An error occurred for port: {http://buslogic/}MyWebService1SoapHttpPort: no serializer is registered for (class buslogic.runtime.....
    I saved the file before I added the proxy and the wsdl looks the same between the working one and the non working one. I can not pin point the when the change to the web service is occuring. It seemed to work once all the way up until I had a ADF page trying to retrieve data, another time it failed when the proxy was created.
    I can get the version that I saved to work immediately after the version that does not fails.
    Any help would be greatly appreciated,
    Dan

    I'm using JDeveloper 10.1.3
    EJB 3.0
    I'm having issues with the web service not working after I create a client for it. The web service works fine up until I generate the proxy on the other side.
    ERROR An error occurred for port: {http://buslogic/}MyWebService1SoapHttpPort: no serializer is registered for (class buslogic.runtime.....
    I saved the file before I added the proxy and the wsdl looks the same between the working one and the non working one. I can not pin point the when the change to the web service is occuring. It seemed to work once all the way up until I had a ADF page trying to retrieve data, another time it failed when the proxy was created.
    I can get the version that I saved to work immediately after the version that does not fails.
    Any help would be greatly appreciated,
    Dan

  • [svn] 4226: Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.

    Revision: 4226<br />Author:   [email protected]<br />Date:     2008-12-03 15:25:17 -0800 (Wed, 03 Dec 2008)<br /><br />Log Message:<br />-----------<br />Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working. <br />QA: Yes<br />Doc: No<br />Checkintests Pass: Yes<br /><br />Details:<br />* Make sure the <reliable/> option is treated as a nested element rather than an attribute of its parent <network> element.<br /><br />Ticket Links:<br />------------<br />    http://bugs.adobe.com/jira/browse/LCDS-517<br /><br />Modified Paths:<br />--------------<br />    blazeds/trunk/modules/core/src/flex/messaging/Destination.java

    Revision: 4226<br />Author:   [email protected]<br />Date:     2008-12-03 15:25:17 -0800 (Wed, 03 Dec 2008)<br /><br />Log Message:<br />-----------<br />Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working. <br />QA: Yes<br />Doc: No<br />Checkintests Pass: Yes<br /><br />Details:<br />* Make sure the <reliable/> option is treated as a nested element rather than an attribute of its parent <network> element.<br /><br />Ticket Links:<br />------------<br />    http://bugs.adobe.com/jira/browse/LCDS-517<br /><br />Modified Paths:<br />--------------<br />    blazeds/trunk/modules/core/src/flex/messaging/Destination.java

  • [svn] 4195: Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.

    Revision: 4195
    Author: [email protected]
    Date: 2008-11-26 13:08:23 -0800 (Wed, 26 Nov 2008)
    Log Message:
    Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.
    QA: Yes
    Doc: No
    Checkintests Pass: Yes
    Ticket Links:
    http://bugs.adobe.com/jira/browse/LCDS-517
    Modified Paths:
    flex/sdk/trunk/frameworks/projects/rpc/src/mx/messaging/config/ServerConfig.as

    Revision: 4195
    Author: [email protected]
    Date: 2008-11-26 13:08:23 -0800 (Wed, 26 Nov 2008)
    Log Message:
    Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.
    QA: Yes
    Doc: No
    Checkintests Pass: Yes
    Ticket Links:
    http://bugs.adobe.com/jira/browse/LCDS-517
    Modified Paths:
    flex/sdk/trunk/frameworks/projects/rpc/src/mx/messaging/config/ServerConfig.as

  • [svn] 4193: Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.

    Revision: 4193
    Author: [email protected]
    Date: 2008-11-26 11:40:05 -0800 (Wed, 26 Nov 2008)
    Log Message:
    Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.
    QA: Yes
    Doc: No
    Checkintests Pass: Yes
    Details:
    * Foundational update to include destination config in what we collect for runtime config exchange with new clients for destinations with network/reliable=true (LCDS only).
    * Also typo in comment in AbstractConnectionAwareSession fixed.
    Ticket Links:
    http://bugs.adobe.com/jira/browse/LCDS-517
    Modified Paths:
    blazeds/trunk/modules/core/src/flex/messaging/AbstractConnectionAwareSession.java
    blazeds/trunk/modules/core/src/flex/messaging/Destination.java
    blazeds/trunk/modules/core/src/flex/messaging/services/AbstractService.java

    Revision: 4193
    Author: [email protected]
    Date: 2008-11-26 11:40:05 -0800 (Wed, 26 Nov 2008)
    Log Message:
    Bug: LCDS-517 - Reliable messaging destinations created using runtime configuration (bootstrap service) not working.
    QA: Yes
    Doc: No
    Checkintests Pass: Yes
    Details:
    * Foundational update to include destination config in what we collect for runtime config exchange with new clients for destinations with network/reliable=true (LCDS only).
    * Also typo in comment in AbstractConnectionAwareSession fixed.
    Ticket Links:
    http://bugs.adobe.com/jira/browse/LCDS-517
    Modified Paths:
    blazeds/trunk/modules/core/src/flex/messaging/AbstractConnectionAwareSession.java
    blazeds/trunk/modules/core/src/flex/messaging/Destination.java
    blazeds/trunk/modules/core/src/flex/messaging/services/AbstractService.java

  • Cisco 871 NAT configuration not working

    The problem is that NAT is not working for the "internal" network.
    If i own the ip 10.0.0.15 for example and i try to reach x.x.x.x:65009 i will not work.
    what's the problem?
    here is the configuration:
    interface FastEthernet0
    interface FastEthernet1
    interface FastEthernet2
    interface FastEthernet3
    interface FastEthernet4
    description $FW_OUTSIDE$$ES_WAN$$ETH-WAN$
    ip address x.x.x.x 255.255.255.192
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip nat outside
    ip virtual-reassembly
    ip route-cache flow
    duplex auto
    speed auto
    interface Vlan1
    ip address 10.0.0.1 255.255.255.192
    ip access-group 2 in
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip nat inside
    ip virtual-reassembly
    ip route-cache flow
    ip tcp adjust-mss 1452
    ip nat inside source list 1 interface FastEthernet4 overload
    ip nat inside source static tcp 10.0.0.12 60022 x.x.x.x 65000 extendable
    ip nat inside source static tcp 10.0.0.12 80 x.x.x.x 65001 extendable
    ip nat inside source static tcp 10.0.0.12 21 x.x.x.x 65002 extendable
    ip nat inside source static tcp 10.0.0.12 389 x.x.x.x 65003 extendable
    ip nat inside source static tcp 10.0.0.12 3306 x.x.x.x 65004 extendable
    ip nat inside source static tcp 10.0.0.12 10000 x.x.x.x 65005 extendable
    ip nat inside source static tcp 10.0.0.12 443 x.x.x.x 65007 extendable
    ip nat inside source static tcp 10.0.0.21 80 x.x.x.x 65009 extendable
    ip nat inside source static tcp 10.0.0.21 22 x.x.x.x 65010 extendable
    ip nat inside source static tcp 10.0.0.12 8080 x.x.x.x 65011 extendable
    ip nat inside source static tcp 10.0.0.21 21 x.x.x.x 65012 extendable
    ip nat inside source static tcp 10.0.0.21 3306 x.x.x.x 65013 extendable
    logging trap debugging
    access-list 1 remark SDM_ACL Category=2
    access-list 1 permit 10.0.0.0 0.0.0.63
    access-list 2 deny 10.0.0.8
    access-list 2 deny 10.0.0.2
    access-list 2 deny 10.0.0.3
    access-list 2 deny 10.0.0.6
    access-list 2 deny 10.0.0.7
    access-list 2 deny 10.0.0.4
    access-list 2 deny 10.0.0.5
    access-list 2 permit 0.0.0.0 10.0.0.63
    Posted by WebUser ??????? ???

    No, the ranges are not the same. That is, they share the same B-class stats, but no C-class.
    Incidentally, the extendable parameter is present in this ios version. When I change the parameter interface dialer0 to the ip address associated with the interface, extendable is addedd automatically. No joy however.
    Today I'm going to try and downgrade the ios, another router with 12.4(4)T1 does have functional port mappings....

  • I experience issue with my Verizon iPhone5s cellular service not working on 3G.

    I'm experiencing issue with my Verizon iPhone5s cellular service not working on 3G but LTE works great. I tried resetting network setting, new SIM card, reset iPhone to new too. I'm have the latest carrier code of 16.0. Iphone firmware 7.1.2.
    I started experiencing this when verizon started advertising XLTE.
    It is very frustrating when internet does not work when I'm in 3G area. Phone calls does work though. Signal is good too.
    Thank you in advance.

    I would agree w you but this only happens on Iphone5S.
    Iphone5 works fine.  I tested this with other Iphone 5 and 5s.
    To test this, go to setting/celluar/turn off "Enable LTE"

  • NAT is not working for VRF partially

    Hello!
    I have a diagram like this:
    VRF_A  and VRF_B have overlapping addressing plans from series 192.168.x.x.
    As routing protocol in both of VRFs adopted RIP (I tried all, but effect much the same).
    The closest to PE1 network is 172.16.0.0/24.
    PE1:
    ip vrf VRF_A rd 65001:1 route-target export 65001:1 route-target import 65001:1ip vrf VRF_B rd 65001:2 route-target export 65001:2 route-target import 65001:2ip nat inside source list 10 interface FastEthernet0/0 vrf VRF_A overloadip nat inside source list 10 interface FastEthernet0/0 vrf VRF_B overloadip route vrf VRF_A 0.0.0.0 0.0.0.0 FastEthernet0/0 172.16.0.1 globalip route vrf VRF_B 0.0.0.0 0.0.0.0 FastEthernet0/0 172.16.0.1 globalinterface FastEthernet0/0 ip address 172.16.0.24 255.255.255.0 ip nat outside duplex fullinterface FastEthernet1/0 ip vrf forwarding VRF_A ip address 192.168.0.2 255.255.255.0 ip nat inside duplex full
    interface FastEthernet4/0 ip vrf forwarding VRF_B ip address 192.168.0.2 255.255.255.0 ip nat inside duplex full
    When I try ti ping 172.16.0.1 from CE11, CE21 and from VRF_A and VRF_B on PE1 - all if fine! NAT is performed and ping is OK.
    But when I tried to ping from others (PE2 and CE21 and CE22) NAT is not performed, I see 192.168.x.x at Internet Router and ping is failled.
    I'm in stupor. What could it be??? And how to avoid this situation? Are there "exits"?
    I forgot to mention that there is a full connectivity inside both of VRFs. Routing protocols and redistribution work fine.
    Kind regard,
    Ellad

    It's wrong:
    PE1interface toward P1 ip nat insideinterface toward P2 ip nat inside
    Here is PE1:Current configuration : 2829 bytes
    version 12.3
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname PE1
    boot-start-marker
    boot-end-marker
    no aaa new-model
    ip subnet-zero
    ip vrf VRF_A
    rd 65001:1
    route-target export 65001:1
    route-target import 65001:1
    ip vrf VRF_B
    rd 65001:2
    route-target export 65001:2
    route-target import 65001:2
    ip cef
    ip audit po max-events 100
    mpls label protocol ldp
    interface Loopback0
    ip address 10.0.2.1 255.255.255.255
    interface FastEthernet0/0
    ip address 172.16.0.24 255.255.255.0
    ip nat outside
    duplex full
    interface FastEthernet1/0
    ip vrf forwarding VRF_A
    ip address 192.168.0.2 255.255.255.0
    ip nat inside
    duplex full
    interface FastEthernet2/0 ip address 10.0.23.1 255.255.255.0
    duplex full
    tag-switching mtu 1512
    tag-switching ip
    interface FastEthernet3/0
    ip address 10.0.24.1 255.255.255.0
    duplex full
    tag-switching mtu 1512
    tag-switching ip
    interface FastEthernet4/0
    ip vrf forwarding VRF_B
    ip address 192.168.0.2 255.255.255.0
    ip nat inside
    duplex full
    router ospf 1
    log-adjacency-changes
    network 10.0.0.0 0.255.255.255 area 0
    router rip
    version 2
    no auto-summary
    address-family ipv4 vrf VRF_B
    redistribute bgp 65001 metric 1
    network 192.168.0.0
    no auto-summary
    exit-address-family
    router bgp 65001
    no bgp default ipv4-unicast
    bgp log-neighbor-changes
    neighbor 10.0.5.1 remote-as 65001
    neighbor 10.0.5.1 update-source Loopback0
    address-family vpnv4
    neighbor 10.0.5.1 activate
    neighbor 10.0.5.1 next-hop-self
    neighbor 10.0.5.1 send-community both
    exit-address-family
    address-family ipv4 vrf VRF_B
    redistribute static
    redistribute rip
    no auto-summary
    no synchronization
    exit-address-family
    address-family ipv4 vrf VRF_A
    no auto-summary
    no synchronization
    exit-address-family
    ip nat inside source list 10 interface FastEthernet0/0 vrf VRF_A overload
    ip nat inside source list 10 interface FastEthernet0/0 vrf VRF_B overload
    ip classless
    ip route vrf VRF_A 0.0.0.0 0.0.0.0 FastEthernet0/0 172.16.0.1 global
    ip route vrf VRF_B 0.0.0.0 0.0.0.0 FastEthernet0/0 172.16.0.1 global
    no ip http server
    no ip http secure-server
    ip extcommunity-list 1 permit soo 65002:901
    access-list 1 deny   10.1.8.1
    access-list 1 deny   10.0.8.1
                              access-list 1 deny   10.1.2.1
    access-list 1 deny   10.0.2.1
    access-list 1 permit any
    access-list 10 permit 192.168.0.0 0.0.255.255
    access-list 10 permit 192.168.1.0 0.0.0.255
    route-map rm-soo permit 10
    set extcommunity soo 65002:901!
    route-map rm-soo-action deny 10
    match extcommunity 1
    route-map rm-soo-action permit 20
    match ip address 1
    gatekeeper
    shutdown
    line con 0
    exec-timeout 144 0
    logging synchronous
    stopbits 1
    line aux 0
    stopbits 1
    line vty 0 4
    login
    end
    1.0.5.1 is Loopback0 of P3. It's a route-reflector for all PEs. I study.
    And all what you see above - Dynamipses. Internet router - real Ubuntu server.

  • Why does this NAT configuration not work ?

    interface FastEthernet0/0
    description To Cable Modem
    ip address dhcp
    ip nat outside
    interface FastEthernet0/1
    description To LAN
    ip address 192.168.1.254 255.255.255.0
    ip nat inside
    ip nat pool ovrld 72.186.194.72 72.186.194.72 netmask 255.255.192.0
    ip nat inside source list NATOUT pool ovrld overload
    ip access-list standard NATOUT
    permit 192.168.1.0 0.0.0.255 log
    Show ip nat translations shows no translations.
    The Stats
    Dynamic mappings:
    -- Inside Source
    [Id: 3] access-list NATOUT pool ovrld refcount 0
    pool ovrld: netmask 255.255.192.0
            start 72.186.194.72 end 72.186.194.72
            type generic, total addresses 1, allocated 0 (0%), misses 0
    Queued Packets: 0
    I can get one device to translate with a static but the dynamic does not work.

    Hey Rolf. I used the commands like you said but it will not translate anything unless the entry is static.
    ip nat inside source static 192.168.1.2 72.186.*.72      is what im using to get my main node translated while i figure out this problem. The configuration worked fine until I upgraded IOS from 12.3 to 12.4.  Thats when it quit translating. My config follows. Keep in ming that when i tried your commands I removed the static entry for 192.168.1.2
    Building configuration...
    [OK]
    HEADEND(config)#do sh run
    Building configuration...
    Current configuration : 3267 bytes
    version 12.4
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname HEADEND
    boot-start-marker
    boot-end-marker
    enable secret 5 $1$vk5M$eGiHBbhKZrvPdNz0aXhve1
    no aaa new-model
    memory-size iomem 15
    no network-clock-participate slot 1
    no network-clock-participate wic 0
    ip cef
    no ip dhcp use vrf connected
    ip dhcp excluded-address 192.168.1.1 192.168.1.100
    ip dhcp excluded-address 192.168.1.254
    ip dhcp excluded-address 192.168.1.250 192.168.1.254
    ip dhcp pool DEESPOOL
       network 192.168.1.0 255.255.255.0
       dns-server 65.32.5.111 65.32.5.112
       domain-name dbtech.netpros.com
       default-router 192.168.1.254
    crypto pki trustpoint TP-self-signed-3843280569
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-3843280569
    revocation-check none
    rsakeypair TP-self-signed-3843280569
    crypto pki certificate chain TP-self-signed-3843280569
    certificate self-signed 01
      3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
      31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
      69666963 6174652D 33383433 32383035 3639301E 170D3032 30333031 30333331
      30305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
      4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38343332
      38303536 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
      8100BD0F 1F06509B 67D1C1F4 C9AEFA31 89A8C059 4B17CDE8 95F23275 CFB9AC41
      D784F703 C25B630D A0461FB1 114B3608 B3387518 8F552DD7 41796488 F0C79FC0
      103A2C3F FFE388FE 7970D921 C5F754D1 68A15518 F30F91CC 26884284 5C8C3275
      B06A584D 96D2D5CB 92068B40 C05C8A4E 80E9CCE0 2DE5883F 9EF405BB 89252921
      B03D0203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
      551D1104 1B301982 17484541 44454E44 2E74616D 70616261 792E7272 2E636F6D
      301F0603 551D2304 18301680 14E92E8B 5F671437 6F383CCD 42AD6AE8 4CC47730
      F9301D06 03551D0E 04160414 E92E8B5F 6714376F 383CCD42 AD6AE84C C47730F9
      300D0609 2A864886 F70D0101 04050003 81810055 7BE1410C C73F83F3 26B30B9A
      569ED607 9FDCB6CD 46125795 0A8137EF 930C195B 19E79813 B6DF9B2D 6809F4A2
      A5F0BDB0 03DF87D2 81643EC7 5D619E65 132B1C12 61FB212B DAEB02A2 56E63559
      D931DF1F A3817AAF F21D8EE0 D0741B96 DBF52051 78964876 5AB7E319 5A051455
      4EA9186D 1E9ABC81 00573284 564D6BE7 486681
      quit
    username derek privilege 15 secret 5 $1$rBZD$NqY/hkTEpcZV4rYqwtKAD.
    interface FastEthernet0/0
    description To Cable Modem
    ip address dhcp
    ip nat outside
    duplex auto
    speed auto
    interface FastEthernet0/1
    description To LAN
    ip address 192.168.1.254 255.255.255.0
    ip nat inside
    duplex auto
    speed auto
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
    ip http server
    ip http authentication local
    ip http secure-server
    ip http timeout-policy idle 600 life 86400 requests 10000
    ip nat inside source list NATOUT interface FastEthernet0/0 overload
    ip access-list standard NATOUT
    permit 192.168.1.0 0.0.0.255 log
    control-plane
    line con 0
    line aux 0
    This is very odd it is like dynamic NAT is just broken.

  • NAT Simply not working

    Hello, This is my first time posting on this forum although I am a frequent visitor. I have setup a client with Airport Extreme and NAT is simply not working. I have NAT enabled with the proper ports routing to the proper IP addresses and the traffic does not go through.
    I performed a port scan via nmap on the ports in question and the status of the ports were identified as "filtered". At least the tool recognized a service was running on the specifiec ports but the state was filtered rather than closed. After connecting a linksys router and configured it the same; I ran the same scanning test yielding ports with the status "open".
    Please advise...

    Yes, this button must be checked for me to enter the ports in which to be mapped. Again when I scanned the ports they were in fact recognized that services were running but the port state was "filtered". I believe this is the problem. This normally will allow connections to be spawned from the machine in question and then allow traffic but it doesn't appear to allow a external connect initiation.

  • Web service not working when called remotely

    Hi there!
    I built a simple web service to generate a sequence number to be cosumed by PDF forms.
    It works perfecly when I run PDFs on my machine, using localhost, etc.
    Whem deployed on the client's servers it does not work. The only difference is the client is running LiveCycle on Linux over their inhouse corporate network.
    When the web service is added to forms in LC Designer, the ws structure is built correctly and if called from a web browser the XML response is ok too.
    I've checked LiveCycle log file - there's nothing there, the ws is not even being called.
    Where should I look for error messages or other resources to aid me in identifying the problem?
    Thank you very much for any hints!
    Marcos

    Hi there!
    I built a simple web service to generate a sequence number to be cosumed by PDF forms.
    It works perfecly when I run PDFs on my machine, using localhost, etc.
    Whem deployed on the client's servers it does not work. The only difference is the client is running LiveCycle on Linux over their inhouse corporate network.
    When the web service is added to forms in LC Designer, the ws structure is built correctly and if called from a web browser the XML response is ok too.
    I've checked LiveCycle log file - there's nothing there, the ws is not even being called.
    Where should I look for error messages or other resources to aid me in identifying the problem?
    Thank you very much for any hints!
    Marcos

  • ACS 4.2 services not working

    The server is running with Windows 2003 SP2 and due to some issue it got rebooted. After reboot all services stopped working.
    CSAdmin, CSMon and CSRadius hanged in Starting state and CSLog in Stopping state. When i chaged the startuptype to manual and started these services
    i got " Could not start the CSAdmin service on Local computer. Error 1053 The service did not respond to the start or control request in a timely fashion "
    For CSLog service it gives the error message "The CSLog service on Local Computer started and then stopped. Some service stop automatically if they have
    no work to do, for example, the Performance Logs and Alerts service."
    In the eventviewer it shows "The description for Event ID ( 1 ) in Source ( CiscoAAA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: CSAdmin, Can not initialize SchemeLayer, 74."
    While automatic startup type event viewer shows below error.
    "The description for Event ID ( 1 ) in Source ( acs ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: *** ERROR *** Assertion failed: 103401 (9.0.0.1271)
    Unable to open file (C:\Program Files\CiscoSecure ACS v4.2\CSDB\acs.db) which previously opened successfully; error = 32.The description for Event ID ( 1 ) in Source ( acs ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: *** ERROR *** Assertion failed: 103401 (9.0.0.1271)
    Unable to open file (C:\Program Files\CiscoSecure ACS v4.2\CSDB\acs.db) which previously opened successfully; error = 32."
    Please help me to fix this.
    Thanks

    Since we had no access to ACS windows server. We tried to take backup  from csutil but it gave schemalayer error message.As we have AV  stopped, logs files deleted from the directory, killed the stuck  services from the task manager and restarted the server. If it still not  allowing you to restart the services, most likely you need to take  backup, uninstall the ACS server and reinstall the same version of ACS  followed by restore.
    ~BR
    Jatin Katyal
    **Do rate helpful posts**

  • HTTPS sites and services not working on Snow Leopard 10.6.6

    Hi guys, any assistance would be appreciated as I really don't want to reinstall everything again.
    *Problem description:* After reinstalling Snow Leopard after some issues, I am unable to get any https services working (such as the online back up system Carbonite), nor access any https websites. My Macbook Pro and Windows Laptop on the same network have absolutely no issues with it. +Please also note that this problem is not limited to Safari, any software or browser that uses HTTPS to connect will not work.+
    *Attempted fixes:* Repaired Permission errors, deleted keychain and security preferences, and manually configured the network connection. I have also checked to make sure the date/time are correct and created a new user which has also not helped.
    *Recent changes:* My iMac refused to start up after permission errors so I was forced to reinstall Snow Leopard. I did a fresh install after formatting the drive.
    *Operating system:* Snow Leopard 10.6.6
    *System specs:* 2009 24" iMac

    If I was there with you,
    As a "Best Practice"
    #1- I would recommend that we make a FULL Bootable Backup of where you are, and confirm that it is bootable.
    Then
    As another Best Practice you should always have on the ready any and all INSTALLERS of your programs, along with the corresponding serial numbers,
    I feel that being PROACTIVE is a much place to be, then REACTIVE.
    #2 - I would be inclined to do a overlaying install of Snow Leopard, What happens is it will install a new OS while preserving ALL other info/data, including your Applications, Users.
    Please keep me posted as to your results,
    Randy Mac
    RMACS, LLC

  • Task created to stop and start Health service not working.

    We have multiple servers being grayed out so we created a task to stop and start the health service on SCOM 2007 R2. We have created two tasks one to stop and another task to start. The STOP task works but the START tasks keeps running but there is no result
    as well as when i check in Services.msc it is still stopped. Below are the screen shots .
    Task created to STOP the health service which is running.
    Screen shot of service start task creation which is NOT working
    The same was created for another service windows audio. Which worked for both stop and stop (Created separate tasks).
    We also tried the recycle health service and chche which is also failing.
    Can any one please help. The issue is on both SCOM 2007R2 and 2012 R2 both. Is there any other way to touch the health service.
    We are facing the issue only with Healthservice.

    Hi All,
    Thank you for all your answers.
    @ dktoa -
    You are right we have to concentrate on the servers to determine why do they go grey (all in one site). But before we do that i felt i find a temporary solution. Then go deep investigation to solve the issue.
    @Yan LI: As per the likn provided above you. I overrided the servers but still the health services were not starting or restarting. When i created a custom group and added the servers to that  group in that site and then  enabled the override on Restart
    Health Service for a specific group and pointed towards that group then it worked.
    Thanks All.

Maybe you are looking for

  • Using JNI in Oracle Reports

    Hi. I have some difficulties understanding the Oracle Reports mechanism of JNI. The problem I have is the report job is crashed when I use the imported java class. I am using Oracle Reports 11.1.2.1 on Oracle Linux The scenario of generating report i

  • CFAJAXPROXY problem, need help !

    I created subdomains on my server for development part of my website and the cfajaxproxy is working great on the live version and on my subdomain dev.mydomain.com. I created a new subdomain name dev2.mydomain.com and now the cfajaxproxy isn't working

  • CS4: get file name after saving for web

    Hello, I am saving a file via "save for web" with a specific file name in a specific folder maybe with a specific resolution (width x height) entered directy within this dialog window. Is it possible to get this path and the optionally changed resolu

  • Can't sign in to Desktop App

    I can't ever get to a sign in window when pressing the sign in button on the FormsCentral desktop app. I have no problem signing in to the browser/online version but the desktop app constantly has a timer when pressing either of the sign in buttons.

  • NAC/Clean Access Server no longer intercepting Clients after upgrade

    We recently upgraded our CISCO Clean Access Manager and Server to version 4.8.2 from 4.8.0.  Everything seemed to be working fine but I had a user log in without having the NAC Agent running and they had full access.  We didn't change anything other