Natting of subnet ip address exist over wan

I have branch office having subnet 172.26.48.0/22 one ip from this subnet say 172.26.48.100 assigned toa server . now our erequirement to access this
server from outside mean from internet . tis branch office is coonected throuth leased line to main office. now main office has firewall and loacl subnet
in which server are there and natted to access over internet . we try to make it possible we got ping response of outised also but latency get stuck that
firewall looking to be in hang mode latency around 900 ms if natting is done otherwise 250-300 ms. what can we do , any alternat approach suggested.
dig. attachement is there
Regards,
Rajat

NO i mean we get normal response 250-300 ms HQ to outside link ping responsc of 4.2.2.2 . no branch included . if we nat branch ip mentioned above sudenly latency get high while pinging 4.2.2.2 so firewall does not behave normally in this case.
howwver if we remove natting command from firewall still we get latemcy after rebooting only it comes normal
second it is possible or practical to nat ip of branch office in headquarter firewall. it is suggested by cisco ?
please help
Regards,
Rajat

Similar Messages

Bonjour & disk sharing over WAN -Expert/Genius help required

*Goal: Learn how to connect to my USB hard disk over WAN, share drive with specific people.*
I'm trying to figure out how to remotely access my data on the external drive via connected via USB to my AEBN.
I've spent several hours dinking around with my router, trying to see if I can access the drive over the WAN. I haven't found any manuals, discussions, or K-Base articles that spell it out for me. Below is a list of things I've done. Please indicate whether they are relevant, and if possible what the procedure is. Thanks:
Conditions: I have a static IP address and through the DHCP tab I have assigned all attached machines a static LAN IP address.
*1. Airport>Base Station: Allow configuration over Ethernet WAN port.* I've checked this box and can remotely admin my AEBN from my PC laptop (XP) via the Airport Utility.
*2. Airport>Access Control: MAC Address Access Control.* I didn't know if this would help or hurt anything so I added the MAC address for all ethernet and wireless ports connected to my network and given unlimited or untimed access. +No noticeable difference.+
*3. Internet>DHCP: DHCP Reservations.* As mentioned above in conditions, I've assigned an internal IP address for each device's ethernet and wireless ports, based on the MAC address. +Seems like this and Access Control are redundant except for the time settings.+
*4. Disks>File Sharing:* Enable file sharing is checked, with accounts (configured), "Share disks over ethernet WAN port" is also checked, as is "Advertise disks globally using Bonjour". Not sure what to put in the bottom two fields (Workgroup and WINS Server) so they're blank.
*5. Advanced>Port Mapping:* I've assigned ports to my iMac for gaming and SSH access but I don't think these would effect the USB disk would they?
*6. Advanced>Bonjour:* "Use a wide-area hostname" is checked. My LAN network name is in the Hostname field, for Domain I just typed my WAN IP address, and I put something in for Name and Password.
I'd love any assistance to figure this out.
Lastly, how does Bonjour help over the WAN? Is there some sort of Bonjour application I open log-in, like FTP client software?

Since this discussion has now been resurrected...
The advice provided by chrisfenix will allow you to access the Airport drive from a PC on your private LAN.
The preceding discussion, however, was on the topic of accessing the Airport drive remotely over the internet. To do that, you could still use the advice provided by chrisfenix but substitute the public IP address of the Base Station. To find that out (and answer a question posed earlier in this discussion as well) just go to http://whatismyip.com/ from any computer on your own network.
To answer a question posed by the originator of this discussion - Bonjour is not at all necessary for remote access of the Airport drive. Those people who know how to use this feature will know what it is for and how to implement it - the rest of us can just pretend this feature doesn't exist.

How to access Time Capsule drives behind DSL Router over WAN

Hello everyone,
I have an older Time capsule(with USB Drive) connected to my Hitron CGN3 DSL wireless router over ethernet.
I have turned off the wireless functionality of the TC since the router seems to be much faster on Speedtest.net.
I have my TC and attached USB drive setup to share over WAN but am getting a Double NAT error.
It doesn't seem like I can turn off NAT on my Router.
I can't run the TC in bridge mode because it will remove the Share over WAN option for the TC and Drive.
Is it possible to setup the TC and attached USB drive to the router, without wireless on, so that I can access the TC and drive over the internet?
Any help would be soooooo apreciated!!!
Thanks!
Ian

Does anyone know why my Time Capsule drive sharing needs to be set to disk password?
You can set the TC disks to user accounts.. at least you can on older TC with older airport utility.. but there are consequences which you discovered.
If you set accounts.. you will have major issue with the existing files.. they will all disappear.
The old v5 utility gives you this warning.. which somehow Apple forgot on new version.
It actually makes all the present files disappear for all users. The warning just doesn't go far enough. You do this on a blank TC.. and of course the USB drive is just the same.. you cannot use different settings on that to the TC internal drive. So offload all your files.. create accounts on a bare TC.. load the files back into the correct user profiles.
In the end you probably want more flexibility than a TC is designed for.. buy something designed for remote access.. WD MyCloud.. it is hugely superior.
Also. . . I am trying some File manager apps for my iPhone in hopes that i can connect to the same drive with it. So far no luck with the free versions of FileBrowser Lite or File Explorer Free.
Most are SMB based.. not AFP.. Apple offer only two protocols.. SMB and AFP. But no responsible ISP allows SMB over the internet. The flood of files from hacked windows machines would bring the internet to a grinding halt.
People do get around it.. you can use filebrowser for instance by opening SMB to the outside world on a non-standard port.
See http://www.stratospherix.com/support/gsw_timecapsule.php?page=6remote
But this is incredibly risky.. there is very poor security and it is not a great idea. The AFP security is much better than SMB.
If you want security use something other than TC.. any real NAS that offers VPN access for instance. The cost of a WD MyCloud is very reasonable when you look at the flexibility of the design. But any decent NAS will offer real remote access.. not Apple's limited pretend version.

Multicast server/client over wan

Ok, first of I am kinda new in programming network stuff.
Then I am gonna try to be clear in the things that I am trying to accomplish.
The environement.
I have a machine A that has 2 interfaces :
eth0 Link encap:Ethernet HWaddr 00:0F:20:96:CE:96
inet addr:192.168.1.49 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2328871 errors:0 dropped:0 overruns:0 frame:0
TX packets:355492 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:178361234 (170.0 Mb) TX bytes:34186479 (32.6 Mb)
Interrupt:11
eth2 Link encap:Ethernet HWaddr 00:04:23:45:74:EC
inet addr:192.168.2.2 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:813915 errors:0 dropped:0 overruns:0 frame:0
TX packets:7538202 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:53318289 (50.8 Mb) TX bytes:1092719670 (1042.0 Mb)
Interrupt:15 Base address:0x3000 Memory:f7ee0000-f7f00000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:56496 errors:0 dropped:0 overruns:0 frame:0
TX packets:56496 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:7952617 (7.5 Mb) TX bytes:7952617 (7.5 Mb)
This machine is connected thru a router
The routers connects to a WAN with MULTICAST enabled
then another router to which the second machine is connected
MACHINE B
eth0 Link encap:Ethernet HWaddr 00:0F:20:96:0F:94
inet addr:192.168.1.58 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2322957 errors:0 dropped:0 overruns:0 frame:0
TX packets:363116 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:177550404 (169.3 Mb) TX bytes:33507499 (31.9 Mb)
Interrupt:30
eth2 Link encap:Ethernet HWaddr 00:04:23:45:78:90
inet addr:192.168.3.2 Bcast:192.168.3.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:160838 errors:0 dropped:0 overruns:0 frame:0
TX packets:6781 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:11450177 (10.9 Mb) TX bytes:746369 (728.8 Kb)
Interrupt:28 Base address:0x3000 Memory:f7ee0000-f7f00000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:158 errors:0 dropped:0 overruns:0 frame:0
TX packets:158 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:23916 (23.3 Kb) TX bytes:23916 (23.3 Kb)
The two machine are on different networks.
My goal is to have Machine A send multicast data thru eth2 to be sent in the wan and to be received by Machine B on eth2 too.
Obviously the two machine are on separated networks.
I have tried everything I could but I cannot get machine B to pickup the messages sent by A. It worked fine when on the same LAN but not over WAN.
The multicast address that I use it 239.55.55.80 and the port 4445.
I think I have a problem to link the interface to my app ( I used setInterface and setNetworkinterface but nithing.) Also I cannot firgure out if the things that I am doing wrong are on the server or the client.
Here is the code for the sever and client.
SERVER
package com.cme.multicastijector.server;
* Title: 
* Description: 
* Copyright: Copyright (c) 2004
* Company: 
* @author not attributable
* @version 1.0
import java.net.*;
import java.util.*;
public class MulticastOutputSocket {
private int m_multicastPort = 0;
private MulticastSocket m_multicastSocket = null;
private InetAddress m_interfaceAddress = null;
private InetAddress m_multicastAddress = null;
private InetSocketAddress m_inetSocketAddress = null;
private int m_bufferSize = 0;
private byte[] m_outputBuffer = null;
private DatagramPacket m_packet = null;
public MulticastOutputSocket(int portNumber,String interfaceAddress,String multicastAddress,int bufferSize) throws Exception{
System.out.println("\nStarting multicast output socket");
m_multicastPort = portNumber;
m_interfaceAddress = InetAddress.getByName(interfaceAddress);
m_multicastAddress = InetAddress.getByName(multicastAddress);
m_bufferSize = bufferSize;
m_inetSocketAddress = new InetSocketAddress(m_multicastAddress,m_multicastPort);
m_multicastSocket = new MulticastSocket (m_multicastPort);
// m_multicastSocket.joinGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
m_multicastSocket.setNetworkInterface(NetworkInterface.getByInetAddress(m_interfaceAddress));
// m_multicastSocket.setLoopbackMode(false);
// m_multicastSocket.setTimeToLive(32);
Enumeration e = NetworkInterface.getNetworkInterfaces();
while (e.hasMoreElements()){
System.out.println(e.nextElement().toString());
System.out.println("Interface Address = " + m_interfaceAddress);
System.out.println("Multicast Address = " + m_multicastAddress);
System.out.println("Port = " + m_multicastPort);
System.out.println("BufferSize = " + m_bufferSize);
System.out.println("MulticastSockect initialized.\n");
public void sendData(String data) throws Exception{
m_outputBuffer = new byte[m_bufferSize];
m_outputBuffer = data.getBytes();
//m_packet = new DatagramPacket(m_outputBuffer, m_outputBuffer.length);
m_packet = new DatagramPacket(m_outputBuffer, m_outputBuffer.length, m_inetSocketAddress);
m_multicastSocket.send(m_packet);
public void closeSocket() throws Exception {
//m_multicastSocket.leaveGroup(m_multicastAddress);
//m_multicastSocket.leaveGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
m_multicastSocket.close();
CLIENT
package com.cme.multicastijector.client;
* Title: 
* Description: 
* Copyright: Copyright (c) 2004
* Company: 
* @author not attributable
* @version 1.0
import java.io.*;
import java.net.*;
import java.util.*;
public class MulticastClient {
private Properties m_prop = null;
private MulticastSocket m_multicastSocket = null;
private InetAddress m_interfaceAddress = null;
private InetAddress m_multicastAddress = null;
private InetSocketAddress m_inetSocketAddress = null;
private int m_multicastPort = 0;
private int m_bufferSize = 0;
private int m_previousSeq = 0;
private boolean m_isFirst = true;
private int m_actualseq = 0;
private int m_msgLost = 0;
private int m_messagesReceived = 0;
private Object m_seqLock = new Object();
private Object m_msgLock = new Object();
public MulticastClient(Properties properties) throws Exception{
m_prop = properties;
init();
new TpsCalculator();
receiveData();
private void init() throws Exception{
m_multicastPort = Integer.parseInt(m_prop.getProperty("MULTICAST_PORT"));
m_multicastAddress = InetAddress.getByName(m_prop.getProperty("MULTICAST_ADDRESS"));
m_interfaceAddress = InetAddress.getByName(m_prop.getProperty("INTERFACE_ADDRESS"));
m_bufferSize = Integer.parseInt(m_prop.getProperty("BUFFER_SIZE"));
m_inetSocketAddress = new InetSocketAddress(m_multicastAddress,m_multicastPort);
m_multicastSocket = new MulticastSocket (m_multicastPort);
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getInterface() );
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getNetworkInterface() );
// m_multicastSocket.setInterface(m_interfaceAddress);
// m_multicastSocket.setNetworkInterface(NetworkInterface.getByInetAddress(m_interfaceAddress));
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getInterface() );
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getNetworkInterface() );
m_multicastSocket.joinGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
// m_multicastSocket.joinGroup(m_multicastAddress);
System.out.println("Interface Address = " + m_interfaceAddress);
System.out.println("Multicast Address = " + m_multicastAddress);
System.out.println("Port = " + m_multicastPort);
System.out.println("BufferSize = " + m_bufferSize);
private void receiveData() throws Exception{
try {
String received = null;
byte[] inputBuffer = null;
DatagramPacket packet = null;
while(true){
inputBuffer = new byte[m_bufferSize];
packet = new DatagramPacket(inputBuffer, inputBuffer.length, m_inetSocketAddress);
m_multicastSocket.receive(packet);
received = new String(packet.getData());
m_messagesReceived++;
synchronized(m_seqLock){
m_actualseq = getSequence(received);
checkSequence(m_actualseq);
catch (Exception ex) {
ex.printStackTrace();
m_multicastSocket.close();
private int getSequence(String data){
return Integer.parseInt(data.substring(0,15));
private void checkSequence(int actual){
if(m_isFirst){
m_isFirst = false;
m_previousSeq = actual;
else{
if ( (m_previousSeq + 1) != actual) {
synchronized(m_msgLock){
m_msgLost += (actual - m_previousSeq)-1;
m_previousSeq = actual;
private class TpsCalculator extends TimerTask{
private Timer aTimer;
private int previousSeq = 0;
private int tpsSeq = 0;
private int tpsRec = 0;
private boolean first = true;
private int msglost = 0;
private int previousMsgRec = 0;
private int actualMsgRec = 0;
public TpsCalculator(){
aTimer = new Timer();
aTimer.scheduleAtFixedRate(this,new Date(),1000);
System.out.println("#####################################################");
System.out.println("time,tps from sequences, actual tps,total msg received,msglost");
public void run(){
actualMsgRec = m_messagesReceived;
tpsRec = actualMsgRec - previousMsgRec;
previousMsgRec = actualMsgRec;
if(first){
synchronized(m_seqLock){
previousSeq = m_actualseq;
first = false;
else{
synchronized(m_msgLock){
msglost = m_msgLost;
m_msgLost = 0;
synchronized(m_seqLock){
tpsSeq = m_actualseq - previousSeq;
previousSeq = m_actualseq;
System.out.println(new Date()+","+tpsSeq + "," + tpsRec + "," + m_messagesReceived + "," + msglost);
Thanks for your help.
This is really important for the project I am working on.
Thanks again

never Mind I found the issue
The default value for TTL is 1.
I was going thru multiple routers so I incremented the value and it worked
thanks

Does turning off DHCP remove option to Share Hardisk over WAN?

I'm a recent Apple convert. I have a new Macbook and have downloaded all recent updates.
I just integrated the Airport Extreme Base Station into my current home network. I have DHCP turned OFF in the AP because I am running a netgear router in my basement that is already connected to my Cable Modem. It needs to stay in the loop because I am using it to feed my XBox360, due to the issues related the Base station/360 interaction.
Here is my question... Does having DHCP turned off in the AP, remove the checkbox option in the "Disks" section of Airport Utility toolbar to "Share disks over Ethernet WAN port"? Its MISSING completely. I've seen many instructions that reference that phrase, but the only checkbox I have on that screen is one for using Bonjour. I want to connect a usb drive so I can have a central storage so my wife and I can share itunes/photos/documents. So could it be that option disappeared due to turning off DHCP or is there some other issue?

If you want to share your disks over WAN then you need to do the following:
1. Assign a manual IP address for your AirPort. You can do this by running AirPort Utility and under Internet you need to change Configure IPv4 from Using DHCP to Manually.
2. You need to port forward TCP port 548 on your main router to the IP address you assigned your AirPort. After doing this you will be able to access your AirPort disks by going to Finder, Connect to Server, and entering afp://<yourgatewayipaddress> You can find your gateway IP address by going to www.whatismyipaddress.com while on your home network.

ASA 5510 - Setting up ACL to permit access only to the Nat'ed subnet

Hi,
I experiencing an issue in setting up an ACL on my ASA 5510 to permit access only to the Nat subnet from inside to the outside interface. This firewall is setup for the DR solution in the production network. I am applying following acl in the inbound direction on the inside interface.
permit ip any "Nat_subnet"
After appliying this acl to inside interface I observed that I can ping to the destinations in NAT'ed subnet but unable to ssh to the servers. Following is the summary of my configuration. I would appreciate if someone please advice to resolve this issue.
Regards,
Muds
interface Ethernet0/0
nameif outside
security-level 0
ip address 192.168.135.241 255.255.255.248 standby 192.168.135.242
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.135.249 255.255.255.248 standby 192.168.135.250
object-group network d1-dr-nat_nets
network-object 192.168.128.0 255.255.248.0
object network 10.210.14.0_Net
nat (outside,inside) static 192.168.128.0_Net
object network 10.210.16.0_Net
nat (outside,inside) static 192.168.129.0_Net
object network 10.210.80.0_Net
nat (outside,inside) static 192.168.130.0_Net
object network 10.210.84.0_Net
nat (outside,inside) static 192.168.131.0_Net
object network 10.210.86.0_Net
nat (outside,inside) static 192.168.132.0_Net
object network 10.210.88.0_Net
nat (outside,inside) static 192.168.133.0_Net !
object network 10.210.14.0_Net
nat (outside,inside) static 192.168.128.0_Net
object network 10.210.16.0_Net
nat (outside,inside) static 192.168.129.0_Net
object network 10.210.80.0_Net
nat (outside,inside) static 192.168.130.0_Net
object network 10.210.84.0_Net
nat (outside,inside) static 192.168.131.0_Net
object network 10.210.86.0_Net
nat (outside,inside) static 192.168.132.0_Net
object network 10.210.88.0_Net
nat (outside,inside) static 192.168.133.0_Net
access-list prod_lan-in extended permit ip any object-group d1-dr-nat_nets
access-group prod_lan-in in interface inside

Hi,
As I mentioned even though you NAT the address from outside to inside you will have to use the REAL IP ADDRESSES in the access-list statements
Your hosts on inside will still be connecting to the NAT IP address of the hosts on outside BUT the ASA needs the ACL statements with the NATed hosts original IP addresses
Let me give an simple example
object network STATIC
host 10.10.10.10
nat (outside,inside) static 192.168.10.10
access-list INSIDE-IN permit ip any host 10.10.10.10
or
access-list INSIDE-IN permit ip any object STATIC
- Jouni

Accessing a shared USB over WAN from a Windows computer

Hello,
I cannot seem to find any documentation on how a Windows computer can remotely access the Airport Extreme's shared disks. I have turned on sharing over WAN and my Airport Extreme has a static, addressable IP on the web.
Can anyone provide me a link or a pointer on how to do this?
Thanks!

BUMP! No one?

There is no "Share disk over WAN" checkbox

Hello i do have no checkbox for "Share disk over WAN" on my airport settings for TC. What should i do? I just want to access my TC over internet.
this is back to my mac option from settings. It says 'set router' which is doubtful to me.
and here there is no checkox for it.
note: it is 7.6.1

What kind of broadband do you use?
BTMM should work fine with any router that uses upnp or nat-pmp. You do not require an apple router.
If you want to access the TC from internet.. that is possible manually.. in fact it works really well.
You need to set up a dynamic dns account.. almost all routers will have a client.. pick a service for which you have a client.. (unless you have static public IP which is even better).
Then simply port forward AFP protocol TCP port 548 to the TC.. which is in bridge.
Remotely you access by typing in connect to server... AFP://dynamicip or staticpublicIP.
Just google remote access to TC there are plenty of discussions and youtube video of how to do it.

Difference between Share Disks over WAN vs. over Internet using Bonjour?

I would like to find out the Difference between selecting the "Share Disks over WAN" option only vs also selecting the additional "Share disks over Internet using Bonjour" option. Any info is greatly appreciated! Thanks!

you can access drives plugged into your AirPort extreme base station from outside the network by typing in the IP address of the modem/base station in the "Connect to Server" dialogue on the Finders "Go" menu (or press Command+K when in Finder). You can get the base station IP by opening the AirPort Utility from your utilities folder, and click "manual setup" at the very bottom of the summary tab should be the IP address given the base by your modem.
As long as you have "Share Disks over WAN enabled" when you connect using the IP from another location you will be prompted to authenticate to the AirPort Base station and if authentication is successful you will be prompted to mount a disk (the disk plugged into your AirPort base station should be the only available disk to mount).
Keep in mind you must give out the Base Station password unless you allow guest connections to the disk.

Share disks over wan

Hi All
I am having this problem with my TC (firmware 7.6.4):
If I tick "Share disks over wan" I can not access the disk from outside my network
If I untick it, then I can access the disk from remote.
It is like it is inverted.
Am I the only one?
Thanks

Using BTMM there is no need to tick share disk to WAN..
The BTMM is a connection through the NAT to the local LAN of your network. When you tick the share disk to WAN it messes that up.. although I cannot remember that being the case.
Maybe they fiddled around again in 7.6.4 and changed it.
Anyway it is not really an issue.. just set to what works for you.
As you can see the instructions for setting up BTMM do not say anything about sharing the disk over wan.
http://support.apple.com/kb/HT3486
How to set up your AirPort Express, AirPort Extreme, or AirPort Time Capsule for Back to My Mac
Make sure you are on the same local area network as the AirPort Express, AirPort Extreme, or AirPort Time Capsule that you wish to configure.
For OS X: In the Finder, choose Utilities from the Go menu, then open AirPort Utility. (You should be using AirPort Utility v6.3 or later).
Select your AirPort base station.
If the AirPort base station you wish to configure is not shown, click "Other AirPort base stations" and select the AirPort base station you wish to configure for use with Back to My Mac. This may require choosing a different Network Interface from the pop-up menu.
Click Edit.
Enter the base station password if prompted (not your iCloud password).
Select the Base Station tab.
Enter your iCloud user name and password in the Back to My Mac section. You should see a green status indicator.
Click Update to save your changes.
You use share a disk with WAN to directly access the TC via AFP. That is alternative method of access.
See https://discussions.apple.com/docs/DOC-3413 for details of the different methods of access.

TC does not have "Access disks over WAN" option, how do I fix this?

Hello,
My time capsule has the lastest firmware installed as of 12/28/11. I have it setup with (bridge-mode). There is no option to use the TC over WAN. There is only the option to access TC over WAN using Bonjour. Can someone please explain why this option is not avavible and how to fix it? If anyone needs more information please fell free to ask me.
Thanks,
Brett

If the TC is bridged.. there is no wan port. LOL!!
So there is no need to access it over wan.. because it doesn't have one.
You can fix it by using it in router mode.. so it has a wan port again.
Or.. you can simply access it via port forwarding of port 548 on the existing router.
You can only remotely access AFP. You cannot access it remotely any other way.. without using vpn that is.

Time Capsule - Share over WAN

My Time Capsule is connected to another router through Ethernet as bridge mode and wireless. Therefor the option to Share disc over WAN and i can't access it over the internet. Is it possible to set up the same Share over WAN feature on my routers web interence?

Ok, lets get down and dirty.
What modem router are you running?
Does it have a DMZ and have you tried placing the TC in the DMZ?
Many routers do not allow a connection to be made even after you have port forwarded because the firewall is turned on. Turn off the firewall in the router. Turn off the firewall in the router on the wan connection. Check that the computer firewall is also not preventing the connection.
*Firewall is a key issue for failure to connect over WAN connections*
Sometimes upnp in the router can mess up with manual port forwarding. Try turning off upnp.
I would also try reset of the modem and if possible see if you can get something to ping respond to you. If the modem has a ping responder in it, turn it on to ensure you can actually get packets to the router and back again.
I also have to ask you are actually testing from a different internet connection?? You cannot test wan port opening from LAN.. well not without nat loopback or remote proxy setup.

Configuration over WAN

This and SNMP over WAN are "unresolved". Does this cause any problems and how should I fix them?

The latter. It provides the ability to configure across the Internet if they know your IP address.
Configuring via one of the LAN ports is automatically enabled.

CCP / CPO VM Migration over WAN

Hi All,
I've the test environment in location1 (Japan) and production environment in location2(U.S)
After testing completed, want to migrate the CCP / CPO VMs to production environment
what is best approach (VM Migration over WAN ? - with huge file size
or we can go for fresh install in Destination location ? if so, how to migrate the code base from CCP?
(for CPO we can export the process to a shared location and download it - how about CCP)
Any best approach possible?
Thanks,
yoga ..

Hi Eneudenberger, thanks for the feedback, I appreciate it. I have thought of this as a solution and here are my thoughts. This will certainly work with a small number of VLANs. I am trying to serve a large number of VLANs so this solution becomes less desireable as the number of VLANS increase and therefore increases the number of firewall instances required to support the solution. I am also trying to limit the traffic that goes through the firewalls. This would force all off subnet traffic to flow through the firewall which is not a requirement for our solution and would increase the hardware requirements for the firewall itself, forcing us into a very large FW platform. Besides all of that, I have used TCP state bypass to allow failover and failback between geographically disparate sites. TCP state bypass comes with its own set of downsides,
1. (obvious) no TCP state maintenance.
1a. TCP timers need to be tweaked because connections are not removed from the firewall tables on FIN ACK. In some environments with lots of transient short lived connections, this can cause connection count exhaustion.
1b. Service policy inspections for tcp don't work. Loss of FTP inspection will turn your firewall into swiss cheese.
1c. Each firewall rule you may now needs a reverse rule allowing the reverse connection i.e. create a firewall rule on inside interface allowing machines to "any" on tcp destination port 80 and now you need a rule on the outside interface allowing tcp source port 80 from "any" to your machines.
TCP State bypass isn't fun!
All that aside, I have been told by someone on another forum that Cisco is adding the ability to have the VM move detection separated from the xTR function so that we can put the firewalls between the WAN and the Server Distribution, which would be fantastic. I haven't seen anything as of yet but let me know if you come across it or have any other ideas, Thanks!
Carlo

Server clustering over WAN

Hi
i am running two Microsoft servers. One is live and the other is in DR site, they are currently on differnt subnets, and for them to cluster, they send broadcast. what can i do for this two servers to talk to each other.
changing ip's on the router is out of the question.

What port number and protocol do they use. If you can assign them on the same subnet you can use IRB (integrated routing and bridging) over WAN.
http://www.cisco.com/en/US/products/hw/switches/ps5304/products_configuration_guide_chapter09186a00800f0a86.html
-amit singh

Natting of subnet ip address exist over wan

Similar Messages

Maybe you are looking for