NSS2000 WAN/VPN Connectivity

We have a user that connects to the network over a VPN tunnel.  They cannot access the NSS2000.  The gateway is correct.  Disable WAN access is not checked.  Default network policy is allow traffic with no filters.
Anyone have any ideas?

The MS SBS2003 is behind a combo router/firewall.
The VPN connect to the router/firewall first, gets forwarded to the SBS2003.
The VPN user has full access on the SBS2003 server, everything works.
They just can't connect to the NSS6000.
In the NSS6000, I checked the users and the domain users show up properly. So does the Domain Groups.
We've tried login using: user
                                   domain\user
                                   user@domain
                                   xxx.xxx.xxx.xxx\user
We are able to ping the nss6000 (from the vpn user), it responds with no issue.
It just won't let us get access to it.
------Update on problem------
The share is setup as a CIFS and users are AD users.
So for further testing, I created a local user and group and assigned them to the share. (Still no go)
I then modified the share and made it CIFS, NFS and FTP. I enabled both NFS and FTP. (Still no go)
However, I've been able to FTP into the nss 6000. (This is forward movement)
Both as the domain\user and the local\user.
Since I can ping and ftp into the nss6000, I know it is not hidden to the vpn users.
So the question becomes this: Why does the NSS 6000 refuse to give access to the CIFS share to my domain users that have valid access?
What is wrong with this Equipment?
Message was edited by: [email protected] Oct-10-2009; 9:30am Atlantic time

Similar Messages

  • 3 WRV200 routers to create a 3 node WAN using VPN connections

    I have looked through some of the other posts to see if this question had been asked before, and I didnt see anything.
    I have 3 WRV200 that I want to install in 3 cities.
    I want each router to have its own Internet connection from the local ISP.
    I then want each router to connect to the other 2 routers and create a 3 node WAN using VPN connections.
    This is what I think I need.  I am hoping somone will correct me.
    WRV200-CA
    192.168.1.0 - CA Local LAN
    192.168.1.1 Default Gateway
    255.255.255.0 Subnet Mask
    192.168.1.10 Static Assigned for Printer
    192.168.1.11 Static Assigned for Printer
    192.168.1.12 Static Assigned for Printer
    192.168.1.13 Static Assigned for Printer
    192.168.1.101 - 120 DHCP addresses for workstations
    WRV200-NYC
    192.168.2.0 - NYC Local LAN
    192.168.2.1 Default Gateway
    255.255.255.0 Subnet Mask
    192.168.2.10 Static Assigned for Printer
    192.168.2.11 Static Assigned for Printer
    192.168.2.12 Static Assigned for Printer
    192.168.2.13 Static Assigned for Printer
    192.168.2.101 - 120 DHCP addresses for workstations
    WRV200-LI
    192.168.3.0 - LI Local LAN
    192.168.3.1 Default Gateway
    255.255.255.0 Subnet Mask
    192.168.3.10 Static Assigned for Printer
    192.168.3.11 Static Assigned for Printer
    192.168.3.12 Static Assigned for Printer
    192.168.3.13 Static Assigned for Printer
    192.168.3.101 - 120 DHCP addresses for workstations
    I know how to get the public IP address that is assigned to the broadband modem by each of the ISPs.
    Do I have to connect to each of the other public IP addresses to create this 3 location WAN?
    I dont think this is the best way since the IP address might change since it is assigned by the ISP via DHCP.
    Should I create a 192.168.4.0 network with a 255.255.255.248 subnet mask. and give each router its own address within the .4 network?  Im not sure where to do this if its different from the local LAN IP addresses listed above.
    Do I have to have 2 cable modems at each location in order to create a point to point connection with the other 2 routers?
    It seems like I should be able to send 2 seperate VPN signals over the same cable modem in order to connect with the other 2 routers.
    If 192.168.x.x is non routable, how is a PC at 192.168.1.101 going to route through to the local cable modem and connect to the cable modem that is in NYC, and then print to the printer located at 192.168.2.11
    Ultimately I want to:
    1. print to any printer at any of the 3 locations.
    2. Remote Desktop into any workstation at any of the 3 locations.
    3. Connect to the Internet via a public WiFi hotspot and use my laptop that would have some type of software that would allow me to connect to any of the 3 LANs.
    Thank you in advance.

    Appendix D of the RVS4000 admin guide has an example of configuring a site-to-site VPN tunnel between 2 routers that have dynamic WAN IP addresses. For your scenario, you can configure a site-to-site tunnel between each pair of WRV200 routers.
    http://www.cisco.com/en/US/docs/routers/csbr/rvs4000/administration/guide/RVS4000_AG_OL-22605.pdf

  • VPN connects when on LAN but not via WAN

    Hi Guys,
    I've recently configured a VPN on my SLS. I uses the following settings:
    L2TP over IPsec
    PPP Authentication: Directory Services: MS-CHAPv2
    Shared Secret: xxxxxxxxx
    Client Information:
    DNS Servers: 10.0.1.250 (my server) 10.0.1.1 (my airport extreme) - This is where I think I'm going wrong
    In my SLS firewall I've open every possible port for both L2TP, PPTP and all required directory authentication ports I believe. If there are any tricky ones please let me know
    I am able to successfully connect to the VPN and route all traffic to the delegated IP when on my local network. However when ever I'm away from that network - friends, work, and various other tested internet connections - I am unable to connect to the VPN.
    I've ruled out the SLS firewall by turning it of for several days and trying to connect at several locations. I've checked the log on the VPN and there is no record of even an attempt to connect.
    In Security of Server Preferences i have exposed the VPN on the airport extreme. I've tried both with and without port forwarding. As far as i know (correct me if I'm wrong) because I have my domain name resolving to my server then I don't need port forwarding. My DNS works for all other services on the SLS.
    Any ideas at to what I might be doing wrong? Things I could try to isolate the problem?
    Any suggestions would be very handy!
    Best
    -J

    Your Airport Extreme does not contain a DNS server.
    Ensure MobileMe is disabled at your Airport. That messes up VPN pass-through.
    From a remote network, confirm that all of the necessary ports are open via nmap or Applications > Utilities > Network Utility or other tools.
    Quadruple-check the list of ports (and preferably with a second and third technical resource), as the Apple documentation around L2TP port pass-through with Airport and Time Capsule is murky.
    Ensure that you don't have the same subnet on both ends of the VPN connection as that can interfere with IP routing.
    Also try testing with PPTP, in place of L2TP.
    I'm in the midst of tussling with a recalcitrant VPN router myself, but that's another topic.

  • Site to site VPN Connectivity

    I want to make a Vpn site to site connection between 2 offices (same city).Which VPN  Routers(wireless/Ethernet) are best for it . i heard about cisco devices rv042, rv rv130w, rv215w ..In my current office i have router DELL TZ200 device. If i go with cisco vpn router  for new office (6 users) vpn will work fine.Ex: Dell TZ200 with cisco rv042/rv130w.  
    which device is best rv042 or rv130w  for good vpn connectivity
    please help me to purchase  best vpn  router  . 

    Hi, Shaffz123.
    As long as your Dell router also supports IPSec VPN, there shouldn't be any issues. The RV042 has more VPN peers compared to RV130W. Will you need the WAN failover feature of the RV042 as well? The RV042 can support Dual WAN, by the way. 
    Let me know if you need more support or please e-mail ([email protected]) me directly. 

  • Need to accept VPN connections from "Any"

    I had previously been using two WRV54G wireless routers to establish a site to site VPN connection between a branch office and our corporate Headquarters. Because of the limited DHCP scope configuration options, I decided to "upgrade" to the WRVS4400N devices. I have now been able to establish the VPN again between the two new boxes but I've now gotten to the point where I would like to add an additional remote site. In the WRV54G, it was easy to configure the one at HQ to accept connections from "any" but this new router does not seem to be as simple.
    Oh yeah, I am running firmware version 1.1.03 on both routers.
    Does anyone have any idea how I can set up the HQ router to accept VPN connections from "any"?
    Thanks! I appreciate the help.

    And this is the VPN log on the HQ router:
    Mar 4 11:11:39 - [VPN Log]: "gatekeeper": cannot initiate connection without knowing peer IP address (kind=CK_TEMPLATE)
    Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Openswan (this version) cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
    Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Dead Peer Detection]
    Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [RFC 3947] method set to=109
    Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
    Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
    Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
    Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: responding to Main Mode from unknown peer (Remote router WAN IP)
    Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: Can't authenticate: no preshared key found for `(HQ Router WAN IP)' and `%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
    Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: no acceptable Oakley Transform
    Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: sending notification NO_PROPOSAL_CHOSEN to (Remote router WAN IP):500
    Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP): deleting connection "gatekeeper" instance with peer (Remote router WAN IP) {isakmp=#0/ipsec=#0}
    Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Openswan (this version) cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
    Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Dead Peer Detection]
    Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [RFC 3947] method set to=109
    Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
    Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
    Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
    Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: responding to Main Mode from unknown peer (Remote router WAN IP)
    Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: Can't authenticate: no preshared key found for `(HQ Router WAN IP)' and `%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
    Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: no acceptable Oakley Transform
    Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: sending notification NO_PROPOSAL_CHOSEN to (Remote router WAN IP):500
    Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP): deleting connection "gatekeeper" instance with peer (Remote router WAN IP) {isakmp=#0/ipsec=#0}
    Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Openswan (this version) cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
    Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Dead Peer Detection]
    Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [RFC 3947] method set to=109
    Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
    Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
    Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
    Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: responding to Main Mode from unknown peer (Remote router WAN IP)
    Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: Can't authenticate: no preshared key found for `(HQ Router WAN IP)' and `%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
    Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: no acceptable Oakley Transform
    Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: sending notification NO_PROPOSAL_CHOSEN to (Remote router WAN IP):500
    Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP): deleting connection "gatekeeper" instance with peer (Remote router WAN IP) {isakmp=#0/ipsec=#0}
    Thanks much.

  • Cannot ping pc behind router in vpn connection

    I have set up a vpn tunnel using two wrv200 vpn routers. The lan and wan connection works fine and the tunnel is connected successful between two locations. I can ping the remote wrv200 router from the opposite side. However, I cannot ping remote pcs connected to the router from other side. I can ping the pcs from the router on the same side. Does anyone experience the same problem? Any suggestion or solution to it? Please help!

    windows firewall is disabled on the pcs. I can ping the pcs on the side from the router. If I can ping remote pc from the tunnel, then I shouldn't have any problem with the vpn connection. When I ping remote pc from opposite side through the tunnel, the Request time out message displays. The same to the tracert command.
    routing table of router a
    Destination LAN IP Subnet Mask Gateway Interface
    203.98.129.239 255.255.255.255 0.0.0.0 WAN
    192.168.2.0 255.255.255.0 0.0.0.0 LAN&Wireless
    Default Route (*) 0.0.0.0 203.98.129.239 WAN
    127.0.0.1 0.0.0.0 127.0.0.1 LOOPBACK
    routing table of router b
    203.98.129.226 255.255.255.255 0.0.0.0 WAN
    192.168.0.0 255.255.255.0 0.0.0.0 LAN&Wireless
    Default Route (*) 0.0.0.0 203.98.129.226 WAN
    127.0.0.1 0.0.0.0 127.0.0.1 LOOPBACK

  • SMB and VPN connected to Windows Server 2003

    I have search the web for an answer on this problem, I've only found peoble with same problem, but still no solution :o/
    I wan't to connect to my office (windows2003) from my OSX 10.4.2 at home. I've set up an VPN connection and can PING the server (and others) on the network. Works fine.
    When I connect to the server via SMB://server/ I get a list with all different folders (or servers) I can connect to but I get rejected with the answer Bad name or password. Now to the funny part; I can connect in the Terminal using smbclient with the same user and pwd just rejected in Finder!!!
    I've read about this problem on http://www.macwindows.com/tiger.html#052305a but I can't find a solution. Someone mentioned a bug with apple number #4108992 - Can anyone tell me where I can read about that? Or better - Where I can find a solution. (I've tried to erase keychain)
    Rgds
    /Johan

    My school sets up our network disk space with access via FTP. I don't know if that is an option through your company. While I have to download files to work with them and then upload them again to the network space to access them at work, it does allow me to look at the directory structure. I use an FTP client (not the one built into OS X). This might be an option for you to check on with your IT department. (This also eliminates my need to use VPN.)
    Hope this helps.
    PB G4 15"   Mac OS X (10.4.3)  

  • Nokia C7 - Problem with VPN Connection over WLAN

    Hello,
    today I installed Nokia VPN Client 44.01(5) for Belle.
    Before this update I used the following configuration: I set two SIP-profiles up and for each profile a own VPN-connection. One for connecting over radio and one for connecting over WLAN or hotspots.
    So over all I had three kinds of connections or connection groups to choose: "Internet" with the radio and home wlan connections, "Intranet" for the VPN-connection over radio and "Intranet over WLAN" for VPN-connections over other WLANs.
    The advantage of this configuration was that I could use the SIP-profile depending on my location and the phone had not to use the "standard" VPN-connection ("Intranet") over radio.
    Now after the update I have the problem that I can't connect to my VPN over WLAN at all. Not with the SIP profile and not manually over the internet browser. There is always the notification "Connection Problem".
    I tried also to put the "VPN over WLAN access point" from the "Intranet over WLAN"-group to the "Intranet"-group and gave it the first priority, but that doesn't helped too.
    Does someone of you had or have the same kind of problem or otherwise has any clue about that?
    Any help is very much appreciated!
    Thank you in advance! I hope that I described my problem clearly.
    Greetings
    unsys

    testing with the faceplate removed and into the master socket witha brand new filters result's below . I tried the quiet line test and it seems silent so no issues there. Can anyone see an issue, I've posted the noise results etc as well with the faceplate removed. (using a butter knife cause i'm just out of bed and tools are in the garage!)
    0.7 Mbps
    0 Mbps
    1 Mbps Max Achievable Speed
    Download speedachieved during the test was - 0.7 Mbps For your connection, the acceptable range of speeds is 0.2 Mbps-1 Mbps. Additional Information: Your DSL Connection Rate :1.06 Mbps(DOWN-STREAM), 0.45 Mbps(UP-STREAM) IP Profile for your line is - 0.75 Mbps
    System Up Time 00:11:28
    Port
    Status
    TxPkts
    RxPkts
    Collisions
    Tx B/s
    Rx B/s
    Up Time
    WAN
    PPPoA
    6657
    9689
    0
    2806
    19425
    00:10:58
    LAN
    10M/100M
    28652
    22350
    0
    22356
    5418
    00:11:24
    WLAN
    11M/54M/300M
    0
    0
    0
    0
    0
    00:11:11
    ADSL Link
    Downstream
    Upstream
    Connection Speed
    1056 kbps
    448 kbps
    Line Attenuation
    49.0 db
    27.0 db
    Noise Margin
    10.6 db
    20.0 db

  • Entering Correct info for VPN connection

    please suggest the correct configuration for entering information in order for my laptop to connect via VPN to my newly installed Leopard Server software. On my laptop, I have entered the following info on the System Preferences> network tab...
    Configuration: Default
    Server Address: 76.173.xx.xxx (my public IP address - do I need anything else?)
    Account name: XXXXXX (same as the account name in Server)
    under Authentication Settings, my password is fine and my shared secret is the same as on the Server.
    Am I entering in everything correctly? i am most concerned as to how the server address is supposed to be written. thanks!!

    Hi
    If Appletalk is enabled server side and you simply enter the IP address afp is assumed as the protocol to be used. If you prefer the extra effort involved in typing afp:// followed by the IP address you can use that as well. If you want to use the smb service rather than afp simply type smb://followed by the IP address. The same thing applies to ftp services. The Finder supports reads only for ftp services.
    If you are using VPN services you simply type in the private IP (LAN-side) address of the server rather than the public IP (WAN-side) address. Once a VPN connection has been established, the remote client behaves as if it is on the same LAN.
    You can make a connection using the Public WAN address if you enable port forwarding to a single LAN IP address for services you are interested in. For example if you wanted to access your server remotely using afp you configure your router to forward requests for port 548 to the internal IP address of your server. You can use this method for as many services you like as well as how many your router supports. Most commercially available routers support 10-20. Depending on the router you may have to configure an appropriate firewall rule as well. When faced with that it makes more sense to use a single VPN connection.
    I may be in danger of teaching granny to suck eggs but for what its worth for VPN connections to work successfully the remote client’s private IP address has to be different from the host site. For example if the remote site is on 192.168.1.x/24 as is the server then you won’t establish a connection. As far as the remote site is concerned its already connected to that network, why look elsewhere? 192.168.1.x/24 to 192.168.2.x/24 or 10.10.10.x/24 to 192.168.0.x/24 should result in successful VPN connections.
    For a list or IP addresses reserved for private use:
    http://www.iana.org/faqs/abuse-faq.htm#SpecialUseAddresses
    Hope this helps, Tony

  • Hi there, I am trying to connect to my server at work from home using a vpn connection. It connects fine and the time ticks along, but when i click go - connect to server, it comes up with connection failed. Please help!

    Hi there, I am trying to connect to my server at work from home using a vpn connection. It connects fine and the time ticks along, but when i click go - connect to server, it comes up with connection failed. Please help!

    ... when i click go - connect to server, it comes up with connection failed.
    If you're trying to connect to a Bonjour server on the remote network, that won't work over a layer 3 VPN. Use something like Hamachi or one of the SSH-tunnelling Bonjour proxy apps for that.

  • Window 8.1 system unable to access network shares via VPN connection

    Is there something inherent to Windows 8.1 that prevents it from accessing shares on a domain?
    I know that it cannot join a domain, but does that also mean that it cannot access shares which are on a domain?
    My problem is that I have several user that are running windows 8.1 that are connecting to our network via a VPN.
    The users have domain accounts but their computers as windows 8.1 cannot joined to the domain.
    So to access network shares they have to use their domain credentials to create a VPN connection.
    Once connected the user can RDP to systems on the domain using their domain accounts, so I know that their user names/passwords and permissions are correct. They can access these systems using the computer name, so I don't feel that I have a DNS issue.
    They can see the shares on our file server, but when they try to access their departments shared file, they receive an access denied message. There are a few shares that are completely wide open, shared to all users and all departments but they cannot access
    those shares either.
    You can ping the file server, from the the client when they are connected to the VPN but you just cannot access any of the shares.
    So...
    I am thinking that it has something to do with windows 8.1 and not being able to join a domain, but I cannot find anything to explicitly support this thought.
    Other users running a variety different OS (windows 7, OSX, Linux) can all access the shares without any problems via the VPN, so I am a little stumped.

    I have done some more testing and oddly enough I can map a drive if I use the IPaddress, but not the computer name, when checking the check box "connect using different credentials"and providing they users domain credentials.
    This seems to point to a DNS issue, one would think, but I can hit the file share server by name \\fileserver.dev.lan
    I can see all the shares, so dns seems to be fine right?
    So I don't understand why I can map a drive using do the IPaddress and not the machine name, but yet I can see and ping the server by name?
    When I try to create a mapped drive by machine name I receive the following message:
    Windows cannot access \\fileserver.dev.lan\all
    You do not have permissions to access \\fileserver.dev.lan. contact your network administrator  to request access.
    But if I use the \\x.x.x.x\all using the very same user and password I get connected with no problem.
    This only seems to happen on windows 8.1, which leads me to think that has something to do with OS. 
    I am thinking about upgrading to windows 8.1 pro, but I don't want to go though the hassle and expanse is the OS is not the problem.

  • How can i use an existing vpn connection without using the option "Send all traffic over vpn connection"?

    I have been trying to get my computer (os x.7) to astablish a remote desktop connection to my work computer via a vpn tunnel. In fact I have just discovered that it works fine if i select to "send all traffic over vpn connection" from the options in the advanced setup of the vpn.
    If the option is selected microsofts "Remote desktop connection for mac" works just fine. However without selecting the option it is not taking advantage of the tunnel but tries to connect as if the tunnel would not exist.
    Now the question is how do I get program to use the vpn tunnel without checking the above option?
    Thanks for any hints and pointers.

    Then can her computer be authorized to both accounts?
    Absolutely. You can authorize any given computer to up to five iTunes Store accounts.
    If purchases are made on her account, to a computer authorized to my account, can I put those songs on my iPod?
    If you connect your iPod to her computer, yes. Tracks download only to the computer from which they're purchased, regardless of which iTunes Store account is used for the purchase. Or you could copy the tracks from her computer to yours and then authorize your computer to her iTunes Store account. But that's sort of defeating the original purpose, it would seem to me.
    is it better to buy music through Amazon downloads and/or actually purchasing CDs to avoid the security features iTunes puts on its music?
    That's certainly an option. If it's an entire album I want, I buy CDs. That way I can import them at the quality I want and to whichever of my systems I want. Amazon or one of the other download stores that offer tracks as MP3 are also an option, though for me download stores are best when you just want a couple of tracks off a given CD.

  • Warning: Lenovo system update 5.1 corrupts VPN connection

    In MS Windows 8 networking forum are discussed many VPNs problems, when installing 3rd party software.
    http://social.technet.microsoft.com/Forums/en-US/w8itpronetworking/threads
    After installing Lenovo system update 5.01 my VPN connection stopped working. Returning to restore point helped not.
    Jiří Cvrk
    TP YOGA S1 .. X220, X61, T22, ms w8nd8ws

    It was quite simple.
    I was connected to VPN.
    I upgraded Lenovo system update in two steps.
    I can´t connect to VPN anymore.
    Jiří Cvrk
    TP YOGA S1 .. X220, X61, T22, ms w8nd8ws

  • Copy from AFP share to AFP share (via VPN-Connection) - stupid?

    Hi there
    We set up an OS X server in a remote facility and are connecting to it over a VPN connection (Netgear Firewall).
    Everything works fine, there's only one annoying issue: if I want to copy a file from a mounted AFP share (share1) to another mounted AFP share (share2) - both of them residing on the same server - it seems to me that the files are being copied first to my local client and then back to the server again - instead of being copied directly from and to the server...
    Is there anything I can do about this issue or am I wrong? Is this a so called "feature" of the Finder itself?
    Thanks for any suggestions and regards
    Roman

    Thanks for your thoughts about higher vs. lower latency networking - I totally agree. It might be a quite uncommon setup; as the server is being "housed" in a datacenter with quite tough restrictions: not only do they charge us for the power consumption, but also for the traffic being generated - which is 250 GB a month. They're providing an uplink with 10mbps (guaranteed), burstable to 100mbits.
    Anyway, we're interested in keeping traffic low - hard to do if we cannot let end users do "common" tasks like moving files from one folder to another (of course, its a sharepoint - but they don't care).
    What I'm looking for? Well, I think it will take hours to find out which part of the setup (AFP implementation of the server, AFP on the local machines, either of them on a particular version, the Finder in general...) actually might be responsible for this behavior. And maybe there's a "solution" (if you agree that this is actually a problem" buried somewhere
    Regards
    Roman

  • ASA 5505 VPN Connection Issue

    Good morning everyone,
    At my last position I was IT Director whose area of expertise was database and application development. All of the company's networking planning and maintainence I entrusted to my sysadmin, Salvadore. Back in 2004 we began implementing major changes in the network. Salvadore recommended SonicWALL firewalls. He did a fantastic job of securing our valuable server assets. Among the many improvements Salvadore established VPN access to the datacenter assets for mobile employees. What I remember especially well was the ease-of-use: start the VPN Client then RDP to a server or connect with SQL Server, in addition to connecting to all devices on my home network. It was absolutely beautiful!
    Fast forward to today. I have since retired. I do a little bit of daytrading on the side for entertainment. I leased a dedicated server to run an application that runs continuously 24 hours a day, 5 days a week. I contacted Salvadore to do a security audit on the server. As expected the server was under constant assault by bots trying to hack the RDP port. Salvadore recommended a firewall. The datacenter host offered us two choices of Cisco firewalls, one of which we chose: ASA 5505.
    Today I have a secure server which pleases me. The one thing that bothers me however is that I lose access to my home network devices while the VPN Client is connected. Here are the symptoms:
    I cannot send an email with Outlook as I normally do by relaying off of my Internet provider's SMTP server.
    I cannot connect to the TradeStation servers with my TradeStation application using login credentials that are authorized for my home network only.
    I cannot access my Seagate network storage drive.
    This is what I discovered:
    My wireless adapter (which I use from this laptop) identifies itself as "Wireless LAN adapter Wireless Network Connection" in IPCONFIG. IPv4 address is 192.168.0.5. Default Gateway: 192.168.0.1.
    After I connect the VPN Client, IPCONFIG reports a new adapter: "Ethernet adapter Local Area Connection 2". IPv4 address is 10.0.10.4. Default Gateway: 10.0.10.1.
    When I launch Windows Task Manager and click on the Networking tab, I see those two adapters.
    When launch IE and go to bandwidthplace.com to run a test, I see all of the network traffic going over "Ethernet adapter Local Area Connection 2".
    When I disconnect VPN and then rerun the bandwidth test, I see that all of the network traffic now goes over "Wireless LAN adapter Wireless Network Connection".
    This explains all of the symptoms:
    My Internet Provider will only allow me to relay off of their email servers if I am connected to their network.
    TradeStation refuses connection to their network because my credentials do not match my network address.
    There is no Seagate network storage device on the remote server network.
    My questions to the Cisco Support Community are:
    Is this the best I can hope for?
    Must all traffic be routed through the VPN connection?
    Is there any way to route traffic destined for 10.0.*.* through VPN and everything else through the default connection?
    Thank you everyone for your help. I would be happy to provide additional detailed information.

    Hi Brian,
    you can route traffic destined to 10.0.*.* over the VPN and keep normal internet traffic unencrypted over the default connection - this setup is known as VPN Split Tunnelling.
    This doc shows how to setup the access control list and apply this to the tunnel policy.
    Hope this helps
    http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702999.shtml

Maybe you are looking for