NTBACKUP slow Between interfaces

We have an ASA5520 with 4 interfaces. Whenever I run NTBACKUP between two interfaces, it takes a very long time to complete. When I run the same backup between two nodes but behind the same interface, the backup runs about 4 times faster. My question is, because I am using one of these interfaces to support our Police Department (DOJ-Compliance regulations) and the other interface is for our City Hall: will the port security slow down the traffic because the way our network is designed is that the Police Department LAN is at the "top" and all other network segments reside below. All "lower" LANS cannot access the PD LAN, but the PD LAN can access any of them (as long as the communication originates from the PD LAN). I have noticed that the PD interface has a port security level of 100 while the City Hall interface is 75. Could that be slowing my backup? Or could it be some type of inspection process that is examing the packets as they traverse the two interfaces? I am starting the backup on a PD Server, and pushing it over to a NAS sitting over at City Hall. Any insight would be greatly appreciated. Thanks.

We have an ASA5520 with 4 interfaces. Whenever I run NTBACKUP between two interfaces, it takes a very long time to complete. When I run the same backup between two nodes but behind the same interface, the backup runs about 4 times faster. My question is, because I am using one of these interfaces to support our Police Department (DOJ-Compliance regulations) and the other interface is for our City Hall: will the port security slow down the traffic because the way our network is designed is that the Police Department LAN is at the "top" and all other network segments reside below. All "lower" LANS cannot access the PD LAN, but the PD LAN can access any of them (as long as the communication originates from the PD LAN). I have noticed that the PD interface has a port security level of 100 while the City Hall interface is 75. Could that be slowing my backup? Or could it be some type of inspection process that is examing the packets as they traverse the two interfaces? I am starting the backup on a PD Server, and pushing it over to a NAS sitting over at City Hall. Any insight would be greatly appreciated. Thanks.

Similar Messages

  • WAP200 Slow Web Interface

    Anyone else experiencing an extremely slow web interface in the WAP200?
    Even if I connect the cable side directly to my computer to eliminate our LAN as the problem, it is still painfully slow.
    For example:  After completing the login box when browsing to the AP, it takes 2-3 minutes to draw the first web page

    Using it as an access point with only 1 SSID configured for WPA/PSK/TKIP using FW 1.0.22.
    The other day, after the unit had been on for about a week, the "Setup.htm" page took about 2 hours to load into a browser.
    Using the Linux "wget" command from another machine as a test showed that the webserver within the unit transmitted 1448 bytes to begin with, and then stopped for 20 minutes, and then sent about another 16K bytes of data.
    Since the symptom is present on windows XP IE7 and Windows 2000 IE6, as well as a generic linux command-line command, it tells me that the WAP200 is the problem.
    In each case, I tested with the computer connected direct to the WAP200 without any other networking devices between them.
    Message Edited by rgagnon on 03-22-2008 04:21 PM

  • Difference between Interface node and normal node?

    What is the main difference between  Interface node and normal node?
    Cheers
    Aisurya.

    Hi surya,
    Interface node or methods comes into picture whenever you want to use one component as used component. I mean to say
    Component usages. If you select node as interface node, it will available in another component so you can use that node or methods.
    Normal node means in that component only. Simply we can say for component usages we go for interface nodes.
    Cehck This...
    http://help.sap.com/saphelp_nw70ehp1/helpdata/EN/79/555e3f71e41e26e10000000a114084/content.htm
    Cheers,
    Kris.

  • Difference between interface pool and class pool

    Hi,
    Can any body tell me the difference between Interface pool and Class pool.
    thank you in advance.
    regards

    Hi,
    Class and Interface Pools
    This section discusses the structure and special features of class and interface pools for global classes.
    Global Classes and Interfaces
    Classes and interfaces are object types. You can define them either globally in the Repository or locally in an ABAP program. If you define classes and interfaces globally, special ABAP programs called class pools or interface pools of type K or J serve as containers for the respective classes and interfaces. Each class or interface pool contains the definition of a single class or interface. The programs are automatically generated by the Class Builder when you create a class or interface.
    A class pool is comparable to a module pool or function group. It contains both declarative and executable ABAP statements, but cannot be started on its own. The runtime system can create runtime instances (objects) through a request using the CREATE OBJECT statement. These objects execute the statements of the class pool.
    Interface pools do not contain any executable statements. Instead, they are used as containers for interface definitions. When you implement an interface in a class, the interface definition is implicitly included in the class definition.
    Structure of a Class Pool
    Class pools are structured as follows:
    Class pools contain a definition part for type declarations, and the declaration and implementation parts of the class.
    Differences From Other ABAP Programs
    Class pools are different from other ABAP programs for the following reasons:
    ·        ABAP programs such as executable programs, module pools, or function modules, usually have a declaration part in which the global data for the program is defined. This data is visible in all of the processing blocks in the program. Class pools, on the other hand, have a definition part in which you can define data and object types, but no data objects or field symbols. The types that you define in a class pool are only visible in the implementation part of the global class.
    ·        The only processing blocks that you can use are the declaration part and implementation part of the global class. The implementation part may only implement the methods declared in the global class. You cannot use any of the other ABAP processing blocks (dialog modules, event blocks, subroutines, function modules).
    ·        The processing blocks of class pools are not controlled by the ABAP runtime environment. No events occur, and you cannot call any dialog modules or procedures. Class pools serve exclusively for class programming. You can only access the data and functions of a class using its interface.
    ·        Since events and dialog modules are not permitted in classes, you cannot process screens in classes. You cannot program lists and selection screens in classes, since they cannot react to the appropriate events. It is intended to make screens available in classes. Instead of dialog modules, it will be possible to call methods of the class from the screen flow logic.
    Local Classes in Class Pools
    The classes and interfaces that you define in the definition part of a class pool are not visible externally. Within the class pool, they have a similar function to local classes and interfaces in other ABAP programs. Local classes can only be instantiated in the methods of the global class. Since subroutines are not allowed in class pools, local classes are the only possible modularization unit in global classes. Local classes have roughly the same function for global classes as subroutines in function groups, but with the significant exception that they are not visible externally
    Reward points if useful....
    Regards
    AK

  • Re: FORTE Libraries handling (between interfaces andimplementations) q

    From [email protected] Wed Feb 24 07:24:54 1999
    Subject: FORTE Libraries handling (between interfaces and implementations)
    question
    Hi,
    When a plan gets distributed as library, a '.sl' file is generated, as well as a
    pex file and some header files.
    When we need that library, we 'should' include that generated pex file in the
    workspace used for the distribution.
    What's the impact of keeping the original ('implementation'?) plan for the
    library, and not replacing it with the generated
    pex file ?
    J-Paul Gabrielli & Charles Abecassis
    Sema DTS
    The result would be that you're not using the library version of the plan.
    Instead, you'll have a separate copy built into your image repository
    or executable. In other words, it will be as if you'd never generated
    the plan as a library.
    Mike Schilling
    Forte Software
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

    From [email protected] Wed Feb 24 07:24:54 1999
    Subject: FORTE Libraries handling (between interfaces and implementations)
    question
    Hi,
    When a plan gets distributed as library, a '.sl' file is generated, as well as a
    pex file and some header files.
    When we need that library, we 'should' include that generated pex file in the
    workspace used for the distribution.
    What's the impact of keeping the original ('implementation'?) plan for the
    library, and not replacing it with the generated
    pex file ?
    J-Paul Gabrielli & Charles Abecassis
    Sema DTS
    The result would be that you're not using the library version of the plan.
    Instead, you'll have a separate copy built into your image repository
    or executable. In other words, it will be as if you'd never generated
    the plan as a library.
    Mike Schilling
    Forte Software
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

  • RE: FORTE Libraries handling (between interfaces andimplementati ons)

    Charles..
    If you are talking about different repositories in a single environment, I
    am guessing the uuid of the pex file has to be the same. I am not sure if
    the pex file forte creates will have the same uuid as the pex file you
    obtain when you export with uuid from fscript. If uuid is important for
    installed libraries, which I think is true, then there-in lies the impact!!
    Cheers!!
    -Ravi Kalidindi
    Born Info Svcs Group
    -----Original Message-----
    From: Charles Abecassis [SMTP:[email protected]]
    Sent: Wednesday, February 24, 1999 9:18 AM
    Cc: '[email protected]'
    Subject: FORTE Libraries handling (between interfaces and
    implementations) question
    Hi,
    When a plan gets distributed as library, a '.sl' file is generated, as
    well as a
    pex file and some header files.
    When we need that library, we 'should' include that generated pex file in
    the
    workspace used for the distribution.
    What's the impact of keeping the original ('implementation'?) plan for the
    library, and not replacing it with the generated
    pex file ?
    J-Paul Gabrielli & Charles Abecassis
    Sema DTS
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>-
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

    thanks a lot.
    But when the plan is distributed, there's no way of revealing the code that made it, isn't it ?
    -----Message d'origine-----
    De: Wang, Tien [SMTP:[email protected]]
    Date: mercredi 24 fevrier 1999 18:26
    A: 'Charles Abecassis'; 'Kalidindi, Ravi CWT-MSP'
    Cc: '[email protected]'
    Objet: RE: FORTE Libraries handling (between interfaces and implementati ons) question
    Hi Charles & Ravi,
    Another aspect of this subject is:
    Many times, libraries are designed to give to someone without revealing
    your code. If you decide to have the original project included, this
    means your program will use it as a supplier plan. It also implies your
    program will have knowledge of the original project and its parent
    supplier plans and so on.
    If you don't care about revealing your original code and dragging all
    the related projects into your program, it's fine. It has advantage:
    if you decide to change something in your original project, you can just
    run it without re-making distribution as a library.
    However, if your original project seems pretty stable and can be shared
    by other application, making it as a library is not a bad idea.
    Hope this helps.
    Regards,
    Tien Wang
    Indus Consultancy Services
    (201) 261-3100 ext 236
    [email protected]
    www.indcon.com
    From: Kalidindi, Ravi CWT-MSP[SMTP:[email protected]]
    Reply To: Kalidindi, Ravi CWT-MSP
    Sent: Wednesday, February 24, 1999 11:47 AM
    To: 'Charles Abecassis'
    Cc: '[email protected]'
    Subject: RE: FORTE Libraries handling (between interfaces and
    implementati ons) question
    Charles..
    If you are talking about different repositories in a single
    environment, I
    am guessing the uuid of the pex file has to be the same. I am not sure
    if
    the pex file forte creates will have the same uuid as the pex file you
    obtain when you export with uuid from fscript. If uuid is important
    for
    installed libraries, which I think is true, then there-in lies the
    impact!!
    Cheers!!
    -Ravi Kalidindi
    Born Info Svcs Group
    -----Original Message-----
    From: Charles Abecassis
    [SMTP:[email protected]]
    Sent: Wednesday, February 24, 1999 9:18 AM
    Cc: '[email protected]'
    Subject: FORTE Libraries handling (between interfaces and
    implementations) question
    Hi,
    When a plan gets distributed as library, a '.sl' file is generated,as
    well as a
    pex file and some header files.
    When we need that library, we 'should' include that generated pexfile in
    the
    workspace used for the distribution.
    What's the impact of keeping the original ('implementation'?) planfor the
    library, and not replacing it with the generated
    pex file ?
    J-Paul Gabrielli & Charles Abecassis
    Sema DTS
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive<URL:http://pinehurst.sageit.com/listarchive/>
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive
    <URL:http://pinehurst.sageit.com/listarchive/>
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

  • Difference between interface view and interface controller

    Hi,
    What is the difference between interface controller and interface view?
    When we will use interface controller and when we will use interface view?
    How do we create an interface view?
    How do we attach this interface view to a view in another component
    Regards
    MQ

    Hi
    Interface View Controllers
    A) Implement event handlers which are called when ..
           -starting (start-up plugs) Web Dypro applications
           -a component is reached via navigation (inbound plugs)
    B) Allow fireing outbound plugs (navigation)
    C) Allow firing exit plug
    D) Have no own context, public methods or events
    Interface Controller of a Component
    The interface controller of a Web Dynpro component contains all context nodes, events and methods of the component controller to which you assigned the Interface addition in the Controller Editor. These parts can be displayed in the interface controller view, although you cannot edit them here.
    Interface Controller of a Component Interface
    A Web Dynpro component interface can be created independently and defined so that it can be implemented later in any components (see working with Web Dynpro Component Interfaces in the Programming Manual of this documentation). That is why in this case you can define the context nodes, methods and events you require in the interface controller view. The relevant implementation then takes place in the component controller of the implementing component.
    Check this links and work on it.
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/webcontent/uuid/28113de9-0601-0010-71a3-c87806865f26?rid=/library/uuid/49f2ea90-0201-0010-ce8e-de18b94aee2d#13 [original link is broken]
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/webcontent/uuid/28113de9-0601-0010-71a3-c87806865f26?rid=/library/uuid/49f2ea90-0201-0010-ce8e-de18b94aee2d#12 [original link is broken]
    Interface view and interface controller
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f727d100-0801-0010-4cbd-b0ad5c161945
    Difference between custom controller and interface component
    Thanks and Regards,
    Tulasi Palnati

  • Difference between interface and conversion

    could you give me the difference between interface and conversion

    hi
    <b>Conversion,</b> converting legacy system data into SAP data. Meaning that it is mainly a one shot deal, for example bringing your customer master to SAP from the legacy system, converting the fields used in legacy to the fields and values used in SAP.
    <b>Interface,</b> a program or group of programs that handle the passing of data from one system to another. These programs work together to export the data from one system and import into a target system, maybe these programs run once a day, maybe twice, may every hour throughout the day. It is a good way to keep the data in two or more systems in sync with each other.
    Interface programs are also data extract program. Data is extracted from SAP into a flat file and transferred to other external systems like UNIX, mainframe.
    In data extracts, the file layout is designed and this layout should be in synch with other external systems.
    <b>reward poins for useful ans</b>
    Regards
    Aarti

  • What is the difference between Interface and Conversion?

    Hi friends,
       Can any one teel me What is the difference between Interface and Conversion in detail.
    Rewarded with points
    Thanks & Regards,
    Naren.

    Hi,
       interface can be outbound i.e writing data to
       application server using open dataset,transfer
      or downloading data (gui_download)
       inbound -> reading data from application server using
                  open dataset,read dataset,uploading data
                  using gui_upload.
       conversion:BAtch data communication method
                  where legavy data is uploaded in SAp.
    Regards
    Amole

  • Slow User Interface Performance on a Mac Pro

    I've recently purchased a late 2013 6-core Mac Pro with 16gb of memory and the 256gb SSD.  While the general performance of Final Cut Pro X is outstanding (applying filters, transitions, analyzing for dominant motion, optical flow retiming, rendering, etc.), the user interface seems to still start to slow down the further along I am in my project.  It is most noticeable when I click a clip in my timeline to modify a video property in the inspector, then hit play (spacebar) again to resume editing.  At the start of a project, I can fly through my clips and edit without any hesitation, but as I near the 90 second-ish mark (with an edit/clip every 5-10 seconds), the responsiveness of the user interface starts to waiver just like my previous early 2011 Macbook Pro (something I thought was related to the graphics and/or system performance of computers from that era).
    I've tried creating proxy and optimized media projects and even edited my h.264 footage in native, compressed format - regardless of what I try, the performance of the user interface is nearly identical until I start to hit a few minutes with some colour corrections on 25% of the clips.  I've also experimented with the playback quality during editing (i.e., best performance vs. quality) which resulted in minimal performance improvements.
    Clearly, this Mac Pro has been designed to tear through video footage and process mass amounts of data, but I wonder if there is something else looming in the code of Final Cut Pro X that, regardless of the computer in use, the user interface just gets sluggish at a certain point when a critical mass of edits/clips are in a project.
    Any comments or feedback would be greatly welcomed, as I may decide to return this beast and settle on an iMac if this symptom exists regardless of what Mac I use.
    Sincerely,
    Ryan Smith

    1.  All of my media was located on the SSD installed inside the Mac Pro and is the startup disk of the computer
    This will slow you down.  Get a secondary drive for the media and Libraries.
    2.  The SSD had between 50g and 150g (depending on the project) available
    That drive is becoming too full, and slowing down.
    3.  The project consisted of a single event from one import, about 100 files totalling 40g
    A good USB 3 or Thunderbolt external RAID will fly through that without issue.  The system drive will get bogged down.
    4.  I haven't paid close enough attention to Activity Monitor; I will start doing that, but FCPX is the only application I ever have open when editing and consumes about 12gb - 16gb.
    16GB RAM should be plenty for FCPX.  I've never seen it eat up that much RAM, even on very large projects.  But more RAM won't hurt if the system is using that much RAM.  How are you getting those RAM usage numbers?
    The issue seems to be your drive.  First, don't use the system drive, that will bog things down, no matter what type of drive it is.  Second, get your media and Libraries on a fast secondary (external) drive. 
    Finally, are you running with the dual D500 or D700 GPUs?  There is a significant performance difference between the two in FCPX and Motion 5.  But I highly doubt that's your issue.  I think you simply are eating up too much of your drive, and running off the system drive, both are huge no-no's.

  • Slow user interface

    Hello all,
    I have a program that's been getting fatter and slower as of late (about a hundred panels!). The CVI profiler doesn't work (there's another thread discussing this) but gprof and valgrind run fine on it. I discovered that most of the time is spent inside the cvi runtime engine in functions I have no access to but from some hints I think they are related to the user interface. I have a simple question: If I call SetCtrlVal repeatedly without changing the value (or SetCtrlAttribute without changing the attribute), does the user interface wastes time updating the control in the user interface ?
    Solved!
    Go to Solution.

    In case of a hevy user interface vs. a fast acquisition process I have used a thread safe queue to pass data between the acquisition thread and a slow timer used to update the user interface. The timer works at 2 or 3 hz, while the separate thread is notably faster. I use a 1-element queue with auto flush so that the timer retrieve the last value put in the queue.
    This system guarantees that the acquisition thread can run as fast as required while user interface updates do not stress the system unnecessarily.
    In the timer of course SetCtrlAttribute (..., ..., ATTR_CTRL_VAL, ...) is mandatory.
    Proud to use LW/CVI from 3.1 on.
    My contributions to the Developer Zone Community
    If I have helped you, why not giving me a kudos?

  • How to use a variable between interfaces or class?

    Hello All;
    Far by now I can say that the forum is very helpful for me. Thanks for all the people who have the time and generosity to help our problems. Thank you.
    Unfortunately I have a problem <Again :( >
    I want to use a variable in two different *.java files.
    Is it possible?
    The Variable i want to use is; int CiftSayisi
    The variable is declared in the CamCalib.Java under a button's Action Listener.
    Here is the code;
    public void actionPerformed(ActionEvent arg0) {
                        ImagePair.main(null);
                        String[] ImPath = list.getItems();                                           //Storing Items in an Array
                        Dimension dim = Toolkit.getDefaultToolkit().getScreenSize();                     //Dimensions of the Screen Storing in an object
                        int ScreenHeight = dim.height;                                           //Definition ScreenHeight
                        int ScreenWidth = dim.width;                                          //Definition ScreenWidth
                        // System.out.println(ScreenHeight);                                                    //Testing of the Dimensions
                        // System.out.println(ScreenWidth);                                                     //Testing of the Dimensions
                        int CiftSayisi = ImPath.length -1 ;
                        if (CiftSayisi == 0){
                             System.out.println("Added Images do not Construct a Pair");
                        else {
    }Now i want to use it in another java file which is ImagePair.Java in the loading part of the interface;
                 setType(Type.UTILITY);
              setTitle("Image Pair Selection");
              setResizable(false);
              setAlwaysOnTop(true);
              setBounds(100, 100, 450, 68);
              contentPane = new JPanel();
              contentPane.setBorder(new EmptyBorder(5, 5, 5, 5));
              setContentPane(contentPane);
              contentPane.setLayout(null);
              textField = new JTextField();
              textField.setBounds(61, 11, 22, 20);
              textField.setEditable(false);
              textField.setEnabled(false);
              contentPane.add(textField);
              textField.setColumns(2);I have a text field in here that i need to fill with the value of CiftSayisi
    Any help please?
    ömer kaya
    METU-GGIT
    Edited by: Ömer K. on Apr 10, 2012 12:43 AM

    I didn't bother reading the code, since you didn't format it.
    But to answer your question (if I understand it correctly), yes, it is possible to pass variables between different object instances (not from an interface specifically, since interfaces don't have members). The simplest way to pass the variable as an argument to a method or constructor. If these aren't available, you could create a static global variable, though in a multithreaded app you'd have to synchronize access.

  • LaserJet 600 M602 very slow between each documents

    Hi,
    Our Laserjet 600 M602 printer is very slow to print between each documents.  (around 30 seconds).  Same problem with osx 10.6, 10.7, 10.8 and 10.9.
    Can someone help me?

    Hello NorthernPike, and welcome to the HP Forums.
    I am sorry, but to get your issue more exposure I would suggest posting it in the commercial forums since this is a commercial product. You can do this at HP Commercial LaserJet Forums.
    I hope this helps!
    Please click “Accept as Solution " if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos, Thumbs Up" on the right to say “Thanks" for helping!
    Jamieson
    I work on behalf of HP
    "Remember, I'm pulling for you, we're all in this together!" - Red Green.

  • Having issues on ASA 5510 pass traffic between interfaces

    I am trying to pass traffic between two internal interfaces but am unable to.  Been searching quite a bit and have tried several things to no avail. I feel like there is a simple solution here I am just not seeing. Here is the relevant portion of my config:
    interface Ethernet0/1
    nameif inside
    security-level 100
    ip address 192.168.5.1 255.255.255.0
    interface Ethernet0/2
    nameif ct-users
    security-level 100
    ip address 10.12.0.1 255.255.0.0
    same-security-traffic permit inter-interface
    access-list inside_nat0_outbound extended permit ip any 192.168.5.0 255.255.255.0
    access-list inside_nat0_outbound extended permit ip any 10.12.0.0 255.255.0.0
    access-list inside_access_in extended permit ip any any
    nat (inside) 0 access-list inside_nat0_outbound
    nat (inside) 1 0.0.0.0 0.0.0.0
    nat (ct-users) 0 access-list inside_nat0_outbound
    nat (ct-users) 1 0.0.0.0 0.0.0.0
    static (inside,ct-users) 192.168.5.0 192.168.5.0 netmask 255.255.255.0
    static (ct-users,inside) 10.12.0.0 10.12.0.0 netmask 255.255.0.0
    access-group outside_access_in in interface outside
    access-group outside_access_ipv6_in in interface outside
    access-group inside_access_in in interface inside
    access-group inside_access_ipv6_in in interface inside
    access-group inside_access_in in interface ct-users
    access-group inside_access_ipv6_in in interface ct-users
    On both networks I am able to access the internet, just not traffic between each other.
    A packet-tracer reveals the following (it's hitting some weird rules on the way):
    cybertron# packet-tracer input inside tcp 192.168.5.2 ssh 10.12.0.2 ssh detailed
    Phase: 1
    Type: ACCESS-LIST
    Subtype:
    Result: ALLOW
    Config:
    Implicit Rule
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xab827020, priority=1, domain=permit, deny=false
    hits=8628156090, user_data=0x0, cs_id=0x0, l3_type=0x8
    src mac=0000.0000.0000, mask=0000.0000.0000
    dst mac=0000.0000.0000, mask=0100.0000.0000
    Phase: 2
    Type: UN-NAT
    Subtype: static
    Result: ALLOW
    Config:
    static (ct-users,inside) 10.12.0.0 10.12.0.0 netmask 255.255.0.0
    match ip ct-users 10.12.0.0 255.255.0.0 inside any
    static translation to 10.12.0.0
    translate_hits = 0, untranslate_hits = 6
    Additional Information:
    NAT divert to egress interface ct-users
    Untranslate 10.12.0.0/0 to 10.12.0.0/0 using netmask 255.255.0.0
    Phase: 3
    Type: ACCESS-LIST
    Subtype: log
    Result: ALLOW
    Config:
    access-group inside_access_in in interface inside
    access-list inside_access_in extended permit ip any any
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xad5bec88, priority=12, domain=permit, deny=false
    hits=173081, user_data=0xa8a76ac0, cs_id=0x0, flags=0x0, protocol=0
    src ip=0.0.0.0, mask=0.0.0.0, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 4
    Type: IP-OPTIONS
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xab829758, priority=0, domain=inspect-ip-options, deny=true
    hits=146139764, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0
    src ip=0.0.0.0, mask=0.0.0.0, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 5
    Type: NAT-EXEMPT
    Subtype: rpf-check
    Result: ALLOW
    Config:
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xad48c860, priority=6, domain=nat-exempt-reverse, deny=false
    hits=2, user_data=0xad4b5e98, cs_id=0x0, use_real_addr, flags=0x0, protocol=0
    src ip=192.168.5.0, mask=255.255.255.0, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 6
    Type: NAT-EXEMPT
    Subtype:
    Result: ALLOW
    Config:
    match ip inside any ct-users 10.12.0.0 255.255.0.0
    NAT exempt
    translate_hits = 2, untranslate_hits = 2
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xad3b1f70, priority=6, domain=nat-exempt, deny=false
    hits=2, user_data=0xad62b7a8, cs_id=0x0, use_real_addr, flags=0x0, protocol=0
    src ip=0.0.0.0, mask=0.0.0.0, port=0
    dst ip=10.12.0.0, mask=255.255.0.0, port=0, dscp=0x0
    Phase: 7
    Type: NAT
    Subtype:
    Result: ALLOW
    Config:
    static (inside,ct-users) 192.168.5.0 192.168.5.0 netmask 255.255.255.0
    match ip inside 192.168.5.0 255.255.255.0 ct-users any
    static translation to 192.168.5.0
    translate_hits = 1, untranslate_hits = 15
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xadf7a778, priority=5, domain=nat, deny=false
    hits=6, user_data=0xad80cfd0, cs_id=0x0, flags=0x0, protocol=0
    src ip=192.168.5.0, mask=255.255.255.0, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 8
    Type: NAT
    Subtype: host-limits
    Result: ALLOW
    Config:
    static (inside,outside) udp 184.73.2.1 1514 192.168.5.2 1514 netmask 255.255.255.255
    match udp inside host 192.168.5.2 eq 1514 outside any
    static translation to 184.73.2.1/1514
    translate_hits = 0, untranslate_hits = 0
    Additional Information:
    Forward Flow based lookup yields rule:
    in id=0xab8e2928, priority=5, domain=host, deny=false
    hits=9276881, user_data=0xab8e1d20, cs_id=0x0, reverse, flags=0x0, protocol=0
    src ip=192.168.5.2, mask=255.255.255.255, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 9
    Type: NAT
    Subtype: rpf-check
    Result: ALLOW
    Config:
    static (ct-users,inside) 10.12.0.0 10.12.0.0 netmask 255.255.0.0
    match ip ct-users 10.12.0.0 255.255.0.0 inside any
    static translation to 10.12.0.0
    translate_hits = 0, untranslate_hits = 6
    Additional Information:
    Forward Flow based lookup yields rule:
    out id=0xad158dc0, priority=5, domain=nat-reverse, deny=false
    hits=6, user_data=0xac0fb6b8, cs_id=0x0, flags=0x0, protocol=0
    src ip=0.0.0.0, mask=0.0.0.0, port=0
    dst ip=10.12.0.0, mask=255.255.0.0, port=0, dscp=0x0
    Phase: 10
    Type: NAT
    Subtype: host-limits
    Result: ALLOW
    Config:
    static (ct-users,inside) 10.12.0.0 10.12.0.0 netmask 255.255.0.0
    match ip ct-users 10.12.0.0 255.255.0.0 inside any
    static translation to 10.12.0.0
    translate_hits = 0, untranslate_hits = 6
    Additional Information:
    Reverse Flow based lookup yields rule:
    in id=0xada0cd38, priority=5, domain=host, deny=false
    hits=131, user_data=0xac0fb6b8, cs_id=0x0, reverse, flags=0x0, protocol=0
    src ip=10.12.0.0, mask=255.255.0.0, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 11
    Type: IP-OPTIONS
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    Reverse Flow based lookup yields rule:
    in id=0xad5c1ab0, priority=0, domain=inspect-ip-options, deny=true
    hits=130, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0
    src ip=0.0.0.0, mask=0.0.0.0, port=0
    dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
    Phase: 12
    Type: FLOW-CREATION
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    New flow created with id 189385494, packet dispatched to next module
    Module information for forward flow ...
    snp_fp_tracer_drop
    snp_fp_inspect_ip_options
    snp_fp_tcp_normalizer
    snp_fp_translate
    snp_fp_adjacency
    snp_fp_fragment
    snp_ifc_stat
    Module information for reverse flow ...
    snp_fp_tracer_drop
    snp_fp_inspect_ip_options
    snp_fp_translate
    snp_fp_tcp_normalizer
    snp_fp_adjacency
    snp_fp_fragment
    snp_ifc_stat
    Result:
    input-interface: inside
    input-status: up
    input-line-status: up
    output-interface: ct-users
    output-status: up
    output-line-status: up
    Action: allow

    how are you testing? if you are pinging between the subnets, make sure you have disabled windows firewall and/or any other firewall that is installed on the PCs (remember to re-enable it later).
    Are the NAT commands there because you were trying different things to get this working?  I suggest you use the command no nat-control instead.  Depending on the version of ASA you are running it may already be disabled by default.  In version 8.4 and later nat-control has been removed completely.
    Please remember to select a correct answer and rate helpful posts

  • [Solved] Netcfg switches between interfaces

    Hello,
    I switched to netcfg, to get a pure systemd install.
    How ever, sometimes the netcfg can't bring up the interface even though it used that interface before.
    It's like netcfg are switching between what interface it can use. Sometimes it's eth0 other times eth1.
    So when I boot and don't have any network connection, I change the config files to use the other interface (ex. eth1) and netcfg can connect.
    How can this be?
    configs:
    /etc/network.d/mynetwork
    CONNECTION='ethernet'
    DESCRIPTION='A basic static ethernet connection using iproute'
    INTERFACE='eth1'
    IP='static'
    ADDR='192.168.1.3'
    #ROUTES=('192.168.0.0/24 via 192.168.1.2')
    GATEWAY='192.168.1.1'
    DNS=('dns1', 'dns2)
    ## For IPv6 autoconfiguration
    #IP6=stateless
    ## For IPv6 static address configuration
    #IP6='static'
    #ADDR6=('1234:5678:9abc:def::1/64' '1234:3456::123/96')
    #ROUTES6=('abcd::1234')
    #GATEWAY6='1234:0:123::abcd'
    /etc/conf.d/netcfg
    # Enable these netcfg profiles at boot time.
    # - prefix an entry with a '@' to background its startup
    # - set to 'last' to restore the profiles running at the last shutdown
    # - set to 'menu' to present a menu (requires the dialog package)
    # Network profiles are found in /etc/network.d
    NETWORKS=(mynetwork)
    # Specify the name of your wired interface for net-auto-wired
    WIRED_INTERFACE="eth1"
    # Specify the name of your wireless interface for net-auto-wireless
    #WIRELESS_INTERFACE="wlan0"
    # Array of profiles that may be started by net-auto-wireless.
    # When not specified, all wireless profiles are considered.
    #AUTO_PROFILES=("profile1" "profile2")
    Last edited by KLIM (2012-12-06 14:22:23)

    Did you checked for netcfg.service is enabled (systemd) ?
    BTW, I see a missing single quote on DNS line : DNS=('dns1', 'dns2)
    You may check these forum posts :
    "[SOLVED] Netcfg.service always failing." @ https://bbs.archlinux.org/viewtopic.php?id=148079
    "Systemd and Netcfg" @ https://bbs.archlinux.org/viewtopic.php?id=151662
    "netcfg/systemd not bringing up eth0 (static profile)" @ https://bbs.archlinux.org/viewtopic.php?id=147300
    "[SOLVED] netcfg fails at boot" @ https://bbs.archlinux.org/viewtopic.php?pid=1200518
    And this wiki entry about netcfg @ https://wiki.archlinux.org/index.php/Netcfg

Maybe you are looking for

  • Error when connect OC4j From Jdev

    I setup Oracle Application Server 10g 10.1.3 successful, I have OPMN name is : opmn_name1 In this opmn_name1, I created OC4J instance name is : oc4j1 From Jdev 10.1.3.2.0, I created connection as follows: 1. Connection Name: conn2 2. Connection Type:

  • ATI HD 3870 drivers

    Hello, where can I find these? I looked on ATI / AMD site and they don't have them there anymore. Or I just can't find them there. What happened was I upgraded to 10.6.5 a few weeks back. All was well. My ATI HD 3870 and my NVidia GeForce 7300GT were

  • Opening and editing .pub files

    Can anybody tell me if there is any way to open and edit .pub files without converting them into PDF's???

  • CR won't run via Business One

    I have Crystal Reports 2008 installed with Business One, but I can only get the reports to run if I'm working on the server.  At any other workstation, I get a Microsoft .Net Framework error when I try to run a Crystal Report from SAPB1.  I followed

  • Is there any way to remove applications like Chess from Lion?

    My mini came with installed apps that I will never use.Chess is a game I never Play. Face Time and Photo Booth I cannot use since my non Mac monitor has no camera. I would Like to remove these apps from my hard driv but get a message saying that hte