Pix515 multiple interface configuration

Hi, actually i have this scenario:pix 515e version 6.2(2) with on board
6 interfaces but now configure with 3 interfaces (in this mode):
INTERNET ROUTER (ETH 172.17.10.1)
I
I
I
I(OUTSIDE - 172.17.10.2)
PIX -INTF2--.2--------------(172.17.12.0/29)--------.3(PARTNER)
INSIDE (172.17.8.1/23)
I
I
I
I
MY LAN
then 3 interfaces configuration without NAT.
there are the static routes:
route outside 0.0.0.0 0.0.0.0 172.17.10.1 1 route intf2 192.168.54.209 255.255.255.255 172.17.12.3 1 route intf2 192.168.129.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.131.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.134.0 255.255.255.0 172.17.12.3 1
traffic outcomes from my default gateway coming out from 172.17.10.1, traffic out/in from /to network 192.168.x.x/16 is forwarded from intf2 this scenario works well.
but tomorrow i must add new two routers on 2 new interfaces and i would have this new scenario:
ISP ROUTER (.3 ) ISP ROUTER (.1)
\ I
172.17.14.0/30 \ I 172.17.10.0/30
\ I
INTF3(.2) \ I(OUTSIDE - .2)
(PARTNER)(.3)(172.17.13.0/29)INTF5(.2)PIX-INTF2(.2)(172.17.12.0/29)(.3)(PARTNER)
INSIDE (172.17.8.1/23)
I
I
I
I
I
MY LAN
and this would have to be future situation:
the traffic that outcomes from 172.17.8.1/25 coming out from
172.17.10.1
the traffic that outcomes from 172.17.8.128/25 coming out from a new interface 172.17.14.3 except traffic out/in from 192.168.0.0/16 coming out from 172.17.12.3 traffic that outcomes from 172.17.9.1/25 coming out from interface
172.17.14.3 except traffic out/in 192.168.0.0/16 coming out from
172.17.13.3
traffic outcomes from 172.17.9.128/25 coming out from 172.17.10.1
is it possible this scenario?
can you help me with this configuration?obbligatory i use NAT?
sorry for my bad english...
thanks in advance
Matt

Try these links:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00804619d8.shtml
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094763.shtml
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094769.shtml

Similar Messages

Single SOAP receiver adapter for multiple interfaces

Hi,
I have to send multiple interfaces like Vendor, Customer, Material to one receiver.
I want to configure only one communication channel (receiver SOAP adapter) to send all these interfaces. Is this possible?
Currently I am provided with different URLs from the receiver system as below.
http://host:port/Services/Vendor.wsdl
http://host:port/Services/customer.wsdl
http://host:port/ServicesMaterial.wsdl
I will be having 3 Sender agreement, 3 receiver determination, 3 interface determination and 3 Receiver agreement.
I want only one SOAP reciever adapter which goes inside all the above 3 Receiver agreement.
So When I give the target url as http://host:port/Services, the messages fail.
But When I specify the full targert url in the adapter as http://host:port/Services/Vendor.wsdl then it works.
Which means I would have to create as many communication channel as interfaces.
Is there a work around for this?

hi kantheri,
For this, we have to fill the TargetURL and the SOAPAction in Receiver Communication channel dynamically.
So, we need to write UDF in Message Mappings using DynamicConfiguration to fill the TargetURL and the SOAPAction Dynamically.
DynamicConfigurationKey keyURL = DynamicConfigurationKey.create("http://sap.com/xi/XI/System/SOAP","THeaderSOAPACTION");
DynamicConfigurationKey targetURL=DynamicConfigurationKey.create("http://sap.com/xi/XI/System/SOAP","TServerLocation");
// access dynamic configuration
DynamicConfiguration conf = (DynamicConfiguration) container
.getTransformationParameters()
.get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
conf.put(keyURL,"Soap action");
conf.put(targetURL,"target url");
return "";
In this UDF, we are filling the TargetURL in u201CTServerLocationu201D message attribute and SOAPAction in u201CTHeaderSOAPActionu201D message attribute.
So, whenever we execute this corresponding operation these values will be filled in receiver communication channel at runtime.
TargetURL- Give some dummy URL or http://
SOAPAction - *
regards,
ganesh.

Idoc to multiple interfaces in XI

Hi,
how can we handle same Idoc ( MATMAS.MATMAS03) sending to multiple interfaces in XI otherthan using multi mapping?
If we develop one scenario now and in future if you want to send same idoc to different systems, do we have to change the existing interface?. Alternatively is it possible to add another interface?. Please clarify.

ok, as it's case 1, I think it's easier.
You have two ways:
1. Inside ID, use your previous Scenario:
=> after that, you will have 1 scenario...
1.1 Create a new Business Process (BPM_2)
1.2 Inside your existing Receiver Determination, add your new BPM_2 as a receiver (use righ-click + "insert above").
1.3 with your triplet "Sender_name + Sender_interface + BPM_2", create your Interface Determination
1.4 As receiver is a BPM, Receiver Agreement is not needed.
Then, you need to configure the step "BPM_2 -> Receiver_2"
1.5 Create a Receiver Determination between your BPM_2 (sender) and your receiver_2.
1.6 create your Interface Determination
1.7 create your Receiver Agreement (receiver adapter)
2. Inside ID, use a new Scenario:
=> after that, you will have 2 scenarios which use the SAME Receiver Determination "Matmas -> Receiver_1 + BPM_2"
2.1 create a new Scenario
2.2 ADD to this scenario your existing Receiver Determination ("Matmas -> Receiver_1").
2.2 do the same steps than "1.1 -> 1.7"
At the end, you will have:
Matmas --> | Receiver_1 => File_1 with single Idoc
 | BPM_2
 BPM_2 --> Receiver_2 => File_2 with collected IDocs
Mickael
Message was edited by: Mickael Huchet

Assigning multiple interfaces for Oracle API Gateway (OAG)

We are deploying Oracle API Gateway to throttle our incoming API requests. We would like to keep the incoming external API requests separate from the internal configuration management so that they go through different interfaces when accessing the OAG server. This is mainly for security reasons so that the external people won’t have access to the interface used by internal operations team to manage OAG. Based on your experience, is there any standard best practice to accomplish this? We were thinking to perhaps use two of the server’s network interfaces with different IPs, one for the incoming API requests and the other for the internal admin management of OAG. But not sure if this is the best way to do what we need. We are aware of OAG's capability to support two separate ports to handle this situation, but would like a more secure set-up that could completely eliminate external access to the OAG management done by the IT team.
Would appreciate any thoughts on best practices used regarding multiple interfaces for OAG set-up. Thank you. Oracle Marketing Cloud.

You are on the right track.
Here is how you can achieve this:
You can use multiple network interfaces on the UNIX machine and setup networking/routing in such a way that all external traffic comes on on one card and is routed internally via a different card.
Segregate difference types of services (i.e to be used by external clients vs internal apps) into difference different "Service Groups". Have each of these service groups listen on different port + NIC card (under Listeners, you can define a port to list to list on a specific network address and port instead of *).
Setup additional protection for services that will be accessed by external clients. Use "Threatening Content " filter to protect your services.
Setup 2 way SSL for the interface that will be called by external clients. Setup a DN based authorization check if you want to have both authentication and authorization.
Hope this helps.
-Thanks,
Ankit Kumar

WSA Multiple Interface Question

Due to the fact that the ASA has a limitation with WCCP (http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/dhcp.html#wp1094628) of having the client and WCCP proxy on the same interface not allowing WCCP redirect pass through. I was curious if anyone has deployed a WSA in a dual homed infrastructure to support the multiple interfaces and pass through limitations? Would love to have p1 assigned the inside proxy and p2 assigned for the dmz proxy. I have not tested this yet but will be tomorrow, figured I would post tonight to solicit feedback.
Cisco ASA 5550 - 8.0.4(32)
outside - x.x.x.x
dmz - 10.255.0.100 /24
inside - 10.0.0.100 /24
WSA P1 - 10.0.0.200 - currently supports inside -> outside proxy
WSA P2 - 10.255.0.200 ????? to support the dmz -> outside proxy???

The WSA does not support pass through / inline mode.

How to use multiple Interfaces for the same BS?

Hi @ ,
Is it possible to have a scenarion where i am using multiple interfaces in the same BS based upon some conditional field in the message.
I amnot able to get the solution I know with condition editor I can have multiple receivers but in my scenarion based upon message fiels i have to decide which BAPI to be used and wht mapping and then post it to the same System
Any help will be highly rewarded
Regards

Hi-
Yes it is possible you can use multimapping for mapping the interfaces.
To know more about multimapping see
http://help.sap.com/saphelp_nw04/helpdata/en/21/6faf35c2d74295a3cb97f6f3ccf43c/content.htm
Some more helpful links
/people/jin.shin/blog/2006/02/07/multi-mapping-without-bpm--yes-it146s-possible

Multiple Interfaces on a single web service URL

we have a scenario where we have a multiple interfaces that are related to SD that needs to be exposed to another system. When we generate the WSDL from XI - it seems we can do only for one interface at a time.
Is there a way - where in we can expose a single URL and treat these interfaces as web methods on that single URL? (similar to .Net or Java)
If yes - how do we do that?
Thanks.

That will not be possible. Instead you have to expose only one interface which takes generic data as input. In the mapping, depending on dat, you should map them to various other interfaces which would definetly make your scenario complex..
In XI each outbound interface is a separate web service (method).
VJ

BPM using multiple interface

Hi All,
i have a sceanrio where i have one sender idoc and multiple(5) soap receivers.so i have five interface that have same sender idoc and different soap receiver.Soap is syncronous and sending us the response of that message.
So we have to create a scenario as IDOCSoapRequestSoapResponse---File for each interface
I know it requires BPM to fullfill the condition of multiple interface.Please suggest the BPM design to achive the scenario.
Regards
Laxmi Bhushan

hi Laxmi Bhushan Jha ,
IDOCSoapRequestSoapResponse---File for each interface
As per my knowledge that is poosiable and simple with SOAP Lookup in ESR Mapping
for Soap Lookup:
Webservice Calls From a User Defined Function.
and coming to id:
in receiver determination , we need to define multiple recievers
in interface determiination, we define multiple operation mappings.
thanks,

Single IDOC to Multiple Interface Mapping

We have a requirement in our project where one masterdata IDOC will be sent from a SAP MDM box and will be transformed to a target IDOC and be sent to an SAP SNC box. However, the scenario is that depending on the contents of the IDOC, there can be multiple IDOCs that need to be created. For example, the single MDM IDOC has V1, V2 and V3 values then the IDOCS that should be sent to the SAP SNC box should be three.
The IT head of the customer decided against using Enhanced Interface Determination (since the problem can be easily solved using a 1:n mapping) due to the complexity especially when the solution is rolled out to other regions as each region has it's own logic (currently, the other implementation has only 1:1 mapping so there is no problem). I had developed a 1:n mapping but the resulting map is too big and very complex.
What I tried to do is to create separate mappings for each scenario that an IDOC needs to be generated out of the values from the received IDOC in XI and then define rules in the Interface Determination. Problem is that XI throws an error stating that multiple interfaces are found. So I cannot use Interface Determination to trigger creation of multiple IDOCS of the same type with different values from a single IDOC sent by the same SAP box.
Question is, is there any way to solve this requirement without using Enhanced Receiver Determination. I was thinking of BPM but not really sure how to do it.
Thanks in advance!
Best Regards,
Rommel Mendoza
Hewlett Packard Asia-Pacific, Ltd.

Thanks a lot for that.
For example, We have this input Message:
<ZMATMA>
<IDOC>
 <E1MARAM>
 <E1MARMM>
 <MEINH>IT</MEINH>
 </E1MARMM>
 <E1MARMM>
 <MEINH>CS</MEINH>
 </E1MARMM>
 <E1MARMM>
 <MEINH>SW</MEINH>
 </E1MARMM>
 </E1MARAM>
</IDOC>
</ZMATMA>
then there should be an output of:
<SAVEMULTIPLE204>
<IDOC>
 <BUOM>IT</BUOM>
</IDOC>
</SAVEMULTIPLE204>
<SAVEMULTIPLE204>
<IDOC>
 <BUOM>CS</BUOM>
</IDOC>
</SAVEMULTIPLE204>
<SAVEMULTIPLE204>
<IDOC>
 <BUOM>SW</BUOM>
</IDOC>
</SAVEMULTIPLE204>
The logic is when the MEINH field of the ZMATMA02 IDOC has the values: IT, CS and SW, create one IDOC for each.
Thanks in advance!
Edited by: Rommel Mendoza on Nov 6, 2008 7:30 PM

How to create multiple pof configuration files for c# client

Is there a way to have multiple pof files for c# coherence client?
Can I create a file called my-pof-config.xml with the following line...
<pof-config xmlns="http://schemas.tangosol.com/pof">
<user-type-list>
<include>assembly://Coherence/Tangosol.Config/coherence-pof-config.xml</include>
<include>file://pof-config.xml</include>
and here is what pof-config.xml file look like
<?xml version="1.0" encoding="UTF-8"?>
<pof-config xmlns="http://schemas.tangosol.com/pof">
<user-type-list>
In my C# visual studio project, this is where I load my-pof-config.xml in app.config
<coherence>
<cache-factory-config>coherence.xml</cache-factory-config>
<cache-config>coherence-cache-config.xml</cache-config>
<pof-config>my-pof-config.xml</pof-config>
</coherence>
and this is what I saw in the log...
2012-02-23 14:35:35,529 DEBUG Coherence (null) - 2012-02-23 14:35:35.529 level(thread=System.Threading.Thread): Loaded POF configuration from "FileResource(Uri = file://my-pof-config.xml, AbsolutePath = D:\worktrees\ads\mainline\v2\ads\demos_cs\build\my-pof-config.xml)"
2012-02-23 14:35:35,545 DEBUG Coherence (null) - 2012-02-23 14:35:35.545 level(thread=System.Threading.Thread): Loaded included POF configuration from "EmbeddedResource(Uri = assembly://Coherence/Tangosol.Config/coherence-pof-config.xml, AbsolutePath = assembly://Coherence/Tangosol.Config/coherence-pof-config.xml)"
2012-02-23 14:35:35,623 DEBUG Coherence (null) - 2012-02-23 14:35:35.623 level(thread=ExtendTcpCacheServiceCSharp:TcpInitiator): Loaded POF configuration from "FileResource(Uri = file://my-pof-config.xml, AbsolutePath = D:\worktrees\ads\mainline\v2\ads\demos_cs\build\my-pof-config.xml)"
I don't see pof-config.xml is loaded at "Loaded included POF configuration....". How do I get around it so I can load multiple pof configuration files for c# client?

Hi,
Not sure about C# but I would suggest try removing file:// from
<include>file://pof-config.xml</include>and keep pof-config.xml and my-pof-config.xml in the same directory.
Hope this helps!
Cheers,
NJ

WLC 5508 Multiple Interfaces for Multiple SSIDs

Hello guys,
I am trying to build a new network from scratch, I have the WLC 5508 w/ Aironet 3600e APs connected to my Netgear Smart Switches and a Linksys RV082 router that I'm using as my DHCP server with several VLANs for several stuff on my Switches.
I have 2 questions:
1. Can I have 5 Interfaces configured on 5 different VLANs, each SSID on each a different Port:
Port 1: Controller management only=> 192.168.x.x /24
Port 2: SSID 1: WiFi Internal=> 172.16.x.x/12 (Radius Auth with no sharing)
Port 3: SSID 2: WiFi Internal w/ sharing=> 192.168.x.x/24 (Radius Auth with sharing)
Port 4 :SSID 3: WiFi Guest=> 10.0.x.x/8 (Web Auth)
Port 5: SSID 4: WiFi IT=> 192.168.x.x/24 ( Radius or certificate Auth with access to the controller management interface)
2. How can I use the Controller as the DHCP server for all the WiFi traffic, and how should that be configured to work with my other DHCP server?

Yes you can... but you have to disable LAG. Each post will need to be connected to a dot1q trunk and you will only allow the vlan that is required for that port. Also on the interface, you will define what port is primary and what is backup. I'm guessing you will not be using the backup port. For example... port 1 that connects to a trunk port will only allow the management vlan. Here is a link to setup dhcp on the WLC
http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080af5d13.shtml
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Question: Best practices for dealing with multiple AM configurations

Hello all,
I have a project using ADF Business Components and ADF Faces. I would like to set up multiple configurations for the Application Modules to support the following scenarios:
1). Local testing and debugging - using a connection defined in JDeveloper and AM Pooling turned off.
2). Testing and debugging on an application server - using a JDBC Data Source and AM Pooling turned off
3). Production deployment - using a JDBC Data Source and AM Pooling turned on.
It is no problem to create multiple AM configurations to reflect this scenario. In order for the web part of the application to use the correct configurations, the DataBindings.cpx file must specify the correct ones. I was thinking to have 3 different DataBindings.cpx files and to change the CpxFileName context-param in the web.xml file as needed.
My questions:
1). Does this make sense as an approach? It should be better than having to change a single AM configuration every time I deploy or test. Is there any easy way to keep multiple DataBIndings.cpx files in synch, given that we may add new pages from time-to-time? Alternatively, can we do some type of "include" processing to include just the dataControlUsages section into a common DataBindings.cpx file?
2). How would you manage the build-and-deploy process? For the most part, in JDev we would be using configuration #1. The only time to switch to configuration #2 or #3 would be to build an EAR file for deployment. Is this something that it would make sense to accomplish with ANT? I'm not an ANT expert at all. The ANT script would have "build-test-ear" and "build-prod_ear" targets which would swap in a correct web.xml file, recompile everything, build the EAR, then put the development web.xml file back. I'm relatively sure this is possible... comments?
3). Is there some other recommended approach?
I appreciate any insights from experience, or even just ideas or thoughts that I can test out.
Best regards,
John

Hi K,
Sorry for the long long delay in responding I've been traveling - and thanks for the e-mail tickler too...
To answer your question in short, I do think that ANT is the right way to go; there is an extra ANT task called XMLTask that I was able to download and play with, and it seems it would make this manipulation of the cpx file (or the xcfg file, for that matter) pretty straightforward. I don't have any code to post; it's just in the conceptual stage for me right now. I didn't see anything magical in JDev 11 TP3 that solved this problem for me either.
Having said all of that, it's more complicated than it might appear. In addition to the DataBindings.cpx file (stores, among other things, which AM configuration to use for each data control), it's certainly possible to programmatically access an AM (specifying the configuration either directly in the code or via a properties file/etc). I'm not sure what the most common use case for AM configurations is, but in my case, I have a Test configuration and a Prod configuration. The Test config, among other things, disables AM pooling. When I am developing/testing, I always use the Test config; in Production, I always use the Prod config. Perhaps the best way for me to do this would be to have an "Active" config and use ANT tasks to copy either Test or Prod to "Active." However, our Subversion repository is going to have a few complaints about this.
John

SWIG - C++/Java and multiple interface inheritance - SWIG typemaps

In C++ I have the following. Can someone explain how to use SWIG typemaps to accomplish multiple interface inheritance in Java? I understand there is a javainterfaces typemap built into SWIG however I am such a newb with SWIG I really don't know where to start.
class IRemoteSyncIO
public:
virtual ~IRemoteSyncIO () {}
protected:
IRemoteSyncIO () {}
private:
IRemoteSyncIO (const IRemoteSyncIO&);
IRemoteSyncIO& operator= (const IRemoteSyncIO&);
class IRemoteAsyncIO
public:
virtual ~IRemoteAsyncIO () {}
protected:
IRemoteAsyncIO () {}
private:
IRemoteAsyncIO (const IRemoteAsyncIO&);
IRemoteAsyncIO& operator= (const IRemoteAsyncIO&);
class RemoteMpe : public IRemoteSyncIO, public IRemoteAsyncIO
}Thanks!

Actually now I understand what you mean.... Ok, now I am going to modify the problem slightly and add Interface2 into the picture. The new code is:
interface Interface1<SelfType extends Interface1<SelfType>>
interface Interface2
class Superclass implements Interface1<Superclass>
class Dependant<Type extends Interface1<Type>>
 public static <Type extends Interface1<Type> & Interface2> Dependant<Type> getInstance(Class<Type> c)
 return new Dependant<Type>();
class Subclass extends Superclass implements Interface2
public Subclass()
 Dependant<Subclass> dependant = Dependant.getInstance(Subclass.class);
}Now, previously I could replace:
Dependant<Subclass> dependant = Dependant.getInstance(Subclass.class);
with
Dependant<Superclass> dependant = Dependant.getInstance(Superclass.class);
and it solved the problem, but now that Type must implement Interface2 I cannot.
The reason I added this requirement is that this is actually what is going on in my applicationI had made mistakely omited this detail from the original use-case.
Can you think up of a possible solution to this new use-case?
Thanks,
Gili

Launching multiple interface at one time

Can we launch multiple interface at one go? I have scenario .In that scenario I have created a package and defined the multiple stages. After the completion of one stage next step will be launched. In one step I have to populate 5 tables for different kind of validation and transformation and after successful validation I have to do next processing. For this I have to create 5 different interfaces. But I don’t want to run these 5 interface one by one .I want to do it in parallel. Can I achieve this?
Regards,
Vineet

Hi,
I couldn't see this option at diagram. Could you, please, give more details about how to put "multiples" next steps? I could use just one. (what ODI version are you?)
In the way that I know, you need to generate scenarios of the 5 interfaces and "drag and drop" it at a package and create the flow (green line) between them.
At each interface scenario, go to options tab, "Synchronous/Asynchronous" option and choose Asynchronous.
This will start the interfaces at parallel.

WLC DHCP Settings - Under Dynamic Interface configuration

Hi Guys,
If I have a dynamic interface that is connected to a subnet where the router interfaces have DHCP servers configured under the helper address commands, do I need to configure the DHCP fields under the dynamic interface configuration?
I have helper address configured on the connected routers AND these fields configured with the same DHCP servers.
Just wondering if I can take the IPs out of the WLC configuration?
Many thx indeed,
Ken

Ken, the DHCP address under the dynamic interface, is the address the WLC will unicast the DHCP request to when a client tries to use that interface. Under normal operation this address is needed. There is a way to get the WLC to bridge the packet to the wire so that it is a broadcast instead of a unicast packet. CLI command is config dhcp proxy disable.
But I do believe that even if you issue the CLI command, the software wants the DHCP address listed under the dynamic interface.
HTH,
Steve

Pix515 multiple interface configuration

Similar Messages

Maybe you are looking for