Possibility to use both Time Range ACL and PBR.
Hello
I would like to find out the attached requirement.
If there is any related information we greatly appreciate it.
Actually I have already configure on Cisco1812J by using the following command.
however the ACL status still shows "inactive" and the PBR does not function.
*Configuration on R1
time-range PBR-TIME
periodic weekdays 15:40 to 15:41
ip access-list extended PBR-TIME
permit ip host 10.0.30.11 host 1.1.1.1 time-range PBR-TIME
route-map PBR-TIME permit 10
match ip address PBR-TIME
set ip next-hop 10.0.20.3
interface Vlan1
ip address 10.0.30.1 255.255.255.0
ip policy route-map PBR-TIME
*Verification
R1#sh ip access-lists
Extended IP access list PBR-TIME
10 permit ip host 10.0.30.11 host 1.1.1.1 time-range PBR-TIME (inactive)
R1#sh route-map
route-map PBR-TIME, permit, sequence 10
Match clauses:
ip address (access-lists): PBR-TIME
Set clauses:
ip next-hop 10.0.20.3
Policy routing matches: 0 packets, 0 bytes
*Traceroute from SW1
SW1#traceroute 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.30.1 0 msec 0 msec 9 msec
2 10.0.10.2 0 msec 0 msec 17 msec
3 10.0.11.254 0 msec * 0 msec
Oh that is incredible!!
It has been functioning correctly like this.
Thank you for quick and precious advise.
Regards,
Masanobu Hiyoshi
R1#sh ip access-lists
Extended IP access list PBR-TIME
10 permit ip host 10.0.30.11 host 1.1.1.1 time-range PBR-TIME (active) (45 matches)
(omit)
R1#sh ip access-lists
Extended IP access list PBR-TIME
10 permit ip host 10.0.30.11 host 1.1.1.1 time-range PBR-TIME (inactive) (45 matches)
R1#
SW1#traceroute 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.30.1 0 msec 0 msec 0 msec
2 10.0.20.3 0 msec 0 msec 9 msec
3 10.0.21.254 0 msec * 0 msec
SW1#traceroute 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.30.1 0 msec 9 msec 0 msec
2 10.0.10.2 0 msec 0 msec 8 msec
3 10.0.11.254 0 msec * 0 msec
Similar Messages
-
I'm building a test Lync deployment on Azure; yes, I know this is not supported, hence "test".
Lync Front-End servers expose two set of web services, one for internal users and one for external ones; they listen on different ports (443 and 4443) on the same servers; when external services are published, you need a reverse proxy or a port forwarding
in order to map port 443 of a public IP address to port 4443 of the Front-End server(s). When you have multiple Front-End servers in a pool, you also need to load-balance them.
So, a typical Lync deployment looks like this:
Internal users
|
443
|
Internal LB
192.168.0.20
443 443
| |
Lync FE 1 Lync FE 2
192.168.0.21 192.168.0.22
| |
4443 4443
External LB
Public IP Address
|
443
|
External Users
This should be easily replicated in Azure, as it supports both external load balancing and internal load balancing. They are even supported together in the same cloud service, so this configuration should be easy. However, it looks like "should"
is the keyword here.
After creating the external load balanced endpoint (which listens on external port 443 and forwards to port 4443 on the servers), I'm trying to create an internal load balancer and add internal endpoints to is; however, while the ILB can be created successfully,
adding an internal endpoint listening on port 443 and forwarding to port 443 on the servers fails miserably, with an error stating that port 443 is already in use by another endpoint:
Update-AzureVM : BadRequest : Port 443 is already in use by one of the endpoints in this deployment. Ensure that the port numbers are unique across endpoints within a deployment.
For reference, my commands are:
Add-AzureInternalLoadBalancer -InternalLoadBalancerName "LyncILB" -ServiceName "LyncFrontEnd" -SubnetName "LabSubnet" -StaticVNetIPAddress 192.168.0.20
(This completes successfully)
Get-AzureVM LYNCFE1 | Add-AzureEndpoint -Name "Https-Int" -Protocol "tcp" -LocalPort 443 -PublicPort 443 -LBSetName "HttpsIntLB" -DefaultProbe -InternalLoadBalancerName "LyncILB"
(This fails)
The existing external endpoint is configured as such:
Get-AzureVM LYNCFE1 | get-azureendpoint
LBSetName : HttpsExtLB
LocalPort : 4443
Name : HTTPS-Ext
Port : 443
Protocol : tcp
Vip :
ProbePath :
ProbePort : 4443
ProbeProtocol : tcp
ProbeIntervalInSeconds : 15
ProbeTimeoutInSeconds : 31
EnableDirectServerReturn : False
Acl : {}
InternalLoadBalancerName :
IdleTimeoutInMinutes :
LoadBalancerDistribution :
The error doesn't even make a lot of sense; the external load balancer listens on a public IP address, while the internal load balancer listens on a private IP address in the internal network; there
shouldn't be any conflict here... however it looks like there is one instead.
Why doesn't this work? Am I doing something wrong, or is Azure networking just being silly as usual again?Hello Massimo Pascucci,
The issue that you are facing when creating an endpoint with internal loadbalancer is the limitation of not allowing same ports to be listening under a single cloud service. This reason for this is that there is a limitation of only one private IP (Also
known as the Internal load balanced IP) per cloud service.
There is also a limitation on the Internal load balancer more than one port to be published per load balancer:
You can leave your feedback by following the link below:
https://social.msdn.microsoft.com/Forums/en-US/1805c5a0-3906-4cd6-8561-9802d77e0ae5/is-it-possible-to-use-both-an-ilb-and-an-elb-listening-on-the-same-port-in-the-same-azure-cloud?forum=WAVirtualMachinesVirtualNetwork
Refer to this article for more information on Internal load balancer:
http://azure.microsoft.com/blog/2014/05/20/internal-load-balancing/
Thanks,
Syed Irfan Hussain -
how do I set up my Imac to allow using both my computer speakers and a Bose SoundLink system as outputs at the same time. I can use one or the other, but not both. From systems Preferences I must select one or the other. I want both to work all the time.
Hi,
I would recommend you to use 0FI_AP_4 rather using both, particularly for many reasons -
1. DS: 0FI_AP_4 replaces DataSource 0FI_AP_3 and still uses the same extraction structure. For more details refer to the OSS note 410797.
2. You can run the 0FI_AP_4 independent of any other FI datasources like 0FI_AR_4 and 0FI_GL_4 or even 0FI_GL_14. For more details refer to the OSS note: 551044.
3. Map the 0FI_AP_4 to DSO: 0FIAP_O03 (or create a Z one as per your requirement).
4. Load the same to a InfoCube (0FIAP_C03).
Hope this helps.
Thanks.
Nazeer -
Using both Time Machine and External HD
Does it make sense to use both Time Machine for internal back up AND an external hard drive to move files to free up space?
colinlaunchpod
I want to be able to back up both the iMac & the 2TB My Book to the 3TB My Book, and back up only the iMac to the Time Capsule (due to limitations of space on the Time Capsule. I can't find a way to do this.
Huge mistake, thats making a single choke point of failure, very very bad idea.
its all about redundancy, see here:
Methodology to protect your data. Backups vs. Archives. Long-term data protection -
Is it possible to use face time with my iphone4 with 3G when the wi-fi is not avalable
Hi,
The Blurb
The * items message that is at the bottom
*FaceTime video calling requires a FaceTime-enabled device for the caller and recipient and a Wi-Fi connection. FaceTime over a mobile network requires iPhone 4S, iPhone 5 or iPad (3rd generation) with mobile data capability. Availability over a mobile network depends on carrier policies; data charges may apply.
Some features may not be available in all countries or all areas. Click here to see complete list.
It is not specifically saying it is 4G only phones.
It is not saying it is 3G either.
It is not listing an iPhone 4 (only the 4S)
It seems whether 3G can or cannot or if the iPhone can do 4G and it is available it seems that particular model will not.
10:26 PM Friday; March 29, 2013
iMac 2.5Ghz 5i 2011 (Mountain Lion 10.8.3)
G4/1GhzDual MDD (Leopard 10.5.8)
MacBookPro 2Gb (Snow Leopard 10.6.8)
Mac OS X (10.6.8),
Couple of iPhones and an iPad
"Limit the Logs to the Bits above Binary Images." No, Seriously -
I recently moved and I got a new sim but I still use my old sim. I want to use both numbers for iMessage and FaceTime but i have absolutely no idea how to do it! please help me! I have a macbook pro and iphone 5
lewbobber wrote:
Basically i need to either take it to a shop that can unlock i.e. £40.00
Be aware, you go that route & every time you try to update or restore, it will error out, leaving your phone unusable. Not to mention, you void all warranty/support.
Sell it & use the proceeds towards an officially unlocked iPhone bought directly from Apple.
Good luck. -
Is it possible to use imessage only in wifi and sms when no wifi is available?
is it possible to use imessage only in wifi and sms when no wifi is available? I have unlimited texting but only 200mb of data. I know how to turn i messaging on/off manually but is there away to set it so it does it automatically?
The only option you have is to turn off cellular data completely. You are correct, there is no setting for cellular data for messages. If you toggle iMessage off/on multiple times, you will end up with problems, since others will not know if you have iMessage off/on, and will continue to try to send iMessages to you. Also, you may find you will have problems with iMessage activating again after turning it off. iMessages do not use very much data, but if you are using data for other reasons, that could use up the limited pool of data you mentioned
-
Good Morning. I'm having a problem using both my Photoshop elements and premiere programs. I've installed the programs, redeemed my code and entered the serial numbers, and created the adobe log-in. I am able to open up the organizer without problems, but when I try to open up the photo editor (either by trying to open up the program from the main menu, or right-clicking on a photo in the organizer to edit in elements), the program asks me to sign in to adobe (which I can do and it doesn't give an an "incorrect password" or log-in ID error) then accept the terms and conditions. When I click to accept the terms and conditions, nothing happens and the editor fails to open. Everytime I click on the program, I get this same "loop" of signing in and accepting T&C's, but the program fails to open. Any advice?
Premiere Elements 10 is now 64 bit, but not PSE10.
Take a look at your scratch disk set-up and if you have a spare volume, allocate that first before the C drive. Elements use scratch disks when it gets low on RAM.
Click image to enlarge
Turn off face recognition and the auto-analyzer to improve performance.
When editing photos or videos check the task manager to see what background processes may be running and end them temporarily if not needed. -
I cannot load Maverick on my iMac HD. It reports that my HD is used for Time Machine backups and will not load to that drive. I do not use this drive for backups. I use an external 1 TB WD My Book for backups as well as Super Duper Backups. Can anyone offer advice. Thanks.
Welcome to Apple Support Communities
You have got the "Backups.backupdb" folder in the root level of your hard drive. This is the folder used by Time Machine to save backups to, and the OS X Mavericks installer thought that your hard drive is being used to store Time Machine backups
To fix this, open a Finder window, select the Go menu (on the menu bar) > Go to Folder, and type:
Then, delete "Backups.backupdb" and empty the Trash. Finally, open the Mavericks installer from the Applications folder and follow the steps -
Can you use both an employee discount and a military discount on one account?
Can you use both an employee discount and a military discount on one account?
No.
You can only have one ELEU (Employee Corporate Discount) on an account
So choose the one that has the greater percentage which is probably the military. -
Using both at line-selection and at user-command
hellow friends ,
to use both at line-selection and at user-command in the same report.Hello,
U can do it like this.
AT LINE-SELECTION.
PERFORM at_line_selection.
AT USER-COMMAND.
PERFORM at_user_command.
FORM AT_LINE_SELECTION.
DATA: LV_CURSOR_FIELD(30).
DATA: LV_MATNR TYPE MATNR.
CLEAR H_UCOMM.
GET CURSOR FIELD LV_CURSOR_FIELD.
CASE LV_CURSOR_FIELD.
WHEN 'PSPNR'.
PERFORM LAGER_AN_PSP USING WA_MATNR-M1-RSNUM
WA_MATNR-M1-RSPOS.
WHEN 'PSPNR2'.
H_UCOMM = 'PSPNR2'.
IF NOT PSPNR2 IS INITIAL AND IT_VKBEL-VBELN CN '0123456789'.
PERFORM LAGER_AN_PSP_VKBEL USING IT_VKBEL
0
PSPNR2
H_MAKTX
' '. "keine Blindbuchung
ENDIF.
ENDCASE.
CASE SY-UCOMM.
WHEN 'BACK_NEW'.
PERFORM NEU_START USING 'X'.
WHEN 'EXIT'.
PERFORM NEU_START USING 'X'.
WHEN 'CANC'.
PERFORM NEU_START USING 'X'.
WHEN 'CHECK'.
PERFORM NEU_START USING SPACE.
ENDCASE.
Vasanth -
I previously had PS CS5 Trial installed but removed it using both Control Panel Programs and deleting all files from the CS5 directory on Program Files. I then installed a purchased product from Adobe disc using the serial number on the case. But when I try to launch it, I get a screen headed Photoshop CS5 Extended Trial. It asks for the serial number and says that my trial has expired. It rejects the serial number from the Adobe case saying "This Serial Number is not valid for this product". It thinks that I still have the expired Trial Version installed. How do I convince it (the program) that the Trial Version is long gone and the currently installed product was installed with a valid and accepted serial number????
Let me know how it goes. Go into your Adobe account and register your serial number asap.
https://www.adobe.com/account/my-products-services.html
That way, should you lose it or you need support, it is on record that it's yours and you can fetch your s/n it from anywhere.
There are too may sad stories here, where people forgot and the box is buried or lost.
Gene -
I am trying to upgrade from Tiger to Snow Leopard. When I insert the disk and install starts, it states "This disk is used for Time Machine backups" and Mac OSX can't be installed. Does anyone know how to correct this (since Tiger doesn't have Time Machine)?
http://support.apple.com/kb/TS2986
-
I backed up my iMac with a "WD My Passport" using the Time Machine option and tried to restore my iMac but it only saved my applications none of my documents, photos nothing else! What happened?
There should be two sparse bundles on the TC, one for each Mac. If you click the TC in a Finder sidebar, you should see something like this (in Column View):
If you see the sparse bundle for the iMac there, but not on the window where you do a full system restore (after starting from your Recovery HD or OSX Install disc), they may be corrupted (especially if your iMac was failing at the time of the last backup).
Try repairing those backups, per #A5 in Time Machine - Troubleshooting.
Then try the full restore again, per Time Machine - Frequently Asked Question #14. Note that if you suspect problems on the most recent backup, you might want to select an earlier one. -
Possible to use both optical out AND regular line out at the same time?
I currently have my computer speakers (logitech z560) hooked up to the mac pro via regular stereo jack in the back. I have an extra receiver that I would love to hook in to supply me with some needed sound for movie watching and what-not.. Is there a way to enable both line out - digital and line out at the same time?
You can set DVD Player's "Audio output" to "Digital Out" in its "Disc Setup" preference, while other applications use Line Out.
You could use a splitter on Line Out to feed your current speakers, and analog Line In on your receiver. When you want sound to both systems, set the receiver to Line In. When you want to watch DVDs, set it to Digital In. This will give you surround sound if the DVD has multichannel sound, and the receiver supports more than two channels.
If you really want the same output on the Mac Pro Line Out, and Digital Out, you can use the "Auxiliary Device Output" effect in Audio Hijack Pro
<http://www.rogueamoeba.com/audiohijackpro/>
It will not support more than two-channel audio.
Maybe you are looking for
-
Vendor Master Change Log Details
Hello All, As I have changed the vendor master data on last May-09. But the changed master data is wrong. So I'd like to reset the vendor master data to the original value. Therefore, could you please let me know how to check the vendor master change
-
Input fileds not appearing in IT1005 Planned Compensation in Tab for PPOME
Hello friends, The business requirement is: - add IT 1005 Planned Compensation as a tab page in T.code PPOME/PPOCE - I configured the following in system: - IMG>Personnel Mgt>Org Mgt>Hierarchy Framework>Integrate New Infotype> >Add Infotype as Tab
-
No adapter available for CRT studio display..?
Hi everybody, just got a handmedown old crt studio display: http://www.theapplecollection.com/design/macreleased/images/studio17_side.jpg i thought i'd get an adapter and plug it to my imac to increase screen real estate (have been using a VGA displa
-
Error "the notification doesn't exists" when use BAPI_ALM_ORDER_MAINTAIN
Hi gurus, I have a problem with a BAPI_ALM_ORDER_MAINTAIN. My order has 3 notifications on the tab "Objects" and I want to remove one. But when i called the BAPI, i get the error message "Notification 100047495 does not exist". The content of the tab
-
Image control- setting images conditionally
Hello All! I am a Labview newbe and I need help with image control. I have a set of two images- one static png and one animated gif. I want to use these two images as an activity indicator in a picture box or other control. I can send one or the ot