Public Interface configuration - Bonding Yes / No ?

Hey, during my setup of my rac, I configured two nics for public usage and two nics for private (interconnect) usage.
While running raccheck utility - it states that no bonding has been configured for public interface.
In a course in oracle university they told us to configure the public interfaces as I did.
Question: Is my configuration incorrect ? Do I need to have a bonding interface for my public network ?
Chris

Please use the SEARCH feature before posting - this is thread# 3 or 4 for this same question.
If you only have 2 NICs it was configured correctly according to your "university", However, your university configuration is WRONG and it is NOT a supported configuration.
See my response to thread: Re: Production site RAC redundant architecture deployment

Similar Messages

Possibility of adding the 3rd interface as a 2nd Public interface?

Is it possible, with VPN 3030, to configure the 3rd interface (which is labeled as "External" and, is usually used for "management", I assume) as another Public interface? So that two different kinds of VPN connections can be physically separated....
Any help and pointers will be much appreciated! -Bill

Hi Aamir,
I am having problem to understand the use of External interface of VPN3000.
Does it mean I can have a VPN3000 with two Providers? Public interface terminates to ISP 1 and External interface terminates to ISP 2 ?
Regarding the routing (only one default gateway) does it mean the following traffic flow ?
1. Incoming traffic from ISP 1 will go to the Public interface and outgoing traffic will go through the same Public interface.
1. Incoming traffic from ISP 2 will go to the External interface , but outgoing traffic will go through Public interface.
Thanks,
Engel

Security implication of 'Allow Public File Upload' to Yes

Hi
I am concerned about setting 'Allow Public File Upload' to Yes. Per the help text "Select Yes to permit unauthenticated users to upload files in applications that provide file upload controls. Select No to prevent unauthenticated users from uploading files in applications that provide file upload control"
That means anyone who has access to the URL can upload files of any type in to the application without any authentication.
Is this true?
Is this not a security risk in that case? Are there any alternatives which would allow 'authenticated' users to upload files via apex application.
Thank you
Kumar

Hi
Can you explain in detail? Sorry I am not an apex developer and as a DBA I was asked to set this setting in apex and since this affects all workspaces (and all apex applications) I was concerned about this.
I think we can have a custom procedure that checks to see who is uploading. One such example is given here
http://www.mandsconsulting.com/oracle-apex-tutorial-8-up-and-downloading-files-part-2-video-training
Also another concern is this
Allow Public File Upload [YES | NO] This applies only to applications that do not use any type of authentication, so that all users are anonymous. At first glance, file upload into the database seems relatively harmless, since the first threat that comes to mind is someone uploading a file with a virus, yet there is no way to execute a file inside the database that mitigates this risk . However, consider the possibility of someone uploading a bunch of large files. At the very least, this will be very resource intensive At some point, the tablespace used by the APEX_FILES schema will fill, which is essentially a denial-of-service attac

WLC DHCP Settings - Under Dynamic Interface configuration

Hi Guys,
If I have a dynamic interface that is connected to a subnet where the router interfaces have DHCP servers configured under the helper address commands, do I need to configure the DHCP fields under the dynamic interface configuration?
I have helper address configured on the connected routers AND these fields configured with the same DHCP servers.
Just wondering if I can take the IPs out of the WLC configuration?
Many thx indeed,
Ken

Ken, the DHCP address under the dynamic interface, is the address the WLC will unicast the DHCP request to when a client tries to use that interface. Under normal operation this address is needed. There is a way to get the WLC to bridge the packet to the wire so that it is a broadcast instead of a unicast packet. CLI command is config dhcp proxy disable.
But I do believe that even if you issue the CLI command, the software wants the DHCP address listed under the dynamic interface.
HTH,
Steve

Multiple DMVPN instance on the same router one public interface

I know it possible to run multiple instances DMVPN on a router with one public interface.
Question:
If I take one of my site and put it on a different tunnel from all other remote sites will it be able communication to the other site directly? I am running EIGP through the gre Tunnel
example of the hub site:
interface Tunnel100
bandwidth 100000
ip address 192.168.105.254 255.255.255.0
no ip redirects
ip mtu 1400
ip hello-interval eigrp 1 1
ip hold-time eigrp 1 3
no ip next-hop-self eigrp 1
ip nhrp authentication L3GR@RD
ip nhrp map multicast dynamic
ip nhrp map group WAR-881-VPN1 service-policy output SHAPE->20M
ip nhrp map group PLA-2811-VPN1 service-policy output SHAPE->T1(MLPPPx2)
ip nhrp map group LIV-2811-VPN1 service-policy output SHAPE->T1(MLPPPx2)
ip nhrp map group BRM-2811-VPN1 service-policy output SHAPE->T1(MLPPPx2)
ip nhrp map group ELP-2811-VPN1 service-policy output SHAPE->T1(MLPPPx2)
ip nhrp map group RAN-2811-VPN1 service-policy output SHAPE->T1(MLPPPx2)
ip nhrp map group LAB-2911-VPN1 service-policy output SHAPE->T1(MLPPPx2)
ip nhrp map group ORE-2811-VPN1 service-policy output SHAPE->5M
ip nhrp map group VAU-2811-VPN1 service-policy output SHAPE->10M
ip nhrp map group CAVAURTVP001 service-policy output SHAPE->10M
ip nhrp network-id 100
ip nhrp holdtime 600
ip nhrp max-send 1000 every 10
ip nhrp redirect
ip tcp adjust-mss 1360
no ip split-horizon eigrp 1
ip summary-address eigrp 1 10.87.0.0 255.255.0.0
load-interval 30
delay 100
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 100
tunnel vrf PUBLIC
tunnel protection ipsec profile IPSEC-DMVPN
interface Tunnel300
bandwidth 100000
ip address 192.168.106.254 255.255.255.0
no ip redirects
ip mtu 1400
ip hello-interval eigrp 1 15
ip hold-time eigrp 1 45
no ip next-hop-self eigrp 1
ip nhrp authentication L3GR@RB
ip nhrp map multicast dynamic
ip nhrp map group CAVAURTVP001 service-policy output SHAPE->10M
ip nhrp network-id 100
ip nhrp holdtime 600
ip nhrp max-send 1000 every 10
ip nhrp redirect
ip tcp adjust-mss 1360
no ip split-horizon eigrp 1
ip summary-address eigrp 1 10.87.0.0 255.255.0.0
load-interval 30
delay 100
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 100
tunnel vrf PUBLIC
tunnel protection ipsec profile IPSEC-DMVPN
Thanks the help in advance,
Nigel

Hello Mr Manhurt,
I can help you. But first what is EIGP?

Non public interfaces

Non public interfaces are not permitted. But I often want to break out the methods of an interface into sub-interfaces for the sake of (at least) comprehensibility. Ultimately, only the aggregate interface is meant to be exposed, but of course, they are all exposed- Java doesn't permit non-public interfaces.
E.G. -
interface Foo extends interface Bar, Baz
class DefaultFoo implements Foo
// implementation of Bar and Baz
of course I could have DefaultFoo just implement Bar and Baz directly, but it's not the point. The point is, I have a good reason
to want these mini-interfaces... for the sake of comprehension. A Foo is just exactly the combination of Bar and Baz
and elsewhere a Goo is an implementation of a Bar and Gaz, where Gaz is some other interface.
So the utility of the interfaces lies in the conceptual cohesion of the abstraction they define, which will never be implemented
individually, but only in different aggregates.
What do other people do with this kind of situation?

Yep, you can do that, but only in classes - no inner interfaces embedded in interfaces, not that that would have helped me in this case !
I think that generally, problems with scoping and issues involving more flexibility around visibility will be addressed in 7.
I knew interfaces can be embedded privately in classes, but not that they could be package protected. Just a feature I never had any reason to use I guess or more likely knew and just forgot!
Sheesh!

Network Interface Configuration

For Solaris 9,
<<Q1>> What is the following interfaces name means? le, hme? Which is the Ethernet port?
<<Q2>> Where is the networking configuration file stored in the Solaris 9?
<<Q3>>How to configure the network interfaces in Solaris 9?
<<Q4>> Did we need to restart the network after we have edit the network configuration? If, how to restart the network? (e.g. in Debian /etc/init.d/networking restart).
Please assist.

You also posted this same question at another forum web site.
It appears your answer is going to be over there.
There's now no sense in duplicating it here.
['Network Interface Configuration' at www.LinuxQuestions.Org|http://www.linuxquestions.org/questions/solaris-opensolaris-20/network-interface-configuration-652192/]

Can we made office 365 team site as anonymous site (Public site)? If yes, please provide me the steps or some links.

can we made office 365 team site as anonymous site (Public site)?
If yes, please provide me the steps or some links.

Hello Jahir,
I'd suggest asking Office 365 specific questions on the
SharePoint 2013 - Development and Programming forum instead.

How to enter into interface configuration mode on aironet 1130AG

How can I enter into "interface configuration" on Aironet 1130AG, AIR-LAP1042N?
When I put following commands in enable
conf t
interface Dot11Radio1
but, it fails and I cannot enter into "interface configuration".
How can I do this ?
The reason why I enter into
conf t
interface Dot11Radio1
because I want to disable cdp via CLI ( serial console).
best regards

George,
I ran into an exception the other day – lightweight 3500s (and presumably 3600s) are allowing config t without the debug precursor. The lab version I’m doing this on is 7.0.220.0. Do you have same/different results? I’m not sure if this is tied to the AP model or the lw code they’re running. I’ll need to do some more testing.
Justin

Exception Declaration and the Public Interface

What is the connection between a method , exception declaration ( throw ) and public interface. Does every method has an implicit public interface ?? Is list of thrown exceptions, part of a method’s public interface ?

sagararya wrote:
So, how do we know that some method throws an exception that we have to catch?Via the throws clause.
[http://java.sun.com/docs/books/tutorial/essential/exceptions/index.html]
Just as a method must specify what type and how many arguments it accepts and
what is returned, the exceptions that a method can throw must be declared (unless the
exceptions are subclasses of RuntimeException). Also those that are subclasses of Error need not be declared.
The list of thrown exceptions
is part of a method’s public interface.Ah, now I see what you mean. Where did you read that? I don't recall having ever heard the phrase "public interface" used like that.
The above paragraph is from the book, Osborne_Java, written by James Kussow.. Ok.
Can anybody explain me the 4th line in the above paragraph, starting from "The list of thrown exceptions ... "
The list of thrown exceptions is part of a method’s public interface.
The throws keyword is used as follows to list the exceptions that a method can throw:What part do you not understand? Read the tutorial I linked, and if something is still not clear, ask your specific question.
Personally I think the phrase "public interface" is misleading here. If that's what you're hung up on, don't be. It doesn't mean "public" in the sense of Java's "public" access modifier. It just means the list of exceptions is part of what callers of the method know about it.
EDIT: Oops. Too late.
Edited by: jverd on Jun 25, 2008 8:31 AM

Eliminating Public Interface

I currently have a BM server that host primarily File sharing and groupwise. I have BM installed on the server and we access groupwise webaccess, SMTP, IMAP and POP via the public interface. I want to eliminate the public interface and route all traffic through our 3rd party firewall and take this server off of the internet. However when I disable the public interface and change the default route none of the services are working. I have narrowed it down to the tcpip filters. What is the best practice for eliminating this interface and making sure all traffic routes through the private interface. I do not have any of the BM modules loaded and really dont use any of the services but I think what happens is traffic comes in through the private but it is still trying to route through the public interface.

This may sound simplistic when you read it, but it really is this
simple. The public interface only gets involved when traffic is sent
to or through it.
Filters are supposed to be applied to the public interface, and not the
private side (unless you've *really* customized them). See tip #13 at
the URL below. (Talking filters here, not exceptions).
If you have changed the default route to an address on the private
side, then packets going to the internet should not touch the public
interface at all. Since you are having a filtering issue, clearly some
things need to be checked out.
1. In filtcfg, check that no filters are applied to the private
interface, and that the filtering action is the default (deny in list,
as seen in tip #13).
2. Check routing table in TCPCON to see what the default route actually
is. Sometimes it's not what you thought you had.
3. Check routers in your network to see if some static NAT or routing
table entry might be pointing to an old public address assigned on the
BMgr server.
4. Use set tcp ip debug=1 (careful! Will see a lot of traffic, and
could crash a production server) to see all IP traffic on the server.
You can then observe packets hitting the public side and maybe see
where they are coming from. PKTSCAN.NLM would be a lot safer to use.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

IllegalAccessError when trying to create a proxy for a non-public interface

My code proxies a class that extends JDialog. Under Java5 this works fine. However when I switch to Java6 I get a java.lang.IllegalAccessError: class javax.swing.$Proxy3 cannot access its superinterface javax.swing.TransferHandler$HasGetTransferHandler exception.
I went through debugging my code to find out what went wrong. I created the included test code that shows the problem (and because the real codebase is much too big to include here).
package javax.swing;
public class SomePackageInterfaceDefiningClass {
    interface SomeInnerPackageInterface {
package javax.swing;
import java.lang.reflect.Proxy;
import java.util.ArrayList;
import java.util.Collection;
import org.apache.commons.lang.ArrayUtils;
public class NonPublicInterfaceProxyCreator {
    public static void main(String[] args) {
        // This works fine !
        doTest(WindowConstants.class);
        // This also ! The proxy class package is javax.swing as expected
        doTest(SomePackageInterfaceDefiningClass.SomeInnerPackageInterface.class);
        // JDialog implements the package visible interface
        // javax.swing.TransferHandler.HasGetTransferHandler
        Collection<Class<?>> jdInterfaces = new ArrayList<Class<?>>();
        for (Class<?> interfaze : JDialog.class.getInterfaces()) {
            jdInterfaces.add(interfaze);
        Collection<Class<?>> strippedJdialogInterfaces = new ArrayList<Class<?>>(
                jdInterfaces);
        for (Class<?> interfaze : jdInterfaces) {
            if (interfaze.getName().equalsIgnoreCase(
                    "javax.swing.TransferHandler$HasGetTransferHandler")) {
                strippedJdialogInterfaces.remove(interfaze);
        // Without the package visible interface it works !
        doTest(strippedJdialogInterfaces.toArray(new Class<?>[0]));
        // With the package visible interface it fails
        doTest(jdInterfaces.toArray(new Class<?>[0]));
    private static void doTest(Class... interfaces) {
        // Class clazz = Proxy.getProxyClass(JDialog.class.getClassLoader(),
        // interfaces);
        Class clazz = Proxy.getProxyClass(Thread.currentThread()
                .getContextClassLoader(), interfaces);
        System.out.println("Class created = " + clazz
                + " >>>> Implemented interfaces = "
                + ArrayUtils.toString(clazz.getInterfaces()));
}When I run this code under Java5 I get:
Class created = class $Proxy0 >>>> Implemented interfaces = {interface javax.swing.WindowConstants}
Class created = class javax.swing.$Proxy1 >>>> Implemented interfaces = {interface javax.swing.SomePackageInterfaceDefiningClass$SomeInnerPackageInterface}
Class created = class $Proxy2 >>>> Implemented interfaces = {interface javax.swing.WindowConstants,interface javax.accessibility.Accessible,interface javax.swing.RootPaneContainer}
Class created = class $Proxy2 >>>> Implemented interfaces = {interface javax.swing.WindowConstants,interface javax.accessibility.Accessible,interface javax.swing.RootPaneContainer}Under Java6 I get:
Class created = class $Proxy0 >>>> Implemented interfaces = {interface javax.swing.WindowConstants}
Class created = class javax.swing.$Proxy1 >>>> Implemented interfaces = {interface javax.swing.SomePackageInterfaceDefiningClass$SomeInnerPackageInterface}
Class created = class $Proxy2 >>>> Implemented interfaces = {interface javax.swing.WindowConstants,interface javax.accessibility.Accessible,interface javax.swing.RootPaneContainer}
Exception in thread "main" java.lang.IllegalAccessError: class javax.swing.$Proxy3 cannot access its superinterface javax.swing.TransferHandler$HasGetTransferHandler
     at java.lang.reflect.Proxy.defineClass0(Native Method)
     at java.lang.reflect.Proxy.getProxyClass(Proxy.java:504)
     at javax.swing.NonPublicInterfaceProxyCreator.doTest(NonPublicInterfaceProxyCreator.java:45)
     at javax.swing.NonPublicInterfaceProxyCreator.main(NonPublicInterfaceProxyCreator.java:38)According to the documentation the interface javax.swing.TransferHandler$HasGetTransferHandler should be visible to my class as it is located in the same package, right?
I think there must be some classloading issue when trying to access the non-public interface javax.swing.TransferHandler$HasGetTransferHandler in rt.jar.
I can not figure out what is different between my own non-public interface and Swing's javax.swing.TransferHandler$HasGetTransferHandler.
Any help would be appreciated.

I don't agree completely. What you're telling is true, don't get me wrong. It's the Error that I get from Java that troubles me.
To resolve the classloading question, I changed my code as follows:
package javax.swing;
import java.lang.reflect.Proxy;
import java.util.ArrayList;
import java.util.Collection;
import org.apache.commons.lang.ArrayUtils;
public class NonPublicInterfaceProxyCreator {
    public static void main(String[] args) {
        // This works fine !
        doTest(WindowConstants.class);
        doTest2(WindowConstants.class);
        // This also ! The proxy class package is javax.swing as expected
        doTest(SomePackageInterfaceDefiningClass.SomeInnerPackageInterface.class);
        doTest2(SomePackageInterfaceDefiningClass.SomeInnerPackageInterface.class);
        // JDialog implements the package visible interface
        // javax.swing.TransferHandler.HasGetTransferHandler
        Collection<Class<?>> jdInterfaces = new ArrayList<Class<?>>();
        for (Class<?> interfaze : JDialog.class.getInterfaces()) {
            jdInterfaces.add(interfaze);
        Collection<Class<?>> strippedJdialogInterfaces = new ArrayList<Class<?>>(
                jdInterfaces);
        for (Class<?> interfaze : jdInterfaces) {
            if (interfaze.getName().equalsIgnoreCase(
                    "javax.swing.TransferHandler$HasGetTransferHandler")) {
                strippedJdialogInterfaces.remove(interfaze);
        // Without the package visible interface it works !
        doTest(strippedJdialogInterfaces.toArray(new Class<?>[0]));
        doTest2(strippedJdialogInterfaces.toArray(new Class<?>[0]));
        // With the package visible interface it fails
        doTest(jdInterfaces.toArray(new Class<?>[0]));
        doTest2(jdInterfaces.toArray(new Class<?>[0]));
    private static void doTest(Class... interfaces) {
        ClassLoader contextClassLoader = Thread.currentThread()
                .getContextClassLoader();
        System.out.println("Classloader that creates proxy = " + contextClassLoader);
        try {
            Class clazz = Proxy.getProxyClass(contextClassLoader, interfaces);
            System.out.println("Class created = " + clazz
                    + " >>>> Implemented interfaces = "
                    + ArrayUtils.toString(clazz.getInterfaces()));
        } catch (Throwable e) {
            e.printStackTrace();
    private static void doTest2(Class... interfaces) {
        ClassLoader contextClassLoader = JDialog.class.getClassLoader();
        System.out.println("Classloader that creates proxy = " + contextClassLoader);
        try {
            Class clazz = Proxy.getProxyClass(contextClassLoader, interfaces);
            System.out.println("Class created = " + clazz
                    + " >>>> Implemented interfaces = "
                    + ArrayUtils.toString(clazz.getInterfaces()));
        } catch (Throwable e) {
            e.printStackTrace();
}And here is the result when I run it on Java 1.6:
Classloader that creates proxy = sun.misc.Launcher$AppClassLoader@11b86e7
Class created = class $Proxy0 >>>> Implemented interfaces = {interface javax.swing.WindowConstants}
Classloader that creates proxy = null
Class created = class $Proxy1 >>>> Implemented interfaces = {interface javax.swing.WindowConstants}
Classloader that creates proxy = sun.misc.Launcher$AppClassLoader@11b86e7
Class created = class javax.swing.$Proxy2 >>>> Implemented interfaces = {interface javax.swing.SomePackageInterfaceDefiningClass$SomeInnerPackageInterface}
Classloader that creates proxy = null
java.lang.IllegalArgumentException: interface javax.swing.SomePackageInterfaceDefiningClass$SomeInnerPackageInterface is not visible from class loader
     at java.lang.reflect.Proxy.getProxyClass(Proxy.java:353)
     at javax.swing.NonPublicInterfaceProxyCreator.doTest2(NonPublicInterfaceProxyCreator.java:64)
     at javax.swing.NonPublicInterfaceProxyCreator.main(NonPublicInterfaceProxyCreator.java:18)
Classloader that creates proxy = sun.misc.Launcher$AppClassLoader@11b86e7
Class created = class $Proxy3 >>>> Implemented interfaces = {interface javax.swing.WindowConstants,interface javax.accessibility.Accessible,interface javax.swing.RootPaneContainer}
Classloader that creates proxy = null
Class created = class $Proxy4 >>>> Implemented interfaces = {interface javax.swing.WindowConstants,interface javax.accessibility.Accessible,interface javax.swing.RootPaneContainer}
Classloader that creates proxy = sun.misc.Launcher$AppClassLoader@11b86e7
java.lang.IllegalAccessError: class javax.swing.$Proxy5 cannot access its superinterface javax.swing.TransferHandler$HasGetTransferHandler
     at java.lang.reflect.Proxy.defineClass0(Native Method)
     at java.lang.reflect.Proxy.getProxyClass(Proxy.java:504)
     at javax.swing.NonPublicInterfaceProxyCreator.doTest(NonPublicInterfaceProxyCreator.java:51)
     at javax.swing.NonPublicInterfaceProxyCreator.main(NonPublicInterfaceProxyCreator.java:41)
Classloader that creates proxy = null
Class created = class javax.swing.$Proxy6 >>>> Implemented interfaces = {interface javax.swing.WindowConstants,interface javax.accessibility.Accessible,interface javax.swing.RootPaneContainer,interface javax.swing.TransferHandler$HasGetTransferHandler}As you can see, I get an IllegalArgumantException telling me that my interface I try to proxy is not visible for JDialog's classloader, as I would expect. Remark that Java tells me that JDialog's classloader is null. Strange, isn't is?
However I get an IllegalAccessError when I try to proxy TransferHandler$HasGetTransferHandler from my own classloader.
Any reason why the error is different?

Public Interface not responding after second node is started in the cluster

Hi
Has anyone ever experienced the public interface not responding between nodes in the cluster (ping, ssh, scp) after the second nodeapps is started in the cluster?
This is a new install so all I have installed so far is the base release of CRS 10.2.0. This is on Solaris10. The vipca failed during the installation, however I was able to proceed and manually add the nodeapps using srvctl add nodeaps -n -o -A.
It seems after the second node is started I loose all connectivity to the public interfaces and to my default gateway.
Also I'm getting the following messages sometimes after I try and stop the nodeapps and start them back up.
CRS-1006: No more members to consider
CRS-0215: Could not start resource 'ora.node1.vip'.
Any suggestions on where I should start troubleshooting?
Thanks

Do you have default GW?
It can connects with GW, can't it?
Check metalink
CRS-0215: Could not start resource 'ora..vip' [ID 356535.1]
CRS-1006: No more members to consider when starting service [ID 465364.1]
Good Luck

2 Public Interfaces and NAT

Hello-
We currently have NW6 running BM3.7 set up with 1 public interface and 1
private interface. Our private interface is 10.1.1.1 and we are NATing
that to our public interface. We are using HTTP proxy services for all our
internet browsing---proxy being the 10.1.1.1 address. The public interface
is on a state WAN link and we are using it for internet browsing, email,
citrix and other state applications. We want to offload our email,
internet and citrix traffic onto another public intrface--which is
provided by a different ISP. I know what I need to do to change over the
email to the new ipaddress on the new interface. How do I set up BM to
route internet traffic to the new public interface? Also how do I make
sure that my citrix traffic is routed to the new interface as well? Any
help with this would be greatly appreciated.
Thanks all in advance!

You cannot arbitrarily send some type of traffic to one NIC, and the
rest to another. The outbound traffic will follow the default route.
You can have some limited control by using static routing to force
traffic to certain addresses out one NIC, but that tends to be useful
mostly with S2S VPN dedicated links.
You can also enable dynamic NAT on the LAN side of one of your internet
routers, and make reply traffic to inbound traffic from that link go
back the way it came in.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Pix515 multiple interface configuration

Hi, actually i have this scenario:pix 515e version 6.2(2) with on board
6 interfaces but now configure with 3 interfaces (in this mode):
INTERNET ROUTER (ETH 172.17.10.1)
I
I
I
I(OUTSIDE - 172.17.10.2)
PIX -INTF2--.2--------------(172.17.12.0/29)--------.3(PARTNER)
INSIDE (172.17.8.1/23)
I
I
I
I
MY LAN
then 3 interfaces configuration without NAT.
there are the static routes:
route outside 0.0.0.0 0.0.0.0 172.17.10.1 1 route intf2 192.168.54.209 255.255.255.255 172.17.12.3 1 route intf2 192.168.129.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.131.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.134.0 255.255.255.0 172.17.12.3 1
traffic outcomes from my default gateway coming out from 172.17.10.1, traffic out/in from /to network 192.168.x.x/16 is forwarded from intf2 this scenario works well.
but tomorrow i must add new two routers on 2 new interfaces and i would have this new scenario:
ISP ROUTER (.3 ) ISP ROUTER (.1)
\ I
172.17.14.0/30 \ I 172.17.10.0/30
\ I
INTF3(.2) \ I(OUTSIDE - .2)
(PARTNER)(.3)(172.17.13.0/29)INTF5(.2)PIX-INTF2(.2)(172.17.12.0/29)(.3)(PARTNER)
INSIDE (172.17.8.1/23)
I
I
I
I
I
MY LAN
and this would have to be future situation:
the traffic that outcomes from 172.17.8.1/25 coming out from
172.17.10.1
the traffic that outcomes from 172.17.8.128/25 coming out from a new interface 172.17.14.3 except traffic out/in from 192.168.0.0/16 coming out from 172.17.12.3 traffic that outcomes from 172.17.9.1/25 coming out from interface
172.17.14.3 except traffic out/in 192.168.0.0/16 coming out from
172.17.13.3
traffic outcomes from 172.17.9.128/25 coming out from 172.17.10.1
is it possible this scenario?
can you help me with this configuration?obbligatory i use NAT?
sorry for my bad english...
thanks in advance
Matt

Try these links:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00804619d8.shtml
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094763.shtml
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094769.shtml

Public Interface configuration - Bonding Yes / No ?

Similar Messages

Maybe you are looking for