RV042 DDNS connected in a private subnet

Hi,
my RV042 is not able to propperly update my ddns. If you try to resolve my dyndns subnet kitus-network.dyndns.org you will get 192.168.0.2. How can I make the router update my ddns with the real public ip rather than the private ip it "sees" on the WAN interface?
Thanks

Hi Jonathan,
You may try either of these.
1. Configure your DSL modem as a bridge, not a router. Your RV042 will get the public IP and update Dyndns accordingly.
2. For some DSL modems (in my case it was a ZTE vDSL modem) it is possible to tell the RV042 to use PPPoE as authentication - and it gets the public IP as well. (Don't ask why it works this way. It just works. If, however you set RV042 to get WAN side IP via DHCP, then it gets a private IP from teh DSL modem, can route to DSL modem, but will not be able to update the right public IP to Dyndns.)
Hope it helps,
Janos

Similar Messages

Issue with OLAB Cube Reports. Database Server in VPC Private Subnet

Hi,
Environment:
Deployed Project Server 2010 with 2 server Architecture( 1 for Web/Front end server and 1 for DB Server) on Amazon VPC. Web server is on Public subnet and Database server is on
Private subnet.
Issue:
We have sucessfully configured OLAP Cubes and able to view reports within the app server. But when we try to access the same reports over the internet site and outside of cloud domain, excel is not able to connect DB server using .odc connection and Pivot
tables or data are not loading.
Solutions tried:
Opened all necessary ports in DB server for SQL Server-1433, Analysisc Service-2383 & 2382 and Browser Service - 1434. But still no luck.
So with this setup of Project Server, is it possible to access OLAP Cube reports out side of Cloud newtwork? If yes, how can we make this work?
Regards,
Ram
Thanks, Ram

Hi Ram,
I am not sure if it will work then as the client machine will try to find the Analysis Services(AS) server which is not available over the internet. You can try to open the needed ports through the firewall and configure a subdomain to point to your AS and
this should be available over the internet (e.g. analysisServices.domain.com). However, this is a potential security breach and may be not be allowed by your company policies.
However, I would go with the option I mentioned in my previous answer as this way the users can run the reports and the reports can be configured using that cloud machine
Hope this helps
Paul

Vip Automaticcly Switched to Private subnet

Hello All,
Few Days back i have implemented 2 Node RAC (10.2.0.1.0) on Solaris 10 (t2000 Machines).
I have see a very strange problem yesterday. My Vip automatically switched to the private subnet interface on both node. After that we can ping them and user's also can't connect since they are using vip.
I did Ifconfig -a and it shows..
root@dbserver1 # ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
ipge0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 10.8.116.14 netmask ffffff00 broadcast 10.8.116.255
ether 0:14:4f:94:fc:be
ipge2: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
inet 192.168.1.1 netmask ffffff00 broadcast 192.168.1.255
ether 0:14:4f:94:fc:c0
ipge2:1: flags=1040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4> mtu 1500 index 3 inet 10.8.116.16 netmask ffffff00 broadcast 10.8.116.255
But previously it was like this ...
root@dbserver1 # ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
ipge0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 10.8.116.14 netmask ffffff00 broadcast 10.8.116.255
ether 0:14:4f:94:fc:be
ipge0:2: flags=1040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4> mtu 1500 index 2
inet 10.8.116.16 netmask ffffff00 broadcast 10.8.116.255
ipge2: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
inet 192.168.1.1 netmask ffffff00 broadcast 192.168.1.255
ether 0:14:4f:94:fc:c0
I have then Stoped and started Crs wirh crsctl and it again came back to normal.
I have seen all the logs but did'nt find any reason.
This has also occured 2 weeks back.
Please tell me if anyone have faced this problem or have any solution to avoid this in future .
Thanks in advance
Pankaj

I suspect that the interface configuration at the crs installation was incorrect. please provide output of
oifcfg getif
It should be something like this:
eth0 10.51.12.0 global public
eth1 192.168.0.0 global cluster_interconnect
Have a look at metalink Note:283684.1: How to Change Interconnect/Public Interface IP Subnet in a 10g Cluster
It describes procedures to fix this issue.
Regards,
Martin

How to use the private subnet between ASA and Router

Guys,
Here is the context:
I am connecting to 2 ISPs for load sharing traffic coming from my private network.
The 2 links from the ISPs terminate in the router which connects to an ASA via a private subnet, back to my private network.
I have configured PBR in the router, to prefer ISP1 for trafic coming from my internal servers X, Y, Z (public addresses, no need for the ASA to translate). The router should send any other traffic coming from the rest of my private address space, servers W, V, U (after translation by ASA) to ISP2.
So far so good. The default route defined on ASA points to the internal LAN interface of the Router (private ip address). How can I route this subnet used between the ASA and Router? Being a private address I have to translate it to something (public) before the router can send it out. But translate to what?
Alternatively I could use a public subnet. But I do not have any.How do I get aroung this?
Regards
Ndaungwe

You have IP addresses on the direct interface links to the ISP's?? You ccould use those IP addresses with NAT overload.

I have a brand new MacBook Pro . I am trying to connect to the private wifi at my house but I need the IP address of my laptop . Everywhere I go on the laptop, the IP address is blank . How do I find the IP address if laptop is not connected to the wifi

I have a brand new MacBook Pro and I'm trying to connect to the private wifi at my house however, I need the IP address. Everywhere I go to find it, the adress is blank. What do I do ?

Your Mac won't have an IP address, at least not a valid IP, until you actually connect it to your home LAN. Not sure why you think you need the IP, you don't.
To connect to your home WiFi you need to know the SSID name, IE the name of your home WiFi, and the password for it. Once you have those two things click the little antenna looking icon on the right side of the menu bar and select your home WiFi name and click connect. A dialog box will pop up asking for the password, type in the password and click OK/Connect/Whatever.

Ipad will no longer connect to my private home network

i have always had my ipad mini connected to my private home network for over a year and just 3 days ago it no longer connects to my network! Why is that and how can i fix it???
i have no problems with my iphone 4s! it still connects to my wifi!

If you are having WiFi problems it is necessary to isolate whether the problem is with your network or your iPad. Note: Do NOT consider your network to be blameless if some other devices can connect to it.
First, test your iPad on some other WiFi networks: a friends, Starbucks, Barnes & Noble, etc.
If it works well there then the problem is probably with your network. Try restarting your WiFi router by removing power for 30 seconds. If that does not help check for a firmware update for your router. If none exists which corrects the problem consider replacing the router.
If your iPad does not function well on other networks it possibly has a hardware problem. You could try Settings > General > Reset > Reset Network Settings to see if that corrects the problem. If not, contact Apple Support or visit an Apple store for evaluation. They can provide a replacement if your iPad is bad.
If you need more help please give the make, model, and version of your WiFi router and how you have it configured.

Howto: Zones in private subnets using ipfilter's NAT and Port forwarding

This setup supports the following features:
* Requires 1 Network interface total.
* Supports 1 or more public ips.
* Allows Zone to Zone private network traffic.
* Allows internet access from the global zones.
* Allows direct (via ipfilter) internet access to ports in non-global zones.
(change networks to suit your needs, the number of public and private ip was lowered to simplify this doc)
Network setup:
iprb0 65.38.103.1/24
defaultrouter 65.38.103.254
iprb0:1 192.168.1.1/24 (in global zone)
Create a zone on iprb0 with an ip of 192.168.1.2
### Example /etc/ipf/ipnat.conf
# forward from a public port to a private zone port
rdr iprb0 65.38.103.1/32 port 2222 -> 192.168.1.2 port 22
# force outbound zone traffic thru a certain ip address
# required for mail servers because of reverse lookup
map iprb0 192.168.1.2/32 -> 65.38.103.1/32 proxy port ftp ftp/tcp
map iprb0 192.168.1.2/32 -> 65.38.103.1/32 portmap tcp/udp auto
map iprb0 192.168.1.2/32 -> 65.38.103.1
# allow any 192.168.1.x zone to use the internet
map iprb0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp
map iprb0 192.168.1.0/24 -> 0/32 portmap tcp/udp auto
map iprb0 192.168.1.0/24 -> 0/32For testing purposes you can leave /etc/ipf/ipf.conf empty.
Be aware the you must "svcadm disable ipfilter; svcadm enable ipfilter" to reload rules and the rules stay loaded if they are just disabled(bug).
Zones can't modify their routes and inherit the default routes of the global zone. Because of this we have to trick the non-global zones into using a router that doesn't exist.
Create /etc/init.d/zone_route_hack
Link this file to /etc/rc3.d/S99zone_route_hack.
#/bin/sh
# based on information found at
# http://blogs.sun.com/roller/page/edp?entry=using_branded_zones_on_a
# http://forum.sun.com/jive/thread.jspa?threadID=75669&messageID=275741
fake_router=192.168.1.254
public_net=65.38.103.0
router=`netstat -rn | grep default | grep -v " $fake_router " | nawk '{print $2}'`
# send some data to the real network router so we look up it's arp address
ping -sn $router 1 1 >/dev/null
# record the arp address of the real router
router_arp=`arp $router | nawk '{print $4}'`
# delete any existing arp address entry for our fake private subnet router
arp -d $fake_router >/dev/null
# assign the real routers arp address to our fake private subnet router
arp -s $fake_router $router_arp
# route our private subnet through our fake private subnet router
route add default $fake_router
# Can't create this route until the zone/interface are loaded
# Adjust this based on your hardware and number of zones
sleep 300
# Duplicate this line for every non-global zone with a private ip that
# will have ipfilter rdr (redirects) pointing to it
route add -net $public_net 192.168.1.2 -ifaceNow we have both public and private ip addresses on our one iprb0 interface. If we'd really like our private zone network to really be private we don't want any non-NAT'ed 192.168.1.x traffic leaving the interface. Since ipfilter can't block traffic between zones because they use loopbacks we can just block the 192.168.1.x traffic and the zones can still talk.
The following /etc/ipf/ipf.conf defaults to deny.
# ipf.conf
# IP Filter rules to be loaded during startup
# See ipf(4) manpage for more information on
# IP Filter rules syntax.
# INCOMING DEFAULT DENY
block in all
block return-rst in proto tcp all
# two open ports one of which is redirected in ipnat.conf
pass in quick on iprb0 proto tcp from any to any port = 22 flags S keep state keep frags
pass in quick on iprb0 proto tcp from any to any port = 2222 flags S keep state keep frags
# INCOMING PING
pass in quick on iprb0 proto icmp from any to 65.38.103.0/24 icmp-type 8 keep state
# INCOMING GLOBAL ZONE UNIX TRACEROUTE FIX PART 1
#pass in quick on iprb0 proto udp from any to 65.38.103.0/24 keep state
# OUTGOING RULES
block out all
# ALL INTERNAL TRAFFIC STAYS INTERNAL (Zones use non-filtered loopback)
# remove/edit as needed to actually talk to local private physical networks
block out quick from any to 192.168.0.0/16
block out quick from any to 172.16.0.0/12
block out quick from any to 10.0.0.0/8
block out quick from any to 0.0.0.0/8
block out quick from any to 127.0.0.0/8
block out quick from any to 169.254.0.0/16
block out quick from any to 192.0.2.0/24
block out quick from any to 204.152.64.0/23
block out quick from any to 224.0.0.0/3
# Allow traffic out the public interface on the public address
pass out quick on iprb0 from 65.38.103.1/32 to any flags S keep state keep frags
# OUTGOING PING
pass out quick on iprb0 proto icmp from 65.38.103.1/32 to any icmp-type 8 keep state
# Allow traffic out the public interface on the private address (needs nat and router arp hack)
pass out quick on iprb0 from 192.168.1.0/24 to any flags S keep state keep frags
# OUTGOING PING
pass out quick on iprb0 proto icmp from 192.168.1.0/24 to any icmp-type 8 keep state
# INCOMING TRACEROUTE FIX PART 2
#pass out quick on iprb0 proto icmp from 65.38.103.1/32 to any icmp-type 3 keep stateIf you want incoming and outgoing internet in your zones it is easier if you just give them public ips and setup a firewall in the global zone. If you have limited public ip address(I'm setting up a colocation 1u server) then you might take this approach. One of the best things about doing thing this way is that any software configured in the non-global zones will never be configured to listen on an ip address that might change if you change public ips.

Instead of using the script as a legacy_run script, set it up in SMF.
First create the file /var/svc/manifest/system/ip-route-hack.xml with
the following
---Start---
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM
"/usr/share/lib/xml/dtd/service_bundle.dtd.1">

<service_bundle type='manifest' name='NATtrans:ip-route-hack'>
<service
name='system/ip-route-hack'
type='service'
version='1'>
<create_default_instance enabled='true' />
<single_instance />
<dependency
name='physical'
grouping='require_all'
type='service'
restart_on='none'>
<service_fmri value='svc:/network/physical:default' />
</dependency>
<dependency
name='loopback'
grouping='require_all'
type='service'
restart_on='none'>
<service_fmri value='svc:/network/loopback:default' />
</dependency>
<exec_method
type='method'
name='start'
exec='/lib/svc/method/svc-ip-route-hack start'
timeout_seconds='0' />
<property_group name='startd' type='framework'>
<propval name='duration' type='astring'
value='transient' />
</property_group>
<stability value='Unstable' />
<template>
<common_name>
<loctext xml:lang='C'>
Hack to allow zone to NAT translate.
</loctext>
</common_name>
<documentation>
<manpage
title='zones'
section='1M'
manpath='/usr/share/man' />
</documentation>
</template>
</service>
</service_bundle>
---End---
then modify /var/svc/manfiest/system/zones.xml and add the following
dependancy
---Start---
<dependency
name='inet-ip-route-hack'
type='service'
grouping='require_all'
restart_on='none'>
<service_fmri value='svc:/system/ip-route-hack' />
</dependency>
---End---
Finally create the file /lib/svc/method/svc-ip-route-hack with the
contents of S99zone_route_hack, minus the sleep timer (perms 0755). Run
'svccfg import /var/svc/manifest/system/ip-route-hack.xml' and 'svccfg
import /var/svc/manifest/system/zones.xml'.
This will guarantee that ip-route-hack is run before zones are started,
but after the interfaces are brought on line. It is worth noting that
zones.xml may get overwritten during a patch, so if it suddenly stops
working, that could be why.

TCP connectivity check failed for subnet

hi
im trying to add a node to my 11.2 grid infrastructure and the cluster verification is returning error
Check: TCP connectivity of subnet "152.15.123.0"
Source Destination Connected?
inode2:127.0.0.1 inode2:152.15.123.4 failed
Result: TCP connectivity check failed for subnet "152.15.123.0"
this happens when i run cluvfy with pre nodeadd option, there is no other failure ...
any idea what it could be ?

Hello Buddy,
Please note that inode2:127.0.0.1 is using loopback IP, please check your network configuration and retry the cluvfy operation.
Cheers,
Rodrigo Mufalani
www.mufalani.com.br/blog

RAC - Cluvfy - TCP connectivity check failed for subnet

Hi ...this is Oracle RAC 10.2.0.4.0 .. has anyone witnessed this check failure or is able to comment on how I should debug the same
./runcluvfy.sh stage -post hwos -n all -verbose
Check: TCP connectivity of subnet "172.30.182.0"
Source Destination Connected?
sekiazu0230:172.30.182.67 sekiazu0231:172.30.182.68 failed
sekiazu0230:172.30.182.67 sekiazu0231:172.30.182.68 failed
Result: TCP connectivity check failed for subnet "172.30.182.0"
Interface information for node "sekiazu0230"
Name IP Address Subnet Gateway Def. Gateway HW Address MTU
en0 172.30.182.67 172.30.182.0 172.30.182.67 172.30.182.1 1E:40:3D:1C:96:02 1500
en0 172.30.182.67 172.30.182.0 172.30.182.67 172.30.182.1 1E:40:3D:1C:96:02 1500 ===> Duplicated ?
en1 172.30.190.48 172.30.190.0 172.30.190.48 172.30.182.1 1E:40:3D:1C:96:03 1500
en2 10.252.34.9 10.252.34.0 10.252.34.9 172.30.182.1 1E:40:3D:1C:96:04 65390
Thank you for all feedback
Steve

Hello Buddy,
Please note that inode2:127.0.0.1 is using loopback IP, please check your network configuration and retry the cluvfy operation.
Cheers,
Rodrigo Mufalani
www.mufalani.com.br/blog

My ipod crashes off whenever I want to connect to a private share. I have 4.3.3. What can I do?

My ipod crashes off whenever I want to connect to a private share. I have 4.3.3. What can I do?

- Regarding the apps you previously had installed, your only way is if you have the version that was compatible on your computer such as in the recycle bin/trash or in a computer file backup. In that case delete the current version that is in your iTunes App library and replace it with the older version. Then sync.
- Otherwise, as you found out, there are not that many apps still compatible with 4.2.1. However,Safari, mail and music work like they originally did.

SCVMM 2012 R2 – two iSCSI network interfaces connected to the same subnet

I would like to configure two networks in SCVMM 2012 R2 which will be used by VMs to connect to iSCSI SAN. Both of these networks should be connected to the same subnet (192.168.100.0/24) because they will connect VMs to Dell EqualLogic using iSCSI MPIO.
Those networks should be available on all Windows Server 2012 R2 Hyper-V cluster nodes.
When I try to create two logical networks in SCVMM with the same subnet, I receive error (Unable to assign the subnet 192.168.100.0/24 because it overlaps with an existing subnet)
How should I configure networking in SCVMM to allow one virtual machine to connect to the same subnet using two network interfaces?

"How should I configure networking in SCVMM to allow one virtual machine to connect to the same subnet using two network interfaces?"
You can achieve this by simply adding multiple vNICs to a VM - connected to the same VM Network.
-kn
Kristian (Virtualization and some coffee: http://kristiannese.blogspot.com )

Azure website error Your connection is not private

I'm trying to set up a domain name in azure.
I changed different settings, but that did not work.
https://pp.vk.me/c623722/v623722762/180cb/SwBEjiWmCGY.jpg
booveron.com
I get an error:"Your connection is not private"
https://pp.vk.me/c623722/v623722762/180d3/679OFdAEvFI.jpg
What could be the problem?
Thanks

Hi,
Please refer to this article to have a try.
Adding a Custom Domain to your Windows Azure AD
http://www.cloudidentity.com/blog/2013/04/14/adding-a-custom-domain-to-your-windows-azure-ad/
Meanwhile, for the website issue, i think you may ask in
https://social.msdn.microsoft.com/Forums/en-US/home?forum=windowsazurewebsitespreview
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

RV042 DDNS problem

Hi all,
I am trying to set up my rv042 to use the ddns service. The rv042 is directly connected to the ISP provided modem on WAN port 1. The problem is that instead of seeing the internet IP the rv042 is using the ISP subnet assigned IP.
Is there any way to solve this?
Thank you.
LAN IP :
192.168.1.1
WAN1 IP :
192.168.12.9
WAN2 IP :
0.0.0.0
Mode :
Gateway
DNS (WAN1) :
DNS (WAN2) :
192.168.12.1
DDNS(WAN1   |   WAN2) :
Off       |       Off
DMZ Host :
Disabled

Marios,
You need to put the modem/router into bridge mode. This way it will pass your public ip address over to the RV042 and this problem won't occur. Currently right now, you are NATTING twice all traffic coming inbound and can cause certain routing problems and other various problems as well. Once you get RV042 with public ip address your DDNS account will start reflecting the proper address.
Or if you can’t bridge your modem/router, see if there is a place in that device to input your DDNS account information since it’s your gateway to the internet.
Thanks,
Jasbryan
Cisco Support Engineer
.:|:.:|:.

RV042 - loosing connection

Hi there.
My problem is as follows
Setting the device up with static WAN is no problem, I get internet access and everything works perfect - using WAN1.
But when connecting a LAN port to a switch with a dmz lan, the WAN port looses connection
The LAN address of the RV042 VPN Router is set to: 10.10.20.5 with subnet 255.255.255.248
Other equipment is connected to the switch with 10.10.20.6, 10.10.20.4 and 10.10.20.2 with same subnet.
10.10.20.2 is a routing device that connects to 172.16.10.2 and further to 10.10.10.2 (LAN) with servers
The device working mode is currently set as Router. Setting it as gateway makes no difference to the problem.
Can you clarify what goes wrong?
Regards

Hi Taras,
As I understand you have Dual WAN and Load balancing , my question do you setup a protocol binding to bind the Voice traffic to go through only one WAN
with protocol binding you can dedicate WAN1 for example for voice Traffic
Protocol binding is working from LAN to WAN under protocol binding setting you have to choose the source IP range , you can have Range of IP for the phone
Destination 0.0.0.0 - 0.0.0.0 and select WAN 1 for example and enable it and save the configuration
Please let me know after your testing
thanks
Mehdi

RV042 VPN Connection Questions

Hello,
I have successfully connected two RV042s to establish a VPN gateway to VPN gateway connection. I have the follow questions, please comment:
1. I would like to keep the VPN tunnel connection time indefinite. Is it sufficient by checking the "Keep-Alive" box on the VPN -> Gateway To Gateway -> Advance page? Or, I have to ping the RV042 periodically?
2. Do the "Phase 1/Phase 2 SA Life Time" (on VPN -> Gateway To Gateway page) settings have any impact on keeping the VPN connection time indefinite? What are the optimal values for them?
3. Is there an API, command, or script to replace a manual clicking on the "CONNECT" button to establish the VPN tunnel from the VPN -> Summary page? Or, is there a way to accomplish this at power up?
4. Is there a way to establish a VPN tunnel without going through login and clicking the "CONNECT" button? (Auto connect at power up?)
Thank you in advance for the comments.
Steve

Hi, Mike,
I did not do any extensive testings on the RV042s, but I did the following things to my RV042s:
1. Enabled the "Keep-Alive" feature (see Administration Guide, page 128),
2. Enabled the "Dead Peer Detection" feature and set the interval to 10 seconds. (see Administration Guide, page 129).
Make sure you save the changes.
These features are available below the "Advanced" button under the VPN selection. I hope this help.
You can power down the router or disconnect the network to verify the result. The VPN tunnel should be re-established and stay connected.
Steve

RV042 DDNS connected in a private subnet

Similar Messages

Maybe you are looking for