Second VPN possible ?

Hi,
I have attached the diagram of the network we are trying to achive. We have a existing VPN tunnel between Cisco ASA firewall - 172.22.30.6 (A End) and Juniper Firewall - 172.22.50.6 (B End). The router is just to forward the packets.
Basically this vpn is between the 10subnet of A End and 192 subnet of B end. Since its on a privaate cloud our routers and asa are on 172.x.x.x range. We have NAT EXEMPT on the CIsco ASA (between 10.10.x.x and 192.x.x.x subnet). we have static routes on our core (A end) pointing to 192.x.x.x subnet to go through firewall (172.22.30.1) and similary for B End pointing to 10.x.x.x thorugh firewall 172.22.30.1. So at the A end, when a packet from 10 subnet reaches the core and see its a 192. subnet and goes through the firewall and there is NO NAT so it reaches the other end at the 10 address. Similary the other end sees its a 10 address and points it back to 172.22.50.1 firewall. no problem with this. This works great
Now there is a need for a vpn between the second Juniper firewall at A End and Juniper firewall at B end wiht the exisitng tunnel? how we have approached is, we have a 1:1 NAT (172.22.30.73 NATs back to 10.10.19.73) on the cisco asa. So the juniper firewall at B end is using a peer addres of 172.22.30.73 which NATs back to 10.10.19.73 - but the tunnel doesnt seem to come up on the juniper firewall - is this setup possible or are we missing on something?
I am thinking of since we have a NAT exempt (between 10.10.x.x subnet and 192.168.x.x subnet), this is causing the problem. As we are using the peer address as 172.22.30.73 but since this gets NATed to 10.10.19.73 (and there is a NAT exemption between 10.10.x.x range and 192.x.x.x range) would this cause the issue ?
any thoughts pls ? if i am unclear on anything pls let me know
Thanks

Can you narrow down the NAT 10.10.19.73 -> 172.22.30.73 to a specific port instead of just IP to IP?
Because you cannot have both ways, meaning IP to IP NAT is being done 10.10.19.73 -> 172.22.30.73 and pass-through IP traffic going via (without port speficiation) through the ASA-at-172.22.30.6 at same time.
Either you can have the cake or eat the cake, while being on IP-to-IP, unless you change the NAT 10.10.19.73-> 172.22.30.73 specific port.
I hope it make sense to you.

Similar Messages

IMac 7,1 turning internal screen off while watching a movie via output (second display), possible?

iMac 7,1 turning internal screen off while watching a movie via output (second display), is it possible with Lion?

Actually, Plex does the best job by placing a black background to the internal iMac screen it's called Blanking.
However that does not turn off the backlit which is very bright on the iMac 24" also the internal screen will draw more power that way. As you probably know running bootcamp you can turn off the internal screen while watching a movie on the external. This isn't a hardware limitation, I hope Lion has this feature.

Is $10 off on second purchase possible with no manual work needed?

Is this possible in BC - New customer makes a purchase (or spends over a certain amount on first order) and they receive an email (or redirected to a page) that says you have just been rewarded with $10 off on your next purchase. This expires on ... and then the next time they log in/make a purchase the script says this is their second purchase so give them $10 off? Is that script possible to work in BC without it taking too long to write? I know you could do a manual discount code > client creates a new discount code and emails the customer directly with it. All discount codes will need to be different to stop them from using it again or passing it around so it expires after 1 redemption. We did have a promotion going that all new customers receive $10 off on first purchase and I guess this is the simple solution so no manual work needs to be done by the client but we're just looking for other ideas. $10 off on next purchase prompts them to buy again. Any suggestions would be appreciated. Cheers

Hi Tom,
(I'm DD too and its changed my name here strangely).
Best Idea - use the discount codes (Ecommerce - Discount Codes)
Then go into Site Manager - System Emails and update it manually every month (e.g simple text saying "order again before the end of August and receive a 10% / $10 discount by entering code ILOVEAUGUST" - then mid way through August do the same with September.. It is manual work though.
Second idea - we did an error on our website at the very beginning by assigning a few $15 products as a GIFT VOUCHER. We still sent out the products but they got a special user unique code emailed to them (unknown to us) for the same value ($15) as the product they bought. A few super smart customers then went on to do another order and used the code which gave them a $15 discount. Maybe if you were having a special promotion on an item e.g a $50 item bought would give them a $50 credit for their next purchase - then this would work.
Hope that helps.
DD

2LIS_04_P_MATNR - second setup possible?

Hello,
I have 2LIS_04_P_MATNR which is running perfect. Now I have to fill second DSO.
Is it possible to fill this second DSO without new set-up from other DSO?

There is already an existing data flow btw 2LIS_04_P_MATNR and first DSO and you want to integrate a seond DSO similar to first DSO in the data flow ?
Does your first DSO has enough history in the change log?. If yes,
1) Create a transformation connecting the First DSO to your second DSO.
2) Create a Delta enables DTP for your source and Target objects
3) Execute your new delta enabled DTP ( Through Process chain)

Spawning two templates to create second page, possible?

I am not sure if this is possible but based on a value on the first page i want to be able to create a second page using two templates.
My script below just creates two extra pages. Any ideas please?
var t = this.templates;
var j = this.pageNum;
// this is my 3 templates, depending on the value of the first page the second will pick 2 of these templates
    var T = t[0];
    var S = t[1];
    var R = t[2];
if (this.getField("P"+j+".Background.Dropdown4").value == "Other"){
    var XO = T.spawn(this.numPages, true, true);
    for (var i=0; i<0; i++) T.spawn(this.numPages, true, true, XO);
}else if (this.getField("P"+j+".Background.Dropdown4").value == "Hair Colour"){
        var XO = T.spawn(this.numPages, true, true);
        var XY = S.spawn(this.numPages, true, true);
    for (var i=0; i<0; i++) T.spawn(this.numPages, true, true, XO);
    for (var i=0; i<0; i++) S.spawn(this.numPages, true, true, XY);
this.pageNum++;
app.alert("A new page has been added")

Thanks for the comments, the loops were taken initially from the examples on the SDK site for another project which needed more than one page template, I've taken them out and retried with the bOverlay changed to false but it adds 3 templates of which two are the same?
Heres my modified colde, any help would be much appreciated:
var t = this.templates;
var j = this.pageNum;
    var T = t[0];
    var S = t[1];
    var R = t[2];
if (this.getField("P"+j+".Background.Dropdown4").value == "Other"){
    var XO = T.spawn(this.numPages, true, false);
    T.spawn(this.numPages, true, false, XO);
}else if (this.getField("P"+j+".Background.Dropdown4").value == "Hair Colour"){
        var XO = T.spawn(this.numPages, true, false);
        var XY = S.spawn(this.numPages, true, false);
    T.spawn(this.numPages, true, false, XO);
    S.spawn(this.numPages, true, false, XY);
this.pageNum++;
app.alert("A new page has been added")

Satellite L670-1CN - Second HDD possible?

Hi,
is it possible to add a second hard drive on the L670-1CN ? I would like to buy a laptop which has this feature to put a ssd in a second bay.
Thank you for your help.

I called toshiba support which confirmed me there was a possibility to add a second hard drive, I ask a confirmation and ask if the connectors were available and the support confirmed all of that for the entiere L670 serie.
So I bought the laptop on a web site, received it this morning. I checked the availability of this slot, which does not exist...
Thanks Toshiba support... What a pity...
I will send back the laptop and look for another laptop (and another brand I think)
So... problem is solved :-)

Satellite A200-27R - Second HDD possible?

Hi all, just wanted to know if its possible to buy a hdd cady to fit a slave hdd in spare bay ? [SATALLITE A200 27R]
if not can anybody tell me what its for. Thanks and
All the best Dave

Hi buddy,
The question is: Do you have a second HDD connector?
If yes you can buy such a second HDD caddy from an authorized service provider.
Otherwise its not possible to a add a second HDD.

Re: Satellite P300-20h - Is second HDD possible?

Hi,
I have a p300-20h. On the underside there seems to be a space for a second hd.
The underside of the cover for the second hd has sticks that stop me from installing the second hd.
Is this to deter the installation of a second hd?

Macius,
Thanks for your response. I have the hard drive connectors. The problem is that when I have a drive in place I cannot close the cover because of the cover extensions. Did your brother purchase another cover or did he saw off the extensions? Thanks.

I cannot activate icloud foto. When I click on icloud the window comes up but in seconds the possibility to click to activate foto freezes. Can anyone help. I have spent so many hours trying to solve the problem.

i am so tired. Have used many hours now to find a way to get my fotos from my Iphone to my PC'er (windows 7). I have downloaded Icloud, but I cannot aktivate "foto" When I click on icloud there comes a window, where it seems that I can click on foto. But within sekonds the 3. (foto) possibility freezes and the vindow sort of changes: You can still se the choice "Foto" but it cannot be activated. Can anyone help, please!

Thanks for the link to your system.
You have a Combination BluRay and Surround System that includes WIRELESS Rear Speakers:
Rear wireless ready: Yes, 5.1ch wireless system included, 7.1ch wireless option with purchase of SH-FX67 + SB-HS100A
This could account for why the BluRay is generating interference with your wireless network signal.
You can go thru the process of changing the wireless channels and other changes to the Verizon Actiontec Router or hook up your old router which was working before you switched to FIOS.
FIOS has a Superior Product over any cable system and I would hate to see you leave over something that was out of their control.
By the way, looking at the picture of the rear connections for your Panasonic you would want to have an Optical Toslink cable go from the back of the Verizon HD Set Top Box (Optical Out) to the Optical In jack on the back of the Panasonic. This connection will provide you with Dolby Digital sound (If Broadcast by Channel) while you are watching TV. You may need to switch inputs on the Panasonic Remote to get this to work. You may also have an Optical Out jack on the TV that could be connect as well if you are using an HDMI Cable.
Your Verizon STB would be connected to the TV by either HDMI, Component, Composet, or Coax (Highest Quality to Lowest Quality). The HDMI would also provide sound to your TV so that it's internal speakers would work if desired.
If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it.
If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

First update ok, second not possible...

Hi all,
Got my Nano recently (my first iPod).
I have the latest iTunes (5.0.1) and have the latest Nano firmware (1.0).
I have found when connecting my Nano it updates fine. If I then go to update again (right click and select update) it tries but then I always get the message:
"The disk can not be read from or written to"
If I maually disconnect the Nano and re-connect it it again syncs fine the first time but not the second.
This is both an annoyance and a major problem as if I wish to change the iPod properties - i.e. add a photo dir or change my podcast settings - it looses these changes when I disconnect. The only way around this that I have found is to quickly make the properties changes whilst it is still updating - then it keeps them.
I have reset and restored the Nano, tried different hubbed and non-hubbed USB ports, re-installed iTunes. Nothing works.
Has anyone else had this - can you help?
Rich

You might want to enabling Disk use to see if this acts as a workaround in the short-term. Typically Disk Use requires you to manually eject the iPod prior to disconnecting it from the computer. Perhaps this will keep the connection live for you.
My Shuffle has a very similar behavior since applying the lastest firmware update (iPod Update 2005-09-23).
My hope is that another update is coming soon that will correct the problem.
Best Regards-
Randy

TIME CAPSULE BACKUP OVER INTERNET/VPN - POSSIBLE?

I would like to have my Macbook Pro backup to my Time Capsule in my office when I'm traveling.
We currently run an Apple OSX Server on our office network, and I have VPN access to the network. However I can't figure out how to mount the Time Capsule and run it (I can't in fact figure out how to access any of the computers on this network, except for the server which I can access via ARD).
Any help would be appreciated.

i too am looking for a backup solution for when i am away from my lan

2LIS_03_BF - Second init. possible?

Hello,
I made an init. to cube A with 2LIS_03_BF -> Delta works.
Now I want to make a second / additional init. to cube B.
Is there an impact for cube A?
Also in terms of delta-mechanism?
Is there an official statement from SAP?
Thanks in advance.

Hi,
I assume its a 3.5 flow.
You cannot make a new init again until the old one is deleted.
You can do a new one with a different selection.
You will have to delete the existing from the source to the target to do a new init.
If its an upgraded system to 7.0 with a 3.x flow then just check the delta from the data source to the new target and delta will start flowing into the new target.
But still you need to delete the existing init and do a new init to both the targets at the same time.
Thanks
Ajeet

Cant connect VPN - Possible font problem

I'm no longer able to connect my VPNs. I believe this is due to a problem with system fonts which prevents it from putting up the "Please enter password" dialog box. When I try to connect a VPN it remains in the "Connecting" state and I see the following log entries:
May 14 09:25:23 fog UserNotificationCenter[229]: NSFont: Unable to instantiate any of system fonts for meta font type 6. Falling back to whatever I can find...
May 14 09:25:23 fog UserNotificationCenter[229]: NSFont: Cannot instantiate any font !!
I've done the disk repair and permissions repair. Looks as if something has gone wrong with system fonts. What can I do?

HI,
Go here for help to Undo your FontBook
If you need more help try Font Management in Mac OS X
Carolyn

Second installation possible on new machine?

Hello. I have a copy of DW MX 04 that I bought back then. It was residing on my Dell. Now I have a Macintosh using the Leopard OS and want to install that software. It will install but won't work, telling me I need a new serial number. Can't I run my copy of this software on this new computer? HOW? I spent four hours on chat and the phone with some nicve people in India today and got nowhere.
Thanks for any advice. I know someone out there has run into this one before!
J. Kumiski

Understood although you could apply the same argument to 32 bit and 64 bit code with the opposite conclusion, couldn't you? Completely different code but the same serial no because it's the same side of the OS fence.
How strong is the link between engineering effort and final price charged to the end user, especially given the extreme difference in pricing for identical Adobe products on the same OS in different countries? Local taxes only account for a fraction of the difference.
Seems to me that whatever the market will pay is what they'll charge so I'm not clear on the reasons for not offering serial numbers which work on both Windows and Mac.

Help with 2 simultaneous internal users trying to VPN (Cisco s/w) to extern

Hello all,
We are a small office running Small Business Server 2003 - which means we're running the ISA 2004 firewall.
An external company has provided us with Cisco VPN software (ver403a) to access their network/secure web site.
A single user has been able to successfully connect to the company's network for quite some time. This was working just fine until two users tried to connect at the same time - using the same VPN user ID. We were told by the company that this should work but it simply isn't so we requested a second VPN user ID to test with.
Now what happens is that User A will connect successfully and User B can connect successfully at the same time however even though User B is connected, and you even see an IP assigned to the VPN adaptor, the user can not ping the company's web site and then of course can't access it. Very strange indeed!
I went back to the company and told them about our dilemma and we were told that it's nothing at their end but a routing/NAT issue at our end. So here I am now seeking some assistance from hopefully some Cisco experts. :-)
Appropriate ports have been opened in ISA and again both users will get connected to the VPN just fine, it is just that the second user can?t go any further.
It's been suggested to me that perhaps it's not a routing issue but that the company's Cisco VPN server/box is rejecting the second connection because it's coming from the same IP address - which would be the IP address of our ISA servers external network card.
If anyone has any suggestions as to how to fix this I would be so grateful!
Thank you very much.
Tammy

Configuring multiple VPN tunnels to the same device (same public IP address) is not possible since it is not possible to have more than one IPsec Security Association (SA) for the same peer. However, it is possible to configure multiple VPN tunnels to multiple devices. In your case if your client PC's are using public IP addresses they both can simultaneously connect to the remote end vpn server. However if you are using a single public IP address then it is not possible to have mutiple vpn connections. If you have only one ip from your isp then it would have to do PAT and you wont be able to have both vpn clients connect at the same
time.

Second VPN possible ?

Similar Messages

Maybe you are looking for