Solaris 10 : Direct Access to internet

Hi guys !!!
I have a server with Solaris 10. It access the internet by a router, but i want to access in a direct point without the router. When the server is on the router the internet work good, but i plug it on direct point it does not work because he got the "old" ip, the ip used in the router !!!
How can i tell to the server that it needs a new ip !?
Thanks !!!

plug it back into your router. Set the DMZ to the ipaddress of your solaris machine.

Similar Messages

  • Getting direct access to Internet is sporadic.

    When I get the "Firefox cannot find this site" screen -- or words to that effect -- if I 1) highlight the address, 2) click enter, and then 3) click on "Try again," I can usually then connect. Sometimes I have to do this twice. Once in a while, it doesn't work at all. This happens, again sporadically, even with your own site, but not just yours but virtually any other site I might be trying to access, e.g.,<pej.org>.

    plug it back into your router. Set the DMZ to the ipaddress of your solaris machine.

  • Not able to access the internet SOlaris 10

    I have installed solaris 10 and it is in subnet but no router. I was not able to access the internet.
    hostname.e1000g0
    hostname.hme0
    hostname6.e1000g0
    When I create the file dhcp.e1000g0 internet works but the hostname becomes unknown.
    Can someone please help me ?

    route add default 192.168.1.55 (Ipaddress of default gateway)
    DHCP able to find it dynamically but once dhcp is off we need to mention it.
    Makes it work.

  • Can lync client use internet proxy settings to proxy edge servers, if direct access is not reachable?

    Hi everybody I am trying to Login with my lync Client out of my organization. So I am using lync as a remote user. I am in another organization, and I am using their coporate lan wired and wireless, but I cannot Login to lync in my organization.
    I see that I cannot Access my edge Server on port 443 to authenticate directly, I know that Client in this organization use Internet Proxy to browse the Internet. they have a .pac in their ie Settings.
    my question is; can lync Client use Internet Proxy Settings to reach the Destination? I mean the Access edge on port 443?
    or it can use only Client direct Access to reach the edge Servers?
    I Think that the answer is that I use tcp protocol and not http, and maybe that is the reason why I cannot use the Internet Explorer Proxy Settings to reach the Access edge Servers, different maybe is the case I Need to reach the reverse Proxy for live Meetings.
    Hope my question is clear.
    Thanks

    Proxy settings are used to tell Internet Explorer the network address of an intermediary server (known as a proxy server) that is used between the browser and the Internet on some networks.
    Lync client doesn’t use Internet Proxy Setting. You need to access the Edge service directly.
    Lisa Zheng
    TechNet Community Support

  • Direct Access has no internet access

    Hi all,
    Hopefully some can help me with this issue that I have been struggling with for about a week now.
    I'm new to Direct Access so please bear with me
    I've setup a Server 2012 box and installed the Direct Access role.  The server is behind en edge device with 1 NIC.
    I've configured it and can connect up Windows 8.1 tablets successfully, both on the internal network and when connected externally.
    The problem I have is with internet access when they are connected externally and I've tried with Force Tunneling enabled and disabled (ideally for security reasons I'd like it enabled).
    We use a proxy server configured with a wpad file hosted on Server 2003.  This is published via DNS.
    Internet Explorer is configured to Auto Detect Internet Settings
    I can connect to any of our internally hosted websites, and also strangely enough, our main publically accessible web site.
    If I don't have Force Tunneling enabled then I get the following behavior
    I can't use Internet Explorer to connect to any public websites though (google.com, yellowpages.com, etc).
    I can connect to any website that has the same domain suffix as our domain
    I can use Firefox and connect to external websites if I say 'Direct Connection to Internet' or 'Use System Settings'
    If I use Force Tunneling then I get the following behavior:
    The network connection says it is 'limited' and the Direct Access connection says it has 'No Internet Access'
    I can't use Internet Explorer to connect to any public websites though (google.com, yellowpages.com, etc).
    I can connect to any website that has the same domain suffix as our domain
    I can't use Firefox and connect to external websites
    Does anyone know why this would be the case?
    Thanks

    Thanks for the responses, I managed to get this working by unticking the 'Auto Detect Settings' and manually entering the proxy server and port under the 'Proxy Settings' option
    It means that it doesn't read my wpad file but I can manage this way still through GP.
    Another problem that I've just encountered for no reason that I can see is this.
    I'm connected to my Domain, I pull the LAN cable and then it auto connects me to my wireless network.  It used to auto connect me to my Direct Access server but it doesn't anymore, it just says connecting.  If I reboot the tablet while on the wireless
    LAN and then log on with my Domain Credentials it'll connect me through to the Direct Access server.
    Why would it need a reboot?  Why has it stopped connecting straight away after detecting I'm no longer on the domain?

  • Direct Access on Windows Server 2012 R2 and IPV6

    I have a question about IPV6 and Direct Access in Server 2012 R2. Without using UAG is it still mandatory to have IPV6 enabled in the intranet?
    Kristopher Turner | Not the brightest bulb but by far not the dimmest bulb.

    Hi,
    DirectAccess uses IPv6 with IPsec to create a secure connection between DirectAccess client computers and the internal corporate network.
    However, DirectAccess does not necessarily require connectivity to the IPv6 Internet or native IPv6 support on internal networks. Instead, it automatically configures and uses IPv6 transition technologies to tunnel IPv6 traffic across the IPv4 Internet (6to4,
    Teredo, IP-HTTPS) and across your IPv4-only intranet (NAT64 or ISATAP).
    For detailed information, please view the link below,
    Plan the DirectAccess Infrastructure
    http://technet.microsoft.com/en-us/library/jj574101.aspx
    Hope this helps.
    Steven Lee
    TechNet Community Support

  • Just set up our Apple TV and it works fine for NetFlix.  However want to stream photos and I Tune library from home computer but this computer accesses the internet thru a VPR at my wife's place of enployment. Other than a 2nd computer any suggestions?R

    Just set up Apple TV on home network. Works fine for NetFlix but we can't stream I Tune libruary or digital photos thru it to our home TV as because of my wife's work we bypass COX and access the internet thru a VPN offered by her employer.  Was told we either have to buy a second computer (two expensive for just these two functions) or keep turning on and off the VPN(not practical). Any other ideas? Thanks

    Does she need to access the internet through her employer, or is she just trying to access her internal network at work?
    If it's the latter, split-stream VPN clients (like Cisco AnyConnect) will split traffic so that only that directed at a particlar domain gets tunneled. 
    I have an AnyConnect client at home, but I normally only activate it when I'm using it, so I've never tested it with HomeSharing.  I'm currently traveling, but when I get home tomorrow, I'll try it out and let you know if it works.  If it does, your wife can check with her employer to see if she can configure AnyConnect to work with them.

  • Direct Access 2012 R2 - Problems with Force Tunneling and other questions

    I have just setup a Direct Access 2012 R2 server in my network, 2012 domain and all Windows 8 clients. 
    Internal CA environment (no external CRL) using a public issued cert for IPHTTPS tunnel, 2 interfaces for the DA server, 1 internal and 1 in the DMZ behind a NAT firewall (1 public IPv4 address) and my test clients are connecting fine to internal resources.
    1.  When I enable Force Tunneling the clients no longer are able to access the external internet.  Is there anything I need to add to make this work?
    2.  I am having trouble with our Remote Desktop Session Hosts.  I can only assume it has something to do with the DNS  as we have our AD domain performing internal DNS of the int.contoso.com domain and public DNS performing for the external
    Contoso.com domain (RDWA etc).  DA has only int.contoso.com set as a DNS Name Suffix in the Infrastructure Setup.  Should I add the external contoso.com Name Suffix in there too?
    3.  I have a Kaspersky Security Center server for centralized AV admin, can I still push out AV updates to the clients that connect with DA.  Do I add my KSC server to the Management Servers list in the Infrastructure Server Setup page on the DA
    setup.   Does that list allow those servers to access the DA clients?

    Hi,
    Let's solve problems one by one. Force tunneling. When enabled, all network trafic from DirectAccess clients goes throught IPSEC tunnels. Just configure a proxy on your DirectAccess clients (with a FQDN of course) and your clients should be able to surf
    internet again.
    RDS : Depend. Where are your RDS servers registred internal zone DNS or external DNS zone. If a DirectAccess client cannot resolve a name it does not know if it has to go throught the tunnel. At last can you ping your RDS Server?
    Remote Management : Right. Adding servers in this list allow them to use the IPSEC infrastructure tunnel (computer established tunnel) without users being logged.
    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

  • Server 2012 Direct Access Single NIC cant get it to work

    Hi,
    I am having some real issues with setting up Direct Access with Server 2012 and a Windows 8 client, it simply won’t work at all.
    First of all I should describe my setup:
    I have an internet connection with a static IPv4 address on the external network adapter of the router
    The internal network address (the address of the router which has the internet connection) is 192.168.1.1
    Server1 (windows 2008 R2 Standard) has a static IPv4 address 192.168.1.2 and has some ports forwarded from the router (443, 25, 80) this server is a domain controller, email server, and has the DNS, DHCP and
    certificate services
    Server 2 (Windows 2008 R2 standard) has static IPv4 address 192.168.1.3 it has no ports forwarded from the router as it has no services accessed externally, it is used as a file server and print server, backup
    domain controller and backup DNS.
    Server 3 (Windows 2012) has static IPv4 address 192.168.1.4 and has the Remote Access server role installed along with all the other default features and roles it requires in the setup process.
    These servers have all got an IPv6 address which I assume the server has configured automatically, there has been no deliberate configurations made to disable IPv6
    I have no UAG or proxy server or anything else to route packets to internal servers. Just this router which has the option for port forwarding (I assume that’s NAT isn’t it?) sorry don’t know much about that
    area.
    I go through the setup wizard in remote access to configure direct access, in the external URL I have entered da.mydomain.com and created a host A record in my external domain name providers DNS which points
    the da record to my external IP address. The wizard creates all the GPO’s, scoped correctly, and applied to a Windows 8 client. The operational status shows its all working and I got green ticks. However, when I connect the client to the internal network it
    doesn’t seem to have correctly got the DA settings. I run the following in powershell
    Get-DnsClientNrptPolicy
    Nothing displays – at all
    Get-NCSIPolicyConfiguration
    Description                   
    : NCSI Configuration
    CorporateDNSProbeHostAddress  
    : fdd8:dd4a:ea42:7777::7f00:1
    CorporateDNSProbeHostName     
    : directaccess-corpConnectivityHost.mydomain.local
    CorporateSitePrefixList       
    : {fdd8:dd4a:ea42:1::/64, fdd8:dd4a:ea42:7777::/96, fdd8:dd4a:ea42:1000::1/128,
    fdd8:dd4a:ea42:1000::2/128}
    CorporateWebsiteProbeURL      
    : http://directaccess-WebProbeHost.mydomain.local
    DomainLocationDeterminationURL : https://DirectAccess-NLS.mydomain.local:62000/insideoutside
    Get-DAConnectionStatus
    Get-DAConnectionStatus : Network Connectivity Assistant service is stopped or not responding.
    At line:1 char:1
    + Get-DAConnectionStatus
    + ~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo         
    : NotSpecified: (MSFT_DAConnectionStatus:root/StandardCi...onnectionStatus) [Get-DAConnect
       ionStatus], CimException
    + FullyQualifiedErrorId : Windows System Error 1753,Get-DAConnectionStatus
    I go into services.msc and find that the network connectivity assistant is not started, it wont start either something must trigger it but I have no idea how to get it triggered to start… this might be my only
    source of problem perhaps but on a more network level question:
    If I have such ports as 80, and 443 (which I assume DA uses in some form with a public IPv4 internet address) directed at server 1, how does the DA connection get to server 3 which has the DA role installed?
    I could create another record on the server which also opens port 443 to server as well as for server 1, but then how would the router know which server to pass the DA connection to if the same port is open for two different servers?
    Either way, this first issue is that the client doesn’t seem to have the ability to connect internally correctly yet, so maybe this connectivity service is a good place to start? My understanding is that the
    networks icon in the system tray should show that there is a corporate connection, but it doesn’t. also, the client seems to have the NLS certificate in the computer certificate store, so the cert side of things is working and the GPO side is working.
    Many thanks
    Steve

    ahh i see, so just to enlighten me even further...
    If a company has two web servers that would mean they would need two different public facing IP addresses so they can route to each internal web server. If, like the big companies have, they
    may have many web servers (possibly more than 100) I’m assuming that simply buying more public IP addresses would have a limit, especially since the IPv4 address space is pretty much exhausted. So is this where proxy systems come into play like ISA and Forefront,
    is this what they do?
    I assume if such a product was implemented you could go down to just one or two public IP addresses, point all traffic to the ISA server and that in turn would do all the routing of packets
    to each server behind the NAT/router (probably based on some sort of domain name or sub domain namespace as it’s parameter for forwarding?)
    Secondly, what I have done is installed windows server 2012 and used that as a direct access client (I read on another forum that the windows 8 RP doesn’t have the enterprise bits to make this
    work). I have got much further with the 2012 server acting as a client (installed on laptop, installed desktop experience and wireless LAN), 
    but when I run the following command on my DA client I get the following status
    Get-DAConnectionStatus
    Status:                 
    connectedlocally
    Substatus:          
    none
    This appears to work fine, when im connected to the local network. But then I disconnect and run the command again and I get the following:
    Status:                 
    Error
    Substatus:          
    NameResolutionFailure
    On my router what I did is temporarily disable port 443 going to my original server and instead opened it up pointing to my other server, so 443 traffic should be going to my DA server now, but I don’t understand why its giving the name resolution failure
    status. I have a host A record called “da” with my domain hoster, and entered the full domain namespace in the DA wizard as da.mydomain.com (the Host A record has been up there for more than a week so it’s propagated through the net)
    So, a bit further but stuck again.

  • Windows server 2012 and windows 7 direct access

    I am looking for some decent documentation on how to get direct access in windows 2012 to work with windows 7
    Can anyone point me the right direction?

    Hi, I got success through this
    http://syscomlab.blog.com/2012/09/how-to-get-windows-7-to-work-with-directaccess-server-2012/ and this one
    http://syscomlab.blog.com/2012/09/directaccess-for-windows-server-2012-guide/ but I'm using NLS in a dedicated server (what is fine for me) but the Win7 client doesn't connect to DA (EDGE server) through internet. I'm using a LAB where WS2012 host acts
    as a GATEWAY (using NAT) and for Windows 8 client is working fine but when I try using win7 clients it just doesn't work :(
    Server WS 2012 RTM full patched + Win8 Enterprise RTM full patched + Win7 Enterprise RTM ful patched (including the recommended KBs for DA solution)
    regards,
    Thiago
    Thiago Beier Se foi útil marca como resposta! Don´t forget to mark as answer!

  • Trouble accessing the internet in a WDS

    I am having trouble connecting to the internet from my MBP connected to an Airport Extreme base station in a WDS. My setup is as follows:
    I have a Billion ADSL 2+ modem connected to an Airport Express in one room. In another room I have an Airport Extreme Base Station connected to an external hard disk and USB printer (via a USB hub). I have the Airport Express setup to connect to the Internet via Ethernet (i.e. the modem) and to act as a bridge (so that my PPPoE connection is handled by the modem. I have the Airport Extreme setup to extend a wireless network.
    My laptop happily connects (wirelessly) to the wireless network, and whether it's connected directly to the wireless network via the Extreme or the Express (I check which it is connected to by checking the wireless clients list via Airport Utility) it can see the printer and external HDD connected to the Extreme and the modem connected to the Express (i.e. I can mount the external HDD, print to the printer, and connect to the modem's internal setup web server whether connected directly to the Extreme or to the Express). If my laptop is connected directly to the Express I can access the internet (via the modem), but if my laptop is connected to the Extreme I can't access the internet (even though I can access the internal web server on the modem).
    Any ideas what I'm doing wrong?
    Another symptom of the problem is that while Airport Utility can 'see' both the Express and Extreme when my laptop is connected to the wireless network, when I click on 'Manual Setup' for one of the Airports it can only access the setup of the Airport to which the laptop is connected (so if I'm in the same room as the Express and am connected to the Express I can get the setup for the Express but not the Extreme, and vice versa).

    Hi,
    I've got pretty much the same setup here and works fine.
    In Airport Utility, go to the Airport you're connected to and check the Airport>Access tab.
    In there I've got all the MAC addresses of the machines that can connect to it, that also includes the MAC address of the Airports. So the Airport Extreme has the Airport Express' MAC address, and the Express has the Extreme's address in the Access Control List.
    Maybe that solves it?
    Bert

  • Macbook pro connects to iphone through bluetooth but can't access the internet

    Hello, I have a macbook pro 10.6 and an iphone 3gs 4.3.3. I used to be able to connect the macbook to the iphone through bluetooth using personal hotspot and access the internet but one day it just stopped working. I have tried turning them off and on, disconnecting bluetooth etc but nothing has worked so far. I have tried connecting my iphone to my ipad2 through bluetooth, it works great. The iphone to the macbook through usb and it works great as well. I have tried connecting another iphone to my macbook through bluetooth and it doesn't work. The bluetooth on my macbook seems to be the problem
    Well, to be more precise, the macbook sees the iphones, connects to them through bluetooth, the blue bar appears on the iphones screens but the computer wont access the internet.
    Any idea?
    Thank you very much.

    SUCCESS!!!!!
    I visited my brother-in-law yesterday and attempted to connect with his secure network. By sheer luck, he is using the exact same model LinkSys router. My iPhone connected first time--so the iPhone was eliminated as a source of the problem.
    I didn't do a lot of troubleshooting at his house, but I did notice that his network was set for both dynamic DHCP and dynamic DNS. I know that either or both of Windstream (my ISP) and my broadband modem requires a pair of static DNS addresses.
    Sure enough, delving real deep into Windstream's support site, I discovered a LinkSys router DNS help page, specifying how to set static DNS addresses in LinkSys routers. I then accessed my router, enterd the known static addresses, saved the router settings, then rebooted the iPhone and connected to the network.
    SUCCESS!!!
    Thanks to Jane, who suggested it was an ISP issue, Jason, and all at Apple support. dumonj, I'll email you directly. Try this suggestion and see if it helps.

  • Problem with my company's web filter, Barracuda when I try to access the internet

    I'm having problems accessing the internet on my tour.  Ever since my company put me on their BlackBerry Enterprise Server it appears that when accessing certain web sites the Barracuda web filter comes on.  It's so frustrating... on top of it my company doesn't pay for my phone at all.  Therefore, I do use my BlackBerry for personal as well as business. 
    I spoke with the IT guy and he initially thought it was the Desktop Software I downloaded to my computer, but we have uninstalled it and re-booted my phone and it's still happening.  I called Verizon Wireless and they tell me that it's because I'm on the company's enterprise server and that I am tied to their internet service and that's why I'm getting the Barracuda access denied on certain sites that they have restricted.  I am incredibly frustrated and don't know what to do...  I want to stay on their server because of the push email and the synchronization  for all my contacts and calendar.  Any help is much appreciated...
    Thanks.
    TinaMarie

    mabbas wrote:
    The blackberries are designed to send everything through the corporate network, when using an Enterprise Server.
    Hi and Welcome to the Forums!
    Just to be sure that this is clear -- they are not "designed" as you state...rather, the BES admins can force all Internet traffic through BES (and thereby apply filters) or they can allow it to go direct through the carrier network. The IT Policy placed onto the device at BES activation is in control of how the traffic flows.
    Cheers!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Launching Microsoft Access from Internet Explorer to view a downloaded MDB file opens the wrong file (not a problem if I use Firefox)

    When clicking on a link (in Internet Explorer 9) to download an Access MDB file and then choosing to open the file directly in Microsoft Access (2007) instead of saving it, the file is copied to Temporary Internet Files but Microsoft Access tries to open
    a different file and displays an (Unrecognized database format) error.
    When I click on the option to open the file, the MDB file is copied to Temporary Internet Files\Content.IE5 but instead of that file, Access tries to open a different (incorrect) file located in Temporary Internet Files\Content.MSO (e.g. in the above error
    message, NativeView.do is an XML file containing an error message).
    I don't see this problem with Word, Excel or PowerPoint files. When opening a Word file (without saving) the Word file is copied to Content.IE5 but an identical .tmp file is created in Content.MSO which when opened in Microsoft Word displayed the required file
    correctly. The same happens for Excel files. PowerPoint appears to be handled a little differently (no .tmp file created in Content.MSO but the required file is still copied to Content.IE5) but the PPT file is still opened correctly in Microsoft PowerPoint.
    I think the Content-Type "application/msaccess" is fine because Internet Explorer does launch Microsoft Access. It just tries to open the wrong file (or so I think). However, it looks like the file type is not being determined. Here is what I noticed
    when trying to open different Microsoft Office files using Internet Explorer:
    The last one is the MDB file. As you can see, only for this type of file, the "Type" (Microsoft Office Access 2007?) is not displayed in this Open/Save dialog box.
    On Firefox, I don't see this problem. When I tried clicking on the link to the MDB file in Firefox, Microsoft Access was launched and the file was opened correctly. Is there something I can do so the MDB file is opened properly using IE? I can add/change headers
    in the HTTP response that writes this file to the output stream (on disk) if that helps.
    Thanks for your time!

    Sounds like a problem symptom to be discussed in either an IE forum or an Access forum, not here.  How did you come to post here?  ForumsRedesign.  That might be an on-topic issue for this forum.  <eg>
    Can you find your way to either of those other forums easily from here?  Another on-topic question for here I think.   ; )
    Robert Aldwinckle
    Oops, my bad. Thanks for letting me know! :)
    I've re-posted it here: http://social.technet.microsoft.com/Forums/ie/en-US/1a818501-296c-42fb-8abb-ba914629c962/launching-microsoft-access-from-internet-explorer-to-view-a-downloaded-mdb-file-opens-the-wrong-file?forum=ieitprocurrentver
    Hopefully that's the right place for this.
    Cheers!

  • Can other computers plug into a macpro to access the internet?

    a friend of mine has two macs, a mac pro and a macbook pro.
    he wants to access the internet on both computers, (wired DSL)
    if he uses his dlink router, the connection is much slower than if he plugs the internet directly into the macpro.
    is there a way his macbook pro can plug into the macpro, with its two ethernet jacks, so the portable can access the internet?
    we tried it, but it didn't work. Internet sharing was on in the sharing preferences.

    At my old workplace I had a G5 with two ethernet cards, a network switch, and a few other computers wired through it. I'm almost positive that I was able to share my connection in the manner that you described. I think that it didn't work right away for me, either, and I had to do some tinkering, but it worked.
    Part of the reason why it didn't work was because it was short-lived: our IT department was not happy about having multiple devices connecting through one ethernet jack, and using this method they could see that there were multiple, individual machines on the line (source ID for network requests was different, or some such thing).
    My solution - which would also fix your friend's problem - was to turn my G5 into a Squidproxy server. This basically causes your G5 to hand out the IP's to the systems connecting through it, and it forwards on all traffic to and from the computers behind it. As far as I know (based on the fact that the IT department was quiet after I set that up) it'll mask the computers behind it.
    Squidproxy is free, but setting it up can be a bit of a chore if you're not familiar with it. It may be an overkill solution, but it'll definitely get the job done.

Maybe you are looking for

  • Get rid of the libreadline issue without crashing everything

    Hi Guys, Last week I've made a simple package installation using pacman, and experimented the dark and unpleasant libreadline.so.5 issue... Searched in forum, and found this post. Thanks to arkham, I was able to solve this issue using Live CD. Howeve

  • Javax.sound

    Hi There.. i think i'm the only person in the world with this problem... i have dowloaded the latest version of Java for windows (j2sdk-1_4_1_02-windows-i586) but i can't find the javax.sound library... heaps of other javax libraries are there (secur

  • How do I print from a printer that does not support airprint?

    I have an ipad and would like to print photographs and e-mails from it via my Lexmark Pro901 wireless printer which does not seem to support Airprint,   Can anyone help please?

  • Connect Printer

    How do I connect my laptop to my Lexmark X4550 Printer?

  • Error code 0x8002006e burn issue

    Hi, I have read all the threads on this issue and no answer. Apparently this is happening a lot. I have burned one cd-r that worked on my new mac pro, (month old) and now I cannot burn anymore without the error code 0x8002006e unable to verify. I can