The client connection is not allowed on the internal edge of the Access Edge Server

We are trying to setup Lync 2013 Edge Server, we have a setup as described below
Real IPs for Lync Edge/WebConf/AV
NAT of real IPs through Firewall Juniper to FE IP
Topology with NAT (Firewall IP) IP enabled
Certificates for with SAN for sip.acme.com etc (Both certs are Client Server Auth Templates from Internal MS CA)(Trusted) on Edge
Route 192.215.0.0 255.255.255.0 gateway (=firewall internal ip address)
But when external user connects and we are tracing the connection we are getting below error and lync client is
not able to connect.
TL_INFO(TF_CONNECTION) [1]0AD8.0C30::09/07/2014-08:11:13.091.0000000f
(SIPStack,SIPAdminLog::WriteConnectionEvent:SIPAdminLog.cpp(454))[4150361027] $$begin_recordSeverity: information
Text: TLS negotiation started
Local-IP: 192.215.0.xxx:5061 (Edge IP)
Peer-IP: 192.215.0.xxx:1835 (Firewall IP)
Connection-ID: 0x1100
Transport: TLS
$$end_record
TL_ERROR(TF_CONNECTION) [0]0AD8.0638::09/07/2014-08:12:45.279.0000005d (SIPStack,SIPAdminLog::WriteConnectionEvent:SIPAdminLog.cpp(389))[4150360514] $$begin_record
Severity: error
Text: The client connection is not allowed on the internal edge of the Access Edge Server
Peer-IP: 192.xxx.0.xxx:1322 (firewall ip)
Transport: TLS
Result-Code: 0xc3e93d6b SIPPROXY_E_CONNECTION_INTERNAL_FROM_CLIENT
$$end_record

Hi pshetty,
Check the following blog to deploy your Edge Server:
http://jsilverdrake.blogspot.se/2012/04/publishing-lync-with-forefront-tmg-part_25.html
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
You need to create persistent static routes on the internal interface to all internal networks.
Regards,
Lisa Zheng
Lisa Zheng
TechNet Community Support

Similar Messages

I open a new webpage in a new tab. I then go to a link and the back button does not allow me to go back to the original webpage. Any suggestions?

I open a new webpage in a new tab. I then go to a link and the back button does not allow me to go back to the original webpage. Any suggestions?

I don't think you understood the question. I am having the exact same issue. I open a link in a new tab or window, for example: https://addons.mozilla.org/firefox/addon/backforedrop/
When the new tab opens, I click on "reviews" to open the link: https://addons.mozilla.org/en-US/firefox/addon/backforedrop/#reviews in the existing tab because I want to see the reviews for this feature. After I read the reviews, I want to go back to the main link, but the back button on my browser is greyed out, as though I was never even on the previous page. So my options are 1) Open every link I ever click on in a new tab or window, or 2) Hope the website is user friendly and attempt to navigate back to the previous page using links inserted on the current page.
You never realize how frustrating not having back button is until it happens.

I tried to send an email, but the address box is not allowing me to print anything,also the subject box same. What can I do?

Does anyone know what happened to the mail address box and body that it won't work? Send, draft works fine, the outlines of the address areas are now pale, not black. Thanks

I went to color sync and adjusted it, and email is back and working as before. The contrast is fine.

Making a REST webservice call. Error code: 401 Access to the requested resource is not allowed

Hi All,
I’m having a hard time figuring out how to make Rest WebService calls.
I tried executing this directly through browser and I get an error.
http:localhost:8080/rest/bean/atg/userprofiling/ProfileServices/loginUser?arg1=[email protected]&arg2=Password
13:18:20,613 ERROR [RestSecurityServlet] Error code: 401
Access to the requested resource is not allowed: /atg/userprofiling/ProfileServices
atg.rest.RestException: Access to the requested resource is not allowed: /atg/userprofiling/ProfileServices
at atg.rest.processor.RestSecurityProcessor.checkAccess(RestSecurityProcessor.java:546)
at atg.rest.processor.RestSecurityProcessor.handleGetRequest(RestSecurityProcessor.java:313)
at atg.rest.processor.RestSecurityProcessor.doRESTGet(RestSecurityProcessor.java:199)
at atg.rest.servlet.RestPipelineServlet.serviceRESTRequest(RestPipelineServlet.java:417)
at atg.rest.servlet.RestPipelineServlet.service(RestPipelineServlet.java:260)
at atg.servlet.pipeline.PipelineableServletImpl.passRequest(PipelineableServletImpl.java:157)
at atg.servlet.pipeline.PipelineableServletImpl.service(PipelineableServletImpl.java:320)
at atg.rest.servlet.RestPipelineServlet.service(RestPipelineServlet.java:264)
at atg.rest.servlet.HeadRestServlet.service(HeadRestServlet.java:130)
at atg.servlet.pipeline.PipelineableServletImpl.service(PipelineableServletImpl.java:267)
From the documentation I understand that I need to create a session, is the session only necessary to access secured components since this
particular method “ProfileServices.loginUser “ has been declared as not secure in restSecurityConfiguration.xml
Also, are there two different ways in which I can log in
1. Using RestSession.createSession providing the username and password.
2. Or using ProfileServices.loginUser or ProfileFormHandler
Can someone please clarify

If you are invoking the REST web-service from a Java client then you can create a RestSession object using the createSession method. But in your case you seem to be invoking it with a HTTP request which by default would be treated as a GET request by ATG's REST implementation. Therefore being a GET, it would try to fetch a property "loginUser" from /atg/userprofiling/ProfileServices component (based on your URL) which would always fail.
To invoke loginUser() method of ProfileServices with your passed argument you need to tell ATG's REST system to treat your incoming request not as GET but as a POST request which you can do using atg-rest-http-method control parameter in your request like this
http:localhost:8080/rest/bean/atg/userprofiling/ProfileServices/loginUser?arg1=[email protected]&arg2=Password&atg-rest-http-method=POST
It should work this way provided your restSecurityConfiguration.xml is proper.

I am trying to update itunes 10.6 and ipone 5.1. It trys to contact update server, and then I get a "The network connection could not be established" Help

I am trying to update Iphone - I get message There was a problem downloading the software for the iPhone "JS Iphone". The network connection could not be established

And you're both in the wrong forum. This forum is for Apple Remote Desktop, Apple's software for managing networked Macs. Try reading through the many threads on the issue in the iPhone and ITunes forums. You'll find suggestions for solving your problem there.
Regards.

Since the last update to iTunes 11.0.3 (42) the airplay connection is not working properly , keeping breaking up

since the last update to iTunes 11.0.3 (42) the airplay connection is not working properly , keeping breaking up, while the airplay works fine with my iPad and iPhone. Anyone has experienced the same? any fix available?

Hi Erdelestre,
Thanks for visiting Apple Support Communities!
See this article for some tips about troubleshooting AirPlay:
Troubleshooting AirPlay and AirPlay Mirroring
http://support.apple.com/kb/ts4215
Troubleshooting performance issues with AirPlay or AirPlay Mirroring
If you are experiencing intermittent playback or significant network lag with AirPlay or AirPlay Mirroring, it could be due to a weak Wi-Fi connection, interference, or the distance between the Wi-Fi router and your iOS device, Apple TV or AirPort Express. Try the following suggestions:
Ensure that other devices are not trying to stream to the same Apple TV at the same time.
Turn off Bluetooth on your iOS device by tapping Settings > General > Bluetooth.
Ensure that your Wi-Fi router is set up with the recommended settings for the best performance.
Certain external devices, such as microwave ovens and baby monitors, may interfere with a Wi-Fi network. Try moving or disabling these devices.
If possible, try to locate your Wi-Fi router in the same room as your Apple TV and iPhone/iPad.
If your wireless and wired networks are the same, try connecting your Apple TV to the router via Ethernet instead of Wi-Fi.
If the Wi-Fi router has an external antenna, check to see that is it connected properly and in good condition.
Use the Wi-Fi network troubleshooting guide to resolve interference and other issues.
Best,
Jeremy

I have 2 games Words with Friends and Cityville that receives a Pop-up message form iTunes... "Connect to iTunes to use Push Notifications" and will not allow me to exit out of the app or play. How can I get this message to STOP?

I have 2 games Words with Friends and Cityville that receives a Pop-up message form iTunes... "Connect to iTunes to use Push Notifications" and will not allow me to exit out of the app or play. How can I get this message to STOP?

Yes - I connected my phone to my computer / Itunes and went into the apps section, but from there I have no idea how to manage the push notifications. I even tryied going into itunes that is installed on my phone. I still cannot find anyplace to manage these popups. I have also gone into settings - notifiations - and tried turning all notifications for these apps all off but that didnt work either. Any guidance is MUCH appreciated - Im not sure where to go from here.

Encryption is required to connect to this server but the client library does not support encryption

Hi ,guys
I came cross a trouble when I configured connection encryption.
I met the following problem when I have configured connection encryption done.
Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library. [client: ip]
environment info:
SQL:SQL2008 \SQL2005\SQL2008R2
SERVER:WIN2003 \WIN2008R2
We use C# to develop asp.net webform app, so the provider I use should be SQL client.
client .NET Framework version:NET Framework 3.5
Pls tell me why I met this weird problem.
Thanks in advance.
Love SQL

Sure,here is the connetion string of java app.
jdbc
db.url=jdbc:jtds:sqlserver://60.x.x.x./TaskSiteInfo
db.username=xxx
db.pwd=xxx
Your initial post stated you were using SqlClient in an ASP.NET 3.5 app. I think this is an issue with the jTDS client based on the error message. Are you using the latest jTDS driver? If so, try posting this issue to
http://sourceforge.net/p/jtds/discussion/
Dan Guzman, SQL Server MVP, http://www.dbdelta.com

ORA-12518 TNSlistener could not hand off the client connection

I am using oracle 11g on windows sever 2008. when i am trying to connect application to database it gives the error ORA-12518 TNSlistener could not hand off the client connection. and everytime when i connect it gives the error.there is a need of either restart the database or increase the number of processes. many times i increased the number of processes. now the no. of processes is 500 and maximum utilization is 437 and current utilization is 435. how can i resolve the problem permanently.
thanks in advance....
Edited by: k.bhanja on Mar 21, 2012 10:53 PM

thanks kuljit,
In sqlnet.ora i am getting the following error..
Fatal NI connect error 12518, connecting to:
(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=WIN-2CS4P4UZMJL)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=orcl)(SERVER=DEDICATED)(CID=(PROGRAM=C:\app\Administrator\product\11.1.0\db_1\jdk\jre\bin\java.exe)(HOST=WIN-2CS4P4UZMJL)(USER=Administrator))))
VERSION INFORMATION:
TNS for 32-bit Windows: Version 11.1.0.6.0 - Production
Windows NT TCP/IP NT Protocol Adapter for 32-bit Windows: Version 11.1.0.6.0 - Production
Time: 16-MAR-2012 16:08:45
Tracing not turned on.
Tns error struct:
ns main err code: 12564
TNS-12564: TNS:connection refused
ns secondary err code: 0
nt main err code: 0
nt secondary err code: 0
nt OS err code: 0
and in listener log file....
21-MAR-2012 00:00:05 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=orcl)) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.15.1.26)(PORT=39001)) * establish * orcl * 12518
TNS-12518: TNS:listener could not hand off client connection
TNS-12560: TNS:protocol adapter error
TNS-00530: Protocol adapter error
32-bit Windows Error: 233: Unknown error
but if i increase the number of processes or restart the database, the problem does not occur.

Why is it that when i connect my ipad the laptop only detects the storage and does not allow me to send any files to it?

Why is it that when i connect my ipad the laptop only detects the storage and does not allow me to send any files to it?

The iTunes application is used to transfer content to the iPad.
See http://www.apple.com/itunes/download/

My iPhone 5 keeps on trying to connect the hotspot with wifi not connected. will not allow me to select hotspot at all

My iPhone 5 keeps on trying to connect the hotspot with wifi not connected. will not allow me to select hotspot at all. can anyone help am in Botswana an no apple store to help?

I have the same problem, it's better trade my iPhone, or the apple it's gonna fix at the next upgrade? Please, someone help me, I try everything.

I have set up our school ipads to be supervised by Apple Configurator and am using VPP to buy apps. I now find the supervised ipads do not allow the pupils to download photos or movies etc. Any suggestions would be great please.

I have set up our school ipads to be supervised by Apple Configurator and am using VPP to buy apps. I did this initially as our school internet connection was stopping us from being able to update the IOS and our County was offering a managed system, Lightspeed, which took control of every device in school which proved very expensive. I now find the supervised ipads do not allow the pupils to download photos or movies etc. As we frequently use the ipads as cameras this is causing us a problem. We have a school imac that I use to keep the devices updated with Apple Configurator (not connected to our network), and this doesn't seem to offer any solution to download them either. I was told there was a setting in Apple Configurator to allow other computers to download from supervised devices, but I can't see it anywhere. I am very new to this so any advice or help would be greatly appreciated please.

I assume you are wanting to take the photos and movies off the iPads?
Connect the iPad to a Apple computer. Open "Image Capture". Any photos or video can me imported to the desktop or other location on your computer.
I had this same problem last year and as we have no wifi I asked lots of people at Apple what I could do - no one provided this answer (a little unbelievable!). If you have wifi using something like dropbox would be an easier solution.
Hope this helps

Wife's Mac Book Pro locked up will not allow her to log on, it froze up on her so she did a hard shut down by holding power button until it shut down. Will power up but not allow her to log in on the log in screen. Any suggestions?

Wife's Mac Book Pro locked up. She shut it down by holding power button unitl it shut down, when she powers it up now it will not allow her to log in on the log in screen. Any suggestions?

Reinstalling Lion/Mountain Lion Without Erasing the Drive
Boot to the Recovery HD: Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the main menu. Repair the Hard Drive and Permissions as follows.
When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu.
Reinstall Lion/Mountain Lion: Select Reinstall Lion/Mountain Lion and click on the Continue button.
Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless.

Error: The system settings do not allow any changes

Hi experts !!,
I had installed SAP NetWeaver 2004s Sneak Preview-ABAP
I am able to create database table using tcode: SE11
but I get an error when I tried to create table entries
Error:
The system settings do not allow any changes
Message no M0421
Diagnosis
The system settings (SE06 and SCC4) are such that you cannot make any changes to this table in this client
Kindly help me to fix this issue !!
Thanks,
Prembabu R

Hi,
I had modified Changes and Transports for Client-Specific Objects
-> Automatic recording of changes (Option-selected)
Now I am able to add new entries to tables.
Thanks for providing valuable information...
~Prembabu

What determines the client connection memory size?

We are trying to scale up the number of connections on our db - (dedicated not shared) .. but quickly consume the box.
Its 11gr1 - Linux .. 500G of memory ..
The "only" parameter we have set is:
*.memory_target=216522555392 (~200G)
Processes set to 6000 - but are are only around 1800 at this point.
We are seeing (via top) client connections with a reserved memory of 25-30g (usually the dbwr type processes) and client connections showing 5-10G in size.
With clients taking this much memory, we start to see swapping on the box. In our dev/qa environment the clients are in the MB range .. of course they are not seeing real world traffic so I presume that memory requirements are growing as the app runs.
Can we set something to reduce the footprint of the client connections?
Thanks for any tips..
If we get one db bounce this year .. we want to be right .. cant guess here..
Daryl

DarylE. wrote:
We are trying to scale up the number of connections on our db - (dedicated not shared) .. but quickly consume the box.
Its 11gr1 - Linux .. 500G of memory ..
The "only" parameter we have set is:
*.memory_target=216522555392 (~200G)
Processes set to 6000 - but are are only around 1800 at this point.
We are seeing (via top) client connections with a reserved memory of 25-30g (usually the dbwr type processes) and client connections showing 5-10G in size.
With clients taking this much memory, we start to see swapping on the box. In our dev/qa environment the clients are in the MB range .. of course they are not seeing real world traffic so I presume that memory requirements are growing as the app runs.
Can we set something to reduce the footprint of the client connections?
Thanks for any tips..
If we get one db bounce this year .. we want to be right .. cant guess here..
Daryl
>Can we set something to reduce the footprint of the client connections?
no
Since *NIX maps SGA into every client's process, displayed RAM size is distorted.
If you simply SUM every reported client size, it will greatly exceed total RAM (in most cases)
The fact that any swap is used is in itself not a negative indicator.
run vmstat like below
all is OK when (si + so) is less than (bi + bo)
[oracle@localhost dbs]$ vmstat 10 6
procs -----------memory---------- ---swap-- -----io---- --system-- -----cpu------
r b   swpd   free   buff     cache     si   so    bi    bo   in   cs us sy id wa st
0 0     32 82684 20384 557096    0    0   120    32 1008 1057 3 7 88 1 0
0 0     32 82560 20408 557124    0    0     0    20 1031 1225 2 4 93 0 0
0 0     32 82560 20432 557116    0    0     0    16 1002 1183 2 6 92 0 0
0 0     32 79212 20456 557144    0    0     0    74 1007 1185 4 12 84 0 0
0 0     32 78592 20480 557148    0    0     0    21 999 998 2 5 92 0 0
0 0     32 78592 20504 557140    0    0     0    20 1002 929 2 7 91 0 0
[oracle@localhost dbs]$

The client connection is not allowed on the internal edge of the Access Edge Server

Similar Messages

Maybe you are looking for