True IP address for ARD remote client via IPObserver [newbie]

I have had success managing LAN clients via ARD, but now my situation is different.
I want to still be able to provide ARD support via a network address specific to a workstation from outside the LAN, and the IP address I have tried does not connect. I am deriving the address from the IP Observer utility that I had my client launch on their system. [it is not the obvious 192.168.1.xxx address from DHCP]. I have confirmed that the Sharing attributes are correct on the client system, although it might be a 2.2 version [running 3.1 admin]. Based on a test, I believe the IP Observer address is the internet IP location of the router [not the actual router LAN IP], not the client.
The IP address indicates that it is in the correct domain [Roadrunner, NYC], but the client-specific address is inaccurate. Is it because the client is setup through a DHCP router and switch? will they need a static IP? Can they somehow reveal their station-specific IP via an iChat connection log? should I try to address the client though a different port?
I am new to this extension of ARD, so bear with the obviousness of the query to some of you.
thx - steve

Hi, here is what you asked me for:
webvpn
enable inside
enable outside
csd image disk0:/securedesktop-asa-3.2.1.103-k9.pkg
svc image disk0:/anyconnect-win-2.2.0128-k9.pkg 3
svc enable
cache
max-object-size 5000
group-policy DfltGrpPolicy attributes
dns-server value X.X.X.X
dhcp-network-scope X.X.X.X
vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
default-domain value XXXXXX
intercept-dhcp 255.255.255.XXX enable
nac-settings value DfltGrpPolicy-nac-framework-create
webvpn
url-list value Lan_Applications
svc keepalive none
svc dpd-interval client none
svc dpd-interval gateway none
svc ask enable default webvpn
customization value DfltCustomization
tunnel-group DefaultRAGroup general-attributes
authentication-server-group (outside) LOCAL
authorization-server-group LOCAL
authorization-server-group (outside) LOCAL
dhcp-server XXX.XXX.XXX.XXX
tunnel-group DefaultWEBVPNGroup general-attributes
authentication-server-group (outside) LOCAL
authorization-server-group LOCAL
authorization-server-group (outside) LOCAL
dhcp-server XXX.XXX.XXX.XXX
authorization-required
Best Regards,
Jeyriku

Similar Messages

Unable to set the ip address for hosted network client after creating WIFI hotspot

Original Title: INTERNET CONNECTIVITY PROBLEM WITH MY LAPTOP WIFI HOTSPOT
HI all
I am able to use internet connection from my lap hotspot, when the internet source is Public or private wifi.
so I know the cmd window commands for hotspot and settings of client(sharing to hosted network client, assigning IP address etc.,)
but the problem I am facing is slight different
I am using my cdma wireless broadband datacard as my source internet connection(Reliance netconnect +)
when I try to create hotspot for this, as usual I am able to create the hotspot and able to share the internet to hostednework client.
but I am unable to set the ip address for hosted network client, if I try to set ip 192.169.137.1 and 255.255.255.0
as soon as I close the window, the ip address also disappears
when connect my android phone to that hotspot, it is able to connect but there is no internet connectivity.
when I check the hostednetwork client for packet transmission, both sent and received packet is happening., I mean transmitting
so what cause the failure in internet connectivity but success in hotspot connectivity?
check the screen shots...
can u help me..
its little complicated

Hi,
Please make sure the Ad hoc connection IP adress is at the same range with your local connection. In addition, how about recreate the ad hoc connection for test, please have a try.
If problem persists, please use Network troubleshooter in Action Center to fix this problem for test.
Roger Lu
TechNet Community Support

Managing remote clients via internet.

The question have maybe been asked before.
I have been speaking to Apple Support Sweden and UK and they give me different answers so now i would like to ask all the users of Apple Remote Desktop if what i would like to achieve with buying this software actually would works.
I have Clients all over the world, all mac users, and they are never at one place longer than 24h. They have no higher computer skills then getting online to check mail and all the rest they need to be able to use to manage their work life.
Would i be able to use ARD for accessing my client computers without having to ask them to contact the computer admin at the hotel or where ever they might be at that time and place to sort their port´s out.
To be able to store the users details for future use and just ask the client to if needed a "whatsmyip.com" and that would be all i would need to access them much like Skype finds its way trough any possible firewall without VPN tunnels and things. Just that Skype would not really be as professional and functional as ARD
Thank you all in advance.
Best regards

ARD would be awkward to use with clients that are always roaming. You'd constantly be dealing with IP address and router/port issues, something especially problematical with hotels where firewalls often block the necessary ports (and hotel admins generally will not alter their firewalls to accommodate such use). I would instead suggest a service such as LogMeIn. These services generally work much better with clients on the move.
Regards.

Static addressing for Cisco IPSEC client

Hey Guys,
Is there a way for Cisco client based users to use static addresses instead of receivinga a dhcp address? This will be setup on a Cisco 2801 router. We usually just do dhcp but this customer is requesting static address for each user.
Thanks
Jimmy

A scalable solution would be to configure a RADIUS server and provide the client their IP address via the frame-ip-address attribute. A hack could be to have a group defined on the EasyVPN server which is associated with an IP pool that has only one address available.

Invoking Powershell modules on remote clients via package/command line

Hello Everyone -
I have two modules(functions) that i've written and tested successfully locally in my environment that give me Uninstall and Repair functionality on whatever the string contains. Both .psm1's are delivered via a SCCM pkg that lands both into folders
in the Modules directory. My issue is I can't seem to invoke this in a deployment scenario...as i'd like to deliver the "Invoke-command" using SCCM's command line to simply say...
Invoke-Command -scriptblock { Do-This "<string>" }
The above command works fine locally when...(exePol is set to Bypass).
1.)Modules have respective folders living in WindowsPowershell\Modules directory named xxxx.psm1
2.)Import-Module -name <path\name of module>
3.)Verify Modules are loaded(moduleType is script)
But when fabricating the folders\files above with SCCM, and running the Invoke-Command(in many different ways remotely), i recieve the cmdlet, program doesn't exist and has no idea what i'm talking about. Folders\Files for .psm1's are present and do
show when running Get-Module -Listavailable locally on targeted clients.
Maybe this is related to the Import-Module command and the context i'm trying to delivery it in?
I've tried multiple scenario's of...
A.) Psexec that launches powershell, followed by the Import-Module -name <path\name of module>
B.) .Bat file that launches powershell with the same Import-Module syntax
C.) PS1 that includes the same Import-Module line.
D.) Just straight from the command line of the Pkg/Program.
Has anyone tried this? Is there a better method when trying to deliver invoke-command on a module/function to a client via SCCM?
TIA

[I see that the you are running the powershell.exe and then importing the module in the command line for the Program you created in SCCM, so just importing the module will do the repair action for you ??]
Not sure how else i would run a Import-Module without calling upon powershell.exe. The reason for using Import-Module first is it only creates the abilty of whatever the module(function in this case) on the client. So if i can get the remote
Import-Module to work, which would then allow me in the future to use an Invoke-Command -scriptblock { Do-This "string" } on the clients. In this case its both an Uninstall and Repair function with an assortment of switches and arguements that will aide me
in the future in managing our apps. For me to use the Modules, i would need to Invoke-Command as that is how the functions are built.
Okey so the module does get dumped to the end machine.
Suppose you have a test machine TEST01 where the Test.psm1 file (having Test-Function)is delivered through SCCM.
Then try this and tell if it works:
PS C:\> $session = New-PSSession -ComputerName TEST01
PS C:\> Invoke-Command -Session $session -ScriptBlock {Import-Module Test.psm1 }
PS C:\> Invoke-Command -Session $session -ScriptBlock {Test-Function #inside your Module}#Or Simply try below:
PS C:\> Invoke-Command -ComputerName TEST01 -ScriptBlock {Import-Modules Test.psm1;Test-Function #inside your Module}
I think what you are doing is below.....for the example am taking "webadministration" module:
PS C:\> Invoke-Command -ComputerName Server01 -ScriptBlock {Import-Module web*}
PS C:\> Invoke-Command -ComputerName Server01 -ScriptBlock {get-website}
The term 'get-website' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
+ CategoryInfo : ObjectNotFound: (get-website:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
+ PSComputerName : sdwuweb017
Point here is you need to import the module and work with it in an already opened session....If you specify a computername every time then PowerShell opens the Session does what you want it to do and tears down the session. To persist the importing of the
module it must be done in a session which we make using New-PSSession and then run the commands against that session.
I might have misunderstood the problem but this is what I have got so far.
Hope this helps
Knowledge is Power{Shell}.

Remediation for the remote clients

Hi Folks,
One of my main customer concerns is the patch/update process that NAC will force it on the remote clients to do the remediation (Bandwidth issue). The client does not want this update to happen from the HQ; instead it should happen from a cashed local server.
let me know if there a cost effective way to achieve this goal.

You can configure Auto Remediation for all requirement types except File Distribution and Local Check

How to get MAC Address for maintaning unique client id at server side?

Hi All,
Can somebody tell how can i get MAC id for maintaing Unique client id at server.
or is there any alternative way to do this?
Thanks in advance..
CK

Usually people just use cookies for that.

Viewing LDAP settings on remote clients via remote server

I would like to have a look at certain settings on client computers via a remote server. It is over a relatively slow connection, so I use ssh to get to the server then I ssh into an available client. For the most part I can find the config files, but I would like to view the settings in Directory Access (where the LDAP server is specified for authentication) and have as yet not been able to find where they're hiding. Any ideas?
Thanks,
Miles

Perfect! This is exactly what I was looking for. I knew it was in there somewhere.
Thanks,
Miles

AAA static IP address for RA VPN Client

Hi,
my vpn group and VPN POOL is locally created in Cisco VPN router but users are authenticated through ACS, AAA server via TACACS. Now I want to assign the static ip address to VPN Client. Everything is fine but due to the application problem I want to give them the static Ip address from the VPN Pool. I have greated one pool in AAA server and also configure the client in AAA to get the static ip address but unable to do this. Please help me out how to do this.
My router is configured for TACACS+. I have checked the user configuration in AAA server to get the static ip address but it is not working. Please help me out how to do this. I cant change Router to Radius but this is my main router which is configured for 160 sites through ISDN and these sites also configured for TACACS+.
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp client configuration group Aviation-VPN
key egntosc
pool aviation-pool
acl avi-tunnel
save-password
netmask 255.255.255.0
crypto isakmp profile vpnclient
   match identity group Aviation-VPN
   client authentication list default
   isakmp authorization list Aviation-authorization
   client configuration address respond
crypto ipsec transform-set aviset esp-3des esp-sha-hmac
crypto dynamic-map avi 10
set transform-set aviset
set isakmp-profile vpnclient
reverse-route

Since you're using ACS, I believe the way to do this is to
go into ACS, and select the username of the user that you want
to get the static IP. Under that user's setup, there is an option to
always assign the same IP. Just select that and enter the IP you
want them to get. - chris

How do I change the assigned site code on a REMOTE client via WMI (C#)?

Hi
I was wondering if it is possible to change the site code on a client remotely via WMI. I have found one or two links to this, eg
http://msdn.microsoft.com/en-us/library/jj874135.aspx
and
http://social.technet.microsoft.com/Forums/systemcenter/en-US/67b671bb-4819-4e7a-a4f6-6cb7ded17722/sccm-2007-change-assigned-site-code-on-clients?forum=configmgrgeneral
However none of these will allow me to change it remotely directly from my machine. I have written a tool which fixes many issues but having difficulty with this one. In the past I have even resorted to copying a script remotely to an affected machine then
setting a remote scheduled task which executes the script. This was effective but very dirty! I find it difficult to believe there is no way to do this directly but can't seem to find anything suggesting it is possible.
Before anyone replies with a 'what are you trying to achieve...' type answer, I have a similar situation to that of the guy in the second link but I would like something more instant.
Many thanks

psexec or winrm will allow you to do this.
Jason | http://blog.configmgrftw.com

RA with the same User for 6 Remote client

Hi Netpro
i have acs 5.2 with asa 5520 , i have the /29 subnet for RA , how can i allow 6 remote access client to use the same username like U1,
thanks
jamil

Hi Ibrahim,
Please add the following command to the specific group-policy:
group-policy your_group-policy attributes
vpn-simultaneous-logins 6
On ACS make sure you do not have any restrictions for the amount of simultaneous connections with the same username.
HTH.
Please rate any helpful posts

IP address of a remote client with JAX-RPC

Hi all.
I wrote a Web Service using JAX-RPC and I'd like to see the IP address of the machine requesting the methods exposed by the service.
Is there any way to do this?
Thanks
Fabio

I answare myself... let me know if this solution is good. tnx
Fabio
import javax.xml.rpc.server.*;
import javax.xml.rpc.handler.MessageContext;
import javax.servlet.http.HttpServletRequest;
public class ServiceImpl implements ServiceIF, ServiceLifecycle {
     public void init(Object context) {
          ServletEndpointContext ctx = (ServletEndpointContext)context;
     public void foo() {
          MessageContext msgCtx = ctx.getMessageContext();
          HttpServletRequest req = (HttpServletRequest)msgCtx.getProperty("com.sun.xml.rpc.server.http.HttpServletRequest");
          String remoteIPAddress = req.getRemoteAddr();
}

Invoking a BPEL Process via Java Remote Client

Hi everyone!
I want to invoke a BPEL process from my Java Application which is not running on the same Application-Server (not the same Java RE) as the BPEL processmanager does.
For Applications running on the same AS there is the IDeliveryService class to which you can send a XML-request in order to invoke a BPEL process.
Is the only way to invoke a BPEL Process from an external application to use a webservice client or is there a similar class for java remote clients?
For access to the users worklist I use
IWorkflowServiceClient wfClient = WorkflowServiceClientFactory.getWorkflowServiceClient(WorkflowServiceClientFactory.REMOTE_CLIENT);
it works fine an I thought there might be a similar way to invoke a bpel process via remote too.
If anyone knows if it's possible or not please tell me ;)
Thanks in advance
Markus

Hello,
Here is the code I use:
Properties props = new Properties();
Locator locator = null;
props.put("orabpel.platform", "ias_10g" );
props.put("java.naming.factory.initial","com.evermind.server.rmi.RMIInitialContextFactory" );
props.put("java.naming.provider.url","opmn:ormi://host:port/orabpel" );
props.put("java.naming.security.principal", "adminuser" );
props.put("java.naming.security.credentials", "mdp" );
String securityCredentials = "adminuser";
String selectedDomain = "default";
locator = new Locator(selectedDomain,securityCredentials,props);
IBPELProcessHandle procs[] = locator.listProcesses();
The error is:
Exception in thread "main" java.rmi.UnmarshalException: Error deserializing return-value: java.io.InvalidClassException: com.oracle.bpel.client.BPELProcessHandle; local class incompatible: stream classdesc serialVersionUID = 5429682712928177644, local class serialVersionUID = 8176841433835717563
at com.oracle.bpel.client.util.ExceptionUtils.handleServerException(ExceptionUtils.java:82)
at com.oracle.bpel.client.Locator.listProcesses(Locator.java:309)
Thanks for help.
Edited by: 857737 on 14 sept. 2012 10:00

Is there any way to configure domain name in place of IP address for "Peer VPN device"

Hi,
When I configure site to site vpn on asa it asks for the ip address for the remote vpn device and it works pretty fine if I confgure like this.
The problem is that the remote vpn device does not have static IP address, it changes on every reboot. I have configured Dymamic DNS for the interface but the problem is ASA does not take domain name as the "peer vpn device" address.
Is there any work around for this issue so that I don't need to configure vpn from scratch everytime the ip address of the remote device changes.
P.S. ASA vpn configuaration also does not allow me to change just the ip address of the remote device in the VPN configuration, I have to delete the current vpn and confgure a new one from the sratch everytime the ip address changes.
Thanks

Hello Mahendra,
yes you can set a hostname in the 'crypto map set peer' command insetad of IP address, however, the ASA will resolve that name only once it is applied, hence, it will take the IP that name currently holds, and if it changes, it will not update it.
the easy solution for your case is to use static-to-dynamic L2L configuration. on your ASA, configure a dynamic crypto map, assign it to the static crypto map you have, and then add the pre-shared key to the Default L2L tunnel-group.
an example is given below:
crypto dynamic-map dyn_map set transform-set
crypto map VPN ipsec-isakmp dynamic dyn_map
tunnel-group DefaultL2LGroup ipsec-attributes
pre-shared-key
this way, you must initiate the tunnel from behind the remote device (not your ASA where the dynamic crypto map is configured) and it should work fine.
the document below explains that in details:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807ea936.shtml
hope that help
Othman

Trouble accessing a remote machine via ARD over a VPN

Hi There,
I'm having trouble accessing a remote Workstation via ARD over a VPN.
The VPN is set up and I can:
- Control our 10.6 server via ARD remotely
- Mount volums from the 10.6 server remotely
- Access another server (we run an accounting server) remotely
But we can't access a Workstation using ARD.
I can connect to the Workstation when in the office so assume it's configured for access - I guess I suspect the issue lies with the Firewall on the 10.6 server and/or the Netgear FSV366G Firewall.
The VPN is setup on the 10.6 server so figure it's something to do with Snow Leopard server?
I'm just not sure how to narrow things down and fix the issue - although I setup the server I'm not super Unix savvy.
Any help or pointers in the right direction would be much appreciated.
Cheers
Ben

I can't say for certain what is going wrong in your case but I can confirm it is possible to do an ARD connection i.e. Screen Sharing to a remote user connected via a VPN. The way we do this is to get the user to connect to the VPN server (a Mac OS X Server), then on the Mac OS X Server in Server Admin see what IP address they have been allocated by the VPN server, then tell ARD Admin to connect to that IP address.
This works fine for me.
The IP address will be a 'local' to the ARD and VPN machines IP address it would not be the remote public or private IP addresses.

True IP address for ARD remote client via IPObserver [newbie]

Similar Messages

Maybe you are looking for