Vpn from 40 Server to Main One

I need to build this scenarios:
40 slave servers with win2003 need to connect to main one(is a dc) with data encryption, the main one using the ipsec vpn to start query to the 40 servers(only when it needs outside data).
Actualy i have in production only one server, using cisco vpn client to connect to a pix 520. But i found some problem:
1- the ip of the slave server is dynamic, assigned by the pix(take by the vpn pool group)
2-vpn client disconnession, due to inactivity, loss of wan link.... i try to solve this issues with a script, but in a future of 40th servers is a weak solution....
Any suggestion for a best managment/effort of the 40 vpn ? one pix for server with a lan-to-lan vpn? a vpn concentrator for static ip assignment? a vpn server for microsoft l2tp/ipsec?
Ty in advance.

Go through this Cisco PIX 500 Series Security Appliances Configuration Examples and TechNotes. (Section Remote Access VPN)
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html
It has similar setup which one you have.

Similar Messages

  • Move data from old server to new one.

    Hi.
    As of now we have been using LCES 8.0 on old server. This old one had Oracle, WebSphere and LCES 8.0. Now we have a plan to establish new 3 servers. This mean we can establish web server, application server and Oracle server and will dispose of the old server. I want to know what data must be moved to new server except for web server one to take over the old server's environment. Oracle export data that LCES user on oracle created is necessary Is it the enough? If no, could you tell me the information about the data?
    Best Regards.

    Today I checked the above condition.
    The nessary files are Database and LCES temporary folder where I set on installation.
    Best Regards.

  • VPN - why four IP's for one computer?

    So today I Apple support was gracious enough to help get VPN services on my Mac Server working properly, or so we thought. Testing it on the LAN worked. Connecting VPN from the server's WAN IP worked too from within the office LAN. Now I'm home and trying to connect with the same settings and it won't work. I log on to the server with ARD so I can watch the VPN service log and can see that it is trying to establish a connection...actually it's trying to establish five connections:
    Tue Aug 24 21:11:45 2010 : Directory Services Authentication plugin initialized
    Tue Aug 24 21:11:45 2010 : Directory Services Authorization plugin initialized
    Tue Aug 24 21:11:45 2010 : L2TP incoming call in progress from 'XX.XX.XX.137'...
    Tue Aug 24 21:11:45 2010 : L2TP received SCCRQ
    Tue Aug 24 21:11:45 2010 : L2TP sent SCCRP
    2010-08-24 21:11:45 CDT Incoming call... Address given to client = 192.168.50.207
    Tue Aug 24 21:11:45 2010 : Directory Services Authentication plugin initialized
    Tue Aug 24 21:11:45 2010 : Directory Services Authorization plugin initialized
    Tue Aug 24 21:11:45 2010 : L2TP incoming call in progress from 'XX.XX.XX.137'...
    Tue Aug 24 21:11:45 2010 : L2TP received SCCRQ
    Tue Aug 24 21:11:45 2010 : L2TP sent SCCRP
    2010-08-24 21:11:47 CDT Incoming call... Address given to client = 192.168.50.208
    Tue Aug 24 21:11:47 2010 : Directory Services Authentication plugin initialized
    Tue Aug 24 21:11:47 2010 : Directory Services Authorization plugin initialized
    Tue Aug 24 21:11:47 2010 : L2TP incoming call in progress from 'XX.XX.XX.137'...
    Tue Aug 24 21:11:47 2010 : L2TP received SCCRQ
    Tue Aug 24 21:11:47 2010 : L2TP sent SCCRP
    2010-08-24 21:11:51 CDT Incoming call... Address given to client = 192.168.50.209
    Tue Aug 24 21:11:51 2010 : Directory Services Authentication plugin initialized
    Tue Aug 24 21:11:51 2010 : Directory Services Authorization plugin initialized
    Tue Aug 24 21:11:51 2010 : L2TP incoming call in progress from 'XX.XX.X.137'...
    Tue Aug 24 21:11:51 2010 : L2TP received SCCRQ
    Tue Aug 24 21:11:51 2010 : L2TP sent SCCRP
    2010-08-24 21:11:59 CDT Incoming call... Address given to client = 192.168.50.210
    Tue Aug 24 21:11:59 2010 : Directory Services Authentication plugin initialized
    Tue Aug 24 21:11:59 2010 : Directory Services Authorization plugin initialized
    Tue Aug 24 21:11:59 2010 : L2TP incoming call in progress from 'XX.XX.XX.137'...
    Tue Aug 24 21:11:59 2010 : L2TP received SCCRQ
    Tue Aug 24 21:11:59 2010 : L2TP sent SCCRP
    When the connection fails, the log shows five addresses hanging up:
    2010-08-24 21:12:05 CDT --> Client with address = 192.168.50.206 has hungup
    2010-08-24 21:12:05 CDT --> Client with address = 192.168.50.207 has hungup
    2010-08-24 21:12:07 CDT --> Client with address = 192.168.50.208 has hungup
    2010-08-24 21:12:11 CDT --> Client with address = 192.168.50.209 has hungup
    2010-08-24 21:12:19 CDT --> Client with address = 192.168.50.210 has hungup
    But I'm only one computer, and nobody at work even knows about the VPN service yet. I can connect to the server via FTP, SSH, AFP and ARD....My home service is merely a Time Capsule wifi/router attached to a Comcast cable modem.
    Any ideas?
    Thanks.
    Message was edited by: AaronGM
    Message was edited by: AaronGM

    Quite simply - you're misinterpreting what's happening.
    It seems clear that the client is attempting to connect 21:11:45 and the VPN server allocates the IP address 192.168.50.207 for this connection.
    However, the client doesn't get this response and thinks the connection failed, so it attempts another connection at 21:11:47. For this connection the server allocates the address 192.168.50.208, but that also doesn't get back to the client (or the client rejects it), so it tries again at 21:11:51. This connection also fails and the client tries again at 21:11:59, after which it gives up and doesn't bother trying any more.
    The various 'hangup's you see are actually timeouts - if you notice they're all exactly 20 seconds after the corresponding connection was attempted, so this is just the server's way of cleaning up the dead connections.
    Your focus needs to be on why the client isn't getting the connection responses. This could be a firewall issue blocking the relevant traffic, or it might be a conflicting address in the client's network (you don't use 192.168.50.x at home, do you?)
    A tcpdump on the client system would be my next step - see whether those responses are getting to the client or not.

  • File from application server-- Email ?

    Hi,
    I need to pickup a file from application server and Email the same to the intended receipents through ABAP program
    For that i had used the following code:
    REPORT  ZEMAIL_APP_SER_FAIL.
    DATA :is_doc_chng        TYPE sodocchgi1,
          it_objtxt          TYPE STANDARD TABLE OF solisti1,
          is_objtxt          TYPE solisti1,
          it_objpack         TYPE STANDARD TABLE OF sopcklsti1,
          is_objpack         TYPE sopcklsti1,
          it_objbin          TYPE STANDARD TABLE OF solisti1,
          is_objbin          TYPE solisti1,
          it_reclist         TYPE STANDARD TABLE OF somlreci1,
          is_reclist         TYPE somlreci1,
          w_lines_tx         TYPE i.
    ** Create Message Body
    **   Title and Description
    *is_doc_chng-obj_name  = 'MAIL'.
    is_doc_chng-obj_descr = 'Auto genareted Mail from Application server'.
    ** main text
    is_objtxt-line = 'This is an automatically generated mail. Please do not reply  to it.'(028).
    APPEND is_objtxt TO it_objtxt.
    is_objtxt-line = space.
    APPEND is_objtxt TO it_objtxt.
    *   write packing list (main)
    DESCRIBE TABLE it_objtxt LINES w_lines_tx.
    READ     TABLE it_objtxt INTO is_objtxt INDEX w_lines_tx.
    is_doc_chng-doc_size = ( w_lines_tx - 1 ) * 255 + STRLEN( is_objtxt ).
    CLEAR is_objpack-transf_bin.
    is_objpack-head_start = 1.
    is_objpack-head_num   = 0.
    is_objpack-body_start = 1.
    is_objpack-body_num   = w_lines_tx.
    is_objpack-doc_type   = 'CVS'.
    is_objpack-OBJ_NAME   = 'GIND_EXP'.
    is_objpack-Obj_langu  = 'E'.
    APPEND is_objpack TO it_objpack.
    is_reclist-receiver = 'XXX'@'YYY'.COM'.
    is_reclist-rec_type = 'A'.
    Break-point.
    *is_reclist-REC_ID   =  'XXX@YYY'.COM'.
    APPEND is_reclist TO it_reclist.
    CLEAR is_reclist.
    CALL FUNCTION 'SO_NEW_DOCUMENT_ATT_SEND_API1'
    EXPORTING
       document_data              = is_doc_chng
       put_in_outbox              = 'X'
       commit_work                = 'X'
    TABLES
       packing_list               = it_objpack
       contents_txt               = it_objtxt
       receivers                  = it_reclist
    EXCEPTIONS
       too_many_receivers         = 1
       document_not_sent          = 2
       document_type_not_exist    = 3
       operation_no_authorization = 4
       parameter_error            = 5
       x_error                    = 6
       enqueue_error              = 7
       OTHERS                     = 8.
    IF sy-subrc NE 0.
    MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
             WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
    ENDIF.
    when i execute this program:
    I get the following error msg:
    Activation setting not yet maintained
    May i know what is the problem?

    If you are sending an email, the receiver type should be U (internet mail address type). From your code it appears that you have input it as 'A'. I am not sure if the error message is related to this. Have you checked in transaction SOST, whether an email has been triggered from your program? At what point of execution is this error message triggered?

  • How to delete a file from Appliction Server.

    Hi Gurus,
    I want to delete a file from application server .
    can any one tell me the FM/BAPI.
    Plz Reply me ASAP.
    Thanks in Advance.

    BAPI_DOCUMENT_DELETE ?
    GUI_DELETE_FILE ?
    maybe just go to SE37, enter DELETE, and click on the document icon to find from repository system.
    Regards,
    Vincent

  • How to delete a file from application server?

    Hi gurus,
    i want delete a file from application server . can any one tell me the BAPI/Fm .
    thanks in advance

    See the replies of the thread;
    How to delete  File from the Application Server,ABAP
    But i can smell something fishy in both  The specified item was not found. and The specified item was not found. style of posting questions. Also both of you have similar questions in your profile....
    Hmmm, Mods have to take care of the Rest...
    Regards
    Karthik D

  • Want to delete mails from Thunderbird but not from the server?

    Hi,
    Please tell me how to configure the settings of Thunderbird so that if i delete any mail from Thunderbird that mail would be delete only from Thunderbird not from server. I'm using IMAP configuration for all my mail accounts and I'm using Thunderbird in my laptop and tablet both.
    Currently i'm using Thunderbird 24.4.0 and i just want to delete my useless mails from Thunderbird but not from the server without using pop-3 settings.
    Actually the reason for this Question arises because whenever i use to uninstall and reinstatement Thunderbird, i use to take "profiles" as a back up and its size is increasing day by day that is making a big issue to me as i cant take a back up of such a big size file.

    Imap mail accounts keep the emails on the server and you see a remote view of those emails and folders.
    When you subscribe to see a folder, the headers are downloaded, when you select an email to read, the entire folder is downloaded to a temp cache facilitating quicker access. If you synchronize folders, then a copy of that folder is downloaded to an mbox file in your profile, so that you have a copy of the server folder. When you make any changes to a synchronized folder, read an email, delete or move etc, then Thunderbird will resynchronize with the server to update the server. A synchronized folder allows you to work in 'offline' mode and this is the best time to perform a backup as you know there is a temporary stop on synchronizing as you are offline. They will resynchronize when you go back into 'online' mode.
    So, with IMAP mail accounts, the folders you see in Thunderbird are the same folders on the webmail server. If you make any changes via Thunderbird or webmail then you are changing the same folder. You cannot delete an email without deleting it from the server, they are one and the same.
    What you can do is move/copy an email into Local Folders and delete the one on the server. The Local Folders emails are kept in your Profile on your computer, these folders/emails are not on the server, unless you chose to keep a copy of them on the server.
    Pop mail accounts cannot see the folders on the server. They only access the server Inbox folder and download emails not previously downloaded to the mail account Inbox in Thunderbird. These emails are kept on your computer in your profile folder. You can select to keep a copy on the server or not. You can choose to delete emails off your computer and off the server or not.
    If the mail account is gmail , have you subscribed or even synchronized to see the 'All Mail' folder ? Gmail's all Mail folder is their Archive folder, it keeps a copy of all of your non-deleted emails. So, you do not need to subscribe to see this folder as it only shows you what you can already see in other folders. It doubles the disc space.
    Please read section on 'All Mail' at this link.
    * http://kb.mozillazine.org/Using_Gmail_with_Thunderbird_and_Mozilla_Suite
    You do not have to download/synchronize the entire folder. You could select to only synchronize the most recent xx days of emails.
    see info here:
    * https://support.mozilla.org/en-US/kb/imap-synchronization#w_configuring-synchronization-and-disk-space-usage

  • How do I import email messages from another server?

    Heya,
    So I can't figure out how to import mail messages from another server into this one? I had [email protected] pointing to the old one, when I repointed it obviously all my email "disappeared" because there is none on the new server. So how do I move it from the old server to the new one? Usually I'd just drag and drop the email message files over FTP but SLS doesn't seem to give me permission to do that on this one.
    Thanks!

    Search for discussions of the imapsync tool.

  • Is it possible to create a new calendar that is SEPARATE from the main one?

    I would like to create a separate calendar that has been adapted from my Main Calendar.  I do not want all the details from the main one to show up on this newly created one.  Is there a way to just Copy and then start Deleting events?  When I try to do that it deletes from the Main Calendar (and I do not want that to happen).

    Hi,
    I would like to give you a workaround for your problem.
    If you have BO Server installed on your machine then do the following
    -> Go to 'Central Configuration Mangager(CCM)'
    -> Right Click on 'Server Intelligence Agent(SIA)' and click 'STOP' then
    -> Double click on 'Server Intelligence Agent(SIA)'
    -> Go to 'Configuration' Tab
    -> Click 'SPECIFY' on 'CMS System Database Configuration' button then
    -> Select any one of the 3 options(depending on ur requirement) and connect to ur Database (Firebird) by giving the credentials of ur database.
    -> After doing all the necessary things Restart the SIA by clicking the buttion START on CCM and now check if u r getting Firebird database while creating a new connection.
    This is just a workaround. I hope this would b helpful to you. Please try this and see if its useful to you.
    Thanks.

  • VPN conversion (from OSX Server 10.2)

    I am trying to implement VPN in 10.4. However, we had used the workaround in 10.2 to set up VPN (using PPTP), this involved editing /etc/hostconfig (to include VPN SERVER=-YES-,VPN_ARGS=" ",IPFORWARDING=-YES-) and setting up valid IP numbers in /etc/ppp/pptp_address. Finally, you "created" the file /etc/ppp/chap-secrets which stored the VPN usernames, passwords, server address, etc.
    I am trying to use the VPN features in 10.4, but they don't seem to work. I've taken out the added edits in /etc/hostconfig, but no luck. I can't even find the pptp_addresses or the chap-secrets files! But, that version of VPN still works! Anybody have any good advice?
    Ray

    So when you are outside your network, and try to ping your address "mydomain.com", does it actually resolve to your domain?
    At your router, do you have the VPN ports forwarded to your server's internal IP address?
    On the server, you need to use server admin to define users (or groups of users) and grant them VPN priveledges.  Then use one of these users to attempt to login.  For me, I've consistently used their unix shortname as the userid when logging in, and had no troubles.
    The VPN config asks what IP address range to assign to the clients.  From what I've read, you want to use a range that is distinctively different from your default internal IP address range.  Otherwise, some things won't work.  For example, if your internal network IP addresses are in the range 192.168.1.xxx, you'd configure the VPN options to assign VPN clients addresses in the range 192.168.2.xxx, so that they are differentiated.

  • I want my "From" address to default to a specific one. I have deleted the outgoing mail server for the one I don't want to use but it still comes up write

    Since Comcast will no longer allow me to "send" from my AOL Address I need to change my "from:" address on every e-mail I send. I thought I could make my Comcast outgoing server the default one and that would take care of it - it didn't. Then I thought I could just delete my AOL outgoing server and Thunderbird would then have to use my Comast Outgoing Server - it doesn't. I can continue to try and remember to change the
    FROM with the drop down list but it would sure be nice if I could save this aging brain of mine and make the software default for me.

    Why not just add an AOL server to Tools/Account Settings/Outgoing Server (SMTP) and then have that server selected in Tools/Account Settings/<i>aolaccount</i> in the Outgoing Server (SMTP) dropdown in the right pane? Use these settings: smtp.aol.com on port 465, SSL/TLS security, Normal password authentication, User name = your screen name.

  • How do i transfur songs from old computer to new one and make new computer the "home" the main computer please on ipod touch

    how do i transfur itunes from one computer to another and use new computer only as main one

    - Transfer iTunes purchases by:
    iTunes Store: Transferring purchases from your iPhone, iPad, or iPod to a computer
    - Transfer other music by using a third-party program like one of those discussed here:
    Copy music from Ipod to new computer...: Apple Support Communities
    - Connct the iPod to the computer and make a backup by right clicking on the iPod under Devices in iTunes and then clicking on Backup
    - Restore the iPod from that backup.

  • Transfer data from two oracle version to one sql server 2005

    Hi,
    I have two database servers on different machines. They are
    1) Oracle 8.1.7.4
    2) Oracle 7.3.1.4
    I have to create agents which can transfer tables from these two databases to one machine having sql server 2005 database.
    Please tell me what are the options. What drivers i need to install on machine having sql server 2005 so that i can transfer data from both oracle versions.
    Thanks
    Rajneesh.

    Your Oracle databases are so old you might want to look around and see if you can find dinosaur bones near by.
    Given the differences in data types between Oracle and SQL Server I'd suggest you start off by dumping the data into delimited ASCII files and then loading it using whichever SQL Server tool you wish.

  • Can i buy my own siri proxy server for my own use ? if yes from where can i buy one ? can i buy one from apple ?

    can i buy my own siri server proxy for my own use ?? if yes from where can i buy one and can i buy it from apple ? please help me quick and thanks

    stevejobsfan0123 wrote:
    You can't buy anything with points, but you do get additional privileges here in the communities.
    TripleXrAin wrote:
    buy things like what? and is it available in all countries ?
    You can't buy anything. Points are available in all countries, but again you cannot buy anything.
    TripleXrAin wrote:
    starts at 200 $ in U.S in my country it starts from 700 $
    You said you would pay any price for Siri. You want Siri, it's $700.

  • I have deleted one query from production server

    some one have deleted one query from production server. i would like to know who has deleted that query.
    pls let me ASAP.
    regards
    raja

    Hi,
    You can get the time stamp( when it was deleted) from table RSRDELREPORTS. Based on that time check with basis guys to get the more info.
    regards,
    raju

Maybe you are looking for

  • How to access query name in MSAccess Database?

    <p> I am using MsAccess as Database.The driver is not supporting some of the features, then how can I retrieve information such as getting the query name, if any way pls do help. Thanx. </p>

  • You do not have security rights to perform this operation exception occurred in CreateComputerVariable method

    I am getting an exception near computerSettings.Put();Its throwing an exception as You do not have security rights to perform this operation..Can i know exactly when does this error occur.. Details of Error: ConfigMgr Error Object: instance of SMS_Ex

  • Disk Utility "frozen" trying to format external drive

    some help please... I've got a 120gb external USB/NDAS drive that was previously formatted in NFTS on a Windows XP machine. Using Disk Utility on my new MacBook, I attempted to erase it and reformat it using the "MS-DOS" option in Disk Utility (so I

  • Urgent: USER exit for W2 Box 13 of Tax reporter 4.7

    Hi,     I am working on tax reporter version 4.7 and while printing the W2 forms saw that the Box 13 (selection of Statutory employee or Retirment plan or third party sick pay ) is not ticked. I worked in one of the clients on ECC 6.0 last year whom

  • CS5 Multiple Pictures

    OK...this is probably a pretty simple thing that I can't figure out.  If I have multiple pictures open in CS5 what is an easy way to get to my other images that are open? I believe my CS4 had tabs at the top.  The only way I can figure how is to go t