Allow a user to implement a different network

Similar Questions

• Allow VPN users access a VLAN different

  I have an ASA 5505.  I have configured remote access VPN so that users can connect to the VPN and access my main VIRTUAL local network (inside).  I want to set so that when a user s in VPN, they are permitted access only to the CCV vlan (Vlan 2) as seen in my configuration.  Please note that there is also a VPN LAN LAN 2, which has been set up as well.

  What Miss me?

  !
  interface Ethernet0/0
  switchport access vlan 4
  !
  interface Ethernet0/1
  !
  interface Ethernet0/2
  !
  interface Ethernet0/3
  !
  interface Ethernet0/4
  !
  interface Ethernet0/5
  !
  interface Ethernet0/6
  switchport access vlan 2
  !
  interface Ethernet0/7
  switchport access vlan 2
  !
  interface Vlan1
  nameif inside
  security-level 100
  IP 10.240.0.1 255.255.0.0
  !
  interface Vlan2
  prior to interface Vlan1
  nameif HVAC
  security-level 100
  IP address 172.16.128.1 255.255.255.0
  !
  interface Vlan4
  nameif outside
  security-level 0
  IP address 12.x.x.x 255.255.255.0
  !
  passive FTP mode
  IP 10.240.0.0 allow Access - list extended CDEO 255.255.0.0 10.0.0.0 255.0.0.0
  IP 10.240.0.0 allow Access - list extended sheep 255.255.0.0 10.0.0.0 255.0.0.0
  IP 10.240.0.0 allow Access - list extended sheep 255.255.0.0 172.16.129.0 255.255
  . 255.0
  IP 10.102.229.0 allow Access - list extended sheep 255.255.255.0 172.16.129.0 255
  . 255.255.0
  IP 172.16.129.0 allow Access - list extended sheep 255.255.255.0 10.102.229.0 255
  . 255.255.0
  access-list sheep extended ip 172.16.128.0 allow 255.255.255.0 172.16.129.0 255
  . 255.255.0
  IP 172.16.129.0 allow Access - list extended sheep 255.255.255.0 172.16.128.0 255
  . 255.255.0
  list of inbound icmp permitted access extended throughout entire echo response
  list of extended inbound icmp permitted access any source-quench any
  list of extended all inbound icmp permitted access all inaccessible
  access list entering permit icmp any once extended beyond
  coming out to the one permitted all ip extended access list
  standard vpn access list allows 10.240.0.0 255.255.0.0
  standard vpn access list allows 10.102.229.0 255.255.255.0
  list of access allowed standard vpn 172.16.128.0 255.255.255.0
  pager lines 24
  asdm of logging of information
  Within 1500 MTU
  Outside 1500 MTU
  MTU 1500 HVAC
  IP local pool 172.16.129.1 - 172.16.129.5 mask 255.255.255.0 shhfvpnpool
  ICMP unreachable rate-limit 1 burst-size 1
  don't allow no asdm history
  ARP timeout 14400
  Global 1 interface (outside)
  NAT (inside) 0 access-list sheep
  NAT (inside) 1 0.0.0.0 0.0.0.0
  Access-group out on the interface inside
  Access-group interface incoming outside
  Route outside 0.0.0.0 0.0.0.0 12.x.x.x 1
  dynamic-access-policy-registration DfltAccessPolicy
  the ssh LOCAL console AAA authentication
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set esp - esp-sha-hmac hand
  Crypto ipsec transform-set esp - esp-md5-hmac RIGHT
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  Crypto-map dynamic dynmap 10 transform-set RIGHT
  life together - the association of security crypto dynamic-map dynmap 10 28800 seconds
  Crypto-map dynamic dynmap 10 kilobytes of life together - the association of safety 4608000
  Crypto-map dynamic dynmap 10 the value reverse-road
  CDEOVPN 35 crypto card matches the address CDEO
  CDEOVPN 35 crypto map set peer 64.x.x.x
  card crypto CDEOVPN 35 the transform-set hand value
  map CDEOVPN 100-isakmp ipsec crypto dynamic dynmap
  CDEOVPN interface card crypto outside
  crypto isakmp identity address
  crypto ISAKMP allow outside
  crypto ISAKMP policy 20
  preshared authentication
  the Encryption
  sha hash
  Group 1
  life 86400
  crypto ISAKMP policy 30
  preshared authentication
  the Encryption
  md5 hash
  Group 2
  life 86400

  Console timeout 0
  management-access inside

  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  attributes of Group Policy DfltGrpPolicy
  VPN-idle-timeout no
  internal group shhf strategy
  attributes of shhf group policy
  VPN-idle-timeout 30
  VPN-session-timeout 1440
  VPN-filter no
  Protocol-tunnel-VPN IPSec
  Split-tunnel-policy tunnelspecified
  Split-tunnel-network-list value vpn

  tunnel-group 64.x.x.x type ipsec-l2l
  64.x.x.x group tunnel ipsec-attributes
  pre-shared key *.
  tunnel-group shhf type remote access
  tunnel-group shhf General attributes
  address shhfvpnpool pool
  strategy-group-by default shhf
  shhf group tunnel ipsec-attributes
  pre-shared key *.
  tunnel-group vpnclient type remote access
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the rsh
  inspect the rtsp
  inspect esmtp
  inspect sqlnet
  inspect the skinny
  inspect sunrpc
  inspect xdmcp
  inspect the sip
  inspect the netbios
  inspect the tftp
  Review the ip options
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  Cryptochecksum:1cbd55e987f9b41cd2ebcb320fa2e3b2
  : end

  This route to be applied on the switch, if your port eth0/7 on SAA is connected to a switch of later3.

  "Route ip 172.16.129.0 255.255.255.0 172.16.128.1.

  So, don't worry on this route, if you can not apply on the SAA.

  So are you saying that a PC is directly connected to eth0/7 on the SAA.

  What is the IP address, mask and gateway address on the PC connected on eth0/7?

  The trace package seems good.

• Is it possible to implement two different 'profiles' or 'locations' to my network settings?

  De : RevMDR

  I have a wireless home network that automatically assigns the IP address and the info for my new laptop (Vista).  At work, I have to manually enter the IP address and the following info to get a Wi - Fi connection.

  Is there a way to Vista to implement two different 'profiles' or 'locations' I can easily go to change my IP settings, so I don't have to go to network connections and change them whenever I passes between the two places?

  If Vista is unable to do this, is there a program I can buy/download that will do for me?

  Thank you!

  I have not tested on the wireless, but I do work on the connected.

  This how to can help, ipconfig

  How to set up multiple addresses on NIC IP how to configure two IP addresses on a computer

  How to use MS DHCP in order to reserve an IP address on MAC, how to use the TCP/IP protocol without

  Installation of a NIC...

  www.howtonetworking.com/Networking/ipconfig.htm--

  Bob Lee, MS - MVP, MCSE & CNE

  Networking, Internet, routing, VPN Troubleshooting

  http://www.ChicagoTech.NET

  How to setup Windows, network, VPN & remote access on

  http://www.HowToNetworking.com

  De :  Robert L. (MS - MVP)

  Another response of the community of Windows Vista discussion groups

• Is there a way to create a plan of action in vCAC and allow a user to select a network?

  Hello

  We have 30 different VLAN used for various tasks within our Organization. I was wondering if there is a way to create a unique model vCAC and alow the user to choose which virtual machine network join to (at the time)?

  It's not like I can use a vCenter customization specification and just set up 'network-> Custom Settings-> interrogate the user'

  Or I have to create 30 Blue each connected to a different network?

  vCAC Build 6.0 - 1720522

  Thank you

  Tom

  This will show you how do

  [virtualjad.com]: vCAC dictionary of properties: customize applications for Service with dynamic Menus

  You use custom properties to achieve this. You won't need 30 blue, build a logic and apply it on a plan of action.

• Difficulty the front Dimension of the array, but allow the user to change the size of the array

  Hello

  I know there are a few other posts on table and scroll bars but mine is a little different. I want to have the physical size of the fixed table control and allow the user to change the size of the array as required and a scroll bar if the number of elements exceeds the specified physical dimension. I wouldn't mind if, at the end of the scroll bar, the user sees an uninitialized element.

  Thank you very much

  Hello

  The problem I have with the property Num Row node is it seems to replace the scroll bar. Whenever I try to change the line number, the table automatically resizes its physical size on the front and the scroll bar has no effect.

  However, I solved the problem by taking row completely digital. I just said if the table size is > to a constant value (i.e. 3), add a scroll bar and my front panel dashboard to be a size larger than what the value of this constant is size. Once I begin to add values in sequential order and I get to the fourth value, the scroll bar is added and the scroll bar has a feature where it adds an element of null for you, so if I fill this null element I just increased the size of the table and another null element appears underneath.

  Thanks for the help

• Allow other users to connect through my internet connection of mobile phones.

  Quite simply, I'm setting up my xbox live to run through my internet connection of mobile.

  When I select the check box to allow other users of the network to connect through this computer's internet connection it turns off immediately, so is not enabled.

  I tried disabling the firewall etc to see if it limited the ability of sharing, but it did not work.

  Any information or help would be greatly appreciated.

  Hi Stewart,
   
  Please go through the article below which will help you to connect to windows live using your internet connection for your laptop.
  How to connect your Xbox 360 wired controller to a computer running Windows
  http://support.Microsoft.com/kb/906347

  Please also see the link below. This could help you.
  http://support.Microsoft.com/kb/978618

  If the problem persists, I suggest that question you post you to Xbox forums.
  Xbox support

  http://forums.Xbox.com/xbox_forums/xbox_support/default.aspx

  http://www.Xbox.com/en-us/forums
   

• that allows standard users change ppp settings, removing UAC admin fast pwd to DPIscaling.exe

  I am currently using windows vista ultimate 64-bit with an installed nvidia geforce 8800 gtx card. I'm the ADM on the machine, with the standards users who connect it. My account of adm does not have the problem. I'm trying to find a way to allow standard users on the machine to have the ability to change the ppp settings.

  The path of the file is C:\Windows\System32\DpiScaling.exe

  I tried to use the solution listed on this site: http://blogs.techrepublic.com.com/window-on-windows/?p=635

  and used the Application Compatibility Toolkit.  I used a lot of different options, the 32-bit version, 64-bit, different boxes, without success. When you click right on the file properties and click on the Compatibility tab, it says:
  Cannot be set on this program compatibility modes because it is part of the Windows version.

  I have a standard users also granted full control of the executable, and if the logged-on user account, he got always invited him to enter the administrator credentials. I understand that this only gives the user access to the file and not what the file does.

  I need to find a solution to allow standard users on the computer to change the DPI settings without the need of the admin password.  While looking for solutions here and on the site of regular microsoft (support.microsoft.com) support, all I could find are methods that disable the guests of UAC elevation and ways to disable UAC completely.    http://social.answers.Microsoft.com/forums/en-us/w7security/thread/0364515a-301e-47C5-AF99-39347b83c6b4-je don't want to do that.  I even tried and the standard user has always invited to enter an admin password.  I don't want to disable UAC or the guests of elevation, surprisingly these guests don't mind.   The computer is set to high resolution and need to continually change the DPI setting to enable the second monitor (my HDTV) text output in a format that is clear and correct.  The reason why we have change back is because the cursor of the mouse in the PC video games being played here on disappears when the DPI is set to what higher than normal / default. So before any game is played, the DPI settings in windows settings must be changed to the default / normal.

  Since I was the user only administrator on the machine, I am concerned when other users would like to play their games. but can not, because I am not present.  I want to be the only Admin account on the machine.  Bad things tend to happen when I allow other users are administrators on the machine.

  Hello

  Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited to the security of Windows Vista on TechNet. Please ask your question in the TechNet forum.

  Diana

  Microsoft Answers Support Engineer

  Visit our Microsoft answers feedback Forum and let us know what you think.

  If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

• M476dn: Printer in two different networks - is it possible?

  I got the following requirement:

  Printing from iPad should be possible on one of our network printers. As known, Apple Airprint is available only via WiFi. Question: Network printers are in another network than iPads.

  My idea:

  -Buy a Wifi capable HP printer network (for example. M476dn)

  -Configure the LAN port for normal office network (printer connected to the network via a cable)

  -Configure the printers WiFi interface for the Wifi network, which is used by iPads

  Then the PC and laptops should be able to print via normal office network (print server) and iPads via Airprint.

  Question: Is it possible to set up a printer HP in this way, so that it is located in two different networks? Especially the M476dn this would support? I would like to clarify this point of course before buying a ;-)

  In fact the user must move the network for printing.

  It is the only possible option I can think, other then get a different printer for each network.

  Kind regards

  Shlomi

• Allow administrative users to update applications

  I have several new computers running Win7 Pro using the CAD and the standard name of user/login prompt.  Users run in standard user with no administrative privileges accounts.  Users get pop ups of various applications that want to run updates to day, but when the user selects the he is prompted for an administrative password.  Of course, they cannot continue.  The two main offenders are currently Java and adobe Acrobat.  Is there a way to allow administrative users to run software updates to the machine?

  I tried to add users to the power users group, but that did not help.

  My current idea is to create an admin user and set it so that the user can not connect interactively, but can be used to authenticate the update.

  You can't do that. If find you a hack to allow them to you have given the same level of access as an administrator and undermined all chances to avoid to install malicious software or dirt otherwise upward from their computers. If they can install the software in ProgramFiles or % of windows that they own the computer.

  Instead, set up an automated system to deploy software and updates. System Center Configuration Manager is probably overkill for your network, but there are several affordable tools of the 3 parties who could help with deployment and maintain applications. Http://www.kurtdillard.com Kurt Dillard

• How I replication address the security of transport (or how users can implement custom replication transport)

  I would like to put in place strong mutual authentication and encryption for replicated data and manage it in the application controls. (That is, not by using a VPN connection or other mechanism of the application could not apply on its own.)

  It would be nice if I done this sort of thing automatically, but in the interest of flexibility and simplicity, it seems it would be reasonable that I to allow a user to managing low-level message passing and sleep with any security or integrity checks which were appropriate.

  Is it possible now?  It seemed that there was a level of support for transport provided by the user in the past.

  To add to the remarks of Marc, there was some thought and effort put into the pluggable teapot, but there have only been a start in this direction so far.  I think it would be possible, for example, add support for Kerberos and secure transportation provided by the user in the future if that made him highest on our list of priorities.

  You have a specific need for an alternative implementation of security beyond (rightly) pointing out the merits of a pluggable approach?

  -Tim

  P.S. I think we used 'SSL' rather than 'TLS' to match the name in the JDK classes and to use terminology better known to the general public.

  P.P.S. The NoSQL product layers also its own authentication mechanism of client on top of the SSL part.

• Allow the user from code java stand alone

  Hello
  I have a requirement where I need allow a user in IDM if it is in the disabled state. I wrote the java code that connects to the IOM server with username and password and made the necessary. But I have a new thing to implement here in which if the user status is disabled, then we call the user activate and allow the user in IDM DB. Please help in locating the method appropriate and API for this.
  
  
  Thank you
  Kalpana.

  Check this: http://docs.oracle.com/cd/E14571_01/apirefs.1111/e17334/oracle/iam/identity/usermgmt/api/UserManager.html#enable_java_util_ArrayList__boolean _
  and as it happens; Once you activate a user; tasks to activate resources would be triggered automatically.

  -Marie

  Published by: Bikash Bagaria on February 15, 2012 11:34

• Allow the user to update the fields between some time. If not just to see

  Hi Experts,
  
  I was thinking about the following example. Can I know how can I implement this in project web ADF.
  
  Allow the user to change the shape of the page on some time interval of time rest allows them to view only. I can put this check in time of connection or the loading of the page. How ever how to apply this connection between the cut-off time. Can I disconnect all users of the system to time limits and ask them to re-login again. In the affirmative. How to implement that.
  
  Thank you.
  
  t

  A brainstorm of my response, possibly other posters will give a better answer...

  Is the requirement actively disconnect everyone once the time-out occurs, or can at least delay to the next request for each client?

  If the old I suggest to use some sort of component Ajax poll on the page that keeps checking with the server if the delay has occurred. Maybe later if a Java EE filter or listener to detect the expiration time. In both cases once the delay has occurred to redirect the user to the adfAuthentication servlet will disconnect the current session/user.

  CM.

• How to allow the user return to give lectures when they take a quiz?

  Hello world
  
  I'm new to Captivate and now I'm kinda in a dilemma. Thank you for your
  time to look at my post!
  
  I created a CBL in Captivate 3, the first 10 slides is a conference and he
  is followed by a quiz of 10 slides, defined as standard SCORM.
  
  I want that the learner must be able to refer to the Conference when they
  Take the quiz, I tried 2 approaches and they both
  issues in different ways.
  
  Approach 1: "allow moving backwards" and "infinite attempts. The
  problem with this approach is when the learner clicks on "review the.
  quiz"and when they click"back"on the first slide of questionnaire, all
  Quiz will start everywhere, the score is reset to zero.
  Because the quiz is seeing this as a new attempt and that the learner is
  permit to make "infinite attempts" such that it has been configured.
  
  Approach 2: "Allow moving backwards" and leave only "1 attempt.
  The problem with this approach is, when the learner is in the Middle
  Quiz and refers to the Conference, the quiz will be
  automatically shown as completed. And the learner will not get a
  chance to answer these questions unanswered.
  
  It seems that every time that I leave the learner refer to the Conference
  in the middle of a quiz, the quiz will be seen as completed. Who am
  I did wrong? Is there a better approach I can "allow backward
  movement' and always allow resumes user their quiz where they have left
  in the distance?
  
  Sorry for the long post, I was not able to express it in a more
  concisely.
  
  Any help is really appreciated!
  
  -David

  What you see is the behavior designed as in Captivate for the quiz.

  Each Captivate movie has a range of "quiz", which starts with the first measurable purpose and ends at the Quiz results slide.  If you enter the scope of quiz by starting a slide of questionnaire, then jump back away from quiz, to return to the basics, default behavior of Captivate is to freeze the quiz at this time here.  Then when Captivate refers to allow movement to the rear, it is talking only a move backward in the quiz.

  For example, if you get to question 1, but no answer and proceed to question 2 answer that we can go back to question 1, you will still be able to answer question 1.  The test will not be frozen.  However, if you had jumped to any slide before question 1, your quiz would have been frozen with everything that you mark had accumulated at this time here.

  There may be a workaround that you can use to get closer to what you want.  As any object that is classified as part of the quiz, you can add a button on one of the first slides that the user must click to move forward.  Set the properties of this button (or click on the box) to report a score for the quiz.  What makes a part of the scope of quiz.  Now, any content slides falling after this slide button are also within easy reach of quiz and return to them will not have the same effect of freezing the quiz.

  Please keep in mind another aspect of the quiz questions: If you answer a quiz question, and then move off the slide (forward or back) quiz question answer is frozen and cannot be modified unless resume you the Quiz or raise all of the module.

  Hope this helps to clear up how things work.

• Time Capsule backups of different networks?

  I have a Time Capsule that serves ONLY to expand my current network, but is also used for the backup of a single computer through Time Machine. If I take this time capsule to a new place, which has a different network I can configure it to join the new network and continue the backups Time Machine to a computer (which moves with it) without losing any old backups? If so, how can I say to join the network at the new place.

  Thank you

  Roger

  The time Capsule cannot 'join' a wireless provided third-party router, if that's what you're asking.

• El Capitan server has been updated to allow multiple users to GUI?

  Good afternoon

  We currently use a mini Server mac to run our software controller of AFN and we want it to be so that several people can manage the server of the Mini on their own connections. Is it possible that several people to connect with their own credentials to remotely?  While the account running the controller software that is connected, my attempts just go on forever.

  Several GUI users can mean many different things, but I think that the case more suitable for you, the following means.

  • Yes, multiple users can connect remotely by using screen to your Mac server sharing
  • They can each use a different user account to authenticate their connection
  • If they use another user account to authenticate their screen sharing connection, they offered the possibility of initiating a separate session, you will then get a prompt similar to the following

  

  • You would choose "Log In" to get a separate user session

  Note: Some applications such as Apple Remote Desktop administrator do not like to be used by multiple users on the same computer at the same time, other Applications may be ok.