Communication inter-locataire on ACI

Similar Questions

• Communication inter-QML

  Someone at - he never set up communication between several objects QML?  It's probably a built-in function.  I capture a SystemPrompt and filling of a TextField entry in another object QML.  I'm saving a QSetting entry before posting.  This entry can go to several object QML so I put up as a QProperty in my main module.    I'm quess I have to configure a combo Slot/Signal so that it can be updated in all QML objects, but does not to know how to to this topic.

  Any recommendations?

  These links go through how two QML objects can iteract with the code examples...

  http://developer.BlackBerry.com/native/documentation/Cascades/dev/signals_slots/

  http://developer.BlackBerry.com/native/documentation/Cascades/dev/signals_slots/signals_slots_set_up...

  [Edit] In fact I wasn't making fun of you above, just the length of the delay between the OP and the response.

• communication inter-app!

  I want to call another application since an ios-based air application, but it seems that the custom url scheme used to do this cannot be an applications native contact air apps and not the opposite, right?

  If Yes, is this going to be fixed by another process in the future (ie. native extensions) or is there a work around?

  In AIR 3, you can launch URLS by using a URI template customized by using navigateToURL(). This means that you can save an AIR application to manage the custom URI (what you've always been able to do) and launch a URL using the scheme with another application AIR (new feature). It should work in the current beta on labs. Give it a try.

  You get the URL in the array of arguments of an InvokeEvent object. You can pass variable parameters on the end of the URL. For two-way communication, the two applications must register a URI scheme Manager, I think.

• VPN3k and communication inter-talks - need the official position Cisco

  Hi Experts.

  A Cisco VPN3k in a hub-and-spoke IPSEC network station will be able to route packets between the spokes?

  On the shelves, I have firewall Cisco Pix.

  Thank you

  Michele

  Yes, provided that the subnet of each ray is included in the list of the network sent to another talk. Do not forget that the PIX will only send traffic over the tunnel that corresponds to its crypto access list, so this ACL must include subnets behind PIX. Therefore, the ACL on the 3000 must understand all these networks as the local network.

  It's pretty easy to do if you have set up your networks speaks correctly. A good way to proceed is to ensure that each subnet speaks is say, a subnet 10.0.0.0/8. So talking A 10.1.1.0/24, B is 10.2.2.0/24, talking about C is 10.3.3.0/24, etc.

  Then your PIX ACL for talks just must be:

  permit the 10.1.1.0 ip access list ipsec 255.255.255.0 10.0.0.0 255.0.0.0

  ACL PIX for talking B has to be:

  ipsec ip 10.2.2.0 access list permit 255.255.255.0 10.0.0.0 255.0.0.0

  Then just the opposite on the 3000 and all get is routed accordingly.

• How to get ISPv6 TSE

  Dear friends;

   

  I am: monorail joffrey Hassan. on the ground, I was: a teacher for various topics in the second cycle of secondary school and especially for the English subject to some English classes, while I ask myself. Usually, I asked my teacher in the classroom directly to one or more questions. If they have not responded to my question for the first. I repeated once more in a higher volume of my major. I had never asked in detail before they have answered my question first of owner. Now, I'm getting additional knowledge in: method of the request and response on the teaching of communication inter-action. Thank you!

  t

  Here are some details! For now, I want to creat Home Group for my com. I already have as well as the main likely instructions. A property of warning advised that I did not have an ISPv6. I don't know what it is yet. While I asked the assistance team Windows: "How to get ISPv6", didn't I?

  Thank you!

  Hi monorail,

  Thanks for posting your query in Microsoft Community

  I understand you are trying to create the home group in Windows.

  I will definitely help you with this

  1. What is the operating system installed on your computer?

  Please follow the methods.

   

  Method 1:

  Follow the steps in the link.

  http://Windows.Microsoft.com/en-in/Windows7/products/features/HomeGroup

  Method 2:

  Follow the steps in the link to turn on IPv6.

  IPv6: Frequently asked questions

  http://Windows.Microsoft.com/en-in/Windows7/IPv6-frequently-asked-questions

• vFoglight 6.6.1 - ERROR: failure in the embedded database exec process

  Hello

  I use vFoglight 1.5 successfully for years on Linux (Ubuntu 12.04, I know, it is not supported).

  Today, I rebooted the server und vFoglight will not work. The mySQL-database shipped

  Cannot start with the beginning of the fms (fms - demon). I found the following errors in the ManagementServerlogs:

  2013-09-04 12:36:09.919 OF INFORMATION	[hand] com.quest.nitro.service.ServiceMBeanUtil - database Lifecycle Service from...
  2013-09-04 12:36:10.294 OF INFORMATION	[hand] com.quest.nitro.db.EmbeddedDatabaseManager - startup of the embedded database...

  2013-09-04 12:36:10.306 ERROR [main] QcnUtil/src/unix/qcn_message_unix - (internal error) cannot connect taken for the transmission of messages A/tmp/qcnprocessrunner-236164eeefd265647258c4d174c8644e.msg: connection refused

  2013-09-04 12:36:10.306 ERROR [main] com.quest.nitro.db.EmbeddedDatabaseManager - cannot execute the command: {0}

  java.io.IOException: could not send message to communication inter-lanceur. Check the logs for more information.

  	at com.quest.common.launcher.message.MessageHandler.sendMessage (Native Method)
  	at com.quest.common.launcher.runner.ProcessRunner.sendMessage(ProcessRunner.java:398)
  	at com.quest.common.launcher.runner.ProcessRunner.execInternal(ProcessRunner.java:275)
  	at com.quest.common.launcher.runner.ProcessRunner.exec(ProcessRunner.java:210)
  	at com.quest.nitro.db.EmbeddedDatabaseManager.run(EmbeddedDatabaseManager.java:407)
  	at com.quest.nitro.db.EmbeddedDatabaseManager.runAndWait(EmbeddedDatabaseManager.java:390)
  	at com.quest.nitro.db.EmbeddedDatabaseManager.startup(EmbeddedDatabaseManager.java:438)
  	at com.quest.nitro.service.embeddeddb.EmbeddedDbService.startService(EmbeddedDbService.java:48)

  I stopped the delete of und fms service that do not all .msg files in / tmp, but the beginning.

  Can you help me

  Best regards

  Maik

  Hi Thomas,

  Yes, the FMS was launched as root.

  The problem is now solved, another program is supposed to block all ports.

  I stop without the "loft" (a mail server) process and vFog then started

  problems. If dovecot begins before vFog, then vFog will not start, he works the

  other way around. Very strange. F * pushy, I want my System V Init return.

  Better compliance

  Maik

• Need help with set up on PC6624 InterVLAN routing

  Hello

  I stack 5-switch 5548 Dell PC / 1 PC 6624 switch for layer 3 routing.

  I connected battery to PC6624 with 10 GB fiber cable.

  I created several VLANs on the layer 2 stack. Now how to set up communication Inter VLAN switch PC 6624?

  Concerning

  Marion

  Hello

  Page 507 of the manual explains how to enable IP routing on the switch ftp://ftp.dell.com/Manuals/all-products/esuprt_ser_stor_net/esuprt_powerconnect/powerconnect-6248_User%27s%20Guide2_en-us.pdf

  Here is a document explaining the Setup on an older switch, the concepts are the same http://www.dell.com/downloads/global/products/pwcnt/en/app_note_38.pdf

• Multi-tenant IOS Firewall and security even subinterfaces 9.0

  Hi all

  I'm so used to< 8.3="" and="" am="" having="" great="" difficulty="" getting="" an="" environment="" working="" properly="" so="" i'm="" now="" going="" to="" leverage="" the="" cisco="">

  We set up a network with clients behind a pair of 5510 s.  All of these clients will have their own dedicated sous-interface in their own VLAN.  Out the door, I got inter - allowed security-same interface and all networks communicate with each other.  I certainly don't want that, so I have disabled this command and now each network client is unable to communicate with each other, as expected.

  The problem now lies in networks where a customer have 2 VLANS separated (say a staging and a prod environment) where they need to communicate.  Is it feasible if they are of the same security level and even security allowed inter-interface is disabled?  I just need to create an ACL for the networks to talk?  Is there a better way to do this with the same security allowed active inter-interface?

  8.3 pre, I have same security allowed active inter-interface, but traffic could not speak to the other interface unless I created an exemption NAT and ACLs.  Always create a NAT exemption?

  Hello

  The basic problem that you run with different software levels is the parameter 'nat-control' that exists in 8.2 (or earlier version), but does not exist in version 8.3 (or subsequent version of the Software ASA).

  In the 8.2 and pre software you got with the nat configuration change 'control' of requiring a connection to have a NAT configuration to be able to pass traffic through the ASA. Of course this coupled with the 'security level' gave you more changes to control traffic without resorting to the ACL.

  However, in the new software of 8.3 and later the "nat-control" level no longer exists and that a connection has a NAT configuration that be applied or not ASA still allows the connection (subject other ASA controls allow) so basically you won't need NAT configurations between your local interface. The most common NAT configurations should be between your local interface and the "external" ASA interface.

  If you try to control traffic between interfaces with the global configuration commands you mention, you will eventually be 'juggling' with the 'security level' configurations autour constantly so that the correct rules for traffic is applied.

  This question came up on these forums every now and then, and I almost always offer the same approach which is to set up an ACL on EACH interface of the ASA.

  • Remember to leave the 'same-security-traffic"on the SAA configurations. It is because even if you have interface ACL allowing traffic, if they are for some reason any left with identical "security level"custom ACL be sufficient to allow the traffic. "
  • Configure each interface an ACL
  • Initially to configure the ACL to create a "object-group" that will contain EACH network behind your local interface of firewall (except the "outside" ofcourse)
  • Use this category 'object' at THE start of ACL interface to BLOCK ALL traffic behind this interface to these networks
  • After that allow or block different/Out Internet - linked as usual traffic
  • In the same networks 2 (or more) behind the need of different interfaces to communicate with each other, set up a statement that allows early each ACL. The already existing 'decline' exposed with the 'object' group already will ensure that other traffic between networks are blocked

  A very simple example, you might want to consider the following

  Networks:

  • LAN1: 10.10.10.0/24
  • LAN2: 10.10.20.0/24
  • DMZ1: 192.168.100.0/24
  • DMZ2: 192.168.200.0/24

  permit same-security-traffic inter-interface

  Interface GigabitEthernet0/0

  Description box

  interface GigabitEthernet0/0.10

  VLAN 10

  nameif LAN1

  security-level 100

  IP 10.10.10.1 255.255.255.0

  interface GigabitEthernet0/0.20

  VLAN 20

  nameif LAN2

  security-level 100

  IP 10.10.20.1 255.255.255.0

  interface GigabitEthernet0/0.100

  VLAN 100

  nameif DMZ1

  security-level 100

  IP 192.168.100.1 address 255.255.255.0

  interface GigabitEthernet0/0,200

  VLAN 200

  nameif DMZ2

  security-level 100

  192.168.200.1 IP address 255.255.255.0

  object-group network BLOCK-LOCAL-NETWORKS

  object-network 10.10.10.0 255.255.255.0

  object-network 10.10.20.0 255.255.255.0

  object-network 192.168.10.0 255.255.255.0

  object-network 192.168.20.0 255.255.255.0

  access-list LAN1 - IN note allow HTTP / HTTPS in the DMZ1 Server

  access-list LAN1 - permit tcp 10.10.10.0 255.255.0 host 192.168.100.100 eq www

  access-list LAN1 - permit tcp 10.10.10.0 255.255.0 host 192.168.100.100 eq https

  LAN1-IN access-list note block traffic to another local network

  access-list LAN1 - deny ip any object-group NETWORK-LOCAL-BLOCK

  Note LAN1-IN access list allows any outbound

  access-list IN LAN1 ip 10.10.10.0 allow 255.255.255.0 any

  LAN1-IN group access to the LAN1 interface

  And of course all other ACL would follow the same model in one form or another. You would really have to worry about traffic is allowed between interfaces, but rather the most work would probably add "allowed" in the upper part of each ACL when required for communication inter-interface. But I guess that the amount of these additions would remain also to a manageable level for FW admins.

  Naturally in environments the biggest you would probably get a high-end ASA and virtualize it and separate each customer environment in their own security context where you would avoid this situation together. Naturally the biggest points against this solution usually can be fresh and the fact that virtualize the ASA multiple context mode disables some essential operational capability of the SAA, which the most important is probably the Client VPN connections (VPN L2L is supported in the software in multiple context Mode 9.x)

  Hope this helps

  Don't forget to mark the reply as the answer if it answered your question. And/or useful response rates

  Request more if needed

  -Jouni

• SG300 IP ACL link bug

  Hi all

  Installation of 2 switches SG300 (latest firmware) in a small network gave me the following challenge:

  How can I link an IP ACL to VLAN instead of a physical port?

  The situation:

  -1 Central SG300-20 trunk of layer 3 city to L2 SG300-10.

  -1 remote SG300-10 in layer 2, including the L3 SG300-20 trunk.

  -Several VLANS on both switches, including their IVR on the L3 and InterVLAN routing on the switch switch L3 activated.

  -Would be nice if the traffic between them VLAN in some way may be limited hollow ACL.

  Problems of the ACL to the ports linking instead of VLAN:

  -Port membership regarding the different VLAN is very non-bobines, so the use of 'interface' is not possible to 'mirror' of the administration of the ACL to the administration of VLAN. Moving ports through VLANss creates an ACL administration "gene."

  -More important; What remote ports on layer 2 switch (the other side of the trunk)? How can I link several ACL on the L3 switch to the ports of the physical L2 switch different? Hollow InterVLAN traffic of the trunk should also be limited by the ACL on the SG300-20 L3...

  How can I accomplish this?

  Rommel salvation

  How can I link an IP ACL to VLAN instead of a physical port?

  It is not supported at this time, the link is for LAG and port only, not a virtual interface.

  -Would be nice if the traffic between them VLAN in some way may be limited hollow ACL.

  The ACL works for traffic of penetration which can only be descriminated by several different methods. As a SVI is the interface VLAN, you can distinguish the subnet or specific IP addresses contained in actually making the access rules for the VLAN even if she is not related to the virtual interface.

  -More important; What remote ports on layer 2 switch (the other side of the trunk)? How can I link several ACL on the L3 switch to the ports of the physical L2 switch different? Hollow InterVLAN traffic of the trunk should also be limited by the ACL on the SG300-20 L3...

  The same traffic VLAN, a layer 2 device could tip locally. Communication inter - VLAN traffic to be sent to the routed interface. As traffic is only limited penetration on the SX300 I do not see a complication, as a request of 2 connected device layer would be entered in the port of switch Sx300.

  The only thing that I can determine the post, is that you can have a hell of a large ACL according to restrictive how you want to be with specific host connections. Just keep it minus 512 ACE since that's what the switch takes care of.

  -Tom
  Please mark replied messages useful

• SG200 - 26 configuration newbie question VLAN

  Hi all

  After using a Netgear switch for years, this is my first Cisco switch now and it drives me crazy because it is much more "professional" than the Netgear one...

  My question is:

  My router, I am connected to the switch with two separate interfaces that should work like two "zones". GE25 for LAN, GE26 for the WLAN.

  Now, I have connected my

  • LAN devices to ports to GE24 GE4
  • WLAN devices to ports GE1 to GE3

  How should I configure VLAN so that the port groups mentioned above do not see between them them?

  You can assume that I would use a VLAN ID

  • 10 for the LAN
  • 100 for the WLAN

  Any help is appreciated. Thank you.

  Best regards

  Frank

  Dear Frank,

  Thank you to reach small business support community.

  Note the SG200 is a Layer2 device and therefore does not provide communication inter - VLAN by its own.  Please refer to the below section "Configuration of VLAN on SG200 switches" successful

  http://sbkb.Cisco.com/CiscoSB/Loginr.aspx?login=1&PID=2&app=search&VW=1&articleid=80

  I hope you find this information useful and do not hesitate to contact me if there is any other help I can help you with that.

  Kind regards

  Jeffrey Rodriguez S... : | :. : | :.
  Support Engineer Cisco client

  * Please rate the Post so other will know when an answer has been found.

• Router-on-a-stick VLAN possible with SRP547w &amp; SG200-26?

  According to the title, I need just 3 or 4 VLANS with communication inter - VLAN enabled.

  In the past I used this router with every internal switch set to one VLAN port different with each in turn hooked up to a switch.  This did work for me, but I want to dip my toe in the world of .1q VLAN and acquire additional flexibility and cleanliness.

  Kind regards

  Brandon.

  Hi Brandon,.

  On the RPS, navigate;

  • The interface Setup > LAN > Configuration of VLAN
  • Create the VLAN with the attribute as you want
  • Below are 2 sections, VLAN and added interface, add the interfaces to the port

  The SX200 switch, you will need to assign a port as a vlan native containing the tag VLAN untagged and all others.

  • Connect the SX200 and access management of VLANS
  • Create the desired VLAN
  • Access the belonging to a VLAN ports, change the proposed port connect to the RPS, use the arrow on the slide to add the VLAN to the port as members marked

  * Ensure that connection ports are port trunk allowed several VLANS to be set on the link. An access port allows 1 membership alone a VLAN.

  Hi Andrew! You me before I can submit

  -Tom

  Post edited by: Thomas Watts

• Creation of the NSX for IP (iSCSI) storage

  Hi all

  I considered just the implications of VMware NSX on storage over IP (iSCSI) Design.

  If we create three groups: Edge, Mgmt and Compute, each in its own grid:

  • Each cluster/rack is associated with (2) sheet of 10 GB switches
  • There are 2 two 10 GB backbone switches for the installation
  • Each sheet is connected to each switch of the spine (sheet ports 47 to the spinal #1 switch) and leaves 48 to the #2 of the spine switch
  • 10Gb iSCSI without are configured in the cluster of MGMT/rack and connected to the 10 GB sheet past in the cluster/rack of Mgmt.

  Then, how facilitate us the IP storage for ESXi hosts who are not in the same basket as the SAN?

  Suppose we define VLAN 99 for IP storage (by Figure 4 - NSX v2.1 Design Guide) and follow the recommendations 'trunking VLAN on the link between the sheet and the spine is not allowed' (p. 65 - NSX v2.1 Design Guide), then the inescapable conclusion is that the SAN are not available since the Compute cluster/rack or edge.

  How to set an exception that will allow us to the trunk VLAN 99 (no gateway, without calculation, not able rout) of the spine, so IP storage is accessible from all ESXi hosts?

  THX in ADV!

  Here, you will need to use the IP routing for communication inter rack configured at the ESXi host level.

  For example on the grid 1 VMKernel Interface for storage is 10.77.1.10 in Vlan 77.

  switch sheet of TOR, we terminate that VLAN as IVR with IP address of 10.77.1.1

  To Inter Communication IP Rack storage, let's add command to host ESXi on racks 1 hosts next-level:

  esxcli ip network route ipv4 add - n 10.77.0.0/16 g 10.77.1.1

  (Note VMkernel Interface for different media guests will be in different subnets. So in rack 2 VMKernel Interface for storage will be 10.77.2.10)

  (Source Guide design v2.1, page 79-80)

• Different routes for interfaces VXLAN?

  Hi guys,.

  According to the NSX v2.1 Design Guide:

  The need for static routing is due to the fact that ESXi support only two TCP/IP stacks:

  -VXLAN: This is dedicated to the VMkernel VTEP interface traffic. A dedicated-default route 0.0.0.0/0 can then be configured on the stack for each ESXi pointing the gateway deployed on the local of ToR, and this allows to communicate with the VTEPs deployed in different subnets of Transport distance.

  -By default: This battery is used for all other types of traffic (vMotion, management, storage). It is typical to use a default for purposes of management route (given that the connection to the management interface of vmk0 could be from several remote IP subnets). This means that the static routing configuration is necessary to support communication inter-sous for other types of traffic.

  Sounds good, but is this special VXLAN stack added by default? Or do I need to create and configure? I configured a host with a separate management and VXLAN VMkernel interfaces. I see my traffic VXLAN hustled through the default gateway on the management network.

  I use static IP pools on the direction and the VXLAN interfaces. Does anyone know how to add this route dedicated by default under the battery VXLAN?

  Released of one of my hosts of calculation:

  vmk0 = management

  vmk1 = VXLAN

  ~ # esxcfg - road - l

  VMkernel itineraries:

  Interface of network gateway subnet mask

  172.16.100.0 255.255.255.128 subnet local vmk0

  by default 0.0.0.0 172.16.100.1 vmk0

  ~ # esxcfg - vmknic - l

  Interface Port Group/DVPort IP IP family address Netmask Broadcast MAC address MTU TSO MSS active Type

  0 IPv4 172.16.100.100 vmk0 255.255.255.128 172.16.100.127 00: 0C: true 29:ab:31:c9 1500 65535 vmk0 STATIC IPv6 fe80::20c:29ff:feab:31 0c 00 64 9:0 c: true 1500 65535 STATIC 29:ab:31:c9.

  FAVORITE

  vmk1 2 IPv4 172.16.200.100 255.255.255.128 172.16.200.127 00:50:56:64:0e:f3 1600 65535 true vmk1 STATIC IPv6 fe80::250:56ff:fe64:ef3 64 00:50:56:64:0e:f3 1600 65535 true STATIC 2.

  FAVORITE

  Kind regards

  Bobby

  VTEP interface is created by NSX during the preparation of the host.

  You can see this step the NSX Getting Started Guide - "step 3: prepare the ESXi NSX hosts" (Getting Started Guide for vSphere NSX).

  Once you have your VXLAN battery in ESXi, you can see its stack via vCenter UI (as usual).

  

  Or if you like CLI:

  . Directions:

  root@Lab1_ESXi1: ~ # esxcli ip network route ipv4 list n vxlan

  Interface Source network gateway subnet mask

  ------------  -------------  ------------  ---------  ------

  by default 0.0.0.0 192.168.20.1 vmk1 MANUAL

  192.168.20.0 255.255.255.0 0.0.0.0 vmk1 MANUAL

  . Ping

  root@Lab1_ESXi1: ~ # ping ++ netstack = vxlan 192.168.20.22

  PING 192.168.20.22 (192.168.20.22): 56 data bytes

  64 bytes from 192.168.20.22: icmp_seq = 0 ttl = 64 time = 0,616 ms

  Dimitri

• URL patterns for the suite Microsoft Office for ipad

  Hello

  I'm trying to implement a communication inter-app with an application I created.  I wish I could press a button in my app and have a xls document that I put on my web server that is open in Excel of IOS app.  To do this, I know that I must make use of URL patterns.  I can get the button to open the Excel application itself using ms-excel: / /, but I can't seem to open the server document in the application.

  I tried the following:

  MS-excel://HTMLResources/file.xls (referencing in the resources folder)

  ms-excel: / /http://www.yoursite.com/fIslands/file.xls (reference directly via a url)

  
  

  These two options just open Excel, but not the document.
  

  
  

  I even tried to put in a superposition of web using snippets html such as referenced here: http://blogs.adobe.com/jlockman/2013/04/05/launching-external-apps-from-a-dps-folio/

  No luck.
  

  Someone has ideas, or are be familiar with URL patterns customized to the Office for ipad?

  I know that the office suite for ipad is relatively new, so I wonder if anyone out there is familiar with URL patterns customized to the Office for ipad. For any help or suggestion would be greatly appreciated!

  Thank you

  Allison

  Another note: I tried the same thing with Expert PDF and it works: (the app uses the URL window PDFE)

  Thus,.

  
  

  PDFE http://yoursite.com/files/file.PDF

  
  

  Open the file.PDF in PDF Expert.
  

  URL of the file must be encoded and preceded office settings: ms-excel: fiction | u |

  For example,.

  MS-excel: fiction | u | http % 3 a % 2F % www.yoursite.com%2Ffiles%2Ffile.xls 2F

• Add a virtual network card

  Hello

  Is it possible to add a VM virtual network card, and not a phyiscal adapter?

  I hope to run a quick RLV connecting virtual machines.

  It seems that this is possible, but I couldn't make it work.

  Can you please direct me to a URL or explain how it is possible?

  Thank you very much.

  You can create a vSwitch who doesn't have a card assigned to it, then within your VMS physical NETWORK add virtual NICs attached to this vSwitch for a private local network.   That said, when the VMs are on the same vSwitch and VM network communication inter subnet does not go out to the physical NIC port.

  Dave

  VMware communities user moderator

  New book in town - Start Guide quick vSphere -http://www.yellow-bricks.com/2009/08/12/new-book-in-town-vsphere-quick-start-guide/.

  You have a system or a PCI with VMDirectPath?  Submit your specifications to the unofficial VMDirectPath HCL - http://www.vm-help.com/forum/viewforum.php?f=21.