connectivity from client to client on ASA5520 RAS VPN

All,

We have a firewall ASA5520-K8, through which client internal connect and receive IP 10.26.206.0/23 addresses. They are not however unable to ping or DRC to the other. A co-worker and I both connect to the firewall and VPN and I tried to make a packet trace of my internal internal assigned IP to its assigned IP. The package is removed in step 10. As a beginner to ASAs, I need help.

Phase: 10
Type: NAT
Subtype:
Result: DECLINE
Config:
NAT (outside) 10 access-list VPN_CLIENTS
match outside ip 10.26.206.0 255.255.254.0 outside of any
dynamic translation to the pool 10 (199.x.x.x [Interface PAT])
translate_hits = 5268139, untranslate_hits = 397840
Additional information:
Direct flow from returns search rule:
ID = 0xc89cc760, priority = 2, domain = nat, deny = false
hits = 5364150, user_data = 0xc89cc6c0, cs_id = 0 x 0, flags = 0 x 0 = 0 protocol
SRC ip = 10.26.206.0, mask 255.255.254.0, port = 0 is
DST ip = 0.0.0.0 mask = 0.0.0.0, port = 0, dscp = 0 x 0
============================
Username: weichenberger index: 3455
Assigned IP: 10.26.206.174 public IP address: 70.x.x.x
Protocol: IKE IPsecOverNatT
License: IPsec
Encryption: AES128 AES256 hash: SHA1
TX Bytes: bytes 7573810 Rx: 2810147
Political group: Group of Tunnel JDL_VPN_Users: SecureAuth-access
Opening time: 08:25:57 Wednesday, January 14, 2015
Duration: 0 h: 46 m: 42s
Result of the NAC: unknown
Map VLANS: VLAN n/a: no

There are two necessary configs:

(1) NAT-Exemption for the outside interface. It is similar as what you have inside.

 access-list outside_nat0 permit ip 10.26.206.0 255.255.254.0 10.26.206.0 255.255.254.0 nat (outside) 0 access-list outside_nat0 

(2) allow SAA send traffic on the same interface, where it was received:

 same-security-traffic permit intra-interface

Tags: Cisco Security

Similar Questions

  • Client VPN blocks inbound connections from remote desktop?

    I am running Vista x 64. To connect to a VPN Windows via the built-in VPN client works except that it seems that all incoming connections from the local network (including remote desktop) are blocked.

    Is this a known problem or design? It is a problem for us because the computer that is running the VPN client is a virtual machine running in hyper-v, so accessible by users via remote desktop - only connection to the console of the hyper-v Server is not an option.

    Are there alternatives?

    I am running Vista x 64. To connect to a VPN Windows via the built-in VPN client works except that it seems that all incoming connections from the local network (including remote desktop) are blocked.

    Is this a known problem or design? It is a problem for us because the computer that is running the VPN client is a virtual machine running in hyper-v, so accessible by users via remote desktop - only connection to the console of the hyper-v Server is not an option.

    Are there alternatives?

    It sounds like the question to split the tunnel . On the VPN client you can enable/disable split tunneling. See this article for help with that.

    http://TechNet.Microsoft.com/en-us/library/bb878117.aspx

    Note the security ramifications...

    In addition, I can not comment on this issue and a virtual machine, so as always YMMV...
    MS - MVP Windows Desktop Experience, "when everything has failed, read the operating instructions.

  • Flow on the client machine connected RAS VPN multicast

    Hi all

    I got a requirment, it is the flow of Muliticast need access via RAS VPN

    Scanario: I have ASA 5540 peripheral, configured profile RAS and user that connects to the ASA device to the standard access via VPN server.

    We have now posted on the Web and flow need to access the profile of RAS VPN PCF. Please let me know is technically possible to configure configuration mulitcast and is the machine of the client user can access flow via VPN. Help, please

    Unfortunately, this is not supported with the customers of the software.  You need a router IOS any if you want to multicast via VPN.

    -Jason

  • When I try to connect from the client to the RAC by using the SCANNER, I get ERROR: ORA-12541: TNS: no listenerOracle

    CARS: 2 nodes with Oracle single Client Access name (SCAN)

    OS: OEL 5.4 64-bit

    Version: 11.2.0.3

    When I try to connect from the client to the RAC by using the SCANNER, I get ERROR: ORA-12541: TNS: no listenerOracle. I noticed that the service is in place and properly configured (client tnsnames).

    servicioBD = (DESCRIPTION = (LOAD_BALANCE = yes) (ADDRESS = (PROTOCOL = TCP)(HOST = scanvip.domain1.local) (PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = serviceBD) (FAILOVER_MODE = (TYPE = SΘLECTIONNER) (METHOD = BASIC) (RETRIES = 180) (DELAY = 5))))

    serviceBD service

    SQL > select name, failover_method, failover_type, failover_retries, goal, clb_goal, aq_ha_notifications from dba_services where service_id = 3;

    METHOD NAME TYPE PURPOSE CLB_GOAL AQNOT ATTEMPTS

    ---------------------------------------------------------------- ----------- ---------- -------- ---------- -------- -----

    serviceBD BASIC SELECT 180 NO LONG YES

    But when I do not use the service created for the tnsnames file SCAN, it's that if I directly put tnsnames to connect to any work of two nodes very well.

    Node 1

    servicioBD =

    (DESCRIPTION =

    (ADDRESS_LIST =

    (ADDRESS = (PROTOCOL = TCP) (HOST = 10.210.2.10)(PORT = 1521))

    )

    (CONNECT_DATA =

    (SERVICE_NAME = orcl)

    )

    )

    Or

    Node 1

    servicioBD =

    (DESCRIPTION =

    (ADDRESS_LIST =

    (ADDRESS = (PROTOCOL = TCP) (HOST = 10.210.2.11)(PORT = 1521))

    )

    (CONNECT_DATA =

    (SERVICE_NAME = orcl)

    )

    )

    I have also observed the following (cluvfy).

    1 all LISTENER_SCAN running node 1

    2 there is no TCP connectivity

    3 the error message is obtained PRVF-5713

    [grid@rac1 ~] comp cluvfy $ scan - verbose

    Check scan

    Checking the single Client access name (SCAN)...

    ANALYZE the running node name?      ListenerName Port running?

    ----------------  ------------ ------------  ------------  ------------ ------------

    scanvip.Domain1.local 1521 LISTENER_SCAN1 true true rac1

    scanvip.Domain1.local 1521 LISTENER_SCAN2 true true rac1

    scanvip.Domain1.local 1521 LISTENER_SCAN3 true true rac1

    Checking TCP connectivity to ANALYZE listeners...

    Node of ListenerName TCP connectivity?

    ------------ ------------------------  ------------------------

    RAC1 LISTENER_SCAN1 no

    RAC1 LISTENER_SCAN2 no

    RAC1 LISTENER_SCAN3 no

    PRVF-5713: command "/u01/app/11.2.0/grid/bin/tnsping" (DESCRIPTION = (ADDRESS = (PROTOCOL = tcp)(HOST=10.210.2.17) (PORT = 1521)))'"running on the node"rac1"produces no output no output.

    PRVF-5713: command "/u01/app/11.2.0/grid/bin/tnsping" (DESCRIPTION = (ADDRESS = (PROTOCOL = tcp)(HOST=10.210.2.19) (PORT = 1521)))'"running on the node"rac1"produces no output no output.

    PRVF-5713: command "/u01/app/11.2.0/grid/bin/tnsping" (DESCRIPTION = (ADDRESS = (PROTOCOL = tcp)(HOST=10.210.2.18) (PORT = 1521)))'"running on the node"rac1"produces no output no output.

    Check the resolution settings of name to 'scanvip.domain1.local '...

    SCAN the IP address status comment name

    ------------ ------------------------ ------------------------ ----------

    scanvip.Domain1.local 10.210.2.18 spent

    scanvip.Domain1.local 10.210.2.19 spent

    scanvip.Domain1.local 10.210.2.17 spent

    Verification of the installation program ANALYZES VIP and the listener has failed

    The analysis check failed on all specified nodes.

    Could someone help me please.

    The solution was to restart scan_listener.

    srvctl stop scan_listener

    srvctl start scan_listener

  • Client connections from linux on Solaris failing DB server

    Hello

    I get the following error when I connect from my client (Linux x86_64) with oracle client box 11.1 installed on my Solaris-SPARC DB server that has an installed oracle 11.2

    ORA-12520: TNS:listener could not find Manager available for requested type
    Server

    I checked a lot of things online. They all said.
    1 check your service Listner
    The listening service seems to be very well because I ca connect using the listner of my box Solaris SPARC local as well as another Soalris SPARC box that has a client for oracle 10 g

    2. the process boundary must have been saturated.
    However, this isn't the case either I checked the view v$ resources limited and confirmed, I have also increased the number of processes

    However when I do a TNSPING to my linux box using the name of the DB to Solaris, I am able to get a ping successfully.

    I need your help to fix it.
    I guess the Oracle client and DB server can be on a heterogeneous distributed system?

    Kind regards
    Valli

    Hello
    Remove the server = shared your tnsnames.ora line that's the problem.

    See you soon,.
    Harry

  • LabVIEW - Arduino TCP/IP, connecting multiple Clients

    Hello

    I'm working on a connection TCP/IP between an Arduino shield WIFI control with several sensors and a LabVIEW program. You use a router, I set up a wireless network without internet that allows me to transmit the readings from the sensor of the MCU and send commands to control LabVIEW program. Currently, the Arduino is the server with the program LabVIEW connects to it as a customer and I would like the opportunity to add other clients such as a smartphone application at the same time. I am not able to connect several clients for my server Arduino based and wonder if and how this would be possible if the server was created on my computer using LabVIEW instead.

    I searched for help on the Arduino forums (http://forum.arduino.cc/index.php?topic=268578) and comments ranged from "Arduino can support multiple clients" to "Arduino can support multiple clients but it is full of errors. While it would be easier to achieve my goals by having the server on the MCU, as much data would be sent directly to each poll, the client I plan to switch to a server on computer using LabVIEW. My question is whether it would be possible to have multiple clients access to my new server, and if so, how it would be difficult to relay data from the sensor? The old plant requires the same data string for each client connected to my server. The new configuration appears as it would take the server to treat customers differently; Send commands to the MCU customer and data of the sensor of the MCU customer to everyone. Another layer of complexity is that I would need to relay controls of other clients in the same way, as the phone app smart sends a stop test command, to the Arduino via the LabVIEW program.

    Would be very grateful of entry to the community.

    Best,

    Yusif Nurizade

    You can create a server in LabVIEW that accepts connections from several clients. There are examples of different approaches to this in examples of shipment of LabVIEW and on this forum. As for the challenge of sorting where to send the data and how to transmit orders, it is-there is nothing that would make whether easier or harder in LabVIEW that in any other environment.

  • Connect OBIEE client windows to Linux VM

    Hello

    I installed SampleAppv506p running on a Virtual Machine on my windows PC. I want to connect to OBI in the virtual machine with windows OBIEE from my PC client.

    I need to establish an ODBC connection for that, but do not succeed.

    Try it with my PC telnet to the virtual machine also gives an error.

    Telnet 10.0.2.15 9703 = > connection to 10.0.2.15... Could not open connection to the host, 7780 port: connection failed

    I get the same error when you try: telnet 127.0.0.1 9703

    I've already searched Google and tried/checked:

    -> When I start the virtual machine and then I get the message "IP address of this machine is: 10.0.2.15."

    but in/etc/hosts, I have 2 lines:

    127.0.0.1 demo.us.oracle.com localhost locahost.localdomain demo

    10.0.2.15 demo.us.oracle.com demo

    (I tried to comment on the first line, but it is added after the virtual machine restarts. Probably because I have 2 NICs - NAT & Bridged - in the virtual machine settings).

    -> Running ifconfig in a telnet in VM window gives

    eth31: no adr inet

    eth32: addr:10.0.2.15 inet

    Lo: inet addr: 127.0.0.1

    -> in the VM: localhost:7001 / em

    I see that BI server works with the following ports:

    -BI Services presentation: 9710

    -Servers BI: 9703 (it is the one I should use for the ODBC connection?)

    -Planners BI: 9705

    -Controllers of BI Cluster: 9706

    -BI JavaHosts: 9810

    -> I also turned off firewall in the virtual machine:

    service iptables stop

    chkconfig iptables off

    10.0.2.x is the NAT address, then you won't be able to connect to the windows host.

    I always run VMs with two NAT (for outgoing internet access to comments) and host-only (for guest conductor communications).

    If you use bridged it relies on reviews (sampleapp) access the LAN that your host (windows) is activated, such as wifi. This works sometimes, but can add complication - where the advantage of the network invited only.

    As gianni says won't play with the files/etc/hosts, will only end in tears

    I will try:

    1. Add a host only (or replace one bridged) network adapter. SampleApp to restart and you should get another IP address which you can connect from your windows host
    2. To the contrary/as well as the above, you can configure Port Forwarding on NAT for the OBIEE ports adapter (9703, 7780, etc.). This guide looks like a pretty good. Once it is set, you point your Windows machine (admintool, web browser, etc.) to the address localhost (Windows) and virtualbox port forwarding redirects the traffic (and answers) to the ports concerned on the guest VM.
      Host only is certainly an easier place to start!
  • Wait events, SQL * Net message from client

    Hi all

    I have a doubt about oracle wait events, specifically of "SQL * Net message from client. I've read a lot about this, I've seen some say that network and other material resources can provoke him, and saw that the problems in the application code can cause it too. I am tracking a few tests here and I don't have that chooses are the double event, usually a lot of SQL * Net message to client waiting (I used sqlplus, developer sql and pl/sql). Can someone explain to me why? Another question is where this wait type cause interference, meet it demand for the database and stays on hold and do not meet another request so that the wait is over, is it? The waiting just finish when the application closes the database connection or there is another way to end the waiting?

    Since then, thank you very much.

    Hello

    chooses double what usually causes a lot of SQL * Net message to client waiting

    Do you run them from your server applications or from the DB server itself?

    "SQL * Net client message" is an idle wait event although he'd still explain to the elapsed time of the query.

    It indicates only that the database is waiting for the other entries of the customer and when he expects the DB, those expectations get incremented.

    I suggest you explore size SDU, RECV_BUF_SIZE, and SEND_BUF_SIZE parameters.

    http://docs.Oracle.com/CD/B19306_01/network.102/b14212/performance.htm

    Kind regards

    Suntrupth

  • Send an object from client to server always a button

    What I need is to send an object from client to server, but I need server wait for another object is sent. What I have, it's the JFrame where you put the name and surname, then you create a user with these details object and you press the button send this object on the server. Just, I can't keep the connection because when I send the first object, the server does not wait for another button click and survey EOFexception. Creating the while loop is useful both because it continues to send the same object again and again. The code is here
    public class ClientFrame extends JFrame {
    
        private JButton btnSend;
        private JTextField txfName;
        private JTextField txfSurname;
    
        public ClientFrame() {
            this.setTitle(".. ");
    
            Container con = this.getContentPane();
            con.setLayout(new BorderLayout());
    
            txfName = new JTextField("name");
            txfSurname = new JTextField("surname");
    
            btnSend = new JButton(new AbstractAction() {
    
                @Override
                public void actionPerformed(ActionEvent e) {
                    SSLSocketFactory f =
                            (SSLSocketFactory) SSLSocketFactory.getDefault();
                    try {
                        SSLSocket c =
                                (SSLSocket) f.createSocket("localhost", 8888);
    
                        c.startHandshake();
    
                        OutputStream os = c.getOutputStream();
                        ObjectOutputStream oos = new ObjectOutputStream(os);
                        InputStream is = c.getInputStream();
                        ObjectInputStream ois = new ObjectInputStream(is);
    
                        
                        boolean done = false;
                        while (!done) {
                            String first = txfName.getText();
                            String last = txfSurname.getText();
                            User u = new User();
    
                            u.setFirstName(first);
                            u.setLastName(last);
                            oos.reset();
                            oos.writeObject(u);
    
                            String str = (String) ois.readObject();
                            if (str.equals("rcvdOK")) {
                                System.out.println("received on the server side");
                            } else if (str.equals("ERROR")) {
                                System.out.println("ERROR");
                            }
                        }
    
    
    
    
                        //oos.writeObject(confirmString);
    
                        oos.close();
                        os.close();
                        c.close();
    
                    } catch (ClassNotFoundException ex) {
                        Logger.getLogger(ClientFrame.class.getName()).log(Level.SEVERE, null, ex);
                    } catch (IOException ex) {
                        System.err.println(ex.toString());
                    }
                }
            });
            btnSend.setText("send object");
            con.add(btnSend, BorderLayout.PAGE_START);
            con.add(txfName, BorderLayout.CENTER);
            con.add(txfSurname, BorderLayout.PAGE_END);
            this.pack();
            setSize(200, 150);
            setVisible(true);
        }
    }
    
    public class TestServer {
    
        public static void main(String[] args) {
            
            try {
                KeyStore ks = KeyStore.getInstance("JKS");
                ks.load(new FileInputStream(ksName), ksPass);
                KeyManagerFactory kmf =
                        KeyManagerFactory.getInstance("SunX509");
                kmf.init(ks, ctPass);
                SSLContext sc = SSLContext.getInstance("TLS");
                sc.init(kmf.getKeyManagers(), null, null);
                SSLServerSocketFactory ssf = sc.getServerSocketFactory();
                SSLServerSocket s = (SSLServerSocket) ssf.createServerSocket(8888);
                printServerSocketInfo(s);
                SSLSocket c = (SSLSocket) s.accept();
     
    
                InputStream is = c.getInputStream();
                ObjectInputStream ois = new ObjectInputStream(is);
                OutputStream os = c.getOutputStream();
                ObjectOutputStream oos = new ObjectOutputStream(os);
                boolean done = false;
                User u;
                
                  while(!done){
                      
                    
                    u = (User) ois.readObject();
                    String confirmString = "rcvdOK";
                    String errorString = "ERROR";
                    if (u != null) {
                        System.out.println(u.getFirstName() + " " + u.getLastName());
                        oos.writeObject(confirmString);
                    } else if (u == null) {
                        oos.writeObject(errorString);
                    }
                    
                    
                
                }
    
                is.close();
                s.close();
                c.close();
    
            } catch (Exception e) {
                
                    System.err.println(e.toString());
                
                
            }
        }
    
       
    }
    Thanks for any help, btw, it does not need to be over ssl, the problem would be the same as using the http protocol. Please someone help me :)

    Published by: Vencicek on 7.5.2012 02:19

    Published by: EJP 05/07/2012 19:53

    Published by: Vencicek on 7.5.2012 03:36

    I responded to that. Do not call the methods of networking in the thread of events, or in a constructor.

  • Establish a persistent connection between client and server

    My application must keep in touch with my servers, the HTTPConnection gives the ablitity to make one request per connection. Then the HttpConnection might not make persistent connections in the BB. I think I can use Socket connections. I am wonding if some body can confirm that and give some sugustions how persistent connections between clients and servers.

    Thank you RexDoug and Marchywka. Your suggestions are appreciated.

  • Lock on a table and SQL * Net more data from client

    Hello

    I have a problem loading data through Php in Oracle: web page of Php open an xml file, create a .csv, then begins to Oracle using an external table to process the data.

    The problem is that, the second time that PHP is trying to run the following query:

    INSERT INTO table1 T (Field1, Field2, field3, field4, sphere5, case field6) VALUES ('Aaa1E63819707', SYSDATE, 'KO', 'error', 'L', 'file_name.xml') POLL INTO Field1: id

    on the Oracle sessions, I have an exclusive lock on table1 and wait for SQL * Net more data from client.

    Where is the problem?

    Thank you

    Igor

    Finally I found the problem: a DBA changed the cursor sharing EXACT force! I restored the CORRECT setting and now everything is fine.

    Thank you

    Bye,.

    Igor

  • Failed to connect to client host vsphere and Vcenter also esxi.

    Hi all

    I am trying to connect to the ESXi 5 of vsphere client host. I get the error message:

    vSphere client cannot connect to < ip > an unknown connection error has occurred. (The request has failed because the remote server has taken too long to respond. (L'opération a expirer)).

    and of VCENTR I am trying to add this host. I get the error. Of"request timed out".

    I can connect to the shell of ESXi and restart the vpxa services and spend. I can ping to esi IP host. but just cannot connect to it.

    earlier, he the host showed as disconnected in Vcenter. I tried to plug it failed. so I took it off I think can re add back. It did not work.

    I can just connect to client as esx host.

    kindly advice.

    Thank you

    Hello

    I am able to connect now.

    I noticed as I said previously, unable to connect to the localhost error when running esxcli. Unable to connect using the vsphere client. Unable to connect using VCenter.

    So I started to dig that's wrong with the OS esxi. and began running a few commands information esxcfg etc file system use of space, inode inconsistency, a few other commands such vdh, df to check the file system.  . and but has not changed anything. network configuration is correct.

    in these I run services.sh reboot, restart vpxa, pass reboot, restart host, check the logs, vmkernel, vpxa newspapers spend., check the date and time of the host.  I couldnot Firewall check since esxcli did not work. I haven't checked listed above step on the SSO.

    If you type esx and double tab, you will see many orders. I started testing on these orders.  so esxcli was a single command I tried later. It worked all of a sudden.

    Once esxcli has started working, I checked vsphere client to connect to esx host that it worked. then I was able to connect in Vcenter also.

    Thank you for your support

    -Caroline

    UNITED ARAB EMIRATES

  • Unable to connect the client via vsphere ESX host

    Dear team,

    Once I tried to connect to client host via vsphere ESX I m getting following error.

    err.JPG

    VCenter version: 4.1.0 345043

    vSphere client: 4.1.0 345043

    ESX Version: 4.1.0 721871

    You help me on the same request.

    concerning

    Mr. VMware

    It is usually advisable, but not an obligation, to have the build of your version of vCenter client correspondence.

    You can see the Interopabilty matrix for supported configurations

    http://PartnerWeb.VMware.com/comp_guide2/SIM/interop_matrix.php

  • SQL * Net more data from client wait event

    Hi all

    DB 11.2.0.2

    AIX 6

    I get two events of high expectation of the AWR report page

    (1) SQL * Net more data from client

    synchronization of log files 2)

    Need advice to the configuration of the hardware and network latency?

    What should I do for the first event of waiting?

    This simple average may, what they're doing massive data loads with a very large table size that the Oracle Server manages very effectively but necessarily expect much coming data of the customer and parallel large log files written to end on the validation.  It is possible that setting a large SDU and tcp large transmiat and receive buffers would help if this happens to be what they do; Similarly, if that's what they do, then reduce their size of table can also have some effect.

    Concerning

    Jonathan Lewis

  • Wait for the event begins with SQL * Net message from client-time wait 178577 units

    Hello

    I'm watching events waiting for a request from long time in TOAD.
    I start the query on an instance of TOAD, and open the browser to log on to another instance.
    But I am surprised to see that in "TOtal expected" on the RIGHT part->
    SQL * Net message from client is the longest time and is already - > 178577 units while I just to start the query.

    Considering that, in the current waiting she shows DB file scattered read correctly for a few seconds.

    Please suggest.

    user8941550 wrote:
    Hello. No explanation for this... :-(

    Hello

    people work here, you don't know?
    I think Tom Kyte explains it well enough. This wait event is linked to your session database waiting for the guest to say to do something.

    So it is not related to the database, but to your application.
    Also as it is a wait of session event you might have had your session inactive for some time (do nothing)

    If you want to check the waiting events correctly I suggest using tkprof and start a new session in SQL more as shown by Tom Kyte in the link I posted.

    Then, run your query in sqlplus setting track and pull it out as soon as your statement is completed.
    that is to say:

    -- myest.sql
    alter session set events '10046 trace name context forever, level 12';
    SELECT ... -- your query here
    exit
    

    Run in sqlplus in this way:

    sqlplus user/password@db @mytest.sql
    

    Then check with tkprof.

    Kind regards.
    Al

Maybe you are looking for