Integrate the VI Client with NTLM or Kerberos

Similar Questions

• The dynamic firewall application on the VPN Clients with ASA

  Hello

  I'll put up a Cisco ASA to complete the remote VPN client connections, but I want to assure you that the dynamic firewall is enabled on the client.

  I know it's possible with the VPN concentrator, but cannot see any documentation detailing that can be performed on an ASA.

  Anyone encountered this?

  Thank you

  James

  I believe you can use Group Policy settings to configure the firewall client.

  You can find more information about this feature in the migration to http://www.cisco.com/en/US/docs/security/asa/asa72/vpn3000_upgrade/upgrade/guide/migrate.htmlguide.

  Hope this helps.

  Andrea.

  Step 1 under Configuration > VPN > General > Group Policy Panel, select group policy in the table and

  Click on change. ASDM displays the Edit Group Policy dialog box.

  Step 2: click on the customer Firewall tab Figure 5-6 shows the firewall client options configured for this example:

  • Inherit-disabled (disabled)

  • The required Firewall Firewall setting

  • Type firewall Cisco Integrated Client Firewall

  Firewall policy-policy (CPP) pushed •

• How to integrate the Java Application with OSB

  Hi, I'm a new guy with OSB and we plan to integrate the project with OSB, the exchange of existing project data type is REST JMS and NIO(Apache MINA).

  Could you any body show me how to configure the JMS/REST/NIO in OSB, and how java application call the proxy service maybe OSB?

  For example, the producer will push the message in the jms queue and s Comsumer will pull the message from the queue, java application is sufficient to bind the JDNI queue to identify the queue. But if set up in OSB, how java application to trigger the OSB proxy service to push the message in the jms queue and also how to consume?

  Thank you.

  It is certainly not necessary, because the current solution works for you.

  There may be some advantages however. OSB allows, for example, to disconnect the Server publication and the queue in the sense of identification information. OSB only could credentials to the actual queue, and the editor know only the creds to its own queue of the entry. Or to implement more complex logic that updates the latest version of the consumer - made demand to separate release dates for the producer and the consumer, who, in case of different vendors is a HUGE pain.

  OSB is the proverbial extra level of indirection that allows to solve any problem in IT. If you do not have a problem still though that obviously is not necessary a solution.

  Vlad

  http://genericparallel.com

• Complete the VI Client with PowerCLI Script idle Sessions

  Hello gurus PowerCLI

  I searched the net for a script PowerCLI that would end all the VI client sessions that have been inactive for x period of time.  I found a post on the forums of VMware (http://communities.vmware.com/message/914858?z=zI0r8n) but had no luck with it.  I also found a script created by A.Mikkelsen, to http://www.amikkelsen.com/?p=384 , but that one does not work either.

  Here's the actual script by A.Mikkelsen that is based on code by LucD in the forum mentioned previously.

  BEGINNING

  ##################################################################################
  # The script terminates all sessions if idle idle user for more than xx #.
  #                             #
  # Created by: Anders Mikkelsen, 2010 #.
  ##################################################################################
  Claire
  # Add - PSSnapin VMware.VimAutomation.Core

  # $server = "vcenter server.
  # $user = "vcenter username.
  # $pwd = "password of vcenter.

  # Add 1 extra hour when, due to the difference of timestamp between MSSQL and Windows.
  # slow down time 5 hours = 360
  # 10 hours slowed = 660
  $intOlderThan = 60

  # Connect-VIServer $server - user $user-password $pwd
  # Connect-VIServer $server

  $svcRef = new-object VMware.Vim.ManagedObjectReference
  $svcRef.Type = 'ServiceInstance.
  $svcRef.Value = 'ServiceInstance.
  $serviceInstance = get-views $svcRef

  $sessMgr = get-view $serviceInstance.Content.sessionManager
  $oldSessions = @)
  {foreach ($sess in $sessMgr.SessionList)}
  If (($sess.)) (LastActiveTime) .addminutes ($intOlderThan) - lt (Get-Date)) {}
  $oldSessions += $sess. Key
  #write "$($sess.)". User name)'
  }
  }

  # Session terminal that are inactive for more than approved ($intOlderThan)
  $sessMgr.TerminateSession ($oldSessions)

  Disconnect-VIServer *-confirm: $false

  END

  The error message I get is:

  BEGINNING

  Exception calling 'TerminateSession' with '1' or the arguments: "it was not correct to specified parameters.

  "

  D:\Scripts\vc_terminate_idle_sessions.ps1:36 char: 26

  + $sessMgr.TerminateSession < < < < ($oldSessions)

  + CategoryInfo: NotSpecified: (:)) [], MethodInvocationException)

  + FullyQualifiedErrorId: DotNetMethodException

  END

  I should mention that my knowledge of PowerCLI is almost nothing, so any help in tweaking this script to make it work with PowerCLI 5.1 Release 2 and VC 5 U2 would be much appreciated.

  The error is caused by the fact that you are trying to kill your own session (if it was started long time ago).

  Apparently in vSphere 5. they included a security mechanism integrated to avoid this.

  You can take this by adding a simple test.

  ## max number of idle minutes for sessions to keep$intOlderThan = 60$serviceInstance = Get-View 'ServiceInstance'## get the session manager object$sessMgr = Get-View $serviceInstance.Content.sessionManager## array to hold info about stale sessions$oldSessions = @()foreach ($sess in $sessMgr.SessionList){    if (($sess.LastActiveTime).addminutes($intOlderThan) -lt (Get-Date) -and          $sess.Key -ne $sessMgr.CurrentSession.Key){        $oldSessions += $sess.Key    } ## end if} ## end foreach
  
  ## if there are any old sessions, terminate them; else, just write message to the Warning streamif (($oldSessions | Measure-Object).Count -gt 0) {    ## Terminate sessions than are idle for longer than approved ($intOlderThan)    $sessMgr.TerminateSession($oldSessions)} ## end ifelse {Write-Warning "No sessions that have been idle for more than '$intOlderThan' minutes; no action taken"}
  

• The requested operation is not implemented by the server when you try to access the VI Client with ESX hosts

  Hello

  We have problems with the VirtualCenter (which someone else works).  I need to access some of the virtual machines and tried to connect through the VI client to all ESX hosts.  I get this error after I give him password, username, and hostname:

  The requested operation is not implemented by the server.

  I'm sure I got this race last year.

  A reflection as to why it does not work?

  Thank you!

  Hello.

  How you launch the client?  Is it a shortcut with possibly a few settings in there?  If so, try running it without parameters.

  Good luck!

• How to integrate the glass fish with Oracle JDeveloper application server

  Hello
  is someone's idea on... can we integrate server with Jdeveloper glass fish...
  I have to use the application server with the oracle Jdeveloper glass fish,
  If one achieve this feature before... Please suggest me the steps... How can I do this
  
  thanking you :)
  Nikhil

  Hello

  There is no support yet as server integrated into JDev Glasfish currents

  Frank

• Integrate the outputs analog with analog inputs

  I have a program that displays 2 analog output waves and a separate program that captures the analog data through several materials of NEITHER. I need to integrate the program outputs analog in my analog input program.

  The program of analog output is fixed as "AO_Triggers_LowLevel.vi" and the analog input is fixed as "ExperimentDAQ.vi". When I try and integrate these programs I get 'error-200560 occurred at DAQmx waiting until the Done.vi' to my function to wait until it makes my task of analog input (background of the program). I think it is my mistake in the order that I'm wiring to the top of my son of error but I'm not sure. I watched several tutorials (Timing and synchronization features of DAQmx) but I'm totally stuck.

  Any suggestions are greatly appreciated. Thank you!

  Alberto M.

  I think I've fixed this problem. I extended my flat sequence structure to include the lines of task and error of my task outputs analog and things seem to work.  I'm still not sure about what caused my error and why it has solved the problem...

• How to integrate the Service Note with space webservice?

  Hello
  
  Can anyone please guide me how to integrate * "Rating Service" * with webcenter spaces. I need to implement "Personal Note" in my space webcenter application. Please can someone give me the article showing the procedure step by step the service note implemennt with webcenter spaces or a few examples of the sample.
  
  Concerning
  REDA

  Go to the Webcenter spaces-> administration-> resources-> make a copy of the catalogue of resources-> change the copy->, click Add symbol-> add library-> taskflows select tab

  Here you see the list of takflows that you can add to the catalogue of resources.
  Here you can choose the lists of links, notes, service etc...

  Hope that clears it :-)

• Integrate the discoverer 11g with OAM 11 g

  Hello

  We configure SSO for Discoverer and now we want to use a VIP so our Base URL should be changed. Currently access us using discoverer the below URL: http://discovererdev01:8888/discoverer/more we use the below URL instead, rather than to use the name of the computer, we use the alias http://discod.mycomapny.com/discoverer/plus inside OAM, we changed the base URL for http://discod.mycomapny.com copied to the new mod_osso.conf to the discoverer restarted OSH OSH , but it gives us the error of SSO is not to recognize the new url.

  Is there something else we need to do. Here is the error that we

  System error. Please try your action again. If you continue to receive this error, contact the administrator.

  Thank you

  OHS is installed and where discovererdev01.mycompany.com is the real hostname of the machine running

  http://discovererdev01.mycompany.com:8888

  We have OAM SSO Agent that works very well with the above URL and hitting http://discovererdev01:8888/discoverer/more we are directly connected in

  users access disco using discoverer/more/http://discovererdev01:8888 which is a problem when we do DR, so we created a new VIP and use a Global load balancer our OSH, to transmit all requests for http://discod.mycomapny.com . In this way, we don't have to hit discoverer by using the actual host name and instead use the ALIAS discod.mycomapny.com in the case of DR only change to happen to global load balancing.

  So we updated the URL off in OAM SSO Agent of http://discovererdev01:8888 to http://discod.mycomapny.com and copied to new osso.conf to the ESO server and restarted the OHS and OAM. But when hitting http://discod.mycomapny.com/discoverer/plus get the error in the browser

  System error. Please try your action again. If you continue to receive this error, contact the administrator.

  Still the same error in FireFox as FireFox, it should pop up for the OAM login screen but looks not so it does not hit OAM when using VIP. It only works when we use the real hostname of the machine.

  Here's what we have in the file mod_wl_ohs.conf of OSH

  WebLogicCluster discovererdev01.mycompany.com:7003

  DynamicServerList off

  NameVirtualHost *: 8888

  ServerName discovererdev01.mycompany.com

  ServerAlias discod.mycomapny.com

  RewriteEngine ON

  RewriteOptions inherit

  # RewriteRule ^ / $ http://discoa/discoverer/plus [R]

  SetHandler weblogic-Manager

  WebLogicCluster discovererdev01.mycompany.com:9008

  SSLEngine off

  We've even created a new SSO Agent, but still no luck. If you're wondering how it works when using VIP instead of the host names of the real machine. Or is that what I'm missing. Whoever did this, you will appreciate any input to solve this problem.

  Thank you

• The VMware Client with VDR plugin installed error

  

  I initially just uninstalled the client and reinstalled, does not resolve the issue.

  Then I uninstalled client and all the plugins and started to install one by one until I found the vdr plugin is causing this problem. To confirm that I uninstalled vdr plugin... no error... reinstalled vdr plugin... error.

  Versions:

  VDR 2.0

  vCenter Server 4.1

  Client VMware 4.1

  Anyone seen this before? I couldn't really find much research...

  I've heard of support: this is a known bug and a patch is being developed.  There is currently no work around for this problem (other than uninstalling the plug).

  See you soon,.

  Sean

• What happens to the volume clients with plans to upgrade?

  We are a TLP customer nonprofit with a few dozen licenses for the Creative Suite, InDesign autonomous, things like that. When we buy new licenses, we always buy plan upgrade. And keep us abreast of upgrade plans - management like the fact that we can predict costs for Adobe software two years to come.

  Related PDF says:

  Make your software more predictable budget

  Anticipate delays and updates of your software licenses current prices can be difficult, but Adobe updates budgeting doesn't have to be. By investing in Upgrade Plan, your organization can lock a price fixed for all licenses for future upgrade which are released during the term of your coverage period.* Upgrade Plan that takes the guesswork out of budgeting software and you buy software of tomorrow at today's prices. A percentage of the cost of the license, your organization gets access to the latest products of Adobe, which simplifies software management and stabilizing the budget forecasts. In addition, upgrade Plan costs can be paid in advance or by means of annual payments, allowing flexibility in the buying process.

  I could not find any information on what is happening to our upgrade plan. (And when I called Adobe CS, I was disconnected after only 70 minutes to hold. "And when I tried the CS chat, they told me to call). Something has been posted or said about the institutions with upgrade plan coverage?

  Joel, I have been informed that we will need to look at your specificities, to advise on the best option for you.  Contact our team of Volume Licensing at http://helpx.adobe.com/x-productkb/policy-pricing/avl-help.html.

• How does integrate the Elements 9 with Lightroom?

  I use Lightroom, but wants to recover a part of the Assembly of the Elements 9 power but while staying in Lightroom.

  I've noticed in Adobe, Lightroom information. There is integration between CS5 and Lightroom but Adobe says nothing on the elements.

  How do, or only the 9 elements fit into Lightroom?

  You will be editing an RGB-converted in PSE, not the NEF image - nothing can change the NAVE, but because of the integration, LR will not need to create to TIF on the path by PSE because it uses silently ACR to open the EPS file.  When you save off PSE, you save like some other filetype that NAVE, TIF, PSD, JPG, or your choice, and LR must stack as you do with your workflow "Topaz".

  The integration will work better if you're in the same compatible version of LR and ACR, where the latest versions of each are 3.4.1 LR and ACR 6.4.1.

• Trying to set up the VPN Client with crossed on ASA5510

  Hello

  I'm putting in place our ASA5510 so that users can connect to our LAN to work and surf the Internet as well.

  I followed the guide from Cisco, I connect and I give myself a 192.168.10.x necessary address but I can't connect what on our network of 10.0.0.0/24 or surf the Internet work.

  Could someone please check my config and see what's wrong, there's also a vpn L2L here in a 192.168.3.0 network, but that works without problems

  Thank you very much

  Chris

  Hello Chris,

  Add after access list statement.

  INSIDE_nat0_outbound to access ip 10.0.0.0 scope list allow 255.255.255.0 192.168.10.0 255.255.255.0

  And for the aggregation of internet traffic add following command:

  permit same-security-traffic intra-interface

  Verify and validate the results.

  HTH

  Sangaré

  pls rate helpful messages

• How to integrate the object javascript with my plugin in c ++

  Hi all

  I have the code snippet, in a sample in the sdk, as follows:

  AVDoc avDoc = AVAppGetActiveDoc();

  {if(avDoc==null)}

  If no doc is loaded, take a message.

  strcat (str, "There is no PDF document in Acrobat.");

  }

  else {}

  If a PDF document is open, get his number of pages

  PDDoc pdDoc = AVDocGetPDDoc (avDoc);

  int numPages = PDDocGetNumPages (pdDoc);

  int cnt = 0;

  for (int p = 0; p < numPages; p ++)

  CNT = getPageNumWords (p); = > How to get number of words/sentences/paragraph count in a pdf document, because this method is javascript

  }

  I have three ideas.

  1. use AVExecuteThisJavaScript. There is a problem, because I don't see how you could get back a reply.

  2. you may use OLE as an external application (not completely sure if this will cause a blockage).

  3. use methods based on plug-ins. To get a PDWordFinder instance and check the returned number (be sure to avoid leakage of bad).

• Terminating the VPN client on 871W

  Hello

  I tried to install EasyVPN on a cisco 871W by SDM. The goal is to finish the VPN client with authentication with an external RADIUS/advertising (on a local subnet). I implemented the IAS on a win2003 Server advertising and checked the accounts.

  SDM was missing the 'crypto map' piece of config. After you add this in the CLI it still didn't work. Thus, EasyVPN is not as easy at is sounds...

  Could someone with some knowledge of VPN and IPsec and so forth please look at this config? Maybe it gives me an idea of what I did wrong (which, without a doubt, must be the case).

  Thank you

  Erik

  ==

  AAA new-model
  !
  AAA rad_eap radius server group
  auth-port 1645 10.128.7.5 Server acct-port 1646
  !
  AAA rad_mac radius server group
  !
  AAA rad_acct radius server group
  !
  AAA rad_admin radius server group
  !
  AAA server Ganymede group + tac_admin
  !
  AAA rad_pmip radius server group
  !
  RADIUS server AAA dummy group
  !
  AAA authentication login default local
  AAA authentication login eap_methods group rad_eap
  AAA authentication login mac_methods local
  AAA authentication login sdm_vpn_xauth_ml_1 local
  AAA authorization exec default local
  AAA authorization ipmobile default group rad_pmip
  AAA authorization sdm_vpn_group_ml_1 LAN
  AAA accounting network acct_methods
  action-type market / stop
  Group rad_acct
  !
  !
  !
  AAA - the id of the joint session
  clock timezone MET 1
  clock to DST DST PUTS recurring last Sun Mar 02:00 last Sun Oct 02:00
  !
  Crypto pki trustpoint TP-self-signed-1278336536
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 1278336536
  revocation checking no
  rsakeypair TP-self-signed-1278336536
  !
  !
  TP-self-signed-1278336536 crypto pki certificate chain
  certificate self-signed 01
  3082024A 308201B 3 A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 31312F30
  69666963 31323738 33333635 6174652D 3336301E 170 3039 31303237 32313237
  32395A 17 0D 323030 31303130 30303030 305A 3031 06035504 03132649 312F302D
  4F532D53 5369676E 656C662D 43 65727469 66696361 74652 31 32373833 65642D
  33363533 3630819F 300 D 0609 2A 864886 01050003, 818, 0030, 81890281 F70D0101
  81008B 56 5902F5DF FCE1A56E 3A63350E 45956514 1767EF73 FEC6CD16 7E982A82
  B0AF8546 ABB3D35A B7C3A7E3 3ACCB34A 8B655C97 F103DBD5 9AAEFEFC 37A 02103
  4EFC398B 0C8B6BE5 AD3E568E 6CB69F87 CBCA0785 EAED0A28 726F2F0A B0B0453E
  32E6B3B7 861F87FA 222197DD 3410D8A9 35939E9B CBF95F20 B8DA6ADE BF460F5C
  BF8F0203 010001A 3 72307030 130101 1 FF040530 030101FF 301D 0603 0F060355
  551 1104 16301482 12444341 4E495430 302E6361 6E2D6974 2E657530 1F060355
  1 230418 30168014 84C9223E 661B2EB4 5BAB0B0E 1BE3A27A 64B3AEB0 301D 0603
  551D0E04 16041484 C9111E66 1B2EB45B AB0B0E1B E3A27A64 B3AEB030 0D06092A
  010104 05000381 8693B 599 70EC1F1A D2995276 F3E4AF9D 81002F4A 0D 864886F7
  17E3583A 46C749F9 38743E6F F5E60478 5B9B5091 E944C689 7BA6DCA2 94D2FBD3
  AFDE4500 A0A3644E 603A852D 55ED7A87 93501D5C 1662DAED 3FFFEC5A F1C38ED4
  E0787561 BA5C14A3 6D065FCF 7DBDEBB6 9186C2D9 AA253FBF A9E38BC3 342C3AC9
  2BEF6821 E4C50277 493AD5B6 2AFE
  quit smoking
  dot11 syslog
  !
  IP source-route
  !
  !
  DHCP excluded-address IP 10.128.1.250 10.128.1.254
  DHCP excluded-address IP 10.128.150.250 10.128.150.254
  DHCP excluded-address IP 10.128.7.0 10.128.7.100
  DHCP excluded-address IP 10.128.7.250 10.128.7.254
  !
  pool IP dhcp VLAN30-COMMENTS
  import all
  Network 10.128.1.0 255.255.255.0
  router by default - 10.128.1.254
  10.128.7.5 DNS server
  -10.128.7.5 NetBIOS name server
  aaa.com domain name
  4 rental
  !
  IP dhcp VLAN20-STAFF pool
  import all
  Network 10.128.150.0 255.255.255.0
  router by default - 10.128.150.254
  10.128.7.5 DNS server
  -10.128.7.5 NetBIOS name server
  aaa.com domain name
  4 rental
  !
  IP dhcp SERVERS VLAN10 pool
  import all
  Network 10.128.7.0 255.255.255.0
  router by default - 10.128.7.254
  10.128.7.5 DNS server
  -10.128.7.5 NetBIOS name server
  aaa.com domain name
  4 rental
  !
  !
  IP cef
  no ip domain search
  IP domain name aaa.com
  inspect the tcp IP MYFW name
  inspect the IP udp MYFW name
  No ipv6 cef
  !
  Authenticated MultiLink bundle-name Panel
  !
  VPDN enable
  !
  !
  !
  username privilege 15 secret 5 xxxx xxxx
  !
  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  !
  ISAKMP crypto client configuration group vpn
  key xxxx
  pool SDM_POOL_1
  netmask 255.255.255.0
  !
  !
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  !
  crypto dynamic-map SDM_DYNMAP_1 1
  market arriere-route
  !
  !
  card crypto SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
  map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1 crypto
  client configuration address map SDM_CMAP_1 crypto answer
  map SDM_CMAP_1 65535-isakmp dynamic SDM_DYNMAP_1 ipsec crypto
  !
  Crypto ctcp port 10000
  Archives
  The config log
  hidekeys
  !
  !
  !
  Bridge IRB
  !
  !
  interface Loopback0
  10.128.201.1 the IP 255.255.255.255
  map SDM_CMAP_1 crypto
  !
  interface FastEthernet0
  switchport access vlan 10
  !
  interface FastEthernet1
  switchport access vlan 20
  !
  interface FastEthernet2
  switchport access vlan 10
  !
  interface FastEthernet3
  switchport access vlan 30
  !
  interface FastEthernet4
  no ip address
  Speed 100
  full-duplex
  PPPoE enable global group
  PPPoE-client dial-pool-number 1
  No cdp enable
  !
  interface Dot11Radio0
  no ip address
  Shutdown
  No dot11 extensions aironet
  !
  interface Vlan1
  address IP AAA. BBB. CCC.177 255.255.255.240
  no ip redirection
  no ip proxy-arp
  NAT outside IP
  no ip virtual-reassembly
  No autostate
  Hold-queue 100 on
  !
  interface Vlan10
  SERVER description
  no ip address
  IP nat inside
  no ip virtual-reassembly
  No autostate
  Bridge-group 10
  Bridge-group of 10 disabled spanning
  !
  interface Vlan20
  Description of the STAFF
  no ip address
  IP nat inside
  no ip virtual-reassembly
  No autostate
  Bridge-group 20
  Bridge-group 20 covering people with reduced mobility
  !
  Vlan30 interface
  Description COMMENTS
  no ip address
  IP nat inside
  no ip virtual-reassembly
  No autostate
  Bridge-group 30
  Bridge-group 30 covering people with reduced mobility
  !
  interface Dialer1
  MTU 1492
  IP unnumbered Vlan1
  no ip redirection
  no ip proxy-arp
  NAT outside IP
  inspect the MYFW over IP
  IP virtual-reassembly
  encapsulation ppp
  Dialer pool 1
  Dialer-Group 1
  PPP authentication pap callin
  PPP pap sent-name of user password 7 xxxx xxxxx
  !
  interface BVI10
  Description the server network bridge
  IP 10.128.7.254 255.255.255.0
  IP nat inside
  IP virtual-reassembly
  !
  interface BVI20
  Description personal network bridge
  IP 10.128.150.254 255.255.255.0
  IP nat inside
  IP virtual-reassembly
  !
  interface BVI30
  Bridge network invited description
  IP 10.128.1.254 255.255.255.0
  IP access-group Guest-ACL in
  IP nat inside
  IP virtual-reassembly
  !
  pool of local SDM_POOL_1 192.168.2.1 IP 192.168.2.100
  IP forward-Protocol ND
  IP route 0.0.0.0 0.0.0.0 Dialer1
  IP http server
  access-class 2 IP http
  local IP http authentication
  IP http secure server
  IP http secure ciphersuite 3des-ede-cbc-sha
  IP http secure-client-auth
  IP http timeout policy slowed down 60 life 86400 request 10000
  !
  !
  overload of IP nat inside source list 101 interface Vlan1
  IP nat inside source static tcp 10.128.7.1 25 AAA. BBB. Expandable 25 CCC.178
  IP nat inside source static tcp 10.128.7.1 80 AAA. BBB. CCC.178 extensible 80
  IP nat inside source static tcp 10.128.7.1 443 AAA. BBB. CCC.178 extensible 443
  IP nat inside source static tcp 10.128.7.1 8333 AAA. BBB. CCC.178 extensible 8333
  IP nat inside source static tcp 10.128.7.2 25 AAA. BBB. Expandable 25 CCC.179
  IP nat inside source static tcp 10.128.7.2 80 AAA. BBB. CCC.179 extensible 80
  IP nat inside source static tcp 10.128.7.2 443 AAA. BBB. CCC.179 extensible 443
  IP nat inside source static tcp 10.128.7.2 8333 AAA. BBB. CCC.179 extensible 8333
  IP nat inside source static tcp 10.128.7.3 25 AAA. BBB. Expandable 25 CCC.180
  IP nat inside source static tcp 10.128.7.3 80 AAA. BBB. CCC.180 extensible 80
  IP nat inside source static tcp 10.128.7.3 443 AAA. BBB. CCC.180 extensible 443
  IP nat inside source static tcp 10.128.7.3 8333 AAA. BBB. CCC.180 extensible 8333
  IP nat inside source static tcp 10.128.7.4 25 AAA. BBB. Expandable 25 CCC.181
  IP nat inside source static tcp 10.128.7.4 80 AAA. BBB. CCC.181 extensible 80
  IP nat inside source static tcp 10.128.7.4 443 AAA. BBB. CCC.181 extensible 443
  IP nat inside source static tcp 10.128.7.4 8333 AAA. BBB. CCC.181 extensible 8333
  IP nat inside source static tcp 10.128.7.5 25 AAA. BBB. Expandable 25 CCC.182
  IP nat inside source static tcp 10.128.7.5 80 AAA. BBB. CCC.182 extensible 80
  IP nat inside source static tcp 10.128.7.5 443 AAA. BBB. CCC.182 extensible 443
  IP nat inside source static tcp 10.128.7.5 8333 AAA. BBB. CCC.182 extensible 8333
  IP nat inside source static tcp 10.128.7.6 25 AAA. BBB. Expandable 25 CCC.183
  IP nat inside source static tcp 10.128.7.6 80 AAA. BBB. CCC.183 extensible 80
  IP nat inside source static tcp 10.128.7.6 443 AAA. BBB. CCC.183 extensible 443
  IP nat inside source static tcp 10.128.7.6 8333 AAA. BBB. CCC.183 extensible 8333
  IP nat inside source static tcp 10.128.7.7 25 AAA. BBB. Expandable 25 CCC.184
  IP nat inside source static tcp 10.128.7.7 80 AAA. BBB. CCC.184 extensible 80
  IP nat inside source static tcp 10.128.7.7 443 AAA. BBB. CCC.184 extensible 443
  IP nat inside source static tcp 10.128.7.7 8333 AAA. BBB. CCC.184 extensible 8333
  IP nat inside source static tcp 10.128.7.8 25 AAA. BBB. Expandable 25 CCC.185
  IP nat inside source static tcp 10.128.7.8 80 AAA. BBB. CCC.185 extensible 80
  IP nat inside source static tcp 10.128.7.8 443 AAA. BBB. CCC.185 extensible 443
  IP nat inside source static tcp 10.128.7.8 8333 AAA. BBB. CCC.185 extensible 8333
  IP nat inside source static tcp 10.128.7.9 25 AAA. BBB. Expandable 25 CCC.186
  IP nat inside source static tcp 10.128.7.9 80 AAA. BBB. CCC.186 extensible 80
  IP nat inside source static tcp 10.128.7.9 443 AAA. BBB. CCC.186 extensible 443
  IP nat inside source static tcp 10.128.7.9 8333 AAA. BBB. CCC.186 extensible 8333
  IP nat inside source static tcp 10.128.7.10 25 AAA. BBB. Expandable 25 CCC.187
  IP nat inside source static tcp 10.128.7.10 80 AAA. BBB. CCC.187 extensible 80
  IP nat inside source static tcp 10.128.7.10 443 AAA. BBB. CCC.187 extensible 443
  IP nat inside source static tcp 10.128.7.10 8333 AAA. BBB. CCC.187 extensible 8333
  IP nat inside source static tcp 10.128.7.11 25 AAA. BBB. Expandable 25 CCC.188
  IP nat inside source static tcp 10.128.7.11 80 AAA. BBB. CCC.188 extensible 80
  IP nat inside source static tcp 10.128.7.11 443 AAA. BBB. CCC.188 extensible 443
  IP nat inside source static tcp 10.128.7.11 8333 AAA. BBB. CCC.188 extensible 8333
  IP nat inside source static tcp 10.128.7.12 25 AAA. BBB. Expandable 25 CCC.189
  IP nat inside source static tcp 10.128.7.12 80 AAA. BBB. CCC.189 extensible 80
  IP nat inside source static tcp 10.128.7.12 443 AAA. BBB. CCC.189 extensible 443
  IP nat inside source static tcp 10.128.7.12 8333 AAA. BBB. CCC.189 extensible 8333
  !
  Guest-ACL extended IP access list
  deny ip any 10.128.7.0 0.0.0.255
  deny ip any 10.128.150.0 0.0.0.255
  allow an ip
  IP Internet traffic inbound-ACL extended access list
  allow udp any eq bootps any eq bootpc
  permit any any icmp echo
  permit any any icmp echo response
  permit icmp any any traceroute
  allow a gre
  allow an esp
  !
  access-list 1 permit 10.128.7.0 0.0.0.255
  access-list 1 permit 10.128.150.0 0.0.0.255
  access-list 1 permit 10.128.1.0 0.0.0.255
  access-list 2 allow 10.0.0.0 0.255.255.255
  access-list 2 refuse any
  access-list 101 permit ip 10.128.7.0 0.0.0.255 any
  access-list 101 permit ip 10.128.150.0 0.0.0.255 any
  access-list 101 permit ip 10.128.1.0 0.0.0.255 any
  Dialer-list 1 ip Protocol 1
  !
  !
  !
  !
  format of server RADIUS attribute 32 include-in-access-req hour
  RADIUS-server host 10.128.7.5 auth-port 1645 acct-port 1646 borders 7 xxxxx
  RADIUS vsa server send accounting
  !
  control plan
  !
  IP route 10 bridge
  IP road bridge 20
  IP road bridge 30
  Banner motd ^.
  Unauthorized access prohibited. *
  All access attempts are logged! ***************

  ^
  !
  Line con 0
  password 7 xxxx
  no activation of the modem
  line to 0
  line vty 0 4
  access-class 2
  privilege level 15
  transport input telnet ssh
  !
  max-task-time 5000 Planner
  AAA.BBB.CCC.ddd NTP server
  end

  Erik,

  The address pool you are talking about is to assign to the customer or the public router interface?  If you want to set up your vpn client software point a full domain name instead of an IP address that you can do it too long you can ensure the use of the name is resolved by a DNS SERVER.

  The range of addresses that you can be asigned to your Dialer interface will depend on your ISP.

  -Butterfly