Remote access suitable for BMC on PE T110II

Similar Questions

• Remote access VPN for IOS router

  Hi all

  I'm trying to implement remote access with Split tunneling to a Cisco 2801.  I can connect to the VPN profile and access to the internet, but I am unable to ping/scope of devices (10.10.10.X) inside.  Vpn users receive assignments to correct addresses in the 172.15.10.X range.  I see that my PC remotely is sending packets to devices but receives nothing in return.  Here's what my Config looks like... any ideas on things to look at would be great!

  Thank you

  crypto ISAKMP policy 1

  BA 3des

  preshared authentication

  Group 2

  ISAKMP crypto key address x.x.x.x cisco123

  ISAKMP crypto key address x.x.x.x cisco123

  !

  Configuration group customer isakmp crypto VPN_Client

  key *.

  DNS 64.89.70.2 64.89.74.2

  pool SDM_POOL_1

  ACL 120

  Max-users 25

  netmask 255.255.255.0

  !

  !

  ISAKMP crypto sdm-ike-profile-1 profile

  match of group identity VPN_Client

  client authentication list sdm_vpn_xauth_ml_1

  ISAKMP authorization list sdm_vpn_group_ml_1

  client configuration address respond

  virtual-model 1

  Crypto isakmp SiteA profile

  Keychain myring

  function identity address 1.1.1.1 255.255.255.255

  address FastEthernet0/0

  Profile of crypto isakmp Site2

  key-Atlanta

  function identity address 2.2.2.2 255.255.255.255

  address FastEthernet0/0

  !

  !

  Crypto ipsec transform-set esp - aes 192 esp-sha-hmac AES192

  Crypto ipsec transform-set esp-3des esp-sha-hmac SDM_TRANSFORMSET_1

  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

  Crypto ipsec transform-set esp-3des esp-md5-hmac 3DES-MD5

  Crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac

  !

  Profile of crypto ipsec SDM_Profile1

  game of transformation-ESP-3DES-SHA1

  isakmp-profile sdm-ike-profile-1 game

  !

  !

  dynamic-map crypto RA - 10 card

  the value of the transform-set AES192 ESP - 3DES - SHA1 ESP - 3DES - SHA SDM_TRANSFORMSET_1 3DES-MD5

  market arriere-route

  !

  !

  map SDM_CMAP_1 1 ipsec-isakmp crypto

  Description Tunnel to 3.3.3.3

  defined peer 3.3.3.3

  the value of the transform-set AES192 ESP - 3DES - SHA1 ESP - 3DES - SHA SDM_TRANSFORMSET_1 3DES-MD5

  PFS group2 Set

  SiteA Set isakmp-profile

  match address 105

  map SDM_CMAP_1 2 ipsec-isakmp crypto

  Description Tunnel to 4.4.4.4

  defined peer 4.4.4.4

  the value of the transform-set AES192 ESP - 3DES - SHA1 ESP - 3DES - SHA SDM_TRANSFORMSET_1 3DES-MD5

  PFS group2 Set

  Set the SiteB isakmp-profile

  match address 106

  map SDM_CMAP_1 isakmp ipsec dynamic map RA 10 crypto

  !

  !

  !

  !

  !

  interface FastEthernet0/0

  Description * Outside ETH - LAN *.

  IP 174.1.1.2 255.255.255.224

  NAT outside IP

  IP virtual-reassembly

  automatic duplex

  automatic speed

  map SDM_CMAP_1 crypto

  !

  !

  interface FastEthernet0/1

  Description * inside the ETH - LAN *.

  10.10.10.254 IP address 255.255.255.0

  IP nat inside

  IP virtual-reassembly

  automatic duplex

  automatic speed

  !

  !

  interface Serial0/1/0

  no ip address

  Shutdown

  !

  !

  type of interface virtual-Template1 tunnel

  IP unnumbered FastEthernet0/0

  ipv4 ipsec tunnel mode

  Tunnel SDM_Profile1 ipsec protection profile

  !

  !

  local IP SDM_POOL_1 172.15.10.1 pool 172.15.10.50

  IP forward-Protocol ND

  !

  IP high speed-flyers

  Top 10

  Sorting bytes

  !

  IP http server

  IP http secure server

  IP nat source list 110 interface FastEthernet0/0 overload

  overload of IP nat inside source list 110 interface FastEthernet0/0

  IP route 0.0.0.0 0.0.0.0 174.1.1.1

  !

  access-list 105 allow ip 10.10.10.0 0.0.0.255 172.20.0.0 0.0.255.255

  access-list 105 allow ip 172.15.10.0 0.0.0.255 172.20.0.0 0.0.255.255

  access-list 106 allow ip 10.10.10.0 0.0.0.255 192.168.42.0 0.0.0.255

  access-list 110 deny ip 10.10.10.0 0.0.0.255 172.15.10.0 0.0.0.255

  access-list 110 deny ip 10.10.10.0 0.0.0.255 172.20.0.0 0.0.255.255

  access-list 110 deny ip 10.10.10.0 0.0.0.255 192.168.1.0 0.0.0.255

  access-list 110 permit ip 172.15.10.0 0.0.0.255 any

  access-list 110 permit ip 10.10.10.0 0.0.0.255 any

  access-list 111 allow ip 10.10.10.0 0.0.0.255 any

  access-list 120 allow ip 10.10.10.0 0.0.0.255 172.15.10.0 0.0.0.255

  access-list 120 allow ip 172.20.0.0 0.0.255.255 172.15.10.0 0.0.0.255

  Note access-list 130 SDM_ACL category = 17

  access-list 130 permit udp host 4.2.2.2 eq field all

  access-list 130 allow esp 65.79.168.6 host 174.141.59.195

  access-list 130 allow ip host 65.79.168.6 174.141.59.195

  access-list 130 ip allow a whole

  VPN clients connecting to the F0/0 interface (where the card encryption is applied) or to the

  interface virtual-template?

  What happens if you do the following:

  ISAKMP crypto sdm-ike-profile-1 profile

  No virtual-model 1

  Disconnection/reconnection.

  Federico.

• Remote access for PXI with DAQmx

  I have a PXI chassis with a real-time embedded (PXI-8186) controller and some modules DAQ (PXI-6259) x 2. I've been programming this via LabWindows with a kind of client-server of RT - UI thing by using network variables and others. For some applications, it would be enough and more convenient to be able to interact with the PXI hardware directly from a connected PC network DAQ.

  The controller running a VISA server, it seems that I could connect to a remote machine with a kind of viOpen ("visa://pxi.somewhere.com//PXI0::15:INSTR"); ") and then contact a particular data acquisition card. But I can't find any information on the programming of the 6259 in any way other than DAQmx or similar.

  First question then: is the interface PXI - 6259 VISA described anywhere?

  More practical would be to continue to use DAQmx, through something like DAQmxCreateDOChan (taskHandle,"pxi.somewhere.com//Dev1/port0/line0:4",...)

  I found references to what we call 'Remote access appliance', for example:

  http://digital.NI.com/public.nsf/allkb/5CC9792C6CD4A34C862565BC0072D5DF

  that seems to put in place something equivalent, but I don't find it to watch it in MAX:

  Start-> all programs-> National Instruments-> NI - DAQ-> the remote device access server

  and I've seen suggestions that maybe it isn't that for traditional DAQ or only pre 7.0, or in any other way was no longer applicable.

  Second question: "Remote device access" are always and how to I install/activate it on my PXI controller?

  Someone at - it clues as to the foregoing, or any other way to get the same kind of features?

  Thank you

  Mike Schacht

  LANL

  Hello Mike,.

  Remote device access was a feature in NOR-DAQ traditional long just now.  This feature was not worn on OR-DAQmx because the framework it was built on does not really correspond with the need of modern times for network security.

  Unfortunately, there is no functionality you describe by saying to DAQmx.  Currently, this type of control is limited to deploying applications to the target of RT.  While the VISA is used for some parts of the DAQmx interaction, these function calls are not documented.  Someone else on the forums may be able to help if they tried to implement something like this in the past.

  Good luck!

• Call for cold scam to allow remote access to my computer

  I was cold called by telephone by a person claiming to work using Windows. I was invited to allow remote access check for errors from the window and was invited to make a Paypal payment for a renewal of my windows. This payment would require me to enter passwords to Paypal, etc while this technician was still working on the computer. Is it a scam? The technician left a reference code and phone number.

  I was cold called by telephone by a person claiming to work using Windows. I was invited to allow remote access check for errors from the window and was invited to make a Paypal payment for a renewal of my windows. This payment would require me to enter passwords to Paypal, etc while this technician was still working on the computer. Is it a scam? The technician left a reference code and phone number.

  It's absolutely a scam.  Microsoft is not / will not make these calls.

  Do not always allow remote access to your PC to someone who calls you out of the blue...
  You can call your local police department to ask if they follow this (given that the appellant gave a phone number.)  But, I guess the number is false or leads to a place outside the country, or...?

• alternatives to LogMeIn Pro for remote access?

  Greetings.  Currently, we have systems in the United States, Switzerland and the Mexico that I supported via remote access using LogMeIn Pro.  We paid for a subscription before free LMI Pro has been abandoned even to appreciate the characteristics of LMI Pro.  But as LMI has eliminated this free service, it seems their subscription rate more than doubled each year.  We currently need remote access to 3 Macs and 2 units of Windows (ew).

  Last year, we paid $174. for the annual subscription in support of these 5 systems.  I just checked on the price of renewal and it shows $349.00 for renewal.  This is getting too expensive!

  Last year, I invested in ARD to support my mother MacBook and the MacBook from an old friend, rather than pay LMI for a subscription in support of these systems.  ARD was a good alternative for these systems, but it is not a realistic alternative to remote systems for charity I help support.  Partly because of the PC, also because what it requires port forwarding in the router and finally because I have to be at my computer to use ARD to access those other systems.  LMI offers the possibility to access systems through an iOS app and can be used by other members of the team of charity, anywhere in the world everyone is physically located.  That's why we have maintained the LMI Pro subscriptions for a number of years.

  But with the perennial increase rate of LMI ridiculous (I think they can take their pricing of Obamacare), I'm on my eternal quest for an alternative to remote access.

  Can anyone offer advice?

  Thank you very much for your review,

  Dee Dee in Florida

  There are:

  -Apple Back to My Mac

  Set up and use Back to My Mac - Apple Support

  -Team Viewer free for non-commercial and paid for commercial use.

  -GoToMyPC, it also works with Mac

• Best router for incoming Windows remote access

  Hello
  you have a question of a client that is located on an Active Directory Server with a box of Windows Server 2008 running the remote access server. What firewall might recommend that allow connections from the Internet on to the incoming client Windows box?

  See you soon,.
  / Mattias

  The FVS336G in a connection between an 'internal' client and server RAS plays no role on the same local network and is not actually involved in out connections - it needs to have pptp passthrough, but that's all.

  You may have completely disabled on your 336 port forwarding and you still get the results you report.

  First question - the RAS have internet access?
  Second question - what do you mean by "inbound NAT?

  I have quit using pptp (ipsec spent) earlier but memory everything that is required on the router is to forward port 1723 for the SAR and if you use a dynamic WAN ip address, you must also configure a form any dynamic DNS - DynDNS has worked for me.

  For the FVS338 (and probably the 336) - just to add a receptive service and select pptp in unrolling menu, select always allow, and enter the address of the RAS.

• Remote access client 2.0.1 for Mac OS 10.4.11 connection to the remote server running Windows Server 2008 R2

  I have a mac with OS 10.4.11 and I try to access a remote server running Windows Server 2008 R2.  I have installed, uninstall and reinstall the Client of remote access for Mac 2.0.1 but I can not connect.  My network administrator tells me that Mac OS 10.4.11 is so old and useless that I am better just throw my computer and buy a new one in order to solve the problem.  This is absurd.  Can you help me?

  Hi Benjamin Spicer,.

  Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for Windows Server on TechNet. Please post your question in the Forums TechNet Remote Desktop Services (Terminal Server Services).

• RT: Remote desktop says "cannot find a device suitable for C drive.

  Hello

  There is a french position on exactly the same topic, but I can't apply the solution given here.

  My problem is this: I have a remote, ready to work as a target RT Office. It has been verified for compatibility, the hard drive has been formatted to FAT32, it was found by my host and received a static ip address. I installed the software, I need (LabView RT 9.0) using MAX. Now, when I try to boot with the option 'start using software installed on your hard drive', all I get is the message

  "Cannot find a device suitable for C drive.

  I have reset the BIOS, tried to format the drive hard in the other format, uninstalled and reinstalled the software, tried to start the pc target without the USB, but nothing seems to work.

  You have ideas on what goes wrong?

  Thank you

  Samuel

  Have you tried changing the settings of the BIOS for the hard disk controller?

  There could be different modes available.

  Refer to the hard drive of this document: http://zone.ni.com/devzone/cda/tut/p/id/8239?OpenDocument

• Where can I get a download for Windows XP Service Pack 3 disc? I remote access service and cannot download it online.

  PeoplePC disconnected until the download is complete; Therefore, it loses data downloading and Service Pack 3 does not boot to Windows. Computer must be retrieved from partition-all installed programs must be re-installed or downloaded again. It takes some days with the remote access service.

  You can order a CD from Microsoft or download online.

  "How to obtain the latest Service Pack for Windows XP"
    <>http://support.Microsoft.com/kb/322389 >
  HTH,
  JW

• Static IP remote access for the media center

  I NMH410 work through a WRT610N router.   My ports are configured for static IP access.  Seems to just going through www.ciscomediahub.com does not work well for me.

  Can someone provide the 'exact' URL I would enter in order to access my media center?

  Documentation of assistance through Cisco shows: https://Wan_IP_Address but that doesn't seem to work.  The demand is just there and finally once outside.

  To everyone:

  Apparently, I discovered and corrected the problem that I had with 'Remote access' to my Media Hub.

  Somehow, there are two configurations of router that had to be done.  On two port forwarding configurations has been necessary and once allowed me to access the media center.

  It seems that my ISP has a 192.168.x.x address router that was different from the address of my router 192.168.x.x.  It is on the home router when I incoming and make changes to the information of port forwarding.  The fact that I was getting an error message indicating that I wasn't even reached my router alerted me to the fact that my ISP was blocking remote access.  In the end, that's where my problem was discovered.

  Translate:

  If you have problems to access your media "at a distance" pole through its IP address (and not by the cisco media center), make sure that you configure the ports of the router specified by your Internet provider address, as well as the ports of the router that you have on your network home.

  I have forwarded port 443 on the two addresses of router port, and I can now access my media hub remotely.  Now if I can't play videos remotely, I'll be set.  This leads to another problem that I'll send it in another thread.

  Thanks for the help and suggestions of each.

• Try to set up remote access for Foscam babyphone. Windows Vista & I have A Westell router. I can't understand this helps :(

  Im trying to set up remote access for a babyphone Foscam (Fl8918W). I worked on it all day.  No matter what I do, I can't get the camera to get on my computer (or iPhone).

  Here's some of what I've done so far...

  -Camera configuration and find the IP address

  -Type the IP address of the camera in the browser and camera open (it uses Active X)

  -Change Port number of the camera (Guide suggested using 2000)

  -Now you can type the IP address and the port number in the browser and access camera

  -Complete the Port forwarding on the router (I did this several times using each option that I could understand. Finally, I think that I did it correctly because it looked like he turned on - but I don't really know.  "I couldn't get any real information on the Port Forwarding for my Westell A90-750045-07).

  -Access using the public IP address.  It did not work at all. I had to find my IP address for my computer/network (which I did) then open my browser and type the IP address followed by: 2000 (new port). The camera was then to open in the browser, but it did not work.

  -IP service.  Management said that the device could be available over the internet using a public IP address. He told me to go on No - IP and sign up for the free service.  After the signing, I was directed to create a host name.  I managed to do it.

  -L' direct access of the ACTIVE camera address No - IP.  I was directed to type my address No - IP (hostname) in my browser, followed by: and the Port number (: 2000). He said that I should then able to access my camera from a computer or mobile app on the Internet using this address.  This does not at all.

  -J' tried to make it work with my iPhone. I was directed to download and install an application called Live Cams Pro - by Eggman Technologies.  He then ordered me to add a camera. I chose the correct model of Foscam, entered the IP address (or my No - IP address) WITHOUT port number, then on another line, I entered the Port number, entered my user name and password and click Save.  Nothing ever came and finally the connection times out.

  I did all the change of option combinations in each stage as many times I could think.  All I could change in these steps, I tried all the options I could.  I can't make it work.

  I'm so frustrated.  I'm not a computer person.  I managed to do a lot of things by reading the instructions carefully.  I read the Foscam Installation Guide and the next babyphones instruction manual (I bought the camera from the company).  Nothing I've tried works.

  Any direction would be greatly appreciated.

  Thank you!

  Did you put the IP cameras as a destination / local IP?
  If this is not the case, do.

  Aside from that, the best would be to contact the manufacturer of your router for assistance with how to correctly forward ports to your camera.

• ASA 5510 VPN for remote access clients are asked to authenticate on box

  Don't know what's the matter, but my remote access users are invited to join the ASA before connecting to the tunnel. How can I disable this? Config is attached. Thank you all -

  For remote access connections, you can turn off the prompt xauth (user/pass) with the following:

  Tunnel ipsec-attributes group

  ISAKMP ikev1-user authentication no

  -heather

• Smartphones blackBerry for PC remote access

  Is there any application for Blackberry to have remote access to the PC? for example, logmein or similar to microsoft mobile 6.5? Thnx

  Hello and welcome!

  Take a look at RDM + (aka RDM liked) by Shape Services. You can find it in the App World or here: http://www.rdmplus.com/rdm/bb/index.html

  I think this will do what you need. There is a free trial to use and review before you buy.

  Good luck

  Ray K.

• Mapping strategies for VPN remote access to specific accounts

  I have an ASA firewall with the Anyconnect VPN configuration on it. For this VPN policies are below:

  internal SSLClientPolicy group strategy
  attributes of Group Policy SSLClientPolicy
  value x.x.x.x DNS server
  client ssl-VPN-tunnel-Protocol
  by default-field x.x.x.x
  the address value SSLClientPool pools
  attributes of Group Policy DfltGrpPolicy
  value x.x.x.x DNS server
  by default-field x.x.x.x
  internal GroupPolicy1 group strategy
  attributes of Group Policy GroupPolicy1
  Ikev1 VPN-tunnel-Protocol

  type tunnel-group SSLClientProfile remote access
  attributes global-tunnel-group SSLClientProfile
  Group Policy - by default-SSLClientPolicy
  tunnel-group SSLClientProfile webvpn-attributes
  enable SSLVPNClient group-alias

  I want to activate tunneling split for one user, but current policy restricts it. Is there a way to create a separate policy for a user and map it to him somehow? I do not see where I'd

  Hello

  Yes, you can create a separate group for this user name policy, and then assign this group policy under the attribute of the user. For example:

  SPLIT_ACL standard access list allow X.X.X.0 255.255.255.0

  internal group USER_POLICY strategy
  USER_POLICY-group policy attributes
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list SPLIT_ACL

  username splituser password Cisco

  vpnuser username attributes
  VPN-group-policy USER_POLICY

• How to use ACS 5.2 to create a static ip address user for remote access VPN

  Hi all

  I have the problem. Please help me.

  Initially, I use ACS 4.2 to create the static ip address for VPN remote access user, it's easy, configuration simply to the user defined > address assignment IP Client > assign the static IP address, but when I use ACS 5.2 I don't ' t know how to do.

  I'm trying to add the IPv4 address attribute to the user to read "how to use 5.2 ACS", it says this:

  1Ajouter step to attribute a static IP address to the user attribute dictionary internal:

  Step 2select System Administration > Configuration > dictionaries > identity > internal users.

  Step 3click create.

  Static IP attribute by step 4Ajouter.

  5selectionnez users and identity of the stage stores > internal identity stores > users.

  6Click step create.

  Step 7Edit static IP attribute of the user.

  I just did, but this isn't a job. When I use EasyVPN client to connect to ASA 5520, user could the success of authentication but will not get the static IP I set up on internal users, so the tunnel put in place failed. I'm trying to configure a pool of IP on ASA for ACS users get the IP and customer EasyVPN allows you to connect with ASA, everything is OK, the user authenticates successed.but when I kill IP pool coufigurations and use the "add a static IP address to the user 'configurations, EzVPN are omitted.

  so, what should I do, if anyboby knows how to use ACS 5.2 to create a user for ip address static for remote access VPN, to say please.

  Wait for you answer, no question right or not, please answer, thank you.

  There are a few extra steps to ensure that the static address defined for the user is returned in the Access-Accept. See the instuctions in the two slides attached