Tag Info

New answers tagged

0

I also experienced some issues connecting to my Raspberry Pi while connected to open hot spot (in my case it was Optimum WiFi) (SSH into my Raspberry Pi 2@Optimum WiFi - Raspberry Pi Stack Exchange). So, I'd like to share my way of getting into my Raspberry Pi 2 using this ssh reverse tunnel: pi@raspberrypi ~ $ crontab -l | tail -1 @hourly ssh -S ...


0

Nikita, you actually have a couple of options. I have setup RPs this way on dedicated power but with only a mifi card on a board. The simplest solution is to contact your ISP and request a public or static NAT IP address. Most wireless providers will do this but they may charge you for it. Verizon has a $500 charge per account but then you can setup as ...


1

I have found the solution! Indeed I had to extend my access-list on my outside interface!!! I have succeeded using ASDM. First I created a NEW network object for each of my servers. When you create a new object you will be asked for the internal IP address and "this is where the magic happens" you have to set the NAT IP address (the external address) !!! ...


0

Sometimes people should really use the ASDM for their ASA firewalls. There's no shame in it. I've managed hundreds of Cisco ASA devices and use a mix of 80:20 between working in the ASDM versus the command line. The packet tracer GUI is very easy and would tell you exactly where this is happening. There's a CLI equivalent as well. Anyway, all I have for ...


1

All you configuration looks fine and I can see that you have only allowed desired traffic to your servers using ACL. If you would like to anyone to be able to ping your server on public IP interface, you will need to add below ACL: access-list OutsideToInside extended permit icmp any any Or you can choose the servers instead of allowing ping to all/any.


1

The Windows host with vmware workstation, you will need to create a network and add both routers 1 & 2 to the same network or same switch so that one can reach other. In this way, routers would be able to broadcast their routing table and be able to forward packets to destination.


0

From what I understand, you have two internet connections on the router - I assume for redundancy. Can I assume that if Gi0/0/0 goes down, then Gi0/0 takes over your internet connection? If that is the case, then the reason the PAT translation stops working is because the public IP address that is used by Gi0/0/0 for port 3389 is no longer available Can ...


0

https://support.microsoft.com/en-us/kb/929852/en-us - I used the “Microsoft Fix it 50440” and “Microsoft Fix it 50444” tool on the client pc (expand table and the icons here are not advertisements, they are installers). These re-enable IPv6 on affected systems.


0

No idea what happened (I mean I'm a guy that can format re-install until he gets it right) but I managed to get DHCP and DNS servers to install and not bug me about domains or certificates or anything it's working now! Hallelujah All I can suggest is if you are having the same issues as me just make sure you don't do anything even remotely close to domain ...


0

I solved it by changing the netmask to 255.255.255.255 for all additional addresses and leaving only the default address unchanged. I hope this solve for you!


1

Although traffic can flow in both directions when NAT is in place, the important distinction is that without port forwarding, a server cannot "listen" for new connections on a specific port from hosts outside that network. Take the example of when one browses a web page. The important point here is that your browser is the client; it's reaching out to ...


1

Assuming you've checked the basics like ensuring that the access list is actually bound to the interface with the access-group command, if the logs are showing that the traffic is being denied, you can find out more information by simulating a packet with the packet-tracer command. That should tell you exactly why the packet is being rejected. Assuming your ...


2

Connection tracking. If the device connects from inside the NAT to outside, then related packets from the outside system are permitted in. This can be done with both TCP and UDP in some cases.


0

Yes, windows does have a iptables equivalent, it is via the tool netsh and the portproxy interface. The command to do what you want would be netsh interface portproxy add v4tov4 listenport=8080 connectport=80 Note, that this will only do IPv4 connections, if you also want to forward IPv6 connections you would also need to do netsh interface portproxy ...


1

Tero Kilkanen pointed me in the right direction on this, although it took a while for me to work out the syntax. It looks like iptables was confused regarding which IP the newly redirected data should go to. DNAT specifies the target port AND the target IP, so it works correctly now. The final commands I used were as follows: su root -c "/sbin/iptables -t ...


1

I think the security-level should be considered. You can ping from Inside to Outside, but the echo traffic must be allowed to go back to Inside.


0

I assume that you need rules for the ICMP (not IP) traffic to allow ping. First of all, you question could be duplicated to this one: How do you allow ICMP Echo Requests on a Cisco ASA 55xx Router? However, I use slightly another configuration to allow ping. From your question, I'm not sure on which interface you need to allow it, so I'll just post my ...


-2

You can use the 'deny all log' command in the ACL to see the realtime results of the 'implicit' deny all rule and go from there. It was called the 'explicit' deny all rule.. googling here it is edit: sounds like you may have already done this.


0

I did a little benchmarking. = Summary = Use bridged adapter if possible, it is much faster than NAT. For throughput on multiple connections (winner): --natsettings1 1500,64,64,64,1024 For throughput on single connection: --nictype1 Am79C973 I have heard good things about virtio in other environments. = Detailed measurements = # host os: ...


0

The technology you're looking for is called NAT64. Note that this will generally run on a router upstream of your IPv4-only service, rather than on the server itself. What to use to implement NAT64, and where in your network to put it, is going to depend on your existing network architecture and the services that need to be accessed using it. Speaking of ...


1

You need nat traversal (nat-t) or nat hole punching. This is a partial solution, as many nat gateways will not allow that. This means you'll need servers with public IPs to pass the traffic between restricted nat clients as part of your solution.


0

You don't use iptables. Change the default route on Server A to point to Server B. This is usually called gateway in the network configuration. Whenever Server A wants to send packets to anything that isn't on a local subnet it's attached to, it will send the packets to the gateway.


0

My tests showed this made my downloads worse. m3.large speedtest server m3.medium dedicated NAT server. No other traffic in this environment. sg on average Download speed: 292.19 sg off average Download speed: 259.21 My test was: for ((n=0;n<10;n++)); do speedtest-cli --simple ; done


0

Turns out there was another program on my network that was hogging my port 80 on another system. Figured it out after tracking the connection.



Top 50 recent answers are included