Hello,
We have a Library Catalog server that is hosted by the company that we
subscribe to their databases. It is a server dedicated to our school,
but hosted in their data center. They need to have LDAP access from
their outsourced box to our internal AD Controllers for LDAP
authentication
create an ACL allowing only access from their IP address to your NAT'd
address. Also, I'd put an SSL cert on your AD servers and use 636
instead...
On Fri, Nov 20, 2009 at 11:25 AM, Chyka, Robert bch...@medaille.edu wrote:
Hello,
We have a Library Catalog server that is hosted by the
Thanks for the extra pointer... Who has cheap certs? I haven't shopped
for one in a few years when we redid our Exchange box.
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, November 20, 2009 2:27 PM
To: NT System Admin Issues
Subject: Re: Cisco
.
--
*From:* Don Ely [mailto:don@gmail.com]
*Sent:* Friday, November 20, 2009 2:27 PM
*To:* NT System Admin Issues
*Subject:* Re: Cisco Question
create an ACL allowing only access from their IP address to your NAT'd
address. Also, I'd put an SSL cert on your AD servers and use 636
instead
Oh sweet... do we need a dedicated certificate server? Well I will
research instead of bothering you...
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, November 20, 2009 2:32 PM
To: NT System Admin Issues
Subject: Re: Cisco Question
Roll your own
GoDaddy
From: Chyka, Robert [mailto:bch...@medaille.edu]
Sent: Friday, November 20, 2009 2:29 PM
To: NT System Admin Issues
Subject: RE: Cisco Question
Thanks for the extra pointer... Who has cheap certs? I haven't shopped
for one in a few years when we
much prefer some kind of VPN setup directly to the box,
if possible.
From: Don Ely [mailto:don@gmail.com]
Sent: Friday, November 20, 2009 2:27 PM
To: NT System Admin Issues
Subject: Re: Cisco Question
create an ACL allowing only access from their IP address
Subject: RE: Cisco Question
I think opening port 389, even restricted by IP, over the internet is a
non-starter. That means that the logon credentials are being sent over
the internet in the clear. Make sure you insist on the SSL variant,
although I would note that I personally wouldn't even
: Friday, November 20, 2009 2:56 PM
To: NT System Admin Issues
Subject: RE: Cisco Question
Thanks for the great points!! So if we can't get a VPN setup, would you
fight to kill the project or would you trust the SSL cert encryption?
From: Mayo, Bill [mailto:bem
.
--
*From:* Chyka, Robert [mailto:bch...@medaille.edu]
*Sent:* Friday, November 20, 2009 2:56 PM
*To:* NT System Admin Issues
*Subject:* RE: Cisco Question
Thanks for the great points!! So if we can’t get a VPN setup, would you
fight to kill the project or would you trust
, Bill [mailto:bem...@pittcountync.gov]
Sent: Friday, November 20, 2009 2:13 PM
To: NT System Admin Issues
Subject: RE: Cisco Question
I could possibly live with the SSL encryption of the traffic if it was a short
term situation. You could probably make an argument that the VPN connection
isn't
No you can use something like selfssl to generate it.
Thanks,
Brian Desmond
br...@briandesmond.commailto:br...@briandesmond.com
c - 312.731.3132
From: Chyka, Robert [mailto:bch...@medaille.edu]
Sent: Friday, November 20, 2009 1:35 PM
To: NT System Admin Issues
Subject: RE: Cisco Question
Oh
Hello All
I was just wondering what is a daily life like of a Cisco engineer with
CCNA credentials who works for enterprise business. I am currently
senior engineer on the Server and firewall end and would like to make a
bridge into Cisco position. I have worked with Cisco 1700
:24 PM
Subject: RE: Cisco question...
Is the router connected to a Switch or a Hub?
Are both ends set to use Auto-Negotiation for Port Speed and Duplex.
It is possible that you are having a port speed/duplex mismatch which is
shutting down the interface.
Just a few thoughts.
Keith
: mail.kenmcphail.com [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 8:13 AM
To: NT System Admin Issues
Subject: Re: Cisco question...
Are you running any IPSEC or GRE tunnels on the device?
- Original Message -
From: Goldoff, Erik [EMAIL PROTECTED]
To: NT System Admin Issues [EMAIL PROTECTED]
Sent
text
email readers
Matthew Puckett MCSE, MCP+Internet, MCP
Sprint PCS IT Service Delivery
540-642-3734
[EMAIL PROTECTED]
-Original Message-
From: Keith Nelson [mailto:[EMAIL PROTECTED]]
Sent: Sunday, August 19, 2001 11:25 PM
To: NT System Admin Issues
Subject: RE: Cisco question
16 matches
Mail list logo
