ASA 8.2 No. Split Tunnel, NAT for internet does not

Similar Questions

• Windows - Internet access, no split Tunnel L2TP VPN Clients does not

  Greetings!

  I have four ASA 5505 that I configured with 4 site to site VPN tunnels (works perfectly) to connect to our company facilities 4. The ASA is also configured with remote access L2TP/IPsec so that a specific group of users of portable computers can connect to and access to all facilities. It also works very well except for one important exception - my split tunnel setting doesn't seem to work, because I can't connect to the Internet outside the VPN resources.

  I accept the inherent risk of allowing tunnels to split from a security point of view since I take the necessary steps to secure the systems used for remote access. I would appreciate any feedback on how to get the job of split tunnel.

  Here is the configuration:

  : Saved
  :
  ASA Version 1.0000 11
  !
  SGC hostname
  domain somewhere.com
  names of
  COMMENTS COMMENTS LAN 192.168.2.0 name description
  name 75.185.129.13 description of SGC - external INTERNAL ASA
  name 172.22.0.0 description of SITE1-LAN Ohio management network
  description of SITE2-LAN name 172.23.0.0 Lake Club Network
  name 172.24.0.0 description of training3-LAN network Southwood
  description of training3 - ASA 123.234.8.124 ASA Southwoods name
  INTERNAL name 192.168.10.0 network Local INTERNAL description
  description of name 192.168.11.0 INTERNAL - VPN VPN INTERNAL Clients
  description of Apollo name 192.168.10.4 INTERNAL domain controller
  description of DHD name 192.168.10.2 Access Point #1
  description of GDO name 192.168.10.3 Access Point #2
  description of Odyssey name 192.168.10.5 INTERNAL Test Server
  CMS internal description INTERNAL ASA name 192.168.10.1
  name 123.234.8.60 description of SITE1 - ASA ASA management Ohio
  description of SITE2 - ASA 123.234.8.189 Lake Club ASA name
  description of training3-VOICE name Southwood Voice Network 10.1.0.0
  name 172.25.0.0 description of training3-WIFI wireless Southwood
  !
  interface Vlan1
  nameif outside
  security-level 0
  IP address dhcp setroute
  !
  interface Vlan2
  nameif INSIDE
  security-level 100
  255.255.255.0 SGC-internal IP address
  !
  interface Vlan3
  nameif COMMENTS
  security-level 50
  IP 192.168.2.1 255.255.255.0
  !
  interface Ethernet0/0
  Time Warner Cable description
  !
  interface Ethernet0/1
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/2
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/3
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/4
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/5
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/6
  Description for Wireless AP Trunk Port
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  interface Ethernet0/7
  Description for Wireless AP Trunk Port
  switchport access vlan 2
  switchport trunk allowed vlan 2-3
  switchport vlan trunk native 2
  switchport mode trunk
  !
  boot system Disk0: / asa821-11 - k8.bin
  Disk0: / config.txt boot configuration
  passive FTP mode
  clock timezone IS - 5
  clock to summer time EDT recurring
  DNS domain-lookup outside
  INTERNAL DNS domain-lookup
  DNS domain-lookup GUEST
  DNS server-group DefaultDNS
  Name-Server 4.2.2.2
  domain somewhere.com
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  DM_INLINE_TCP_1 tcp service object-group
  EQ port 3389 object
  port-object eq www
  EQ object of the https port
  EQ smtp port object
  the DM_INLINE_NETWORK_1 object-group network
  network-object SITE1-LAN 255.255.0.0
  network-object SITE2-LAN 255.255.0.0
  network-object training3-LAN 255.255.0.0
  object-group training3-GLOBAL network
  Southwood description Global Network
  network-object training3-LAN 255.255.0.0
  network-object training3-VOICE 255.255.0.0
  network-object training3-WIFI 255.255.0.0
  DM_INLINE_TCP_2 tcp service object-group
  EQ port 5900 object
  EQ object Port 5901
  object-group network INTERNAL GLOBAL
  Description Global INTERNAL Network
  network-object INTERNAL 255.255.255.0
  network-object INTERNALLY-VPN 255.255.255.0
  access-list outside_access note Pings allow
  outside_access list extended access permit icmp any CMS-external host
  access-list outside_access note that VNC for Camille
  outside_access list extended access permit tcp any host CMS-external object-group DM_INLINE_TCP_2
  access-list outside_access note INTERNAL Services
  outside_access list extended access permit tcp any host CMS-external object-group DM_INLINE_TCP_1
  DefaultRAGroup_splitTunnelAcl list standard access allowed INTERNAL 255.255.255.0
  access-list sheep extended ip INTERNAL 255.255.255.0 allow INTERNAL VPN 255.255.255.0
  access-list extended sheep allowed ip IN-HOUSE-GLOBAL SITE1-LAN 255.255.0.0 object-group
  access-list extended sheep allowed ip IN-HOUSE-GLOBAL SITE2-LAN 255.255.0.0 object-group
  access-list extended sheep allowed ip object-IN-HOUSE-GLOBAL object group training3-GLOBAL
  access-list INTERNAL-to-SITE1 extended permit ip IN-HOUSE-GLOBAL SITE1-LAN 255.255.0.0 object-group
  access-list INTERNAL-to-training3 extended permitted ip object-IN-HOUSE-GLOBAL object group training3-GLOBAL
  access-list INTERNAL-to-SITE2 extended permit ip IN-HOUSE-GLOBAL SITE2-LAN 255.255.0.0 object-group
  no pager
  Enable logging
  exploitation forest asdm warnings
  Debugging trace record
  Outside 1500 MTU
  MTU 1500 INTERNAL
  MTU 1500 COMMENTS
  192.168.11.1 mask - local 192.168.11.25 pool IN-HOUSE VPN IP 255.255.255.0
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  ASDM image disk0: / asdm - 623.bin
  enable ASDM history
  ARP timeout 14400
  Global 1 interface (outside)
  (INTERNAL) NAT 0 access-list sheep
  NAT (INTERNAL) 1 0.0.0.0 0.0.0.0
  NAT (GUEST) 1 0.0.0.0 0.0.0.0
  5900 5900 Camille netmask 255.255.255.255 interface static tcp (GUEST, outdoor)
  3389 3389 Apollo netmask 255.255.255.255 interface static tcp (INDOOR, outdoor)
  public static tcp (INDOOR, outdoor) interface www Apollo www netmask 255.255.255.255
  public static tcp (INDOOR, outdoor) interface https Apollo https netmask 255.255.255.255
  public static tcp (INDOOR, outdoor) interface smtp smtp Apollo netmask 255.255.255.255
  5901 puppy 5901 netmask 255.255.255.255 interface static tcp (GUEST, outdoor)
  Access-group outside_access in interface outside
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  dynamic-access-policy-registration DfltAccessPolicy
  RADIUS protocol AAA-server Apollo
  Apollo (INTERNAL) AAA-server Apollo
  Timeout 5
  key *.
  AAA authentication enable LOCAL console
  the ssh LOCAL console AAA authentication
  AAA authentication LOCAL telnet console
  AAA authentication http LOCAL console
  Enable http server
  http 0.0.0.0 0.0.0.0 INTERNAL
  http 0.0.0.0 0.0.0.0 COMMENTS
  No snmp server location
  No snmp Server contact
  Community SNMP-server
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set esp-3des esp-sha-hmac TRANS_ESP_3DES_SHA
  Crypto ipsec transform-set transit mode TRANS_ESP_3DES_SHA
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  SYSTEM_DEFAULT_CRYPTO_MAP game 65535 dynamic-map crypto transform-set ESP-3DES-SHA TRANS_ESP_3DES_SHA
  correspondence address 1 card crypto outside_map INTERNAL SITE1
  card crypto outside_map 1 set of peer SITE1 - ASA
  card crypto outside_map 1 set of transformation-ESP-3DES-SHA
  address for correspondence card crypto outside_map 2 INTERNAL training3
  outside_map 2 peer training3 - ASA crypto card game
  card crypto outside_map 2 game of transformation-ESP-3DES-SHA
  address for correspondence outside_map 3 card crypto INTERNAL SITE2
  game card crypto outside_map 3 peers SITE2 - ASA
  card crypto outside_map 3 game of transformation-ESP-3DES-SHA
  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  outside_map interface card crypto outside
  crypto ISAKMP allow outside
  crypto ISAKMP policy 10
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  delimiter group @.
  Telnet training3 - ASA 255.255.255.255 outside
  Telnet SITE2 - ASA 255.255.255.255 outside
  Telnet SITE1 - ASA 255.255.255.255 outside
  Telnet 0.0.0.0 0.0.0.0 INTERNAL
  Telnet 0.0.0.0 0.0.0.0 COMMENTS
  Telnet timeout 60
  SSH enable ibou
  SSH training3 - ASA 255.255.255.255 outside
  SSH SITE2 - ASA 255.255.255.255 outside
  SSH SITE1 - ASA 255.255.255.255 outside
  SSH 0.0.0.0 0.0.0.0 INTERNAL
  SSH 0.0.0.0 0.0.0.0 COMMENTS
  SSH timeout 60
  Console timeout 0
  access to the INTERNAL administration
  Hello to tunnel L2TP 100
  interface ID client DHCP-client to the outside
  dhcpd dns 4.2.2.1 4.2.2.2
  dhcpd ping_timeout 750
  dhcpd outside auto_config
  !
  address INTERNAL 192.168.10.100 dhcpd - 192.168.10.200
  dhcpd Apollo Odyssey interface INTERNAL dns
  dhcpd somewhere.com domain INTERNAL interface
  interface of dhcpd option 150 ip 10.1.1.40 INTERNAL
  enable dhcpd INTERNAL
  !
  dhcpd address 192.168.2.100 - 192.168.2.200 COMMENTS
  dhcpd dns 4.2.2.1 4.2.2.2 interface COMMENTS
  enable dhcpd COMMENTS
  !

  a basic threat threat detection
  statistical threat detection port
  Statistical threat detection Protocol
  Statistics-list of access threat detection
  a statistical threat detection tcp-interception rate-interval 30 burst-400-rate average rate 200
  NTP server 192.43.244.18 prefer external source
  WebVPN
  allow outside
  CSD image disk0:/securedesktop-asa-3.4.2048.pkg
  SVC disk0:/sslclient-win-1.1.4.179.pkg 1 image
  SVC disk0:/anyconnect-win-2.4.1012-k9.pkg 2 image
  enable SVC
  Group Policy DefaultRAGroup INTERNAL
  attributes of Group Policy DefaultRAGroup
  Server DNS 192.168.10.4 value
  Protocol-tunnel-VPN l2tp ipsec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl
  value by default-domain somewhere.com
  Group Policy DefaultWEBVPNGroup INTERNAL
  attributes of Group Policy DefaultWEBVPNGroup
  VPN-tunnel-Protocol webvpn
  Group Policy DefaultL2LGroup INTERNAL
  attributes of Group Policy DefaultL2LGroup
  Protocol-tunnel-VPN IPSec l2tp ipsec
  Group Policy DefaultACVPNGroup INTERNAL
  attributes of Group Policy DefaultACVPNGroup
  VPN-tunnel-Protocol svc
  attributes of Group Policy DfltGrpPolicy
  value of 192.168.10.4 DNS Server 4.2.2.2
  VPN - 25 simultaneous connections
  VPN-idle-timeout no
  Protocol-tunnel-VPN IPSec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl
  value by default-domain somewhere.com
  the value INTERNAL VPN address pools
  chip-removal-disconnect disable card
  WebVPN
  SVC keepalive no
  client of dpd-interval SVC no
  dpd-interval SVC bridge no
  value of customization DfltCustomization
  attributes global-tunnel-group DefaultRAGroup
  VPN INTERNAL address pool
  Group Policy - by default-DefaultRAGroup
  IPSec-attributes tunnel-group DefaultRAGroup
  pre-shared-key *.
  Disable ISAKMP keepalive
  tunnel-group DefaultRAGroup ppp-attributes
  No chap authentication
  no authentication ms-chap-v1
  ms-chap-v2 authentication
  attributes global-tunnel-group DefaultWEBVPNGroup
  VPN INTERNAL address pool
  Group Policy - by default-DefaultWEBVPNGroup
  tunnel-group 123.234.8.60 type ipsec-l2l
  IPSec-attributes tunnel-group 123.234.8.60
  pre-shared-key *.
  tunnel-group 123.234.8.124 type ipsec-l2l
  IPSec-attributes tunnel-group 123.234.8.124
  pre-shared-key *.
  tunnel-group 123.234.8.189 type ipsec-l2l
  IPSec-attributes tunnel-group 123.234.8.189
  pre-shared-key *.
  type tunnel-group DefaultACVPNGroup remote access
  attributes global-tunnel-group DefaultACVPNGroup
  VPN INTERNAL address pool
  Group Policy - by default-DefaultACVPNGroup
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  inspect the http
  inspect the they
  !
  global service-policy global_policy
  context of prompt hostname
  Cryptochecksum:423c807c0d63cb3e9aeceda977053f84
  : end
  ASDM image disk0: / asdm - 623.bin
  ASDM location Camille 255.255.255.255 INTERNAL
  ASDM location INTERNAL CGT-external 255.255.255.255
  ASDM location INTERNAL SITE1-LAN 255.255.0.0
  ASDM location INTERNAL SITE2-LAN 255.255.0.0
  ASDM location INTERNAL training3-LAN 255.255.0.0
  ASDM location INTERNAL training3 - ASA 255.255.255.255
  ASDM location INTERNAL GDO 255.255.255.255
  ASDM location INTERNAL SITE1 - ASA 255.255.255.255
  ASDM location INTERNAL SITE2 - ASA 255.255.255.255
  ASDM location INTERNAL training3-VOICE 255.255.0.0
  ASDM location puppy 255.255.255.255 INTERNAL
  enable ASDM history

  I should also mention that my test clients are a combination of Windows XP, Windows 7, and Windows Mobile. Other that in specifying the preshared key and forcing L2TP/IPsec on the client side, the VPN settings on clients are the default settings with the help of MS-CHAP/MS-CHAPv2.

  You must configure * intercept-dhcp enable * in your group strategy:

  attributes of Group Policy DefaultRAGroup

  attributes of Group Policy DefaultRAGroup

  Server DNS 192.168.10.4 value
  Protocol-tunnel-VPN l2tp ipsec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list DefaultRAGroup_splitTunnelAcl
  value by default-domain somewhere.com

  Intercept-dhcp enable

  -Latptop VPN clients (which I assume are on windows computers) is also the * use on remote network default gateway * box unchecked.  It is located on the Advanced tab of VPN client TCP/IP properties.   Select Client VPN > properties > Networking > TCP/IP Internet Protocol > properties > advanced and uncheck the box.

  Alex

• TEREDO TUNNELING PSEUDO-INTERFACE DEVICE DOES NOT WORK CORRECTLY - ACCORDING TO AVG PC TUNE UP

  My laptop is a HP G7030EA - MS Windows Vista Home Basic 32-bit SP2 Intel Pentium Dual CPU T2330 @ 1.60 GHz, 1.0 GB RAM, Mobile Intel 965 Express Chipset Family, bought new in February 2008.  I have not changed any hardware, software, etc.  I do not use it for games, only for things such as e-mails and visit websites

  Until last month when my desktop computer broke, I used the laptop only occasionally as a backup of the computer.  It never quite worked and seems to be unable to handle several tasks at once, often taking minutes for Google to load.  When I get impatient and click the mouse too much I heard a horrible noise and the screen mouse cursor freeze for a minute or two.

  As the laptop has become my main computer at the moment, I downloaded AVG PC Tune Up to see if it would improve it performance has not helped.  I was surprised to see how much memory the AVG2013 anti virus program uses, but wonder if the speed of connection and freezing problems I experience result (AVG Tune Up conclusions on) the Teredo Tunneling pseudo-interface unit does not properly.

  I follow AVG on screen re boards: looking for a software driver update but none was found, and I got the message "the best driver for your device software is already installed.  Windows has determined that the driver software for your device is up-to-date, Tun Miniport, Microsoft Map.

  This left me confused.  If there is a problem with this device, no solution seems to exist.

  Any help that will allow my laptop to function normally is welcome.

  I understand that you want to know if the teredo adapter can cause performance problems.

  The teredo adapter should not cause performance problems.  It is really just used to allow devices work IPv4 with IPv6 Internet service provider.  If the ISP was using IPv6 and your system did not have the adapter teredo, so it wouldn't work properly with the service provider.  For now, IPv6 is a significant minority that the world continues to work on IPv4 as not all networks, Internet service providers, and businesses are not entirely passed to IPv6.

  This thread on the Microsoft forums goes into a little more detail about the adapter teredo including how to disable it so that you only see it in Device Manager.  Unless you are using IPv6, this shouldn't really be a problem.

  If you start in safe mode, the performance problem persists?  Turn on the computer and press F8 once per second for the Mode option, safe mode with networking.  This will help you to further isolate the performance problem.

  Furthermore, does this happen that the adapter is connected or not?

• Firefox for Mac does not recognize a valid SSL certificate

  Firefox for Mac does not recognize the SSL certificate that is valid for this site, I got: https://www.georgeglazer.com. It gives a warning "not reliable." However, the Firefox for Windows does not give a warning. This happens even if I clear the cache and it happens in the Mavericks and OS of Yosemite. The certificate is up-to-date and with Comodo. Firefox for Mac is now the only browser producing these errors (v. 39, put updated) - Internet Explorer, Safari and Chrome are not. Our hosting provider has said it's probably a browser issue, perhaps having to do with intermediate certificates in Firefox being obsolete. I really hope you'll solve the problem, as it's annoying for us when we're going to do right by our customers and pay for the SSL certificate. I have attached a picture of the warning and the other from what you see on a PC: a pop-up that says it is a verified SSL certificate and gives details about the issuer, the period of validity, etc.

  COMODO should you sent a link to download the file 'bundle' containing the intermediate certificates. Who needs to go in the same directory as the certificate of your site. If you are using a control panel, your host can probably help with this process. And if you bought through them, shame on them for not taking care of this for you already!

• the update of firefox 28 for mac does not, the bar just rotates, I can't get the update

  the update of firefox 28 for mac does not, the bar just rotates, I can't get the update. Thank you

  Hello

  Try to get the full version here:

  • All versions

  Then just install it.

• I'm having a problem where Firefox keeps asking for my password to Amazon, even if I tell Firefox NOT to remember this password. In Firefox options, Amazon is clearly recognized as a site for which does not save passwords.

  I'm having a problem where Firefox keeps asking for my password to Amazon, even if I tell Firefox NOT to remember this password. In Firefox options, Amazon is clearly recognized as a site for which does not save passwords.

  Do not remove the navigation, search and download history on Firefox to clear the "Site preferences".

  Compensation of the "Site Preferences" clears all exceptions for cookies, images, windows pop up, installation of software and passwords.

• Internet does not work on Windows 7, no drivers for the Wifi and LAN

  Original title: Windows 7

  I used to have Windows 8 on my laptop. Well, so I've updated for Windows 10. Config my laptop wasn't as good, so it's slow. Recently, I installed Windows 7 (as it is known for the performance) somehow, the internet does not work. Missing the drivers for the wifi and lan. What should I do?

  Well, as my readers usb and touch screen no longer work.

  You have installed Windows 7 on a machine that is preinstalled with Windows 8, without checking first if the computer manufacturer supported and provided Windows 7 drivers for it.

  If does not support or provide Windows 7 drivers for this, you should never have installed Windows 7 on this computer Windows 8 and we cannot help you.

  Reinstall Windows 8.

• Serial number for lightroom does not work

  my serial number for lightroom does not work

  Maritah has made education institution give you an indication of the place where you need to download the installation files from?

  You can download Lightroom 5.6 from the following locations:

  • Adobe - Lightroom: For Windows: Adobe Photoshop Lightroom 5.6
  • Adobe - Lightroom: For Macintosh: Adobe Photoshop Lightroom 5.6

  The updates contain the complete installation files and should accept your serial number.

• Adobe Photoshop Elements 12 for Mac does not in Applications. Tutorial for editing in iPhoto shows by selecting the Adobe software in Applications. Am I missing a step in product registration?

  Adobe Photoshop Elements 12 for Mac does not in Applications. Tutorial for editing in iPhoto shows by selecting the Adobe software in Applications. Am I missing a step in product registration?

  I answered my own question: there is a difference between "Download"and 'install'." Hunting the 'install' (1.5 hrs in my case) and align your passwords, Adobe ID, etc., then install. 15 min. The right choice appears in the Applications. However it is to understand why photo selected for editing in iPhoto does not display in the elements.

• For each does not properly in the XSLT file to two loops on a single node

  Hi all
  
  I'm transforming 2 inputs to a single target using XSLT. Both of the target entry of the same pattern and have the child element.
  In the XSLT, I gave this condition.
  "< xsl: for each select="$Variable1.payload/ns1:BookStore/ns1:Books ">
  < xsl: for-each select = "/ ns1:BookStore / ns1:Books" >
  "< xsl: if test="$Variable1.payload/ns1:BookStore/ns1:Books/ns3:BookId = ns3:Books / ns3:BookId ">
  
  My second for each does not work and in the target, I'm getting double elements. Help, please. Here are two xml source and xml desired target.
  1 XML source:
  
  < bookStore >
  < book >
  Name1 < name > < / name >
  author1 < author > < / author >
  < ID > 1 < / BookId >
  < quantity > 2 < / quantity >
  < price > < price / >
  < status > < / status >
  < book >
  < book >
  name2 < name > < / name >
  Author2 < author > < / author >
  < ID > 2 < / BookId >
  < quantity > 2 < / quantity >
  < price > < price / >
  < status > < / status >
  < book >
  < book >
  < name > NAME3 < / name >
  author of 3 < author > < / author >
  < ID > 3 < / BookId >
  < quantity > 2 < / quantity >
  < price > < price / >
  < status > < / status >
  < book >
  < / book >
  
  XML source 2:
  
  < bookStore >
  < book >
  < name > < / name >
  < author > < / author >
  < quantity > < / quantity >
  < ID > 1 < / BookId >
  < price > 100 < / price >
  < status > < / status >
  < book >
  < book >
  < name > < / name >
  < author > < / author >
  < quantity > < / quantity >
  < ID > 2 < / BookId >
  < price > 200 < / price >
  < status > NA < / status >
  < book >
  < book >
  < name > < / name >
  < author > < / author >
  < quantity > < / quantity >
  < ID > 3 < / BookId >
  < price > 300 < / price >
  < status > < / status >
  < book >
  < / book >
  
  Desired target XML:
  
  < bookStore >
  < book >
  Name1 < name > < / name >
  author1 < author > < / author >
  < ID > 1 < / BookId >
  < quantity > 2 < / quantity >
  < price > 100 < / price >
  < status > < / status >
  < book >
  < book >
  name2 < name > < / name >
  Author2 < author > < / author >
  < ID > 2 < / BookId >
  < quantity > 2 < / quantity >
  < price > 200 < / price >
  < status > NA < / status >
  < book >
  < book >
  < name > NAME3 < / name >
  author of 3 < author > < / author >
  < ID > 3 < / BookId >
  < quantity > 2 < / quantity >
  < price > 300 < / price >
  < status > < / status >
  < book >
  < / book >
  
  Thank you

  Hello

  It will not work like that... To do something like the following... Only one for each...

  
    
    
      ns1:Name
      ns1:Author
      ns1:BookId
      $Variable1.payload/ns1:BookStore/ns1:Books[ns1:BookId = $bookId]/Quantity
      $Variable1.payload/ns1:BookStore/ns1:Books[ns1:BookId = $bookId]/Price
      $Variable1.payload/ns1:BookStore/ns1:Books[ns1:BookId = $bookId]/Status
    
  
  

  I don't have to check the syntax, but you get the idea...

  I hope this helps...

  See you soon,.
  Vlad

• Page break problem &lt;? split-of-page-break:? &gt;-does not work.

  Hello
  
  I need a page break, after every row.
  <? split-of-page-break:? >-does not work.
  < xsl: attribute name = "break-before" > page < / xsl: attribute >-does not work.
  I can send RTF and XML files.
  
  Does anyone know how can I solve this problem?
  Thank you

  Send me the model and the XML file at [email protected]. I'll take a look.

  Thank you!

• two DMVPN rays behind the ASA made hide NAT for Internet

  This scenario requires that the particular configuration of the ASA? Until now, the installation program does not work, we face the following problem:

  The nodal point DMVPN shows an error "invalid SPI", because the two rays to come with the same IP address (ASA hide-NAT) to the DMVPN hub.

  THX

  Holger

  Using an IP address for the two rays?  This is not going to work

• parallel for loops does not

  Hello.

  I'm learning the multi - thread programming. To start, I use "parallel for loops" and I was surprised that it does not work. One - thread loop work a few times faster (depending on settings) that multi - thread. I don't know why, and it is my request to correct my Vi to work properly.

  Lenovo, G580, Windows 7, 64-bit computer

  Intel Core i7 3632QM
  Ivy Bridge
  Specification Intel (r) Core i7-3632QM CPU @ 2.20 GHz
  Package (platform ID) Socket 988 B rPGA (0x4)
  Number of hearts 4
  Number of threads 8

  LabView 2011.

  Altenbach says:
  

  Gibbon wrote:

  What was 'strange' behavior?  In "linia dluga" when inside the loop is on '1' of the "spreed up' between one and multi-fil is about 3 times, when I put it in '20' this grow to 6.2. It was strange form me, becourse I expect a similar value.

  A parallel FOR loop has an overhead for parallelization (split the problem, then go back the results, etc.). If the code is very fast, the overhead is proportionally larger. If the Subvi takes a long time to complete, the overhead of parallelization is insignificant. It is often not worthwhile to parallelize the loops with a very simple and fast code.

  Gibbon wrote:

  Altenbach - I have another question if you can help me - how did you "seconds relative high resolution." VI "? -I want to say how did you know that there is this 'vi '. And thanks a lot for your modyfications.

  You can find it in vi.lib\utilities. It is well known.

  Maybe not well known enough!  the 'Hidden gems' package adds to your palattes.  It has also been considered by a nugget of the community

• File server for Windows does not work after security update

  I just upgraded the security update that was released last week and all of a sudden the computers windows cannot access the server. I'm under 10.11.6 and everything was great until we started windows computers today. They can ping and access the internet, but they cannot access SMB on the server.

  Macs have no connection problems in the SMB and AFP.

  Any ideas, what has changed? Users of server are all still there and it seems like it should work. I can access the web page of servers too.

  Make sure you are including the domain in the user name when signing in. for example USER: groupe_travail

  Also, check that your windows machine has the correct set of LM compatibility level. For El Cap servers must be set to 3.

  Follow the instructions below to change the Windows security settings to allow Windows SMB connections.

  1. Click on the Start button and in the bottom search bar, type regedit . Select search results regedit and the registry opens.
  2. Using the folders on the left side of the screen, navigate through the tree to the following location: \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  3. In the right window, find the following DWORD value: LmCompatibilityLevel . If it exists, double-click it and set the value to 3 (in decimal).  If it does not exist, right-click in an empty space in the right part of the window and create a new DWORD value called LmCompatibilityLevel and set its value to 3 (in decimal).
  4. Restart the computer.
  5. Re-try to connect to the server via the workstation.

  NOTE: The versions Home of windows may not the ability to set the LM, and unfortunately I have not found a way around that.

• iCloud Drive backup for apps does not work

  iPhone 6

  Version 9.3.4 (G 13, 35)

  64 GB

  iCloud free space Total: 127 GB

  Hello

  My drive to iCloud for the backup of data to any application (example; WhatsApp, TurboScan, etc.) doesn't work at all, for all he always ask me to check in the settings of iCloud drive if the rocker is enabled for the application, I intend to use, what is.

  I already did:

  Alternate market the iCloud drive and for each application, I was trying

  Open a session and of the iCloud account

  Reset the phone

  Turn on/off

  Any that have faced this problem or have any idea of how solve it?

  Thank you very much in advance for the comments and support.

  See you soon,.

  DOM

  Just to be clear, iCloud backup & iCloud drive are essentially two separate things.

  This can be useful, iCloud is primarily a service synchronization. Means that it can take the changes you make on one device and other devices to update this change if you do not have to be done individually on each device. Useful if you have more device. iCloud Drive is the term used for the part of iCloud that can synchronize files between your devices, just like Dropbox. iCloud backup is the backup of live data to iCloud part. Sync services aren't backups, just a way for your data reach another device.

  On your iPhone, if you go to:

  Settings > general > Srorage & use iCloud > manage storage (under iCloud) > [phone] (BACKUPS)

  You can see what data is stored for each application (Tap 'Show all Apps' if necessary).

  For the iCloud drive problems, this article may help:

  Get help using iCloud drive - Apple Support

  If this does not help, try rephrasing your question with exactly you have problems with and ask again.