Configure the PIX 501 for IDS

Similar Questions

• Help the PIX 501 - cannot access startup.html

  I'm new to the network and has received a job to configure the PIX 501 firewall.

  The fact is:

  We use IP table rules as a firewall on a linux machine. My pc is connected to a switch. So I use the yellow network cable to connect the port of the Pix 501 0 to the port in the switch. Then I disconnect my pc of swich cable and plug into the port of the Pix 501 1.

  My pc is to use a static ip address before. I try to change to automatically get an IP address, but it will not work. So I changed the setting and use the IP address originally. Pop up message network connection icon says that the local connection is enabled. But when I try to ping 192.168.1.1, request time-out. Also I can't acess the https://192.168.1.1/startup.html.

  I have a look at Books Online cisco and shootings of disorder, but most of them talk about the configuration or more advance features. I'm still on the very basic level to try to connect to the firewall.

  I hope someone can help me. All ideas and questions are welcome. Thank you.

  Your IP address should be fine. You do not want to have the PIX connected to your local network, even if you have the Linux firewall as well as this will cause a conflict. Keep the PIX the LAN for now. Your DNS configuration will have no effect because the url you are trying to reach is based on the IP address and not the domain name if your PC has nothing to look for.

  You have to check the cable that you use - if your PIX has only an 'inside' interface, then you must use a crossover cable. If he has four so it's built in switch for a straight cable will be fine. Is what PIX model?

  After checking the cable - see if you can console in the firewall - use the blue cable that came with the PIX and set up a connection (hyper terminal) terminal with the help of 9600, 8, no 1. If you can console and then you can stick in a basic configuration you can get.

• default configuration of the pix 501 past recovery/restoration

  You need to reset the PIX 501 (lost password). I tried the password recovery instructions and accesses the monitor command by using the connection of the console, but cannot get the file to be transferred using tftp (ping command also expires).

  1. in case ordering interface be set to 0 or 1 (I used 1)

  2. the order of the address I was using 192.168.1.1

  3. order the server, I was using the IP address of the tftp server

  4. entry door? (Which is the PIX or the computer)?

  5. in addition to the blue console cable that if all other cables should be connected and which ports.

  Thank you

  I'm guessing you already have this document:

  http://www.Cisco.com/en/us/customer/products/HW/vpndevc/ps2030/products_password_recovery09186a008009478b.shtml

  I would like to use the default value inside of the interface of the 1. Connect a standard ethernet cable to one of the Interior ports on the PIX and the other to your PC that has the server tftp on it of the interface software. Make sure that you see a link on both ends light. If not, take this cable or save it if you think it is a crossover cable. If you set the PIX address to: 192.168.1.1, then I would set my tftp server address: 192.168.1.2 or something in the same subnet. In this way we will not care what is the gateway address. No need to let pesky routers get in the way, when we're down!

  Since you asked the question 5 above, I'll explain. You should have a console cable connected, it seems do you since you can get to the monitor > prompt. You'll also need an ethernet cable plugged in a PC running a server tftp with the IP address: 192.168.1.2 3Com made a server tftp really good F * R * E * E.

  http://support.3Com.com/software/utilities_for_windows_32_bit.htm

  Select the last file in the list. Make sure you get that file recovery of password for the Cisco link above for the PIX OS version you are running. Configure the tftp server to point to the directory containing the PIX password recovery file and you are ready. Good luck, Derrick

• Cisco 3640 to the PIX 501 site 2 site VPN performance specifications.

  I intend on creating a site-2-site VPN in Star configuration with a Cisco 3640 as the hub and PIX 501 at the remote sites. My question is around the plug that I read.

  .

  The specifications for a PIX-501-BUN-K9 tell PIX 501 3DES Bundle (chassis, SW, 10 users, 3DES).

  .

  A question is what really "10 users. Which is the limit of the number of concurrent sessions, I have on the VPN at a given time, or that it means something else?

  .

  I also read the specs say that the Maximum number of VPN tunnels that can support a PIX 501 is 5. Because I'm not going to make a tunnel between the PIX 501 at the remote site and the 3640 on the central site, I think I would be OK. Is that correct or is the max value talk the maximum number of concurrent sessions on the tunnel tunnels?

  .

  Thank you.

  UDP traffic always creates a session in the PIX so that the return traffic will be allowed in. The UDP timeout is 2 minutes but IIRC. If you go around NAT with a statement of "nat 0" should not create an xlate I think.

  The real time is hard to say really, probably around 2 minutes for a UDP-only user, you would probably make a few 'local sho' orders on the PIX to really see for sure however.

• PIX 501 for Cisco 3640 VPN router

  -Start ciscomoderator note - the following message has been changed to remove potentially sensitive information. Please refrain from publishing confidential information about the site to reduce the risk to the security of your network. -end of the note ciscomoderator-

  Have a 501 PIX and Cisco 3640 router. The 3640 is configured for dynamic map for VPN. The PIX 501 is set to pointing to the 3640 router static map. I can establish a tunnel linking the PIX to the router and telnet to a machine AIX on the inside network to the router. When I try to print on the network of the PIX 501 inside it fails.

  What Miss me? I added the configuration for the PIX and the router.

  Here are the PIX config:

  PIX Version 6.1 (1)

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  enable encrypted password xxxxxxxxxxxxxxxx

  xxxxxxxxxxxxx encrypted passwd

  pixfirewall hostname

  fixup protocol ftp 21

  fixup protocol http 80

  fixup protocol h323 1720

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol sip 5060

  fixup protocol 2000 skinny

  names of

  pager lines 24

  interface ethernet0 10baset

  interface ethernet1 10full

  Outside 1500 MTU

  Within 1500 MTU

  IP address outside dhcp setroute

  IP address inside 192.168.1.1 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  PDM logging 100 information

  history of PDM activate

  ARP timeout 14400

  Global 1 interface (outside)

  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

  Timeout xlate 0:05:00

  Timeout conn 01:00 half-closed 0: 10:00 udp 0:02:00 CPP 0: h323 from 10:00 0:05:00 sip 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  Enable http server

  http 192.168.1.0 255.255.255.0 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  No sysopt route dnat

  Telnet timeout 5

  SSH timeout 5

  dhcpd address 192.168.1.2 - 192.168.1.33 inside

  dhcpd lease 3600

  dhcpd ping_timeout 750

  dhcpd outside auto_config

  dhcpd allow inside

  Terminal width 80

  Cryptochecksum:XXXXXXXXXXXXXXXXXXX

  : end

  Here is the router config

  Router #sh runn

  Building configuration...

  Current configuration: 6500 bytes

  !

  version 12.2

  no service button

  tcp KeepAlive-component snap-in service

  a tcp-KeepAlive-quick service

  horodateurs service debug datetime localtime

  Log service timestamps datetime localtime

  no password encryption service

  !

  router host name

  !

  start the flash slot1:c3640 - ik9o3s - mz.122 - 16.bin system

  queue logging limit 100

  activate the password xxxxxxxxxxxxxxxxx

  !

  clock TimeZone Central - 6

  clock summer-time recurring CENTRAL

  IP subnet zero

  no ip source route

  !

  !

  no ip domain-lookup

  !

  no ip bootp Server

  inspect the name smtp Internet IP

  inspect the name Internet ftp IP

  inspect the name Internet tftp IP

  inspect the IP udp Internet name

  inspect the tcp IP Internet name

  inspect the name DMZ smtp IP

  inspect the name ftp DMZ IP

  inspect the name DMZ tftp IP

  inspect the name DMZ udp IP

  inspect the name DMZ tcp IP

  audit of IP notify Journal

  Max-events of po verification IP 100

  !

  crypto ISAKMP policy 1

  BA 3des

  preshared authentication

  Group 2

  !

  crypto ISAKMP policy 20

  BA 3des

  preshared authentication

  Group 2

  ISAKMP crypto key address x.x.180.133 xxxxxxxxxxx

  ISAKMP crypto keys xxxxxxxxxxx address 0.0.0.0 0.0.0.0

  !

  !

  Crypto ipsec transform-set esp-3des esp-sha-hmac vpn test

  Crypto ipsec transform-set esp-3des esp-sha-hmac PIXRMT

  !

  dynamic-map crypto dny - Sai 25

  game of transformation-PIXRMT

  match static address PIX1

  !

  !

  static-card 10 map ipsec-isakmp crypto

  the value of x.x.180.133 peer

  the transform-set vpn-test value

  match static address of Hunt

  !

  map ISCMAP 15-isakmp ipsec crypto dynamic dny - isc

  !

  call the rsvp-sync

  !

  !

  !

  controller T1 0/0

  framing ESF

  linecode b8zs

  Slots 1-12 channels-group 0 64 speed

  Description controller to the remote frame relay

  !

  controller T1 0/1

  framing ESF

  linecode b8zs

  Timeslots 1-24 of channel-group 0 64 speed

  Description controller for internet link SBIS

  !

  interface Serial0/0:0

  Description CKT ID 14.HXGK.785129 Frame Relay to Remote Sites

  bandwidth 768

  no ip address

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  encapsulation frame-relay

  frame-relay lmi-type ansi

  !

  interface Serial0 / point to point 0:0.17

  Description Frame Relay to xxxxxxxxxxx location

  IP unnumbered Ethernet1/0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  No arp frame relay

  dlci 17 frame relay interface

  !

  interface Serial0 / point to point 0:0.18

  Description Frame Relay to xxxxxxxxxxx location

  IP unnumbered Ethernet1/0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  No arp frame relay

  dlci 18 frame relay interface

  !

  interface Serial0 / point to point 0:0.19

  Description Frame Relay to xxxxxxxxxxx location

  IP unnumbered Ethernet1/0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  No arp frame relay

  dlci 19 frame relay interface

  !

  interface Serial0 / point to point 0:0.20

  Description Frame Relay to xxxxxxxxxxxxx location

  IP unnumbered Ethernet1/0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  No arp frame relay

  dlci 20 frame relay interface

  !

  interface Serial0 / point to point 0:0.21

  Description Frame Relay to xxxxxxxxxxxx

  IP unnumbered Ethernet1/0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  No arp frame relay

  dlci 21 frame relay interface

  !

  interface Serial0 / point to point 0:0.101

  Description Frame Relay to xxxxxxxxxxx

  IP unnumbered Ethernet1/0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  No arp frame relay

  dlci 101 frame relay interface

  !

  interface Serial0/1:0

  CKT ID 14.HCGS.785383 T1 to ITT description

  bandwidth 1536

  IP address x.x.76.14 255.255.255.252

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  NAT outside IP

  inspect the Internet IP on

  no ip route cache

  card crypto ISCMAP

  !

  interface Ethernet1/0

  IP 10.1.1.1 255.255.0.0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  no ip route cache

  no ip mroute-cache

  Half duplex

  !

  interface Ethernet2/0

  IP 10.100.1.1 255.255.0.0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  IP nat inside

  no ip route cache

  no ip mroute-cache

  Half duplex

  !

  router RIP

  10.0.0.0 network

  network 192.168.1.0

  !

  IP nat inside source list 112 interface Serial0/1: 0 overload

  IP nat inside source static tcp 10.1.3.4 443 209.184.71.138 443 extensible

  IP nat inside source static tcp 10.1.3.4 9869 209.184.71.138 9869 extensible

  IP nat inside source 10.1.3.2 static 209.184.71.140

  IP nat inside source static 10.1.3.6 209.184.71.139

  IP nat inside source static 10.1.3.8 209.184.71.136

  IP nat inside source static tcp 10.1.3.10 80 209.184.71.137 80 extensible

  IP classless

  IP route 0.0.0.0 0.0.0.0 x.x.76.13

  IP route 10.2.0.0 255.255.0.0 Serial0 / 0:0.19

  IP route 10.3.0.0 255.255.0.0 Serial0 / 0:0.18

  IP route 10.4.0.0 255.255.0.0 Serial0 / 0:0.17

  IP route 10.5.0.0 255.255.0.0 Serial0 / 0:0.20

  IP route 10.6.0.0 255.255.0.0 Serial0 / 0:0.21

  IP route 10.7.0.0 255.255.0.0 Serial0 / 0:0.101

  no ip address of the http server

  !

  !

  PIX1 static extended IP access list

  IP 10.1.0.0 allow 0.0.255.255 192.168.1.0 0.0.0.255

  IP access-list extended hunting-static

  IP 10.1.0.0 allow 0.0.255.255 192.168.1.0 0.0.0.255

  extended IP access vpn-static list

  ip permit 192.168.1.0 0.0.0.255 10.1.0.0 0.0.255.255

  IP 192.0.0.0 allow 0.255.255.255 10.1.0.0 0.0.255.255

  access-list 1 refuse 10.0.0.0 0.255.255.255

  access-list 1 permit one

  access-list 12 refuse 10.1.3.2

  access-list 12 allow 10.1.0.0 0.0.255.255

  access-list 12 allow 10.2.0.0 0.0.255.255

  access-list 12 allow 10.3.0.0 0.0.255.255

  access-list 12 allow 10.4.0.0 0.0.255.255

  access-list 12 allow 10.5.0.0 0.0.255.255

  access-list 12 allow 10.6.0.0 0.0.255.255

  access-list 12 allow 10.7.0.0 0.0.255.255

  access-list 112 deny ip host 10.1.3.2 everything

  access-list 112 refuse ip 10.1.0.0 0.0.255.255 192.168.1.0 0.0.0.255

  access-list 112 allow ip 10.1.0.0 0.0.255.255 everything

  access-list 112 allow ip 10.2.0.0 0.0.255.255 everything

  access-list 112 allow ip 10.3.0.0 0.0.255.255 everything

  access-list 112 allow ip 10.4.0.0 0.0.255.255 everything

  access-list 112 allow ip 10.5.0.0 0.0.255.255 everything

  access-list 112 allow ip 10.6.0.0 0.0.255.255 everything

  access-list 112 allow ip 10.7.0.0 0.0.255.255 everything

  access-list 120 allow ip host 10.100.1.10 10.1.3.7

  not run cdp

  !

  Dial-peer cor custom

  !

  !

  !

  !

  connection of the banner ^ CCC

  ******************************************************************

  WARNING - Unauthorized USE strictly PROHIBITED!

  ******************************************************************

  ^ C

  !

  Line con 0

  line to 0

  password xxxxxxxxxxxx

  local connection

  Modem InOut

  StopBits 1

  FlowControl hardware

  line vty 0 4

  exec-timeout 15 0

  password xxxxxxxxxxxxxx

  opening of session

  !

  end

  Router #.

  Add the following to the PIX:

  > permitted connection ipsec sysopt

  This indicates the PIX around all ACLs for IPsec traffic. Now that your IPSec traffic is still subject to the standard rules of PIX, so launched inside the traffic is allowed to go in, but off-initiated traffic is not.

• How to configure the SMTP server for the osb 10.3.1

  Hi all
  
  Anyone can share information on how to configure the SMTP server for the osb 10.3.1
  and then how to send an email to OSB 10.3.1
  
  Thanks in advance!

  See this url:
  https://blogs.Oracle.com/christomkins/entry/sending_an_email_from_oracle_s

• Pix 501 for Small Business SERVER 2003 configuration problems

  I am new to cisco equipment. My company recently purchased a firewall of Pix 501 unlimited number of users, it is connected to an internet connection by cable with a dynamic ip address. Internet works fine and so the dhcp server.

  I have a Windows 2003 Small Business Server on our network. I need to configure the firewall to forward ports on the SBS server for remote web workplace.

  Also about a week ago I lost connectivity to the GUI of PDM via my web browser. Telnet and console work perfectly well.

  I enclose my config file.

  Any help will be appreciated. Thank you

  Ed

  FIRT off, you do not have a group-access instruction set for one of your ACL. This means that you have blocked all inbound traffic. You also have your incorrect static instructions. You can start by cleaning your config and enter the correct commands, you should be able to stick to your firewall config mode:

  No list will host 192.168.1.1 acl-enabled access 192.168.1.1

  no access list acl_outside not allowed tcp any any eq www

  no access list acl_inside not allowed tcp any any eq www

  no access list no incoming icmp permitted any one

  No list of permitted no inbound tcp access any host 24.50.241.113 eq https

  No list to access acl - permit gre 192.168.1.1 host 192.168.1.1

  No outside_in not allowed access list tcp any host 24.50.241.113 eq www

  not static (inside, outside) tcp interface www SBSServer www netmask 255.255.255.255 0 0

  not static (inside, outside) tcp interface https SBSServer https netmask 255.255.255.255 0 0

  not static tcp (exterior, Interior) interface www SBSServer www netmask 255.255.255.255 0 0

  not static tcp (exterior, Interior) interface https SBSServer https netmask 255.255.255.255 0 0

  static (inside, outside) tcp 24.50.241.113 80 192.168.1.69 80 netmask 255.255.255.255 0 0

  static (inside, outside) 24.50.241.113 tcp 443 192.168.1.69 443 netmask 255.255.255.255 0 0

  access-list OUT-IN permit tcp any host 24.50.241.113 eq https

  access-list OUT-IN permit tcp any host 24.50.241.113 eq www

  allow to Access-list OUT-IN a whole icmp

  Access-group OUT-IN in interface outside

  What ip you are trying to access your pdm of? the looks of configuration http correct, unless your coming to one other than 192.168.1.x ip address

  Let me know if it works

• Helps to configure the pix firewall 507e for e-mail access

  Dear experts,

  I called our provider cisco and ask for technical help regarding our current problem as we know on our set-up.

  She told me to convey my concern to the Cisco TAC. My friends told me to post it here under discussion Netpro.

  I am writing today to ask a few questions about my pix 506 firewall configuration.

  To give the implementation Details pls find below and attached seizures of the show tech command.

  We have subscribed the service DSL and Singtel give us 2 addresses valid public IP that is 203.125.100.246 255.255.255.252.

  I used 203.125.100.246 for my external interface of my firewall pix and singtel assign 203.125.100.245 to the DSL router. In this case, we will only use PAT for internet connection.

  Currently he works very well our Mail Server is resided in the Singtel Office having the ip address of 165.21.111.22. Not work that we can receive and deliver electronic mail on the internet, and we can also surf the internet.

  Now we intend to put our mail in our own network server, because sometimes we encounter slowness on receiving and sending emails. Pls check on the IP address below

  Our LAN IP address is 192.168.1.X 255.255.255.0

  default gateway, which is the IP address of the firewall pix inside interface is 192.168.1.1

  The new mail server IP address is 192.168.1.4.

  Here's what I've done so far.

  I created a static mapping for my mail server is here

  public static 203.125.100.246 (inside, outside) 192.168.1.4 mask subnet 255.255.255.255 0 0

  and modify the access list to allow smtp on our networks.

  192.168.2.0 ip access list ACL_OUT permit 255.255.255.0 any

  ACL_OUT list access permit icmp any host 203.125.100.246

  ACL_OUT list access permit tcp any host 203.125.100.246 eq smtp

  ACL_OUT list access permit tcp any host 203.125.100.246 eq pop3

  ACL_OUT list access permit udp any host 203.125.100.246 EQ field

  Access-group ACL_OUT in interface outside

  After doing it... I have loss all the internet connection, the email does not work... so I deleted immediately. because it causes network failure.

  I have rather edit it and create a static map like this.

  public static 203.125.100.246 (exterior, Interior) 192.168.1.4 mask subnet 255.255.255.255 0 0

  and modify the access list to allow smtp on our networks.

  192.168.2.0 ip access list ACL_OUT permit 255.255.255.0 any

  ACL_OUT list access permit icmp any host 203.125.100.246

  ACL_OUT list access permit tcp any host 203.125.100.246 eq smtp

  ACL_OUT list access permit tcp any host 203.125.100.246 eq pop3

  ACL_OUT list access permit udp any host 203.125.100.246 EQ field

  Access-group ACL_OUT in interface outside

  Saw what it did not cause a failure of network or interruption. I thought that it will already work with the config, I keep it and this is the current config now... But when I change the POP and SMTP settings so that it points on 192.168.1.4 which is the new mail server on our LAN. his does not work.

  To this day, we are in a discussion with my boss or not possible to create a static mapping on our new mail server address 192.168.1.4 to 203.125.100.246 which is already assigned as external IP address and is used for PAT.

  We are asking your help to know how to set up our internal mail server statically match our public IP address that is already used for PAT.

  Please check attached the tech release see the.

  Thank you very much!

  I'd appreciate your quick response.

  Your truth.

  Dennis Pelea

  Dennis,

  Can you please send to me your configuration full pix (unscrew sensitive information) to [email protected] / * /

  I am puzzled, why this configuration does not for you. I have several clients who use a public ip address for external intf more than several other services that use this single ip address.

  Thank you / Jay

• The import of the PIX 501 config to ASA 5505

  Is there something special that must occur to import a PIX 501 (IOS Version 6.3) config to an ASA 5505 appliance or is it as simple as download the config?

  Greg

  No, this isn't unfortunately because your pix is running 6.4 and the ASA 5505 will run a minimum of code 7.x and there were quite a few changes. Note that many existing commands would work, but some will not. Attached is a link to a doc for improving pix ASA who speaks both a manual method and an assisted version of tool -.

  http://www.Cisco.com/en/us/docs/security/ASA/migration/guide/pix2asa.html

  Jon

• Is it possible to configure the same user for 500 systems that run under XP & Win7?

  Hello

  About 500 systems are run under Windows XP & Windows7, is it possible to use the same user for all 500 systems?

  Hi SupportRI,

  Windows Live family safety is no longer manages the accounts of children using Windows Live ID Windows Live ID on behalf of the child is essentially used for the feature of managing contacts (restrictions on the use of Hotmail and Messenger). Currently, parental control can manage Windows users; However, if you have already configured a Windows Live ID account before the update, it will be always available. You can see the thread below for more information.

  Where is the function of the safety Contact family management?

  If you intend to use Windows Live Family Safety for all users of 500 to restrict the Internet connection, please note that parental control does not restrict the Internet and Web sites. You also have the option in the list of content filtering Web to apply the rules to all users under the Family Safety.

  For more information on how you can install Windows Live Family Safety, please visit the link below.

  Protect your kids with parental controls

  Thank you!

• doubt Doc ID 1618305.1 how to install and configure the user interface for content with WebCenter content 11.1.1.8.0

  doubt Doc-ID 1618305.1 How to install and configure the user interface with WebCenter content 11.1.1.8.0 content

  The portal_domain field contains;

  AdminServer (admin) and Enterprise Manager, (port 7001)

  IBR_server1, (port 16250)

  UCM_server1, (port 16200)

  WC_Spaces1, (port 8888).

  On the same machine, I have another weblogic, admin and for the ITS.

  The case is that continued to develop for the upgrade to the new skin WebCenter content.

  That's my goal.

  Then I did some research and came to the following notes in support.

  1 - how to install and configure the UI content with WebCenter content 11.1.1.8.0 and 11.1.1.9.0 (Doc ID 1618305.1()

  https://support.Oracle.com/epmos/faces/DocContentDisplay?_afrLoop=290841671406625 & ID = 1618305.1 & _afrWindowMode = 0 & _adf. CTRL-State = c7eq7vwdt_216

  and

  2 - update of the 11.1.1.8.0 UI content after you apply the Patch of Bundle WebCenter content 3 (MLR 3) or higher (Doc ID 1617477.1()

  https://support.Oracle.com/epmos/faces/DocContentDisplay?_afrLoop=291485823387355 & ID = 1617477.1 & _afrWindowMode = 0 & _adf. CTRL-State = c7eq7vwdt_245

  The UCM_server1 has the following House / app / oracle / Middleware / Oracle_ECM1 /.

  And the list of patches;

  ===================================================================================================

  Installed products of higher level (1):

  Oracle WebCenter content management install 11.1.1.8.0

  There are 1 products in this House of Oracle.

  Installed products (40):

  Cloning of the 11g Application Server 11.1.1.8.0 component

  Enterprise Manager Application Server Integrator Plugin - Management Service Support11.1.1.7.0

  FMW Control Plugin for Oracle inbound refinery 11.1.1.8.0

  FMW Control Plugin for Oracle WebCenter Capture 11.1.1.8.0

  Component install SDK 11.1.0.9.0

  Oracle Application Server Configuration 11.1.1.7.0

  Part of Oracle 11.1.1.7.0 Bali

  Oracle 11.1.1.8.0 capture

  Common files Oracle WebCenter content management 11.1.1.8.0

  Oracle Content Server 11.1.1.8.0

  Content of Oracle 11.1.1.8.0 Server component

  Content access Content Server Oracle 11.1.1.8.0

  Access to the contents of the Oracle Content Server 11.1.1.8.0 files

  Oracle Content Server Core 11.1.1.8.0

  Oracle 11.1.1.8.0 server content distribution

  Oracle extended Windowing Toolkit 11.1.1.7.0

  Oracle Fusion Middleware Admin Config 11.1.1.6.0

  Oracle Help for Java 11.1.1.7.0

  Oracle Help for the Web - UIX 11.1.1.7.0

  Oracle Help for the Web Shared Library 11.1.1.7.0

  Oracle Help share library 11.1.1.7.0

  Ice browser Oracle 11.1.1.7.0

  Oracle IRM                                                           11.1.1.6.0

  Oracle extended JFC Windowing Toolkit 11.1.1.7.0

  One-time correction of Oracle 11.1.0.9.9 installer

  Oracle outside in technology 8.4.0.0.0

  Oracle Remote Client of Intradoc 11.1.1.8.0

  Component of Oracle 11.1.1.7.0 rules

  Oracle SOA 11.1.1.7.0 workflow

  Universal Oracle install 11.1.0.9.0

  Oracle Upgrade Wizard 11.1.1.8.0

  Oracle Upgrade Wizard 11.1.1.8.0

  Upgrade Oracle WebCenter content management 11.1.1.8.0 Assistant

  Oracle WebCenter Capture 11.1.1.8.0

  Oracle Webcenter content - rights 11.1.1.7.0 documentalist

  Oracle WebCenter content - Universal Content Manager 11.1.1.8.0

  Oracle WebCenter content management install 11.1.1.8.0

  Oracle WebCenter content 11.1.1.8.0 management product suite

  Oracle WebCenter content: Imaging 11.1.1.8.0

  OracleAS Documentation 11.1.1.8.0

  There are 40 products installed in this House of Oracle.

  Interim plates (2):

  Patch 18188143: applied the sea Mar 19 17:37:32 BRT 2014

  Patch ID: 17263162

  Created February 5, 2014, 12:56:41 pm

  Bugs fixed:

  15872313, 17184457, 17515691, 16633496, 14317920, 15991141, 16892410

  14071471, 17929776, 13414481, 16042293, 17018964, 17627211, 16768600

  16037162, 14521663, 17768056, 14738077, 16460053, 17567819, 17806416

  15905591, 16080297, 17569908, 17043756, 18139768, 17211093, 17805499

  16418434, 16828356, 16671687, 17039391, 16698130, 17943394, 17632731

  17560900, 14246603, 15941347, 16045712

  Location of patch in the inventory:

  / app/Oracle/middleware/Oracle_ECM1/Inventory/oneoffs/18188143

  Patch location in the storage area:

  /app/Oracle/middleware/Oracle_ECM1/.patch_storage/18188143_Feb_5_2014_12_56_41

  Patch 18088049: applied the sea Mar 19 17:35:58 BRT 2014

  Patch ID: 17182855

  Created February 16, 2014 20:35:48 hrs PST8PDT

  Bugs fixed:

  17919101, 17894065, 17884570, 17883868, 17883112, 17854549, 17835742

  17832305, 17819213, 17812338, 17789722, 17783376, 17778867, 17761746

  17740542, 17733871, 17698852, 17658821, 17642431, 17636186, 17622384

  17616664, 17616611, 17616489, 17613656, 17608703, 17589960, 17581458

  17574153, 17567413, 17565564, 17558210, 17558068, 17546505, 17545841

  17540480, 17528590, 17514070, 17511368, 17511271, 17511089, 17501678

  17500375, 17475733, 17449617, 17421368, 17417817, 17416821, 17416807

  17416771, 17416377, 17416343, 17402732, 17401071, 17401052, 17397875

  17393920, 17393892, 17369286, 17368525, 17368096, 17362858, 17362130

  17354877, 17353764, 17352746, 17335303, 17335290, 17330493, 17324707

  17323595, 17323038, 17317268, 17314494, 17313064, 17313052, 17313000

  17312990, 17312933, 17312863, 17312366, 17298386, 17295962, 17290804

  17285105, 17270986, 17261952, 17255019, 17219134, 17216119, 17206903

  17201035, 17200854, 17199763, 17187804, 17185539, 17171852, 17171818

  17164502, 17160600, 17153780, 17074852, 17050451, 17049175, 17026301

  17008220, 17007746, 17007534, 17006378, 16999307, 16999291, 16991380

  16980256, 16980207, 16980196, 16979042, 16961904, 16958142, 16954858

  16941623, 16936055, 16936048, 16936036, 16936020, 16936006, 16935987

  16935976, 16921682, 16908287, 16858148, 16815976, 16796213, 13931337

  17424037, 17006115, 17171834

  OPatch succeeded.

  ==============================================================================================

  And contains the following configurations in config.cfg

  ==============================================================================================

  SocketAddressHostSecurityFilter = 127.0.0.1 | 0:0:0:0:0:0:0:1 | 192.168.1. * | 10.62.1.79

  xPortalSecurityPropagate = true

  Web server = javaAppServer

  AllowUpdateForGenwww = 1

  SearchIndexerEngineName = OracleTextSearch

  IndexerDatabaseProviderName = SystemDatabase

  AdditionalEscapeChars = -: #.

  FileEncoding = UTF8

  MaxQueryRows = 2000

  DisableAuthorizationTokenCheck = true

  IntradocServerPort = 4444

  SchemaPublishInterval = 604800

  SSAllowDelayedProjectWrites = true

  IdcServerThreadQueryTimeout = 120

  DisableQueryTimeoutSupport = false

  MaxSearchConnections = 20

  #Cache

  UseSearchCache = false

  #

  #AdditionalEscapeChars = _: #, -: {-}, has: A, GOLD: GOLD, CAN: CAN, AND: AND at the END:

  # Accesing a content item on a mapped Web URL (WebUrlMap) fails with the error: "unable to retrieve the content. Security access denied» (Doc ID 1639028.1()

  MaxAccountsInSecurityClause = 300

  # end (Doc ID 1639028.1()

  #Search fails for external users in WCC after upgrade to 11.1.1.8.0 (Doc ID 1676468.1()

  DoCaseInsensitiveAcctSearch = false

  # end (Doc ID 1676468.1()

  #MigrationFormatForfApplicationGUID = dCollectionName:dCollectionGUID

  ==============================================================================================

  To my UCM_Server1 content WebCenter.

  As I already have a WebCenter content I have to follow the second part of the note

  How to install and configure the UI content with WebCenter content 11.1.1.8.0 and 11.1.1.9.0 (Doc ID 1618305.1).

  Install and configure content WebCenter ADF WebUI against WebCenter Content Server

  Step 1) install the MDS schema

  (Step 2), install the Weblogic Server

  11 GR 1 material step 3) DOWNLOAD and install Oracle Application Development Framework (11.1.1.6.0) in the new WebUI WLS Middleware House, found here

  Step 4) Download and apply Patch 16, 546 129.

  Step 5) Download and apply Patch 16, 546 157.

  Step 6) download and apply the Patch and then 19,469,801, 18,102,108 Patch

  Step 7) copy the wccadf files in the field of user interface

  Step 8) Oracle on demand services (MDS) metadata registry

  Step 9) Place the WebCenter content domain user interface model

  Step 10) run the Setup Wizard on the new home of Middleware WebUI to create the new domain

  Step 11) updated the Oracle ADF of shared libraries

  Step 12) start the domain WebUI administration server

  Step 13) Save target Managed Server with the MDS repository and create the metadata partition

  Step 14) start the server managed WebUI.

  Step 15) associate UI WebCenter content to Content Server.

  Step 16) reboot the WebUI ADF server managed.

  Step 17 access the WebUI

  Step 18) complete the Configuration of the workflow

  Step 19) apply the latest Patch Bundle content UI of WebCenter

  MY DOUBT IS:

  To read the steps that I understood, to 19, with success, in the end, I will have an another WebLogic with a domain name and its respective EM.

  I have two servers weblogic?

  portal_domain (explained above) and a new wccui_domain wls and domain.

  This fix it?

  Two WLS to keep WebCenter portal and content, and other elements.

  Because I'm not able to do with the WLS even where I UCM_server1 today?

  Thanks for all suggestions and criticism.

  To read the steps that I understood, to 19, with success, in the end, I will have an another WebLogic with a domain name and its respective EM.

  I have two servers weblogic?

  portal_domain (explained above) and a new wccui_domain wls and domain.

  This fix it?

  Two WLS to keep WebCenter portal and content, and other elements.

  Because I could not do with the WLS even where I UCM_server1 today?

  Yes, up to 11.1.1.9.0, you will need to install a new wls House (new wls server admin) and then configure WCC ui there. User interface and COE will not work in the same field. You can have the portal and content under the same House of wls and install a new one for the user interface.

  This is due to a problem with ADF and WCC libraries.

  With 12 c, this dependence is not there, and you can install / configure all 3 (Portal, content and adf ui) applications on the same domain.

• Failed to configure the data source for EPMA in 11.1.2.3

  I'm updating 11.1.2.1 to 11.1.2.3 via update on Windows 2008 R2 64 bit
  
  4 .NET installed.
  
  I get the below error.
  
  [2013 05-13 T 17: 21:45.375 - 04:00] [EPMCFG] [ERROR] [EPMCFG-07303] [oracle. EPMCFG] [tid: 20] [ecid: 0000JuVlEW8Fw000jzwkno1H ^ L ^ ^ 000004, 0:138] [SRC_CLASS: com.hyperion.awb.config.AWBDBConfigurator] Oracle Data Provider for .NET entry does not exist in C:\Windows/Microsoft.NET/Framework64/v4.0.30319/CONFIG/machine.config, install it before configuring the repository of EPMA
  [2013 05-13 T 17: 21:45.375 - 04:00] [EPMCFG] [ERROR] [EPMCFG-01020] [oracle. EPMCFG] [tid: 20] [ecid: 0000JuVlEW8Fw000jzwkno1H ^ L ^ ^ 000004, 0:138] [SRC_CLASS: com.hyperion.config.wizard.impl.RunAllTasks] error: []
  com.hyperion.cis.config.ProcessingException
  at com.hyperion.awb.config.AWBDBConfigurator.configure(AWBDBConfigurator.java:145)
  at com.hyperion.config.wizard.impl.RunAllTasks.executeDbConfigTask(RunAllTasks.java:650)
  at com.hyperion.config.wizard.impl.RunAllTasks.execute(RunAllTasks.java:296)
  at com.hyperion.config.wizard.impl.RunnAllTasksState.run(RunnAllTasksState.java:92)
  at java.lang.Thread.run(Thread.java:662)

  In accordance with the exception.
  *

  Oracle Data Provider for .NET entry doesn't exist 
  

  *

  ODP for .net is required by EPMA dimension server, which you can find here-->

  http://www.Oracle.com/technetwork/database/Windows/downloads/utilsoft-087491.html

  Thank you
  hyperionEPM
  Please check the answers as useful or correct for others to find them easily

  Published by: hyperionEPM on May 14, 2013 20:17

• Configure the HTTP Proxy for ESX4i

  Hey all,.

  I am fairly new to the virtual technology so excuse my ignorance. I just finished the training of PCV and I get some hands on experience using laboratory of my company. The laboratory network restrictions allow only internet access (and any other) my ESX hosts through a proxy server where I have to enter my credentials. (I need internet access for the NTP settings - for now).

  I tried to understand this for about 12 hours and I am very close to madness... I'm either missing something obvious like: 'you can't' or something that is not easy to find for someone like me.

  Thank you, Derek.

  Welcome to the Forums - I don't think it's possible to provide the proxy settings for your ESXi host - the around who is to create a virtual machine where you can configure the proxy settings that need to connect to the NTP source and whether your NTP Server internal -.

  If you find this or any other answer useful please consider awarding points marking the answer correct or useful

• How to configure the virtual machine for the changes to forget

  Hi, I want to ask if it is possible together in the virtual machine for the changes to forget. For example - user run VM... make some changes in the configuration. Then come a new user has it want to have clear (without changes in the configuration) virtual machine. Is possible together closed the machine after changes lost?

  Sorry for my English.

  Thanks for help.

  Hi Polo939

  First, you will need to take a snapshot of the virtual machine.

  • Select your virtual machine

  • Click on "take a snapshot" on the right-hand side of the web interface

  Then you must configure the virtual machine to go back to the snapshot when it is turned off.

  • Click on "configure the VM.

  • Click the "snapshot".

  • Select "back to overview" under when you feed off option

• How can I configure the Oracle environment for an app of the OCCI crontab?

  I have a set of OCCI apps that I run from crontab on RHEL 5.2.
  Get the environment properly configured Oracle (the way shared lib for example) is proving to be a challenge
  like crontab ignores .bashrc and .bash_profile.
  Anyone got any smart suggestions on how best to do it on RHEL?
  Thank you

  Having the OCCI app run in a shell script. The shell script can define all necessary environment variables and then can call the OCCI app.
  for example. (Bourne shell script, say app1.sh)
  ORACLE_HOME =...
  LD_LIBRARY_PATH =...
  PATH =...
  ORACLE_SID =...
  TWO_TASK =...
  TNS_ADMIN =...
  Export ORACLE_HOME LD_LIBRARY_PATH PATH TWO_TASK TNS_ADMIN
  myocciapp

  chmod + x app1.sh
  Make sure that app1.sh works fine without setting the environment variables to the outside.
  Make an entry in the crontab to run app1.sh