Custom wallpaper Cisco E20 USB

Similar Questions

• Any directory on Cisco E20

  Hi all

  I seem to have a problem with the phone book from TMS to my Cisco E20.

  E20 software: TE4.1.1

  I have an account in my configuration directory that can be used.

  I am able to record my E20 and make calls.

  When to use this account on Jabber (Movi) I am also able to search the directory, but not on my E20.

  If the access control settings seem ok.

  If I'm not mistake this should be possible even if my E20 is not added as a system in the system browser right?

  Peter,

  Make sure that you put into service the following two configurations to your E20 for working directories:

  Type of directory server: VCS

  URL of the directory server: FQDN of the VCS

  To do this, the E20 must be able to reach the VCS via its FULL domain name. You can use the same SCV that you use to configure the E20.

  Hope this helps,

  Andreas

• The SX20 backup files and custom wallpaper

  Hello

  I took a backup of one of our SX20 file and created a 'master' backup that can be used to quickly set up new systems. However, the backup files maintain no custom screen. We have a specific background we upload to all of our systems in place and I was wondering if there is a way to somehow add this in the backup file. It would be great if we could combine these two steps into one. Someone at - it experience with this?

  The wallpaper must be downloaded onto the SX20, depending on the version of software, it can be done in different ways.

  If running TC6.x or earlier, you can download the wallpaper with WinSCP directly to the codec using the root account or via the web interface. Take a look at ex90-custom-paper painted-pushand take note that once the wallpaper is downloaded, you will need to deselect, and then select new wallpaper to make it visible.

  If running TC7.x or later, root access is deleted so WinSCP won't work, therefore, the only method is via the web interface.

• Customer VPN CISCO C2691 4.9.01.0180 does not work

  Hello

  After reading and find information about the client IPsec and VPN som, I now try to make it work, but:

  The TEST LABORATORY is to follow:

  INTERNET-> (IP 192.168.10.1/24) C1841-> INT0/1 TEST LAB

  C2691 INT0/1 (IP 192.168.10.166/24)-> C2691 INT0/0 (IP 172.18.124.159/24)-> COMPUTER (DIFFICULTY IP 172.18.124.10/24)

  I can PING from the computer:

  192.168.10.1

  172.18.124.159

  But when I run the VPN, I have no communication, the PASSWORD and LOGIN are correct with the scrip.

  Here below what I get when I try to connect:

  Cisco Systems VPN Client Version 4.9.01.0180
  Copyright (C) 1998-2009 Cisco Systems, Inc.. All rights reserved.
  Type of client: Mac OS X
  Running: the Darwin 10.6.0 Darwin kernel Version 10.6.0: Wed Nov 10 18:13:17 PST 2010; root:XNU-1504.9.26~3/RELEASE_I386 i386
  Config files directory: / etc/opt/cisco-vpnclient

  1 20:23:49.072 14/01/2011 Sev = Info/4 CM / 0 x 43100002
  Start the login process

  2 20:23:49.073 14/01/2011 Sev = WARNING/2 CVPND / 0 x 83400011
  Send error - 28 package. ADR DST: 0xAC127CFF, ADR Src: 0xAC127C0A (DRVIFACE:1158).

  3 20:23:49.073 14/01/2011 Sev = WARNING/2 CVPND / 0 x 83400011
  Send error - 28 package. ADR DST: 0x0AD337FF, ADR Src: 0x0AD33702 (DRVIFACE:1158).

  4 20:23:49.073 14/01/2011 Sev = WARNING/2 CVPND / 0 x 83400011
  Send error - 28 package. ADR DST: 0x0A2581FF, ADR Src: 0x0A258102 (DRVIFACE:1158).

  5 20:23:49.080 14/01/2011 Sev = Info/4 CM / 0 x 43100004
  Establish a connection using Ethernet

  6 20:23:49.081 14/01/2011 Sev = Info/4 CM / 0 x 43100024
  Attempt to connect with the server "172.18.124.159".

  7 20:23:49.081 14/01/2011 Sev = Info/6 CM/0x4310002F
  Assigned TCP port local 49164 for the TCP connection.

  8 20:23:49.261 14/01/2011 Sev = Info/4 IPSEC / 0 x 43700008
  IPSec driver started successfully

  9 20:23:49.261 14/01/2011 Sev = Info/4 IPSEC / 0 x 43700014
  Remove all keys

  10 20:23:49.261 14/01/2011 Sev = Info/6 IPSEC / 0 x 43700020
  TCP SYN sent 172.18.124.159, src port 49164, port 10000 DST

  11 20:23:54.261 14/01/2011 Sev = Info/6 IPSEC / 0 x 43700020
  TCP SYN sent 172.18.124.159, src port 49164, port 10000 DST

  12 20:23:59.261 14/01/2011 Sev = Info/6 IPSEC / 0 x 43700020
  TCP SYN sent 172.18.124.159, src port 49164, port 10000 DST

  13 20:24:04.761 14/01/2011 Sev = Info/6 IPSEC / 0 x 43700020
  TCP SYN sent 172.18.124.159, src port 49164, port 10000 DST

  14 20:24:09.261 14/01/2011 Sev = Info/4 CM/0x4310002A
  Unable to establish a TCP connection on port 10000 with server '172.18.124.159 '.

  15 20:24:09.261 14/01/2011 Sev = Info/5 CM / 0 x 43100025
  Initializing CVPNDrv

  16 20:24:09.262 14/01/2011 Sev = Info/4 CM/0x4310002D
  Reset the TCP connection on port 10000

  17 20:24:09.262 14/01/2011 Sev = Info/6 CM / 0 x 43100030
  Removed the TCP port local 49164 for the TCP connection.

  18 20:24:09.262 14/01/2011 Sev = Info/4 CVPND/0x4340001F
  Separation of privileges: restore MTU on the main interface.

  19 20:24:09.262 14/01/2011 Sev = Info/6 IPSEC / 0 x 43700023
  TCP RST sent to 172.18.124.159, src port 49164, port 10000 DST

  20 20:24:09.262 14/01/2011 Sev = Info/4 IPSEC / 0 x 43700014
  Remove all keys

  21 20:24:09.263 14/01/2011 Sev = Info/4 IPSEC / 0 x 43700014
  Remove all keys

  22 20:24:09.263 14/01/2011 Sev = Info/4 IPSEC/0x4370000A
  IPSec driver successfully stopped

  The manuscript in the CISCO 2691 is just suited for my setup, I don't think that I made a few mistakes, but you never know.

  If has a first time, I'm able to establish a VPN connection to my computer and my router, I'll be happy, if I see my home network of the CISCO 1841 (ROUTER MAIN one) this will be perfect, that's also what I would like to check in.

  Here, the manuscript of the CISCO 2691:

  !
  version 12.4
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  router host name
  !
  boot-start-marker
  boot system flash: c2691-adventerprisek9 - mz.124 - 5a .bin
  boot-end-marker
  !
  !
  AAA new-model
  !
  !
  AAA authentication login userauthen local
  AAA authorization groupauthor LAN
  !
  AAA - the id of the joint session
  !
  resources policy
  !
  IP cef
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !
  Fax fax-mail interface type
  0 username cisco password Cisco
  !
  !
  !
  crypto ISAKMP policy 3
  BA 3des
  preshared authentication
  Group 2
  !
  ISAKMP crypto client configuration group 3000client
  key cisco123
  DNS 8.8.8.8
  domain cisco.com
  pool ippool
  ACL 108
  !
  !
  Crypto ipsec transform-set esp-3des esp-sha-hmac RIGHT
  !
  Crypto-map dynamic dynmap 10
  Set transform-set RIGHT
  !
  !
  map clientmap client to authenticate crypto list userauthen
  card crypto clientmap isakmp authorization list groupauthor
  client configuration address map clientmap crypto answer
  10 ipsec-isakmp crypto map clientmap Dynamics dynmap
  !
  !
  !
  !
  interface FastEthernet0/0
  IP 172.18.124.159 255.255.255.0
  automatic speed
  Half duplex
  clientmap card crypto
  !
  interface Serial0/0
  no ip address
  Shutdown
  !
  interface FastEthernet0/1
  IP 192.168.10.166 255.255.255.0
  automatic speed
  Half duplex
  !
  interface Serial1/0
  no ip address
  Shutdown
  series 0 restart delay
  No terminal-dce-enable-calendar
  !
  interface Serial1/1
  no ip address
  Shutdown
  series 0 restart delay
  No terminal-dce-enable-calendar
  !
  interface Serial1/2
  no ip address
  Shutdown
  series 0 restart delay
  No terminal-dce-enable-calendar
  !
  interface Serial1/3
  no ip address
  Shutdown
  series 0 restart delay
  No terminal-dce-enable-calendar
  !
  IP local pool ippool 192.168.10.170 192.168.10.175
  IP route 0.0.0.0 0.0.0.0 192.168.10.1
  !
  !
  IP http server
  no ip http secure server
  !
  access-list 108 permit ip 192.168.10.0 0.0.0.255 host 0.0.0.0
  !
  !
  !
  !
  control plan
  !
  !
  !
  !
  !
  !
  Dial-peer cor custom
  !
  !
  !
  !
  !
  !
  Line con 0
  transportation out all
  Speed 115200
  line to 0
  transportation out all
  line vty 0 4
  transport of entry all
  transportation out all
  !
  !
  end

  Best regards

  Didier

  Hi Didier,.

  Looking at your first series of VPN client logs, it seems that the VPN client is set to use IPSec/TCP on port 10000 while CTCP has not been enabled on the router.

  I suggest you to change the configuration on the client VPN IPSec/UDP rather than TCP. (Go to the tab "Transport" when you change the corresponding connection on the VPN client).

  Let me know if this helps out!

  See you soon,.

  Assia

• HP T520 Flexible Thin Client: Flash BIOS on customer T520 light with USB

  Operating system: HP ThinPro 6-64

  BIOS: L41 v01.02

  I'm looking for a little advice on flashing the BIOS on this TC. Instructions for the softpaq say to run flash the bios-high - but it works with the option of the tool-less set in the BIOS. As it is a very early version of BIOS, this option does not exist in the configuration of the BIOS. After a reboot, the update is not applied.

  Ideally, what I want to do is to create a USB bootable for flashing the BIOS, but the part I have trouble finding the correct flashing the BIOS utility. The friend-flash indicates a corrupted BIOS file, even though I know that it is very well I used the same file on other systems.

  Could someone give me some advice please?

  Problem solved. I installed 5.0 ThinPro who had the command of flash-bios-environments relevant so I could update the BIOS.

• Failed to download or run the customer of Cisco Anyconnect secure mobility

  I'm trying to download and install the VPN client on my laptop to access my work computer.  I tried the automatic online download and received this error:

  "Cannot install the Client AnyConnect Secure Mobility Client 3.1.00495 with the Installer error: incorrect function."  A VPM connection cannot be established. »

  I also tried the manual download, but my computer won't run the executable.  I'm running on Windows 7 64 bit.  Any help would be appreciated.

  You can try the fix below.  The user made the same mistake.

  https://supportforums.Cisco.com/discussion/11916796/AnyConnect-secure-mobility-client-3100495-Installer-error

  "I was able to install the client correctly by creating a new temporary user account and uses this account to install the client on a global scale on the machine. After successful installation, remove the temporary user account. It worked for me and it was easy. It may not work for all instances of this issue. »

  I hope this helps.

  Please evaluate the useful messages.

  Thank you.

• Cisco e20... directory personal

  Hello

  for business reasons, I have to separate phone book...

  can I use a different LDAP catalogue on e20?

  Hello Ivan.

  I've not seen it described formally, but yes, you can use scp to transfer the file.

  The easiest for you would be to add a few entries, download the file, understand the syntax.

  Change it and download it again.

  The root account should be enabled on the endpoint. You can find the file under:

  /config/Pb.XML

  You may need to reboot endpoint after you have downloaded the file.

  Ivan: Please note my answers by using the stars under the messages!

• How to configure a Cisco No. 2851 to access customer VPN Cisco router?

  It is my current configuration below, can someone help me see problems with it:

  AAA new-model
  !
  !
  AAA authentication local connection user
  AAA authorization network group local
  AAA accounting update newinfo

  crypto ISAKMP policy 10
  BA 3des
  preshared authentication
  !
  crypto ISAKMP policy 11
  BA 3des
  preshared authentication
  Group 2
  !
  12 crypto isakmp policy
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 15
  BA 3des
  md5 hash
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 20
  md5 hash
  preshared authentication

  !
  ISAKMP crypto client configuration group vpngroup
  key cisco123
  pool VPN_POOL

  Crypto ipsec transform-set esp-3des esp-sha-hmac vpnc1
  !
  Crypto-map dynamic dynmap 15
  Set transform-set vpnc1
  !
  !

  local IP 10.1.1.1 VPN_POOL pool 10.1.1.20

  list user card crypto Test client authentication
  card crypto isakmp authorization list Group Test
  Crypto map Test address client configuration address
  Discover 15 Test card crypto ipsec-isakmp dynamic dynmap
  !
  !
  !
  !
  interface GigabitEthernet0/0
  Description *.
  IP address
  NAT outside IP
  IP virtual-reassembly
  automatic duplex
  automatic speed
  No cdp enable
  card crypto Test

  Hi Ralema,

  Please see this link:

  http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a00800949ba.shtml

  It will be useful.

  Federico.

• False claims RADIUS of customer VPN Cisco ASA 5510

  Hello world

  I use the Cisco VPN client 5.0.7 and Cisco ASA 5510 (7.4 and 8.4.2) VPN RAS solution. Clients are authenticated using certificates and RADIUS AAA (ACS 3.3) and AD.

  Each time, when the client connects, ASA 2 RADIUS requests questions, correct first - which is successfully authenticated by FAC and immediately - second that always fails. I couldn't find information related to this strange behaivor. Function "Double Authentication" (more sympathetic to his name) is only accessible to Anyconnect customers who we do not. When I'm authenicated by using password group, there is only one query RADIUS.

  What is the source of such behavior?

  The negative impact is that my logs are filled with the failed authentication attempts fallacious and users are incrementig attempts failed in the AD meter.

  Debugging of ASA:

  -First application-

  RDS 2011-10-24 16:16:01 0232 14884 request code 172.16.8.1:1645 host = 1 id = 22, length = 145 on port 1025

  RDS 2011-10-24 16:16:01 I 2519 14884 [001] value of username: User1

  RDS 2011-10-24 16:16:01 I 2519 14884 [002] value username-password: 2D A9 B2 D0 15 5F 1E B8 BB DB 3A 38 F5 24 72 B5

  RDS 2011-10-24 16:16:01 I 2538 14884 [005] NAS-Port value:-1072693248

  RDS 2011-10-24 16:16:01 I 2538 14884 [006] Type of Service value: 2

  RDS 2011-10-24 16:16:01 I 2538 14884 [007] value Framed-Protocol: 1

  RDS 2011-10-24 16:16:01 I 2519 14884 [030] value Called-Station-Id: 172.16.8.1

  RDS 2011-10-24 16:16:01 I 2519 14884 [031] value of Calling-Station-Id: 10.4.14.14

  RDS 2011-10-24 16:16:01 I 2538 14884 [061] NAS-Port-Type value: 5

  RDS 2011-10-24 16:16:01 I 2533 14884 [066] Tunnel-Client-Endpoint value: [T1] 10.4.14.14

  RDS 2011-10-24 16:16:01 I 14884 2556 [004] value of NAS-IP-Address: 172.16.8.1

  RDS 2011-10-24 16:16:01 I 2561 14884 [026] Vendor-Specific vsa id: 9

  RDS 2011-10-24 16:16:01 I 2596 14884 [001] cisco-av-pair value: ip:source - ip = 10.4.14.14

  RDS 2011-10-24 16:16:01 I 0282 14884 ExtensionPoint: run the configured scan extension points...

  RDS 2011-10-24 16:16:01 I 0314 14884 ExtensionPoint: advertising [AuthenticationExtension] provider [Cisco EAP generic]

  RDS 2011-10-24 16:16:01 I 0763 14884 ExtensionPoint: Message-[generic EAP] lack of EAP, ignorant...

  RDS 2011-10-24 16:16:01 I 0319 14884 ExtensionPoint: [GenericEAP.dll-> AuthenticationExtension] returned [1 - ignored]

  RDS 2011-10-24 16:16:01 I 0314 14884 ExtensionPoint: asking provider [Download Cisco ACL] [AuthenticationExtension]

  RDS 2011-10-24 16:16:01 I 0763 14884 ExtensionPoint: [DnldACLs] asking not a download of ACL, ignorant...

  RDS 2011-10-24 16:16:01 I 0319 14884 ExtensionPoint: [DnldACLs.dll-> AuthenticationExtension] returned [1 - ignored]

  RDS 2011-10-24 16:16:02 I 14884 0475 AuthorExtensionPoint: run the configured scan extension points...

  RDS 2011-10-24 16:16:02 I 14884 0507 AuthorExtensionPoint: requesting provider [Download Cisco ACL] [AuthorisationExtension]

  RDS 2011-10-24 16:16:02 I 0763 14884 ExtensionPoint: looking for ACL from [DnldACLs] to [user1]

  RDS 2011-10-24 16:16:02 I 0512 14884 AuthorExtensionPoint: [DnldACLs.dll-> AuthorisationExtension] returned [1 - ignored]

  RDS 2011-10-24 16:16:02 3360 14884 sent response code 2, id 22 to 172.16.8.1 on port 1025

  RDS 2011-10-24 16:16:02 I 2561 14884 [026] Vendor-Specific vsa id: 9

  RDS 2011-10-24 16:16:02 I 2596 14884 [001] cisco-av-pair value: ip:addr - pool = vpnpool

  RDS 2011-10-24 16:16:02 I 2561 14884 [026] Vendor-Specific vsa id: 9

  RDS 2011-10-24 16:16:02 I 2596 14884 [001] cisco-av-pair value: ip:wins - servers = 10.2.9.12 10.3.9.10 10.4.2.202

  RDS 2011-10-24 16:16:02 I 2561 14884 [026] Vendor-Specific vsa id: 9

  RDS 2011-10-24 16:16:02 I 2596 14884 [001] cisco-av-pair value: IP: DNS-servers = 10.2.9.12 10.3.9.10 10.4.2.202

  RDS 2011-10-24 16:16:02 I 2538 14884 [006] Type of Service value: 2

  RDS 2011-10-24 16:16:02 I 2538 14884 [007] value Framed-Protocol: 1

  RDS 2011-10-24 16:16:02 I 2538 14884 [013] box-Compression value: 1

  RDS 2011-10-24 16:16:02 I 14884 2556 [008] value box-IP-Address: 255.255.255.254

  RDS 2011-10-24 16:16:02 I 2519 14884 [025] value class: CISCOACS:002cb2a9/ac100801/3222274048

  -The second request-

  RDS 2011-10-24 16:16:02 0232 14884 request code 172.16.8.1:1645 host = 1 id = 23, length = 145 on port 1025

  RDS 2011-10-24 16:16:02 I 2519 14884 [001] value of username: User1

  RDS 2011-10-24 16:16:02 I 2519 14884 [002] value username-password: 06 EA 08 AB C7 8F 75 D0 A5 E5 AE B7 A8 1 48 96 b

  RDS 2011-10-24 16:16:02 I 2538 14884 [005] NAS-Port value:-1072693248

  RDS 2011-10-24 16:16:02 I 2538 14884 [006] Type of Service value: 2

  RDS 2011-10-24 16:16:02 I 2538 14884 [007] value Framed-Protocol: 1

  RDS 2011-10-24 16:16:02 I 2519 14884 [030] value Called-Station-Id: 172.16.8.1

  RDS 2011-10-24 16:16:02 I 2519 14884 [031] value of Calling-Station-Id: 10.4.14.14

  RDS 2011-10-24 16:16:02 I 2538 14884 [061] NAS-Port-Type value: 5

  RDS 2011-10-24 16:16:02 I 2533 14884 [066] Tunnel-Client-Endpoint value: [T1] 10.4.14.14

  RDS 2011-10-24 16:16:02 I 14884 2556 [004] value of NAS-IP-Address: 172.16.8.1

  RDS 2011-10-24 16:16:02 I 2561 14884 [026] Vendor-Specific vsa id: 9

  RDS 2011-10-24 16:16:02 I 2596 14884 [001] cisco-av-pair value: ip:source - ip = 10.4.14.14

  RDS 2011-10-24 16:16:02 I 0282 14884 ExtensionPoint: run the configured scan extension points...

  RDS 2011-10-24 16:16:02 I 0314 14884 ExtensionPoint: advertising [AuthenticationExtension] provider [Cisco EAP generic]

  RDS 2011-10-24 16:16:02 I 0763 14884 ExtensionPoint: Message-[generic EAP] lack of EAP, ignorant...

  RDS 2011-10-24 16:16:02 I 0319 14884 ExtensionPoint: [GenericEAP.dll-> AuthenticationExtension] returned [1 - ignored]

  RDS 2011-10-24 16:16:02 I 0314 14884 ExtensionPoint: asking provider [Download Cisco ACL] [AuthenticationExtension]

  RDS 2011-10-24 16:16:02 I 0763 14884 ExtensionPoint: [DnldACLs] asking not a download of ACL, ignorant...

  RDS 2011-10-24 16:16:02 I 0319 14884 ExtensionPoint: [DnldACLs.dll-> AuthenticationExtension] returned [1 - ignored]

  RDS 2011-10-24 16:16:02 P 2237 14884 user: User1 - Windows user unknown or invalid password

  RDS 2011-10-24 16:16:02 3360 14884 sent response code 3, id 23 to 172.16.8.1 on port 1025

  RDS 2011-10-24 16:16:02 I 2519 14884 [018] value Reply-Message: rejected...

  RDS 2011-10-24 16:16:03 0232 14884 request code 10.2.47.200:1812 host = 1 id = 254, length = 227 on port 32769

  RDS 2011-10-24 16:16:03 2788 14884 (VSA unknown Vendor ID 14179)

  GBA debug:

  -First application-

  AUTH 24/10/2011 16:16:01 I 0365 13060 external DB [NTAuthenDLL.dll]: from [user01] user authentication
  AUTH 24/10/2011 16:16:01 I 0365 13060 external DB [NTAuthenDLL.dll]: Windows authentication attempt for the user1 user

  AUTH 24/10/2011 16:16:02 I 0365 13060 external DB [NTAuthenDLL.dll]: authentication Windows successfully (by DCCORPMSK04)
  AUTH 24/10/2011 16:16:02 I 0365 13060 external DB [NTAuthenDLL.dll]: information get RAS to the user user1 DCCORPMSK04

  -The second request-
  AUTH 24/10/2011 16:16:02 I 0365 13060 external DB [NTAuthenDLL.dll]: from [user1] user authentication
  AUTH 24/10/2011 16:16:02 I 0365 13060 external DB [NTAuthenDLL.dll]: Windows authentication attempt for the user1 user
  AUTH 24/10/2011 16:16:02 0365 13060 external DB [NTAuthenDLL.dll]: Windows authentication FAILED (Error 1326 L)
  AUTH 24/10/2011 16:16:02 I 0365 13060 external DB [NTAuthenDLL.dll]: retry authentication to the CORP domain
  AUTH 24/10/2011 16:16:02 I 0365 13060 external DB [NTAuthenDLL.dll]: Windows authentication attempt for the user1 user
  AUTH 24/10/2011 16:16:02 0365 13060 external DB [NTAuthenDLL.dll]: Windows authentication FAILED (Error 1326 L)

  The ASA config:

  Crypto ikev1 allow outside
  Crypto ikev1 allow inside
  IKEv1 crypto ipsec-over-tcp port 10000
  life 86400
  IKEv1 crypto policy 65535
  authentication rsa - sig
  3des encryption
  md5 hash
  Group 2
  life 86400

  !

  internal Cert_auth group strategy
  attributes of Group Policy Cert_auth
  client ssl-VPN-tunnel-Protocol ikev1 l2tp ipsec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list aclVPN2
  the address value vpnpool pools
  rule of access-client-none

  !

  attributes global-tunnel-group DefaultRAGroup
  address (inside) vpnpool pool
  address vpnpool pool
  authentication-server-group RADIUS01
  authorization-server-group RADIUS01
  authorization-server-group (inside) RADIUS01
  Group Policy - by default-Cert_auth

  !

  RADIUS protocol AAA-server RADIUS01
  AAA-server host 10.2.9.224 RADIUS01 (inside)
  key *.
  RADIUS-common-pw *.
  AAA-server host 10.4.2.223 RADIUS01 (inside)
  key *.

  Hello

  It is a 'classic' error and has nothing to do with dual authentication, but rather with the fact that you do both radius and authorization of RADIUS authentication.

  If you remove this line:

  authorization-server-group RADIUS01

  you will see that it starts to work properly

  In short: when ASA no authorization of RADIUS, it sends a request to access radius with the username as a password, that's why you see the second application fails all the time.

  This is because the RADIUS authorization is intended to be used when authentication happens using certificates (only) so there is no password.

  Also note that within the RADIUS protocol, authentication and authorization are not separate things, both occur in a single step. So if the ASA makes the radius authentication, he already gets the user attributes in the authentication step and it makes no sense to also make a separate authorization stage (except in a few very rare scenario where you have 2 radius servers, one for authentication and another for permission).

  HTH

  Herbert

• accept customer VPN Cisco 1841 with Cisco 501 site-to-site

  I have a site-to-site with Cisco1841 on my seat. 1841, connect to Pix501 to Branch1. I want to accept VPN client with an app on my 1841. Is it possible on the same interface?

  Thank you

  no doubt this is supported.

  Here is the setup time lan lan vpn and access codes remote vpn on a router:

  crypto ISAKMP policy 10

  BA 3des

  preshared authentication

  Group 2

  ISAKMP crypto key xxxxxxxx address no.-xauth

  ISAKMP crypto client configuration group vpngroup

  key xxxxxxxx

  pool vpnpool

  ACL 130

  Crypto ipsec transform-set esp-3des esp-md5-hmac vpnset

  Crypto-map dynamic dynmap 10

  Set transform-set vpnset

  card crypto client vpnmap of authentication list vpnauthen

  card crypto isakmp authorization list vpnauthor vpnmap

  client configuration address card crypto vpnmap answer

  vpnmap 10 card crypto ipsec-isakmp dynamic dynmap

  vpnmap 20 ipsec-isakmp crypto map

  defined by peers

  superset of transform-set Set

  match address 140

  interface Ethernet0

  IP 192.168.1.1 255.255.255.0

  IP nat inside

  interface Dialer0

  IP address

  NAT outside IP

  vpnmap card crypto

  vpnpool of local pool IP 10.1.1.1 10.1.1.10

  IP nat inside source overload map route sheep interface Dialer0

  access-list 101 deny ip 192.168.1.0 0.0.0.255 10.1.1.0 0.0.0.255

  access-list 101 deny ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

  access-list 101 permit ip 192.168.1.0 0.0.0.255 any

  access-list 130 allow ip 192.168.1.0 0.0.0.255 10.1.1.0 0.0.0.255

  access-list 140 allow ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

  sheep allowed 10 route map

  corresponds to the IP 101

• The customer VPN Cisco PIX501

  Hello

  I ran through the Wizzard VPN on Pix Device Manager but I would like to know how to check my connections are given of sailors and passage.

  Jason

  Jason,

  You can use the sh command his isa crypto and crypto ips HS her.

  SH crypto isa his will tell you who threw a connection and what state it is.

  SH ips crypto her will allow you to see packets encrypted and unencrypted packets and the amount of data has been transmitted through your vpn tunnel.

  Patrick

• Cisco Codec C40 remove wallpaper

  Hi all.

  In our installation of cisco telepresence, that we met an interesting question:

  the cisco c40 codec admin created a custom wallpaper, somehow this wallpaper was not appropriate for this codec for 100%.

  After that he transferred the wallpaper on the unit - it restarts. We see a cyclical reboot - boots of unity, we see a cisco logo, then we see a (part of the GUI) overlay on the monitor, after this codec is trying to load wallpaper, fails and went into reboot.

  Are there ways to manually remove this wallpaper of the codec s flash without hard resetting the codec?

  Hi Eugene,

  Try to login as an administrator using ssh/console and run the following command:

  xConfiguration video wallpaper: Summersky

  Best regards

  Sergey Kuzmin

• Cisco Custom Image patch

  Hello

  I installed a custom Image Cisco ESXi 5.5 in a UCS C220 M3 and I would like to know if I can install patches using Update Manager as I do with a default image. I don't know if I'm having problems because some patches to update the drivers of ESXi and could, for example, replace the Cisco enic and the fnic.

  I know that HP and Dell have their deposits that I can use with the Update Manager, but can not find something like that for cisco.

  Thank you

  Hi theire,.

  so in recent years, I stayed away from custom provider Isos. Reason is that Vmware is not happy with the custom ones when facing problems. They are pointing to another seller trying to manage Ticket support.

  As for that so I just used for years a clean default Vmware Image as well as all the necessary drivers I inject later. Manually or via the Update Manager.

  Had more problems with Isos by default then with fully customized supplier ones.

  But back to the Question.  If you want to update the driver for Cisco, then you could download those most recent supported because you're model and add in you're Manager Update.

  Best regards

  Max

• Import image Cisco Custom ESXi in MUV

  Recently updated vCenter 5.1 and vSphere Update Manager (VUM) 5.1 I can import the image of vSphere "regular" very well, which is good news for most.

  However, we have the cluster that is a cluster of UCS.  I'm pretty new to the whole idea of the UCS, but my understanding is that we should use images of installation custom of Cisco.  I downloaded two since the VMware download page.  One for 5.0 and 5.0 Update 1.

  Any in MUV.  The error message is "update package cannot be used with VMware Update Manager vSphere." downloaded

  Advice?

  Thanks for the info. I guess step 1 should read "Update U1 5.0 to 5.1", as the downgrade is not taken in charge.

  By design, VUM 5.1 supports upgrades from the host through the ISO images to the final retail version level - which, in this case, is ESXi 5.1. The ISO images to which you pointed out in step 2 are lower ESXi version (5.0), so this isn't an upgrade path supported in AUVS 5.1.

  If you want to upgrade to ESXi ESXi 5.1 through 5.1 VUM bed and breakfast - use ESXi 5.1 images.

  If you want to upgrade to 5.0 U1 ESXi ESXi hosts and you don't have in your environment - VC/VUM 5.0, you can use the different upgrade mechanisms.

• Problem with VPN connection via a wireless card broadband Verizon Cisco VPN air

  I can't access any device on my network via RDP or applications via the host file - forwarded servers from my 64 bit Windows 7 laptop using wireless broadband Verizon and customer VPN Cisco 64 bit 5.0.7.290. I can connect easily via a LAN wired connection from home using the same laptop computer and client VPN and RDP.

  The VPN client connects to the server VPN (easy VPN on Cisco 2821 router) on the broadband wireless connection (I can see it in the GPMC on the router) but it will pass no data. I can't ping anything in the field, or external IP address. When I try to ping the laptop, it drops off the VPN (completed peer connection).

  The laptop is a Dell M4500 running Windows 7 Ultimate 64 bit OS. The VPN client is stated, rev 5.0.7.290. The card internal wireless broadband is a QualCom 5620 (EV-DO-HSPA) system (Gobi 2).

  What must I do to get this configuration to perform and log as does the wired connection?

  Tim Carlisle

  The Systems Manager

  Post edited by: Timothy Carlisle recently I discovered that the Cisco 64 bit client VPN running on my Dell Precision M6500 (Windows 7 64-bit OS) was able to connect properly using the WiFi on my iPhone 4S (Verizon Wireless). It will also connect when attached to the laptop via a USB cable. Once I discovered this, I was then able to do the same thing on the laptop that spawned this discussion, by attachment for Blackberry "BOLD" from the boss after the download and installation of a new Verizon Wireless Access Manager utility that has allowed to select the device (Blackberry) for installation.  I think that enabled us to bypass the wireless cards Gobi2 on two laptops and the factory installed Dell Connection Manager software which was not compatible with the Cisco VPN 64 bit client software. As much as I fear here, this new method (hotspot of Smartphone and attachment) is the way to go for us and has solved all the problems of connectivity distance for us. Thank you to all who have contributed to this discussion.   Tim Carlisle

  The Solution to the debate has been captured in this Document: -.

  https://supportforums.Cisco.com/docs/doc-18721

  We fought with the same question for quite awhile before finding that there seems to be a default setting in the Verizon Access Manager software that plays well with the Cisco Client.

  In VZAccess Manager, select Options | Preferences.  Connectivity options, the default setting for "NDIS Mode - connect manually" was chosen.  Change this option to "Modem Mode - connect manually" seems to have completely addressed the issue.  We can now connect to the WWAN, establish a Cisco VPN session and have connectivity.