EQL replacement in a group

Similar Questions

• Have a layer that is replaced with a group of layers of cycle, while the layer back when finished?

  I read a few other topics concerning situations related to this, but I think that I don't quite get my head around what I do.

  I have a puppet. I created a framework of cycle per layer framework for arms action group and, as it should, he travels the layers in order to breast when triggered with the key that I put.

  I want an arm by default to be visible all the time and then just momentarily get replaced when the trigger is active. How do I configure that?

  I worked on it.

  For reference, I had to hide the layer group to cycle along the side of the default arm and check the brothers and sisters to hide when it is active.

• replace groups with symbols

  I have a customer file used groups duplicated instead of symbols. Is there a script that will replace all the "groups" with a symbol given? I'm sure this has been asked before, but can't seem to find the thread.

  Thank you.

  IIRC, one of the scripts on kelsocartography.com should do exactly that.

  But you would need to place a symbol instance and run the script.

• Windows SBS 2008 - user is unable to RDP in even through that it's in the appropriate groups

  Hi guys,.

  Problem: A user has been accidentally deleted from a Windows SBS 2008 server running Active Directory and we have been unable to grant him the rights of RDP - the error message indicates that the account must be granted "logon through Terminal Services right.

  The installer: A single Windows SBS 2008 server running hyper-VM with a unique virtual machine on it which manages the TS licenses

  Tried to bugs/more information:

  Things that we tried to do to solve the problem (all done via Active Directory users and computers)

  • He added to the administrators and remote desktop users groups
  • He added to the users group to the remote desktop on the virtual machine (the account can now connect to the virtual machine at least)
  • Cloned an existing account on the primary server
  • Removed and added the account through the SBS console and added to the admin and RDP groups (on the dedicated server and virtual machine)

  None of them seems to have solved the problem. There are currently 2 free licenses of TS, so I don't think it's a licensing issue.

  It's almost as if there is a top group policy setting or similar which replaces the user groups is added to, but I don't know where to look for here.

  I've already made sure that the user do not have TS access turned off in the settings of the user's

  Any suggestions?

  Hello

  Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the Server on TechNet. Please post your question in the Technet forums. You can follow the link to your question:

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

• a group with an appearance of different color of its elements (in isolation mode)

  Sometimes I have this problem that when I change the color of a group (for example, from green to red) it's elements stay in the old color.

  I see this when I double-click on the (now replaced by red) group. In the isolation mode items appear again in the original (green) color.
  When I return to the grouped view the color changes once again (in the Red).

  Strange.

  Is this a bug or a feature?

  If it's a feature, I think that it is a source of confusion.

  ffills can be applied at different levels (object, group, layer). You have applied the red fill to the level of the group.

• REGEXP_REPLACE with several chr() replacements...

  All,
  
  I try to use the regexp_replace function to force the replacement of a group of special characters in a string. Is this possible in the function to have a mapping as a substitute the following text:
  Chr (150) with '-'
  Chr (132) with "'"
  Chr (146) with "'
  
  I know that I can wrap a function replace all the terms, but I was wondering if I could use a feature unique regexp_replace to do the same. Also, I must cross a string containing cr, lf,... IE multiline.
  
  Thanks in advance,
  Tom

  Use TRANSLATE

  SQL> select translate(chr(150)||chr(132)||chr(146),chr(150)||chr(132)||chr(146),'-";') from dual
    2  /
  
  TRA
  ---
  -";
  

• Data type of Cluster change

  I could ask a question of really stupid here and to a certain extent, school boy I hope I am, but could someone tell me if its possible to change the data type of an element in the cluster? Let me explain.

  Here is a screenshot of my code:

  

  I re-read my test as a string array data that I convert to a cluster, bundle, and then sent on its merry way to do other things, but the first element of the cluster is actually a path. As you can see I currently have to ungroup everything, replace the first group access, and then re - path with the correct data types. So it's a bit messy, this used to be acceptable, because I had only two other channels of the cluster, however based on expansion now, I look at and think that there must be an easier and more elegant way to do it if I just want to change something.

  If it's the only way (or at least if no other more simple workaround) so that I could potentially keep the path one a string and make conversion to the places which need it, but it would now require a little re-coding I'd like to avoid if possible.

  I hope I don't think simply strong enough on this one.

  Bravo for research

  Mitch

  I don't know what the rest of the code and how you can change then a few options:

  1. keep everything as strings, perform the conversion path when you actually need the path.  I'll show you the trick I use to convert tables in clusters well marked below.

  2. make the cluster an object, keep the data as an array of strings and accessors treat indexing and path conversion.

  3. make the hierarchical cluster, separate the path and have a second group which is all channels.

  4. If you want you can jigger the string array and use some flattened and unflatten action.

  

  The upper part of the code snippet is a way to jigger the array of strings to get a path to the first element of a flat cluster (it wire perfectly to the rest of your code).  The below code shows how I would like to convert an array of strings to a cluster if labels are works of a useful idea, even for clusters that are given unnecessary labels such as table in the Cluster.  (Fixed sizes with Brown son clusters are easier to manage, simply Type cast to the cluster with the same types and appropriate labels).

  Judging by your original post, you know when and how to Def Type different clusters show.

• Where should I go since Newsgoups were dropped

  From what I understand, it looks like discussion groups has been abandoned. Is this correct? What are the best GroupsI user can use to get answers to Windows XP?

  Hello TedSpiegel,

  You can always ask your question of Windows XP in the forum of responses that it has replaced the focus groups.

  If your Windows XP clients in a domain environment, you can ask in the TechNet Forum. I have included the link here.
  http://social.technet.Microsoft.com/forums/en-us/itproxpsp/threads

  Thank you

  Marilyn

• Re-thinning Volume of Exchange database

  I need to see any re-thinning some volumes that are attached to the Exchange, Windows 2008 and Exchange 2010 systems via iSCSI.   I need to see if anyone has re-thinned a volume of Exchange database before and if they noticed anything out of the ordinary. I'm assuming that do after hours would be the best. Trying to ensure that all bases are covered with regard to possible questions.

  I'm also trying to figure out how to properly configure the HIT program on a windows 2008 system. I installed the program on a test system, but I am unable to connect to the San. Multicast has been enabled on the network, so not sure what else might be missing. I use only the program of re-thin volumes, not to take pictures or make replications. The HIT program will serve to re - thin trading systems.

  San Info:

  PS6100

  Firmware 6.0.6 (Yes, I know what needs to be upgraded)

  Thank you

  Conny Schwerdtfeger

  Your server must have access to the VSS-control volume on the EQL group.  If you re - running remote installation wizard there is an option to configure access to the group.   Or in the EQL GUI under the Group-> VSS/VDS tab settings and add an ACL entry for this server

• Best practices to follow before firmware Equallogic disk Upgradation

  Hi team,

  I have two Equallogic running in the same group and the default storage unique pool. Old eql is seen RAID 5 and another more recent is RAID 6. Both have 12 600 GB discs. Last week we Club the two EQL in the same group. Everything went well. Current firmware is on the two eql 6.0.9.

  We add the group to the HQ of SAN.  Now SAN HQ is showing constant alert of the firmware of the drive is obsolete for EQL OLD.

  Please let me know what are best practice before any firmware place a gradation of the EQL disc.

  necessary downtime.

  No downtime is needed. We do it on our production VM 300 vSphere cluster.

  Kind regards

  Joerg

• EqualLogic PS4110X flow control problem

  I configured two Powerconnect 8024F switches for use with Equallogic. The firmware version on is 5.0.0.4 and Equallogic firmware 6.0.1 version. I have one on the other's and I use 6 ports on each switch for this. I configured the ports for use with servers accessing the equallogic and equallogic. I created VLANS separated, the size of the mtu 9216 set and enable flow control. Here's the problem: I got an error, or should I say warning on Equallogic saying only: Ethernet flow control has been disabled on one or more interfaces. I checked severeal times configuration but could not find any problems.

  Any suggestion what could be the problem?

  Thank you very much for the help!

  Rafko

  Data Center Bridging is enabled.  DCB is not entirely supported by 8024F switches.   This causes flowcontrol standard port must be disabled.  Disable DCB is in the EQL GUI interface, under group settings.

  This will solve the problem.

• The SSID on Cisco WLC support no.

  Hi all

  Can you please help me to provide details on the following Cisco wireless controller?

  1. no support SSID on Cisco WLC

  2. is it possible to limit the SSID on the access point (for example, I have 10 SSID configured on the controller, I want 10 first access points using SSID (SSID 1-5) and rest of the AP SSID 6-10)

  Thank you

  Jamal

  Hi Jamal,.

  Just to add to the great info of Robert (+ 5 points Robert)

  The feature you're looking for is called WLAN substitute in versions 4.x WLC.

  Allowing substitution WLAN

  By default, all defined WLAN transmission on the controller access points. However, you can use WLAN editable to select WLAN is transmitted and who are not on a per access point basis. For example, you can use WLAN to control override goes where in the guest WLAN network or you can use it to disable a specific WLAN in a certain area of the network.

  This doc.

  http://www.Cisco.com/en/us/docs/wireless/controller/4.0/Configuration/Guide/c40wlan.html#wp1114777

  Once you create a new WLAN, WLAN > page edition for the new WLAN. In this page, you can set various parameters specific to this general policy, RADIUS servers, political security WLAN key, and 802.1 x settings.

  * Check Admin status under general strategies to activate the WLAN. If you want AP broadcast the SSID in beacon frames, check the SSID broadcast.

  Note: You can configure up to 16 WLAN on the controller. The Cisco WLAN Solution can control up to sixteen WLAN for Lightweight APs. Each WLAN has an ID separated from WLAN (1 to 16), a WLAN SSID (name of the WLAN) separate and can be assigned to single security policies. Lightweight APs broadcast all Cisco WIFI WLAN SSID Solution assets and apply the policies that you set for each WLAN.

  The good doc.

  http://www.Cisco.com/en/us/Tech/tk722/tk809/technologies_configuration_example09186a0080665d18.shtml#C3

  In versions 5.x, you will use AP groups, because in versions 5.x WLC, WLAN substitute has been replaced by the "Groups of AP" feature;

  Creation of groups access Point

  After all the access points have joined the controller, you can create up to 150 groups of access point and assign up to 16 local wireless networks in each group. Each access point announces that the WLAN enabled that belong to his group of access point. The access point no announcement not disabled WLAN in its access point group or WLAN that belong to another group.

  http://www.Cisco.com/en/us/docs/wireless/controller/5.2/configuration/guide/c52wlan.html#wp1128591

  To learn more about George video AP discover excellent groups

  http://www.my80211.com/Cisco-Labs/2009/3/22/Cisco-AP-group-nugget.html

  I hope this helps!

  Rob

• Cannot establish connection/local authorization on 6500's

  I have a need to allow a small group of level-15 users temporary access to several 6500

  switches (12.2 - 33 SXJ2 code execution), but do not want to provide the password secret enable that is used on the

  the rest of the network (over 1200 devices).  I tried to eliminate the AAA using the command "no aaa new-model", but I was told that I could not remove aaa while there are active sessions, and 'local connection' appeared more as an option for the vty lines.  So, I created a database of local user, called the 'support' that I used to replace the entry 'group' in sections of the authentication and authorization of our AAA config and connection on vty 0 4.

  [The username is given a privilege level of 15 with an individual password for authentication.  (e.g. username privilege 15 password 0 xxxxx jsmith)]

  I changed our AAA configuration to support the local login, but could not establish a "mode" (i.e. the prompt #) with any account.  I have

  can log on locally, but only to a normal "user mode" (i.e. > prompt).

  Here is the config current, modified, and sanitized for our AAA sections and line vty 0 4.  Please tell me what needs

  for the stay, and what to go.  Thank you!

  P.S.: for reasons of security, we want to track individual activity, so need the accounting AAA part to stay.

  AAA new-model
  AAA server Ganymede group + XXXXXX
  Server xxx.xxx.xxx.xxx
  Server xxx.xxx.xxx.xxx
  !
  enable AAA authentication login default group XXXXXX
  the AAA authentication enable default
  default AAA authorization exec XXXXXX group no
  AAA authorization commands 15 default authenticated if
  AAA authorization network default group XXXXXX no
  authorization AAA MLPPP-PPP network no
  MLPPP AAA authorization network no
  AAA accounting exec by default start-stop group XXXXXX
  AAA accounting command 15 default start-stop group XXXXXX
  AAA accounting network default start-stop group XXXXXX
  AAA accounting connection by default start-stop group XXXXXX
  AAA accounting system by default start-stop group XXXXXX
  !
  line vty 0 4
  access-class 75
  exec-timeout 15 0
  privilege level 0
  password 7 xxxxxxxxxxxxxxxxxxx
  entry ssh transport

  I'll have to probably more information until I can provide more help but since I see in the snip-it, you have configured aaa and your AAA server is a GANYMEDE server +. If this is the case you should keep in mind the following:

  1. If the authentication/authorization commands refer to the GANYMEDE group + then you will need to add a 'local' at the end of the command. This will allow local accounts to use when the AAA server is down/unavailable

  2. keep in mind that local users will ONLY be used when the AAA server is down/unavailable. You cannot have a mixture of the two

  Question, since you have a GANYMEDE server +, why don't you just create temporary accounts directly on the server GANYMEDE + accounts vs local? You can get very granular like that and don't allow some commands on some devices, during a certain time of day, etc...

  I hope this helps and thank you for the rating!

• LMS 3.2 (solaris 10) - user tracking: once again "ogs_server_urn" not found! Errors

  LMS 3.2 on a solaris 10 server that had problems with ctm_config.txt in the past (https://supportforums.cisco.com/thread/2033941) now once again has problems with the device Selector in UT. There are FATAL errors of type it below connected to CampusOGSServer.log:

  [Tue 19 Oct 18:27:22 CEST 2010] FATAL Com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy no first-level cache for: /[email protected] / * /[email protected]/ * defined //System groups inaccessible devices
  [Tue 19 Oct 18:30:52 EST 2010] FATAL Com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy no first-level cache for: /[email protected] / * /-Server
  [Tue 19 Oct 18:33:03 EST 2010] FATAL Com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy no first-level cache for: /[email protected] / * /[email protected]/ * defined //System groups inaccessible devices
  [Tue 19 Oct 18:35:04 CEST 2010] FATAL Com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy no first-level cache for: /[email protected] / * /-Server/Pre-deployed
  [Tue 19 Oct 18:35:05 EST 2010] FATAL Com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy no first-level cache for: /[email protected] / * /-Server/User Defined groups

  To create failure I'm going to UT > reports > generator-online Switch Port report > Switch Port summary
  The switch of the device that opens contains all devices and clicking the search button produces the following error:

  Problem with file /WEB-INF/screens/deviceselector/DeviceFilter.jsp! URN_NOT_FOUND: urn 'ogs_server_urn': not found!

  also, the following error is located in /opt/CSCOpx/MDC/tomcat/logs/stdout.log:

  October 18, 2010 14:18:49 org.apache.catalina.core.ApplicationDispatcher invoke

  SERIOUS: Servlet.service () for servlet jsp threw exception

  com.cisco.nm.xms.ctm.common.CTMException: URN_NOT_FOUND: urn 'ogs_server_urn': not found!

  at com.cisco.nm.xms.ctm.client.CTMCall.establishIPC(CTMCall.java:238)

  to com.cisco.nm.xms.ctm.client.CTMCall. (CTMCall.java:218)

  to com.cisco.nm.xms.ctm.client.CTMClientProxy. (CTMClientProxy.java:64)

  at com.cisco.nm.xms.ctm.client.CTMClientProxy.getProxy(CTMClientProxy.java:180)

  at com.cisco.nm.xms.ogs.client.OGSServerProxy.init(OGSServerProxy.java:179)

  at com.cisco.nm.xms.ogs.client.OGSServerProxy.init(OGSServerProxy.java:98)

  to com.cisco.nm.xms.ogs.client.OGSServerProxy. (OGSServerProxy.java:85)

  at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getServerProxy(OGSRuleExpressionUtil.java:102)

  at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getClassDefUtil(OGSRuleExpressionUtil.java:123)

  at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getInternalClasses(OGSRuleExpressionUtil.java:153)

  at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getClasses(OGSRuleExpressionUtil.java:174)

  at org.apache.jsp.WEB_002dINF.screens.deviceselector.DeviceFilter_jsp._jspService(DeviceFilter_jsp.java:158)

  at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

  at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:332)

  at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)

  at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

  at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:692)

  at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:594)

  at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:506)

  at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:966)

  at org.apache.jasper.runtime.PageContextImpl.include(PageContextImpl.java:614)

  at com.cisco.nm.uii.taglib.framework.ContentAreaTag.doStartTag(ContentAreaTag.java:76)

  at org.apache.jsp.WEB_002dINF.screens.popup_jsp._jspx_meth_embu_contentarea_0(popup_jsp.java:876)

  at org.apache.jsp.WEB_002dINF.screens.popup_jsp._jspService(popup_jsp.java:693)

  at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

  at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:332)

  at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)

  at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

  at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:692)

  at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:470)

  at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:405)

  at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)

  at org.apache.struts.action.ActionServlet.processActionForward(ActionServlet.java:1758)

  at com.cisco.nm.uii.UIIController.processActionForward(UIIController.java:380)

  at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1595)

  at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:491)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

  at com.cisco.nm.cmf.util.AccessLogFilter.doFilter(AccessLogFilter.java:128)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)

  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)

  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)

  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)

  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)

  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)

  at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)

  at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)

  at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:754)

  at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:684)

  to org.apache.jk.common.ChannelSocket$ SocketConnection.runIt (ChannelSocket.java:876)

  to org.apache.tomcat.util.threads.ThreadPool$ ControlRunnable.run (ThreadPool.java:684)

  at java.lang.Thread.run(Thread.java:595)

  I checked the file ctm_config.txt in the directory campus and cmapps, removed the files ctmregistry and ctmregistry.backup from/opt/CSCOpx/MDC/tomcat/webapps/campus/WEB-INF/lib, deleted all files and directories below/opt/CSCOpx/MDC/tomcat/work/Standalone/localhost/and restart the services.
  No change...

  What I noticed by looking directly in the database of the CMF is that "CampusOgsGroupCacheTable" is completely empty where the following tables contain data:
  CampusOgsGroupPropertiesTable
  CampusOGSTagTable
  CampusUserGroupAssociationTable

  What could be the reason for this behavior?

  I still thought of the option to export all groups of CMF (or at least groups of campus) and delete all tables of OGS and re-import the groups but when I try to do it I get the following error:

  [email protected] / * /-server #. / perl./OGSCli.sh u admin
  Enter the password for the CiscoWorks:
  Authentication succeeded.
  INFO: Type EXIT to exit from OGSCli guest at any time.
  Enter a task OGSCli [export]: export
  Enter a filename of export groups:./OGSGroupExport.info
  WARN: The details of the group in the selected file will be replaced by new groups of export information. Do you want to continue? (y/n) [n]: y
  Enter a name of group hierarchy defined by the user to export or the full export of all groups defined by the user of all of the applications [all]: all the
  INFO: Hierarchies of groups defined by the user in all the applications that are installed in all servers, will be exported to. / OGSGroupExport.info.
  Authorization succeeded.
  ERROR: Could not export the specified groups, user-defined hierarchies in. / OGSGroupExport.info.
  ERROR: This could be due to one or more of the following reasons:
  ERROR: * OGSServer process may not work
  ERROR: * remote server consolidation or Application may not be accessible
  ERROR: * lack perhaps of free disk space
  ERROR: * you do not have the required file permissions to create the file.
  ERROR: See /var/adm/CSCOpx/log/CMFOGSClient.log for more details.
  [email protected] / * /-server #. / perl./OGSCli.sh u admin d
  Enter the password for the CiscoWorks:
  Authentication failed.
  Check the username and password you entered.
  [email protected] / * /-server #.

  just to be sure, I download the 2 files ctm_config.txt...

  Instead of setting DYNAMIC_PORT_ALLOCATION = 0, replace perms on both ctm_config.txt 0444 files, use the original port and see if UT works.  If so, run in this configuration for some time see if corruption returns.  It should not since casuser won't be able to write to the file.

• VPN site to Site between 6.3 (3) PIX and PIX 7.0 (1)

  Hi all

  I am configuring a VPN site-to site between my office and a new site. This is my first time doing a real VPN site to site, in the past we have always just used MS PPTP VPN.

  My office firewall is a 6.3 (3) 506th PIX running, and unfortunately this can not be upgraded to 7.0.

  My new site has a pair of PIX 525 in a failover configuration, running version 7.0 (1).

  The only documentation that I could find on this subject is a http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml, which corresponds to an even earlier version of the software firewall (although orders seemed to be valid on the 6.3 software).

  I ran through the VPN Wizard in the ASDM on the new firewall of sites, and the output produced in the firewall rules is not really what I expected. Commands like 'ISAKMP key' have been depreciated and replaced by "tunnel-group.

  What I'm really after a pointer in the right direction for certain documents which covers this type of scenario, I can't be the only one trying the link between the different versions of PIX.

  Hi M8,

  In quick words, more of the config is always the same (sets of transform, ISAKMP policy, Crypto Maps and Crypto ACL).

  The only thing that changes is the:

  ISAKMP key * address x.x.x.x

  and it is replaced by the tunnel-group command:

  tunnel-group x.x.x.x type ipsec-l2l

  tunnel-group ipsec-attributes x.x.x.x

  pre-shared-key *.

  you put the IP peer under the name of tunnel and as you can see, you will write the key in ipsec-attributes sub-mode.

  I see straight forward and I think that you will find it easy once you get used to the question of the tunnel-group.

  Hope that helps.

  Salem.