Group - Here / global attributes required in ASA 9 + code for a Tunnel L2L?

Similar Questions

• BI Publisher - block entity - display the global attributes

  Hello

  With the help of OPA 12.2.1.

  I use an rtf to generate a PDF file at the end of my interview.

  In the rtf, I have a block of an entity:

  <? for-each: children? >

  <? end foreach? >

  In this block, I display the attribute of the entity, but I view the global attributes so for each child.

  Behavior: the child attributes are displayed, but not overall.

  For the record, the global attributes are well displayed outside teaching.

  No idea what to do?

  Thank you.

  Orlando

  The exact path of the child elements being processed at the global attribute is not just "... / ' could be several levels upward.   The XML being processed by BI publisher can be considered to be a file path (in XML called XPath) each subelement is 'low' level and each parent elements is "up" one level (for example "..") ("/" current level is the parent).  The key is to look at the real generated XML and then determine the best way to access the elements in your RTF.  XPath is very powerful to navigate anywhere in the XML document to select the nodes/elements that you want to process.  Resources such as the https://blogs.oracle.com/ocsbip/entry/xslxsltxpathxslfo_part_1 can explain more in detail.

• PowerCLI need to define global attributes on the hosts

  PowerCLI need to define global attributes on the hosts... Please, I beg you. ESXi4.

  The name is easy in the user interface as long as it applies to all hosts in the global inventory, but I want to be able to set or change the value of the attribute on a per host-level or a cluster.

  Thanks for any help!

  I have

  To create global custom attributes that you use

  New-CustomAttribute -Name MyCustomAttribute
  

  To set a global custom attribute for the hosts, you can use

  New-CustomAttribute -Name MyCustomAttribute -TargetType VMHost
  

  If you want to set or change the value of the attribute for a specific host, you can do

   Set-CustomField -Name MyCustomAttribute -Value "MyValue" -Entity (Get-VMHost )
  

  If you want to change the value for all hosts in a cluster, you can do

  Get-Cluster  | Get-VMHost | Set-CustomField -Name MyCustomAttribute -Value "MyValue"
  

  ____________

  Blog: LucD notes

  Twitter: lucd22

• Display 'global' attributes, and other entities in a single screen

  As far as I know, in OPM attributes of an entity type can be added to any given screen.
  
  According to operating conditions of my current project Ihave to view more attributes of an entity type in some of the screens.
  
  I have found a workaround for entities which has only one instance (singleton in version 10.1 entity), but could not figure out how to view the attributes of entities which has several occurrences.
  
  For example:
  We have an entity called < b > "child" < /b > that has many attributes. It may be more than one child bodies defined in a given assessment session.
  
  This particular screen should have the attributes that belong to the "global" < b > < /b > and < b > 'the child' < /b > instances.
  (The names of all children must be displayed on the screen as the checkboxes < b > < /b > so that the user can select the children who are affected by the global attributes displayed on the screen.)
  
  Is - this achievble in OPM 10.1?
  
  
  SP1D3R MAN

  Display global attributes and attributes in the entity-level nested on the same screen of question cannot be done to the OPM 10.1 with the out-of-the-box feature. Need a custom screen. (For the record, I'm not a programmer so I can't advise on how to build such a personalized screen.)

  Before generating customizations, you should also consider whether you really need to use an older version of the product. OPA 10.1 came out early last year; the current version is 10.3.

• I can handle an ASA 5505 of a VPN tunnel?

  If so, how?

  I have a 5500 ASA, which works very well.  But when I try to use a PC tunnele as host for Deputy Ministers DEPUTIES or SSH, it fails.  Am I missing something?

  ASA Version 8.2 (5)
  !
  INTOPS-VPN host name
  activate 1g7lIEBcTxxsrDvI encrypted password
  2KFQnbNIdI.2KYOU encrypted passwd
  names of
  !
  interface Ethernet0/0
  switchport access vlan 2
  !
  interface Ethernet0/1
  !
  interface Ethernet0/2
  !
  interface Ethernet0/3
  !
  interface Ethernet0/4
  !
  interface Ethernet0/5
  !
  interface Ethernet0/6
  !
  interface Ethernet0/7
  !
  interface Vlan1
  nameif inside
  security-level 100
  IP 192.168.5.2 255.255.255.0
  !
  interface Vlan2
  nameif outside
  security-level 0
  IP 10.220.6.200 255.255.255.224
  !
  passive FTP mode
  clock timezone PST - 8
  clock summer-time recurring PDT
  DNS server-group DefaultDNS
  pelco.com domain name
  inside_nat0_outbound to access extended list ip 192.168.5.0 allow 255.255.255.0 192.168.5.0 255.255.255.128
  inside_nat0_outbound list of allowed ip extended access any 192.168.5.0 255.255.255.128
  inside_access_in of access allowed any ip an extended list
  pager lines 24
  Enable logging
  asdm of logging of information
  Within 1500 MTU
  Outside 1500 MTU
  mask 192.168.5.50 - 192.168.5.99 255.255.255.0 IP local pool Pool_One
  ICMP unreachable rate-limit 1 burst-size 1
  don't allow no asdm history
  ARP timeout 14400
  Overall 101 (external) interface
  NAT (inside) 0-list of access inside_nat0_outbound
  NAT (inside) 101 0.0.0.0 0.0.0.0
  inside_access_in access to the interface inside group
  Route outside 0.0.0.0 0.0.0.0 10.220.6.193 1
  Timeout xlate 03:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  the ssh LOCAL console AAA authentication
  AAA authentication LOCAL telnet console
  AAA authentication enable LOCAL console
  AAA authentication http LOCAL console
  LOCAL AAA authentication serial console
  Enable http server
  http 192.168.5.0 255.255.255.0 inside
  http 192.168.5.0 255.255.255.0 outside
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  Dynamic crypto map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs
  Crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  outside_map interface card crypto outside
  crypto ISAKMP allow outside
  crypto ISAKMP policy 10
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  crypto ISAKMP policy 65535
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  enable client-implementation to date
  No vpn-addr-assign aaa
  Telnet 192.168.5.0 255.255.255.0 inside
  Telnet 192.168.5.0 255.255.255.0 outside
  Telnet timeout 5
  SSH 192.168.5.0 255.255.255.0 inside
  SSH 192.168.5.0 255.255.255.0 outside
  SSH timeout 5
  Console timeout 0
  management-access inside
  dhcpd address 192.168.5.50 - 192.168.5.99 inside
  dhcpd allow inside
  !

  no basic threat threat detection
  no statistical access list - a threat detection
  no statistical threat detection tcp-interception
  WebVPN
  internal Schneider group strategy
  Schneider group policy attributes
  Protocol-tunnel-VPN IPSec
  Pelco.com value by default-field
  internal strategy, to intops group
  group attributes intops policy
  Protocol-tunnel-VPN IPSec
  Pelco.com value by default-field
  the firewall client no
  intops encrypted fLdsGLhyHBUhWQVE privilege 15 password username
  intops attributes username
  VPN-group-policy *.
  username * 9lCVHs7/PYH72Ao0 of encrypted password privilege 15
  tunnel-group Schneider type remote access
  attributes global-tunnel-group Schneider
  address pool Pool_One
  LOCAL authority-server-group
  strategy-group-by default *.
  IPSec-attributes tunnel-group Schneider
  pre-shared key *.
  tunnel-group intops type remote access
  tunnel-group intops General attributes
  address pool Pool_One
  strategy by default-group-intops
  tunnel-group intops ipsec-attributes
  pre-shared key *.
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  Review the ip options
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  call-home
  Profile of CiscoTAC-1
  no active account
  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
  email address of destination [email protected] / * /
  destination-mode http transport
  Subscribe to alert-group diagnosis
  Subscribe to alert-group environment
  Subscribe to alert-group monthly periodic inventory
  monthly periodicals to subscribe to alert-group configuration
  daily periodic subscribe to alert-group telemetry
  Cryptochecksum:e1b30dbad389ec90e67824abccba30ce
  : end

  Thanks in advance for any help.

  Please confirm that the Deputy Ministers, DEPUTIES and SSH work correctly when launched from a device inside and failure at the VPN. The config what you want seems correct because it specifies the management on the inside interface, and it allows Deputy Ministers DEPUTIES and SSH from the range of addresses from the outside. My thoughts turn to my comment about the pool VPN duplicates the DHCP range, and that both are in the range of addresses configured to access interface. I repeat my suggestion that you configure the VPN pool to be a range of addresses that don't overlap with the other address ranges (and introduce the corresponding changes in the ranges of addresses for ASDM and SSH).

  HTH

  Ric

• Tunnel of Split VPN Setup ASA to force inside the tunnel for single address

  Hi all

  We have an ASA with IPSec VPN facility to addresses Internet of Tunnel from Split.  We have an Internet address that must come from the external interface of the ASA.  I have added this address to the list of split tunnel and confirmed on the client that is the road to the tunnel, but I'm not able to get to this address via the VPN.

  How the ASA to allow this unique Internet address to come via the VPN and route back on the same interface to the Internet and the return traffic to back up in the client VPN tunnel.

  I need to get to the address is 213.92.42.118. Here's the config relavent (let me know if I left anything):

  interface GigabitEthernet0/0
  nameif outside
  IP 1.1.1.1 255.255.255.0
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  name 10.80.177.0 VPN_Pool
  Outbound_Ports tcp service object-group
  port-object eq www
  access-list extended sheep allowed any ip VPN_Pool 255.255.255.0
  access-list extended users allow icmp a whole
  access-list extended users enable a tcp
  access-list extended users allow udp a whole
  users_splitTunnelAcl list standard access allowed 10.0.0.0 255.0.0.0
  standard access list users_splitTunnelAcl allow 192.168.43.0 255.255.255.0
  users_splitTunnelAcl list standard access allowed 192.168.40.0 255.255.255.0
  users_splitTunnelAcl list standard access allowed host 213.92.42.118

  FWOB list extended access permit tcp any any Outbound_Ports object-group

  Global (LUXCVGASA01e) 2 1.1.1.1

  NAT (LUXCVGASA01i) 2 10.0.0.0 255.0.0.0
  NAT 0 access-list sheep (LUXCVGASA01i)

  Any help is appreciated.

  -Jeff

  Hi Jeff,

  Just had a chance to look through the Setup and I guess that configured nat is incorrect.

  access-list extended sheep allowed any ip VPN_Pool 255.255.255.0
  NAT 0 access-list sheep (LUXCVGASA01i)
  NAT (LUXCVGASA01i) 2 10.0.0.0 255.0.0.0

  Global (LUXCVGASA01e) 2 1.1.1.1

  The access-list says sheep that ALL traffic goes to the pool of the VPN to go UN-natted. So, when you try to access the public ip address via the tunnel VPN, the traffic the ASA, ASA then performs a search destination NAT and matches the nat command "nat (LUXCVGASA01i) 0 access-list sheep." If the ASA detects a destination NAT translation, it will bypass route search and uses the destination NAT translation to determine the output interface (in this scenario, the output interface is LUXCVGASA01i.

  So, to resolve this problem, change the acl sheep from "any to VPN_Pool 255.255.255.0" inside"to the network VPN_Pool 255.255.255.0.

  clear xlate and re-initialization of the tunnel, and this should solve the problem.

  Let me know if that answers your query.

  Kind regards

  Manisha masseur

• ASA 5510 VPN for remote access clients are asked to authenticate on box

  Don't know what's the matter, but my remote access users are invited to join the ASA before connecting to the tunnel. How can I disable this? Config is attached. Thank you all -

  For remote access connections, you can turn off the prompt xauth (user/pass) with the following:

  Tunnel ipsec-attributes group

  ISAKMP ikev1-user authentication no

  -heather

• Restrictions of ASA Anyconnect for Split Tunneling network list

  Hello

  I have a question. We use Cisco ASA 5520 9.1.1 firmware version with configure SSL VPN Anyconnect(Anyconnect client version 2.5.605).)

  We use the big Split Tunneling access-list with 200 ACEs.

  If I add more than 200 entries in the list of access and then I connect to the VPN, and after that, we will see that only 200 entries have been added to the routing table.

  So my question is... There is a limit for Split Tunneling ACL when you use the Anyconnect client?

  Thank you

  Hello

  This is very well document in one of internal bug at Cisco . Unfortunately, as it is internal I will not be able to share the same with you. The only workaround available as of now is to combine your networks and make the list as small as possible covering all the required network you need which is less than or equal to 200

  Thank you

  Jeet Kumar

• This software is required to publish a PDF for a MacPro 2008? Where can I download? The cost?

  This software is required to publish a PDF for a MacPro 2008? Where can I download? The cost?

  Unfortunately, this is not a solution. Acrobat DC Standard is not available for Mac. If we look at Acrobat Pro DC, it requires Mac OS 10.9 or higher. Adobe essentially do not sell you anything of any utility on Mac OS 10.6.8. Older versions are simply abandoned.

  That said, I think you can still get basic PDF files. Here are two important things you don't know.

  1. the pages of a PDF document are not a special PDF do app. They are manufactured in any app you would use to make a printed page, as a Word for example. Acrobat allows a conversion, adding interactivity, management of files, make shapes, all sorts of things.

  2 mac OS, even the old version, you, includes PDF making integrated. Make you a page and go to print. Then you will see options for the PDF in the screenshot. They can also be fantasies than those made with Acrobat, but should suffice for a resume, letters, etc.

• What change required to use a code of 'class '. The FLA itself?

  Hello

  What change required to use a code of 'class '. FLA itself instead of using an external class file? Please help me solve the problem? When I tried the class code by pasting the code, it does not work. How do I change? Help, please.

  Here is the Code for the class:

  package demo {}
  
  import com.greensock.events.LoaderEvent;
  import com.greensock.loading.ImageLoader;
  import com.greensock.loading.LoaderMax;
  import com.greensock.loading.SWFLoader;
  import com.greensock.loading.VideoLoader;
  import com.greensock.loading.display.ContentDisplay;
  
  import flash.display.Sprite;
  
  SerializableAttribute public class Parse_Array extends Sprite {}
  
  public var progress_mc:MovieClip;
  
  public void Parse_Array() {}
  
  activate the Chargers, we must
  LoaderMax.activate ([ImageLoader, SWFLoader, VideoLoader]);
  
  var urls:Array = ["image.jpg", "video.f4v", "image.png", "avm2.swf"];
  var queue: LoaderMax = LoaderMax.parse (URL,
  {maxConnections:1,
  onProgress:_progressHandler,
  onComplete:_queueCompleteHandler,
  onChildComplete:_childCompleteHandler},
  {width: 125,}
  size: 90,.
  ScaleMode (ScaleMode): "stretch."
  y:150});
  queue.prependURLs("assets/");
  tail. Load();
  }
  
  private void _progressHandler(event:LoaderEvent):void {}
  This.progress_mc.progressBar_mc. ScaleX = event.target.progress;
  }
  
  private void _queueCompleteHandler(event:LoaderEvent):void {}
  var content: Array = event.target.content;
  var currentContent:ContentDisplay;
  for (var i: int = 0; i < contents.length; i ++) {}
  currentContent = content [i];
  addChild (currentContent);
  currentContent.x = i * 125 + 25;
  }
  }
  
  private void _childCompleteHandler(event:LoaderEvent):void {}
  trace ("loaded child:" + event.target + "inside the queue:" + event.currentTarget);
  }
  }
  }

  Kind regards.

  For the most part, you just need to remove all the package and the references of public/private.

• SE temp cert of Cisco ASA: device selects point trust ASA-self-signature for client

  Hi all

  After that I imported a GlobalSign Certificate from a another ASA anyconnect users receive this error message:

  AnyConnect cannot verify the server: domain.com

  Certificate does not match the name of the server

  Certificate comes from an untrusted source

  The current setting of the SAA are:

  Trust GlobalSign SSL outside

  In the newspaper:

  6 7 December 2015 10:29:14 725016 unit selects trust-point ASA-self-signed for the customer on the outside:

  This means that the ASA do not get the correct certificate? Why?

  Hi demichel2,

  Can indicate you what esityksen ASA are you running?

  If you run 9.4 and above, you may need to disable the ECDSA algorithm with the following command:

  custom SSL encryption TLSv1.2
  'AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DES-CBC3-SHA:DES-CBC-SHA:RC4-SHA:RC4-MD5 '.
  9.4 ASA release notes

  -Randy-

• Unable to pass traffic between ASA Site to Site VPN Tunnel

  Hello

  I have problems passing traffic between two ASA firewall. The VPN tunnel is up with a dynamic IP and static IP address. I have attached a diagram of the VPN connection. I'm not sure where the problem lies and what to check next. I think I have all the roads and in the access lists are needed.

  I've also attached the ASA5505 config and the ASA5510.

  This is the first time that I've set up a VPN connection any guidance would be greatly appreciated.

  Thank you

  Adam

  Hello

  Regarding your opinion of configuration Remote Site ASA that you have not added the internal networks of the Central Site VPN L2L configurations at all so the traffic does not pass through the VPN.

   access-list outside_1_cryptomap extended permit ip 10.1.1.0 255.255.255.128 10.182.226.0 255.255.*.* access-list exempt extended permit ip 10.1.1.0 255.255.255.128 10.182.226.0 255.255.*.* access-list exempt extended permit ip 10.1.1.0 255.255.255.128 10.182.0.0 255.255.*.* access-list exempt extended permit ip 10.1.1.0 255.255.255.128 192.168.170.0 255.255.*.* access-list exempt extended permit ip 10.1.1.0 255.255.255.128 192.168.172.0 255.255.*.* access-list exempt extended permit ip 10.1.1.0 255.255.255.128 140.15.0.0 255.255.*.* 

  Take a look at ACL configurations above. The 'exempt' ACL is used in configurations NAT0 and tells the ASA what traffic of exempting from NAT. "outside_1_cryptomap" ACL is used to tell the traffic between the subnets should be using the L2L VPN connection.

  So in short on the Remote Site ASA these ACLs should be identical. Make additions to the LIST of VPN L2L, then try again.

  I would also like to point out that to ensure that the Central ASAs L2L VPN ACL Site contains the same networks. The ACL on the Central Site will, of course, its internal subnets as the source and the site LAN remote destination.

  THW out of ' crypto ipsec to show his " shows you that only the SA between binding Site Central network and the Remote Site LAN was established. Others have not formed as the configuration is lacking at LEAST on the Remote Site ASA. Can also be the Central Site.

  -Jouni

• Muse does not open. Adobe AIR the required native extension is missing for this application...

  Muse does not open. "Adobe AIR the required native extension is missing for this application...". »

  Any ideas?

  Hi Curt,.

  Please try after the sequence of steps to make it work.

  1. uninstall any version of AIR on your computer using the Adobe AIR * remove Adobe AIR

  2 uninstall Muse to your machine using cleaning tool CC use the Adobe Creative Cloud cleaning tool to solve installation problems

  3 uninstall the applications Manager Adobe as well use the Adobe Creative Cloud cleaning tool to solve installation problems

  4. install AIR runtime 19.0 https://helpx.adobe.com/air/kb/archived-air-sdk-version.html

  5. install the applications Manager Adobe Download Adobe Creative Cloud apps | Adobe Creative Cloud free trial

  5. once the MAO is installed then install muse and launch it.

  Kind regards

  Vivek

• I downloaded VAC application as a member of a group, but I get no content in the request for ACCESS on my PC?

  I downloaded VAC application as a member of a group, but I get no content in the request for ACCESS on my PC?

  Hello

  Try to install it correctly:

  (1) uninstall the Creative Cloud Desktop Manager with the current tool:

  https://helpx.Adobe.com/creative-cloud/help/uninstall-creative-cloud-desktop-app.html

  (3) delete the following folders:

  C:\Program Files (x 86) \Common Files\Adobe\OOBE

  C:\Program Files (x 86) \Common Files\Adobe\AAMUpdaterInventory

  C:\Program Files (x 86) \Common Files\Adobe\SLCache

  C:\ProgramData\Adobe\SLStore

  C:\Programmes\Common Files\Adobe\OOBE

  C:\Programmes\Common Files\Adobe\AAMUpdaterInventory

  C:\Users\\AppData\Local\Adobe\OOBE

  C:\Users\\AppData\Local\Adobe\AAMUpdater

  (4) empty recycle bin (very important).

  (5) download and reinstall the CC Office:

  https://creative.Adobe.com/products/creative-cloud

  Kind regards

• I am reorganizing the attribute value using javascript. see code below

  Hi all

  I am reorganizing the attribute value using javascript. see code below and suggest me
  

  EX: id = "to THE:1" reorganize to id = "to THE:2"

  myDoc var = app.activeDocument;

  var myGlueCodePath = app.filePath + "/ Scripts/XML rules/glue code.jsx";

  var myFile = File (myGlueCodePath);

  app.doScript (myFile);

  If (app.documents.length! = 0) {}

  var myRuleSet = new Array)

  new findObjAttribute ("//auq")

  );

  {with (MyDoc)}

  var elements = xmlElements;

  __processRuleSet (Elements.Item (0), myRuleSet);

  }

  }

  else {}

  Alert ("you have no open documents!");

  Exit();

  }

  function findObjAttribute() {}

  myIdName = "findObjAttribute";

  This.XPath = ("[/ / auq[@id]");

  This.Apply = function (myElement, myRuleProcessor)

  {

  elmName = myElement var .markupTag .name;

  {with (MyElement)}

  try {}

  var myAttName = myElement .xmlAttributes .itemByName ("id") .value;

  SS var = myAttName.replace(/[A-Z]+\:/,""); "

  var SSS = ss - 1;

  myAttName = myAttName.replace(/[0-9]/,sss)

  $.writeln (myAttName);

  } catch (e) {};

  }

  }

  }

  Your code re - order the value correctly, but you don't have the update attribute in the element.

  Try this,

  myAttName = myAttName.replace(/[0-9]/,sss);

  myElement.xmlAttributes.itemByName("id").value = myAttName;