Issue between Cisco and ESX switch

Similar Questions

• difference between standard and disturbed switch

  What is the difference between standard and disturbed switch?

  What is locate these files confutation.

  Hi friend

  See below blogs:Difference is very well explained

  http://www.vmwarearena.com/2014/01/vSphere-distributed-switch-part-3.html

  http://www.tech-tap.com/2009/05/30/differences-between-vSwitches-and-dvswitches/

• VPN between Cisco and Check Point problem

  Guys,

  I have problems to establish a vpn site-to-site between a Cisco 3660 e router tunnel a firewall checkpoint NG AI R55.

  In the SiteA is an environment with a Cisco 3660 router using the following configurations:

  crypto ISAKMP policy 1

  md5 hash

  preshared authentication

  Group 2

  life 86400

  !

  ISAKMP crypto key [removed] address 172.17.10.111

  !

  Crypto ipsec transform-set esp - esp-md5-hmac serasa

  !

  Serasa 1 ipsec-isakmp crypto map

  defined by peer 172.17.10.111

  Set transform-set serasa

  match address 101

  !

  interface Serial5/4

  bandwidth 64

  IP 192.168.163.6 255.255.255.252

  no ip unreachable

  No cdp enable

  card crypto serasa

  !

  IP route 10.12.0.155 255.255.255.255 192.168.163.5

  IP route 172.17.10.111 255.255.255.255 192.168.163.5

  IP route 172.17.10.155 255.255.255.255 192.168.163.5

  !

  access-list 101 permit tcp 172.248.7.200 host 10.12.0.0 0.0.255.255 eq 3315

  In the SiteB, we have an environment highly available Nokia using VRRP.

  The IP address configured as a cluster in the Control Point is 172.17.10.111.

  We have already confirmed all the configurations of the phase 1 and 2 and is OK, but the VPN is not established.

  The following messages appear in the router and the firewall:

  ROUTER

  June 15 at 10:39:24 orbital: ISAKMP (0:252): check IPSec 1 proposal

  June 15 at 10:39:24 orbital: ISAKMP: turn 1 ESP_DES

  June 15 at 10:39:24 orbital: ISAKMP: attributes of transformation:

  June 15 at 10:39:24 orbital: ISAKMP: program is 1

  June 15 at 10:39:24 orbital: ISAKMP: type of life in seconds

  June 15 at 10:39:24 orbital: ISAKMP: life of HIS (basic) 3600

  June 15 at 10:39:24 orbital: ISAKMP: type of life in kilobytes

  June 15 at 10:39:24 orbital: ISAKMP: service life of SA (IPV) 0x0 0 x 46 0 50 x 0 x 0

  June 15 at 10:39:24 orbital: ISAKMP: authenticator is HMAC-MD5

  June 15 at 10:39:24 orbital: ISAKMP (0:252): atts are acceptable.

  June 15 at 10:39:24 orbital: IPSEC (validate_proposal_request): part #1 of the proposal

  (Eng. msg key.) Local INCOMING = 192.168.163.6, distance = 172.17.10.111,.

  local_proxy = 172.248.7.200/255.255.255.255/0/0 (type = 1),

  remote_proxy = 10.12.0.0/255.255.0.0/0/0 (type = 4),

  Protocol = ESP, transform = esp - esp-md5-hmac.

  lifedur = 0 and 0kb in

  SPI = 0 x 0 (0), id_conn = 0, keysize = 0, flags = 0 x 2

  June 15 at 10:39:24 orbital: IPSEC (kei_proxy): head = serasa, card-> ivrf =, kei-> ivrf =

  June 15 at 10:39:24 orbital: IPSEC (validate_transform_proposal): proxy unsupported identities

  June 15 at 10:39:24 orbital: ISAKMP (0:252): IPSec policy invalidated proposal

  June 15 at 10:39:24 orbital: ISAKMP (0:252): politics of ITS phase 2 is not acceptable! (local 192.168.163.6 remote 172.17.10.111)

  June 15 at 10:39:24 orbital: ISAKMP: node set 2114856837 to QM_IDLE

  June 15 at 10:39:24 orbital: ISAKMP (0:252): lot of 200.245.207.111 sending my_port 500 peer_port 500 (I) QM_IDLE

  June 15 at 10:39:24 orbital: ISAKMP (0:252): purge the node 2114856837

  June 15 at 10:39:24 orbital: ISAKMP (0:252): unknown entry for node-528822595: State = IKE_QM_I_QM1, large = 0x00000001, minor = 0x0000000C

  June 15 at 10:39:24 orbital: % CRYPTO-6-IKMP_MODE_FAILURE: fast processing mode failed with the peer to 172.17.10.111

  FIREWALL

  IKE: Main Mode has received Notification of peers: first Contact

  IKE: Completion of Main Mode.

  IKE: Quick Mode has received Notification of the counterpart: no proposal chosen

  IKE: Quick Mode has received Notification of the counterpart: no proposal chosen

  IKE: Exchanging information received remove peer IKE - SA:

  Anyone have idea who might be the problem?

  Thank you very much for the help.

  Fabiano Mendonca.

  Cool. pls mark as resolved if that might help others... the rate of responses if deemed useful...

  REDA

• (Between Cisco and Fortigate) IPsec tunnel question

  Hi all

  Im trying to install an IPsec site-to-site between 2 different routers (Cisco 3750 and Fortigate 100a) (R1 & Fortigate100A)

  IPsec, the whole scenario works with the installation.

  But unfortunately the tunnel (between R1 & Fortigate100A) IPsec does not work.

  (Pls look at the attached jpg file)

  The message is received in routers are shown below:

  Cisco: R1:

  % CRYPTO-6-IKMP_MODE_FAILURE: fast mode processing failed with the peer to 192.168.43.75

  FortiGate 100A:

  IKE 0: none established HIS IKE for informational type of d18e1af773e658b9/192.168.43.195:500->192.168.43.75 Exchange 3 cookie d3695c6cea17475a, don't drop

  IKE 0:Cisco - P1:6899: authentication OK

  IKE 0: none established HIS IKE for informational type of d18e1af78ed17bf9/192.168.43.195:500->192.168.43.75 Exchange 3 cookie 414bd35ab92bc4ef, don't drop

  IKE 0:Cisco - P1:6899:Cisco - P2:14802: failure of negotiating quick mode due to the delay of new attempt IKE 0:Cisco - P1:6900: authentication OK

  I configured both routers as follows:

  Cisco:

  HostName:R1

  ISAKMP policy 1

  Hash: sha

  Authentication: pre-shared

  Encryption: AES128

  DH group: 2

  Life 86400

  ISAKMP Key: cisco1 address 192.168.43.75

  Crypto IPsec transform-set esp - aes and hmac-sha-esp RIGHT

  Access-list: 101 permit ip 10.0.0.0 0.0.0.255 10.10.10.0 0.0.0.255

  Map R1_to_Fortigate100A 10 IPsec-Isakmp crypto

  defined by peers: 192.168.43.75

  Mailing address 101

  The value transformset: RIGHT

  int fa # 0 / 0 Crypto map R1_to_Fortigate100A

  FortiGate:

  HostName: Fortigate100A

  Phase 1:

  Preshared key: cisco1

  The remote gateway ip address: 192.168.43.195

  mode: aggressive

  Accept any pair

  Proposal P1:

  AES 128 / SHA1

  AES 192 / SHA1

  AES192/SHA 256

  DH: 2

  Keylife: 86400

  Phase2:

  AES 128 / SHA1

  AES 192 / SHA1

  AES192/SHA 256

  Keylife:86400

  Quick mode selector:

  Source address: 10.10.10.0/24

  Destination address: 192.168.43.0/24

  I will be very very very grateful if you informed of my faults possible a solution

  Happy new year

  Ministry of education

  For some time I messed with a fortigate, but I would try first to change the remote address of the phase 2 to 10.0.0,0/24. If this is the statement "interesting traffic", it does not match what you have on the Cisco. After that, try to change the phase 1 Ike mode to something else than "aggressive."

  Sent by Cisco Support technique iPad App

• Difference between Local and central switching FlexConnect

  I'm trying to understand why you would use FlexConnect "Vlan based central switching", when you can just use Local mode? Please can someone explain the difference.

  I understand that you have a branch office environment, which required two LANs a local dial-up and wireless, one at the wire centre, but out of this scenario, why would you choose Vlan "based central switching?

  I have been using the following article to understand this topic:

  http://www.Cisco.com/en/us/docs/solutions/enterprise/mobility/emob73dg/ch7_HREA.html#wp1103053

  This is the limitation when you use FlexConnect compared to local mode

  http://www.Cisco.com/en/us/docs/wireless/controller/7.2/configuration/guide/cg_flexconnect.html#wp1241304

  Thank you

  Scott

  Help others by using the rating system and marking answers questions as 'response '.

• IPSec VPN between Cisco and ScreenOS

  Hello

  I'm trying to set up a simple IPSec VPN between a Cisco 2911 router and a Juniper Netscreen ScreenOS (not exactly now the model) device. Initially the debbuging seems good (QM_IDLE), but the ISAKMP Security Association is deleted.

  The guy managing the Juniper device send me an extract from his diary:

  ###########################################################################

  2012-08-28 10:24:16 info 00536 IKE Phase 2 msg ID System

  9b 839579: negotiations failed.

  2012-08-28 10:24:16 info system 00536 rejected a package of IKE loopback.11

  of : 500 to

  217.150.152.45:500 with cookies

  87960e39d074ca49 and 9302d26c7ce324a5

  because there is no acceptable Phase

  2 proposals...

  It has defined the following phase 2 proposals:

  IKE the value p2-proposal "G2_esp_aes256_sha_1800s" group2 esp aes256-sha-1, 1800 second

  ###########################################################################

  And I use these:

  ###########################################################################

  crypto ISAKMP policy 1

  BA aes 256

  preshared authentication

  Group 2

  !

  ISAKMP crypto key address 217.150.152.45

  Crypto ipsec transform-set esp - aes esp - aes 256 esp-sha-hmac

  card crypto ipsec vpn 2 isakmp

  Description * VPN Anbindung nach PKI in Magdeburg *.

  defined by peer 217.150.152.45

  define security-association life seconds 1800

  the value of the transform-set esp - aes

  match address PKI-TRAFFIC

  !

  ###########################################################################

  Here is my Log:

  #################################################################################################################

  28 August 08:23:46.416: ISAKMP: (0): profile of THE request is (NULL)

  28 August 08:23:46.416: ISAKMP: created a struct peer 217.150.152.45, peer port 500

  28 August 08:23:46.416: ISAKMP: new position created post = 0x2A2D7150 peer_handle = 0x8000003A

  28 August 08:23:46.416: ISAKMP: lock struct 0x2A2D7150, refcount 1 to peer isakmp_initiator

  28 August 08:23:46.416: ISAKMP: 500 local port, remote port 500

  28 August 08:23:46.416: ISAKMP: set new node 0 to QM_IDLE

  28 August 08:23:46.416: ISAKMP: (0): insert his with his 31627E04 = success

  28 August 08:23:46.416: ISAKMP: (0): cannot start aggressive mode, try the main mode.

  28 August 08:23:46.416: ISAKMP: (0): pair found pre-shared key matching 217.150.152.45

  28 August 08:23:46.416: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID

  28 August 08:23:46.416: ISAKMP: (0): built the seller-07 ID NAT - t

  28 August 08:23:46.416: ISAKMP: (0): built of NAT - T of the seller-03 ID

  28 August 08:23:46.416: ISAKMP: (0): built the seller-02 ID NAT - t

  28 August 08:23:46.416: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

  28 August 08:23:46.416: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

  28 August 08:23:46.416: ISAKMP: (0): Beginner Main Mode Exchange

  28 August 08:23:46.416: ISAKMP: (0): lot of 217.150.152.45 sending my_port 500 peer_port 500 (I) MM_NO_STATE

  28 August 08:23:46.416: ISAKMP: (0): sending a packet IPv4 IKE.

  28 August 08:23:46.448: ISAKMP (0): received 217.150.152.45 packet dport 500 sport Global 500 (I) MM_NO_STATE

  28 August 08:23:46.448: ISAKMP: (0): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH

  28 August 08:23:46.448: ISAKMP: (0): former State = new State IKE_I_MM1 = IKE_I_MM2

  28 August 08:23:46.448: ISAKMP: (0): treatment ITS payload. Message ID = 0

  28 August 08:23:46.448: ISAKMP: (0): load useful vendor id of treatment

  28 August 08:23:46.448: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 239

  28 August 08:23:46.448: ISAKMP: (0): load useful vendor id of treatment

  28 August 08:23:46.448: ISAKMP: (0): provider ID is DPD

  28 August 08:23:46.448: ISAKMP: (0): load useful vendor id of treatment

  28 August 08:23:46.448: ISAKMP: (0): IKE frag vendor processing id payload

  28 August 08:23:46.448: ISAKMP: (0): IKE Fragmentation support not enabled

  28 August 08:23:46.448: ISAKMP: (0): pair found pre-shared key matching 217.150.152.45

  28 August 08:23:46.448: ISAKMP: (0): pre-shared key local found

  28 August 08:23:46.448: ISAKMP: analysis of the profiles for xauth...

  28 August 08:23:46.448: ISAKMP: (0): audit ISAKMP transform 1 against the policy of priority 1

  28 August 08:23:46.448: ISAKMP: AES - CBC encryption

  28 August 08:23:46.448: ISAKMP: SHA hash

  28 August 08:23:46.448: ISAKMP: group by default 2

  28 August 08:23:46.448: ISAKMP: pre-shared key auth

  28 August 08:23:46.448: ISAKMP: keylength 256

  28 August 08:23:46.448: ISAKMP: type of life in seconds

  28 August 08:23:46.448: ISAKMP: life (IPV) 0 x 0 0 x 1 0 x 51 0x80

  28 August 08:23:46.448: ISAKMP: (0): atts are acceptable. Next payload is 0

  28 August 08:23:46.448: ISAKMP: (0): Acceptable atts: real life: 0

  28 August 08:23:46.448: ISAKMP: (0): Acceptable atts:life: 0

  28 August 08:23:46.448: ISAKMP: (0): fill atts in his vpi_length:4

  28 August 08:23:46.448: ISAKMP: (0): fill atts in his life_in_seconds:86400

  28 August 08:23:46.448: ISAKMP: (0): return real life: 86400

  28 August 08:23:46.448: ISAKMP: (0): timer life Started: 86400.

  28 August 08:23:46.448: ISAKMP: (0): load useful vendor id of treatment

  28 August 08:23:46.448: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 239

  28 August 08:23:46.448: ISAKMP: (0): load useful vendor id of treatment

  28 August 08:23:46.448: ISAKMP: (0): provider ID is DPD

  28 August 08:23:46.448: ISAKMP: (0): load useful vendor id of treatment

  28 August 08:23:46.448: ISAKMP: (0): IKE frag vendor processing id payload

  28 August 08:23:46.448: ISAKMP: (0): IKE Fragmentation support not enabled

  28 August 08:23:46.448: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

  28 August 08:23:46.448: ISAKMP: (0): former State = new State IKE_I_MM2 = IKE_I_MM2

  28 August 08:23:46.448: ISAKMP: (0): lot of 217.150.152.45 sending my_port 500 peer_port 500 (I) MM_SA_SETUP

  28 August 08:23:46.448: ISAKMP: (0): sending a packet IPv4 IKE.

  28 August 08:23:46.452: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

  28 August 08:23:46.452: ISAKMP: (0): former State = new State IKE_I_MM2 = IKE_I_MM3

  28 August 08:23:46.484: ISAKMP (0): received 217.150.152.45 packet dport 500 sport Global 500 (I) MM_SA_SETUP

  28 August 08:23:46.484: ISAKMP: (0): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH

  28 August 08:23:46.484: ISAKMP: (0): former State = new State IKE_I_MM3 = IKE_I_MM4

  28 August 08:23:46.484: ISAKMP: (0): processing KE payload. Message ID = 0

  28 August 08:23:46.508: ISAKMP: (0): processing NONCE payload. Message ID = 0

  28 August 08:23:46.508: ISAKMP: (0): pair found pre-shared key matching 217.150.152.45

  28 August 08:23:46.508: ISAKMP: (1049): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

  28 August 08:23:46.508: ISAKMP: (1049): former State = new State IKE_I_MM4 = IKE_I_MM4

  28 August 08:23:46.508: ISAKMP: (1049): send initial contact

  28 August 08:23:46.508: ISAKMP: (1049): ITS been pre-shared key, using id ID_IPV4_ADDR type authentication

  28 August 08:23:46.508: ISAKMP (1049): payload ID

  next payload: 8

  type: 1

  address: 92.67.80.237

  Protocol: 17

  Port: 500

  Length: 12

  28 August 08:23:46.508: ISAKMP: (1049): the total payload length: 12

  28 August 08:23:46.508: ISAKMP: (1049): lot of 217.150.152.45 sending my_port 500 peer_port 500 (I) MM_KEY_EXCH

  28 August 08:23:46.508: ISAKMP: (1049): sending a packet IPv4 IKE.

  28 August 08:23:46.508: ISAKMP: (1049): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

  28 August 08:23:46.508: ISAKMP: (1049): former State = new State IKE_I_MM4 = IKE_I_MM5

  28 August 08:23:46.540: ISAKMP (1049): received 217.150.152.45 packet dport 500 sport Global 500 (I) MM_KEY_EXCH

  28 August 08:23:46.540: ISAKMP: (1049): payload ID for treatment. Message ID = 0

  28 August 08:23:46.540: ISAKMP (1049): payload ID

  next payload: 8

  type: 1

  address: 217.150.152.45

  Protocol: 17

  Port: 500

  Length: 12

  28 August 08:23:46.540: ISAKMP: (0): peer games * no * profiles

  28 August 08:23:46.540: ISAKMP: (1049): HASH payload processing. Message ID = 0

  28 August 08:23:46.540: ISAKMP: (1049): SA authentication status:

  authenticated

  28 August 08:23:46.540: ISAKMP: (1049): SA has been authenticated with 217.150.152.45

  28 August 08:23:46.540: ISAKMP: try inserting a peer /217.150.152.45/500/ and inserted 2A2D7150 successfully.

  28 August 08:23:46.540: ISAKMP: (1049): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH

  28 August 08:23:46.540: ISAKMP: (1049): former State = new State IKE_I_MM5 = IKE_I_MM6

  28 August 08:23:46.540: ISAKMP: (1049): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

  28 August 08:23:46.540: ISAKMP: (1049): former State = new State IKE_I_MM6 = IKE_I_MM6

  28 August 08:23:46.540: ISAKMP: (1049): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

  28 August 08:23:46.540: ISAKMP: (1049): former State = new State IKE_I_MM6 = IKE_P1_COMPLETE

  28 August 08:23:46.540: ISAKMP: (1049): start Quick Mode Exchange, M - ID of 1582159006

  28 August 08:23:46.552: ISAKMP: (1049): initiator QM gets spi

  28 August 08:23:46.552: ISAKMP: (1049): lot of 217.150.152.45 sending my_port 500 peer_port 500 (I) QM_IDLE

  28 August 08:23:46.552: ISAKMP: (1049): sending a packet IPv4 IKE.

  28 August 08:23:46.552: ISAKMP: (1049): entrance, node-1582159006 = IKE_MESG_INTERNAL, IKE_INIT_QM

  28 August 08:23:46.552: ISAKMP: (1049): former State = new State IKE_QM_READY = IKE_QM_I_QM1

  28 August 08:23:46.552: ISAKMP: (1049): entry = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

  28 August 08:23:46.552: ISAKMP: (1049): former State = new State IKE_P1_COMPLETE = IKE_P1_COMPLETE

  28 August 08:23:46.584: ISAKMP (1049): received 217.150.152.45 packet dport 500 sport Global 500 (I) QM_IDLE

  28 August 08:23:46.584: ISAKMP: node set-452721455 to QM_IDLE

  28 August 08:23:46.584: ISAKMP: (1049): HASH payload processing. Message ID =-452721455

  28 August 08:23:46.584: ISAKMP: (1049): treatment protocol NOTIFIER PROPOSAL_NOT_CHOSEN 1

  SPI 0, message ID =-452721455, his 0x31627E04 =

  28 August 08:23:46.584: ISAKMP: (1049): peer does not paranoid KeepAlive.

  28 August 08:23:46.584: ISAKMP: (1049): remove the reason for HIS "fatal Recevied of information' State (I) QM_IDLE (post 217.150.152.45)

  28 August 08:23:46.584: ISAKMP: (1049): node-452721455 error suppression FALSE reason 'informational (en) State 1.

  28 August 08:23:46.584: ISAKMP: (1049): entry = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY

  28 August 08:23:46.584: ISAKMP: (1049): former State = new State IKE_P1_COMPLETE = IKE_P1_COMPLETE

  28 August 08:23:46.584: ISAKMP: node set 494253780 to QM_IDLE

  28 August 08:23:46.584: ISAKMP: (1049): lot of 217.150.152.45 sending my_port 500 peer_port 500 (I) QM_IDLE

  28 August 08:23:46.584: ISAKMP: (1049): sending a packet IPv4 IKE.

  28 August 08:23:46.584: ISAKMP: (1049): purge the node 494253780

  28 August 08:23:46.584: ISAKMP: (1049): entry = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

  28 August 08:23:46.584: ISAKMP: (1049): former State = new State IKE_P1_COMPLETE = IKE_DEST_SA

  28 August 08:23:46.584: ISAKMP: (1049): remove the reason for HIS "fatal Recevied of information' State (I) QM_IDLE (post 217.150.152.45)

  Intertoys_Zentrale_Waddinxveen_01 #.

  28 August 08:23:46.584: ISAKMP: Unlocking counterpart struct 0x2A2D7150 for isadb_mark_sa_deleted(), count 0

  28 August 08:23:46.584: ISAKMP: delete peer node by peer_reap for 217.150.152.45: 2A2D7150

  28 August 08:23:46.584: ISAKMP: (1049): node-1582159006 error suppression FALSE reason 'IKE deleted.

  28 August 08:23:46.584: ISAKMP: (1049): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH

  28 August 08:23:46.584: ISAKMP: (1049): former State = new State IKE_DEST_SA = IKE_DEST_SA

  #################################################################################################################

  Is there something special that needs to be addressed when creating a VPN for Juniper devices?

  Greetings

  Thomas

  The peer IPSec a PFS enabled, do the same in your crypto-map:

  card crypto ipsec vpn 2 isakmp

  PFS group2 Set

  --
  Don't stop once you have upgraded your network! Improve the world by lending money to low-income workers:
  http://www.Kiva.org/invitedBy/karsteni

• Issue between internet and VLANs

  I have problem to make the VMs to connect to internet.

  I have 2 VLans 1 Internet and be able to connect to internet (1 VLID) 2nd EX07 and NDoc can't connect to internet and both VLANS connected to the same physical adapter.

  Find the attached screen shoots

  By AndreaMouro is true.

  When a NETWORK adapter is configured for VLAN, all networks need to be created VLAN ID.

  Who manages the VLAN on the same physical network is the physical switch.

  Of the ESX server to declare the various networks and then grouped VM by VLAN ID.

  Conclusion: There is no VLAN only created on the physical switch. does not work if we create VIRTUAL networks in ESX server.

  Kind regards.

  Edgardo Morgan

• NSX - Ping issues between DLR and edge gateway on the network of public transport

  Hello

  I have deployed an NSX in a POC environment and have a few weird questions. I sent a distributed router (DLR) with 2 internal interfaces (related to the segments of NW app & web) and an uplink interface connected to a network of transit (192.168.10.0/29). I have also deployed a gateway of Edge services with an internal link connected to the same interface of transit (192.168.10.0/29) and an interface of uplink connected to the outside world.

  The question is, when I PuTTY on the Edge service gateway and ping interface uplink of the DLR using sound transit (192.168.10.2) network ip address, I do not get a response. The firewall is configured to accept all traffic on the DLR and the edge.

  Someone at - it ideas? Note that the DLR has been configured default gateway pointing to the IP of the gateway of the Edge on the network of public transport (as is the only North DLR connection)

  See you soon

  A rough drawing of the topology is attached. Ping fails to 192.168.10.1 to 192.168.10.2

  FYI - has proved to be a problem with the NSX 6.1.2 that attaches to 6.1.3. No KB for the issue for the time being, nor is he mentioned as being fixed at 6.1.3 in the notes but VMware engineer GSS confirmed that its fixed.

  temporary work is about to stop and start the daemon netcpa on the compute cluster hosts & edge of ESXi

  See more details on my blog http://chansblog.com/nsx-6-1-2-bug-dlr-interface-communication-issues-how-to-troubleshoot-using-net-vdr-command/http://chansblog.com/nsx-6-1-2-bug-dlr-interface-communication-issues-how-to-troubleshoot-using-net-vdr-command/

• Difference between ESXi and ESX?

  What is the difference? Are there benefits or in the a features that do not exist in the other?

  Take a look at this thread:

  =========================================================================

  William Lam

  VMware vExpert 2009

  Scripts for VMware ESX/ESXi and resources at: http://engineering.ucsb.edu/~duonglt/vmware/

  repository scripts vGhetto

  VMware Code Central - Scripts/code samples for developers and administrators

  150 VMware developer

  Twitter: @lamw

  If you find this information useful, please give points to "correct" or "useful".

• MARCH Cisco and Foundry switch integration.

  Hello

  Is it possible to add foundry devices to the device in MARCH. Would I be able to import specific events and the State of the system?

  Thank you

  March does not directly support these devices. You will need to create some parsers customized for each message the device. It is not fun (and not having to do that is the main point of a SIM card) but it can be done.

• Download issues between muse and Godaddy

  I have download problems to godaddy. When I download all the files, I get an error message saying php not supported on the server. Someone had this problem? Thank you

  Hello

  I would advise to contact your host (Godaddy) and confirm with them if your hosting plan supports PHP or have PHP installed.

  If they confirm that the server has PHP installed and support then please let me know.

  Kind regards

  Vivek

• Issue between sqlserver2005 and oracle dblink

  Hello
  
  Oracle Version: 10.2.0.1
  Operating system: Windows Xp
  
  When I am creating oracle database to sqlserver2005 link I get the following error when you try to retrieve data. Here my sqlserver is on windows Xp only.
  

   
  
  SQL> create database link sq connect to sa identified by sql2005 using 'hsodbc_1';
  
  Database link created.
  
  SQL> select *  from test.emp@sq;
  select *  from test.emp@sq
                          *
  ERROR at line 1:
  ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
  [Generic Connectivity Using ODBC][Microsoft][ODBC SQL Server Driver][SQL
  Server]Login failed for user 'SA'. (SQL State: 28000; SQL Code: 18456)
  ORA-02063: preceding 2 lines from SQ

  Please help me.
  
  Thank you and best regards,
  Poorna Prasad.

  SIDDABATHUNI wrote:
  Hello

  I still get the error.

  SQL> drop database link sq;
  
  Database link dropped.
  
  SQL> create database link sq connect to "sa" identified by "sql2005" using 'hsodbc_1';
  
  Database link created.
  
  SQL> select *  from test.emp@sq;
  select *  from test.emp@sq
  *
  ERROR at line 1:
  ORA-02085: database link SQ.REGRESS.RDBMS.DEV.US.ORACLE.COM connects to
  HO.WORLD
  

  It's a different error that you posted earlier.

  In this case

  ORA-02085: database link string connect to string
  Cause: a database link is connected to a database with a different name. The connection is rejected.
  Action: create a link of database with the same name as the database, it connects to, or set global_names = false.

• Cisco and Checkpoint VPN clients on a single PC

  Hello

  I'm in the following fix:

  I had used customer Checkpoint SecuRemote 4.1 SP - 5 VPN in the past.

  Now, I have installed the Cisco VPN client version 4.0.4 on my PC to access IPSec VPN for the PIX in our headquarters.

  According to Cisco VPN release notes http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel404/404clnt.htm#wp1346340 , it should be possible to have clients both Cisco and Checkpoint VPN installed on the same machine.

  But I am not able to connect to my PIX, I receive the following error message:

  "Secure the complete VPN connection locally by the Client.

  Reason 403: failed to contact the security gateway. »

  When I'm looking for signs of PC control-> system-> hardware-> device Administration-> network cards, I can see Cisco Systems VPN Adapter disabled.

  After you activate manually, I always get the same error when you try to connect to the Cisco VPN client.

  After PC restart the Cisco VPN adapter is disabled later.

  I tried to uncheck Check Point SecuRemote form my Dial-up connection (bypassing CSCea31192 of bug, but the bug does not affect NAT - T connection which I use).

  I noticed the same situation on three different computers, one running Windows XP, both running Windows 2000.

  After uninstalling the client Checkpoint completely (including Windows registry manual removal), the Cisco VPN client works very well.

  It seems to me, therefore, that there is a profound mismatch between Cisco and Checkpoint VPN clients.

  Does anyone know of a workaround?

  Thank you

  Milan

  We had the same problem with some of our users who need to use the two clients to connect to customer sites.

  If I remember the cisco client does not start automatically, but the client of checkpoint 4.1 don't.

  We by-passed by deleting the registry entry point control that starts the client at startup. fwenc.exe is the entrance and it is in

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

  After that make a shortcut to the executable file that is stored in the directory \bin to relevant checkpoint on the client (it is different from NT & 9 client x) and then only start when it is necessary.

  Hope that's a help

• Problem router Cisco and Checkpoint VPN

  Hello

  I couldn't establish vp from site to site between cisco and checkpoint. Can you please check the logs?

  Thank you.

  * 29 sept 08:17:22.627: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:17:22.631: ISAKMP: (0): profile of THE request is (NULL)
  * 29 sep 08:17:22.631: ISAKMP: created a struct peer X.X.X.X, peer port 500
  * 29 sep 08:17:22.631: ISAKMP: new created position = 0x88AD1AB0 peer_handle = 0 x 80000004
  * 29 sep 08:17:22.631: ISAKMP: lock struct 0x88AD1AB0, refcount 1 to peer isakmp_initiator
  * 29 sep 08:17:22.631: ISAKMP: 500 local port, remote port 500
  * 29 sep 08:17:22.631: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:17:22.631: ISAKMP: (0): insert his with his 88AF7D94 = success
  * 29 sep 08:17:22.631: ISAKMP: (0): cannot start aggressive mode, try the main mode.
  * 29 sep 08:17:22.631: ISAKMP: (0): pre-shared key found peer corresponding X.X.X.X
  * 29 sep 08:17:22.631: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID
  * 29 sep 08:17:22.631: ISAKMP: (0): built the seller-07 ID NAT - t
  * 29 sep 08:17:22.631: ISAKMP: (0): built of NAT - T of the seller-03 IDexit
  Router (config) #n
  * 29 sep 08:17:22.631: ISAKMP: (0): built the seller-02 ID NAT - t
  * 08:17:22.631 Sept. 29: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
  * 08:17:22.631 Sept. 29: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

  * 29 sep 08:17:22.631: ISAKMP: (0): Beginner Main Mode Exchange
  * 29 sep 08:17:22.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:22.631 Sept. 29: ISAKMP: (0): a Packet.o IKE IPv4 send

  * 29 sep 08:17:32.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:17:32.631: ISAKMP (0): increment the count of errors on his, try 1 5: retransmit the phase 1
  * 29 sep 08:17:32.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:17:32.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:32.631 Sept. 29: ISAKMP: (0): sending of a CPVPN IKE IPvaccess lists

  * 29 sep 08:17:42.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:17:42.631: ISAKMP (0): increment the count of errors on his, try 2 of 5: retransmit the phase 1
  * 29 sep 08:17:42.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:17:42.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:42.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE...
  * 29 sep 08:17:52.627: IPSEC (key_engine): request timer shot: count = 1,.
  local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0
  * 29 sept 08:17:52.627: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:17:52.627: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:17:52.627: ISAKMP: (0): SA is still budding. Attached new request ipsec. (local Y.Y.Y.Y, distance X.X.X.X)
  * 29 sep 08:17:52.627: ISAKMP: error during the processing of HIS application: failed to initialize SA
  * 29 sep 08:17:52.627: ISAKMP: error while processing message KMI 0, error 2.
  * 29 sep 08:17:52.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:17:52.631: ISAKMP (0): increment the count of errors on his, try 3 of 5: retransmit the phase 1
  * 29 sep 08:17:52.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:17:52.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:52.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:02.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:02.631: ISAKMP (0): increment the count of errors on his, try 4 out 5: retransmit the phase 1
  * 29 sep 08:18:02.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:02.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:02.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:12.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:12.631: ISAKMP (0): increment the count of errors on his, try 5 of 5: retransmit the phase 1
  * 29 sep 08:18:12.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:12.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:12.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:22.627: IPSEC (key_engine): request timer shot: count = 2,.
  local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0
  * 29 sep 08:18:22.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:22.631: ISAKMP: (0): the peer is not paranoid KeepAlive.

  * 29 sep 08:18:22.631: ISAKMP: (0): removal of reason ITS status of 'Death by retransmission P1' (I) MM_NO_STATE (peer X.X.X.X)
  * 29 sep 08:18:22.631: ISAKMP: (0): removal of reason ITS status of 'Death by retransmission P1' (I) MM_NO_STATE (peer X.X.X.X)
  * 29 sep 08:18:22.631: ISAKMP: Unlocking counterpart struct 0x88AD1AB0 for isadb_mark_sa_deleted(), count 0
  * 29 sep 08:18:22.631: ISAKMP: delete peer node by peer_reap for X.X.X.X: 88AD1AB0
  * 29 sep 08:18:22.631: ISAKMP: (0): node-930113685 error suppression FALSE reason 'IKE deleted.
  * 29 sep 08:18:22.631: ISAKMP: (0): error suppression node 661004686 FALSE reason 'IKE deleted.
  * 08:18:22.631 Sept. 29: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
  * 08:18:22.631 Sept. 29: ISAKMP: (0): former State = new State IKE_I_MM1 = IKE_DEST_SA

  * 29 sep 08:18:22.631: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
  * 29 sept 08:18:27.559: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:18:27.559: ISAKMP: (0): profile of THE request is (NULL)
  * 29 sep 08:18:27.559: ISAKMP: created a struct peer X.X.X.X, peer port 500
  * 29 sep 08:18:27.559: ISAKMP: new created position = 0x85EDF1F0 peer_handle = 0 x 80000005
  * 29 sep 08:18:27.559: ISAKMP: lock struct 0x85EDF1F0, refcount 1 to peer isakmp_initiator
  * 29 sep 08:18:27.559: ISAKMP: 500 local port, remote port 500
  * 29 sep 08:18:27.559: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:18:27.559: ISAKMP: find a dup her to the tree during the isadb_insert his 88C1CE60 = call BVA
  * 29 sep 08:18:27.559: ISAKMP: (0): cannot start aggressive mode, try the main mode.
  * 29 sep 08:18:27.559: ISAKMP: (0): pre-shared key found peer corresponding X.X.X.X
  * 29 sep 08:18:27.559: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID
  * 29 sep 08:18:27.559: ISAKMP: (0): built the seller-07 ID NAT - t
  * 29 sep 08:18:27.559: ISAKMP: (0): built of NAT - T of the seller-03 ID
  * 29 sep 08:18:27.559: ISAKMP: (0): built the seller-02 ID NAT - t
  * 08:18:27.559 Sept. 29: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
  * 08:18:27.559 Sept. 29: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

  * 29 sep 08:18:27.559: ISAKMP: (0): Beginner Main Mode Exchange
  * 29 sep 08:18:27.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:27.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:37.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:37.559: ISAKMP (0): increment the count of errors on his, try 1 5: retransmit the phase 1
  * 29 sep 08:18:37.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:37.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:37.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:47.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:47.559: ISAKMP (0): increment the count of errors on his, try 2 of 5: retransmit the phase 1
  * 29 sep 08:18:47.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:47.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:47.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.

  * 29 sep 08:18:57.559: IPSEC (key_engine): request timer shot: count = 1,.
  local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0
  * 29 sept 08:18:57.559: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:18:57.559: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:18:57.559: ISAKMP: (0): SA is still budding. Attached new request ipsec. (local Y.Y.Y.Y, distance X.X.X.X)
  * 29 sep 08:18:57.559: ISAKMP: error during the processing of HIS application: failed to initialize SA
  * 29 sep 08:18:57.559: ISAKMP: error while processing message KMI 0, error 2.
  * 29 sep 08:18:57.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:57.559: ISAKMP (0): increment the count of errors on his, try 3 of 5: retransmit the phase 1
  * 29 sep 08:18:57.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:57.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  Router #.
  Router #.
  * 08:18:57.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:19:07.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:19:07.559: ISAKMP (0): increment the count of errors on his, try 4 out 5: retransmit the phase 1
  * 29 sep 08:19:07.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:19:07.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:19:07.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  Router #.
  Router #un all
  All possible debugging has been disabled

  The log shows main mode setup has failed.  See if this helps: http://www.itcertnotes.com/2011/04/ipsec-stuck-in-mmsasetup-and-mmnostat...

• Fan of D4T - 1500 HP continuous switching speed between hi and lo

  My laptop is switching speed between lo and hi when the battery and the AC adapter / CC are connected.  If disconnected the unit is operating normally.  It does not matter if I have a window open, 3, 6...   I replaced the original battery (2009) with a battery 8800mAh to increase time between charges about 6 months ago.  The battery has a bump to raise the notebook off the surface, it's on and improve the flow of air.  Everything was fine until a few days ago.  The Unit feels not hot when the bike fan starts but stops immediately after disconnecting the adapter or pulling on the battery.  Any thoughts?  Thank you.

  Thank you for visiting the Forums HP's Support and welcome. I read your thread on your HP Pavilion dv4t-1500 Notebook and having issues with the fan switch to salvation and weak. Try perform a reset. When you perform a hard reset note remove all USB devices and remove cards memory card reader location. Disconnect all non-essential devices. If that doesn't help try to turn on the computer, on which you begin to press F11 repeatedly until the menu opens. You can do a System Restore. System Restore will return the computer before this fan problem began.

  Here is a link to test and calibrate the battery. Here is a link to test the ac adapter.

  If everything fails, you can try to restore the default BIOS. This would force the machine to look at what the material is on the laptop.

  Hope it will be useful.

  Thank you.