Management access to an ASA5505 via connection NEM

Similar Questions

• Manage access to the credentials named via EMCLI

  Hello dear colleagues,

  does anyone know how to manage access to the powers named via EMCLI or did someone knows if this function exists in EMCLI.

  We want to configure access through scripting, so that for example we can grant access to all administrators of database for all named credentials.

  I would be very happy if someone has a solution.

  Thanks in advance!

  Best regards

  Sönke

  Yes, you emcli Word for it - http://docs.oracle.com/cd/E24628_01/em.121/e17786/cli_verb_ref.htm#CHEBIEED

  in the emcli even guide, you can search credentials and find the relevant verb

• Access PIX using SSH when connected remotely with VPN client

  Hello

  I think that this should be a fairly simple for someone to sort for me - I'm new to PIX configuration If Yes please excuse my stupidity!

  I changed the config on our PIX to allow only access via SSH (rather than via telnet as it was previously configured)

  Now, everything works fine when I'm in the office - I can connect to the PIX using SSH without any problem.

  However, if I work from home and connect to the office using my VPN client (IPSEC tunnel ends on the PIX firewall itself) I find that I can not connect to the PIX.

  I have configured the PIX to access ssh on the office LAN subnet and the client pool of IP addresses used for VPN connections by using the following commands:

  SSH 172.64.10.0 255.255.255.0 inside

  SSH 192.28.161.0 255.255.255.0 inside

  where the 1st line is reference to the office's LAN, which works very well, and the 2nd line denotes the IP address pool configured on the PIX for VPN access.

  Can someone tell me how to fix this? I have the feeling that its something pressing!

  Thank you

  Neil

  Try the command "management-access to the Interior.

• Cannot access the AIP SSM via ASDM

  CISCO recommendations below:

  Cannot access the AIP SSM via ASDM

  Problem:

  This error message appears on the GUI.

  Error connecting to sensor. Error Loading Sensor error

  Solution:

  Make sure that the IPS SSM management interface is up/down and check his IP address configured, default gateway and the subnet mask. It is the interface to access the software from Cisco Adaptive Security Device Manager (ASDM) on the local computer. Try to ping the address of management of IPS SSM IP interface on the local computer that you want to access the ASDM. If it is impossible to do a ping check the ACLs on the sensor

  ----------------------------------------------------------------------------------------------------------------------------------------------

  I've tried everything recommended above. I can ping the host ASDM the FW and the SSM-10 module. Well, I ping the host machine and the SSM of the ASDM. I opened as wide as possible ACL. I changed the IP addresses and masks several times. The management of the ASA port and the SSM and the PC are on the same subnet.

  A trace of package from the PC to the SSM shows that it is blocked by an ACL rule, and yet I opened wide.   I've seen this kind of problem before and it was solved by applying the double static NAT, but I don't know how to do that if all the IP addresses are on the same subnet.

  Tried everything, need help from high level.

  The IDM software that comes with ASDM does not support java 1.7. The portion of the ASDM ASA supports 1.7 but launch the IPS cmdlet works only with 1.6. The TAC enginner suggested that I use the IME (IPS Manager Express) which is available for free on the Cisco's (http://www.cisco.com/en/US/products/ps9610/tsd_products_support_general_information.html) Web site.

  I've been playing with it today, and so far it seems to work pretty well.

• Cannot access the Media folder via App IOS Readycloud

  I have a RN204 4.6.2 running in an OSX system which will not allow access to the Media folder via the IOS app on iPhone or iPad. I can access the media folder via the ReadyCloud portal or the finder on MAC without problem, but the IOS App shows "Access Denied" and requests user & password, which, when entered, does not. I can access all other folders via the application, just not the media folder. Permissions are set the same as the other issues so I'm not sure what the question is that if she's Readycloud app for IOS. I guess the user & password requested is for NAS, although I tried the credientals of Readycloud just for fun but no help. As a note, I don't get "Connection failed" but "Access Denied", so the network access is OK but access to the file is doesn't understand why all other folders are accessible but not the media folder. And that's on both VPN connections & local. Any ideas?

  OK, get it fixed. I have changed the name of the folder, allowed full access, then he changed the name of moose. Now I can access the folder via the ios app. I'll have to rescan the actions in my media streamer, but to the East, I now access app.

• do not access my home network via antconnect

  I am able to connect through the anyconnect client and get an ip address, but I am not able to access my administration (internal network)

  Administration = 10.18.1.120

  VPN pool = 172.16.10.0/28

  10.17.13.120 outside

  This is my config

  ASA 1.0000 Version 2
  !
  !
  interface GigabitEthernet0/0
  nameif administration
  security-level 100
  IP 10.18.1.120 255.255.0.0
  !
  interface GigabitEthernet0/1
  nameif outside
  security-level 0
  IP 10.17.13.120 255.255.0.0
  !
  interface GigabitEthernet0/2
  nameif admin-out13
  security-level 0
  IP 10.13.1.120 255.255.0.0
  !
  interface GigabitEthernet0/3
  nameif VOIP
  security-level 0
  IP 10.90.100.120 255.255.0.0
  !
  passive FTP mode
  network of the NETWORK_OBJ_172.16.10.0_29 object
  subnet 172.16.10.0 255.255.255.248
  network of the Admin_Email_Server object
  Home 10.18.4.120
  e-mail Description admin server
  network of the Admin_Srv_Farm object
  10.18.4.0 subnet 255.255.255.0
  Description subenet where the admin servers are hosted
  ICMP-type of object-group ICMP_Group
  alternate address ICMP-object
  ICMP-object-conversion error
  echo ICMP-object
  response to echo ICMP-object
  ICMP-object information-response
  ICMP-object-request for information
  ICMP object-mask-reply
  Mask-request ICMP-object
  ICMP-object mobile-redirect
  ICMP-object-parameter problem
  redirect ICMP-object
  ICMP-object-announcement of router
  ICMP-object-solicitation of router
  Object-ICMP source-quench
  ICMP-object has exceeded the time
  ICMP-object-response to timestamp
  Timestamp-request ICMP-object
  Object-ICMP traceroute
  ICMP-unreachable object
  object-group Protocol TCPUDP
  object-protocol udp
  object-tcp protocol
  pager lines 24
  Enable logging
  asdm of logging of information
  management of MTU 1500
  administration of MTU 1500
  Outside 1500 MTU
  Admin-out13 MTU 1500
  ip_phones MTU 1500
  local pool ADMIN_VPN_POOL 172.16.10.1 - 172.16.10.10 255.255.255.0 IP mask
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  ASDM image disk0: / asdm - 66114.bin
  don't allow no asdm history
  ARP timeout 14400
  NAT (administration, outside) static source any any static destination NETWORK_OBJ_172.16.10.0_29 NETWORK_OBJ_172.16.10.0_29 non-proxy-arp-search to itinerary
  public static NETWORK_OBJ_172.16.10.0_29 NETWORK_OBJ_172.16.10.0_29 destination NAT (outside directors) static source Admin_Srv_Farm Admin_Srv_Farm
  Timeout xlate 03:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  identity of the user by default-domain LOCAL
  LOCAL AAA authentication serial console
  AAA authentication LOCAL telnet console
  the ssh LOCAL console AAA authentication
  Enable http server
  http 10.18.0.0 255.255.0.0 administration
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown warmstart of cold start
  Crypto ipsec ikev2 ipsec-proposal OF
  encryption protocol esp
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 proposal ipsec 3DES
  Esp 3des encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES
  Esp aes encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES192
  Protocol esp encryption aes-192
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 AES256 ipsec-proposal
  Protocol esp encryption aes-256
  Esp integrity sha - 1, md5 Protocol
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  outside_map interface card crypto outside
  Crypto ca trustpoint ASDM_TrustPoint0
  registration auto
  name of the object CN = admin-pare-fire
  Configure CRL
  string encryption ca ASDM_TrustPoint0 certificates
   
  Crypto ikev2 activate out of service the customer port 443
  Crypto ikev2 access remote trustpoint ASDM_TrustPoint0
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  dhcpd address 10.90.100.1 - 10.90.100.100 ip_phones
  dhcpd 4.2.2.2 dns 8.8.8.8 interface ip_phones
  dhcpd lease 1800 interface ip_phones
  dhcpd field uz.ac.zw interface ip_phones
  dhcpd option 3 ip 10.90.1.254 interface ip_phones
  ip_phones enable dhcpd
  !
  !
  maximum session 1000 TLS-proxy
  !
  a basic threat threat detection
  threat detection statistics
  a statistical threat detection tcp-interception rate-interval 30 burst-400-rate average rate 200
  SSL-trust outside ASDM_TrustPoint0 point
  WebVPN
  allow outside
  AnyConnect image disk0:/anyconnect-win-2.5.2014-k9.pkg 1
  AnyConnect image disk0:/anyconnect-macosx-i386-2.5.2014-k9.pkg 2
  AnyConnect profiles ITADMIN_VPN_client_profile disk0: / ITADMIN_VPN_client_profile.xml
  AnyConnect enable
  tunnel-group-list activate
  internal GroupPolicy_ITADMIN_VPN group strategy
  attributes of Group Policy GroupPolicy_ITADMIN_VPN
  WINS server no
  value of 10.18.4.120 DNS server 10.50.7.178
  client ssl-VPN-tunnel-Protocol ikev2
  uz.AC.ZW value by default-field
  WebVPN
  AnyConnect value ITADMIN_VPN_client_profile type user profiles
  webster nwgth7HVlZ/qiWnP password encrypted username
  webster username attributes
  type of remote access service
  username admin password encrypted xxxxxxxxxxx privilege 15
  username user2 encrypted password privilege 15 xxxxxxxxxxx
  attributes of user user2 name
  type of remote access service
  type tunnel-group ITADMIN_VPN remote access
  attributes global-tunnel-group ITADMIN_VPN
  address ADMIN_VPN_POOL pool
  Group Policy - by default-GroupPolicy_ITADMIN_VPN
  tunnel-group ITADMIN_VPN webvpn-attributes
  enable ITADMIN_VPN group-alias
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the rsh
  inspect the rtsp
  inspect esmtp
  inspect sqlnet
  inspect the skinny
  inspect sunrpc
  inspect xdmcp
  inspect the sip
  inspect the netbios
  inspect the tftp
  Review the ip options
  class class by default
  Statistical accounting of user
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  Cryptochecksum:c9820a69d5b4fb9e3f7cce253f2450e4

  After the addition of administration management-access command, please check if you are able to ping to the administration interface (ip = 10.18.1.120) of the remote user's machine. In addition, run this command on the ASA.

  Packet-trace entry administration icmp 8 0 detailed

  Once you run this copy please order the output and the share here. Please see links to the ip address of the host, sitting behind the administration interface that you think that the ip address of the internal host should be able to ping from outside. Assigned ip address is the ip address that is assigned to the pool anyconnect client.

  Share the details here and we will be able to understand the question.

  Thank you

  Vishnu

• Access to the administration via VPN to 887 after config setup pro

  Hi all

  Ive just made a three 887w for a client in a few branches, and as this is the first time I have deployed these devices, I decided to go with the GUI (downloaded config pro 2.3) to get the configuration made that I had some constraints of time to get them in place (sometimes I go with the graphical interface first and then look back at the CLI to see what as its been) (, then hand it in Notepad to get a better understanding of the new features of the CLI may be gone and allowed).

  One thing I again, that I was going to do face was my first experience of the firewall IOS area type of config...

  At this point, I'm still unclear on the config (where why Im posting here I guess!) - but the main problem I have at the moment is with managing access to devices.

  Particularly with regard to access to the administration of headquarters inside the IP address of the branch routers.

  I should mention that the branch routers are connected to Headquarters by connections IPSec site-to-site VPN and these connections are all very good, all connectivity (PC server, PC, printer, etc.) is very well... I can also send packets (using the inside of the interface as a source) ping from branch routers to servers on the headquarters LAN.

  Set up access to administration using config pro to allow access to the router on the subnet headquarters (on its inside interface), as well as the local subnet and also SSH access to a specific host from the internet - the local subnet and the only host on the internet can access the router very well.

  I'm not sure if the problem is with the ZBF config or if its something really obvious Im missing! -Ive done routers branch several times previously, so with this being the first config ZBF I did, so I came to the conclusion that there must be something in the absence of my understanding.

  Any help greatly appreciated... sanitized config below!

  Thanks in advance

  Paul

  version 15.1
  no service button
  tcp KeepAlive-component snap-in service
  a tcp-KeepAlive-quick service
  horodateurs service debug datetime localtime show-timezone msec
  Log service timestamps datetime localtime show-timezone msec
  encryption password service
  sequence numbers service
  !
  hostname name-model
  !
  boot-start-marker
  boot-end-marker
  !
  logging buffered 51200
  recording console critical
  enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx
  !
  No aaa new-model
  !
  iomem 10 memory size
  clock timezone PCTime 0
  PCTime of summer time clock day March 30, 2003 01:00 October 26, 2003 02:00
  Service-module wlan-ap 0 autonomous bootimage
  !
  Crypto pki trustpoint TP-self-signed-2874941309
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 2874941309
  revocation checking no
  rsakeypair TP-self-signed-2874941309
  !
  !
  TP-self-signed-2874941309 crypto pki certificate chain
  certificate self-signed 01
  

  no ip source route
  !
  !
  DHCP excluded-address IP 10.0.0.1 10.0.0.63
  DHCP excluded-address IP 10.0.0.193 10.0.0.254
  !
  DHCP IP CCP-pool
  import all
  Network 10.0.0.0 255.255.255.0
  default router 10.0.0.1
  xxxxxxxxx.com domain name
  Server DNS 192.168.xx.20 194.74.xx.68
  Rental 2 0
  !
  !
  IP cef
  no ip bootp Server
  IP domain name xxxxxxx.com
  name of the server IP 192.168.XX.20
  name of the server IP 194.74.XX.68
  No ipv6 cef
  !
  !
  Authenticated MultiLink bundle-name Panel

  parameter-card type urlfpolicy websense cpwebpara0
  Server 192.168.xx.25
  source-interface Vlan1
  allow mode on
  parameter-card type urlf-glob cpaddbnwlocparapermit0
  model citrix.xxxxxxxxxxxx.com

  license udi pid xxxxxxxxxxx sn CISCO887MW-GN-E-K9
  !
  !
  username xxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxx
  username privilege 15 secret 5 xxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxx
  !
  !
  !
  !
  synwait-time of tcp IP 10
  !
  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-1
  game group-access 106
  type of class-card inspect entire game SDM_SHELL
  match the name of group-access SDM_SHELL
  type of class-card inspect entire game SDM_SSH
  match the name of group-access SDM_SSH
  type of class-card inspect entire game SDM_HTTPS
  match the name of group-access SDM_HTTPS
  type of class-card inspect all match sdm-mgmt-cls-0
  corresponds to the SDM_SHELL class-map
  corresponds to the SDM_SSH class-map
  corresponds to the SDM_HTTPS class-map
  type of class-card inspect entire game SDM_AH
  match the name of group-access SDM_AH
  type of class-card inspect entire game SDM_ESP
  match the name of group-access SDM_ESP
  type of class-card inspect entire game SDM_VPN_TRAFFIC
  match Protocol isakmp
  match Protocol ipsec-msft
  corresponds to the SDM_AH class-map
  corresponds to the SDM_ESP class-map
  type of class-card inspect the correspondence SDM_VPN_PT
  game group-access 105
  corresponds to the SDM_VPN_TRAFFIC class-map
  type of class-card inspect entire game PAC-cls-insp-traffic
  match Protocol cuseeme
  dns protocol game
  ftp protocol game
  h323 Protocol game
  https protocol game
  match icmp Protocol
  match the imap Protocol
  pop3 Protocol game
  netshow Protocol game
  Protocol shell game
  match Protocol realmedia
  match rtsp Protocol
  smtp Protocol game
  sql-net Protocol game
  streamworks Protocol game
  tftp Protocol game
  vdolive Protocol game
  tcp protocol match
  udp Protocol game
  inspect the class-map match PAC-insp-traffic type
  corresponds to the class-map PAC-cls-insp-traffic
  type of class-map urlfilter match - all cpaddbnwlocclasspermit0
  Server-domain urlf-glob cpaddbnwlocparapermit0 match
  type of class-card inspect entire game PAC-cls-icmp-access
  match icmp Protocol
  tcp protocol match
  udp Protocol game
  class-map type urlfilter websense match - all cpwebclass0
  match any response from the server
  type of class-card inspect correspondence ccp-invalid-src
  game group-access 100
  type of class-card inspect correspondence ccp-icmp-access
  corresponds to the class-ccp-cls-icmp-access card
  type of class-card inspect sdm-mgmt-cls-ccp-permit-0 correspondence
  corresponds to the class-map sdm-mgmt-cls-0
  game group-access 103
  type of class-card inspect correspondence ccp-Protocol-http
  http protocol game
  !
  !
  type of policy-card inspect PCB-permits-icmpreply
  class type inspect PCB-icmp-access
  inspect
  class class by default
  Pass
  type of policy-card inspect sdm-pol-VPNOutsideToInside-1
  class type inspect sdm-cls-VPNOutsideToInside-1
  inspect
  class class by default
  drop
  type of policy-card inspect urlfilter cppolicymap-1
  urlfpolicy websense cpwebpara0 type parameter
  class type urlfilter cpaddbnwlocclasspermit0
  allow
  Journal
  class type urlfilter websense cpwebclass0
  Server-specified-action
  Journal
  type of policy-map inspect PCB - inspect
  class type inspect PCB-invalid-src
  Drop newspaper
  class type inspect PCB-Protocol-http
  inspect
  service-policy urlfilter cppolicymap-1
  class type inspect PCB-insp-traffic
  inspect
  class class by default
  drop
  type of policy-card inspect PCB-enabled
  class type inspect SDM_VPN_PT
  Pass
  class type inspect sdm-mgmt-cls-ccp-permit-0
  inspect
  class class by default
  drop
  !
  security of the area outside the area
  safety zone-to-zone
  zone-pair security PAC-zp-self-out source destination outside zone auto
  type of service-strategy inspect PCB-permits-icmpreply
  zone-pair security PAC-zp-in-out source in the area of destination outside the area
  type of service-strategy inspect PCB - inspect
  source of PAC-zp-out-auto security area outside zone destination auto pair
  type of service-strategy inspect PCB-enabled
  sdm-zp-VPNOutsideToInside-1 zone-pair security source outside the area of destination in the area
  type of service-strategy inspect sdm-pol-VPNOutsideToInside-1
  !
  !
  crypto ISAKMP policy 1
  BA 3des
  preshared authentication
  Group 2
  ISAKMP crypto key address 194.105.xxx.xxx xxxxxxxxxxxx
  !
  !
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  !
  map SDM_CMAP_1 1 ipsec-isakmp crypto
  Description Tunnel to194.105.xxx.xxx
  the value of 194.105.xxx.xxx peer
  game of transformation-ESP-3DES-SHA
  match address VPN - ACL
  !
  !
  !
  !
  !
  interface BRI0
  no ip address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  encapsulation hdlc
  Shutdown
  Multidrop ISDN endpoint
  !
  ATM0 interface
  no ip address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  No atm ilmi-keepalive
  !
  point-to-point interface ATM0.1
  Description $ES_WAN$
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  PVC 0/38
  aal5mux encapsulation ppp Dialer
  Dialer pool-member 1
  !
  !
  interface FastEthernet0
  !
  interface FastEthernet1
  !
  interface FastEthernet2
  !
  interface FastEthernet3
  !
  wlan-ap0 interface
  description of the Service interface module to manage the embedded AP
  IP unnumbered Vlan1
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  ARP timeout 0
  !
  interface GigabitEthernet0 Wlan
  Description interface connecting to the AP the switch embedded internal
  !
  interface Vlan1
  Description $ETH - SW - LAUNCH, INTF-INFO-HWIC $$ $4ESW $FW_INSIDE$
  the IP 10.0.0.1 255.255.255.0
  IP access-group 104 to
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  IP nat inside
  IP virtual-reassembly
  Security members in the box area
  IP tcp adjust-mss 1452
  !
  interface Dialer0
  Description $FW_OUTSIDE$
  IP address 81.142.xxx.xxx 255.255.xxx.xxx
  IP access-group 101 in
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  penetration of the IP stream
  NAT outside IP
  IP virtual-reassembly
  outside the area of security of Member's area
  encapsulation ppp
  Dialer pool 1
  Dialer-Group 1
  Authentication callin PPP chap Protocol
  PPP chap hostname xxxxxxxxxxxxxxxx
  PPP chap password 7 xxxxxxxxxxxxxxxxx
  No cdp enable
  map SDM_CMAP_1 crypto
  !
  IP forward-Protocol ND
  IP http server
  23 class IP http access
  local IP http authentication
  IP http secure server
  IP http timeout policy slowed down 60 life 86400 request 10000
  !
  !
  IP nat inside source overload map route SDM_RMAP_1 interface Dialer0
  IP route 0.0.0.0 0.0.0.0 Dialer0
  !
  SDM_AH extended IP access list
  Note the category CCP_ACL = 1
  allow a whole ahp
  SDM_ESP extended IP access list
  Note the category CCP_ACL = 1
  allow an esp
  SDM_HTTP extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq www
  SDM_HTTPS extended IP access list
  Note the category CCP_ACL = 0
  permit any any eq 443 tcp
  SDM_SHELL extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq cmd
  SDM_SNMP extended IP access list
  Note the category CCP_ACL = 0
  allow udp any any eq snmp
  SDM_SSH extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq 22
  SDM_TELNET extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq telnet
  scope of access to IP-VPN-ACL list
  Note ACLs to identify a valuable traffic to bring up the VPN tunnel
  Note the category CCP_ACL = 4
  Licensing ip 10.0.0.0 0.0.0.255 192.168.xx.0 0.0.0.255
  Licensing ip 10.0.0.0 0.0.0.255 10.128.xx.0 0.0.255.255
  Licensing ip 10.0.0.0 0.0.0.255 160.69.xx.0 0.0.255.255
  !
  recording of debug trap
  Note category of access list 1 = 2 CCP_ACL
  access-list 1 permit 10.0.0.0 0.0.0.255
  access-list 23 allow 193.195.xxx.xxx
  Note access-list 23 category CCP_ACL = 17
  access-list 23 permit 192.168.xx.0 0.0.0.255
  access-list 23 allow 10.0.0.0 0.0.0.255
  Access-list 100 category CCP_ACL = 128 note
  access-list 100 permit ip 255.255.255.255 host everything
  access-list 100 permit ip 127.0.0.0 0.255.255.255 everything
  access-list 100 permit ip 81.142.xxx.xxx 0.0.0.7 everything
  Access-list 101 remark self-generated by SDM management access feature
  Note access-list 101 category CCP_ACL = 1
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq 22
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq 443
  access-list 101 permit tcp host 193.195.xxx.xxx host 81.142.xxx.xxx eq cmd
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq telnet
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq 22
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq www
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq 443
  access-list 101 tcp refuse any host 81.142.xxx.xxx eq cmd
  access-list 101 deny udp any host 81.142.xxx.xxx eq snmp
  access-list 101 permit ip 160.69.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 101 permit ip 10.128.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 101 permit ip 192.168.xx.0 0.0.0.255 10.0.0.0 0.0.0.255
  access-list 101 permit udp host 194.105.xxx.xxx host 81.142.xxx.xxx eq non500-isakmp
  access-list 101 permit udp host 194.105.xxx.xxx host 81.142.xxx.xxx eq isakmp
  access-list 101 permit host 194.105.xxx.xxx host 81.142.xxx.xxx esp
  access-list 101 permit ahp host 194.105.xxx.xxx host 81.142.xxx.xxx
  access list 101 ip allow a whole
  Note access-list 102 CCP_ACL category = 1
  access-list 102 permit ip 192.168.xx.0 0.0.0.255 everything
  access-list 102 permit ip host 193.195.xxx.xxx all
  access-list 102 permit ip 10.0.0.0 0.0.0.255 any
  Note access-list 103 self-generated by SDM management access feature
  Note access-list 103 CCP_ACL category = 1
  access-list 103 allow ip host 193.195.xxx.xxx host 81.142.xxx.xxx
  Note access-list 104 self-generated by SDM management access feature
  Note access-list 104 CCP_ACL category = 1
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq telnet
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq telnet
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 eq on host 10.0.0.1 22
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq 22
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq www
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 eq to host 10.0.0.1 www
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq 443
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq 443
  access-list 104 permit tcp 192.168.xx.0 0.0.0.255 host 10.0.0.1 eq cmd
  access-list 104 permit tcp 10.0.0.0 0.0.0.255 host 10.0.0.1 eq cmd
  access-list 104 tcp refuse any host 10.0.0.1 eq telnet
  access-list 104 tcp refuse any host 10.0.0.1 eq 22
  access-list 104 tcp refuse any host 10.0.0.1 eq www
  access-list 104 tcp refuse any host 10.0.0.1 eq 443
  access-list 104 tcp refuse any host 10.0.0.1 eq cmd
  access-list 104 deny udp any host 10.0.0.1 eq snmp
  104 ip access list allow a whole
  Note access-list 105 CCP_ACL category = 128
  access-list 105 permit ip host 194.105.xxx.xxx all
  Note access-list 106 CCP_ACL category = 0
  access-list 106 allow ip 192.168.xx.0 0.0.0.255 10.0.0.0 0.0.0.255
  access-list 106 allow ip 10.128.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  access-list 106 allow ip 160.69.0.0 0.0.255.255 10.0.0.0 0.0.0.255
  Note category from the list of access-107 = 2 CCP_ACL
  access-list 107 deny ip 10.0.0.0 0.0.0.255 160.69.0.0 0.0.255.255
  access-list 107 deny ip 10.0.0.0 0.0.0.255 10.128.0.0 0.0.255.255
  access-list 107 deny ip 10.0.0.0 0.0.0.255 192.168.xx.0 0.0.0.255
  access-list 107 allow ip 10.0.0.0 0.0.0.255 any
  Dialer-list 1 ip protocol allow
  not run cdp

  !
  !
  !
  !
  allowed SDM_RMAP_1 1 route map
  corresponds to the IP 107
  !
  !
  control plan
  !
  !
  Line con 0
  local connection
  no activation of the modem
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  line vty 0 4
  access-class 102 in
  privilege level 15
  local connection
  transport input telnet ssh
  !
  Scheduler allocate 4000 1000
  Scheduler interval 500
  NTP-Calendar Update
  130.159.196.118 source Dialer0 preferred NTP server
  end

  Hi Paul,.

  Here is the relevant configuration:

  type of policy-card inspect PCB-enabled

  class type inspect sdm-mgmt-cls-ccp-permit-0
  inspect

  
  

  type of class-card inspect sdm-mgmt-cls-ccp-permit-0 correspondence
  corresponds to the class-map sdm-mgmt-cls-0
  game group-access 103

  
  

  type of class-card inspect all match sdm-mgmt-cls-0
  corresponds to the SDM_SHELL class-map
  corresponds to the SDM_SSH class-map
  corresponds to the SDM_HTTPS class-map

  
  

  type of class-card inspect entire game SDM_SHELL
  match the name of group-access SDM_SHELL
  type of class-card inspect entire game SDM_SSH
  match the name of group-access SDM_SSH
  type of class-card inspect entire game SDM_HTTPS
  match the name of group-access SDM_HTTPS

  
  

  SDM_SHELL extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq cmd
  SDM_SSH extended IP access list
  Note the category CCP_ACL = 0
  permit tcp any any eq 22
  SDM_HTTPS extended IP access list
  Note the category CCP_ACL = 0
  permit any any eq 443 tcp

  
  

  Note access-list 103 self-generated by SDM management access feature
  Note access-list 103 CCP_ACL category = 1
  access-list 103 allow ip host 193.195.xxx.xxx host 81.142.xxx.xxx

  The above configuration will allow you to access the router on the 81.142.xxx.xxx the IP address of the host 193.195.xxx.xxx using HTTPS/SSH/SHELL. To allow network 192.168.16.0/24 access to the router's IP 10.0.0.1, add another entry to the access list 103 as below:

  access-list 103 allow ip 192.168.16.0 0.0.0.255 host 10.0.0.1

  This should take enable access to this IP address for hosts using ssh and https. Try this out and let me know how it goes.

  Thank you and best regards,

  Assia

• After the blackout, VMs will not start and Vsphere Client cannot be re management/access / start VMs on a physical server.

  After the blackout, VMs will not start and Vsphere Client cannot be re management/access / start VMs on a physical server.

  Get the error message...

  [	[: start: W: 1] 2016-06-09 14:41:36.562 Log for vSphere Client Launcher, pid = 4532, version = version 5.0.0 = build-455964, option = released
  [	[:QuickInf:W: 6] 2016-06-09 14:42:20.421 the value of the search dll C:\Program Files\VMware\Infrastructure\Virtual Infrastructure Client\5.0 path
  [	[:QuickInf:W: 6] 2016-06-09 14:42:24.281 load shared dll: C:\Program Files\VMware\Infrastructure\Virtual Infrastructure Client\5.0
  [	[ : start: w: 6] 2016-06-09 14:42:41.406 Log for vSphere Client, pid = 4532, version = version 5.0.0 = build-455964, option = release, user = root, url = https://192.168.10.200/sdk
  [	[:ShowExcp:W: 6] 2016-06-09 14:42:42.406 error: an internal error has occurred in the vSphere Client.

  Details: The initializer for type for 'VirtualInfrastructure.Utils.ClientsXml' threw an exception.

  Contact VMware support if necessary.

  System.TypeInitializationException: The initializer for type for 'VirtualInfrastructure.Utils.ClientsXml' threw an exception.

  at VirtualInfrastructure.Utils.ClientsXml.FetchIfClientsXmlExists (String serviceUrl)

  at VirtualInfrastructure.LoginUtils.LoadMatchingVI (String serviceUrl)

  at VirtualInfrastructure.LoginUtils.CreateNewService (String serviceUrl, ClientSpec clientSpec, Boolean waitForTopology, Assembly / viAssembly)

  to VMware.Vim.Client.VimClient.StartUp (2 specMap, String [] arguments dictionary, Manager of LoginEventHandler)

  to VpxClient.UI.InitializeVimClient (dictionary 2 specMap, String [] arguments)

  to VpxClient.UI.StartUpIfNotMultiVcSecure (dictionary 2 specMap, SecureString password, String [] arguments, LoginEventHandler Manager, String, dllPath, list 1 listOfVcUrls)

  System.TypeInitializationException: The type to 'VirtualInfrastructure.Utils.TypedXmlSerializer ' 1' initializer threw an exception.

  to VirtualInfrastructure.Utils.TypedXmlSerializer'1.ctor)

  to VirtualInfrastructure.Utils.ClientsXml... cctor()

  System.IO.IOException: The process cannot access the file "C:\Documents and Settings\XXXXUSERNAMEXXXX\Local Settings\Temp\nyhn4bev.dll" because it is used by another process.

  ...

  to System.Xml.Serialization.XmlSerializer... ctor (Type type)

  to VirtualInfrastructure.Utils.TypedXmlSerializer'1.cctor)

  -End of the exception stack trace internal-

  -End of the exception stack trace internal-

  After many unsuccessful attempts tried to connect Vsphere client, the client has finally connected and was able to on all virtual machines. Thanks to Luciano Patrão for study. For all in the community, peace out...

• Firefox opens, but this morning, I can't access all the links via Firefox. I can through Explorer. I prefer Firefox. Help!

  Firefox opens, but this morning, I can't access all the links via Firefox. I can through Explorer.

  One possible cause is security software (firewall) that blocks or limits Firefox or plugin-container process without informing you, possibly after the detection of changes (update) for the Firefox program.

  Delete all rules for Firefox in the list of permissions in the firewall and leave your firewall again ask permission to get full unlimited access to the internet for Firefox and the plugin-container and the update process.

  See:

  • https://support.Mozilla.com/kb/server+not+found
  • https://support.Mozilla.com/kb/firewalls

• Is it possible to determine if a person has access to my computer via an external source?

  Original title: hacking

  Is it possible to determine if a person has access to my computer via an external source?

  Hello bconn07,

  You must grant permissions via remote access or they would have to introduce a software on your pc without your knowledge for them to access. The software is usually by means of malicious programs and your anti-malware application must pick up that, especially if it's a keylogger or a rootkit. Try to download Malwarebytes antimalware http://malwarebytes.org (download the free version). Install it and then run it. It's good enough to malicious software localization.

  Pirate can introduce a software called keyloggers that send information on the key, you press on your keyboard. This can help them steal passwords etc. However, I do not say that you even have apps keylogging or view on your system, so don't panic. I suggest, however, an application called Keyscrambler personal http:// http://www.qfxsoftware.com/download.htm it works by disguising and precautions that you ever install key press you. By example, if you typed "Bill" keyscrambler journal would be something like 'kl97' thuis makes it very difficult for any keylogging software interpret what keys you actually used.

  This forum post is my own opinion and does not necessarily reflect the opinion or the opinion of Microsoft, its employees or other MVPS.

  John Barnett MVP: Windows XP Expert associated with: Windows Expert - consumer: www.winuser.co.uk | vistasupport.mvps.org | xphelpandsupport.mvps.org | www.silversurfer-Guide.com

• How the hell Manager access if I don't have the password

  How can I disable Manager access if I don't know the password

  It's a Microsoft Forum, when it comes to passwords we can provide only the official Microsoft solutions:

  "Cannot remove a forgotten Internet Explorer Ratings password"
    <>http://support.Microsoft.com/kb/155609 >

  HTH,
  JW

• I can't access to our private internet connection... I get the error messages like acquiring network address AND identity validation

  problem network address acquisition
  I can't access to our private internet connection... I get error messages like acquiring network address AND validation of identity no matter how long I wait nothing happens... Please help me.

  create a new internet connection or reset TCP/IP socket

• You do not have sufficient access to your computer to connect to the selected printer

  I am a beginner to the field. I have recently installed windows 2008 standard edition and create a user and the user even working in the environment field. How can I installed printers installed on the servers. Whenever I click on any printer share the error comes from "you don't have sufficient access to your computer to connect to the selected printer. Client computers is teacher of Win Xp (Sp3) and the printer Kyocera FS - 1030D. Please go back. Waiting for your answer.

  Hi Shiju_Ganga,

  Your Windows 2008 server question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows server forum.

  http://social.technet.Microsoft.com/forums/en/winserverprint/threads

• Can't access language option "Add" via the control panel - &#62; regional options and lang.

  Cannot access language 'Add' option via Control Panel-> regional control and options. lang-> keyboards and languages-> text services and input languages. When I click on 'Add', the language menu appears, but I can't take anything as the OK button is inactive. And I know I could do it before because I already added another language to my keyboard. Could you please help me?

  Thank you.

  Hello

  Please continue with the steps below...

  1. click on start, type intl.cpl in the start search box and press ENTER.

  2. on the keyboard and language tab, click on change keyboards.

  3. click on Add.

  4 expand the language that you want. For example, English (United States).

  5 expand the keyboard list, select the United States-International checkbox and then click OK.

  6. in the default input language list, click the language name - United States-International (where language name is the language that you selected in step 4) and then click OK twice.

  7. in the regional and Language Options dialog box, click OK.

  Notice that the language bar appears on the taskbar. When you position the mouse pointer, a ToolTip appears that describes the active keyboard layout.

  8. click on the language bar and then click States United International on the shortcut menu that appears.

  United International keyboard layout is selected.

  See the article below which talks about the same

  How to use the United International keyboard layout in Windows 7, Windows Vista and Windows XP
  http://support.Microsoft.com/kb/306560

  Add or change an input language
  http://Windows.Microsoft.com/en-us/Windows7/add-or-change-an-input-language

  If you don't see the language bar, right-click the taskbar, point to toolbars, and then click Language bar. For more information about the language bar, see the article below for more information:

  The language bar (overview)
  http://Windows.Microsoft.com/en-us/Windows7/the-language-bar-overview

  In addition to changing the input language, you can also customize your keyboard for a specific language or format. For more information about customizing your keyboard, see:

  Change your keyboard type
  http://Windows.Microsoft.com/en-us/Windows7/change-your-keyboard-layout

  Additional information:

  What can I do with regional formats and languages?
  http://Windows.Microsoft.com/en-us/Windows7/what-can-I-do-with-regional-formats-and-languages

  Change your keyboard type
  http://Windows.Microsoft.com/en-us/Windows7/change-your-keyboard-layout

  I hope that this information is beneficial.

  Thank you

  Aaron
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think

• We can access autogen_dimensions.xml file via a URL?

  Hello
  
  We can access autogen_dimensions.xml file via a URL?
  
  Is it possible to access the file autogen_dimensions.xml with the URL as shown below.
  
  http://host:port / < App name > /Data/State/autogen_dimensions.xml file. I want to read this file in my java class.
  
  Kind regards
  Ravinder P

  Service platform is delivered with 2 copies of the reference application. The folder that you noted is not functional, for reference.

  Who is running is located at:

  \Endeca\PlatformServices\6.1.2\tools\server\webapps\endeca_jspref

  You should be able to just drag the files in there.