New SGE2010 - cannot access the GUI

Hello

With allot of excitement, I decided to buy a port of 48 x 10/100/1000 Ethernet to our company SGE2010 to get inside DHCP, DNS and net administration on metal.

I was under the impression that the initial installation has been taken and playable, but the reality was very different. I started to connect the switch to our existing infrastructure without success. After that I tried to connect to the graphical interface to see if the configuration is turned off, but has been unable to connect (used default 192.168.1.254).  Once I disconnected the switch of our network, did a factory reset and connect a single computer to the (tried various port), and yet I could not connect.

In the end I had to dust off an old machine with serial port and connect to the switch via the port console to see what was going on.  Configuration options in the console had to say at least minimal, but I could see that both http and https are enabled, the device ip is 192.168.1.254, disabled DHCP, VLAN 1 id, default as stacking mode system settings was on stackable (autonomous tried without success), and Layer 2 on.

I'm very surprised that I can't connect to the webgui through a nettbrowser of the turnout, since that looks at what stage 2 in management manual. Here, it is said that you should be able to connect using one of the 48 ports.

For those who wonder then there is no firewall enabled on the client, and this is a new installation windows xp machine that I use to connect and ie6. The switch firmware is 3.0.0.18 which is the most recent.

I would be grateful for all the help I can get because I'm running out of options. Am I missing something or is the switch faulty?

Hi Rafn,

Maybe the quick start guide should indicate,

step 1. You have defined your ethernet PC card to address 192.168.1.100 IPv4 or similar with a subnet mask = 255.255.255.0 and try this action IE7 + again. http://192.168.1.254

Try it now, it should work, but remember that if you change the IP address of the switch to another network management for example 192.168.100.x where x is a number, you will need to change the IP address of your PC as well.

best regards and fun Dave

Tags: Cisco Support

Similar Questions

  • WLC 2504 cannot access the GUI...

    Hi all

    I'm not sure what I did wrong, the 2504 itself has only 4 ports and no port management but I heard it's actually port 1 (even if there are no labels for this). That's what I've done so far to try to access the GUI:

    in CLI mode, I have

    (1) put AP managament address like 10.151.55.129 255.255.255.224.

    (2) I have activated the adminmode on port 1, which I assume is management port and enabling admin mode is the same as "no shut" on switches I guess; Here is the command I entered:

    (Cisco Controller) config > adminmode port 1 turn on

    (3) enabled HTTPS/HTTP through commands:

    (Cisco Controller) config > activate network secureweb

    (Cisco Controller) config > activate network web-auth secureweb

    (Cisco Controller) config > network webmode enable

    (4) I then reset system and verify that the changes took place to help display the synthesis network, as shown below. I also activated mgmt via dynamic interface to see if it makes a difference:

    RF-network name... TEST_WIFI

    Web Mode.................................... Enable

    Secure Web view... Enable

    Secure Web Mode Cipher-Option high... Disable

    Secure Web SSLv2 Cipher-Option Mode... Disable

    Secure Web Mode RC4 Cipher preference... Disable

    OCSP........................................ People with disabilities

    Responder OCSP URL...

    Secure Shell (ssh)... Enable

    Telnet...................................... Disable

    Transfer Ethernet multicast... Disable

    Transfer of broadcast Ethernet... Disable

    Multicast/Broadcast AP mode... Address multicast: 225.225.225.225

    IGMP snooping... People with disabilities

    IGMP timeout... 60 seconds

    Interval between IGMP queries... 20 seconds

    MLD snooping... People with disabilities

    MLD timeout... 60 seconds

    Interval between MLD queries... 20 seconds

    Period of inactivity of the user... 300 seconds

    ARP timeout... 300 seconds

    Cisco AP by default Master... Disable

    Join AP priority... Disable

    Mgmt interface wireless... Disable

    Mgmt Via dynamic Interface... Enable

    Filter MAC bridge Config... Enable

    Safety of bridge mode... EAP

    Mesh full sector DFS... Enable

    Relief of AP... Enable

    Support CMCC Auth Web... People with disabilities

    Web Auth redirect Ports... 80.1

    Web Proxy Auth Redirect... Disable

    Bypass-Web Auth Captive... Disable

    Web secure Web Auth... Enable

    Quick change SSID... People with disabilities

    Discovery of the AP - IP NAT only... Activated

    IP/MAC Addr binding Check... Activated

    Status of CCX-lite... Disable

    oeap-600-WLAN-dual... Disable

    oeap-600 local-network... Enable

    mDNS snooping... People with disabilities

    mDNS interval between requests. 15 minutes

    (5) I installed my PORTABLE NIC to be 10.151.55.20 255.255.255.224 and connected to port 1 on wlc 2504; but I can't ping 10.151.55.29 nor do I navigate to https://10.151.55.29/. The port appears upwards (the flashing green lights on port 1 and Portable NIC also Flash).

    Any help would be appreciated

    If your connection to your laptop direct to port 1, then you have untagged the management vlan. Now you have configured for vlan 10, you must set to vlan 0.

    You will then be able to ping to the management interface and connect to it through the user interface.

    Sent by Cisco Support technique iPhone App

  • New user cannot access the transferred music draws on Windows Media Player 11

    I just added a new user to my window 11 downloaded pc game on there it does not show the music I would also transfer music from my library in library here and can u help me with these problems

    Library to point to the folder monitored by the player

  • Displacement of photoshop CS5 (student) to new computer (cannot access the activation code)

    Hello

    I have photoshop CS5 installed on two computers. One of them broke, so I was hoping to install it on my new laptop. However, because the old PC is now broken I can not be disabling this function. In addition, I don't know what was the activation code (I think I've received by e-mail, but the account is now closed due to piracy). Can anyone help with this? I may be able to retrieve my other PC activation code, but don't know how. However that doesn't solve the question of him be already enabled on both computers.

    Thanks in advance for your help.

    Best wishes

    Matt

    Check your Adobe account online: https://www.adobe.com/account.html

    If you have registered your product then the serial number can be found in the section Plans and products.

    See also: find your serial number

    Another option would be to try to use a key research tool...

    If it's a Windows machine, and then try running Belarc Advisor

    http://www.Belarc.com/free_download.html

    For a Mac, you can try:

    https://Mac-product-key-Finder.com/

    Until you have the facility disabled, you can contact the Adobe Support via chat and ask them to reset your activations.  You will need the serial number for this and you get no off-topic or they may send you in the forums without help.

    Chat support - the link below click the still need help? the option in the blue box below and choose the option to chat...

    Make sure that you are logged on the Adobe site, having cookies enabled, clearing your cookie cache.  If it fails to connect, try to use another browser.

    Serial number and activation support (non - CC) chat

    https://helpx.Adobe.com/contact.html?step=PHSP-PHXS_downloading-installing-setting-up_lice nsing-activation_stillNeedHelp

  • I disabled the toolbar > > Menu button (via a right click on a PC, Windows 7) and cannot access the toolbar to add items to the sail back in. Any ideas?

    I disabled the toolbar > > Menu button (via a right click on a PC, Windows 7) and cannot access the toolbar to add items to the sail back in. Any ideas?

    Don't see the menu bar not (File, Edit, View, history, Favorites, tools, help)?
    Turn on/off the menu bar is a new feature in version 3.6.
    (Linux and OSX see: what happened to the file, edit and view menus? )
    Windows Method 1. Press and hold the key and press the letters of the following in this exact order: V T M
    Windows method 2 Press and release the button. The Menu bar is displayed; then choose ~ ~ red: V ~ ~ iew > ~ ~ red: T ~ ~ oolbars and click on ~ ~ Red: M ~ ~ enu Bar.
    The menu bar should now be displayed permanently, unless you turn it off again using view > toolbars. Check = not displayed, NO check mark is not displayed.
    See: http://support.mozilla.com/en-US/kb/Menu+bar+is+missing

    Navigation, bar toolbar bookmarks and other toolbars under view > toolbars. By clicking on one of them will place a check mark (display) or remove the check mark (not shown).

    To display the status bar, view, and then click status bar to place a check mark (display) or remove the check mark (not shown).

    Mode full screen
    http://KB.mozillazine.org/netbooks#Full_screen

    See also:
    Back and front toolbar buttons or others are missing
    Customize controls, buttons, and Firefox toolbars

  • RootKit/Malware/Virus problem - windows cannot access the specified device file or the path, you don't have permissions

    Hello

    I have a problem with my computer it has been infected by a virus that is not visible in normal mode. It prevents running any application that would help in the detection and removal. I tried running mrt, mcaffe, trendmicro rootkit detector rootkit detector, spybotSD, analysis windows Defender online Windows live onecar. All these works for a minute and then shutsdown, when I click it again I get the error, as mentioned in the title, 'windows cannot access the specified device file or the path, you do not have permissions.

    This problem has a solution or re - install is the only way out?

    The pointers/help appreciated.

    Just to add, I am able to connect using my last known good configuration and only safe mode configurations.

    Thank you

    Id2View,

    1. follow all the instructions in this thread: How to get rid of malware

    2. If still no joy you can find Microsoft MVPs and other trained analysts on the following support sites:
    Aumha.org
    Atribune.org
    SpywareHammer
    BleepingComputer
    Safer-Networking

    3. If you need help with virus-related issues, contact the Support Services Microsoft product.

    To support the Canada and the United States, call toll-free (866) PCSAFETY (727-2338).

    For support outside the United States and the Canada, visit the page Web of Product Support Services.

    4. If you need more assistance for the position of the newsgroup Microsoft - security - virusvirus/worm.
    Through your News Reader:
    News://msnews.Microsoft.com/Microsoft.public.Security.virus
    Via the Web:
    http://www.Microsoft.com/communities/newsgroups/list/en-us/default.aspx?DG=Microsoft.public.Security.virus

    Hope this helps,

    Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & security - since 2003. ~ ~ ~ My MVP profile: https://mvp.support.microsoft.com/profile/Vincenzo

  • Cannot access the disk in the drive E:, please make sure that the drive is ready and the disk is not write protected.

    When I try to backup Quicken, I received the error: cannot access the disk in the drive E:, please make sure that the drive is ready and the disk is not write protected.  My last backup of Quicken was 16/07/2010.  I don't know why I can't back up now.  Is there a way to fix this?

    Why not save to a folder on your hard drive and burn them to a CD - R from there? I can't tell from the little you wrote if the problem is with Quicken (not work or you have incorrectly backup location) or with your CD - RW drive. How about more details to work with? This will give you an idea of what to write:

    The first Question of troubleshooting: If the problem is new, what has changed between the time things worked and the time they do not have?

    http://www.elephantboycomputers.com/page2.html#Tech_Support - See the article "how to write a Post.
    http://support.microsoft.com/default.aspx/kb/555375 - how to ask a Question

    MS - MVP - Elephant Boy computers - don't panic!

  • On my user account on my labtop when I click on a program, such as mozilla firefox, it happens 'windows cannot access the specified device, path or file. May not be the appropriate permissions for access you point. "Please help

    On my user account on my labtop when I click on a program, such as mozilla firefox, it happens 'windows cannot access the specified device, path or file. May not be the appropriate permissions for access you point. "This message appears for firefox, AVG, Windows live messenger, windows MediaPlayer etc.

    I can access my documents, Panel etc. and everything is there, but it won't let me not get access to the programs.

    Also when I go to click on itunes and open office it happens "this file has no program associated with it for performing this action. Create an association in the set associations Control Panel.

    Given that I was able to access control panel, I was able to create a new user and use it for now to send this message and all programs have worked on it and I was able to check for the presence of viruses on the Avg on this and everything was clear.

    Could you please explain whats wrong and tell me how to fix this please: D thanks

    Hello
     
    1. don't you make changes before the show?
    2. is the computer is joined to the domain controller?
     
    You can not start any application on a client computer that is joined to the domain controller. When you try to start this type of application, you receive an error message similar to the following:
    "Windows cannot access the specified device, path or file. You can not have the appropriate permissions to access the item.

    This can also occur if the user account is damaged. If the computer is not connected to a domain controller, try the following steps.
    1. connect to another user account and create a new user account to fix the damaged user account.
    For more information about creating a new user account and the fixing corrupt user account, visit this link: http://windows.microsoft.com/en-US/windows-vista/Fix-a-corrupted-user-profile
     
    Previous post the results in more detail, so that we can help you further.
     
    I hope this helps.
     
    Kind regards
    Syed
    Answers from Microsoft supports the engineer.

  • Windows cannot access the specified device path

    I have a HP 2000 laptop with windows 7. I had problems playing a dvd. I can burn images and photos of viev on cd. When you try to play a dvd a message-" Windows cannot access the specified device path. You can have not permissions to access this item. "I uninstalled the drive so it is reinstalled on reboot of windows. I used to get a flag asking what program to open with. Now to see "cd" should open in my computer.

    I use Google chrome.

    Hey @Stern07 ,

    Welcome to the HP Forums!

    I understand that you are unable to play the DVD on your laptop of HP 2000 by using Windows 7.

    There may be an easier way to solve this problem, but it's the method that I am referring usually to when having this problem:

    1. launch Regedit (Windows key + R > type regedit > click OK).
    2. navigate in the tree of HKEY_CLASSES_ROOT > DVD > shell > play > order.
    3. double-click on the (default) value on the right side of the split dialog box (String edit dialog box should appear).
    4 copy the contents of the value data field.
    5. click Cancel on the dialog box change the strings.

    Figure 1:

    6. right click on the right side of the split dialog box
    7. Select new-> expandable string value

    Figure 2:

    8. just press ENTER if the cursor is what allows you to change the name of the new value
    9. double-click on the new value that you just created (Edit String dialog should appear)
    10. glue the string that you have already copied in the value data field
    11. click OK in the Edit String dialog box

    Figure 3:

    12. now on the left side of the split dialog box, highlight the folder HKEY_CLASSES_ROOT\DVD\shell\play\command
    13 right-click and choose export.
    14. save this file in a location of your choice and a name of your choice.

    Figure 4:

    15. close regedit.
    16. go to the location you saved the file.
    17. right click on the file, and then choose the Edit option (expected to launch the file open in Notepad (or any text editor).
    18. you should see something similar to (not just copy and paste what I have below, because this PC has installed WinDVD):

    [HKEY_CLASSES_ROOT\DVD\shell\play\command]
    @= "Files \"C:\\Program (x86)\\InterVideo\\WinDVD\\WinDVD.exe\ '%1'.
    "New value #1" = hex (2): 22, 43, 00, 00, 3 a, 00 5 c 00, 50, 00, 72, 00, 6f, 00, 67, 00, 72, 00, 61,------.
    00, 6 D, 00, 20, 00, 46, 00, 69, 00, 6 C, 00, 65, 00, 73, 00, 20, 00, 28, 00, 78, 00, 38, 00, 36, 00,------.
    29.00, 5 c, 00, 6F 49, 00, 00, 00, 00, 65, 64, 00, 72, 56, 69, 00, 74, 00, 65, 00, 00, 6f, 00, 5 c,
    00,57,00,69,00, 6F, 00, 44, 00, 56, 00, 44, 00, 5 C, 00, 00, 57, 69, 00, 6F, 00, 00, 56, 44, 00,------.
    44,00, 2nd, 00, 65, 00, 78, 00, 65, 00, 22, 00, 20, 00, 25, 00, 31, 00, 00, 00

    19. now delete the first line:
    @= "Files \"C:\\Program (x86)\\InterVideo\\WinDVD\\WinDVD.exe\ '%1'.

    20. now replace all in front of the remaining line with just the character = @, final result should look like:
    [HKEY_CLASSES_ROOT\DVD\shell\play\command]
    @= hex (2): 22, 43, 00, 00, 3 a, 00 5 c 00, 50, 00, 72, 00, 6f, 00, 67, 00, 72, 00, 61,------.
    00, 6 D, 00, 20, 00, 46, 00, 69, 00, 6 C, 00, 65, 00, 73, 00, 20, 00, 28, 00, 78, 00, 38, 00, 36, 00,------.
    29.00, 5 c, 00, 6F 49, 00, 00, 00, 00, 65, 64, 00, 72, 56, 69, 00, 74, 00, 65, 00, 00, 6f, 00, 5 c,
    00,57,00,69,00, 6F, 00, 44, 00, 56, 00, 44, 00, 5 C, 00, 00, 57, 69, 00, 6F, 00, 00, 56, 44, 00,------.
    44,00, 2nd, 00, 65, 00, 78, 00, 65, 00, 22, 00, 20, 00, 25, 00, 31, 00, 00, 00

    Figure 5: 

    21 save the Notepad file and close Notepad.
    22. now, double-click the file that you just saved, a warning must appear to say you want to add stuff in the registry.
    23. click Yes to continue.
    24. a dialog box should appear indicating that the values have been added to the registry.
    25 re - open regedit.
    26 cross to HKEY_CLASSES_ROOT\DVD\shell\play\command (you must already be there)
    27. now the value on the side right hand (by default) must have the same data as before, but the Type must indicate that it is REG_EXPAND_SZ

    Figure 6:

    28. now, try to reboot your PC and try to play a DVD.

    Let me know if it works!

    -Source: DVD movie: Windows cannot access the specified device, path, or file. etc

  • I can't choose a default program, error: "Windows cannot access the specified device, path or file. You can not have the appropriate permissions to access the item.

    Original title: I can't choose a default program

    When I right click on a file and click on "choose program by default" I get the message "Windows cannot access the specified device, path or file. You can not have the appropriate permissions to access the item.
    I use Windows7 that I've updated since Vista.
    It started a few months ago, but it really bugs me.
    Thanks for any help!

    When you run the command sfc/scannow., what the message said when it was over?

    You can set file associations use the default programs feature?
    http://Windows.Microsoft.com/en-us/Windows7/change-default-programs-using-set-program-access-and-computer-defaults

    You can check in a new user account to test if you have a corrupted profile:
    http://Windows.Microsoft.com/en-us/Windows7/create-a-user-account
    http://Windows.Microsoft.com/en-us/Windows7/fix-a-corrupted-user-profile

  • executable files: cannot access the file because it is being used by another process

    Hello
    I created a file named test.bat on my desk
    baptized "test.bat" and sent the notebook, wrote "REM" and recorded.
    so, I closed my notebook and reopened, has added another "REM" and saved the file again.
    then I tried to rename, move the file to another folder and delete
    everything went without any problems.

    But if I create the file and run it, the command prompt will appear for a while and then disappear.
    I can rename or move the file without any problem,
    But if I try to edit the file in Notepad, I get this error:

    The process cannot access the file because it is being used by another process.

    and the file is not saved.

    also, if I try to delete the file, it seems to be deleted until I press F5, the file appears again.
    When you try to rename/move this new file, I get another error:

    File Access Denied

    You need permission to perform this action

    You need the permission of the administrator of the computer to make changes
    in this file

    It seems the file is opened (or if I choose to delete) after a few minutes, then it is not if I try to access
    the file (I kept pressing F5 every few seconds for 15 minutes and the file is missing)

    the problem appears if occuar with any file name, anywhere, not just the office or home by car, not even on the same disk,
    while I had no problem when I started in an old installation of windows xp and repeat the same steps.

    I tried to use the sysinternals utility handle, that's what I have:

    After creating test.bat:
    C:\Users\User>handle test.bat

    Copyright (C) 1997-2013 Mark Russinovich
    Sysinternals - www.sysinternals.com

    No found the corresponding handle.

    After you run test.bat:

    C:\Users\User>handle test.bat

    Handle v3.51
    Copyright (C) 1997-2013 Mark Russinovich
    Sysinternals - www.sysinternals.com

    System pid: 4 type: file A18: C:\Users\User\Desktop\t
    EST.bat

    has obtained the result above after attempting to remove test.bat also.

    After the creation of othertest.bat:

    C:\Users\User>handle othertest.bat

    Copyright (C) 1997-2013 Mark Russinovich
    Sysinternals - www.sysinternals.com

    No found the corresponding handle.

    After execution of othertest.bat:

    C:\Users\User>handle othertest.bat

    Handle v3.51
    Copyright (C) 1997-2013 Mark Russinovich
    Sysinternals - www.sysinternals.com

    System pid: 4 type: BD0 file: C:\Users\User\Desktop\o
    thertest.bat

    After you rename the othertest.bat:

    C:\Users\User>handle othertest.bat

    Copyright (C) 1997-2013 Mark Russinovich
    Sysinternals - www.sysinternals.com

    No found the corresponding handle.

    C:\Users\User>handle renamedtest.bat

    Handle v3.51
    Copyright (C) 1997-2013 Mark Russinovich
    Sysinternals - www.sysinternals.com

    System pid: 4 type: BD0 file: C:\Users\User\Desktop\r
    enamedtest.bat

    the also occuars when I run any .exe file and delete it after its finished running, I deleted
    the handle.exe and the handle64.exe after the test above and at the same time returned when I updated their records.

    can someone help me?
    IAM using Windows 7 ultimate 64-bit.
    Thank you.

    I struggled with this VERY ENNUYANT thing for a long time on a Windows Server 2008 R2.

    Just found the answer:

    http://superuser.com/questions/260375/why-would-system-continue-locking-executable-file-handles-after-the-app-has-exit

    Activation of the service 'Application Experience' does the trick for me.

    If I got paid for every minute spent dealing with the mysteries of Microsoft... No, wait! Paid!

    Thank you Microsoft!

  • Cannot access the AIP SSM via ASDM

    CISCO recommendations below:

    Cannot access the AIP SSM via ASDM

    Problem:

    This error message appears on the GUI.

    Error connecting to sensor. Error Loading Sensor error

    Solution:

    Make sure that the IPS SSM management interface is up/down and check his IP address configured, default gateway and the subnet mask. It is the interface to access the software from Cisco Adaptive Security Device Manager (ASDM) on the local computer. Try to ping the address of management of IPS SSM IP interface on the local computer that you want to access the ASDM. If it is impossible to do a ping check the ACLs on the sensor

    ----------------------------------------------------------------------------------------------------------------------------------------------

    I've tried everything recommended above. I can ping the host ASDM the FW and the SSM-10 module. Well, I ping the host machine and the SSM of the ASDM. I opened as wide as possible ACL. I changed the IP addresses and masks several times. The management of the ASA port and the SSM and the PC are on the same subnet.

    A trace of package from the PC to the SSM shows that it is blocked by an ACL rule, and yet I opened wide.   I've seen this kind of problem before and it was solved by applying the double static NAT, but I don't know how to do that if all the IP addresses are on the same subnet.

    Tried everything, need help from high level.

    The IDM software that comes with ASDM does not support java 1.7. The portion of the ASDM ASA supports 1.7 but launch the IPS cmdlet works only with 1.6. The TAC enginner suggested that I use the IME (IPS Manager Express) which is available for free on the Cisco's (http://www.cisco.com/en/US/products/ps9610/tsd_products_support_general_information.html) Web site.

    I've been playing with it today, and so far it seems to work pretty well.

  • Activation of Windows 7 - Windows cannot access the specified device

    I enter a new key in my computer, it says that it is not genuine now.

    When I try and and activate by clicking on the link activate it says:

    S read - C:\Windows\system32\slui.exe pop-up box, with following information inside the box:

    "Windows cannot access the specified device, path or file. You can not have the appropriate permissions to access the item.

    I am the only user on the system and I am an administrator.

    When I tried to run slui.exe 4 cmd prompt increased from I got access denied.

    Thank you

    Thank you for your help. In fact, I could solve the problem of installing the SP1, and then uninstall Windows Genuine Advantage was an option of front.

    Thank you once again

  • Windows 7 - Windows cannot access the specified device, path, or file... permissions

    Original title: help me :((

    My computer won't let me open anything, if I click on what anyone outside of the internet it says "Windows cannot access the specified device, path, or file, you don't have the appropriate permissions to access the item"? How can I get permission? :((((((

    Your profile seems to be corrupted. I could do this:
    1. Create a new account. This also creates a new profile.
    2. See if the problem is resolved.
    3. If this is the case, move your data from the old account to the new account. To do this, you must temporarily promote your new administrator-level account.

    Next time you have a problem like that, try to solve it immediately. The "System Restore" mechanism would have probably fixed it for you in ten minutes.

  • CANNOT ACCESS THE LAN WITH THE EASY VPN CONFIGURATION

    Hello

    I configured easy vpn server in cisco 1905 SRI using ccp. The router is already configured with zone based firewall. With the help of vpn client I can reach only up to the internal interface of the router, but cannot access the LAN from my company. I need to change any configuration of ZBF since it is configured as "deny everything" from outside to inside? If so that all protocols should I match?   Also is there any exemption of NAT for VPN clients? Please help me! Thanks in advance.

    Please see my full configuration:

    Router #sh run
    Building configuration...

    Current configuration: 8150 bytes
    !
    ! Last modification of the configuration at 05:40:32 UTC Wednesday, July 4, 2012 by
    ! NVRAM config updated 06:04 UTC Tuesday, July 3, 2012 by
    ! NVRAM config updated 06:04 UTC Tuesday, July 3, 2012 by
    version 15.1
    horodateurs service debug datetime msec
    Log service timestamps datetime msec
    no password encryption service
    !
    router host name
    !
    boot-start-marker
    boot-end-marker
    !
    !
    Passwords security min-length 6
    no set record in buffered memory
    enable secret 5 xxxxxxxxxxx
    !
    AAA new-model
    !
    !
    AAA authentication login default local
    AAA authentication login ciscocp_vpn_xauth_ml_1 local
    AAA authorization exec default local
    AAA authorization ciscocp_vpn_group_ml_1 LAN
    !
    !
    !
    !
    !
    AAA - the id of the joint session
    !
    !
    No ipv6 cef
    IP source-route
    no ip free-arps
    IP cef
    !
    Xxxxxxxxx name server IP
    IP server name yyyyyyyyy
    !
    Authenticated MultiLink bundle-name Panel
    !

    parameter-map local urlfpolicy TSQ-URL-FILTER type
    offshore alert
    block-page message "Blocked according to policy"
    parameter-card type urlf-glob FACEBOOK
    model facebook.com
    model *. Facebook.com

    parameter-card type urlf-glob YOUTUBE
    mires of youtube.com
    model *. YouTube.com

    parameter-card type urlf-glob CRICKET
    model espncricinfo.com
    model *. espncricinfo.com

    parameter-card type urlf-glob CRICKET1
    webcric.com model
    model *. webcric.com

    parameter-card type urlf-glob YAHOO
    model *. Yahoo.com
    model yapo

    parameter-card type urlf-glob PERMITTEDSITES
    model *.

    parameter-card type urlf-glob HOTMAIL
    model hotmail.com
    model *. Hotmail.com

    Crypto pki token removal timeout default 0
    !
    Crypto pki trustpoint TP-self-signed-2049533683
    enrollment selfsigned
    name of the object cn = IOS - Self - signed - certificate - 2049533683
    revocation checking no
    rsakeypair TP-self-signed-2049533683
    !
    Crypto pki trustpoint tti
    crl revocation checking
    !
    Crypto pki trustpoint test_trustpoint_config_created_for_sdm
    name of the object [email protected] / * /
    crl revocation checking
    !
    !
    TP-self-signed-4966226213 crypto pki certificate chain
    certificate self-signed 01
    3082022B 30820194 02111101 300 D 0609 2A 864886 F70D0101 05050030 A0030201
    2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43647274 31312F30
    69666963 32303439 35323236 6174652D 3833301E 170 3132 30363232 30363332

    quit smoking
    encryption pki certificate chain tti
    for the crypto pki certificate chain test_trustpoint_config_created_for_sdm
    license udi pid CISCO1905/K9 sn xxxxxx
    licence start-up module c1900 technology-package datak9
    username privilege 15 password 0 xxxxx xxxxxxx
    !
    redundancy
    !
    !
    !
    !
    !
    type of class-card inspect entire tsq-inspection-traffic game
    dns protocol game
    ftp protocol game
    https protocol game
    match icmp Protocol
    match the imap Protocol
    pop3 Protocol game
    netshow Protocol game
    Protocol shell game
    match Protocol realmedia
    match rtsp Protocol
    smtp Protocol game
    sql-net Protocol game
    streamworks Protocol game
    tftp Protocol game
    vdolive Protocol game
    tcp protocol match
    udp Protocol game
    match Protocol l2tp
    class-card type match - all BLOCKEDSITES urlfilter
    Server-domain urlf-glob FACEBOOK game
    Server-domain urlf-glob YOUTUBE game
    CRICKET urlf-glob-domain of the server match
    game server-domain urlf-glob CRICKET1
    game server-domain urlf-glob HOTMAIL
    class-map type urlfilter match - all PERMITTEDSITES
    Server-domain urlf-glob PERMITTEDSITES match
    inspect the class-map match tsq-insp-traffic type
    corresponds to the class-map tsq-inspection-traffic
    type of class-card inspect correspondence tsq-http
    http protocol game
    type of class-card inspect all match tsq-icmp
    match icmp Protocol
    tcp protocol match
    udp Protocol game
    type of class-card inspect correspondence tsq-invalid-src
    game group-access 100
    type of class-card inspect correspondence tsq-icmp-access
    corresponds to the class-map tsq-icmp
    !
    !
    type of policy-card inspect urlfilter TSQBLOCKEDSITES
    class type urlfilter BLOCKEDSITES
    Journal
    reset
    class type urlfilter PERMITTEDSITES
    allow
    Journal
    type of policy-card inspect SELF - AUX-OUT-policy
    class type inspect tsq-icmp-access
    inspect
    class class by default
    Pass
    policy-card type check IN and OUT - POLICIES
    class type inspect tsq-invalid-src
    Drop newspaper
    class type inspect tsq-http
    inspect
    service-policy urlfilter TSQBLOCKEDSITES
    class type inspect tsq-insp-traffic
    inspect
    class class by default
    drop
    policy-card type check OUT IN-POLICY
    class class by default
    drop
    !
    area inside security
    security of the OUTSIDE area
    source of security OUT-OF-IN zone-pair outside the destination inside
    type of service-strategy check OUT IN-POLICY
    zone-pair IN-to-OUT DOMESTIC destination outside source security
    type of service-strategy inspect IN and OUT - POLICIES
    security of the FREE-to-OUT source destination free outdoors pair box
    type of service-strategy inspect SELF - AUX-OUT-policy
    !
    Crypto ctcp port 10000
    !
    crypto ISAKMP policy 1
    BA 3des
    preshared authentication
    Group 2
    !
    crypto ISAKMP policy 2
    Group 2
    !
    ISAKMP crypto client configuration group vpntunnel
    XXXXXXX key
    pool SDM_POOL_1
    include-local-lan
    10 Max-users
    ISAKMP crypto ciscocp-ike-profile-1 profile
    vpntunnel group identity match
    client authentication list ciscocp_vpn_xauth_ml_1
    ISAKMP authorization list ciscocp_vpn_group_ml_1
    client configuration address respond
    virtual-model 1
    !
    !
    Crypto ipsec transform-set TSQ-TRANSFORMATION des-esp esp-md5-hmac
    !
    Profile of crypto ipsec CiscoCP_Profile1
    game of transformation-TRANSFORMATION TSQ
    set of isakmp - profile ciscocp-ike-profile-1
    !
    !
    !
    !
    !
    !
    the Embedded-Service-Engine0/0 interface
    no ip address
    response to IP mask
    IP directed broadcast to the
    Shutdown
    !
    interface GigabitEthernet0/0
    Description LAN INTERFACE-FW-INSIDE
    IP 172.17.0.71 255.255.0.0
    IP nat inside
    IP virtual-reassembly in
    security of the inside members area
    automatic duplex
    automatic speed
    !
    interface GigabitEthernet0/1
    Description WAN-INTERNET-INTERNET-FW-OUTSIDE
    IP address xxxxxx yyyyyyy
    NAT outside IP
    IP virtual-reassembly in
    security of the OUTSIDE member area
    automatic duplex
    automatic speed
    !
    interface Serial0/0/0
    no ip address
    response to IP mask
    IP directed broadcast to the
    Shutdown
    no fair queue
    2000000 clock frequency
    !
    type of interface virtual-Template1 tunnel
    IP unnumbered GigabitEthernet0/0
    ipv4 ipsec tunnel mode
    Tunnel CiscoCP_Profile1 ipsec protection profile
    !
    local IP SDM_POOL_1 172.17.0.11 pool 172.17.0.20
    IP forward-Protocol ND
    !
    no ip address of the http server
    local IP http authentication
    IP http secure server
    !
    IP nat inside source list 1 interface GigabitEthernet0/1 overload
    IP route 0.0.0.0 0.0.0.0 yyyyyyyyy
    IP route 192.168.1.0 255.255.255.0 172.17.0.6
    IP route 192.168.4.0 255.255.255.0 172.17.0.6
    !
    access-list 1 permit 172.17.0.0 0.0.255.255
    access-list 100 permit ip 255.255.255.255 host everything
    access-list 100 permit ip 127.0.0.0 0.255.255.255 everything
    access-list 100 permit ip yyyyyy yyyyyy everything
    !
    !
    !
    !
    !
    !
    !
    !
    control plan
    !
    !
    !
    Line con 0
    line to 0
    line 2
    no activation-character
    No exec
    preferred no transport
    transport of entry all
    output transport lat pad rlogin lapb - your MOP v120 udptn ssh telnet
    StopBits 1
    line vty 0 4
    transport input ssh rlogin
    !
    Scheduler allocate 20000 1000
    end

    A few things to change:

    (1) pool of IP must be a single subnet, it is not the same subnet as your subnet internal.

    (2) your NAT ACL 1 must be changed to ACL extended for you can configure NAT exemption, so if your pool is reconfigured to be 10.10.10.0/24:

    access-list 120 deny ip 172.17.0.0 0.0.255.255 10.10.10.0 0.0.0.255

    access-list 120 allow ip 172.17.0.0 0.0.255.255 everything

    overload of IP nat inside source list 120 interface GigabitEthernet0/1

    No inside source list 1 interface GigabitEthernet0/1 ip nat overload

    (3) OUT POLICY need to include VPN traffic:

    access-list 121 allow ip 10.10.10.0 0.0.0.255 172.17.0.0 0.0.255.255

    type of class-card inspect correspondence vpn-access

    game group-access 121

    policy-card type check OUT IN-POLICY

    vpn-access class

    inspect

Maybe you are looking for