Problem of static-dynamic ASA5505 L2L

Similar Questions

• ASA 8.3 static - dynamic L2L

  Hello

  We have currently a Hub - installation has spoken with many vpn lan-to-lan configured static-static tunnels.

  Asked me to set up a vpn from the Hub to a remote site using the dhcp protocol to get its address by peers.

  I looked for an answer to this, but all I found that shows the dynamic map applied to the external interface.

  The normal map is currently applied, and I don't think that multiple no are allowed?  I can't test, because it's a working environment.

  So my query is, how to add this config without affecting any of the current connections?

  If not, is it possible to configure isakmp identity 1 phase like "hostname" presents a special connection (all others use 'address') and get them to use a dyndns Setup?

  This configuration should be ok. Maybe you need to expand further with a group strategy according to your needs (VPN-filter or...).

  --
  Don't stop once you have upgraded your network! Improve the world by lending money to low-income workers:
  http://www.Kiva.org/invitedBy/karsteni

• PIX and ASA static, dynamic and RA VPN does not

  Hello

  I am facing a very interesting problem between a PIX 515 and an ASA 5510.

  The PIX is in HQ and has several dynamic VPN connections (around 130) and IPsec vpn remote works very well. I had to add a PIX to ASA L2L VPN static and it does not work as it is supposed to be. The ASA 5510, at the remote end, connects and rest for a small period of time, however, all other VPN connections stop working.

  The most interesting thing is that ASA is associated with the dynamic map and not the static map that I created (check by sh crypto ipsec his counterpart x.x.x.x). However, if I make any changes in the ACL 'ACL-Remote' it affects the tunnel between the PIX and ASA.

  Someone saw something like that?

  Here is more detailed information:

  HQ - IOS 8.0 (3) - PIX 515

  ASA 5510 - IOS 7.2 (3) - remote provider

  Several Huawei and Cisco routers dynamically connected via ADSL

  Several users remote access IPsec

  A VPN site-to site static between PIX and ASA - does not.

  Here is the config on the PIX:

  Crypto ipsec transform-set ESP-3DES-ESP-SHA-HMAC-IPSec esp-3des esp-sha-hmac

  Dyn - VPN game 100 Dynamics-card crypto transform-set ESP-3DES-ESP-SHA-HMAC-IPSec

  Crypto dynamic-map Dyn - VPN 100 the value reverse-road

  VPN - card 30 crypto card matches the ACL address / remote

  card crypto VPN-card 30 peers set 20 x. XX. XX. XX

  card crypto VPN-card 30 the transform-set ESP-3DES-ESP-SHA-HMAC-IPSec value

  VPN crypto card - 100 - isakmp dynamic Dyn - VPN ipsec

  interface card crypto VPN-card outside

  crypto ISAKMP allow outside

  crypto ISAKMP policy 10

  preshared authentication

  3des encryption

  md5 hash

  Group 2

  life 86400

  crypto ISAKMP policy 65535

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  access list ACL-remote ext ip 10.0.0.0 allow 255.255.255.0 192.168.1.0 255.255.255.0

  Thank you.

  Marcelo Pinheiro

  The problem is that the ASA has a crypto acl defined between host and network, while the remote end has to the network.

  Make sure that the acl is reversed.

• Cisco ASA and dynamic VPN L2L Fortigate configuration

  I met a problem recently with an ASA 5510 (7.0) and a bunch of Fortigate 50 (3.0 MR7). The ASA is the hub and Fortigates are rays with a dynamic public IP.

  I followed this document on the site Web of Cisco (http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805733df.shtml) to set up my ASA and the parameters passed to my counterparts to set up their Fortigates.

  However, the ASA journal reveals that attemtps Fortigate connection always tried with DefaultRAGroup before falling back to DefaultL2LGroup and finally died. Experience with putting in place a dynamic VPN between Cisco and Fortigate someone? Which could not fail at each end? Here's a typical piece of error log ASA. The ASA is currently having a static VPN tunnel and a site-2-client VPN in two groups by default.

  6. January 10, 2011 20:58:45 | 713905: Group DefaultL2LGroup, IP = 116.230.243.205, P1 = relay msg sent to the WSF MM
  5. January 10, 2011 20:58:45 | 713201: Group = DefaultL2LGroup, IP = 116.230.243.205, in double Phase 1 detected package.  Retransmit the last packet.
  6. January 10, 2011 20:58:45 | 713905: Group DefaultL2LGroup, IP = 116.230.243.205, P1 = relay msg sent to the WSF MM
  5. January 10, 2011 20:58:45 | 713201: Group = DefaultL2LGroup, IP = 116.230.243.205, in double Phase 1 detected package.  Retransmit the last packet.
  6. January 10, 2011 20:58:41 | 713905: Group DefaultL2LGroup, IP = 116.230.243.205, P1 = relay msg sent to the WSF MM
  5. January 10, 2011 20:58:41 | 713201: Group = DefaultL2LGroup, IP = 116.230.243.205, in double Phase 1 detected package.  Retransmit the last packet.
  4. January 10, 2011 20:58:39 | 713903: Group = DefaultL2LGroup, IP = 116.230.243.205, ERROR, had decrypt packets, probably due to problems not match pre-shared key.  Abandonment
  5. January 10, 2011 20:58:39 | 713904: Group = DefaultL2LGroup, IP = 116.230.243.205, received the package of Mode main Oakley encrypted with invalid payloads, MessID = 0
  6. January 10, 2011 20:58:39 | 713905: Group = DefaultRAGroup, IP = 116.230.243.205, WARNING, had decrypt packets, probably due to problems not match pre-shared key.  User switching to the tunnel-group: DefaultL2LGroup
  5. January 10, 2011 20:58:39 | 713904: Group = DefaultRAGroup, IP = 116.230.243.205, received the package of Mode main Oakley encrypted with invalid payloads, MessID = 0
  4. January 10, 2011 20:58:33 | 713903: Group = DefaultRAGroup, IP = 116.230.243.205, error: cannot delete PeerTblEntry
  3. January 10, 2011 20:58:33 | 713902: Group = DefaultRAGroup, IP = 116.230.243.205, Removing peer to peer table has no, no match!
  6. January 10, 2011 20:58:33 | 713905: Group DefaultRAGroup, IP = 116.230.243.205, P1 = relay msg sent to the WSF MM
  5. January 10, 2011 20:58:33 | 713201: Group = DefaultRAGroup, IP = 116.230.243.205, in double Phase 1 detected package.  Retransmit the last packet.
  6. January 10, 2011 20:58:25 | 713905: Group DefaultRAGroup, IP = 116.230.243.205, P1 = relay msg sent to the WSF MM
  5. January 10, 2011 20:58:25 | 713201: Group = DefaultRAGroup, IP = 116.230.243.205, in double Phase 1 detected package.  Retransmit the last packet.
  6. January 10, 2011 20:58:21 | 713905: Group DefaultRAGroup, IP = 116.230.243.205, P1 = relay msg sent to the WSF MM
  5. January 10, 2011 20:58:21 | 713201: Group = DefaultRAGroup, IP = 116.230.243.205, in double Phase 1 detected package.  Retransmit the last packet.
  5. January 10, 2011 20:58:19 | 713904: IP = 116.230.243.205, encrypted packet received with any HIS correspondent, drop

  Yes, sounds about right. He will try to match with the DefaultRAGroup first, and when you know that it's a dynamic IPSec in LAN-to-LAN, it will be

  then back to the DefaultL2LGroup, because he doesn't know if the VPN Client or L2L again when he is contacted fist as they are connecting from dynamic IP peer.

  You must ensure that your L2L tunnel-group by default has been configured with the corresponding pre-shared key.

  Assuming that you have configured the dynamic map and assign to the card encryption.

  Here is an example of configuration where ASA has a static and peripheral ip address pair has dynamic IP:

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2030/products_configuration_example09186a00807ea936.shtml

  Hope that helps.

• Inspiron 17r - 5720 problems audio - static, hum, during playback of any audio and the sound of the speaker rear

  Hi, I got my laptop for less than a week and there are several problems with the audio. When no matter what audio is supposed to play, only a static noise comes from loudspeakers. This happens when the music plays, or when a sound system is supposed to play.

  Occasionally when I start the computer, the rear speaker makes a wooshing, a static sound (like a TV white noise) and will continue when I open programs.

  Hello. Unplug the power cable from the computer and listen on the batteries. If the audio improve, then you have a problem of material known with this model.

  The problem is documented in the FAQ Audio Choppy/jump. Look in the section for model Inspiron 7720 and 5720.

  Hello, Zohaib_R welcome on the portable Audio discussion Forum. Feel free to browse the FAQ portable Audio.

• PAT static & dynamic

  Hello guys,.

  I got the firewall pix 520 with s/w version 6.3 (3). I try windows server to access connected to my home network from my house through Real VNC 4. I think he's using port TCP 443 or TCP 5900 and for Java TCP 5800 I dunno... I'm under PAT on my external interface.

  Now my question is it possible to do port forwarding static port TCP of Real VNC and remaining dynamic port forwarding. In other words, I had only a single public IP address and I want to access this computer via Real VNC or any other machine virtual s/w's course... also, I want my internal hosts to navigate on the Internet.

  Can someone tell me if this is possible and if it is Yes, then what configuration I need to do

  Yes, it is quite possible. You will need to create a static translation for the internal host to the external IP address of the interfaces and allow traffic on the ports including via an ACL.

  Here's an example that uses the following criteria.

  External interface 192.168.1.1

  Inside the interface 10.1.1.1

  Inside the host 10.1.1.10

  This translation of the LCA and static will allow port 23, telnet to be accessible outside of the pix.

  public static tcp (indoor, outdoor) interface 23 10.1.1.10 23 netmask 255.255.255.255

  allowed INCOMING tcp access, list any host 192.168.1.1 eq 23

  Access-group ENTERING into the interface outside

  * Note that in the ACL, the permit is the external interface IP and not the internal hosts.

  You can use this example for your configuration. You just need the IP address, protocols, and ports. For each entry in static line you will need an ACL line to allow traffic. So, if your map of the 3 ports, you need 3 static for each port and 3 ACL entries.

  Daniel

• Difference between static & dynamic sql

  Hello

  It is my first question in OTN.

  I have a pl/sql procedure with no insert statements.

  Insert into table values...

  If I turn all these insert statements in dynamic sql, my procedure will give more effective? (execution)

  Please help me.

  Thanks in adv

  Friend

  Hello

  8b00c42d-7716-467e-BCEF-c756fd9599e2 wrote:

  Hello

  It is my first question in OTN.

  Welcome to the Forum!

  To get the most out of this Forum, see the FAQ in the Forum: Re: 2. How can I ask a question on the forums?

  For all performance issues, see also this Forum FAQ page: Re: 3. how to improve the performance of my query? / my query is slow.

  I have a pl/sql procedure with no insert statements.

  Insert into table values...

  If I turn all these insert statements in dynamic sql, my procedure will give more effective? (execution)

  Probably not.  Dynamic SQL is generally less effective than static SQL, as well as being more difficult to code, debug and maintain.

  Is there a reason why you think that the dynamic SQL would be preferable in this case?  If so, what is it?

• After the upgrade of the APEX 4.2 to 5.0 problems with static files

  Hello

  After the upgrade from 4.2 to 5.0 works of apex APEX (Apex runs on thothgateway 1.4.1 Morten Bråten.) but once the connection I get this message: "there are problems with the configuration of static files in your environment. Please see the section "Configuration static file Support" in the application Express Installation Guide. "and the page designer says"no page or page has no templates".

  OTN I found only advice for APEX with ADR.

  I tried to apex_rest_config and apex_epg_config.sql but without result.

  Apex works on thothgateway Morten Bråten 1.4.1. (I know: it is not supported.)

  Best regards

  Marco

  Hi Marco W.

  In the "Setup Guide" to "Thoth Gateway 1.4.1" go to 'step 3.' Configuration of DAD' and change/add the parameter:

  • PlsqlPathAlias the r value
  • The value PlsqlPathAliasProcedure wwv_flow.resolve_friendly_url

  Re-start the Middle Tier and check.

  It is of note for OSH who said:

  Note:

  PlsqlPathAliasand PlsqlPathAliasProcedure are required new parameters that must be added to an existing DAD. This is important when the upgrade to Application Express version 5.0.

  Reference: https://docs.oracle.com/cd/E59726_01/install.50/e39144/http_server.htm#HTMIG29263 (see the note below point 2)

  Kind regards

  Kiran

• APEX 5 - problem with static files after Installation

  Hello

  I've updated my development environment of APEX 4.2.6 to 5.0.0 with REST Data Services.

  Whenever I enter the Administration Services login page or run my application, I get the following message:

  There are problems with the configuration of static files in your environment. Please see the section "Configuration static file Support" in the Guide of the Installation Application Express.

  In Administration Services everything looks and works very well, but in my application there is no static file from the workspace loaded (for example CSS-files, images,...). The links "broken" to these files are translated in this way:

  <link rel="stylesheet" href="lets/static-files-not-configured/files/static/v1Y/lets.css" type="text/css">
  

  After some research, I discovered, that static files normally appear in my workspace in the Administration Services - I can access it and download it. BUT: When I compared the scheme with APEX_050000 APEX_040200 in the database, I discovered, that static files were not copied to the new instance (in the view APEX_WORKSPACE_FILES are just a few files...).

  Does anyone have an idea what the reason would be so?

  Thank you

  Christian

  Hi Christian Klingbacher,.

  I've updated my development environment of APEX 4.2.6 to 5.0.0 with REST Data Services.

  Whenever I enter the Administration Services login page or run my application, I get the following message:

  There are problems with the configuration of static files in your environment. Please see the section "Configuration static file Support" in the Guide of the Installation Application Express.

  In Administration Services everything looks and works very well, but in my application there is no static file from the workspace loaded (for example CSS-files, images,...).

  • You have configured the RESTful Services during the installation of Oracle APEX?

  Reference: https://docs.oracle.com/cd/E59726_01/install.50/e39144/listener.htm#HTMIG29335

  • Have you configured users required for RESTful Services when installing ADR?

  Reference: http://docs.oracle.com/cd/E37099_01/doc.20/e25066/install.htm#AELIG7217

  The file Support static configuration to demand Express Installation Guide (using ORDS) says:

  RESTful Services configuration is necessary when upgrading to Oracle Application Express version 5.0 and RESTful Services were not configured in a previous version.

  
  

  See the thread with the same question: How to configure * application and the workspace of static files after upgrade from 4.2 to 5.0?

  I hope this helps!

  
  

  Kind regards

  Kiran
  

• A problem when using dynamic objects related

  1. open an image in Lr using the command "open as smart object in Photoshop.

  2 convert the dynamic object opened in dynamic object associated with the Ps (save it in the same place where the original DNG file is by agreeing to replace)

  3. Save and close the TIFF file created in PS.

  4 make a few adjustments to the original DNG and save them in Lr in the DNG file.

  5. open the TIFF file and double-click the icon of yellow warning on the dynamic object bound to this day in the TIFF file.

  6. in ACR, simply click ok to update my linked smart object.

  7 and now without no cropping applied, my smart object related to the Ps is cropped automatically.

  How can I stop this automatic cropping?

  I solved my problem... Thank you.

• Hand static dynamic

  Help! I am a newbie who creates a website for a club. While I intend to start I would just like to add connection and security functionality in the future to limit access to certain pages. I was told that there are 'static sites' and 'dynamic' I must choose a type of site before I get to go? By reading some documents, it seems that there is 'static pages' and 'dynamic' can start using static pages right and add dynamic pages later? I don't want to start building a website and then be limited later because I used the wrong type of site or pages.

  > Can I start just use static pages and add dynamic pages later?

  Yes. Or you can start to build a dynamic site and only add static pages.
  The real questions are-

  1. what model of server your host supports?
  2. how temporal data that will be displayed (for example, how many times does take
  change)?
  3. the amount of data is there?
  4. how comfortable are you HTML and CSS?
  5. what methods of scripts you know?

  If the answer to 4 is 'no' and the 5 answer is 'none', you're in for one
  tough climb. Get some HTML and CSS under your belt before this launch
  rocket...

  --
  Murray - ICQ 71997575
  Adobe Community Expert
  (If you * MUST * write me, don't don't LAUGH when you do!)
  ==================
  http://www.dreamweavermx-templates.com - template Triage!
  http://www.projectseven.com/go - DW FAQs, tutorials & resources
  http://www.dwfaq.com - DW FAQs, tutorials & resources
  http://www.macromedia.com/support/search/ - Macromedia (MM) Technotes
  ==================

  "okcarol" wrote in message
  News:etmnr5$2OV$1@forums. Macromedia.com...
  > Help! I am a newbie who creates a website for a club. While I intend
  > launch simply I would add a feature of connection and security
  > the
  > future to restrict access to certain pages. I was told that there are ' static
  > sites' and 'dynamic' I must choose a type of site before entering
  > going?
  > Read some documents, he would say that there is ' static
  > pages
  > and 'dynamic pages' then I start just use static pages and add dynamic
  > pages
  > later? I don't want to start building a website and be limited in the future
  > on
  > because I used the wrong type of site or pages.
  >

• problems with my dynamic sql statement

  Hello
  
  I'm not a pl/sql developer, but just trying to write a simple piece of pl/sql code. My intentions are simple. I want to find all tables with a specified column name, with a specific value in that column. Also, I just want to print these tables which have information in them.
  
  I have read the documentation on oracle to find this information, but I can't seem to get this to work, and I don't see what my problem...
  
  Here is the code I wrote.
  
  declare
  
  number of v_number;
  sql_statement varchar2 (200);
  
  cursor pick_table is
  Select the table table_name from user_tab_columns
  where upper (column_name) = upper ('md_file_id');
  
  Start
  because me in pick_table
  loop
  
  sql_statement: = ' SELECT count (*) from "| i.table_name | 'where md_file_id = 22410';
  dbms_output.put_line (sql_statement);
  EXECUTE IMMEDIATE sql_statement in v_number;
  dbms_output.put_line ('number' | v_number);
  
  If v_number > 0
  then
  dbms_output.put_line (i.table_name);
  end if;
  
  end loop;
  end;
  /
  
  This works perfectly well if I try not to insert the table_name dynamically using i.table_name and a writing of the database table names in the select statement. It runs also fine if I take "v_number" information on my execute immediate command.
  Of course I can't do it with logic I.
  
  What is happening is that the procedure is pretending to hang himself.
  
  I'd appreciate any help that can be given.
  
  Thanks in advance

  user10869417 wrote:
  ...
  What is happening is that the procedure is pretending to hang himself.

  It doesn't seem to be anything wrong with your code. It seems that you have:

  has a lot of tables in your schema with the column MD_FILE_ID (perhaps having value 22410), or
  (b) you have only a few tables but huge with this column

  In my test with only 1 db such table, your PL/SQL block is running almost instantly:

  test@XE>
  test@XE> --
  test@XE> drop table t;
  
  Table dropped.
  
  test@XE> create table t as
    2  select 22410 md_file_id from dual;
  
  Table created.
  
  test@XE>
  test@XE> set timing on
  test@XE>
  test@XE> @test.sql
  test@XE> declare
    2    v_number number;
    3    sql_statement varchar2(200);
    4    cursor pick_table is
    5      select table_name from user_tab_columns
    6      where upper(column_name) = upper('md_file_id');
    7  begin
    8    for i in pick_table
    9    loop
   10      sql_statement := 'SELECT count(*) from ' || i.table_name || ' where md_file_id = 22410';
   11      dbms_output.put_line(sql_statement);
   12      EXECUTE IMMEDIATE sql_statement into v_number;
   13      dbms_output.put_line('count returned ' || v_number);
   14      if v_number > 0
   15      then
   16        dbms_output.put_line(i.table_name);
   17      end if;
   18    end loop;
   19  end;
   20  /
  SELECT count(*) from T where md_file_id = 22410
  count returned 1
  T
  
  PL/SQL procedure successfully completed.
  
  Elapsed: 00:00:00.33
  test@XE>
  test@XE>  
  

  which means that if you wait long enough, the pl/sql block will reach eventually up to completion.

  isotope

• Problems with static IP setting for the port forward through 2 routers

  I currently have cable internet connected to a router (Linksys E2000 w / v1.0.03 firmware). This router is connected to another router, a Linksys E3200 with firmware v1.0.02. In order to correctly forward ports through the E3200, I understand that I need to set up a static IP address on the router.

  I almost followed the steps in this video, but when I enter all the IP addresses for the static IP address settings, it allows me to access the router configuration page. I try to get the new IP address that I gave (which he tries to move automatically once I have save settings) and the connection times out. I am able to access internet otherwise, however. From here, I have to do a factory reset on the router and start from square one.

  Anyone have any ideas? I'm quite frustrated and would like to get ports forwarded so I can get my server properly set in place.

  1. If it has connected LAN - LAN you will need to disable the DHCP server on the E3200.

  2. the best option would be to use the 'bridge' on the E3200 mode (in the latest firmware) and connect the internet port to the main router.

  3. If connected LAN - LAN (or in Bridge mode) all internet related functions on the E3200, including ports are not relevant. There is no need to set up the port on the E3200 redirects. All shipping is done only on the E2000 and nowhere else.

  4. What is the address LAN IP of the E3200? What is the address LAN IP of the E2000?

• C4780 problem with static IP (the Linksys WLAN router snow leopard)

  
  

  169.254.x.x is an IP address, which the printer attribute itself if it can't find the network.

  DHCP must be active on the router to connect the first time.  If it is not active, it will not connect.  Once connected, you can create a static IP address for the printer.

• problem with static bitmap initializer

  I migrated my main current project of the JDE to Eclipse + plugin now (since we created a script of maven that copies of our class in the project library, it is possible).

  I use a utility class to initialize all the images I use private constructor and only static members.

  However, none of the images is correctly initialized.

  Here is the code for the BitmapProvider class:

  public static final EncodedImage BUSINESS_INDICATOR_24 = EncodedImage.getEncodedImageResource("symbol2424.png");
  

  to debug, I create the same static image on TIME. This method works correctly.

  encodedImage is well settled, however, BitmapProvider.INDICATOR_24 is not.

  EncodedImage encodedImage = EncodedImage.getEncodedImageResource("symbol2424.png");
  ApplicationIcon indicatorIcon = new ApplicationIcon(BitmapProvider.INDICATOR_24);
  

  I do not have ANY code change, the static initializer to work properly in the JDE.

  To the nth attempt the debugger is entered in the static code (so it is executed).

  The culprit was the overview of the application icon.

  After a few experiences and shamanic tips of my colleague about something similar two years ago, I removed this icon of the application descriptor.

  And now it works.

  Quite strange, the normal application icon is recovered in the static method, if an icon is marked as Overview icon in the application descriptor that it cannot be used in the application more.