Problem on Cisco VSMS Gateway

Similar Questions

• Problem with Cisco ACS and different areas

  Hello

  We are conducting currently a problem with Cisco ACS that we put in place, and I'll try to describe:

  We have ACS related directory AD areas, where we have 2 domains and appropriate group mappings.

  Then we have our Cisco switches with the following configuration,

  AAA new-model

  AAA-authentication failure message ^ CCCC

  Failled to authenticate!

  Please IT networks Contact Group for more information.

  ^ C

  AAA authentication login default group Ganymede + local

  AAA authorization exec default group Ganymede + local

  AAA authorization network default group Ganymede + local

  AAA accounting exec default start-stop Ganymede group.

  orders accounting AAA 15 by default start-stop Ganymede group.

  !

  AAA - the id of the joint session

  But the problem is that with the users in a domain, we can authenticate, but not the other. Basically, the question is that when we check on the past of authentication, two authentications are passage and the display of 'Authentic OK', but on the side of the switch, there is a power failure.

  There may be something wrong with the ACS?

  Thank you

  Jorge

  Try increasing the timeout on IOS device using radius-server timeout 10.

  Do we not have journaling enabled on the ACS server remotely?

  -Philou

• Problem using Cisco WebEx on Win 7

  I try to use Cisco WebEx to use my home computer to get the files for the school. The meeting is set up at 100%, but whenever I try to access it from my Government computer, I get a saying that an add-on has failed. I tried, but I can't find the add-on responsible and if possible, where to download. The account I have is very, very safe and I'm unable to download a lot of things, so keep that in mind. Spent a lot of time trying to find a Web site that requires no download to use, and this seems to be the best. If there is more better, please let me know.

  < original="" title:="" webex="" from="" a="" government="" computer="">

  Hi Ken,

  Thanks for posting your query on the Microsoft Community.

  With the publication of the description, I understand that you are facing difficulties in the use of Cisco WebEx on your Windows 7 machine. I will certainly help you get this fixed number.

  I would be grateful if you could help me with more information:

  1. what web browser do you use?

  2. are you having the same problem when downloading the thing as Add-ons?

  If the problem only occurs when you use Cisco WebEx , then I suggest you send or post your query on forum Cisco WebEx. You can also check out the link below

  https://supportforums.Cisco.com/community/5726/conferencing

  Hope this information is useful. Please write back to us for assistance, we will be happy to help you.

• Problem installing Cisco's AnyConnect

  Hi all, I am trying to install Cisco AnyConnect 3.1.05178 on my computer at home, but as soon as I run the installer I get the following error message:

  There is a problem with this Windows Installer package. A DLL required for this install to complete could not be run. Contact your provider to support personal or package.

  No additional information on the DLL is provided. Also, I know for a fact that I am using the installer is not corrupt, as I tested it on a number of other machines, and it runs and installs perfectly.

  Any ideas, suggestions or experiences with this issue?

  Thank you!

  Hi Joseph,.

  You can see this forum. It may solve your problem.

• Problems with Cisco 881, internet connection

  I have a newly addedCisco 881 connected to a firewall, which is connected to the ADSL. We have added to the wireless and when wireless clients connect to the network (using standalone APs) they are capable of anything on the 192.168.88.0 network ping. They can also ping the firewall 10.0.88.1, but only because it is on the same network as port fa4. It seems to me like there is a problem with my default routes, but they look good, and I have tried different methods to do this. Here's the running-config on my 881, please help!

  Wireless_881 #show run
  Building configuration...

  Current configuration: 3679 bytes
  !
  ! Last modification of the configuration at 15:45:48 UTC Friday, July 27, 2012
  version 15.2
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  encryption password service
  !
  hostname Wireless_881
  !
  boot-start-marker
  boot-end-marker
  !
  !
  logging buffered 51200 warnings
  Select the secret 4 Ng0lbQgI3BKsMMXv78pz6UP80gaDVrhUBQB3XKZMl3M
  !
  No aaa new-model
  iomem 10 memory size
  !
  Crypto pki trustpoint TP-self-signed-1620898290
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 1620898290
  revocation checking no
  rsakeypair TP-self-signed-1620898290
  !
  !
  TP-self-signed-1620898290 crypto pki certificate chain
  certificate self-signed 01
  3082025A 308201 3 A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 31312F30
  69666963 31363230 38393832 6174652D 3930301E 170 3132 30373132 31353431
  30365A 17 0D 323030 31303130 30303030 305A 3031 06035504 03132649 312F302D
  4F532D53 5369676E 656C662D 43 65727469 66696361 74652 31 36323038 65642D
  39383239 3030819F 300 D 0609 2A 864886 01050003, 818, 0030, 81890281 F70D0101
  8100ED42 50BD2E07 D6A61E1C 7A8C236F 5499F47D 0FF2F1AC 23657162 66769F02
  92921298 C4E68A84 B90B572D 300 C 6653 ADAB41F2 005F1544 122C99DF 16AA1F01
  D3DC117D B92750F5 F6C2D4CE D6D173C5 A197E9C2 7B5EEF9B 4B2404BD D8243ABB
  14EFF08B 21DE9D0A B11610EB 624E3B22 17BA1C73 60212253 DE86D7B8 EFD5771E
  18B 90203 010001 HAS 3 8181307F 300F0603 551D 1301 01FF0405 30030101 FF302C06
  03551D 73735F38 38312E70 616C6D65 74746F63 11 04253023 82215769 72656 C 65
  6974697A 656E732E 6F726730 1 230418 30168014 BDFA0DBF FE8B72A7 1F060355
  9B2D214C 466C1EDF 33D2FA3F 301D 0603 551D0E04 160414BD FA0DBFFE 8B72A79B
  2D214C46 6C1EDF33 D2FA3F30 0D06092A 864886F7 010104 05000381 8100E0EF 0D
  6D122A92 75ABE448 620EEDAD 131569 D 2 05BEB6D9 FA77DF2F 87FD464F 8111454F
  CAE20CC2 580C8DC8 421065CD 31CF2F79 00722044 4B99E26A 5C48FD2D 2DCE835B
  D0ADBD53 B768064B 9E4AB048 F0E9F751 11C9DA51 8EA9C1D3 DCEB136A EE3944D7
  FD7EF038 DE965699 DAC4186F 3AAEBD85 B95F05D1 B3AF0BD5 566498 3 6424
  quit smoking
  !
  !
  !
  DHCP excluded-address IP 192.168.88.1 192.168.88.10
  !
  PCFCU dhcp IP pool
  network 192.168.88.0 255.255.255.0
  router by default - 192.168.88.1
  Server DNS 208.67.222.222
  !
  !
  !
  no ip domain search
  IP domain name *.
  IP cef
  No ipv6 cef
  !
  !
  license udi pid CISCO881-K9 sn FTX161080BP
  !
  !
  username privilege 15 secret 5 mgaskin $1$ y8... $cCDIZqgRtHqBbsh36XW9d.
  username privilege 15 secret 5 jlivingston $1$ Qs6L$ mhAtoKguqLmzmlfGbMYqW.
  !
  !
  !
  !
  !
  property intellectual ssh authentication-5 retries
  !
  !
  !
  !
  !
  !
  !
  !
  !
  interface FastEthernet0
  switchport access vlan 880
  no ip address
  !
  interface FastEthernet1
  switchport access vlan 880
  no ip address
  !
  interface FastEthernet2
  switchport access vlan 880
  no ip address
  !
  interface FastEthernet3
  switchport access vlan 880
  no ip address
  !
  interface FastEthernet4
  IP 10.0.88.2 255.255.255.248
  NAT outside IP
  IP virtual-reassembly in
  automatic duplex
  automatic speed
  !
  interface Vlan1
  no ip address
  !
  interface Vlan880
  IP 192.168.88.1 255.255.255.0
  IP nat inside
  IP virtual-reassembly in
  !
  default IP gateway - 10.0.88.2
  IP forward-Protocol ND
  IP http server
  23 class IP http access
  local IP http authentication
  IP http secure server
  IP http timeout policy slowed down 60 life 86400 request 10000
  !
  IP nat inside source list 10 interface FastEthernet4 overload
  network default IP 0.0.0.0
  IP route 0.0.0.0 0.0.0.0 10.0.88.1
  !
  access-list 10 permit 192.168.88.0 0.0.0.255
  not run cdp
  !
  !
  !
  Line con 0
  line to 0
  line vty 0 4
  password 7 144F425C5D14292D273D6B657A46
  opening of session
  transport telnet entry
  !
  max-task-time 5000 Planner
  !
  end

  and if you disconnect the router announcement use pc directly to the firewall with ip 10.0.88.2 work?

• Cisco Voice Gateway with FXO of Telco, operation support for IP phone

  Hi all

  A very quick question.

  Incoming calls via telephone in a voice gateway company ending on a Cisco 7941 G.

  Is it possible for a Cisco 7941 IP handsets or others to instagate actuation when the call is active, then causes the RTC line provide the new key, and then a Telco on via DTMF the combined IP instagate transfer to another number.

  This feature works on a PABX Ericcson previously!

  Is hookflask taken analog device support ONLY?

  I think that the GUY supports, anyone got it working on CallManager?

  Concerning

  Andrew

  Fix Andrew, actuation on IP phone is supported only with the MAN not with CUCM.

  HTH

  GP.

  Pls rate useful messages!

• problem with cisco DPC-3010 USB network connection

  Today, I received the new Cisco DPC-3010 of Charter. I plugged everything and together with my router, that everything works, but when I tried to use the USB Modem have windows says that it is an unknown device. I have installed and reinstalled the drivers, powercycled the modem and restarted the computer, but nothing works.

  Hello

  If the problem is specific to the unit then, I suggest you to contact the manufacturer of the device for the best assistance.

  http://www.Cisco.com/Web/consumer/support/index.html

• Audio problems in Windows 8 gateway computer

  It started a month ago, but then it worked again so I forgot, but it happens one more time and more often.

  I ran convenience store who finds no problem, in fact the system restore, is that the driver had need of an update, even reinstalled the driver (he worked for a few days and then stopped again), checked the 'allow applications to take control of this device', and when I try to test the speakers it says that the device is in use. Windows Media Player no longer works. Whenever I restart my computer it will work for a few minutes and then cut out again, but when I go to Device Manager it says everything is working properly.

  I feel like I did everything and nothing seems to work.

  If anyone can help solve me this problem would be great, because I don't have the money to buy another computer.

  I have a laptop Gateway NE56R41u if that will help you.

  Original title: I can't get my sound to work?

  I finally took to the repair shop today and it turned out that I had programs on my computer that was playing with the sound. These programs were iOrbit (Advanced System Care) and Free Youtube Downloader. They the uninstalled and everything works correctly, so the problem is solved.

• Problems with PCoIP secure Gateway

  I am using view 4.6 and faced with this configuration.  Under the "view Configuration", "Servers", then "view connection server" it shows my connection to the server.  The PCoIP column he says no secure portal is installed which is true.  See screenshoot

  

  the problem arises in the settings of the connection servers.

  When I select my connection to the server and fill in the external URL 'Tunnel secured HTTP (S)' and uncheck it ' user secure Tunnel connection to the Office I cam continue to use the internal connection server.

  When I check the box and check also the "gateway of PCoIP PCoIP connections for desktop machine, so this will work remotely, but not internally.  Also the external URL PCoIP is grayed out.

  To sum up I can't get this to work for internal or external use and not both at the same time.

  You can do this work with just a single server connection or an external as internal access, but it will mean that internal PCoIP is unnecessarily sent by gateway through a connection to the server or security server.

  It is best to dedicate servers to connect to internal and external to internal PCoIP direct access between the client and the virtual office.

  There is a detailed description of this http://communities.vmware.com/docs/DOC-14974 here, which includes a video detailing a deployment configuration of view for internal and external access.

  Select this option.

• WAP4410N existing other than Cisco network gateway

  Hello

  I was wondering if someone can quickly answer my question?

  I am trying to use my WAP4410N to create a wireless bridge to an existing network that does not contain any Cisco kit. After reading the manual, I tried the bridge WDS wireless solution, which is my router wireless D-Link & MAC address, but there is no option to put in network WPA2 key, I guess I misunderstood how this feature works, & maybe it works with other products of Cisco wireless?

  Thanks in advance to anyone who can shed light on my question,

  Andy

  Sent by Cisco Support technique iPhone App

  HI Andy,.

  Noramlly that configure you WDS Bridge would need to implement WPA 2 personal option under the wireless part, and then click Security.

  Since the SSID and security must be the same, is that were you would enter information. As to make this set your work with a D-Link wireless router, you'll never miss that probably the question were that this wireless device must support WDS. Even then you might also encounter a question having no match wireless chipsets as well.

  More than likely that this configuration will not work for you. I advise to use an other WAP4410n to establish the connection. Rely on what you are wanting to do a WET200 may also work for you since its just fill a wireless network and only use WDS, but I have never tested this connection with a D-link router so I can't 100% guaranteed if this implementation will work as well or not.

  Hope this helps and let me know if you have any questions.

  Thank you

  -Clayton Sill

• 2901 Cisco Voice gateway + 9 CUCM DECT phones

  One of our locations has 2 lines of POTS that currently have wireless DECT phones. Originally, VoIP phones are provided to be placed there but they wantto use wireless phones. We do no lack of wireless phones, as the wireless infrastructure is designed to support.

  I guess I can connect a Cisco's DECT phone to an FXS port on the 2901 and be able to integrate in the VoIP system? Are there restrictions that I need to look out for?

  This can be done. An analog phone won't have as many features as an IP phone, next to that it will work.

• Problem with Cisco requested orders IOS CLI

  So I try to reload the router with EEM.  However, I want it done via the cli action statement, so I can delay the cooldown to 10.  However, I have problems with the model keyword.  Here's my applet and debugging.  It seems that the declaration of model does not meet what is asked.  I've tried several different combinations, but this one made the most sense to me.

  Event Manager applet

  event no

  message from syslog to action 1.0 "router Reload."

  command action 1.1 cli 'enable '.

  model "reload in 10" action 1.3 cli command 'yes '.

  command action 1.5 cli "confirm".

  action syslog 1.7 msg "it worked!"

  * 1 Mar 00:37:18.831: % HA_EM-6-LOG: TEST: reload router

  * 00:37:18.839 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): CTL: called cli_open.

  * 1 Mar 00:37:18.939: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:

  * 1 Mar 00:37:18.939: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: R2 >

  * 00:37:18.939 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): IN: R2 > activate

  * 1 Mar 00:37:18.955: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:

  * 1 Mar 00:37:18.955: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: R2 #.

  * 00:37:18.955 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): IN: R2 #reload in 10

  * 00:37:18.967 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): IN: confirm

  R2 #.

  R2 #.

  * 1 Mar 00:37:38.879: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:

  * 00:37:38.879 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: % If please answer 'yes' or 'no '.

  * 1 Mar 00:37:38.879: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:

  * 00:37:38.879 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: the system configuration has changed. Save? [Yes/No]:

  * 00:37:38.879 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): CTL: called cli_close.

  The manual way:

  R2 #reload in 10

  The system configuration has changed. Save? [Yes/No]: Yes
  Building configuration...
  [OK]
  Recharge regular in 10 minutes by the console
  Reload reason: reload command
  Proceed to recharge? [confirm]
  R2 #.
  * 00:56:27.083 Mar 1: % SYS-5-SCHEDULED_RELOAD: Reload asked at 01:06:22 UTC Friday, March 1, 2002 at 00:56:22 UTC Friday, March 1, 2002 by the console. Reason for reload: reload the command.

  I tried this:

  Event Manager applet
  event no
  message from syslog to action 1.0 "router Reload."
  command action 1.1 cli 'enable '.
  Action 1.2 cli command "wr".
  model "reload in 10" action 1.3 cli command "confirm".
  action syslog 1.7 msg "it worked!"
  !
  end

  R2 #.
  R2 #.
  #event R2 Manager run TEST

  * 1 Mar 00:54:52.855: % HA_EM-6-LOG: TEST: reload router
  R2 #.
  * 00:54:52.863 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): CTL: called cli_open.
  * 1 Mar 00:54:52.963: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:
  * 1 Mar 00:54:52.963: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: R2 >
  * 00:54:52.963 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): IN: R2 > activate
  * 1 Mar 00:54:52.979: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:
  * 1 Mar 00:54:52.979: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: R2 #.
  * 00:54:52.979 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): IN: R2 #wr
  * 1 Mar 00:54:53.895: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUTSIDE:
  * 00:54:53.899 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: building configuration...
  * 1 Mar 00:54:53.899: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: [OK]
  * 1 Mar 00:54:53.899: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): OUT: R2 #.
  * 00:54:53.903 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): IN: R2 #reload in 10
  * 00:54:54.015 Mar 1: % HA_EM-6-LOG: TEST: it worked!
  R2 #.
  * 00:54:54.015 Mar 1: % HA_EM-6-LOG: TEST: DEBUG (cli_lib): CTL: called cli_close.

  Your second approach is good, but you aren't answer the prompt.  Add:

  Action 1.8 cli command 'y '.

• Problem router Cisco and Checkpoint VPN

  Hello

  I couldn't establish vp from site to site between cisco and checkpoint. Can you please check the logs?

  Thank you.

  * 29 sept 08:17:22.627: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:17:22.631: ISAKMP: (0): profile of THE request is (NULL)
  * 29 sep 08:17:22.631: ISAKMP: created a struct peer X.X.X.X, peer port 500
  * 29 sep 08:17:22.631: ISAKMP: new created position = 0x88AD1AB0 peer_handle = 0 x 80000004
  * 29 sep 08:17:22.631: ISAKMP: lock struct 0x88AD1AB0, refcount 1 to peer isakmp_initiator
  * 29 sep 08:17:22.631: ISAKMP: 500 local port, remote port 500
  * 29 sep 08:17:22.631: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:17:22.631: ISAKMP: (0): insert his with his 88AF7D94 = success
  * 29 sep 08:17:22.631: ISAKMP: (0): cannot start aggressive mode, try the main mode.
  * 29 sep 08:17:22.631: ISAKMP: (0): pre-shared key found peer corresponding X.X.X.X
  * 29 sep 08:17:22.631: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID
  * 29 sep 08:17:22.631: ISAKMP: (0): built the seller-07 ID NAT - t
  * 29 sep 08:17:22.631: ISAKMP: (0): built of NAT - T of the seller-03 IDexit
  Router (config) #n
  * 29 sep 08:17:22.631: ISAKMP: (0): built the seller-02 ID NAT - t
  * 08:17:22.631 Sept. 29: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
  * 08:17:22.631 Sept. 29: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

  * 29 sep 08:17:22.631: ISAKMP: (0): Beginner Main Mode Exchange
  * 29 sep 08:17:22.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:22.631 Sept. 29: ISAKMP: (0): a Packet.o IKE IPv4 send

  * 29 sep 08:17:32.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:17:32.631: ISAKMP (0): increment the count of errors on his, try 1 5: retransmit the phase 1
  * 29 sep 08:17:32.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:17:32.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:32.631 Sept. 29: ISAKMP: (0): sending of a CPVPN IKE IPvaccess lists

  * 29 sep 08:17:42.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:17:42.631: ISAKMP (0): increment the count of errors on his, try 2 of 5: retransmit the phase 1
  * 29 sep 08:17:42.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:17:42.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:42.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE...
  * 29 sep 08:17:52.627: IPSEC (key_engine): request timer shot: count = 1,.
  local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0
  * 29 sept 08:17:52.627: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:17:52.627: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:17:52.627: ISAKMP: (0): SA is still budding. Attached new request ipsec. (local Y.Y.Y.Y, distance X.X.X.X)
  * 29 sep 08:17:52.627: ISAKMP: error during the processing of HIS application: failed to initialize SA
  * 29 sep 08:17:52.627: ISAKMP: error while processing message KMI 0, error 2.
  * 29 sep 08:17:52.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:17:52.631: ISAKMP (0): increment the count of errors on his, try 3 of 5: retransmit the phase 1
  * 29 sep 08:17:52.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:17:52.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:17:52.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:02.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:02.631: ISAKMP (0): increment the count of errors on his, try 4 out 5: retransmit the phase 1
  * 29 sep 08:18:02.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:02.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:02.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:12.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:12.631: ISAKMP (0): increment the count of errors on his, try 5 of 5: retransmit the phase 1
  * 29 sep 08:18:12.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:12.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:12.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:22.627: IPSEC (key_engine): request timer shot: count = 2,.
  local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0
  * 29 sep 08:18:22.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:22.631: ISAKMP: (0): the peer is not paranoid KeepAlive.

  * 29 sep 08:18:22.631: ISAKMP: (0): removal of reason ITS status of 'Death by retransmission P1' (I) MM_NO_STATE (peer X.X.X.X)
  * 29 sep 08:18:22.631: ISAKMP: (0): removal of reason ITS status of 'Death by retransmission P1' (I) MM_NO_STATE (peer X.X.X.X)
  * 29 sep 08:18:22.631: ISAKMP: Unlocking counterpart struct 0x88AD1AB0 for isadb_mark_sa_deleted(), count 0
  * 29 sep 08:18:22.631: ISAKMP: delete peer node by peer_reap for X.X.X.X: 88AD1AB0
  * 29 sep 08:18:22.631: ISAKMP: (0): node-930113685 error suppression FALSE reason 'IKE deleted.
  * 29 sep 08:18:22.631: ISAKMP: (0): error suppression node 661004686 FALSE reason 'IKE deleted.
  * 08:18:22.631 Sept. 29: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
  * 08:18:22.631 Sept. 29: ISAKMP: (0): former State = new State IKE_I_MM1 = IKE_DEST_SA

  * 29 sep 08:18:22.631: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
  * 29 sept 08:18:27.559: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:18:27.559: ISAKMP: (0): profile of THE request is (NULL)
  * 29 sep 08:18:27.559: ISAKMP: created a struct peer X.X.X.X, peer port 500
  * 29 sep 08:18:27.559: ISAKMP: new created position = 0x85EDF1F0 peer_handle = 0 x 80000005
  * 29 sep 08:18:27.559: ISAKMP: lock struct 0x85EDF1F0, refcount 1 to peer isakmp_initiator
  * 29 sep 08:18:27.559: ISAKMP: 500 local port, remote port 500
  * 29 sep 08:18:27.559: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:18:27.559: ISAKMP: find a dup her to the tree during the isadb_insert his 88C1CE60 = call BVA
  * 29 sep 08:18:27.559: ISAKMP: (0): cannot start aggressive mode, try the main mode.
  * 29 sep 08:18:27.559: ISAKMP: (0): pre-shared key found peer corresponding X.X.X.X
  * 29 sep 08:18:27.559: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID
  * 29 sep 08:18:27.559: ISAKMP: (0): built the seller-07 ID NAT - t
  * 29 sep 08:18:27.559: ISAKMP: (0): built of NAT - T of the seller-03 ID
  * 29 sep 08:18:27.559: ISAKMP: (0): built the seller-02 ID NAT - t
  * 08:18:27.559 Sept. 29: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
  * 08:18:27.559 Sept. 29: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

  * 29 sep 08:18:27.559: ISAKMP: (0): Beginner Main Mode Exchange
  * 29 sep 08:18:27.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:27.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:37.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:37.559: ISAKMP (0): increment the count of errors on his, try 1 5: retransmit the phase 1
  * 29 sep 08:18:37.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:37.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:37.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:18:47.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:47.559: ISAKMP (0): increment the count of errors on his, try 2 of 5: retransmit the phase 1
  * 29 sep 08:18:47.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:47.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:18:47.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.

  * 29 sep 08:18:57.559: IPSEC (key_engine): request timer shot: count = 1,.
  local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0
  * 29 sept 08:18:57.559: IPSEC (sa_request):,.
  (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
  local_proxy = 192.168.222.0/255.255.255.0/256/0,
  remote_proxy = 10.0.10.0/255.255.255.0/256/0,
  Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
  lifedur = 3600 s and KB 4608000,
  SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
  * 29 sep 08:18:57.559: ISAKMP: set new node 0 to QM_IDLE
  * 29 sep 08:18:57.559: ISAKMP: (0): SA is still budding. Attached new request ipsec. (local Y.Y.Y.Y, distance X.X.X.X)
  * 29 sep 08:18:57.559: ISAKMP: error during the processing of HIS application: failed to initialize SA
  * 29 sep 08:18:57.559: ISAKMP: error while processing message KMI 0, error 2.
  * 29 sep 08:18:57.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:18:57.559: ISAKMP (0): increment the count of errors on his, try 3 of 5: retransmit the phase 1
  * 29 sep 08:18:57.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:18:57.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  Router #.
  Router #.
  * 08:18:57.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  * 29 sep 08:19:07.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
  * 29 sep 08:19:07.559: ISAKMP (0): increment the count of errors on his, try 4 out 5: retransmit the phase 1
  * 29 sep 08:19:07.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
  * 29 sep 08:19:07.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
  * 08:19:07.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
  Router #.
  Router #un all
  All possible debugging has been disabled

  The log shows main mode setup has failed.  See if this helps: http://www.itcertnotes.com/2011/04/ipsec-stuck-in-mmsasetup-and-mmnostat...

• Cisco SPA122 gateway analog SNMP MIB

  Hello

  Anyone know where I can get the list of OID or MIB for analog gateway SPA122. I would like to be able to query the State of the line and recording.

  Thank you

  Ronald

  The entire OID tree on SPA122 contain approximately 4000 points about 25 MIB (or more).

  But I'm not sure there is information that you want.

  It seems that the SNMP protocol to provide standard information to the underlying operating system (Linux). Line status and registration is maintained by the speech application running on it and such request provide no SNMP information as far as I know.

  I saved whole SNMP tree in State of rest and again during a call. It seems not to have difference related to the State of the line.

• Strange problem with Cisco ISE AuthC political

  Hi all

  I defined an AuthC policy which is very similar to two other policies that work very well.

  The condition is ONLY based on the IP Address of the NAS and once is which is matched, the only authorized Protocol PAP and that the DB internal users should be consulted for the user.

  The only thing is that when the RADIUS authentication request arrives, it does not match the policy, I created and matches the rule to deny access by default.

  Attached are the screenshots of what I set up. If there is anything else that you can need me to tell you to help me solve this then let me know.

  I thought that it might be a problem with the help of the internal, to remedy this user store, I changed it to "AD1" which then makes exactly the same as other rules that work very well, but this rule will not always match.

  I think that there is another bug.

  Any advice greatly appreciated thanks!

  Mario Rosa

  Hello Mario.

  Looking at the logs, the session does not use PAP/ASCII, but rather that it uses "dot1x" what type of scenario you doing here?

  Thank you for evaluating useful messages!