registration on the intranet site

I think that the Adobe InContext server is used to provide authentication and script tools, but the scripts client-side perform the file transfer FTP/SFTP real to and from the site listed for editing. As a result, I was hoping it would work from a client computer within a firewall on a corporate intranet, a site published on the intranet. However, it seems such intranet sites can not registered via the administration tool "website to register. It will not save the login information unless he can read the site you are trying to save. This means InContext cannot be used to set up collaboration on an intranet site - only internet sites can be saved. True or false?

Hello Robert,.

The InContext Editing service is not available on IP addresses, and software firewall must allow communication between the InContext Editing and your web server FTP. If the InContext Editing service cannot communicate with your web server, it may change or update the files.

http://www.Adobe.com/products/incontextediting/systemreqs/

Best regards
Corey

Tags: InContext Editing

Similar Questions

SSO - link between workspace in the Intranet site - bypassing Login
Has anyone worked on this situation, connecting Hyperion Workspace in the intranet of the company (through without going through the login screen).

Version - 9.3
UNIX / Weblogic Setup
Hyperion workspace

PROBLEM - we try to tie the hyperion-plate-shape-space work-link to our company's intranet Web site. But we prefer our business users do not connect once more in the workspace of hyperion.

We are currently reviewing several options/options. 1. as a Java Applet in order to bypass the connection. 2 or other API related to options, as appropriate.

We also do not get much of a help from Oracle as well, since it is a new field of battle. Rarely any customer has this set-up/situation (OR at least I think).

If someone at - he faced the similar problem, and if you have solved this problem, we would like to hear from you. It would be a great help for us.
Hey,.

This sounds like a simple case of use for Single Sign On.

Here are a few links that should go you in the right direction,
http://www.Scribd.com/doc/29451489/enable-Kerberos-with-workspace-11-1-1-3
http://BusinessIntelligence.ITtoolbox.com/groups/technical-functional/Hyperion-Admin-l/how-to-configure-SSO-for-Hyperion-System-9-with-Apache-3572753

Please mark this as useful or correct.

See you soon,.
Christian

HTM file is no more runs when downloaded from the intranet site.

Last week, I published my Captivate project and downloaded on an intranet site to test. Everything was fine, I clicked on Project.htm and my e-Learning courses took place as I expected to run. I sent the final files published on the live site, and it worked as well.
This week I download all of the files will not work. I get a blank screen and an indicator of error at the bottom of my browser.
Files already loaded in the site of the last work work. They are only working files. Identical files, republished, new projects, for a completely different intranet site - nothing but a blank screen. Other users who load the files, or even copy the right files to another location to get the same error.
SWF files work. Move files on my local drive, on a shared drive.
My project is dead in the water.
Any ideas?

Hello

From what you described, it would seem that all of the necessary files have not been uploaded. Either that, or for some other reason they will not be found. It is possible that maybe the server has changed from Windows to UNIX and now there is a problem with file name. (UNIX is case-sensitive, so the other will not work if you call myfile.htm. Under Windows, the two names would work without problems)

See you soon... Rick

Useful and practical links

Captivate wish form/Bug report form

Certified Adobe Captivate training

SorcerStone blog

Captivate eBooks

How to activate my software Adobe After Effects? Even after payment and registration on the adobe site, it still gives an expired trial version,

I had the billing of adobe, but still not access tot the Platform page.
It does not start and always gives trial expired statement. What is the point of taking an account?
Please help me out here
THX

FAQ: What should I do if I have a subscription, but my application acts as if I had a trial?

https://forums.Adobe.com/thread/1962238

Contact support - for the link below, click on the still need help? option in the blue box below and choose the option to chat or by phone...

Make sure that you are logged on the Adobe site, having cookies enabled, clearing your cookie cache. If it fails to connect, try to use another browser.

Creative cloud support (all creative cloud customer service problems)

http://helpx.Adobe.com/x-productkb/global/service-CCM.html ( http://adobe.ly/19llvMN )

I sold Satellite P100 - how to cancel the registration on the Tosh site

I don't want the warranty registration/activation. I don't have it. I registered just the laptop by serial number on the site, to make information page appears each time I connect.

Also, do you think I need to remove my personal information (name and address) of the receipt and shipping note for security reasons?

Any input would be much appreciated.

Don t think you can do it yourself on the page Toshiba have you tried to contact the service provider authorized in your country?
Not? So did she and guys should be able to manage it.

Why can I not connect to the Intranet United when I can do it in Internet explore

In the past, I have had no problems to connect to the intranet of the secure site. Now, after that I updated Firefox I get a message indicating that a security problem.
When I go on Internet Explorer, I have no problem connecting to the intranet site for United.

Does the error 'weak Diffie-Hellman ephemeral key? Someone else mentioned get a few weeks on an employee United Web site.

If this is the error you get, the server attempts to use an obsolete encryption encryption algorithm that is vulnerable to the attack of the impasse that was in the news earlier this year.

What does that mean?

Even if you trust the server, a "dead end" attack compromised the security of your individual connection on the server, a lowering of the protection normally provided by SSL to a level that is easily cracked and read by others on the network. This is why Firefox protects you to establish this connection.

What can you do now?

The best solution is to update the server. Please ask for the protection of everyone! However, I suspect this is out of your control and could not happen soon. To work around the problem, you can try to disable these old ciphers in your Firefox, which I hope it will force the server to try some more secure encryption algorithms when connecting with you. Here's how:

(1) in a new tab, type or paste Subject: config in the address bar and press ENTER. Click on the button promising to be careful.

(2) in the search above the list box, type or paste dhe and make a pause so that the list is filtered

(3) double-click the preference security.ssl3.dhe_rsa_aes_128_sha to true to false (disable Firefox to use this encryption)

(4) double click on the security.ssl3.dhe_rsa_aes_256_sha preference from true to false (disable Firefox to use this encryption)

Try again the server; You may need to reload the page using Ctrl + Shift + r to ignore information in cache.

Success?

Unable to connect to the local intranet site now with 40 Firefox on OS 10.10.4, what has changed?

We have a local intranet site and I get in this very well, but go to click on a link that goes to another internal site for our list of phone and it does not ask for my credentials get into the page, it is just straight up with a 401 error, as I entered the wrong credentials. Things were fine with 39.0.3 and I have since then returned to her. Using Firefox 40 on Windows 7, he asked for credentials. I was wondering if there is some sort of bug in the OS X version?

I have not registered and not connected to other windows or tabs already passwords.

Something has changed in Firefox 40, but don't know what. I watched the news of the changes, but haven't seen anything coming out that may have caused this.

If you control the environment, then you could try to operate by affecting network.auth.allow - subresource-auth 2 as proposed in the article.
I know too little about the question of why it would work in a windows environment, but not on os x - it's a bit confusing...

When you access Intranet sites that use SSL certificates issued by our internal PKI, FF for Windows gives an error of "incorrectly put in the form of message coded DER"

When to access Intranet sites who have the SSL certificates issued by our internal PKI, FF for Windows gives an error message - an error occurred when connecting to myshaw. Security Library: improperly formatted DER encoded message. (Error code: sec_error_bad_der)

Chrome and IE work fine. This is a PKI again using the signature SHA-2 algorithm.

I was able to identify the problem. Our public key infrastructure has been using some signature algorithms that FF did not support.

Our company has an Intranet site, which is accessible on the web. It is an https site. Since FF upgraded to v23 he continues to seek approval each time if

The https worked OK with 22 FF company Intranet site. V23, a small drop-down menu keeps appearing whenever we go to another page on the site. He asks permission to load the page. With constant use, it's extremely irritating. There is no option to allow the site. What is the fix or should I go back to IE which had its own set of stupid questions.

Hello, for more information on why this locking mechanism was introduced in firefox please refer to the mixed content blocking in Firefox.

If you want to tour of blocking nevertheless generally a mixed content, enter on: config in the address bar of firefox (confirmed the message information where it appears) and search for the preference named security.mixed_content.block_active_content. Double-click it and change its value to false.

The Web site will not play its asf

By visiting the web site, sognoromance.com/ladyinred.htm, pages do not play sound in ASF or WMA format.
They do it with IE.
I installed the plugin, tested and turned off everything to nothing does not.

Is there a way to be able to hear the sound?

Thank you

It has been a while since I tried to create a Windows Media Player for IE and Firefox, so I don't know the latest thinking. You can try this as a complete replacement for your existing video script:
```
<script type="text/javascript">
function makePlayer(sURL){
 var o=document.createElement("object");
 o.setAttribute("type","application/x-mplayer2");
 o.setAttribute("data",sURL);
 var p=document.createElement("param");
 p.setAttribute("name","src");
 p.setAttribute("value",sURL);
 o.appendChild(p)
 document.body.appendChild(o);
}
makePlayer("http://path/to/song.asf");
</script>
```
You can find more help web development on the mozillaZine Web Development Council. Separate forum, separate registration.

{Fixed case on the function of setting by post very attentive of cor - el below entry.}

Registration of the laptop (DynaBook E8/520CDE)

GD day again!

Question: How can I save my laptop (Toshiba DynaBook E8/520CDE, was purchased from the Japan, Sept 2004, like a second hand) on the website of Toshiba if missing in the list of models available on this machine? There is not the DynaBook series at all! Help, please.
Otherwise, I can't get updates and downloads.

Thanks in advance.

Hello

All new drivers and updates for all Toshiba units you can find on the Toshiba site.

Visit this link: http://eu.computers.toshiba-europe.com

In addition, I put t know exactly how to register your laptop, but on this site, you will find information very useful.
If you want more exactly the registration information, you must contact the service partner.

Good bye

Problem with Gpedit.msc - local Intranet Sites

Hi all

I have a Server Windows 2008 R2 with IE 11 (latest update).

I had a problem with my local Intranet Sites.

On my server, I added these parameters on gpedit.msc:

User-computer configuration (both)---> administration model component Windows---> Internet Explorer---> Internet Control Panel Security Page---> Site to the list of assignment---> active---> 192.168.50.226 box--->--->: value 1

but it seems that nothing has changed.

I want that when I go to this site (192.168.50.226), it will automatically log in with my credentials. I've already put this setting on Internet Explorer Option:

But it is still asking me the credentials.

The strange thing I did it work on another server (same OS, same version of IE, same settings gpedit, same everything) and works. Not here.

If I go to Internet Options---> local Intranet Sites, on my server I see this:

Site window all is greyed out.

The window on the other server (the working one) is like this:

I do not understand why, I did the same things...

Maybe someone knows why?

Thank you very much.

This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)

*

http://social.technet.Microsoft.com/forums/en-us/home s/fr-U.S./Accueil

http://social.msdn.Microsoft.com/Forum

intranet site for 50 users license

I'll make an intranet site for the client.

they have a maximum of 50 users to use this web site.

does need 50 cal for windows server?

Please let me know questions about licenses, I need to know.

Thank you

Hi Bumsoo Kim,

The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums to get help:

TechNet Windows Server general forums

Why my D257 an Aspire is no longer listed or taken in charge on the Acer site?

My Aspire One was bought on 25/11/11 and now I have an opening window on startup stating that the program compatibility Wizard. I wanted more information and decided to check the Acer Web site.

When I try to find information for my particular model, nothing appears. I am told that there is no serial number and number of SNIDS. This means that I can not update the drivers or solve any future problems, I might have. Even if it's just a problem with an operating system, I should be able to verify your site because you sold it me.

It's like "buyer beware"... Acer will not support its products after all just a year. It's how you people feel? If I'm wrong, I apologize again, but I just spent a lot of time on your site and I am quite angry now.

I was on the Acer site and not able to get the drivers for my model. When I entered the necessary information (serial number, etc.), research has produced results "0". I tried references my model name, but once again, nothing. I don't think you can get the downloads or support unless you enter the required information on your device.

Also, I tried to put the information in the "reminder" or page "class actions", knowing my camera wasn't among this category, but I expect everything related to my needs, and then I was sent to the Packard Bell registration page, where I decided to not sign up.

Thanks for the reply. I will use the links you provided, and I hope that this will make me there. Thanks for your help!

ADDENDUM: I've followed your provided links and voila! He found my system. That's all what I've tried to find the other day, when I spent hours searching. NONE of this was available. NONE. It was perhaps a little problem with the site that day, but, I'm a very intelligent person... and he wasn't there. That's why I found in this forum and found others with the same problem.

Thanks for all the help.

Problem with the VPN site to site for the two cisco asa 5505

Starting with cisco asa. I wanted to do a vpn site-to site of cisco. I need help. I can't ping from site A to site B and vice versa.

Cisco Config asa1

interface Ethernet0/0
switchport access vlan 1
!
interface Ethernet0/1
switchport access vlan 2
!
interface Vlan1
nameif outside
security-level 0
IP address 172.xxx.xx.4 255.255.240.0
!
interface Vlan2
nameif inside
security-level 100
IP 192.168.60.2 255.255.255.0
!
passive FTP mode
network of the Lan_Outside object
192.168.60.0 subnet 255.255.255.0
network of the NETWORK_OBJ_192.168.1.0_24 object
subnet 192.168.1.0 255.255.255.0
network of the NETWORK_OBJ_192.168.60.0_24 object
192.168.60.0 subnet 255.255.255.0
object-group Protocol DM_INLINE_PROTOCOL_1
ip protocol object
icmp protocol object
object-group Protocol DM_INLINE_PROTOCOL_2
ip protocol object
icmp protocol object
object-group Protocol DM_INLINE_PROTOCOL_3
ip protocol object
icmp protocol object
Access extensive list ip 192.168.60.0 Outside_cryptomap allow 255.255.255.0 192.168.1.0 255.255.255.0
Outside_cryptomap list extended access allow DM_INLINE_PROTOCOL_3 of object-group a
Outside_access_in list extended access allow DM_INLINE_PROTOCOL_1 of object-group a
Inside_access_in list extended access allow DM_INLINE_PROTOCOL_2 of object-group a
network of the Lan_Outside object
NAT (inside, outside) interface dynamic dns
Access-group Outside_access_in in interface outside
Inside_access_in access to the interface inside group
Route outside 0.0.0.0 0.0.0.0 172.110.xx.1 1
Timeout xlate 03:00
Pat-xlate timeout 0:00:30
Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
Floating conn timeout 0:00:00
dynamic-access-policy-registration DfltAccessPolicy
identity of the user by default-domain LOCAL
AAA authentication http LOCAL console
Enable http server
http 192.168.60.0 255.255.255.0 inside
http 96.xx.xx.222 255.255.255.255 outside
No snmp server location
No snmp Server contact
Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-128-SHA-TRANS-aes - esp esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-TRANS-aes - esp esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac
Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-DES-SHA-TRANS esp - esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-DES-MD5-TRANS esp - esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transit
Crypto ipsec ikev2 ipsec-proposal OF
encryption protocol esp
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 proposal ipsec 3DES
Esp 3des encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES
Esp aes encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES192
Protocol esp encryption aes-192
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 AES256 ipsec-proposal
Protocol esp encryption aes-256
Esp integrity sha - 1, md5 Protocol
Crypto ipsec pmtu aging infinite - the security association
card crypto Outside_map 1 corresponds to the address Outside_cryptomap
card crypto Outside_map 1 set peer 96.88.75.222
card crypto Outside_map 1 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
card crypto Outside_map 1 set ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
Outside_map interface card crypto outside
trustpool crypto ca policy
IKEv2 crypto policy 1
aes-256 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 10
aes-192 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 20
aes encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 30
3des encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 40
the Encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
Crypto ikev2 allow outside
Crypto ikev1 allow outside
IKEv1 crypto policy 10
authentication crack
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 20
authentication rsa - sig
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 30
preshared authentication
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 40
authentication crack
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 50
authentication rsa - sig
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 60
preshared authentication
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 70
authentication crack
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 80
authentication rsa - sig
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 90
preshared authentication
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 100
authentication crack
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 110
authentication rsa - sig
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 120
preshared authentication
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 130
authentication crack
the Encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 140
authentication rsa - sig
the Encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 150
preshared authentication
the Encryption
sha hash
Group 2
life 86400
Telnet timeout 5
SSH stricthostkeycheck
SSH timeout 5
SSH group dh-Group1-sha1 key exchange
Console timeout 0
inside access management

dhcpd address 192.168.60.50 - 192.168.60.100 inside
dhcpd allow inside
!
a basic threat threat detection
Statistics-list of access threat detection
no statistical threat detection tcp-interception
WebVPN
AnyConnect essentials
internal GroupPolicy_96.xx.xx.222 group strategy
attributes of Group Policy GroupPolicy_96.xx.xx.222
VPN-tunnel-Protocol ikev1, ikev2
username admin privilege 15 encrypted password f3UhLvUj1QsXsuK7
tunnel-group 96.xx.xx.222 type ipsec-l2l
tunnel-group 96.xx.xx.222 General-attributes
Group - default policy - GroupPolicy_96.xx.xx.222
96.XX.XX.222 group of tunnel ipsec-attributes
IKEv1 pre-shared-key *.
remote control-IKEv2 pre-shared-key authentication *.
pre-shared-key authentication local IKEv2 *.
!
class-map inspection_default
match default-inspection-traffic
!
!
type of policy-card inspect dns preset_dns_map
parameters
maximum message length automatic of customer
message-length maximum 512
Policy-map global_policy
class inspection_default
inspect the preset_dns_map dns
inspect the ftp
inspect h323 h225
inspect the h323 ras
inspect the rsh
inspect the rtsp
inspect esmtp
inspect sqlnet
inspect the skinny
inspect sunrpc
inspect xdmcp
inspect the sip
inspect the netbios
inspect the tftp
Review the ip options
inspect the icmp
inspect the icmp error

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Cisco ASA 2 config

interface Ethernet0/0
switchport access vlan 1
!
interface Ethernet0/1
switchport access vlan 2
!
interface Vlan1
nameif outside
security-level 0
IP address 96.xx.xx.222 255.255.255.248
!
interface Vlan2
nameif inside
security-level 100
IP 192.168.1.254 255.255.255.0
!
passive FTP mode
permit same-security-traffic inter-interface
permit same-security-traffic intra-interface
network of the Lan_Outside object
subnet 192.168.1.0 255.255.255.0
network of the NETWORK_OBJ_192.168.60.0_24 object
192.168.60.0 subnet 255.255.255.0
network of the NETWORK_OBJ_192.168.1.0_24 object
subnet 192.168.1.0 255.255.255.0
object-group Protocol DM_INLINE_PROTOCOL_1
ip protocol object
icmp protocol object
object-group Protocol DM_INLINE_PROTOCOL_2
ip protocol object
icmp protocol object
object-group Protocol DM_INLINE_PROTOCOL_3
ip protocol object
icmp protocol object
object-group Protocol DM_INLINE_PROTOCOL_4
ip protocol object
icmp protocol object
Outside_cryptomap list extended access allow DM_INLINE_PROTOCOL_2 of object-group 192.168.1.0 255.255.255.0 192.168.60.0 255.255.255.0
Outside_cryptomap list extended access allow DM_INLINE_PROTOCOL_3 of object-group a
Outside_access_in list extended access allow DM_INLINE_PROTOCOL_1 of object-group a
Inside_access_in list extended access allow DM_INLINE_PROTOCOL_4 of object-group a
pager lines 24
Enable logging
asdm of logging of information
Outside 1500 MTU
Within 1500 MTU
no failover
ICMP unreachable rate-limit 1 burst-size 1
don't allow no asdm history
ARP timeout 14400
no permit-nonconnected arp
NAT (inside, outside) static source NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.60.0_24 NETWORK_OBJ_192.168.60.0_24 non-proxy-arp-search of route static destination
!
network of the Lan_Outside object
dynamic NAT (all, outside) interface
Access-group Outside_access_in in interface outside
Inside_access_in access to the interface inside group
Route outside 0.0.0.0 0.0.0.0 96.xx.xx.217 1
Timeout xlate 03:00
Pat-xlate timeout 0:00:30
Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
Floating conn timeout 0:00:00
dynamic-access-policy-registration DfltAccessPolicy
identity of the user by default-domain LOCAL
AAA authentication http LOCAL console
Enable http server
http 192.168.1.0 255.255.255.0 inside
http 172.xxx.xx.4 255.255.255.255 outside
No snmp server location
No snmp Server contact
Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-AES-128-SHA-TRANS-aes - esp esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-TRANS-aes - esp esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac
Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac
Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac
Crypto ipsec transform-set ikev1 ESP-DES-SHA-TRANS esp - esp-sha-hmac
Crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transit
Crypto ipsec transform-set ikev1 ESP-DES-MD5-TRANS esp - esp-md5-hmac
Crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transit
Crypto ipsec ikev2 ipsec-proposal OF
encryption protocol esp
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 proposal ipsec 3DES
Esp 3des encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES
Esp aes encryption protocol
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 ipsec-proposal AES192
Protocol esp encryption aes-192
Esp integrity sha - 1, md5 Protocol
Crypto ipsec ikev2 AES256 ipsec-proposal
Protocol esp encryption aes-256
Esp integrity sha - 1, md5 Protocol
Crypto ipsec pmtu aging infinite - the security association
card crypto Outside_map 1 corresponds to the address Outside_cryptomap
card crypto Outside_map 1 set peer 172.110.74.4
card crypto Outside_map 1 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
card crypto Outside_map 1 set ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
Outside_map interface card crypto outside
trustpool crypto ca policy
IKEv2 crypto policy 1
aes-256 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 10
aes-192 encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 20
aes encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 30
3des encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
IKEv2 crypto policy 40
the Encryption
integrity sha
Group 2 of 5
FRP sha
second life 86400
Crypto ikev2 allow outside
Crypto ikev1 allow outside
IKEv1 crypto policy 10
authentication crack
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 20
authentication rsa - sig
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 30
preshared authentication
aes-256 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 40
authentication crack
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 50
authentication rsa - sig
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 60
preshared authentication
aes-192 encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 70
authentication crack
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 80
authentication rsa - sig
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 90
preshared authentication
aes encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 100
authentication crack
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 110
authentication rsa - sig
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 120
preshared authentication
3des encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 130
authentication crack
the Encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 140
authentication rsa - sig
the Encryption
sha hash
Group 2
life 86400
IKEv1 crypto policy 150
preshared authentication
the Encryption
sha hash
Group 2
life 86400
Telnet timeout 5
SSH stricthostkeycheck
SSH timeout 5
SSH group dh-Group1-sha1 key exchange
Console timeout 0

dhcpd address 192.168.1.50 - 192.168.1.100 inside
dhcpd allow inside
!
a basic threat threat detection
Statistics-list of access threat detection
no statistical threat detection tcp-interception
WebVPN
AnyConnect essentials
internal GroupPolicy_172.xxx.xx.4 group strategy
attributes of Group Policy GroupPolicy_172.xxx.xx.4
L2TP ipsec VPN-tunnel-Protocol ikev1, ikev2
username admin privilege 15 encrypted password f3UhLvUj1QsXsuK7
tunnel-group 172.xxx.xx.4 type ipsec-l2l
tunnel-group 172.xxx.xx.4 General-attributes
Group - default policy - GroupPolicy_172.xxx.xx.4
172.xxx.XX.4 group of tunnel ipsec-attributes
IKEv1 pre-shared-key *.
remote control-IKEv2 pre-shared-key authentication *.
pre-shared-key authentication local IKEv2 *.
!
class-map inspection_default
match default-inspection-traffic
!
!
type of policy-card inspect dns preset_dns_map
parameters
maximum message length automatic of customer
message-length maximum 512
Policy-map global_policy
class inspection_default
inspect the preset_dns_map dns
inspect the ftp
inspect h323 h225
inspect the h323 ras
inspect the rsh
inspect the rtsp
inspect esmtp
inspect sqlnet
inspect the skinny
inspect sunrpc
inspect xdmcp
inspect the sip
inspect the netbios
inspect the tftp
Review the ip options
inspect the icmp
inspect the icmp error
inspect the http

For IKEv2 configuration: (example config, you can change to encryption, group,...)

-You must add the declaration of exemption nat (see previous answer).

-set your encryption domain ACLs:

access-list-TRAFFIC IPSEC allowed extended LOCAL REMOTE - LAN LAN ip

-Set the Phase 1:

Crypto ikev2 allow outside
IKEv2 crypto policy 10
3des encryption
the sha md5 integrity
Group 5
FRP sha
second life 86400

-Set the Phase 2:

Crypto ipsec ikev2 ipsec IKEV2-PROPOSAL
Esp aes encryption protocol
Esp integrity sha-1 protocol

-set the Group of tunnel

tunnel-group REMOTE-PUBLIC-IP type ipsec-l2l
REMOTE-PUBLIC-IP tunnel-group ipsec-attributes
IKEv2 authentication remote pre-shared-key cisco123

IKEv2 authentication local pre-shared-key cisco123

-Define the encryption card

address for correspondence CRYPTOMAP 10 - TRAFFIC IPSEC crypto map
card crypto CRYPTOMAP 10 peer set REMOTE-PUBLIC-IP
card crypto CRYPTOMAP 10 set ipsec ikev2-IKEV2-PROPOSAL
CRYPTOMAP interface card crypto outside
crypto isakmp identity address

On your config, you have all these commands but on your VPN config, you mix ikev1 and ikev2. You have also defined political different ikev2. Just do a bit of cleaning and reached agreement on a 1 strategy for the two site (encryption, hash,...)

Thank you

registration on the intranet site

Similar Questions

Maybe you are looking for