Remote VPN - change user password

Similar Questions

• Problem with creating user Notifications / change user password

  Hello
  
  I'm having a problem send emails to users when an account is created in the IOM.
  
  I've added a notification to the user and Manager of the user on the task to create a user in the definition of user Xellerate process but emails are not sent.
  I know that if I create another task in order to send emails and call it through the answer in the task of creating a user, it will work.
  My purpose is to avoid adding tasks for something IOM should be able to OOTB.
  
  I'm also unable to send an email when a password is updated... I did the same thing for the user to create and I know that the task (change user password) is called by looking at newspapers, but emails are not being sent.
  
  Has anyone encountered this kind of problems?
  I'm having these problems in the task of user Xellerate process... I've added notifications to other process tasks (mostly tasks for approval) and that they are working correctly.
  
  
  Thanks in advance

  I ran into several question all about change the default behaviors of the user Xellerate object and the process. The Xellerate object and the process have additional built in secuity to prevent users from accedentily their spoil, so when you make changes as you try to do that they do not work. I have a few SRs open on this, because I have a customer who would like to have sent notifications when new users are created by IOM. As a work-around, I drive offshore the purpose of user AD resource notifications because each IOM user automatically gets an ad and Exchange account.

• Change user password in Microsoft Account

  My new Windows 8 software tells me that I can change my user password by going to "account.live.com/password/reset". Only problem is that I can't.

  Can someone put me out of my misery?

  [Original title: account.live.com/password/reset]

  Hello

  https://account.live.com/ResetPassword.aspx

  Change your password
  http://Windows.Microsoft.com/en-us/Windows-8/change-your-password

  Windows help - a search on "password" (without the quotes).

  http://Windows.Microsoft.com/en-us/Windows/search#PRD=Windows-8&q=password

  Rob - SpiritX

  Added:

  Microsoft Account - change password (if these conditions adapts to your situation)
  https://account.live.com/ResetPassword.aspx

  How to change or reset password of your account in Windows 8 and 8.1 (other aid
  in related tutorials)
  http://www.eightforums.com/tutorials/12206-Microsoft-account-password-change-reset-Windows-8-a.html

  How can I change my password?
  http://Windows.Microsoft.com/en-us/Windows/change-password

  I hope this helps.

  Rob Brown - Microsoft MVP<- profile="" -="" windows="" experience :="" bicycle="" -="" mark="" twain="" said="" it="">

• Change user password, when DB is in State of Mt.

  Hello
  
  1. how to check the status of the user, when the database is in the EDITING phase. ? (Locked/expired)
  2. is it possible to change the password of the user SYSTEM, while the database is in State of Mount. ?
  
  
  If DB is open, you can query the table DBA_USERS and find details of users (username, account_status, lock_date, expiry_date, etc...)
  But, is it possible of these data, a query on the DB is in State of EDITING.
  
  3. Im having authority SYS. I want to change the password of the user of the SYSTEM and make the release SYSTEM in the standby database. (Which is in State of Mount).
  How can I do this?
  
  
  Kind regards
  Zerandib

  1. how to check the status of the user, when the database is in the EDITING phase. ? (Locked/expired)

  Dba_users, these views accessible dictionary from OPEN

  2. is it possible to change the password of the user SYSTEM, while the database is in State of Mount. ?

  Should be OPENED

  If DB is open, you can query the table DBA_USERS and find details of users (username, account_status, lock_date, expiry_date, etc...)
  But, is it possible of these data, a query on the DB is in State of EDITING.

  NO.

  3. Im having authority SYS. I want to change the password of the user of the SYSTEM and make the release SYSTEM in the standby database. (Which is in State of Mount).
  How can I do this?

  The user of the SYSTEM must therefore unblocked primary & locked in sleep mode?
  What is the use to change the password in standby. It is not a value
  If you change the master password, Redo transport will take care of pending changes.

• Change user password - how to exclude a single resource.

  Hello
  Setup: IDM 8.1 patch 14
  Question:
  In the admin-> passwords-> change password is a table and a check box that allows the administrator to change the password for the user identity and all system accounts resources.
  
  I know that this table is defined in the "user form library.
  < field name = 'CurrentResourceAccountsTable - check boxes, password policy' >
  
  And a < FieldLoop for in = 'resourceAccounts.currentResourceAccounts [*] .name 'name' =' > is used.
  
  My question is how do we exclude a resource in this fieldloop. I have a single resource that I do not want for admins to change the password on.
  
  Any ideas would be useful.
  Thank you.
  IDMXML

  That's right, the resource is excluded from the FieldLoop but this does not prevent the selectAll attribute to select it.

  Rather than change the FieldLoop, you can also try adding the following code in the form of user change password (of the form-level properties, see an example in the comments of sample/forms.xml):

    
      
        
          
            resource
            equals
            Special Resource
          
        
      
    
  

• Implications of the changing user passwords

  Hi all
  We review our security policy and came across some DB users with default passwords.
  
  APPLSYSPUB
  JUNK_PS
  OWAPUB
  SSOSDK
  
  First of all, I would like to ask if there are implications of evolution using FNDCPASS, second password that users cannot be changed without impact and precautions if there is place?
  
  Thank you
  Burak

  Burak;

  For APPS, APPLSYS and APPLSYSPUB please use FNDPASS utulity

  Topic: How change Oracle Applications Release 12 passes using the Doc Oracle Apps schema password change Utility (FNDCPASS) - ID: 437260.1
  437260.1 - how to change Oracle Applications Release 12 passes using the Oracle Apps schema password change Utility (FNDCPASS)
  MOS 159244.1 Doc - how to use FNDCPASS to change the Oracle, APPS, APPLSYS users and application passwords Module (INV, AR, AP, etc.) For the Applications 11.5
  Note: 160337.1 - How do I manually change applications, the APPLSYS and passwords APPLSYSPUB in the Oracle Applications

  For others, please see:
  When you run FNDCPASS with Option of ALLORACLE why it does not all user passwords? [456838.1 ID]
  Best practices for securing Oracle E-Business Suite Release 12 [403537.1 ID]
  Best practices for securing of the E-Business Suite [ID 189367.1]

  Respect of
  HELIOS

• Urgent issue: remote vpn users cannot reach server dmz

  Hi all

  I have an asa5510 firewall in which remote vpn client users can connect but they cannot ping or access the dmz (192.168.3.5) Server

  They also can't ping the out interface (192.168.2.10), below is the show run, please help.

  SH run

  ASA5510 (config) # sh run
  : Saved
  :
  : Serial number: JMX1243L2BE
  : Material: ASA5510, 256 MB RAM, Pentium 4 Celeron 1599 MHz processor
  :
  ASA 5,0000 Version 55
  !
  Majed hostname
  activate the encrypted password of UFWSxxKWdnx8am8f
  2KFQnbNIdI.2KYOU encrypted passwd
  names of
  DNS-guard
  !
  interface Ethernet0/0
  nameif outside
  security-level 0
  IP 192.168.2.10 255.255.255.0
  !
  interface Ethernet0/1
  nameif inside
  security-level 100
  192.168.1.10 IP address 255.255.255.0
  !
  interface Ethernet0/2
  nameif servers
  security-level 90
  192.168.3.10 IP address 255.255.255.0
  !
  interface Ethernet0/3
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  interface Management0/0
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  boot system Disk0: / asa825-55 - k8.bin
  passive FTP mode
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  acl_outside to access extended list ip 192.168.5.0 allow 255.255.255.0 192.168.1.0 255.255.255.0
  acl_outside list extended access allow icmp 192.168.5.0 255.255.255.0 192.168.1.0 255.255.255.0
  acl_outside of access allowed any ip an extended list
  acl_outside list extended access permit icmp any one
  acl_inside list extended access allowed host ip 192.168.1.150 192.168.5.0 255.255.255.0
  acl_inside list extended access allowed host icmp 192.168.1.150 192.168.5.0 255.255.255.0
  acl_inside list extended access allowed host ip 192.168.1.200 192.168.5.0 255.255.255.0
  acl_inside list extended access allowed host icmp 192.168.1.200 192.168.5.0 255.255.255.0
  acl_inside list extended access allowed host ip 192.168.1.13 192.168.5.0 255.255.255.0
  acl_inside list extended access allowed host icmp 192.168.1.13 192.168.5.0 255.255.255.0
  acl_inside to access ip 192.168.1.0 scope list allow 255.255.255.0 host 192.168.3.5
  acl_inside list extended access allow icmp 192.168.1.0 255.255.255.0 host 192.168.3.5
  acl_inside list extended access deny ip 192.168.1.0 255.255.255.0 192.168.5.0 255.255.255.0
  acl_inside list extended access deny icmp 192.168.1.0 255.255.255.0 192.168.5.0 255.255.255.0
  acl_inside of access allowed any ip an extended list
  acl_inside list extended access permit icmp any one
  acl_server of access allowed any ip an extended list
  acl_server list extended access permit icmp any one
  Local_LAN_Access list standard access allowed 10.0.0.0 255.0.0.0
  Local_LAN_Access list standard access allowed 172.16.0.0 255.240.0.0
  Local_LAN_Access list standard access allowed 192.168.0.0 255.255.0.0
  access-list nat0 extended ip 192.168.0.0 allow 255.255.0.0 192.168.0.0 255.255.0.0
  allow acl_servers to access extensive ip list a whole
  acl_servers list extended access allow icmp a whole
  pager lines 24
  Outside 1500 MTU
  Within 1500 MTU
  MTU 1500 servers
  IP local pool 192.168.5.1 - 192.168.5.100 mask 255.255.255.0 vpnpool
  ICMP unreachable rate-limit 1 burst-size 1
  ASDM image disk0: / asdm - 621.bin
  don't allow no asdm history
  ARP timeout 14400
  Global 1 interface (outside)
  interface of global (servers) 1
  NAT (inside) 0 access-list nat0
  NAT (inside) 1 192.168.1.4 255.255.255.255
  NAT (inside) 1 192.168.1.9 255.255.255.255
  NAT (inside) 1 192.168.1.27 255.255.255.255
  NAT (inside) 1 192.168.1.56 255.255.255.255
  NAT (inside) 1 192.168.1.150 255.255.255.255
  NAT (inside) 1 192.168.1.200 255.255.255.255
  NAT (inside) 1 192.168.2.5 255.255.255.255
  NAT (inside) 1 192.168.1.0 255.255.255.0
  NAT (inside) 1 192.168.1.96 192.168.1.96
  NAT (servers) - access list 0 nat0
  NAT (servers) 1 192.168.3.5 255.255.255.255
  static (inside, servers) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
  static (servers, inside) 192.168.3.5 192.168.3.5 netmask 255.255.255.255
  Access-group acl_outside in interface outside
  Access-group acl_servers in the servers of the interface
  Route outside 0.0.0.0 0.0.0.0 192.168.2.15 1
  Timeout xlate 03:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  Enable http server
  http 192.168.1.0 255.255.255.0 inside
  http 192.168.3.5 255.255.255.255 servers
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  Crypto-map dynamic outside_dyn_map 10 the value transform-set ESP-3DES-SHA
  Crypto-map dynamic outside_dyn_map 10 set security-association life seconds288000
  Crypto-map dynamic outside_dyn_map 10 kilobytes of life together - the association of safety 4608000
  Crypto-map dynamic outside_dyn_map 10 the value reverse-road
  map Outside_map 10-isakmp ipsec crypto dynamic outside_dyn_map
  Outside_map interface card crypto outside
  ISAKMP crypto identity hostname
  crypto ISAKMP allow outside
  crypto ISAKMP policy 10
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  crypto ISAKMP policy 65535
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  No encryption isakmp nat-traversal
  Telnet 192.168.2.0 255.255.255.0 outside
  Telnet 192.168.1.0 255.255.255.0 inside
  Telnet 192.168.3.0 255.255.255.0 servers
  Telnet 192.168.38.0 255.255.255.0 servers
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  WebVPN
  internal vpn group policy
  attributes of vpn group policy
  Protocol-tunnel-VPN IPSec
  Split-tunnel-policy tunnelspecified
  value of Split-tunnel-network-list Local_LAN_Access
  allow to NEM
  password encrypted qaedah Ipsf4W9G6cGueuSu user name
  password encrypted moneef FLlCyoJakDnWMxSQ user name
  chayma X7ESmrqNBIo5eQO9 username encrypted password
  sanaa2 zHa8FdVVTkIgfomY encrypted password username
  sanaa x5fVXsDxboIhq68A encrypted password username
  sanaa1 x5fVXsDxboIhq68A encrypted password username
  bajel encrypted DygNLmMkXoZQ3.DX privilege 15 password username
  daris BgGTY7d1Rfi8P2zH username encrypted password
  taiz Ip3HNgc.pYhYGaQT username encrypted password
  damt gz1OUfAq9Ro2NJoR encrypted privilege 15 password username
  aden MDmCEhcRe64OxrQv username encrypted password
  username hodaidah encrypted password of IYcjP/rqPitKHgyc
  username yareem encrypted password ctC9wXl2EwdhH2XY
  AMMD ZwYsE3.Hs2/vAChB username encrypted password
  haja Q25wF61GjmyJRkjS username encrypted password
  cisco 3USUcOPFUiMCO4Jk encrypted password username
  ibbmr CNnADp0CvQzcjBY5 username encrypted password
  IBBR oJNIDNCT0fBV3OSi encrypted password username
  ibbr 2Mx3uA4acAbE8UOp encrypted password username
  ibbr1 wiq4lRSHUb3geBaN encrypted password username
  password username: TORBA C0eUqr.qWxsD5WNj encrypted
  username, password shibam xJaTjWRZyXM34ou. encrypted
  ibbreef 2Mx3uA4acAbE8UOp encrypted password username
  username torbah encrypted password r3IGnotSy1cddNer
  thamar 1JatoqUxf3q9ivcu encrypted password username
  dhamar pJdo55.oSunKSvIO encrypted password username
  main jsQQRH/5GU772TkF encrypted password username
  main1 ef7y88xzPo6o9m1E encrypted password username
  password username Moussa encrypted OYXnAYHuV80bB0TH
  majed 7I3uhzgJNvIwi2qS encrypted password username
  lahj qOAZDON5RwD6GbnI encrypted password username
  vpn tunnel-group type remote access
  VPN tunnel-group general attributes
  address vpnpool pool
  Group Policy - by default-vpn
  Tunnel vpn ipsec-attributes group
  pre-shared key *.
  !
  class-map inspection_default
  match default-inspection-traffic
  !

  Hello brother Mohammed.

  "my asa5510 to work easy as Server & client vpn at the same time.?

  Yes, it can work as a client and a server at the same time.

  I have never seen anyone do it but many years of my understanding, I have no reason to think why it may be because the two configurations (client/server) are independent of each other.

  Your ASA function as server uses the "DefaultL2LGroup" or it uses standard group policy and tunnel-group are mapped to the remote clients ASA?

  Thank you

• Tunnel remote VPN Site to Site

  Hello

  I am facing a problem with my remote VPN users, I describe my network here. I have a site to another tunnel for my USA, tht IP 169.X.X.X. office client, we are able to connect this tunnel. now I configured remote vpn for users of my home, my office inside the IP is 192.168.2.X and once I connect to home, in the office through vpn cisco client, then, my ip is 192.168.3.X I put the IP in ASA pool, now 192.168.3.X and 192.168.2.X communicates correctly , but I need to access my Tunnel IP 169.1.X.X also from 192.168.3.X (Home).

  203.92.X.X is my static public Ip address that is allowed in the client side for the tunnel.

  If something confussing please let me know.

  Thank you

  Nitin

  Nitin,

  It is not possible to have a NATing on 192.168.3.0/24 to public ip address because it has default route (which you can reach L2L remote host) on the SAA pointing to the external interface. This default route will be redirect/road traffic on the external interface only vpn client so NATing will reach us.

  HTH

  Sangaré

• Remote vpn client can't access outside networks

  I configured a remote vpn ASA 5510 the wizard remote vpn. Users are able to get the vpn connection and access the internal network; but IMPOSSIBLE to

  access the outside network. (For the internal network, I want to talk about network behind the vpn to ASA, outside networks refers to society outside the ASA).

  In short, the external network of the company has default route to the ROUTER1 points. The ROUTER1 has road for access network and a default route to the internet. The ASA has a default route to the ROUTER1 points. the ROUTER1 also has a route to the address of the user remote vpn refers to the ASA.

  Hope it wise.

  But I don't know if my nat statement is correct. below is my statement of nat, is there something obvious lack? There is no translation network here, routable internet addresses.

  NAT (inside) 0-list of access inside_nat0_outbound

  public static 111.1.0.0 (Interior, exterior) 111.1.0.0 netmask 255.255.255.0

  public static 111.1.1.0 (Interior, exterior) 111.1.1.0 netmask 255.255.255.0

  public static 111.1.2.0 (Interior, exterior) 111.1.2.0 netmask 255.255.255.0

  networks outside the company (111.1.3.0/24; 111.1.4.0/24)

  |

  |

  the user remote vpn <-------------->internet <--------------------->ROUTER1 - ASA - Cat6509 - inside the network

  Any suggestion is appreciated.

  Thank you

  have you enabled "same-security-traffic intra-interface.

• Remote VPN using Site 2 Site VPN

  Hi all

  I have 2 ASA 5505 firewall, VPN of Site 2 Site working between two firewalls. I have attached the visio diagram for my senario. I configured remote IPsec VPN in the firewall of the ASA-01, a capable user of connted to ASA-01 network via remote modem via VPN. As I set it up 2 a VPN between two ASA site, is possible only through remote VPN, a user can connect to ASA - 02.

  Thank you

  3 things. You must allow traffic to enter/exit the same interface to ASA - 01

  permit same-security-traffic intra-interface

  You must then add the new traffic lights to the existing acl for the lan to lan vpn. If ASA-02 network 192.168.2.0/24 and vpn client network 192.168.10.0/24 it would look like this.

  ASA-01

  access-list extended xxx permit ip 192.168.10.0 255.255.255.0 192.168.2.0 255.255.255.0

  ASA-02

  xxx list extended access permit ip 192.168.2.0 255.255.255.0 192.168.10.0 255.255.255.0

  and also the nat 0 ASA-02

  nat0 list extended access permit ip 192.168.2.0 255.255.255.0 192.168.10.0 255.255.255.0

  NAT (Inside) 0-list of access nat0

• Change the password using API web services?

  I can create and update users using Adobe Connect API web services, but how do I change the password of a user?

  I use the API "principal-update" that has a setting of password, but according to the documentation, it is only used for new users... not the users.

  So exactly how to change user password using the web services?

  Hello

  There is an API that can be used to change the password: user-update - pwd

  Format of the API :

   

  http://server_name/API/XML?action=user-update-pwd&user-ID=integer&password-old=string&pass = word string - string verify password = & session = BreezeSeesionCookieValue.

  
  

  Hope this helps!
  

  Thank you

  Nikhil

• How can I change a password for the local account of a pc that can not be connected remotely?

  Hi all

  I am currently based in London. I have a problem with the laptop of a staff based in Africa. We built the laptop and it shipped to them. As part of the construction, we put on our account standard administrator and then made a local account that they are not connected to our area.

  The user in this Africa Office has changed the local password of its account and now don't remember making it so the unable to connect to PC. I don't want to tell him our administrator password, because it is the same for all our PC in the world. I have studied a lot of things to try to connect to the computer, but it is now possible.

  I tried:

  1 navigation to the machine from another pc on the network using explroer and I see the C drive.

  2. I tried to run this command, but I get just error 1219: net use \\pcname\ipc$ / user: pcname\administrator *.

  3 RDP will not work, it will not just connect.

  4. the PC that I use is 8 Windows Home Edition and none of the business I've noticed is a problem of computer management doesn't have users and groups it seems. The remote pc is Windows 7 Enterprise.

  So for now I just a laptop that is stuck on the login screen.

  I guess I'm doomed then?

  No, you are not condemned. I gave you a recipe to solve your problem. Give the person a password for admin for a few minutes does not compromise the integrity of the machine, as long as you then reset the password in a few minutes.

  If this person can burn a CD repair system on another machine of Windows 7 then it can use to start the machine in Windows Repair Mode. From there it can use system restore to set up Windows to a point before he changed the password. You need to exercise on your own machine to guide him through the process.

• VPN remote acess - same user name

  Hello

  I'm newbie with firewall and vpn.

  I have an ASA 5510 configured to access remote vpn. Establish vpn users using the cisco vpn client.

  Authentication is local. Does anyone know if several people can use the same username?

  Let's say that user1 is logged and then someone else connects also with user1. The connection will drop for the first user?

  Thank you

  You can have the same username used several times - but I would not recommend this.

  The default number is 3 times - change you this through: -.

  Group Policy <> attributes

  # simultaneous VPN connections

  #= number of sim login

  HTH >

• Cisco ACS 5.1 and ASA SSL VPN change or notify the expired password

  Hello

  Now, my ACS and ASA related to RADIUS (MSCHAPv2). I've set up password life on GBA and password management on SAA. But Cisco ASA did prompt change or whatever it is to notify when the user tries to log on with Clientless SSL VPN. Could you advice me everything to change, or notify the expired password?

  

  PS.

  I check change password on the first login of th on ACS this confirmation of the ASA to change password dialog box. But I want change or warn when the expired password

  Thank you

  The default password is marked as disabled after expiry

  I think that there is an improvement for this in the 5.2.0.26.2 patch and above, which includes the following:

  CSCtk32168: Add an option to change the password when the password expires (T + and Radius)

  After you install this hotfix, you get an option to the user authentication settings is:

  -Disable the user account

  -Expire the password

  When the expiration period is exceeded

  If password is expired then user will be asked to change password next authentication

  Note this latest patch for 5.2 is 5.2.0.26.4. All patches are cumulative

• remote VPN and vpn site to site vpn remote users unable to access the local network

  As per below config remote vpn and vpn site to site vpn remote users unable to access the local network please suggest me a required config

  The local 192.168.215.4 not able ping server IP this server connectivity remote vpn works fine but not able to ping to the local network vpn users.

  ASA Version 8.2 (2)
  !
  host name
  domain kunchevrolet
  activate r8xwsBuKsSP7kABz encrypted password
  r8xwsBuKsSP7kABz encrypted passwd
  names of
  !
  interface Ethernet0/0
  nameif outside
  security-level 0
  PPPoE client vpdn group dataone
  IP address pppoe
  !
  interface Ethernet0/1
  nameif inside
  security-level 50
  IP 192.168.215.2 255.255.255.0
  !
  interface Ethernet0/2
  nameif Internet
  security-level 0
  IP address dhcp setroute
  !
  interface Ethernet0/3
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  interface Management0/0
  Shutdown
  No nameif
  no level of security
  no ip address
  management only
  !
  passive FTP mode
  clock timezone IST 5 30
  DNS server-group DefaultDNS
  domain kunchevrolet
  permit same-security-traffic intra-interface
  object-group network GM-DC-VPN-Gateway
  object-group, net-LAN
  access extensive list ip 192.168.215.0 sptnl allow 255.255.255.0 192.168.2.0 255.255.255.0
  192.168.215.0 IP Access-list extended sheep 255.255.255.0 allow 192.168.2.0 255.255.255.0
  tunnel of splitting allowed access list standard 192.168.215.0 255.255.255.0
  pager lines 24
  Enable logging
  asdm of logging of information
  Outside 1500 MTU
  Within 1500 MTU
  MTU 1500 Internet
  IP local pool VPN_Users 192.168.2.1 - 192.168.2.250 mask 255.255.255.0
  ICMP unreachable rate-limit 1 burst-size 1
  enable ASDM history
  ARP timeout 14400
  NAT-control
  Global 1 interface (outside)
  NAT (inside) 1 0.0.0.0 0.0.0.0
  Route outside 0.0.0.0 0.0.0.0 59.90.214.1 1
  Timeout xlate 03:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  dynamic-access-policy-registration DfltAccessPolicy
  the ssh LOCAL console AAA authentication
  AAA authentication LOCAL telnet console
  AAA authentication http LOCAL console
  AAA authentication enable LOCAL console
  LOCAL AAA authentication serial console
  Enable http server
  x.x.x.x 255.255.255.252 out http
  http 192.168.215.0 255.255.255.252 inside
  http 192.168.215.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set esp-3des esp-sha-hmac RIGHT
  life crypto ipsec security association seconds 28800
  Crypto ipsec kilobytes of life - safety 4608000 association
  Crypto-map dynamic dynmap 65500 transform-set RIGHT
  card crypto 10 VPN ipsec-isakmp dynamic dynmap
  card crypto VPN outside interface
  card crypto 10 ASA-01 set peer 221.135.138.130
  card crypto 10 ASA - 01 the transform-set RIGHT value
  crypto ISAKMP allow outside
  crypto ISAKMP policy 10
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  crypto ISAKMP policy 65535
  preshared authentication
  the Encryption
  sha hash
  Group 2
  lifetime 28800
  Telnet 192.168.215.0 255.255.255.0 inside
  Telnet timeout 5
  SSH 0.0.0.0 0.0.0.0 outdoors
  SSH timeout 5
  Console timeout 0
  management-access inside
  VPDN group dataone request dialout pppoe
  VPDN group dataone localname bb4027654187_scdrid
  VPDN group dataone ppp authentication chap
  VPDN username bb4027654187_scdrid password * local store
  interface for identifying DHCP-client Internet customer
  dhcpd dns 218.248.255.141 218.248.245.1
  !
  dhcpd address 192.168.215.11 - 192.168.215.254 inside
  dhcpd allow inside
  !
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  Des-sha1 encryption SSL
  WebVPN
  allow outside
  tunnel-group-list activate
  internal kun group policy
  kun group policy attributes
  VPN - connections 8
  Protocol-tunnel-VPN IPSec
  Split-tunnel-policy tunnelspecified
  Split-tunnel-network-list value split tunnel
  kunchevrolet value by default-field
  test P4ttSyrm33SV8TYp encrypted password username
  username kunauto password bSHrKTGl8PUbvus / encrypted privilege 15
  username kunauto attributes
  Strategy Group-VPN-kun
  Protocol-tunnel-VPN IPSec
  tunnel-group vpngroup type remote access
  tunnel-group vpngroup General attributes
  address pool VPN_Users
  Group Policy - by default-kun
  tunnel-group vpngroup webvpn-attributes
  the vpngroup group alias activation
  vpngroup group tunnel ipsec-attributes
  pre-shared key *.
  type tunnel-group test remote access
  tunnel-group x.x.x.x type ipsec-l2l
  tunnel-group ipsec-attributes x.x.x.x
  pre-shared key *.
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  Review the ip options
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  inspect the icmp
  !
  global service-policy global_policy
  context of prompt hostname
  call-home
  Profile of CiscoTAC-1
  no active account
  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
  email address of destination [email protected] / * /
  destination-mode http transport
  Subscribe to alert-group diagnosis
  Subscribe to alert-group environment
  Subscribe to alert-group monthly periodic inventory
  monthly periodicals to subscribe to alert-group configuration
  daily periodic subscribe to alert-group telemetry
  Cryptochecksum:0d2497e1280e41ab3875e77c6b184cf8
  : end
  kunauto #.

  Hello

  Looking at the configuration, there is an access list this nat exemption: -.

  192.168.215.0 IP Access-list extended sheep 255.255.255.0 allow 192.168.2.0 255.255.255.0

  But it is not applied in the States of nat.

  Send the following command to the nat exemption to apply: -.

  NAT (inside) 0 access-list sheep

  Kind regards

  Dinesh Moudgil

  P.S. Please mark this message as 'Responded' If you find this information useful so that it brings goodness to other users of the community