Strange question of LAN access

Similar Questions

• IPSec VPN pix 501 no LAN access

  I'm trying to set up an IPSec VPN in a basic small business scenario. I am able to connect to my pix 501 via IPSec VPN and browse the internet, but I am unable to ping or you connect to all devices in the Remote LAN. Here is my config:

  : Saved

  :

  6.3 (3) version PIX

  interface ethernet0 car

  interface ethernet1 100full

  nameif ethernet0 WAN security0

  nameif ethernet1 LAN security99

  enable encrypted password xxxxxxxxxxxxx

  xxxxxxxxxxxxxxxxx encrypted passwd

  host name snowball

  domain xxxxxxxxxxxx.local

  clock timezone PST - 8

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol pptp 1723

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  No fixup not protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  acl_in list of access permit udp any any eq field

  acl_in list of access permit udp any eq field all

  acl_in list access permit tcp any any eq field

  acl_in tcp allowed access list any domain eq everything

  acl_in list access permit icmp any any echo response

  access-list acl_in allow icmp all once exceed

  acl_in list all permitted access all unreachable icmp

  acl_in list access permit tcp any any eq ssh

  acl_in list access permit tcp any any eq www

  acl_in tcp allowed access list everything all https eq

  acl_in list access permit tcp any host 192.168.5.30 eq 81

  acl_in list access permit tcp any host 192.168.5.30 eq 8081

  acl_in list access permit tcp any host 192.168.5.22 eq 8081

  acl_in list access permit icmp any any echo

  access-list acl_in permit tcp host 76.248.x.x a

  access-list acl_in permit tcp host 76.248.x.x a

  allow udp host 76.248.x.x one Access-list acl_in

  access-list acl_out permit icmp any one

  ip access list acl_out permit a whole

  acl_out list access permit icmp any any echo response

  acl_out list access permit icmp any any source-quench

  allowed any access list acl_out all unreachable icmp

  access-list acl_out permit icmp any once exceed

  acl_out list access permit icmp any any echo

  Allow Access-list no. - nat icmp a whole

  access-list no. - nat ip 192.168.5.0 allow 255.255.255.0 172.16.0.0 255.255.0.0

  access-list no. - nat ip 172.16.0.0 allow 255.255.0.0 any

  access-list no. - nat permit icmp any any echo response

  access-list no. - nat permit icmp any any source-quench

  access-list no. - nat icmp permitted all all inaccessible

  access-list no. - nat allow icmp all once exceed

  access-list no. - nat permit icmp any any echo

  pager lines 24

  MTU 1500 WAN

  MTU 1500 LAN

  IP address WAN 65.74.x.x 255.255.255.240

  address 192.168.5.1 LAN IP 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP local pool pptppool 172.16.0.2 - 172.16.0.13

  PDM logging 100 information

  history of PDM activate

  ARP timeout 14400

  Global (WAN) 1 interface

  NAT (LAN) - access list 0 no - nat

  NAT (LAN) 1 0.0.0.0 0.0.0.0 0 0

  static (LAN, WAN) 65.x.x.37 192.168.5.10 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.36 192.168.5.20 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.38 192.168.5.30 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.39 192.168.5.40 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.42 192.168.5.22 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.43 192.168.5.45 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.44 192.168.5.41 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.45 192.168.5.42 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.46 192.168.5.44 netmask 255.255.255.255 0 0

  static (LAN, WAN) 65.x.x.41 192.168.5.21 netmask 255.255.255.255 0 0

  acl_in access to the WAN interface group

  access to the LAN interface group acl_out

  Route WAN 0.0.0.0 0.0.0.0 65.x.x.34 1

  Timeout xlate 0:05:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  AAA-server local LOCAL Protocol

  NTP server 72.14.188.195 source WAN

  survey of 76.248.x.x WAN host SNMP Server

  location of Server SNMP Sacramento

  SNMP Server contact [email protected] / * /

  SNMP-Server Community xxxxxxxxxxxxx

  SNMP-Server enable traps

  enable floodguard

  the string 1 WAN fragment

  Permitted connection ipsec sysopt

  Sysopt connection permit-pptp

  Crypto ipsec transform-set esp - esp-md5-hmac RIGHT

  Crypto-map dynamic dynmap 10 transform-set RIGHT

  map mymap 10-isakmp ipsec crypto dynamic dynmap

  client configuration address map mymap crypto initiate

  client configuration address map mymap crypto answer

  card crypto mymap WAN interface

  ISAKMP enable WAN

  ISAKMP nat-traversal 20

  part of pre authentication ISAKMP policy 10

  encryption of ISAKMP policy 10

  ISAKMP policy 10 md5 hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  vpngroup myvpn address pptppool pool

  vpngroup myvpn Server dns 192.168.5.44

  vpngroup myvpn by default-field xxxxxxxxx.local

  vpngroup split myvpn No. - nat tunnel

  vpngroup idle 1800 myvpn-time

  vpngroup myvpn password *.

  Telnet 192.168.5.0 255.255.255.0 LAN

  Telnet timeout 5

  SSH 192.168.5.0 255.255.255.0 LAN

  SSH timeout 30

  Console timeout 0

  VPDN group pptpusers accept dialin pptp

  VPDN group ppp authentication pap pptpusers

  VPDN group ppp authentication chap pptpusers

  VPDN group ppp mschap authentication pptpusers

  VPDN group ppp encryption mppe 128 pptpusers

  VPDN group pptpusers client configuration address local pptppool

  VPDN group pptpusers customer 192.168.5.44 dns configuration

  VPDN group pptpusers pptp echo 60

  VPDN group customer pptpusers of local authentication

  VPDN username password xxx *.

  VPDN username password xxx *.

  VPDN enable WAN

  dhcpd address 192.168.5.200 - 192.168.5.220 LAN

  dhcpd 192.168.5.44 dns 8.8.8.8

  dhcpd lease 3600

  dhcpd ping_timeout 750

  dhcpd enable LAN

  username privilege 0 encrypted password xxxxxxxxxx xxxxxxxxxxx

  username privilege 0 encrypted password xxxxxxxxxx xxxxxxxxxxx

  Terminal width 80

  Cryptochecksum:xxxxxxxxxxxxxxxxxx

  : end

  I'm sure it has something to do with NAT or an access list, but I can't understand it at all. I know it's a basic question, but I would really appreaciate help!
  Thank you very much
  Trevor

  "No. - nat' ACL doesn't seem correct, please make sure you want to remove the following text:

  do not allow any No. - nat icmp access list a whole

  No No. - nat ip 172.16.0.0 access list allow 255.255.0.0 any

  No No. - nat access list permit icmp any any echo response

  No No. - nat access list permit icmp any any source-quench

  No No. - nat access list permit all all unreachable icmp

  No No. - nat access list do not allow icmp all once exceed

  No No. - nat access list only allowed icmp no echo

  You must have 1 line as follows:

  access-list no. - nat ip 192.168.5.0 allow 255.255.255.0 172.16.0.0 255.255.0.0

  Please 'clear xlate' after the changes described above.

  In addition, if you have a personal firewall enabled on the host you are trying to connect from the Client VPN, please turn it off and try again. Personal firewall of Windows normally blocks the traffic of different subnets.

  Hope that helps.

• strange question by inserting the data...

  Hi everone,
  
  I have a strange question. I'm not looking I do something wrong or is this a bug?
  I do a simple ' insert into table (select statement). Everything is ok... It's inclusion. But when I run the
  "select statement" separately (actual data I need to insert), I get different data inserted in the table.
  
  -> I have observed something else where there is a "case statement" in the selection m than the data in the table are spoil...
  
  EX:
  
  SELECT TRIM (member_span.member_nbr) member_nbr-> this one I see the correct data
  (
  CASE
  WHEN SUBSTR (member.member_nbr, 10, 2) = '00' THEN TRIM (member.member_nbr)
  Of OTHER SUBSTR (member.member_nbr, 1, 9). '00'
  END Subsciber_nbr),-> This data are spoil seeing incorrect data in the table...
  
  
  Database version:
  
  Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bi
  PL/SQL Release 10.2.0.2.0 - Production
  "CORE 10.2.0.2.0 Production."
  AMT for HP - UX: release 10.2.0.2.0 - Production
  NLSRTL Version 10.2.0.2.0 - Production
  
  < b > "" "did exactly the same thing in a different database. I don't have any problems out there"" "I'm getting problem only with this database < /b >"
  
  Anyone know a bug related to this problem?
  

  INSERT
  INTO member_load(member_nbr,   subscriber,   ymdbirth,   security_group,   group_nbr,   network_id,   cob_date)
    (SELECT TRIM(member_span.member_nbr) member_nbr,
      (
     CASE
     WHEN SUBSTR(member.member_nbr,    10,    2) = '00' THEN TRIM(member.member_nbr)
     ELSE SUBSTR(member.member_nbr,    1,    9) || '00'
     END) subsciber_nbr,
      (
     CASE
     WHEN LENGTH(member.ymdbirth) = 8 THEN member.ymdbirth
     ELSE NULL
     END) dob,
      (
     CASE
     WHEN TRIM(member_span.group_nbr) IN('108076',    '108077',    '108078',    '108079',    '108080',    '108081') THEN 'E'
     WHEN TRIM(member_span.group_nbr) IN('107001') THEN 'M'
     WHEN TRIM(member_span.group_nbr) IN('107005') THEN 'J'
     ELSE 'A'
     END) security_grp,
       TRIM(member_span.group_nbr),
      (
     CASE
     WHEN TRIM(member_span.business_unit) = '01' THEN 'N' || TRIM(member_span.business_unit) || '-' || TRIM(member_span.prog_nbr)
     WHEN TRIM(member_span.business_unit) = '03' THEN 'N' || TRIM(member_span.business_unit) || '-' || TRIM(member_span.prog_nbr) || '-' || TRIM(member_span.carrier)
     ELSE NULL
     END) network_id,
  
      (
     CASE
     WHEN LENGTH(member.ymdverify) = 8 THEN member.ymdverify
     ELSE NULL
     END) cob_date
     FROM member_span @dblink,
       member @dblink
     WHERE member_span.ymdeff > 20090908
     AND member.member_nbr = member_span.member_nbr
     AND TRIM(void) IS
    NULL
     AND member_span.member_nbr NOT IN 
      (SELECT member_nbr
       FROM member_span @dblink
       WHERE(20090908 BETWEEN ymdeff
       AND ymdend)
       AND TRIM(void) IS
      NULL)
    )
  ;

  Please help me with this question...

  Marella Phani wrote:

  sven
  
  different NLS settings....
  How can i find the NLS setting on both the databases..
  can i query some metadata table to find that..
  

  Please let me know how to proceed

  Anurag...

  It is not the problem with my SQL (that I know of). It gives a correct output that I need when I simply run the SQL query.
  I just give a few examples of data (no real data).

  But when I run Insert in staging_table (select statement). I do not see the correct data in staging_table...

  Thanks for all the replies...

  You can check your NLS settings with

  select name, value, isdefault from v$parameter where name like 'nls%';
  

  or in sql * plus with

  SQL> show parameter nls
  
  NAME                                 TYPE        VALUE
  ------------------------------------ ----------- ------------------------------
  nls_calendar                         string
  nls_comp                             string
  nls_currency                         string
  nls_date_format                      string
  nls_date_language                    string
  nls_dual_currency                    string
  nls_iso_currency                     string
  nls_language                         string      AMERICAN
  nls_length_semantics                 string      BYTE
  nls_nchar_conv_excp                  string      FALSE
  nls_numeric_characters               string
  nls_sort                             string
  nls_territory                        string      AMERICA
  nls_time_format                      string
  nls_time_tz_format                   string
  nls_timestamp_format                 string
  nls_timestamp_tz_format              string
  SQL> 
  

  Please be careful, that my comment about to_char was that under the assumption that you have a column for the number. If the column is VARCHAR2, do not add an extra TO_CHAR around this column. He could not give problems, but is not necessary (I think it can give problems in 9i, but impossible to find a small example yet).

  An idea to find the source of your problem would be to change the NOT IN subquery. At least in a NOT EXISTS a subquery. Or even better find a way to access the remote tables only once instead of twice.

  not exist

  INSERT
  INTO member_load (member_nbr,   subscriber
  )
  (
    SELECT TRIM(ms.member_nbr) member_nbr,
      (
     CASE
     WHEN SUBSTR(ms.member_nbr,    10,    2) = '00' THEN TRIM(to_char(m.member_nbr))
     ELSE SUBSTR(to_char(ms.member_nbr),    1,    9) || '00'
     END) subsciber_nbr
     FROM member_span@dblink ms,
       member@dblink m
     WHERE ms.ymdeff > 20090908
     AND m.member_nbr = ms.member_nbr
     AND TRIM(ms.void) IS
    NULL
     AND NOT EXISTS
      (SELECT null
       FROM member_span@dblink ms1
       WHERE (20090908 BETWEEN ms1.ymdeff AND ms1.ymdend)
       AND TRIM(ms1.void) IS NULL
       AND ms.member_nbr = ms1.member_nbr)
  
  )
  ;
  

  Is ymdeff a number or a string? If it is a string, then change 20090908 in '20090908'. If it is a number then keep as it is.

• If the hard disk dies this affect router/WiFi?  I know that this seems to be a strange question.

  If the internal hard drive dies this affect router/WiFi?  I know that this seems to be a strange question.  Logically, they seems to be two independent functions.  However, since I do not understand how it works...

  I plan to spend my old airport extreme (about 7 years) at an airport new Time Capsule or Airport Extreme for better wi - fi range.

  Where the internal hard disk come into your Airport Extreme or Time Capsule dying airport upgrade?

  If the disc is dead, it will be not not to be replaced. This should be done first before to other devices.

• Strange question, craps remaining after the system recovery on my windows xp desktop.

  Strange question, thank you for your comments!

  I just reinstalled windows xp on my old HP desktop HP Pavilion Media Center TV m7334n PC computer using the recovery on D partition. I expect that the installation would be a clean install. At the beginning of the recovery, I noticed the message on the screen saying that the backup was in process. After recovery, I could start my computer and realized that used disk space C was still as the space of C drive used before the restoration. I also noticed that there was a lot of pre-installed programs appears on the list of start - all programs. I never installed them after recovery. Many of them work. I expect a CLEAN installation. It is not clean at all.

  Furthur inspection on the system to reveal problems:

  1. I noticed that there are so many records under the program folder program files on the C drive (I have only one program fichiersDossier). I guess that the recovery process copied evething under my original forder of program files in this folder. I don't have anything I can use most of them because the links were scattered on a large number of them (I can't run the program of either start - all programs or folder directly). Is not at all a CLEAN installation.

  2. the recovery process also copy my document in the folder as well original user, see below to understand which is the original file of the user.

  3. originally, in my computer, I have two users (or 3 including comments), we came to HP-administrator with the computer, is another family.  On the computer I just recover, there are 3 users accompanying the recovery. They are administrator, hp-administrator and guest. I've renamed the family administrator. Now, under systems and settings, I see the user plus two records. They are administrator-YOUR-4DACD0EA75 and hp-administrator-YOUR-4DACD0EA75. YOUR 4DACD0EA75 sounds familiar. I can remember that I was lazy and that it has not changed the computer name during installation after recovery. YOUR 4DACD0EA75 is actually the default name given to me during the installation. I don't like this at all, so I changed the name of the computer and restarted the computer. The name of the computer was changed after the restartup, but ugly folder names remain the same and I can not even rename the ugly file name.

  I had done some restorations system on this computer before, I never noticed a problem like this before.

  1 have we seen this before?

  2 I forgot something?

  3. can I safely delete the original user profiles and records under the program folder program files?

  4. can I do a system recovery really CLEAN? I understand that the crapware will be installed during the system recovery. I'm ok with that, what I want is my pc to be recovered to the original state of the plant.

  5. I can read is no longer my 1st disc restore dvd. Is it possible to make another set of recovery disks?

  Thanks for reading my long message!

  1 have we seen this before? I saw something similar and other relief to be fixed.

  2 I forgot something? I don't think so. Just do an another hard drive recovery. Try again is all I can think about.

  3. can I safely delete the original user profiles and records under the program folder program files? I would'nt mess with her. Just do another hard drive recovery system.

  4. can I do a system recovery really CLEAN? I understand that the crapware will be installed during the system recovery. I'm ok with that, what I want is my pc to be recovered to the original state of the plant. Yes. Used hydrogen peroxide call destructive (or full) non-destructive vs. Make a full - restoration destructive to put things o back the way you bought it.

  http://support.HP.com/us-en/document/bph07145

  5. I can read is no longer my 1st disc restore dvd. Is it possible to make another set of recovery disks? By all means, out juice of repair disk and try to get it back. If you can repair the disk, make a copy or 2 whole and store them in a safe place. Otherwise, you will have to order them from somewhere on the Web... as a popular auction site.

  Thanks for reading my long message! You are welcome. Thanks for posting. I hope my answer helps.

• Strange question - width ListItem

  While developing applications, I noticed a strange question.

  When I draw list in qml item available, it's very nice on an excerpt:

  I put

  horizontalAlignment: HorizontalAlignment.Fill
  

  and the width of the list item fill all empty space, but when I check the list on Simulator it encapsulates the width of content?

  Does anyone know how to set the width of the listItem to fill all the space from left to right?

  To sum up,

  I want to have (and it looks like this on qml overview):

  

  but I get this (width of list point fits only the content):

  

  Thanks in advance.

  Hi, there may be simpler but for me it works using the spaceQuota:

  ListItemComponent {
      type: "item"
      Container {
  
          background: Color.Red
          Container {
              preferredHeight: 230     
  
              layout: StackLayout {
                  orientation: LayoutOrientation.LeftToRight
              }
  
              Container {
  
                  layoutProperties: StackLayoutProperties {
                      spaceQuota: 1
                  }
               }
           }
       }
  }
  

• AnyConnect VPN and LAN access

  When remote users to connect to the Cisco ASA VPN and authenticate with Cisco AnyConnect client, they then full access to the environment internal of LAN of business as if they were sitting at their desks in the Office of the Corporation.

  Right?

  After that the remote client authenticates to the AnyConnect VPN, it is sensible to then run remote users of traffic through the corporate firewall (outside to inside) before allowing LAN access full corporate?

  Remote_User - vpn - ANYCONNECT-(outside) (inside) firewall - CORP_LAN

  Thank you

  Frank

  Hello

  Yes, by default, all traffic will be sent through the tunnel.

  If there are users VPN shouldn't be able to reach the resources, you need to establish rules for access to it. The best way to do this is by using VPN filter.

• Cisco ASA Anyconnect LAN access problem

  I have very simple network at home with the WAN IP address, ASA uses DHCP and gateway. plain of network of all no complications.

  X.X.X.X like a WAN

  192.168.1.0/24 as a LAN

  IP Pool 192.168.6.0/24 (VPN Pool)

  I am trying to configure AnyConnect (AC) so that I can connect remotely and get my resources on the LAN while out. I am to connect with AC and when you use split tunnel I'm browsing the web very well, but I have no access to the local network (without ICMP or TCP/UDP)

  Route looks good in customer AC

  unsecured network 0.0.0.0/0
  secure network 192.168.1.0/24

  What I'm missing for LAN access?, nat statement, list of access...?

  _____________________________

  Output of the command: "show run".

  : Saved
  :
  ASA Version 9.1 (5)
  !
  hostname asa01
  domain name asa

  names of
  192.168.6.2 mask - 192.168.6.100 local pool Pool VPN IP 255.255.255.0
  !
  interface Ethernet0/0
  switchport access vlan 2
  !
  interface Ethernet0/1
  !
  interface Ethernet0/2
  !
  interface Ethernet0/3
  !
  interface Ethernet0/4
  !
  interface Ethernet0/5
  !
  interface Ethernet0/6
  !
  interface Ethernet0/7
  switchport access vlan 5
  !
  interface Vlan1
  nameif inside
  security-level 100
  IP 192.168.1.1 255.255.255.0
  !
  interface Vlan2
  Outside description
  nameif outside
  security-level 0
  IP address XXXX
  !
  interface Vlan5
  nameif dmz
  security-level 50
  IP 192.168.100.1 address 255.255.255.0
  !
  boot system Disk0: / asa915 - k8.bin
  passive FTP mode
  clock timezone PST - 8
  clock summer-time recurring PDT
  DNS lookup field inside
  DNS domain-lookup outside
  DNS domain-lookup dmz
  DNS server-group DefaultDNS
  domain naisus.local
  permit same-security-traffic intra-interface
  network of the NETWORK_OBJ_192.168.1.0_24 object
  subnet 192.168.1.0 255.255.255.0
  network of the NETWORK_OBJ_192.168.6.0_25 object
  subnet 192.168.6.0 255.255.255.128
  object-group Protocol DM_INLINE_PROTOCOL_1
  icmp protocol object
  icmp6 protocol-object
  outside_access_in list extended access permit icmp any any idle state
  outside_access_in extended access list allow icmp6 all all idle state
  outside_access_in_1 list extended access allow DM_INLINE_PROTOCOL_1 of object-group a
  list of access allowed standard LAN 192.168.1.0 255.255.255.0
  pager lines 24
  Enable logging
  asdm of logging of information
  host of logging inside 192.168.1.99
  forest-hostdown operating permits
  Within 1500 MTU
  Outside 1500 MTU
  MTU 1500 dmz
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  ASDM image disk0: / asdm - 741.bin
  don't allow no asdm history
  ARP timeout 14400
  no permit-nonconnected arp
  NAT (inside, outside) static source NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.6.0_25 NETWORK_OBJ_192.168.6.0_25 non-proxy-arp-search of route static destination
  !
  NAT source auto after (indoor, outdoor) dynamic one interface
  Access-group outside_access_in_1 in interface outside
  Route outside 0.0.0.0 0.0.0.0 X > X > X >
  Timeout xlate 03:00
  Pat-xlate timeout 0:00:30
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  identity of the user by default-domain LOCAL
  Enable http server
  http 192.168.1.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  Crypto ipsec ikev2 ipsec-proposal OF
  encryption protocol esp
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 proposal ipsec 3DES
  Esp 3des encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES
  Esp aes encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES192
  Protocol esp encryption aes-192
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 AES256 ipsec-proposal
  Protocol esp encryption aes-256
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec pmtu aging infinite - the security association
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
  outside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  outside_map interface card crypto outside
  Crypto ca trustpoint ASDM_Launcher_Access_TrustPoint_0
  registration auto
  full domain name no
  name of the object CN = asa01, CN = 192.168.1.1
  ASDM_LAUNCHER key pair
  Configure CRL
  trustpool crypto ca policy
  string encryption ca ASDM_Launcher_Access_TrustPoint_0 certificates
  certificate 8b541b55
  308201c 3 c 3082012 a0030201 0202048b 0d06092a 864886f7 0d 010105 541b 5530
  XXXX
  quit smoking
  IKEv2 crypto policy 1
  aes-256 encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 10
  aes-192 encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 20
  aes encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 30
  3des encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 40
  the Encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  Crypto ikev2 access remote trustpoint ASDM_Launcher_Access_TrustPoint_0
  Telnet 192.168.1.0 255.255.255.0 inside
  Telnet timeout 5
  SSH stricthostkeycheck
  SSH 192.168.1.0 255.255.255.0 inside
  SSH timeout 5
  SSH group dh-Group1-sha1 key exchange
  Console timeout 0

  dhcpd outside auto_config
  !
  dhcpd address 192.168.1.100 - 192.168.1.199 inside
  dhcpd dns 8.8.8.8 75.75.75.75 interface inside
  dhcpd naisus.home area inside interface
  dhcpd allow inside
  !
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  NTP server 50.116.56.17 source outdoors
  NTP server 108.61.73.243 source outdoors
  NTP server 208.75.89.4 prefer external source
  SSL-trust outside ASDM_Launcher_Access_TrustPoint_0 point
  Trust ASDM_Launcher_Access_TrustPoint_0 inside the vpnlb-ip SSL-point
  SSL-trust ASDM_Launcher_Access_TrustPoint_0 inside point
  WebVPN
  allow outside
  AnyConnect image disk0:/anyconnect-win-3.1.07021-k9.pkg 1 regex 'Windows NT'
  AnyConnect image disk0:/anyconnect-macosx-i386-3.1.07021-k9.pkg 2 regex "Intel Mac OS X.
  AnyConnect image disk0:/anyconnect-linux-64-3.1.07021-k9.pkg 3 regex "Linux".
  AnyConnect enable
  tunnel-group-list activate
  attributes of Group Policy DfltGrpPolicy
  VPN - connections 30
  VPN-idle-timeout 5
  internal GroupPolicy_AC_Profile group strategy
  attributes of Group Policy GroupPolicy_AC_Profile
  WINS server no
  4.2.2.2 DNS server value
  client ssl-VPN-tunnel-Protocol
  Split-tunnel-policy tunnelspecified
  Split-tunnel-network-list value LAN
  naisus.local value by default-field
  XX XX encrypted privilege 15 password username
  name of user XX attributes
  WebVPN
  chip-tunnel tunnel-policy tunnelall
  type tunnel-group AC_Profile remote access
  attributes global-tunnel-group AC_Profile
  address pool VPN-pool
  Group Policy - by default-GroupPolicy_AC_Profile
  tunnel-group AC_Profile webvpn-attributes
  enable AC_Profile group-alias
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the rsh
  inspect the rtsp
  inspect esmtp
  inspect sqlnet
  inspect the skinny
  inspect sunrpc
  inspect xdmcp
  inspect the sip
  inspect the netbios
  inspect the tftp
  Review the ip options
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  Cryptochecksum:xxx
  : end

  I'm not positive that's causing the problem, but I noticed that you have defined incoherent poolside VPN as a 24 (in the command name and that name is associated with the tunnel group) and 25 (in the command object on the network that is also referenced in the statement of NAT exempting NAT to that object). True your pool assigns addresses from the lower half of the 24, but still...

  I try to simplify things by using a single object for something like that, which is used in several places. With the help of objects the way they are intended, and which allows to avoid any discrepancies.

• ASA 5505 IPSec client-to-site any LAN access?

  Hello

  Like many others, I have problems get ipsec vpn clients can communicate with my LAN.

  I have configure ipsec with the wizard, I have also to add an ACL to allow the network to pool for the vpn client to connect to the local network, but with little success.

  Many of the responses I've seen includes changes in the NAT table, I tried a lot of them, but without success.

  There must be something really simple, that it's so frustrating because I guess it is supposed to be a relatively simple thing to get running.

  VPN client (Linux, iptables rules no) get 10.80.80.100 address, but cannot connect to a TCP service on a machine of LAN (no firewall on computer LAN) and can not ping LAN.

  The VPN client routing table:

  Kernel IP routing table
  Destination Gateway Genmask Flags metric Ref use Iface
  85.24.249.35 212.112.31.254 UGH 255.255.255.255 0 0 0 eth0
  10.80.80.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
  212.112.31.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
  0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 tun0

  : Saved
  
  :
  
  ASA Version 7.2(4)
  
  !
  
  hostname ciscoasa
  
  domain-name default.domain.invalid
  
  enable password xxx encrypted
  
  passwd xxx encrypted
  
  names
  
  !
  
  interface Vlan1
  
  nameif inside
  
  security-level 100
  
  ip address 192.168.0.1 255.255.255.0
  
  !
  
  interface Vlan2
  
  nameif outside
  
  security-level 0
  
  ip address dhcp setroute
  
  !
  
  interface Ethernet0/0
  
  switchport access vlan 2
  
  !
  
  interface Ethernet0/1
  
  !
  
  interface Ethernet0/2
  
  !
  
  interface Ethernet0/3
  
  !
  
  interface Ethernet0/4
  
  !
  
  interface Ethernet0/5
  
  !
  
  interface Ethernet0/6
  
  !
  
  interface Ethernet0/7
  
  !
  
  ftp mode passive
  
  dns server-group DefaultDNS
  
  domain-name default.domain.invalid
  
  same-security-traffic permit inter-interface
  
  access-list tictac_splitTunnelAcl remark allow vpn tunnel users to LAN
  
  access-list tictac_splitTunnelAcl standard permit 192.168.0.0 255.255.255.0
  
  access-list inside_nat0_outbound extended permit ip any 10.80.80.0 255.255.255.0
  
  access-list inside_access_in extended permit ip any any log disable
  
  access-list outside_access_out extended permit ip any any
  
  pager lines 24
  
  logging enable
  
  logging asdm informational
  
  mtu outside 1500
  
  mtu inside 1500
  
  ip local pool vpnpool 10.80.80.100-10.80.80.120 mask 255.255.255.0
  
  icmp unreachable rate-limit 1 burst-size 1
  
  asdm image disk0:/asdm-524.bin
  
  no asdm history enable
  
  arp timeout 14400
  
  global (outside) 1 interface
  
  nat (inside) 0 access-list inside_nat0_outbound
  
  nat (inside) 1 0.0.0.0 0.0.0.0
  
  access-group outside_access_out out interface outside
  
  access-group inside_access_in in interface inside
  
  timeout xlate 3:00:00
  
  timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  
  timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
  
  timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
  
  timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  
  http server enable
  
  http 192.168.0.0 255.255.255.0 inside
  
  no snmp-server location
  
  no snmp-server contact
  
  snmp-server enable traps snmp authentication linkup linkdown coldstart
  
  crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
  
  crypto dynamic-map outside_dyn_map 20 set pfs group1
  
  crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
  
  crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
  
  crypto map outside_map interface outside
  
  crypto isakmp enable outside
  
  crypto isakmp policy 10
  
  authentication pre-share
  
  encryption 3des
  
  hash sha
  
  group 2
  
  lifetime 86400
  
  telnet 192.168.0.0 255.255.255.0 inside
  
  telnet timeout 5
  
  ssh timeout 5
  
  console timeout 0
  
  dhcpd auto_config outside
  
  !
  
  dhcpd address 192.168.0.2-192.168.0.33 inside
  
  dhcpd dns 8.8.8.8 4.2.2.2 interface inside
  
  dhcpd enable inside
  
  !
  
  group-policy tictac internal
  
  group-policy tictac attributes
  
  dns-server value 8.8.8.8 4.2.2.2
  
  vpn-tunnel-protocol IPSec
  
  split-tunnel-policy tunnelspecified
  
  split-tunnel-network-list none
  
  username mattiasb password SVCZv/HMkykG.ikA encrypted privilege 0
  
  username mattiasb attributes
  
  vpn-group-policy tictac
  
  tunnel-group tictac type ipsec-ra
  
  tunnel-group tictac general-attributes
  
  address-pool vpnpool
  
  default-group-policy tictac
  
  tunnel-group tictac ipsec-attributes
  
  pre-shared-key *
  
  !
  
  class-map inspection_default
  
  match default-inspection-traffic
  
  !
  
  !
  
  policy-map type inspect dns preset_dns_map
  
  parameters
  
    message-length maximum 512
  
  policy-map global_policy
  
  class inspection_default
  
    inspect dns preset_dns_map
  
    inspect ftp
  
    inspect h323 h225
  
    inspect h323 ras
  
    inspect rsh
  
    inspect rtsp
  
    inspect esmtp
  
    inspect sqlnet
  
    inspect skinny
  
    inspect sunrpc
  
    inspect xdmcp
  
    inspect sip
  
    inspect netbios
  
    inspect tftp
  
  !
  
  service-policy global_policy global
  
  prompt hostname context
  
  Cryptochecksum:6e456ab21d08182ca41ed0f1be031797
  
  : end
  
  asdm image disk0:/asdm-524.bin
  
  no asdm history enable
  
  

  The list of split tunnel network was put on 'none' in your configuration:

  group-policy tictac attributes
  
  dns-server value 8.8.8.8 4.2.2.2
  
  vpn-tunnel-protocol IPSec
  
  split-tunnel-policy tunnelspecified
  
  split-tunnel-network-list none
  
  
  Please configure the tunnel list to reference the split tunnel ACL as follows:
  
  group-policy tictac attributes
  
     split-tunnel-network-list value tictac_splitTunnelAcl

  Hope that helps.

• How to grant local LAN access when you are connected via a central-site

  I know how to activate the local LAN access in the properties for the client connection, but I don't know how to allow access to the central site

  Central site is a CISCO 1721 with module as well as IOS IPSEC VPN

  tanks for any help

  Hello

  This feature is only supported when you connect to a VPN3K box, its not available for PIX/IOS as a vpn server, allowing it on the client-side custom has no effect when you connect to a server of PIX/IOS.

  THX

  AFAQ

• Strange question - data double on table 12 c JDev

  Hello

  I have a strange question in my table. I use Oracle JDeveloper 12 c. In my page, I use 2 VO and a secondary has a problem with the display of data - it displays two times. Heard that I deleted the table and put it in my page and always the same problem.

  No matter if I have all the data to my record in the table primary or not, when there are data to display then it shows twice. I do not know it can help, but for more information table is located in the popup.

  Anyone have this problem?

  Kind regards

  WK

  You must specify exact jdev version (there are two versions of 12 c)

  I had this problem in 12.1.2(a il y a longtemps, et à cause de trop de bugs dans cette version je n'a pas pris la peine de trouver la raison), but it seems that this problem went to 12.1.3(at moins, pour mon application)

  Dario

• This may seem like a strange question, but im trying to encode two buttons Flash Adobe, next and previous, however, when I put the thumb to the next scene and play on the next button and the previous scene and play on the previous button, it keeps switchi

  This may seem like a strange question, but im trying to encode two buttons Flash Adobe, next and previous, however, when I put the thumb to the next scene and play on the next button and the previous scene and play on the previous button, it keeps switching autour.

  If you have symbols of button on the stage to the next and previous, each of these symbols has an instance name with a listener event attached to it. The event listener is linked to a mandate. You can have a single event point to a function. So for example, if you have a next button and a click event that points to a function that says something like nextFrame(); and then you want to use the next button to point to a function that says something like nextScene(); you will need to use another instance of this next button and have this different instance to use a different event handler to point to a different function. Who help me?

• Strange question USB CPU intense operations...

  So I was hitting this strange question lately with my R4 Aurora...

  During an intense application or game, the power of my keyboard & mouse will start go on and outside... fan start office turns up and down at the same time. The computer will continue to function, but as the USB power goes on and outside, I can't use the keyboard to stop. I can hit the power button on the computer and usually it stops just fine.

  Could be that your diet is more stressed.

  If you connect a USB2 Hub supplied with 50W power brick, what happens?

• strange question use stop() to control a scenario after loadClip

  Hello, I have this strange question:

  I want to control the scenario of a swf file loaded with loadClip command.

  I wrote this code

  var loader: MovieClipLoader = new MovieClipLoader();

  loader.addListener (this);

  function onLoadComplete(_mc:MovieClip) {}

  _mc. Play()

  };

  loader.loadClip (swfname, _root.holder)

  function pause() {}

  _root.holder.stop)

  }

  function pause a button is used to stop playback of the loaded movieclip.

  strange thing is that stop() works when you test the movie by the flash application and plays from the projector. It DOES NOT WORK when he runs by embed code html in swf or swf directly.

  I checked a lot of time and the name of the 'container' is resolved, but the command does not work for his screenplay.

  thanx for help

  Daniele

  you wouldn't expect this stop() never work.  Once the loading starts, stop() no longer applies to the target of a loadClip (or loadMovie) method.

  to resolve, use the stop() on the first frame of the loaded swf file editing.

• Strange question: How do new dimensions go upwards, not downwards?

  Hey, I have a strange question. When I change the dimensions on a document and for example make it bigger, the bottom becomes higher in the direction down. But... How can I get, if you know what I mean? When I do the larger dimensions, why he cant increase upward?

  Does anyone know how to do this?

  The dimensioning of the scene is based on the top left corner, any change in the size will be push to the right or down.  You can't change what I know.