2504 basic config help.

Hi,
I'm new to Cisco wireless controllers. Have great expirence with both Ruckus and HP WLC's but I like the Cisco hardware much better so I'm about to swap to this.
We have a 2504 controller and a number of 2602 AP's.
I have a unmanaged edge network meaning no vlans segmenting is possible at the port of the AP.
I need 2 SSID's:
WLAN1
WLAN2
WLAN1 should be bridged onto/out of the AP port.
WLAN2 should be tunneled/transported to the controller and out on either a specific port or vlan (The DMZ vlan)
I can't seem to figure out how to do this. I have looked at the Guest anchor feature but that doesn't quite do what I need since I only have this one controller.
Hope someone can explain (not nessesarily in detail) how to do this.
Thanks in advance.

First of all. Thanks for the quick reply's. Flexconnect seems like just the thing I need.
Just to clerify: My DMZ vlan 10 has subnet 10.10.1.0/24. Theres a DHCP server in this DMZ serving wired clients.
So when I tunnel WLAN2 to the controller and out vlan 10 will the WLAN2 clients be bridged onto 10.10.1.0/24 subnet or will I need to have a different subnet for the wireless clients (and thereby have the 2504 route between)? I prefer a bridge if possible to keep it simple.
Additional: Will DHCP traverse this bridge or will I need to setup some kind of DHCP relay on the controller?
Thanks in advance.

Similar Messages

Help with a 6RD Basic config!

Hi there,
I am trying to start a basic setup to demonstrate 6RD and I am in trouble for a few hours. I just found an excellent pdf on this site and I tried to use it to start something using the same config but I did not have any success for the ulimated "ping" test !
I am using a very simple and basci setup using a:
        CE ------ IP Router --------BR
This is my relevant config for the CE :
interface Loopback0
ip address 10.0.0.10 255.255.255.255
interface Tunnel0
no ip address
no ip redirects
ipv6 address 2001:DB80:A0A:100::/128
ipv6 rip fred enable
tunnel source Loopback0
tunnel mode ipv6ip 6rd
tunnel 6rd ipv4 prefix-len 16
tunnel 6rd prefix 2001:DB80::/32
tunnel 6rd br 10.0.0.1
ipv6 route 2001:DB80::/32 Tunnel0
And at the BR I got the following relevant info:
interface Tunnel0
no ip address
no ip redirects
tunnel source Loopback0
tunnel mode ipv6ip 6rd
tunnel 6rd ipv4 prefix-len 16
tunnel 6rd prefix 2001:DB80::/32
This is my version:
P1R3#sh ver
Cisco IOS Software, 1841 Software (C1841-ADVIPSERVICESK9-M), Version 15.1(3)T2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Wed 10-Aug-11 03:46 by prod_rel_team
More info about tunnels and intf:
P1R3#sh tunn 6rd
Interface Tunnel0:
Tunnel Source: 10.0.0.10
6RD: Operational, V6 Prefix: 2001:DB80::/32
       V4 Prefix, Length: 16, Value: 10.0.0.0
       V4 Suffix, Length: 0, Value: 0.0.0.0
       Border Relay address: 10.0.0.1
General Prefix: 2001:DB80:A::/48
P1R3#sh ipv6int tu0
            ^
% Invalid input detected at '^' marker.
P1R3#sh ipv6i nt tu0
            ^
% Invalid input detected at '^' marker.
P1R3#sh ipv6i nt tu0
*Oct 30 22:06:13.266: Tunnel0 count tx, adding 20 encap bytes
P1R3#sh ipv6 int tu0
Tunnel0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A00:A
No Virtual link-local address(es):
Global unicast address(es):
    2001:DB80:A0A:100::, subnet is 2001:DB80:A0A:100::/128
Joined group address(es):
    FF02::1
    FF02::2
    FF02::9
    FF02::1:FF00:0
    FF02::1:FF00:A
MTU is 1480 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
Post_Encap features: Tunnel 6RD
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 30000)
Hosts use stateless autoconfig for addresses.
P1R3#
1R3#
*Oct 30 22:08:40.146: Tunnel0 count tx, adding 20 encap bytes
P1R3#show ipv6 route
IPv6 Routing Table - default - 5 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP
       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
       D - EIGRP, EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
C   2001:DB8:BAD:F00D::/64 [0/0]
     via FastEthernet0/0, directly connected
L   2001:DB8:BAD:F00D::1/128 [0/0]
     via FastEthernet0/0, receive
S   2001:DB80::/32 [1/0]
     via Tunnel0, directly connected
LC 2001:DB80:A0A:100::/128 [0/0]
     via Tunnel0, receive
L   FF00::/8 [0/0]
     via Null0, receive
P1R3#
*Oct 30 22:09:07.226: Tunnel0 count tx, adding 20 encap bytes
P1R3#
P1R2#show ipv6 route
IPv6 Routing Table - default - 5 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP
       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
       D - EIGRP, EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
LC 2001:DB8:CAFE:1::1:2/128 [0/0]
     via Loopback0, receive
C   2001:DB80:6400:FECA::/64 [0/0]
     via Loopback99, directly connected
L   2001:DB80:6400:FECA:CACA::1/128 [0/0]
     via Loopback99, receive
LC 2020:1:1:1::1/128 [0/0]
     via Loopback99, receive
L   FF00::/8 [0/0]
     via Null0, receive
P1R2#
Sending on one side:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2020:1:1:1::1, timeout is 2 seconds:
Packet sent with a source address of 2001:DB8:BAD:F00D::1
*Oct 30 22:12:28.318: Tunnel0 count tx, adding 20 encap bytes
*Oct 30 22:12:28.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:30.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:32.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:34.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
*Oct 30 22:12:36.958: ICMPv6: Sent echo request, Src=2001:DB8:BAD:F00D::1, Dst=2020:1:1:1::1.
Success rate is 0 percent (0/5)
P1R3#
Does not show up on the other side:
Invalid input detected at '^' marker.
P1R2#deb ipv6 icmp
ICMP Packet debugging is on
P1R2#
Any idea of something missing or wrong ?
Setups can be accessed remotely...
TIA
Fred

thank you harold!
actually I did this lab after a few nights and days with almost no sleep to prepare a nice new training I have developped from an existing CISCO training
The first sessions are for you (cisco) ;-) and I wanted it to be perfect...
I was sure to have done some BIG mistakes that I would have discover after a good night sleep ;-)
The first session is currently running this week.
I am going to try again tonight so maybe I will show this to my students tomorrow
http://www.fastlaneus.com/course/fl-ipv6spse

Autonomous 1231/1242 Radius Config Help. What is this not working?

Hey Guys,
I can't seem to get the SSID RadiusTest to work properly.
Windows PC's show "Windows was unable to find a certificate to log you into the network". Macs don't authenticate either. Radius server isn't seeing any requests at all. Radius server is working because we are authenticating other things to it.
On my test 1231, IOS is 12.3(8) JEB1.
And all help is appreciated.
Thanks,
Scott
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname TKS-AP1231-ICTServices
enable secret 5 $1$Izyg$qXSRYpFDI9ZX6F50vDrku0
clock timezone K 10
clock summer-time K recurring
ip subnet-zero
ip domain lookup source-interface BVI1
ip domain name domain.com.au
ip name-server 172.16.###.###
ip name-server 172.16.###.###
aaa new-model
aaa group server radius rad_eap
server 172.16.###.### auth-port 1812 acct-port 1813
ip radius source-interface BVI1
aaa group server tacacs+ tac_admin
aaa group server radius infrastructure
aaa group server radius clients
aaa group server radius central_auth
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa group server radius rad_eap1
server-private 172.16.###.### auth-port 1812 acct-port 1813 key 7 060D062F4B5D1B18045GHW1E0718
server 172.16.###.### auth-port 1812 acct-port 1813
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login method_infrastructure group infrastructure
aaa authentication login method_clients group clients
aaa authentication login method_Central group central_auth local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local
aaa authorization exec method_Central group central_auth local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 mbssid
dot11 vlan-name Conference vlan 150
dot11 ssid RadiusTest
   vlan 18
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
   mbssid guest-mode
dot11 ssid Staff
   vlan 17
   authentication open
   authentication key-management wpa optional
   wpa-psk ascii 7 055E5F5E0555401B161003171928013C22272D6B6370
dot11 ssid Student
   vlan 16
   authentication open
   authentication key-management wpa
   guest-mode
   mbssid guest-mode
   wpa-psk ascii 7 02575102282A2323434F1B1D0C1915595A5C
dot11 network-map
dot11 arp-cache optional
username ########## privilege 15 password 7 ###################
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 17 mode ciphers tkip wep40
encryption vlan 16 mode ciphers tkip
encryption vlan 18 mode ciphers aes-ccm tkip
ssid RadiusTest
ssid Staff
ssid Student
speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
no power client local
power client 50
power local cck 50
power local ofdm 20
channel 2437
station-role root
interface Dot11Radio0.6
encapsulation dot1Q 6 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.16
encapsulation dot1Q 16
no ip route-cache
bridge-group 16
bridge-group 16 subscriber-loop-control
bridge-group 16 port-protected
bridge-group 16 block-unknown-source
no bridge-group 16 source-learning
no bridge-group 16 unicast-flooding
bridge-group 16 spanning-disabled
interface Dot11Radio0.17
encapsulation dot1Q 17
no ip route-cache
bridge-group 17
bridge-group 17 subscriber-loop-control
bridge-group 17 port-protected
bridge-group 17 block-unknown-source
no bridge-group 17 source-learning
no bridge-group 17 unicast-flooding
bridge-group 17 spanning-disabled
interface Dot11Radio0.18
encapsulation dot1Q 18
no ip route-cache
bridge-group 18
bridge-group 18 subscriber-loop-control
bridge-group 18 block-unknown-source
no bridge-group 18 source-learning
no bridge-group 18 unicast-flooding
bridge-group 18 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface FastEthernet0.6
encapsulation dot1Q 6 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.16
encapsulation dot1Q 16
no ip route-cache
bridge-group 16
no bridge-group 16 source-learning
bridge-group 16 spanning-disabled
interface FastEthernet0.17
encapsulation dot1Q 17
no ip route-cache
bridge-group 17
no bridge-group 170 source-learning
bridge-group 17 spanning-disabled
interface FastEthernet0.18
encapsulation dot1Q 18
no ip route-cache
bridge-group 18
no bridge-group 18 source-learning
bridge-group 18 spanning-disabled
interface BVI1
ip address 172.16.#.### 255.255.255.192
no ip route-cache
ip default-gateway 172.16.#.###
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
logging history debugging
snmp-server view iso iso included
snmp-server community KingsRO RO
snmp-server community KingsWr1t3 RW
snmp-server trap-source BVI1
snmp-server location ###
snmp-server contact ############################################
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps entity
snmp-server enable traps disassociate
snmp-server enable traps deauthenticate
snmp-server enable traps authenticate-fail
snmp-server enable traps dot11-qos
snmp-server enable traps switch-over
snmp-server enable traps rogue-ap
snmp-server enable traps wlan-wep
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps cpu threshold
snmp-server enable traps aaa_server
snmp-server host 172.16.###.## version 2c cisco udp-port 1620
radius-server host 172.16.###.### auth-port 1812 acct-port 1813 key ##########################
bridge 1 route ip
wlccp ap username wds password #################
wlccp authentication-server infrastructure method_infrastructure
wlccp authentication-server client any method_clients
banner login ^C
^C
line con 0
line vty 0 4
sntp server 172.16.###.###
sntp server 172.16.###.###
sntp server 172.16.###.###
sntp broadcast client
end

You configured your WDS to use empty radius methods. There's no much point to this apart from breaking your setup.
Remove all 3 "wlccp" commands. I suggest to have your normal radius working before you try and do WDS.
If behavior is still the same, then it means that the radius server has to get a request if the clients are proposed EAP-TLS and they are looking for a certificate to authenticate with ...
Did you pre-configure a profile on the client ? Did you configure them for PEAP ? EAP-TLS ? Which method do you allow on your radius server.
Nicolas

Basic Newbie Help

I am sorry but I have found the docs to be a little on the sparse side. I am a developer and it seems that the docs were written by a developer that knows the system. Having NEVER implemented a proxy server before I am having a dificult time making heads or tails of implementing filtering and templates. I know their concepts and I know regex very well. I dug around looking at the obj.conf file to see if I could see how what I was doing on the admin server translated to configuration.
When I go to the Filters page for the default proxy server what the heck do I choose / do? When I select a resource from the drop down list what are those exactly? The ones like "https://.*" look to me like a regulare expression that would go with an allow/deny or some other rule set. But its something I get to choose.
Then there is the Credit/Edit Filters section that creates filters. That seems pretty straightforward but I do not know how they relate (if they do) to the resource that is selected in the Resource Selection combo box.
I assume that when you create a filter you then select it from the ALLOW or DENY list and then apply it.
No matter what I do it doesn't work right and I get all denied or all allowed. Then ther eis a template. Besides being a list of URL's how does it releate to everything else on this page?
I know this is a free product but some more effort on the docs in this VERY IMPORTANT area would be nice.
If these topics have been covered in posts, blogs, or other please direct me to them so that I can read and learn ... if not could someone that knows this aspect of Sun Proxy Server take 5 or 10 minutes and explain how these things interrelate so that I at least know how the user interface is supposed to be used.
thanks
Doug

Rahul, thanks for the reply.
In order for me to be able to manually modify the obj.conf file I need to know a few basics rules first. I would actually prefer to create the url files by hand as you suggest but unless I know where things go then it will be a lot of trial and error. I will look at the examples folder for help as well. But I have a few simple questions to get me started. These questions are based on the "Filters" tab for the proxy instance.
1) At the moment I am not doing NSAPI filters (well I don't know if I am I don't know what they are yet) I am only creating regex filters though the UI at the moment. Are those NSAPI filters?
2) Under Resource selection, there is a drop down list of existing resources and one called the entire server. I assume that the filters you create and operate upon are somehow linked with this resource, is that correct?. For now I am just trying the "entire server" resource but if I were to also create a filter for say the https:// resource which resource would rule the day. Example, if I say that www.google.com is allowed for the entire server but under the http:// resource I saw it is not allowed which resource rule takes precedense?
3) The Create and Edit filters area is self explanatory however I do not see how (through the UI) to delete a filter or disassociate it from the resource "entire server"
4) Under Operate Filters there are two drop downs for Allow and Deny. I assume again that this will set a url list to either be allowed or denied for the resource selected like "the entire server"
According to the admin UI I have a whitelist url file set for allow and NONE set for deny. The whitelist url contains the following (grabbed from the WhiteList.url file)
.*://www\.google\.com/.*
I have also tried .*://www\\.google\\.com/.*
Unless my regex is wrong I should be able to get out right? I get the following browser message:
This URL is not allowed to be proxied.
What I find odd is that even though I have selected the WhiteList for allow and NONE for deny the obj.conf file still has entries for two other url file filters I created the other day (dougs and dougs-deny) Whay are they still there ?
Here is my obj.conf.
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
Init fn="flex-init" access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
Init fn="init-proxy" timeout="300" timeout-2="15"
Init WhiteList="/opt/sun/webproxyserver/proxy-defaultproxy/conf_bk/WhiteList.url" fn="init-url-filter" dougs="/opt/sun/webproxyserver/proxy-defaultproxy/conf_bk/dougs.url" dougs-deny="/opt/sun/webproxyserver/proxy-defaultproxy/conf_bk/dougs-deny.url"
<Object name="default">
AuthTrans fn="match-browser" browser=".*MSIE.*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" name="testit" from=".*://.*|connect://.*:443/.*"
PathCheck fn="url-check"
PathCheck fn="url-filter" allow="WhiteList"
Service fn="deny-service"
AddLog fn="flex-log" name="access"
</Object>
<Object name="file">
PathCheck fn="unix-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
ObjectType fn="block-ip"
ObjectType fn="block-proxy-auth"
ObjectType fn="block-issuer-dn"
ObjectType fn="block-user-dn"
Service fn="deny-service"
</Object>
<Object ppath="http://.*">
PathCheck fn="url-filter" allow="WhiteList"
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
ObjectType fn="block-ip"
ObjectType fn="forward-cache-info" hdr="Cache-info"
Service fn="deny-service"
Filter fn="filter-ct" regexp="(application/octet-stream|application/astound|application/fastman|application/java-archive|application/java-serialized-object|application/java-vm|application/mac-binhex40|application/x-stuffit|application/mbedlet|application/msword|application/oda|application/postscript|application/studiom|application/timbuktu|application/vnd.ms-excel|application/vnd.ms-powerpoint|application/vnd.ms-project|application/x-javascript|application/x-javascript;charset=UTF-8|application/x-java-jnlp-file|application/x-aim|application/x-asap|application/x-csh|application/x-earthtime|application/x-envoy|application/x-gtar|application/x-cpio|application/x-hdf|application/x-javascript-config|application/x-maker|application/x-mif|application/x-mocha|application/x-msaccess|application/x-msmetafile|application/x-msmoney|application/x-mspublisher|application/x-msschedule|application/x-msterminal|application/x-mswrite|application/x-NET-Install|application/x-netcdf|application/x-salsa|application/x-sh|application/x-shar|application/x-sprite|application/x-tar|application/x-tcl|application/x-perl|application/x-timbuktu|application/x-tkined|application/x-troff-man|application/x-troff-me|application/x-troff-ms|application/x-troff|application/x-wais-source|application/zip|application/pre-encrypted|application/x-pkcs7-crl|application/x-fortezza-ckl|drawing/x-dwf|x-world/x-svr|x-world/x-vrml|x-world/x-vrt|x-conference/x-cooltalk|x-gzip|x-compress|x-uuencode|application/vnd.sun.xml.writer|application/vnd.sun.xml.writer.template|application/vnd.sun.xml.calc|application/vnd.sun.xml.calc.template|application/vnd.sun.xml.draw|application/vnd.sun.xml.draw.template|application/vnd.sun.xml.impress|application/vnd.sun.xml.impress.template|application/vnd.sun.xml.writer.global|application/vnd.sun.xml.math|application/vnd.stardivision.writer|application/vnd.stardivision.writer-global|application/vnd.stardivision.calc|application/vnd.stardivision.draw|application/vnd.stardivision.impress|application/vnd.stardivision.impress-packed|application/vnd.stardivision.math|application/vnd.stardivision.chart)"
Filter fn="filter-html" start="SCRIPT" end="SCRIPT"
Filter fn="filter-html" start="APPLET" end="APPLET"
Filter fn="filter-html" start="EMBED" end="EMBED"
Filter fn="filter-html" start="OBJECT"
</Object>
<Object ppath="https://.*">
PathCheck fn="url-filter"
ObjectType fn="block-ip"
ObjectType fn="forward-cache-info" hdr="Cache-info"
Service fn="deny-service"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="deny-service"
</Object>
<Object ppath="connect://.*:443">
PathCheck fn="url-filter"
Service fn="deny-service"
Route fn="unset-proxy-server"
Route fn="unset-socks-server"
</Object>
<Object name="testit">
PathCheck fn="url-filter"
Service fn="proxy-retrieve"
</Object>
Again thanks for any help you can offer. I will look at the examples next.
Doug

ASDM Config Help

I am trying to veiw my PIX515e via the ASDM, but I am unable to...Can you review my config and make sure I have everything setup the way it is supposed to?
PIX Version 8.0(4)32
hostname pixfirewall
domain-name jkkcc.com
enable password DQucN59Njn0OjpJL encrypted
passwd DQucN59Njn0OjpJL encrypted
no names
interface Ethernet0
nameif outside
security-level 0
ip address 24.234.xxx.xxx 255.255.255.224
interface Ethernet1
nameif inside
security-level 100
ip address 10.0.20.1 255.255.255.248
interface Ethernet2
shutdown
nameif exchange
security-level 100
ip address 10.0.30.1 255.255.255.248
ftp mode passive
dns domain-lookup inside
dns server-group DefaultDNS
name-server 68.105.28.16
name-server 68.105.29.16
domain-name jkkcc.com
access-list ouside-acl extended permit tcp any host 24.234.xxx.xxx eq smtp
access-list ouside-acl extended permit tcp any host 24.234.xxx.xxx eq www
access-list ouside-acl extended permit tcp any host 24.234.xxx.xxxeq https
pager lines 24
mtu outside 1500
mtu inside 1500
mtu exchange 1500
icmp unreachable rate-limit 1 burst-size 1
icmp deny any outside
asdm image flash:/asdm-602.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface smtp 192.168.2.22 smtp netmask 255.255.255.255
static (inside,outside) tcp interface https 192.168.2.22 https netmask 255.255.255.255
static (inside,outside) tcp interface www 192.168.2.22 www netmask 255.255.255.255
access-group ouside-acl in interface outside
router eigrp 1
network 10.0.0.0 255.0.0.0
network 192.168.0.0 255.255.255.0
network 192.168.2.0 255.255.255.0
network 192.168.4.0 255.255.255.0
route outside 0.0.0.0 0.0.0.0 24.234.118.193 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
http server enable
http 0.0.0.0 0.0.0.0 inside
http 10.0.20.0 255.255.255.248 inside
http 192.168.0.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect http
inspect ils
service-policy global_policy global
prompt hostname context
Cryptochecksum:abd41b3df257873d44a6fc1545ae4418
: end

Hello,
Yes I know what the problem is
the Cipher used by the web browser is not the same than the one the ASA uses.
You will need to get the des/aes license and then change the SSL cipher
Unfortunatelly I do not have the link with me, but as soon as I has it ( tomorrow morning as maximum) I will give it to you
100 % sure this will solve your problem.
EDIT: Here is the link to get the license you need ( it will be for free)
https://tools.cisco.com/SWIFT/LicensingUI/loadDemoLicensee?FormId=139
After installing the license please add the following command:
ssl encryption aes256-sha1 aes128-sha1 3des-sha1
Finally test it one more time! That should do it
DO rate all the helpful posts
Julio

PIX 515E Config Help!!!

I just got my PIX515e configured and thought I had it working correctly, but on my 3745 router, the line protocol is down, I've looked through the configs for bot the PIX and the 3745 and can't seem to figure out why I don't have access. Would anyone be able to please help resolve the issue for me?
Pix515E config:
pixfirewall# show run
: Saved
PIX Version 8.0(4)32
hostname pixfirewall
domain-name home.jkkcc.com
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Ethernet0
nameif outside
security-level 0
ip address dhcp setroute
interface Ethernet1
nameif inside
security-level 100
ip address 10.0.20.1 255.255.255.248
interface Ethernet2
nameif DMZ
security-level 50
ip address 10.0.30.1 255.255.255.248
ftp mode passive
dns server-group DefaultDNS
domain-name home.jkkcc.com
pager lines 24
mtu outside 1500
mtu inside 1500
mtu DMZ 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
nat (inside) 1 0.0.0.0 0.0.0.0
router eigrp 1
network 10.0.0.0 255.0.0.0
network 192.168.0.0 255.255.255.0
network 192.168.2.0 255.255.255.0
network 192.168.4.0 255.255.255.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
http server enable
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect http
inspect ils
service-policy global_policy global
prompt hostname context
Cryptochecksum:c7359e3905dd13a5aa1a1c0e85a91f52
: end
3745 Config:
3745-Internet#show run
Building configuration...
Current configuration : 2248 bytes
version 12.4
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
hostname 3745-Internet
boot-start-marker
boot system flash:
boot-end-marker
no logging buffered
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
memory-size iomem 25
no network-clock-participate slot 2
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.2.1 192.168.2.150
ip dhcp pool HOME-Network
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server 192.168.2.127 192.168.1.128
ip dhcp pool home-network
ip domain name www.jkkcc.com
ip name-server 192.168.2.127
multilink bundle-name authenticated
parameter-map type regex sdm-regex-nonascii
pattern [^\x00-\x80]
username woodjl1650 privilege 15 password 0 henry999
archive
log config
hidekeys
interface FastEthernet0/0
description $FW_OUTSIDE$
ip address 10.0.20.2 255.255.255.248
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
interface Serial0/0
description $FW_INSIDE$
ip address 10.0.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly
interface FastEthernet0/1
description $FW_INSIDE$
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
interface Serial0/1
description $FW_INSIDE$
ip address 10.0.10.2 255.255.255.248
ip nat inside
ip virtual-reassembly
router eigrp 1
network 10.0.0.0
network 192.168.0.0
network 192.168.2.0
network 192.168.4.0
auto-summary
no ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 15 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.2.21 80 interface FastEthernet0/0 80
ip nat inside source list 104 interface FastEthernet0/0 overload
access-list 15 permit 10.0.8.0 0.0.7.255
access-list 15 permit 192.168.4.0 0.0.0.255
access-list 104 permit ip any any
snmp-server community public RO
snmp-server community private RW
snmp-server enable traps tty
control-plane
line con 0
line aux 0
line vty 0 4
privilege level 15
transport input telnet
webvpn cef
end

Everything seems to be working fine now, except one last issue. I can ping my exchange server. Do you see anything wrong or why my ping would not go through? I can ping 10.0.20.1 (Pix Ethernet 1) and I can ping from all my computers to the 10.0.20.1 but not I get this when trying to ping 10.0.30.1
C:\Users\Exchange>ping 10.0.30.1
Pinging 10.0.30.1 with 32 bytes of data:
Reply from 10.0.30.3: Destination host unreachable.
Reply from 192.168.2.1: Destination host unreachable.
Reply from 192.168.2.1: Destination host unreachable.
Reply from 192.168.2.1: Destination host unreachable.
Ping statistics for 10.0.30.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Exchange = 10.0.30.3 255.255.255.248
Pix Ethernet 2 (exchange) = 10.0.30.1 255.255.255.248
Current Config:
PIX Version 8.0(4)32
hostname pixfirewall
domain-name home.jkkcc.com
enable password DQucN59Njn0OjpJL encrypted
passwd DQucN59Njn0OjpJL encrypted
names
interface Ethernet0
nameif outside
security-level 0
ip address dhcp setroute
interface Ethernet1
nameif inside
security-level 100
ip address 10.0.20.1 255.255.255.248
interface Ethernet2
nameif exchange
security-level 100
ip address 10.0.30.1 255.255.255.248
ftp mode passive
dns domain-lookup inside
dns server-group DefaultDNS
name-server 192.168.2.127
name-server 192.168.2.22
domain-name home.jkkcc.com
access-list inbound extended permit tcp any host 68.224.242.13 eq www
access-list inbound extended permit tcp any host 68.224.242.13 eq smtp
pager lines 24
mtu outside 1500
mtu inside 1500
mtu exchange 1500
icmp unreachable rate-limit 1 burst-size 1
icmp deny any outside
asdm image flash:/asdm-61551.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
nat (exchange) 1 0.0.0.0 0.0.0.0
static (exchange,outside) tcp interface smtp 10.0.30.3 smtp netmask 255.255.255.
255
router eigrp 1
network 10.0.0.0 255.0.0.0
network 192.168.0.0 255.255.255.0
network 192.168.2.0 255.255.255.0
network 192.168.4.0 255.255.255.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
http server enable
http 0.0.0.0 0.0.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect http
inspect ils
service-policy global_policy global
prompt hostname context
Cryptochecksum:3672d254988d246453e4be381a198858
: end
pixfirewall#

B1UP Validation Config - help please

Hi Experts
I would like to create a validation on Sales Order for when a customer has a particular payment terms of Cash Basic.
In these cases I need users to record the method of payment on a UDF called U_CashBasicType
The UDF has a linked table and 7 options (not including blank) - BA, CA, CC, CH, OK, RP, VO
I would like SAP to throw an error message when the customer is cash basic (GroupNum field 139.47)
I have so far created a B1 Validation Config in Add/Update form mode on event Validate
The SQL condition is:
IF(SELECT GroupNum FROM OCRD WHERE CARDCODE=$[$4.0.0]) =-1 and ordr.U_CashBasicType is NULL)
BEGIN
SELECT 'CASH BASIC' FOR BROWSE
END
the function to execute is a simple status bar error which block the event.
All looks okay to me but it doesn't see to run when the customer is cash basic and the UDF is blank (null)
Any ideas what I'm doing wrong?
Fairly new to B1UP and my only training has been through the samples on the Boyum website (not great!) so apologies if this is an obvious fix.
Best Regards
Geoff

Hi Geoff,
i thing you want to Stop the Sales Order let suppose Payment Terms Is 'Net-30' And UDF is Null So
IF (ordr.[GroupNum]=-1 and isnull(ordr.U_Fetch,-1)=-1 )
BEGIN
SELECT 'CASH BASIC' FOR BROWSE
END
You can Also do it on the Back end in Transaction Notification SP ...
I Hope this may be Helpful .
Regards,
Mayank Shah

Basic script help for a newbie?!?!

Need help with a basic script, I need to display 5 input fields in a single dynamic field. And i need them to have a certain order of display, ie: input 1 is displayed on line 1, 2 on the next line, etc. any help would be appreciated
I have been trying various scripts but i either make the second input field replace the first one, or i cant get the vars to populate the field with a button.. Im kinda lost.

Show what you have tried so far that give you the results where you either replace fields or can't get vars to populate them with a button.

Some basic questions: Help defining Real World Classes

I am trying to write a small applet using proper OO concempts and Java technique and I'm confused on the proper way to do this. I think I know several ways that work and have all the peices I need such as JMail and JDBC drivers, but would appreciate help on understanding how to properly structure my classes and objects.
The application will simply do the following: I have a database table that receives a new entry when a truck is late for its delivery. When this new record is created, I need to send an email to the driver manager who will then decide (via a jsp page) whether the customer should receive an email about the late delivery. For each truck, there will only be one driver manager and one client to be notified.
What I'm confused about is what classes and objects to create (and why). My first thought is to create a LateTruck class, a DriverManager class and a Customer class and have the LateTruck class call up the DriverManager to send an email then have the JSP page reinstantiate the LateTruck and instantiate the Customer class to send the email to the client.
If I do it this way, is there a proper way to send the email? Do I send the email as a method in LateTruck which gets the email address from DriverManager such as
LateTruck.Order1234.SendEmail(DriverManager.JoeBlow.Email)
or do I use LateTruck to write the email message which I then pass to DriverManager such as
DriverManager.JoeBlow.SendEmail(message)
Should I even break up the applet into three classes and objects? Since each LateTruck only needs one DriverManager and one Client, is the proper way to do this to create only one class called LateTruck which has DriverManager, DriverManagerEmail, ClientName and ClientEmail all as properties of LateTruck?
Thanks for any help in understanding the basics here.

Is that the story of Static Write and the Seven Classes and the evil stepmother Wilma Gates who kept asking "Mirror Site, Mirror Site on the web, who's got the buggiest InterDev?

Airport General Config Help Required

I've got a wireless Thomson broadband router hooked up downstairs running DHCP server, and upstairs I've got an airport extreme configured in bridge mode. I've got a MAC Mini directly ethernet cabled to the AE.
I can connect to the internet from the Mac, but cannot see a couple of ethernet devices connected to the remaining two AE ethernet ports (Windows Home Server and Buffalo Linkstation).
I can change the config so that the AE acts as the DHCP server, am then able to use WHS and the Linkstation, but not internet.
Can anyone give me any pointers as to how to configure it up (if at all possible). Does the AE need to be hard wired to the router?
Thanks

Hello Sai Narayana,
Our client wants to implement whole travel management in ESS, I am new to SAP travel management, Could you please help me in starting the configuration of create travel request, which node the master cost center is configured. I looked under financial accounting->travel management->Travel Planning and Travel Expenses but couldnt figure out where the travel request will be configured. We are using ECC 6.0. Your help is very much appreciated as I am doing configuration alone i dont have any other help.
I have question regading Travel Planning if we want to implement travel planning do we have to use AMADEUS or can we integrate the clients present used travel link to R/3 using RFCs.
Regards,
Latha

Doubts in XI basics..help me with some practical examples

hi friends,
I am new to SAP XI have some basic doubts. Answer my questions with some practical examples.
1. what is meant by "Business System" and what is difference between client,customer,Business partner,3rd party
2.If a small company already using some systems like Oracle or peopleSoft,if it wants to use SAP products then what steps it has to follow.
3. SAP system means a SERVER?
4.SAPWebAs means a server software?
5.R/3 system comes under SAP system?
6.XI is also one of the SAP module..how it relates to other modules.
7.In one organization which is using SAP modules,each module will be load in separate servers?
8.PO(purchase order) means just looks like one HTML file..customer will fill the form and give it.like this,Combination of many files like this is one SAP module.Is it right assumption..?if so,then what is speciality SAP?
I have an theoretical knowledge about IR and ID and SLD.what are general business transactions happens in any business ?(like who will send cotation,PO) give some practical example for what actually happens in business?..who will do what?and what XI will do?

Hi Murali,
 1.Business System
Business systems are logical systems that function as senders or receivers within the SAP Exchange Infrastructure(XI).
Before starting with any XI interface,the Business systems involved has to be configured in SLD(The SLD acts as the central information provider for all installed system components in your system landscape.)
business system and technical system in XI
2.Third Party
http://help.sap.com/saphelp_nw04/helpdata/en/09/6beb170d324216aaf1fe2feb8ed374/frameset.htm
eg.For the SAP system a Bank would be a third-party which would be involved in interfaces involving exchange of data(Bill Payment by customer).
3.XI(Exchange Infrastructure)
It enables you to connect systems from different vendors (non-SAP and SAP) in different versions and implemented in different programming languages (Java, ABAP, and so on) to each other.
Eg.If an interface involves Purchase Order sent from SAP system to the vendor(Non-SAP system)then,the vendor might expect a file.But the Data is in the IDOC(intermediate document) form with the SAP system.Here XI does the work of mapping the IDOC fields and the File fields and sends it to the vendor in the form of a file.
In short,always the scene is Sender-XI-Receiver.
The Sender and the Receiver depends upon the Business you are dealing with.
4.Business Partner
A person, organization, group of persons, or group of organizations in which a company has a business interest.
This can also be a person, organization or group within this company.
Examples:
Mrs. Lisa Miller
Maier Electricals Inc.
Purchasing department of Maier Electricals Inc.
5.Client
http://help.sap.com/saphelp_nw04/helpdata/en/6c/a74a3735a37273e10000009b38f839/frameset.htm
6.SAP System
http://help.sap.com/saphelp_nw04/helpdata/en/33/1f4f40c3fc0272e10000000a155106/frameset.htm
7.SAP WebAS
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=sapwebapplication+server&cat=sdn_all
As you are a beginner, I understand you musnt be aware of where to search what.
For all details search out in http://help.sap.com
And sdn(key in keyword in Search tab).
You will get list of forums,blogs,documentation answering all your queries.

Solman_Setup basic config - No free number range available

Dear Solution manager Gurus -
We have recently upgraded our Solution manager to 7.1 SP 11 (latest).
While doing
Solman Basic configuration in Solman_setup.
in Step 7- Maintain Systems in iBase, Step "Maintain number range for material", we get the error as "No free number range available.".
We have reviewed SAP note 1741109 - ITSM 7.1 - Generation of IBase Components is not working and followed all the steps.
However the error we are getting is "No Free number range available" is not mentioned anywhere in the above note.
I have also created OSS message for SAP to look at, no reply from SAP yet.
Please advise.
Thanks
-Lee

Hi Swarali
Please call the T_CODE- /nCOMC_MATERIALID_ALL
Select LMDB--> Display Intervals--> Delete the intervals marked with check box--> "External"
Do the same for CMDB.
Then change the intervals in order for LMDB- ....7100000000.--> .........7199...
CMDB---> ..........72000......--> .......7299......
And then follow note: 1741109-- Here the activity "Maintain Number Range for Material" will be explained detailed:
For Database (LMDB), number range 00000000007300000000 to 00000000007399999999
For Host (LMDB), number range 00000000007400000000 to 00000000007499999999
Hope this helps!!
Best Regards
Saurabh

Basic FCP Help for beginner

Thanks in advance for looking at my post.
I have a uni project whereby i have to make a music video for a song previously recorded.
I have videoed various shots of my band playing along to the recorded song.
They all start at different times (i.e start of video clip does not match with audio clip) yet i know that over the whole song they are in time with each other as i had the drummer play along to the recording using headphones.
So what im trying to do is load up all of the clips into FCP alongside the audio, adjust the start position for the various video clips so that they synchronise with the audio, and then lock them into place.
I would then like to cut them up into clips and move the parts that i want to use down onto the main video timeline so that they are in time with the audio.
I am mainly encountering problems with having to render these 3 minute video clips just to see if they line up with the audio which is a very time consuming process. Is there any way to use the markers and tell them to lock together, that is put a marker on the audio timeline, put markers on each video clip at the same point and line them up/snap them into place.
Any help would be much appreciated, as i mentioned in the subject i am a complete apple/FCP beginner having only done basic videos where i didnt need to have such synchronicity between audio and video.
Also on a side note when i load up the video clips into the timeline, they creat new lines V2,V3 and so on. Am i right in assuming that V1 is the final rendered timeline, or does FCP show all of the V# if they have footage on them?
Tl:dr help
Message was edited by: y0ukn0ws1t

Thanks for the response, i have looked at a few video tutorials, but i cant find one that deals with multiple video takes over a common audio take.
Are v2,3 etc slates to load up video before aligning/cutting and placing onto V1 (the main video sequence)??
With regards to this video
http://library.creativecow.net/articles/harringtonrichard/final_cut_multicamedit.php
Am i right in assuming once i have lined up all the video clips to sync with the audio i can set in and out markers on the video clips to tell FCP to use the sections that i want of each take?
Message was edited by: y0ukn0ws1t

NWA Basic Config Error

Hi!
I'm getting this error while trying to execute the template 3: NWA System: Basic configuration, from Netweaver administrator (2004s SP16):
Creating a connection to the SLD Import not successful Element 'SAPConfigLib.J2E.Unclassified.createSLDconnection':ClassLoader not found sap.com/tclmctcutilbasic_ear
The same occurs if I try to execute 1: SLD system: Configure and activate SLD.
The SLD is up and running in http://localhost:50200/sld .
Any help?
Regards,
Flavio Rasseli

When this happens out of warranty, HP will not "step up." But we don't them. Read this for next time...
Code Purple is a problem exclusive to HP's, the easiest solution is to avoid them. However, it's already too late for you as it was for me. Basically it's an attempt to force you to pay them to service or upgrade your PC, or if you didn't learn the first time, buy another. Here is the most concise answer I found, tried to translate into plain english.
***PLAIN ENGLISH QUICK AND EASY FIX FOR ALL SYSTEMS****
***Windows 7 code purple or Windows Vista code purple***
With the code purple error on the screen, press shift+f10 (the shift key and the F10 key (at the top of the keyboard) at the same time) to open a little screen called a command prompt. (So, you get a little black screen with white text that says something about your Windows verison first and a little ways down you'll see "C:\>". It's all ready for you to start typing.)
Type the following line, just as you see it here...
notepad C:\hp\bin\checkdmi\checkdmi.cmd
so it will look like this
C:\>notepad C:\hp\bin\checkdmi\checkdmi.cmd
Press Enter.
You will see the text for the file listed in a window using a simple text editor.
Go to the beginning of the text. Press enter to make a space. Type this...
goto cleanup
So, whatever comes after, the first line looks like this...
goto cleanup
Save the file and exit notepad and restart your PC. You are good to go.
Please repost like crazy.

[NEWBIE] basic config.xml

Hi Experts,
I'm just really new to the ISA framework and I have a simple question.
I have the following below in config.xml:
 <action path="/b2b/init" type="com.sap.isa.core.InitAction" validate="false">
 <forward name="success" path="/b2b/coreinit.do"/>
 <forward name="sessionLogging" path="/admin/sessionLogging.do"/>
 <forward name="heartbeat" path="/admin/heartbeat.jsp"/>
 </action>
 <action path="/b2b/coreinit" type="com.sap.isa.isacore.action.IsaCoreInitAction">
 <forward name="success" path="/user/performLogin.do"/>
 <forward name="darklogin" path="/user/performLogin.do"/>
 </action>
Can you please tell me what happens here?
If I go to the URL: https://localhost:50001/myapp/b2b/init.do
1. How will InitAction know if it goes to success or suessionLogging or heartbeat?
2. How will IsaCoreInitAction know if it goes to success or darklogin?
3. Where can I find the action of /user/performLogin.do ?
Thank you sirs/madams.
Edited by: jemaru on Mar 1, 2010 9:16 PM

Hi Jemaru,
If you are using NWDS then try to open code by pressing 3 keys together CTRLSHIFTT it will open Open Type box and here you can type InitAction or IsaCoreInitAction and open source file.
You can put break point and run Application in debug mode. to see how control is passing in each class.
Answer for your questions...
1. How will InitAction know if it goes to success or suessionLogging or heartbeat?
Open InitAction in NWDS put break point inside first line of perform method and then run debug and run application on your local. It will give you an idea how process happens line by line. There are so if and else so it depends on your XCM settings.
2. How will IsaCoreInitAction know if it goes to success or darklogin?
Do same as described for 1. Here put break point in doPerform method in IsaCoreInitAction
3. Where can I find the action of /user/performLogin.do ?
You can open project crmtcwebuser~sap.com in NWDS. Open WEB_INF folder. You will find config_user.xml file.
You will able to find below lines.

 <action path="/performLogin" forward="/relogin/setcookie.do?forward=success"/>
 <action path="/performLogoff" forward="/logoff.do"/>
ISA application use many other configuration XML file other then config.xml
You can find all those other XML files name in web.xml file.
Below are lines from web.xml file
<init-param>
 <param-name>config</param-name>
 <param-value>/WEB-INF/config.xml,/WEB-INF/xcmadmin-config.xml,/WEB-INF/ccmsims-config.xml,/WEB-INF/ipc-config.xml,/ipc/customer/config.xml,/WEB-INF/config_lwc_b2b.xml,/WEB-INF/scheduler-config.xml,/WEB-INF/ipcpricing-config.xml</param-value>
 </init-param>
 <init-param>
 <param-name>config/user</param-name>
 <param-value>/WEB-INF/config_user.xml</param-value>
 </init-param>
 <init-param>
 <param-name>config/dealerlocator</param-name>
 <param-value>/WEB-INF/config_dealerlocator.xml</param-value>
 </init-param>
 <init-param>
 <param-name>initconfig</param-name>
 <param-value>/WEB-INF/xcm/sap/system/init-config.xml</param-value>
 </init-param>
I hope this will help you.
eCommerce Developer

2504 basic config help.

Similar Messages

Maybe you are looking for