Admin Context - Do i need to assign interfaces for Mgmt?

I am building out 2 virtual firewalls using contexts in an active/active F/O pair, and would like to know if it is necessary to assign at least one interface to the admin context?
My other contexts will have outside, inside, DMZ and stateful F/O interfaces. And i plan on administering these contexts by SSH to the inside of one of the active Firewall contexts.
Also from what i am reading i see the system/admin context does AAA, Syslog, F/O config, interface allocations, etc. So, in the Firewalls I assume i dont need to configure AAA, syslog, etc. Is this a correct statement?
Thanks,
Mike

We do not assign interfaces to admin context but to do assign interfaces to other context from admin. So innitially you get only admin context from where you allocate interface/resources to other contexts.
Here are the links for ref-
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml
Thanks
Ajay

Similar Messages

Why do we need to assign ip for the D channel ISDN-PRI

Why do we need to assign ip address to the D channel (signaling ) when we configure ISDN-PRI in the example below :
http://www.cisco.com/univercd/cc/td/doc/product/access/ap/ap_ts3/ap_ts3sw/apswisd.htm
<quote>
Step 1:Specify the D channel of the first Primary Rate Interface (PRI):
AS01(config)# interface Serial 0:23
AS01(config-if)#
Step 2: Assign an IP address and subnet mask to the interface:
AS01(config-if)# ip address 172.16.254.253
</quote>
Regards

You can assing one there, and / or on dialer interfaces. It depends on what you are doing.
These will be the address used by PPP when it runs on the B-channels.

Do I need to Define Interfaces for RFC

Hi,
I am doing RFC to File. I want to get the RFC response to an xml file. If I do using BPM , then 1.Should I define Interfaces for RFC as Abstract Interfaces?
Do I need to create any Interfaces for RFC ?
Should I map RFC request to File or RFC Response to File?.
Regards,
Varun

Hii
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/snippets/abap%2b-%2bsimple%2bprogram%2bto%2bcreate%2bsales%2border%2busing%2bbapi
https://wiki.sdn.sap.com/wiki/display/Snippets/ABAP-Simpleprogramtocreatesalesorderusing+BAPI
RFC to SOAP
****************/Tutorials/XI/RFCtoSOAP/page1.htm
RFC-Webservice
****************/Tutorials/XI/RFC2WebService/Page1.htm

I need a COM interface for Java!

Does anyone know how to interface COM with Java. I need to access some third party code and I can only do it through COM.

I think the post referred to Microsoft's COM objects and not to serial communications. I'm sure this question has been asked dozens of times here. I could search for it but I'm not the one who wants the answer.

Need help assigning range for an integer for subtracting time.

Ok, so I'm having a little trouble getting this program to work. :x Maybe somebody could give me some help on what to do next. I'm new to Java, and I'm trying to write a program using NetBeans 6.9.1, and I ran into a problem. I'm trying to write a program for a time traveler Marty, who is going back in time. The time is set on a 24 hour clock, so am and pm is not an issue.
I have the program written, but I'm having trouble with the subtraction of the time. Whenever I do the subtract, and the time traveled back (either in hours, minutes or seconds), is bigger than the current time, I just end up with negative numbers. I don't know how to set the value so it will just recycle through the 24 hours, the 60 minutes, or 60 seconds, instead of giving me negative numbers. Any help would be greatly appreciated. Also, I'm not sure how to make the users input italic. Here is what I got so far.
package timetravel;
* @author Jeff
import java.io.*;
import java.util.*;
public class Main {
* @param args the command line arguments
public static void main(String[] args) {
int hours, minutes, seconds, hoursback, minutesback, secondsback;
Scanner keyboard = new Scanner (System.in);
System.out.println("Hi Marty!");
System.out.println("Enter current hour:");
hours = keyboard.nextInt();
System.out.println("Enter current minute:");
minutes = keyboard.nextInt();
System.out.println("Enter current second:");
seconds = keyboard.nextInt();
System.out.println("Enter how many hours you want to travel back");
hoursback = keyboard.nextInt();
System.out.println("Enter how many minutes you want to travel back");
minutesback = keyboard.nextInt();
System.out.println("Enter how many seconds you want to travel back");
secondsback = keyboard.nextInt();
System.out.println("When you arrive, the local time will be " + (hours - hoursback)
+ " hours, " + (minutes - minutesback) + " minutes, and " + (seconds - secondsback)
+ " seconds.");

Well, basically, here's how I want the program to run
Example program run:
Hi Marty!
Enter current hour: 8
Enter current minute: 12
Enter current second: 11
Enter how many hours you want to travel back: 9
Enter how many minutes you want to travel back: 36
Enter how many seconds you want to travel back: 39
When you arrive, the local time will be: 22 hours, 35 minutes, and 32 seconds
(program input is written in italic)
instead of how it runs now
Hi Marty!
Enter current hour: 8
Enter current minute: 12
Enter current second: 11
Enter how many hours you want to travel back: 9
Enter how many minutes you want to travel back: 36
Enter how many seconds you want to travel back: 39
When you arrive, the local time will be: -1 hours, -24 minutes, and -28 seconds
I want it to cycle through the 24 hour clock, so if I travel back in time from 18 (1800 or 6pm) and i want to travel back in time 20 hours, I should get 22 (2200 or 10 pm) instead of -2.
Same with minutes and seconds, except for it to cycle through 60 instead of 24, since there are 60 minutes in an hour, and 60 seconds in a minute. Also, if the minutes end up being negative, I need it to take away one from the hour spot, and so on for the other ones. Hopefully I explained it well enough... Sorry, I'm new to Java.
Edited by: halo2jak on Sep 7, 2010 12:24 AM

Connecting to the admin context

Hi All
I seem to find myself in a bit of a quandary - in that i cannot currently connect to the admin
context remotely while i have access to the testing context i set up and i am unsure how
to connect so as to be able to talk to both the admin context and the testing context.
I have two vlans i am using both of which have interfaces on the test context -
shall we call them xx.xx.151.0/24 and xx.xx.152.0/24.
Now xx.xx.151.0 is where the servers will be and only exists beyond the vip.
xx.xx.152.0 is connected through to the rest of our network.
Now my initial thought was that we could use another 152 vlan int on the 'internal'
side - that is the admin context - but mt tech supportb has kindly pointed out that
i cannot do this -
I believe you get the same mac address on both sides which may cause issues.
So the layer2 resolution to pass data may not work correctly
I believe you get the same mac address on both sides which may cause issues.
So the layer2 resolution to pass data may not work correctly.
So can someone tell me how i get access to the admin context - do i need
another vlan or ip address not on these ranges - just to manage the admin
context ?
Steve

Hi Steve,
You can share the vlan between 2 contexts and use seperate IP address for the admin context to manage it.
However , Cisco dont recommend to use same VLAN to be shared in two context especially for the admin context ,which generally uses the management VLAN .
HTH,
Regards,
Parves

Do i need an audio interface? HELP!!!

Do i need an audio interface for logic to connect m audio speakers, a novation launchpad, and an akai mpk 25 keyboard?, Do i need an audio interface for logic to connect m audio speakers, a novation launchpad, and an akai mpk 25 keyboard?

Wow. You have in your hands some of the most advanced and powerful music production software on the planet. Surely you would want an audio interface to make it sing rather than limp along. How are you going to control momitor level, headphone level, etc. If you are going to connect a mic, it is essential (unles you are going to opt for a USB mic. There are very few pros who would choose that option). Any audio interface will sound better than the sound card inside the mac, but if you go for something like Native Instruments Komlete 6, it's affordable, user friendly and sounds amazing. There are other good ones, like Focusrite and MOTU, but M audio and the lower range of Presonus are not in the same league and the more advanced users would avoid them.
Hope this helps.

Interface for all cost object related transtions with third party system

Hello Guru's
I have one required for Functional Specications i.e, i need to create interface for all cost object related transtions with third party system for this purpose i need to create FS. any body please guide how to do..

Hi sreedhar royals
You need to check controlling tables you need to interact. (CSKS, COAS,....) then ask your abaper and project manager to guide you.
Regards

Best interface for home studio

I need the best interface for my macbook pro.....garage band.....thunderbolt......two in is enough

i certainly would not buy a used audio interface. you are asking for trouble. not worth the hassle or the doubt. expecially with some interent dealers offering 3 and 4 year waranty's - why would you want a used option?!? you will only regret it i am sure.
the m-audio profire 2626 is a good choice in my opinion at that price.
if you cant stretch that far then the m-audio profire 610 ia also a good choice - obviously limited in the ins and out though. there is also the M-audio fasttrack pro. worth looking at.
also look at the Alesis i/o range. on paper the i/o 26 is absolutely mint. i have just heard that the quality is questionable.

Active-Active firewall Admin context

Hi all,
My problem statement was:
my box is ASA 5585x, since this model have G0/0 - 0/7 sufficient interface, so i no need to do sub-interface for the context.
My question:
a. is it cumpulsary must have the admin context on A-A deployment?
Somehow i read on http://www.techrepublic.com/blog/networking/understand-the-pros-and-cons-of-using-cisco-asa-multiple-context-mode/1413
it mention that "The Admin Context is not restricted and can be used as any other security context."
Can i just exclude this admin context?
b. Refer to my config snipet, can i just allocate management interface to the admin context, instead of allocate it to any inside/outside interface?
c. Is it a good practice not to use the same interface to do LAN failover and stateful failover? I facing the problem of "ghost image" when i enable the multiple mode and both LAN/stateful failover on same interface.
thanks
Noel
P.S: Config snipet
admin-context admin
context admin
allocate-interface Management0/0
config-url disk0:/admin.cfg
join-failover-group 1
context public-internet
allocate-interface GigabitEthernet0/0
allocate-interface GigabitEthernet0/1
config-url disk0:/public-intenet.cfg
join-failover-group 2
context secure-voice
allocate-interface GigabitEthernet0/2
allocate-interface GigabitEthernet0/3
allocate-interface GigabitEthernet0/4
config-url disk0:/secure-voice.cfg
join-failover-group 1

Hi Varun,
Thanks for reply.
Appearnatly my ASA 5585x box facing "ghost image" on the home screen, where it cannot display the real time traffic at the panel.
My concern come to split my previous LAN/State failover interface to seperate interface then, just hope it can solve the problem.
I am now using ASDM 6.47, according to cisco statement it's been solve on this issue, but it seems still happen on my case.
Any command can let me troubleshoot on this?
Thanks
Noel

Need help with interface development

Hi i need help with requirement below with developing interface between or online order system and sap plz lemme know what is bapi i use for creating customer, update and assigining partner id to costumer.
SAP Development
1.     Using standards SAP functional module (with BAPI), create interface that will create/change Ordering party customer in SAP. Following fields are mandatory for customer creation:
     MANDT     Client
     VKORG     Sales organization
     VTWEG     Distribution Channel
     SPART     Division
     KDGRP     Customer Group (= ZORP)
     KUNNR     Customer number
     NAME1     Name 1
     NAME 2     Name 2 (if required)
     SORTL     Search term (short description)
     ZZALTKN     Search term 2 (old customer number)
     LAND1     Country
     ORT01     City
     PSTLZ      Zip Code
     REGIO      Region (state in USA)
     STRAS     Street
     TELF1     Primary telephone number
     TELFX     Primary Fax number
     ZZPRPLANS     Payment Plan
     CCINS     Payment card: Card type
     CCNUM     Payment cards: Card number
     CCDEF     Payment Card: Default Card Indicator
     ZBDGID     Customer Budget ID
     ZHOLD     Budget Hold indicator
     ZZCOSTCENT     Cost Center
2.     Upon successful customer creation system will issues S (success) message that customer has been created.
3.     New ordering party customer created in step ½, will have to be assigned as new partner to its belonging Sold-to/Ship-to customer. Use standard SAP customer functional module in order to perform this partner ID assignment. Partner ID for ordering party should be ZO.
1.7     Enhancement Functionality
Apart from creating a new interface to do the required functionality, the Order Create Interface also has to be changed to accommodate a field to pass the Ordering Party Number on the Order. The technicalities of how we are going to implement the interface will be laid out in the Tech Specs.
Thanks
in advance

You have double posted, please mark this one as "solved on my own" and refer to this thread
need help with interface development
Regards,
Rich Heilman

Assigning multiple interfaces for Oracle API Gateway (OAG)

We are deploying Oracle API Gateway to throttle our incoming API requests. We would like to keep the incoming external API requests separate from the internal configuration management so that they go through different interfaces when accessing the OAG server. This is mainly for security reasons so that the external people won’t have access to the interface used by internal operations team to manage OAG. Based on your experience, is there any standard best practice to accomplish this? We were thinking to perhaps use two of the server’s network interfaces with different IPs, one for the incoming API requests and the other for the internal admin management of OAG. But not sure if this is the best way to do what we need. We are aware of OAG's capability to support two separate ports to handle this situation, but would like a more secure set-up that could completely eliminate external access to the OAG management done by the IT team.
Would appreciate any thoughts on best practices used regarding multiple interfaces for OAG set-up. Thank you. Oracle Marketing Cloud.

You are on the right track.
Here is how you can achieve this:
You can use multiple network interfaces on the UNIX machine and setup networking/routing in such a way that all external traffic comes on on one card and is routed internally via a different card.
Segregate difference types of services (i.e to be used by external clients vs internal apps) into difference different "Service Groups". Have each of these service groups listen on different port + NIC card (under Listeners, you can define a port to list to list on a specific network address and port instead of *).
Setup additional protection for services that will be accessed by external clients. Use "Threatening Content " filter to protect your services.
Setup 2 way SSL for the interface that will be called by external clients. Setup a DN based authorization check if you want to have both authentication and authorization.
Hope this helps.
-Thanks,
Ankit Kumar

WEB Interface for Visual Admin

Hi,
I'm told there is a web interface for the visial admin tool which can be launched from the examples section of the j2ee home page.
In order to do this you must first deploy the tool.
I've search the net and marketplace for the tool to download and am unable to find it.
Has anyone else come across this before??
Thanks
Jim
Message was edited by: Jim OShea

Hi Jim,
Are you looking for the Netweaver Administrator?
Links:
http://service.sap.com/nwa ( you will need a SAP Service Marketplace user ID for this)
Introducing SAP NetWeaver Administrator -NWA
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/fc03a2a2-0a01-0010-b497-87518550e132
Blog : SAP Developer Network Blog: XI: NetWeaver Administrator - first look - Logs & Traces (by Michal Krawczyk)
/people/michal.krawczyk2/blog/2005/05/27/xi-netweaver-administrator--first-look--logs-traces
Cheers
Manish

Need to Assign read-only roles to a user in EP

Hello,
I am currently facing a situation wherin I need to assign read-only roles to a user. I need to assign the user admin, system admin and content admin roles to him, but all with read only permissions. Could someone kindly direct me as to how this can be done in EP7.0?
Thanks in advance and best regards,
Karthik.

Hi Karthik,
first, welcome on SDN!
About your question:
Ganesh already showed the way for the PCD. Anyhow, the content admin also can accedd the KM content (if installed); so for KM the settings have to be done, too, i.e. defining only read-permissions for this user on all repositories.
The same holds for System-Admin - Permissions - Portal Permissions, here under the different sections only read access permissions would have to be set.
Anyhow, some areas cannot be restricted in this way, for example the User Management. This could be done only via http://yourserver/useradmin and there via ROLE actions (and not per user).
Still, some areas certainly will stay problematic, so that one maybe would have to strip down the standard roles (create a delta link copy of the content and then remove the problematic areas).
Hope it helps
Detlev
PS: Please consider rewarding points for helpful answers on SDN. Thanks in advance!

CSCsw18455 - admin context enable mode credentials compared to system context DB

Hello Everyone,
I have a related question about this bug but for the "aaa accounting {serial | telnet | ssh | enable} console server-tag".
So for each context I need to check that accounting is enabled for serial, telnet, ssh and enable. If the ASA uses multiple contexts would those contexts have an individual "aaa accounting serial" command or would the serial accounting just be on the main (system) context?
As per doc, the command is done per context. So on an ASA with multiple contexts enabled and from a serial connection, I login automatically to the system or admin context, then “changeto context” and both of those sequences/contexts can have aaa accounting enabled?
Regards,
Juan Lombana

Hello Everyone,
I have a related question about this bug but for the "aaa accounting {serial | telnet | ssh | enable} console server-tag".
So for each context I need to check that accounting is enabled for serial, telnet, ssh and enable. If the ASA uses multiple contexts would those contexts have an individual "aaa accounting serial" command or would the serial accounting just be on the main (system) context?
As per doc, the command is done per context. So on an ASA with multiple contexts enabled and from a serial connection, I login automatically to the system or admin context, then “changeto context” and both of those sequences/contexts can have aaa accounting enabled?
Regards,
Juan Lombana

Admin Context - Do i need to assign interfaces for Mgmt?

Similar Messages

Maybe you are looking for