Approvals and routing

hi all,
how r u?i'm developing hr system, now the requirement is to develop an approval system integrated with the diffrent employee transaction(holiday,hiring,...)and enable to approve any transaction or reject it and to track the routing path of specific transaction by any user..any help regarding the structure..
best regards

The best approach here would be a custom Workflow.

Similar Messages

Have a 1st generation Apple TV, which is not showing as a device in iTunes. Had no problems with Apple TV until I changed from a Windows PC to an iMac. I have changed my IP address, sub mask address and router address in the Apple TV, Can anyone help?

I have a 1st generation apple TV, which was working perfectly until I changed from a Windows PC to a Imac. The Apple TV will not show in Itunes. I have changed the IP address, sub mask and Router IP address. Since changing I have switched everything of and on again. Can anyone help?

I have a new router and computer. I have just remembered that just before my old PC died on me, I transferred my iTunes library to a hard drive. I can't remember exactly just how I got my library back, but there are definately things in my library now that were in my library on my old PC! Hope this makes sense. What do you mean by same location? Do you mean in the same place in the house?
Another difference I have just thought of was my old router was connected directly to the computer bu I have not been able to do this with Sky as my PC is not near a phone socket! Will this make a difference?

New to FiOS, can I use my own modem and router

I saw several questions similar to mine, but none that I saw answered my question for my scenario. I am sorry if this is a duplicate. I am new to FiOS. I have no other services from Verizon and do not plan to get any. No phone, no television, nothing. Just Internet. God willing, the installation will take place in two days. My house already has coaxial cabling. I have my own cable modem, a SURFboard SB6121, which goes to my router, a TP Link TL-WR941ND. None of my equipment advertises that it is FiOS compatible. I've seen other people asking about using their own modem and router, but in those cases the scenario involved other bundled services, and I understand a FiOS router is necessary to forward ports to television, phone, and computers. However, in my very simple scenario, can the Verizon optical network terminal simply feed its output to my coax, from there to my modem, then router, then comptuers? Is there any reason that wouldn't work? Verizon technical support just gave me a machine that wanted to help me troubleshoot my Internet connection, and I couldn't get from there to a human. Thanks in advance for the help!

Banish the word and the device called "modem" from your home when using FiOS. FiOS does not use modems. Your cable modem is useless with FiOS. Do not plug it in. FiOS uses routers. The router connects to the ONT's WAN port using MoCA (coax) or Ethernet. The installer will enable one of the ONT's WAN ports. If you order 150Mbps or higher speeds, they will have to use Ethernet. For slower speeds, coax is the default. Many installers will use Ethernet if you ask nicely, but usually only if it isn't too much work. Make sure it's easy to connect a router to the ONT using Ethernet, and you should be okay. If Ethernet needs to be run through the walls, your best choice is get it done ahead of time. You can always call later and get the ONT's WAN port switched. The only routers available with a MoCA WAN port are the Verizon models. The Verizon routers are good devices for most users. People who like to tweak their networking gear don't like them as many advanced features are limited or locked down. You can't run any other router firmware on them. WiFi range is decent, but not great. I'm quite happy with my Quantum router. YMMV. If you get Ethernet WAN enabled, you can use any router you want. However, know that Verizon provides zero support for any other router. They won't even mention it as an option. That doesn't mean you can't use one, simply that you must do so without Verizon's help. There are reports that they won't even complete an install without one of their routers to verify service. If you don't use one of their routers, consider renting one for a month to complete the install or even buying a used one. If you own a Verizon router, you can install it if you ever suspect Verizon networking issues. This will allow you to call their support. This FAQ is very helpful:http://www.dslreports.com/faq/16077 Good Luck.

Acquired DVR, STB. and Router from Apartment cleanout; Return?

I am trying to do the right thing but poor customer service is not allowing me. I do IT work and received a DVR, STB, and Router from an apartment cleanout from a property owner. I am uncertain if the boxes are paid off or what, but rather than accept stolen property or flip them, I want to contact Verizon and have a return put out on the equipment. Hey maybe I'll get a credit or a few months of movies or something. But I certainly am not spending another minute sitting on hold to do this. I could not get through over 45 minutes yesterday. If I call and specify that I want to buy new service though, I get right through- only to be redirected anyways. Funny how it works. I love my FIOS service, always have, but to call them for anything requires taking a half day off of work. So, with that said- does anyone have contact info for equipment returns? Pittsburgh/Monroeville PA area. Again, if it's going to cost me anything, screw them. I will throw the stuff away as it should have been in the first place. If the equipment was paid for, it would be nice to have it activated to my account and no longer pay rental fees for my STB and DVR.
Message Edited by betteroff on 08-14-2009 06:47 AM

Don't know who to contact, but the video equipment is never considered paid off and remains forever Verizon property (that's how they make money on them). After a year I belive Verizon doesn't require the return of the router. They will not activate any STB without it being in their inventory and charging you a monthly fee.
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.

How to configure full tunnel with VPN client and router?

I know the concept of split tunnel....Is it possibe to configure vpn client and router full tunnel or instead of router ASA? I know filter options in concentrators is teher options in ISR routers or ASA?

I think it is possible. Following links may help you
http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a0080819289.shtml

Site-to-Site VPN btw Pix535 and Router 2811, can't get it work

Hi, every one, I spent couple of days trying to make a site-to-site VPN between PIX535 and router 2811 work but come up empty handed, I followed instructions here:
http://www.cisco.com/en/US/products/ps9422/products_configuration_example09186a0080b4ae61.shtml
#1: PIX config:
: Saved
: Written by enable_15 at 18:05:33.678 EDT Sat Oct 20 2012
PIX Version 8.0(4)
hostname pix535
interface GigabitEthernet0
description to-cable-modem
nameif outside
security-level 0
ip address X.X.138.132 255.255.255.0
ospf cost 10
interface GigabitEthernet1
description inside 10/16
nameif inside
security-level 100
ip address 10.1.1.254 255.255.0.0
ospf cost 10
access-list outside_access_in extended permit ip any any
access-list inside_nat0_outbound extended permit ip 10.1.0.0 255.255.0.0 10.20.0.0 255.255.0.0
access-list inside_nat0_outbound extended permit ip any 10.1.1.192 255.255.255.248
access-list outside_cryptomap_dyn_60 extended permit ip any 10.1.1.192 255.255.255.248
access-list outside_1_cryptomap extended permit ip 10.1.0.0 255.255.0.0 10.20.0.0 255.255.0.0
pager lines 24
ip local pool cnf-8-ip 10.1.1.192-10.1.1.199 mask 255.255.0.0
global (outside) 10 interface
global (outside) 15 1.2.4.5
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 15 10.1.0.0 255.255.0.0
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 X.X.138.1 1
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-MD5
crypto dynamic-map outside_dyn_map 20 set security-association lifetime seconds 28800
crypto dynamic-map outside_dyn_map 20 set security-association lifetime kilobytes 4608000
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA
crypto dynamic-map outside_dyn_map 40 set security-association lifetime seconds 28800
crypto dynamic-map outside_dyn_map 40 set security-association lifetime kilobytes 4608000
crypto dynamic-map outside_dyn_map 60 match address outside_cryptomap_dyn_60
crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-MD5 ESP-3DES-SHA ESP-DES-MD5 ESP-DES-SHA
crypto dynamic-map outside_dyn_map 60 set security-association lifetime seconds 28800
crypto dynamic-map outside_dyn_map 60 set security-association lifetime kilobytes 4608000
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set security-association lifetime seconds 28800
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set security-association lifetime kilobytes 4608000
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set peer X.X.21.29
crypto map outside_map 1 set transform-set ESP-DES-SHA
crypto map outside_map 1 set security-association lifetime seconds 28800
crypto map outside_map 1 set security-association lifetime kilobytes 4608000
crypto map outside_map 65534 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp identity hostname
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption des
hash sha
group 1
lifetime 86400
crypto isakmp policy 20
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 65535
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp nat-traversal 3600
group-policy GroupPolicy1 internal
group-policy cnf-vpn-cls internal
group-policy cnf-vpn-cls attributes
wins-server value 10.1.1.7
dns-server value 10.1.1.7 10.1.1.205
vpn-tunnel-protocol IPSec l2tp-ipsec
default-domain value x.com
username sean password U/h5bFVjXlIDx8BtqPFrQw== nt-encrypted
tunnel-group DefaultRAGroup ipsec-attributes
pre-shared-key secret1
radius-sdi-xauth
tunnel-group DefaultRAGroup ppp-attributes
authentication ms-chap-v2
tunnel-group cnf-vpn-cls type remote-access
tunnel-group cnf-vpn-cls general-attributes
address-pool cnf-8-ip
default-group-policy cnf-vpn-cls
tunnel-group cnf-vpn-cls ipsec-attributes
pre-shared-key secret2
isakmp ikev1-user-authentication none
tunnel-group cnf-vpn-cls ppp-attributes
authentication ms-chap-v2
tunnel-group X.X.21.29 type ipsec-l2l
tunnel-group X.X.21.29 ipsec-attributes
pre-shared-key SECRET
class-map inspection_default
match default-inspection-traffic
service-policy global_policy global
prompt hostname context
Cryptochecksum:9780edb09bc7debe147db1e7d52ec39c
: end
#2: Router 2811 config:
! Last configuration change at 09:15:32 PST Fri Oct 19 2012 by cnfla
! NVRAM config last updated at 13:45:03 PST Tue Oct 16 2012
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname LA-2800
crypto pki trustpoint TP-self-signed-1411740556
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1411740556
revocation-check none
rsakeypair TP-self-signed-1411740556
crypto pki certificate chain TP-self-signed-1411740556
certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31343131 37343035 3536301E 170D3132 31303136 32303435
30335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 34313137
34303535 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100F75F F1BDAD9B DE9381FD 165B5188 7EAF9685 CF15A317 1B424825 9C66AA28
C990B2D3 D69A2F0F D745DB0E 2BB4995D 73415AC4 F01B2019 84373199 C4BCF9E0
E599B86C 17DBDCE6 47EBE0E3 8DBC90B2 9B4E217A 87F04BF7 A182501E 24381019
A61D2C05 5404DE88 DA2A1ADC A81B7F65 C318B697 7ED69DF1 2769E4C8 F3449B33
35AF0203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 074C412D 32383030 301F0603 551D2304 18301680 14B56EEB
88054CCA BB8CF8E8 F44BFE2C B77954E1 52301D06 03551D0E 04160414 B56EEB88
054CCABB 8CF8E8F4 4BFE2CB7 7954E152 300D0609 2A864886 F70D0101 04050003
81810056 58755C56 331294F8 BEC4FEBC 54879FF5 0FCC73D4 B964BA7A 07D20452
E7F40F42 8B355015 77156C9F AAA45F9F 59CDD27F 89FE7560 F08D953B FC19FD2D
310DA96E A5F3E83B 52D515F8 7B4C99CF 4CECC3F7 1A0D4909 BD08C373 50BB53CC
659C4246 2CB7B79F 43D94D96 586F9103 9B4659B6 5C8DDE4F 7CC5FC68 C4AD197A 4EC322
            quit
crypto isakmp policy 1
authentication pre-share
crypto isakmp key SECRET address X.X.138.132 no-xauth
crypto ipsec transform-set la-2800-trans-set esp-des esp-sha-hmac
crypto map la-2800-ipsec-policy 1 ipsec-isakmp
description vpn ipsec policy
set peer X.X.138.132
set transform-set la-2800-trans-set
match address 101
interface FastEthernet0/0
description WAN Side
ip address X.X.216.29 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
no mop enabled
crypto map la-2800-ipsec-policy
interface FastEthernet0/1
description LAN Side
ip address 10.20.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex full
speed auto
no mop enabled
ip nat inside source route-map nonat interface FastEthernet0/0 overload
access-list 10 permit X.X.138.132
access-list 99 permit 64.236.96.53
access-list 99 permit 98.82.1.202
access-list 101 remark vpn tunnerl acl
access-list 101 remark SDM_ACL Category=4
access-list 101 remark tunnel policy
access-list 101 permit ip 10.20.0.0 0.0.0.255 10.1.0.0 0.0.255.255
access-list 110 deny   ip 10.20.0.0 0.0.0.255 10.1.0.0 0.0.255.255
access-list 110 permit ip 10.20.0.0 0.0.0.255 any
snmp-server community public RO
route-map nonat permit 10
match ip address 110
webvpn gateway gateway_1
ip address X.X.216.29 port 443
ssl trustpoint TP-self-signed-1411740556
inservice
webvpn install svc flash:/webvpn/svc.pkg
webvpn context gateway-1
title "b"
secondary-color white
title-color #CCCC66
text-color black
ssl authenticate verify all
policy group policy_1
   functions svc-enabled
   svc address-pool "WebVPN-Pool"
   svc keep-client-installed
   svc split include 10.20.0.0 255.255.0.0
default-group-policy policy_1
gateway gateway_1
inservice
end
#3: Test from Pix to router:
Active SA:    1
    Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1   IKE Peer: X.X.21.29
    Type    : user            Role    : initiator
    Rekey   : no              State   : MM_WAIT_MSG2
>>DEBUG:
Oct 22 12:07:14 pix535:Oct 22 12:20:28 EDT: %PIX-vpn-3-713902: IP = X.X.21.29, Removing peer from peer table failed, no match!
Oct 22 12:07:14 pix535 :Oct 22 12:20:28 EDT: %PIX-vpn-4-713903: IP = X.X.21.29, Error: Unable to remove PeerTblEntry
#4: test from router to pix:
LA-2800#sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst             src             state          conn-id slot status
X.X.138.132 X.X.216.29 MM_KEY_EXCH       1017    0 ACTIVE
>>debug
LA-2800#ping 10.1.1.7 source 10.20.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.7, timeout is 2 seconds:
Packet sent with a source address of 10.20.1.1
Oct 22 16:24:33.945: ISAKMP:(0): SA request profile is (NULL)
Oct 22 16:24:33.945: ISAKMP: Created a peer struct for X.X.138.132, peer port 500
Oct 22 16:24:33.945: ISAKMP: New peer created peer = 0x488B25C8 peer_handle = 0x80000013
Oct 22 16:24:33.945: ISAKMP: Locking peer struct 0x488B25C8, refcount 1 for isakmp_initiator
Oct 22 16:24:33.945: ISAKMP: local port 500, remote port 500
Oct 22 16:24:33.945: ISAKMP: set new node 0 to QM_IDLE
Oct 22 16:24:33.945: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 487720A0
Oct 22 16:24:33.945: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Oct 22 16:24:33.945: ISAKMP:(0):found peer pre-shared key matching 70.169.138.132
Oct 22 16:24:33.945: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Oct 22 16:24:33.945: ISAKMP:(0): constructed NAT-T vendor-07 ID
Oct 22 16:24:33.945: ISAKMP:(0): constructed NAT-T vendor-03 ID
Oct 22 16:24:33.945: ISAKMP:(0): constructed NAT-T vendor-02 ID
Oct 22 16:24:33.945: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Oct 22 16:24:33.945: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Oct 22 16:24:33.945: ISAKMP:(0): beginning Main Mode exchange
Oct 22 16:24:33.945: ISAKMP:(0): sending packet to X.X.138.132 my_port 500 peer_port 500 (I) MM_NO_STATE
Oct 22 16:24:33.945: ISAKMP:(0):Sending an IKE IPv4 Packet.
Oct 22 16:24:34.049: ISAKMP (0:0): received packet from X.X.138.132 dport 500 sport 500 Global (I) MM_NO_STATE
Oct 22 16:24:34.049: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Oct 22 16:24:34.049: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2
Oct 22 16:24:34.049: ISAKMP:(0): processing SA payload. message ID = 0
Oct 22 16:24:34.049: ISAKMP:(0): processing vendor id payload
Oct 22 16:24:34.049: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Oct 22 16:24:34.049: ISAKMP:(0): vendor ID is NAT-T v2
Oct 22 16:24:34.049: ISAKMP:(0): processing vendor id payload
Oct 22 16:24:34.049: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch
Oct 22 16:24:34.053: ISAKMP:(0):found peer pre-shared key matching 70.169.138.132
Oct 22 16:24:34.053: ISAKMP:(0): local preshared key found
Oct 22 16:24:34.053: ISAKMP : Scanning profiles for xauth ...
Oct 22 16:24:34.053: ISAKMP:(0):Checking ISAKMP transform 1 against priority 1 policy
Oct 22 16:24:34.053: ISAKMP:      encryption DES-CBC
Oct 22 16:24:34.053: ISAKMP:      hash SHA
Oct 22 16:24:34.053: ISAKMP:      default group 1
Oct 22 16:24:34.053: ISAKMP:      auth pre-share
Oct 22 16:24:34.053: ISAKMP:      life type in seconds
Oct 22 16:24:34.053: ISAKMP:      life duration (VPI) of 0x0 0x1 0x51 0x80
Oct 22 16:24:34.053: ISAKMP:(0):atts are acceptable. Next payload is 0
Oct 22 16:24:34.053: ISAKMP:(0):Acceptable atts:actual life: 0
Oct 22 16:24:34.053: ISAKMP:(0):Acceptable atts:life: 0
Oct 22 16:24:34.053: ISAKMP:(0):Fill atts in sa vpi_length:4
Oct 22 16:24:34.053: ISAKMP:(0):Fill atts in sa life_in_seconds:86400
Oct 22 16:24:34.053: ISAKMP:(0):Returning Actual lifetime: 86400
Oct 22 16:24:34.053: ISAKMP:(0)::Started lifetime timer: 86400.
Oct 22 16:24:34.053: ISAKMP:(0): processing vendor id payload
Oct 22 16:24:34.053: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Oct 22 16:24:34.053: ISAKMP:(0): vendor ID is NAT-T v2
Oct 22 16:24:34.053: ISAKMP:(0): processing vendor id payload
Oct 22 16:24:34.053: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch
Oct 22 16:24:34.053: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Oct 22 16:24:34.053: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2
Oct 22 16:24:34.057: ISAKMP:(0): sending packet to X.X.138.132 my_port 500 peer_port 500 (I) MM_SA_SETUP
Oct 22 16:24:34.057: ISAKMP:(0):Sending an IKE IPv4 Packet.
Oct 22 16:24:34.057: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Oct 22 16:24:34.057: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3
Oct 22 16:24:34.181: ISAKMP (0:0): received packet from X.X.138.132 dport 500 sport 500 Global (I) MM_SA_SETUP
Oct 22 16:24:34.181: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Oct 22 16:24:34.181: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4
Oct 22 16:24:34.181: ISAKMP:(0): processing KE payload. message ID = 0
Oct 22 16:24:34.217: ISAKMP:(0): processing NONCE payload. message ID = 0
Oct 22 16:24:34.217: ISAKMP:(0):found peer pre-shared key matching X.X.138.132
Oct 22 16:24:34.217: ISAKMP:(1018): processing vendor id payload
Oct 22 16:24:34.217: ISAKMP:(1018): vendor ID is Unity
Oct 22 16:24:34.217: ISAKMP:(1018): processing vendor id payload
Oct 22 16:24:34.217: ISAKMP:(1018): vendor ID seems Unity/DPD but major 55 mismatch
Oct 22 16:24:34.217: ISAKMP:(1018): vendor ID is XAUTH
Oct 22 16:24:34.217: ISAKMP:(1018): processing vendor id payload
Oct 22 16:24:34.217: ISAKMP:(1018): speaking to another IOS box!
Oct 22 16:24:34.221: ISAKMP:(1018): processing vendor id payload
Oct 22 16:24:34.221: ISAKMP:(1018):vendor ID seems Unity/DPD but hash mismatch
Oct 22 16:24:34.221: ISAKMP:received payload type 20
Oct 22 16:24:34.221: ISAKMP:received payload type 20
Oct 22 16:24:34.221: ISAKMP:(1018):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Oct 22 16:24:34.221: ISAKMP:(1018):Old State = IKE_I_MM4 New State = IKE_I_MM4
Oct 22 16:24:34.221: ISAKMP:(1018):Send initial contact
Oct 22 16:24:34.221: ISAKMP:(1018):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Oct 22 16:24:34.221: ISAKMP (0:1018): ID payload
next-payload : 8
type         : 1
address      : X.X.216.29
protocol     : 17
port         : 500
length       : 12
Oct 22 16:24:34.221: ISAKMP:(1018):Total payload length: 12
Oct 22 16:24:34.221: ISAKMP:(1018): sending packet to X.X.138.132 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Oct 22 16:24:34.221: ISAKMP:(1018):Sending an IKE IPv4 Packet.
Oct 22 16:24:34.225: ISAKMP:(1018):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Oct 22 16:24:34.225: ISAKMP:(1018):Old State = IKE_I_MM4 New State = IKE_I_MM5
Oct 22 16:24:38.849: ISAKMP:(1017):purging node 198554740
Oct 22 16:24:38.849: ISAKMP:(1017):purging node 812380002
Oct 22 16:24:38.849: ISAKMP:(1017):purging node 773209335..
Success rate is 0 percent (0/5)
LA-2800#
Oct 22 16:24:44.221: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH...
Oct 22 16:24:44.221: ISAKMP (0:1018): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Oct 22 16:24:44.221: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH
Oct 22 16:24:44.221: ISAKMP:(1018): sending packet to X.X.138.132 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Oct 22 16:24:44.221: ISAKMP:(1018):Sending an IKE IPv4 Packet.
Oct 22 16:24:44.317: ISAKMP (0:1018): received packet from X.X.138.132 dport 500 sport 500 Global (I) MM_KEY_EXCH
Oct 22 16:24:44.317: ISAKMP:(1018): phase 1 packet is a duplicate of a previous packet.
Oct 22 16:24:44.321: ISAKMP:(1018): retransmission skipped for phase 1 (time since last transmission 96)
Oct 22 16:24:48.849: ISAKMP:(1017):purging SA., sa=469BAD60, delme=469BAD60
Oct 22 16:24:52.313: ISAKMP (0:1018): received packet from X.X.138.132 dport 500 sport 500 Global (I) MM_KEY_EXCH
Oct 22 16:24:52.313: ISAKMP:(1018): phase 1 packet is a duplicate of a previous packet.
Oct 22 16:24:52.313: ISAKMP:(1018): retransmitting due to retransmit phase 1
Oct 22 16:24:52.813: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH...
Oct 22 16:24:52.813: ISAKMP (0:1018): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Oct 22 16:24:52.813: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH
Oct 22 16:24:52.813: ISAKMP:(1018): sending packet to X.X138.132 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Oct 22 16:24:52.813: ISAKMP:(1018):Sending an IKE IPv4 Packet.
Oct 22 16:24:52.913: ISAKMP:(1018): phase 1 packet is a duplicate of a previous packet.
Oct 22 16:24:52.913: ISAKMP:(1018): retransmission skipped for phase 1 (time since last transmission 100)
Oct 22 16:25:00.905: ISAKMP (0:1018): received packet from X.X.138.132 dport 500 sport 500 Global (I) MM_KEY_EXCH
Oct 22 16:25:00.905: ISAKMP: set new node 422447177 to QM_IDLE
Oct 22 16:25:03.941: ISAKMP:(1018):SA is still budding. Attached new ipsec request to it. (local 1X.X.216.29, remote X.X.138.132)
Oct 22 16:25:03.941: ISAKMP: Error while processing SA request: Failed to initialize SA
Oct 22 16:25:03.941: ISAKMP: Error while processing KMI message 0, error 2.
Oct 22 16:25:12.814: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH...
Oct 22 16:25:12.814: ISAKMP (0:1018): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Oct 22 16:25:12.814: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH
Oct 22 16:25:12.814: ISAKMP:(1018): sending packet to X.X.138.132 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Oct 22 16:25:12.814: ISAKMP:(1018):Sending an IKE IPv4 Packet.
Oct 22 16:25:22.814: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH...
Oct 22 16:25:22.814: ISAKMP (0:1018): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Oct 22 16:25:22.814: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH
Oct 22 16:25:22.814: ISAKMP:(1018): sending packet to X.X.138.132 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Oct 22 16:25:22.814: ISAKMP:(1018):Sending an IKE IPv4 Packet.
Oct 22 16:25:32.814: ISAKMP:(1018): retransmitting phase 1 MM_KEY_EXCH...
Oct 22 16:25:32.814: ISAKMP:(1018):peer does not do paranoid keepalives.
Oct 22 16:25:32.814: ISAKMP:(1018):deleting SA reason "Death by retransmission P1" state (I) MM_KEY_EXCH (peer 70.169.138.132)
Oct 22 16:25:32.814: ISAKMP:(1018):deleting SA reason "Death by retransmission P1" state (I) MM_KEY_EXCH (peer 70.169.138.132)
Oct 22 16:25:32.814: ISAKMP: Unlocking peer struct 0x488B25C8 for isadb_mark_sa_deleted(), count 0
Oct 22 16:25:32.814: ISAKMP: Deleting peer node by peer_reap for X.X.138.132: 488B25C8
Oct 22 16:25:32.814: ISAKMP:(1018):deleting node 1112432180 error FALSE reason "IKE deleted"
Oct 22 16:25:32.814: ISAKMP:(1018):deleting node 422447177 error FALSE reason "IKE deleted"
Oct 22 16:25:32.814: ISAKMP:(1018):deleting node -278980615 error FALSE reason "IKE deleted"
Oct 22 16:25:32.814: ISAKMP:(1018):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Oct 22 16:25:32.814: ISAKMP:(1018):Old State = IKE_I_MM5 New State = IKE_DEST_SA
Oct 22 16:26:22.816: ISAKMP:(1018):purging node 1112432180
Oct 22 16:26:22.816: ISAKMP:(1018):purging node 422447177
Oct 22 16:26:22.816: ISAKMP:(1018):purging node -278980615
Oct 22 16:26:32.816: ISAKMP:(1018):purging SA., sa=487720A0, delme=487720A0
****** The PIX is also used    VPN client access , such as Cicso VPN client 5.0, working fine ; Router is used as SSL VPN server, working too
I know there are lots of data here, hopefully these data may be useful for   diagnosis purpose.
Any suggestions and advices are greatly appreciated.
Sean

Hi Sean,
Current configuration:
On the PIX:
crypto isakmp policy 5
      authentication pre-share
      encryption 3des
      hash sha
      group 2
      lifetime 86400
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set peer X.X.21.29
crypto map outside_map 1 set transform-set ESP-DES-SHA
crypto map outside_map 1 set security-association lifetime seconds 28800
crypto map outside_map 1 set security-association lifetime kilobytes 4608000
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
access-list outside_1_cryptomap extended permit ip 10.1.0.0 255.255.0.0 10.20.0.0 255.255.0.0
tunnel-group X.X.21.29 type ipsec-l2l
tunnel-group X.X.21.29 ipsec-attributes
     pre-shared-key SECRET
On the Router:
crypto isakmp policy 1
      authentication pre-share
crypto map la-2800-ipsec-policy 1 ipsec-isakmp
      description vpn ipsec policy
      set peer X.X.138.132
      set transform-set la-2800-trans-set
      match address 101
access-list 101 permit ip 10.20.0.0 0.0.0.255 10.1.0.0 0.0.255.255
crypto ipsec transform-set la-2800-trans-set esp-des esp-sha-hmac
crypto isakmp key SECRET address X.X.138.132 no-xauth
Portu.
Please rate any helpful posts
Message was edited by: Javier Portuguez

Production Order for a material without BOM and Routing

Is it possible to create a production order for a given material without routing and BOM, I know we can
create a production order for a material without a BOM (with a default routing) just wanted to check with
the above criteria
Thanks in Advance!!

Members:
Thank you for your valuable replies and time
Santosh:
Tried what you have mentioned, but system still picks up a default routing
Kaushik:
Maintained Default values in OPJG for the given order type, but system still picks up
default routing
Mangalraj:
have no issue in creating a production order without a BOM, but I am trying to see
is there a way where I can create a production order without a BOM and routing (not
even default operation )
Any suggestions on how to create a production order for a material without a BOM
and routing (not even default one )

ATP and Route Determination at Storage Location Level

Hi Experts,
I'm working on a project currently and one of the requirements is to have ATP and Route Determination at Storage Location level. I know SAP standard for this is at plant level but was wondering if anyone has had this requirement before, and if so what course of action they took to solve this issue.
Any help would be greatly appreciated.
Thanks,
Mark

Hi Mark,
in my previous project we have a customized table created for all the route determination and used mv45afzz move field to vbap to determined the route.
not sure if there is a easier solution but at least it is doable through customization for sure.

EBS Bursting and routing AR Statements/Invoices to email/print

Hi
I've just read Gareth Roberts' really cool blog on a simple method to process AR statements (or any other Concurrent Request report) in XML.
http://garethroberts.blogspot.com/2008/01/beautiful-statements-in-1-easy-step.html
I'm looking for direction on how to burst the XMLP output and route the individual customer documents to email and / or printers.
Bursting is quite well descriped in the stand-alone BIP with the control file but I see no documentation of doing this with Concurrent Manager - (Nor any of the other XDOxxxxx concurrent programmes!!)
I've started looking at the XDOBURSTRPT concurrent programme but without documentation have not yet had any success.
Should XDOBURSTRPT be called with a fnd_request.submit_request directly after the request_submit for XDOREPPB?
How do these things hang together?
Thanks for any help.
Mike Mac

Hi Gareth
With your and Tim's help - just revisited his blog on bursting at
http://blogs.oracle.com/xmlpublisher/2007/04/05#a189 - I'm now getting close.
The fundamental change that has happened since Tim's blog is that XMLP now allows for the accessing of the RTF template file from the XMLP Responsibility Data Definintion upload (of the control file onto the Data definition).
But there's absolutely no documentation, that I can find, for the updated syntax of the control file itself where reference is made to the RTF Template also being managed by Concurrent Manager / Template Manager - instead of having to place the RTF on the server file system, and directly reference it in a hard-coded path.
A secondary question is how to access alternate ".rtf" formatting templates within one Bursting Control File (different templates for different conditions).
Tim also mentions the referencing of CUPS defined printers by name, and the ability to issue a regular unix lp command - its this documented anywhere?
Is there a new comprehensive reference for the 5.6.3 Bursting Control File and its use with Concurent Manager?
Thanks in anticipation
Mike

Bill and Routing Interface concurrent program is not processing component

Hi All,
While running Bill and Routing Interface concurrent program,not processing the component item(Line Item) from bom_inventory_comps_interface,still it show process flag as 1. where as billing item(Header Item) is successfully done..i have tried with all the option by giving component sequence id and batch id still it is not processing component item..
Is it recommendable to give bill sequence id and component sequence id in interface table using bom_inventory_component_s sequence..
I will be very pleased if i listen from u guys... Plz help me in resolving this issue..
My Header Insert Stmt..
INSERT INTO apps.bom_bill_of_mtls_interface@system_link_visma
(assembly_item_id, organization_id,
alternate_bom_designator, last_update_date,
last_updated_by, creation_date, created_by,
revision, item_number, item_description,
implementation_date, transaction_type,
process_flag, assembly_type, batch_id
VALUES (l_inv_item_id, l_org_id,
NULL, SYSDATE,
1318, SYSDATE, 1318,
l_revision, l_item_num, l_description,
SYSDATE, 'CREATE',
1, 1, 10003535
Component Insert stmt
INSERT INTO apps.bom_inventory_comps_interface@system_link_visma
(operation_seq_num, component_item_id,
item_num, basis_type, component_quantity,
auto_request_material, effectivity_date,
disable_date, planning_factor,
component_yield_factor,
enforce_int_requirements,
include_in_cost_rollup, wip_supply_type,
supply_subinventory, supply_locator_id,
check_atp, optional,
mutually_exclusive_options,
low_quantity, high_quantity,
so_basis, shipping_allowed,
include_on_ship_docs, required_to_ship,
required_for_revenue, component_remarks,
transaction_type, process_flag,
assembly_item_id, component_item_number,
batch_id,component_sequence_id
VALUES (l_operation_seq, l_comp_item_id,
cur2.item_sequence, l_basis, cur2.quantity,
l_auto_request_mtls, cur2.from_date,
cur2.TO_DATE, cur2.planning_factor,
cur2.yield_factor,
l_enforce_int_requirements,
l_include_in_cost_rollup, l_supply_type,
l_supply_subinventory, NULL,
l_check_atp, l_optional,
l_mutually_exclusive_options,
cur2.minimum_quantity, cur2.maximum_quantity,
l_sale_order_basis, l_shippable_flag,
l_include_on_ship_docs, l_required_to_ship,
l_required_for_revenue, cur2.comments,
'CREATE', 1,
l_inv_item_id, l_comp_item_num,
10003535,apps.bom_inventory_components_s.nextval@system_link_visma
For Subcomponent Insert Stmt
INSERT INTO apps.bom_sub_comps_interface@system_link_visma
(substitute_component_id,
substitute_item_quantity,
assembly_item_id, component_item_id,
operation_seq_num, organization_id,
substitute_comp_number,
component_item_number,
assembly_item_number,
transaction_type, process_flag,
enforce_int_requirements,
effectivity_date,component_sequence_id,batch_id
VALUES (l_sub_comp_item_id,
cur3.quantity,
l_inv_item_id, l_comp_item_id,
cur2.operation_sequence, l_org_id,
l_sub_comp_item_num,
l_comp_item_num,
l_item_num,
'CREATE', 1,
l_enforce_int_requirements,
SYSDATE,apps.bom_inventory_components_s.currval@system_link_visma,10003535
Thanks
Raman Sharma
Edited by: 929841 on May 4, 2012 12:28 AM
Edited by: 929841 on May 4, 2012 2:58 AM

You need to populate the organization_id or organization_code in bom_inventory_comps_interface.
Here is a minimal insert
INSERT INTO bom.bom_inventory_comps_interface
            (operation_seq_num, last_update_date, last_updated_by,
             creation_date, created_by, process_flag, transaction_type,
             bom_item_type,
             effectivity_date, organization_code, assembly_item_number,
             item_num, component_item_number, component_quantity
     VALUES (1                                                   -- op_seq_num
             ,SYSDATE, 1433
             ,SYSDATE, 1433, 1                                  -- process_flag
             ,'Create',
             4 -- bom_item_type 1 Model; 2 Option class; 3 Planning; 4 Standard; 5 Product family
             ,SYSDATE - 1, 'PUB', 'SSGPARENT1'          -- assembly_item_number
             ,10                                                     --item_num
             , 'SSGCOMP1'                           -- component_item_number
             , 10                                          --qty
            )Sandeep Gandhi

BT Infinity - Modem and Router in separate rooms?

My house is somewhat unusual in that the master socket is in the loft. It has a faceplate splitter into which all the phone extensions and the ADSL cable connect. The plasterboard on the bedroom ceilings is metal backed and when I tried locating the Home Hub in the loft the WiFi reception was very poor. To get round this I extended the ADSL line from the front of the master socket using the CAT5 that runs from the loft into most of the rooms. This set-up is currently working great and the WiFi and ADSL performance are very good indeed.
What's I'd like to know is will I be able to use a similar set-up with Infinity? Ie extend the 'Infinity' side of the new master socket over CAT5 to the modem and router one floor below or (preferably) co-locate the Infinity modem with the master socket and run the modem - Home Hub connection over CAT5? The red BT Infinity socket on the back of Home Hub looks to be a regular RJ45 connection so I'm hoping the latter approach will work just fine, ie modem in the loft and Hub one floor below via CAT5.
Any comments would be appreciated.
Solved!
Go to Solution.

The first suggestion is fine, but you will have to use a lead that has RJ11 heads on both ends. The DSL port on the Openreach modem will only accept an RJ11 head. (The DSL port on the new master socket will accept both RJ11 / 45. Your latter suggestion is fine and seems to be less hassle of the two. I've done it for several customers who've had LAN connections throughout their home.

Branch office setup with L3 switch and router with IOS security

Hello,
I am in the process of putting together a small branch office network and I am in need of some design advise. The network will support about 10-15 workstations/phones, 3-4 printers, and 4-5 servers. In addition we will eventually have up to 25-30 remote users connecting to the servers via remote access VPN, and there will also be 2-3 site-to-site IPSec tunnels to reach other branches.
I have a 2911 (security bundle) router and 3560 IP Base L3 switch to work with. I have attached a basic diagram of my topology. My initial design plan for the network was to setup separate VLANs for workstation, phone, printer, and server traffic. The 3560 would then be setup with SVIs to perform routing between VLANs. The port between the router and switch would be setup as a routed port, and static routes would be applied on the switch and router as necessary. The thought behind this was that I'd be utilizing the switch backplane for VLAN routing instead instead of doing router-on-a-stick.
Since there is no firewall between the switch and router my plan was to setup IOS firewalling on the router. From what I am reading ZBF is my best option for this. What I was hoping for was a way to set custom policies for each VLAN, but it seems that zones are applied per interface. Since the interface between the router and switch is a routed interface, not a trunk/subinterface(s), it doesn't seem like there would be a way for me to use ZBF to control traffic on different VLANs. From what I am gathering I would have to group all of my internal network into one zone, or I would have to scrap L3 switching all together and do router-on-a-stick if I want to be able to set separate policies for each VLAN. Am I correct in my thinking here?
I guess what I am getting at is that I really don't want to do router-on-a-stick if I have a nice switch backplane to do all of the internal routing. At the same time I obviously need some kind of firewalling done on the router, and since different VLANs have different security requirements the firewalling needs to be fairly granular.
If I am indeed correct in the above thinking what would be the best solution for my scenario? That is, how can I setup this network so that I am utilizing the switch to do L3 routing while also leveraging the firewall capabilities of IOS security?
Any input would be appreciated.
Thanks,
Austin

Thanks for the input.
1. I agree, since I have only three to four printers, they need not be in a separate VLAN. I simply was compartmentalizing VLANs by function when I initially came up with the design.
2. Here's a little more info on the phone situation. The phones are VoIP. The IP PBX is on premise, but they are currently on a completely separate ISP/network. The goal in the future is to converge the data and voice networks and setup PBR/route maps to route voice traffic out the voice ISP and data traffic out the other ISP. This leads up to #3.
3. The reason a router was purchased over a firewall was that ASA's cannot handle routing and dual ISPs very well. PBR is not supported at all on an ASA, and dual ISPs can only be setup in an active/standby state. Also, an ASA Sec+ does not have near the VPN capabilities that the 2911 security does. The ASA Sec+ would support only 25 concurrent IPSec connections while the 2911 security is capable of doing an upwards of 200 IPSec connections.
Your point about moving the SVI's to a firewall to perform filtering between VLANs makes sense, however, wouldn't this be the same thing as creating subinterfaces on a router? In both cases you are moving routing from the switch backplane to the firewall/routing device, which is what I am trying to avoid.

I can't print using airprint from my iPhone 4. Everything with the phone and the printer and router are up to date. I can print from my iPad 2 with no problems. What's wrong with the iPhone 4?

I can't print using airprint from my iPhone 4. Everything with the phone and the printer and router are up to date. I can print from my iPad 2 with no problems. What's wrong with the iPhone 4?

I just wanted to leave a note that it's working now. I'm not sure if it was the latest iTunes update that got it working or that i decided to start a new library instead of using the one i had backed up on Windows 8 (it didn't occur to me to check using the old library when i re-installed iTunes). But if anyone is having this problem, it might be worth trying again with a new installation of iTunes to see if the latest update works for you, and if not, try using a fresh library instead of a backup (by fresh library i mean discard your old library completely and start a new library, not just restore as new iPhone, a whole new library).

Looking for BOM and Routing objects created with a BAPI

(I ran this one up the flagpole in the data forum and didn't get any responses. Maybe someone here has see this phenomon?)
I'm invoking BAPI_MATERIAL_BOM_GROUP_CREATE from an external Java program. I believe my code matches the example I find here and in the SAP documentation (transaction BAPI). When it finishes, I get a successful return (type=I, number=000), and a message of "BOMGroup 00000070/TAM1/1 has been created. External reference:" But I can't find anything back on the SAPGUI - the material number still says it has no BOM (on CS02); I don't see any new BOM Groups (on CS06). By the way, the "00000070" number seems to be assigned by SAP: I t increments each time I run my test, so I must be doing something; the TAM1 in that message is the plant, and the "1" is the BOM Usage I assign in my BAPI (both in the BOMGroup structure and the MATERIALRELATIONS structure). I do a commit transaction at the end too, although the BAPI to create the material created it without me doing a commit, so I don't think that was necessary.
(Update since I posted this on the other forum: I tried to create a routing and have the same result - 000 message number, and a message including an SAP-assigned number, making me think I've created an object, but I don't see it anywhere. Any idea which tables I can look at to find them, and maybe see what's missing (e.g., with SE12 or some such)?)
Any thoughts on what I AM creating? Or some little thing I'm missing here?
Thanks for any insight!
Thomas.

check the post:
BOM and Routing with Dependencies
-Murugesh AS

TS1424 Whenever I try to update an app or download a new one I get an error message stating "unable to connect to iTunes"....I have reset my iPad and router but still get the error message

Whenever I try to update any apps or download a new one I get the following error message "unable to connect to iTunes". I have reset my iPad and router and also done the same with my iPod but get the same issue.....need some support please?

There are a number of threads from other people reporting the same iTunes connection issue, it looks like there might be a problem at Apple's end - but you could try logging out of your account on the iPad by tapping on your id in Settings > Store and then log back in and see if it then works, but it probably won't until Apple's fixed it

Approvals and routing

Similar Messages

Maybe you are looking for