ASA5520 ACL established connections problem

Hello,
I have one ASA5520 with version 8.4(3), and a few ACL rules defined. One ACL is permit traffic from one interface(EXT_SERVICE) to another interface(DMZ_SERVICE), if i change that rule to deny traffic, all new connections that match the rule is denied, but no the established connectios. ¿Why the established connections can pass the deny rule? ¿How I can change that? I need create a ACL with deny type and stop all comunications that is running and match the deny rule.
Thanks for help!!
Running-config of my ASA5520:
ciscoasa# show run
: Saved
ASA Version 8.4(3)
hostname ciscoasa
enable password 8ay2wjIyt7RRXU24 encrypted passwd 2wFQnbNIdI.2KYtU encrypted names !
interface GigabitEthernet0/0
description TRUNK 0A 1/2
channel-group 1 mode active
no nameif
no security-level
no ip address
interface GigabitEthernet0/1
description TRUNK 0A 2/2
channel-group 1 mode active
no nameif
no security-level
no ip address
interface GigabitEthernet0/2
description TRUNK 1A 1/2
channel-group 1 mode active
no nameif
no security-level
no ip address
interface GigabitEthernet0/1
description TRUNK 0A 2/2
channel-group 1 mode active
no nameif
no security-level
no ip address
interface GigabitEthernet0/2
description TRUNK 1A 1/2
channel-group 2 mode active
no nameif
no security-level
no ip address
interface GigabitEthernet0/3
description TRUNK 1A 2/2
channel-group 2 mode active
no nameif
no security-level
no ip address
interface Management0/0
nameif management-ha
security-level 100
ip address 192.168.199.223 255.255.255.0 !
interface Port-channel1
nameif TRUNK_0A
security-level 0
no ip address
interface Port-channel1.21
vlan 21
nameif DMZ_EXPLO
security-level 70
ip address 192.168.21.223 255.255.255.0 !
interface Port-channel1.31
vlan 31
nameif EXT_EXPLO
security-level 0
ip address 192.168.3.223 255.255.255.0 !
interface Port-channel2
nameif TRUNK_1A
security-level 0
no ip address
interface Port-channel2.11
vlan 11
nameif INTERNA
security-level 90
ip address 192.168.11.223 255.255.255.0 !
interface Port-channel2.22
vlan 22
nameif DMZ_SERVICE
security-level 70
ip address 192.168.22.223 255.255.255.0 !
interface Port-channel2.32
vlan 32
nameif EXT_SERVICE
security-level 0
ip address 192.168.1.151 255.255.255.0 !
boot system disk0:/asa843-k8.bin
ftp mode passive
clock timezone CEST 1
clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 3:00 object network GW-SERVICE host 192.168.1.200 description Xircom access-list DMZ_SERVICE_access_out extended permit ip any any inactive access-list DMZ_SERVICE_access_out extended deny ip any any access-list DMZ_SERVICE_access_in extended permit ip any any inactive access-list DMZ_SERVICE_access_in extended deny ip any any access-list EXT_SERVICE_access_in extended permit ip any any inactive access-list EXT_SERVICE_access_in extended deny ip any any access-list EXT_SERVICE_access_out extended permit ip any any inactive access-list EXT_SERVICE_access_out extended deny ip any any access-list global_mpc extended permit ip any any access-list default standard deny any pager lines 24 logging enable logging asdm informational mtu management-ha 1500 mtu TRUNK_0A 1500 mtu DMZ_EXPLO 1500 mtu EXT_EXPLO 1500 mtu TRUNK_1A 1500 mtu INTERNA 1500 mtu DMZ_SERVICE 1500 mtu EXT_SERVICE 1500 no failover icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-647.bin no asdm history enable arp timeout 14400 access-group DMZ_SERVICE_access_in in interface DMZ_SERVICE access-group DMZ_SERVICE_access_out out interface DMZ_SERVICE access-group EXT_SERVICE_access_in in interface EXT_SERVICE access-group EXT_SERVICE_access_out out interface EXT_SERVICE route EXT_SERVICE 0.0.0.0 0.0.0.0 192.168.1.200 1 timeout xlate 3:00:00 timeout pat-xlate 0:00:30 timeout conn 0:05:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 timeout floating-conn 0:00:00 dynamic-access-policy-record DfltAccessPolicy user-identity default-domain LOCAL http server enable http 192.168.1.0 255.255.255.0 EXT_SERVICE no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ntp server 84.88.69.32 source EXT_SERVICE prefer ntp server 130.206.3.166 source EXT_SERVICE prefer ntp server 93.92.239.129 source EXT_SERVICE ntp server 212.36.75.245 source EXT_SERVICE
webvpn
class-map global-class
match access-list global_mpc
match default-inspection-traffic
policy-map type inspect dns preset_dns_map parameters
message-length maximum client auto
message-length maximum 512
policy-map type inspect im im
parameters
match protocol msn-im yahoo-im
drop-connection log
policy-map type inspect ipv6 ipv6
parameters
match header routing-type range 0 255
policy-map global-policy
class global-class
inspect ctiqbe
inspect dcerpc
inspect dns
inspect esmtp
inspect ftp
inspect h323 h225
inspect h323 ras
inspect http
inspect icmp
inspect icmp error
inspect ils
inspect ip-options
inspect ipsec-pass-thru
inspect mgcp
inspect netbios
inspect pptp
inspect rsh
inspect rtsp
inspect sip
inspect skinny
inspect snmp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect waas
inspect xdmcp
class class-default
inspect ftp
service-policy global-policy global
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:23a90a41872bc184caa246b8848b4183
: end
ciscoasa#

Ok Pavel,
     I am try to do that you said, but it doesn't work as I spected, sorry for my error and please if you know a document to explain me how do that better than I was do please let me it and I will try
I have these rules:
access-list DMZ_SERVICE_access_out extended permit tcp any any eq ssh
access-list DMZ_SERVICE_access_out extended deny ip any any
access-list DMZ_SERVICE_access_in extended permit tcp any any eq ssh
access-list DMZ_SERVICE_access_in extended deny ip any any
access-list EXT_SERVICE_access_in extended permit tcp any any eq ssh
access-list EXT_SERVICE_access_in extended deny ip any any
access-list EXT_SERVICE_access_out extended permit tcp any any eq ssh
access-list EXT_SERVICE_access_out extended deny ip any any
access-list global_mpc extended permit ip any any
access-list default standard deny any
Ok, Now I'm simulating a hacker that connect over ssh to one host in DMZ_SERVICE network, connect to that host over ssh, and while the ssh connection is running I write this to the ASA:
access-list EXT_SERVICE_access_in line 1 extended permit tcp any any eq ssh inactive
access-list DMZ_SERVICE_access_in line 1 extended permit tcp any any eq ssh inactive
access-list DMZ_SERVICE_access_out line 1 extended permit tcp any any eq ssh inactive
access-list EXT_SERVICE_access_out line 1 extended permit tcp any any eq ssh inactive
The ssh connection is still alive
Sorry if I wasn't understand your advice. Please coud you explain me the method of cut the stablished malicious established connections?
I see that if I define a 'Service Police Rule' the ping(icmp traffic) is blocked with the ACL change to deny.
      class-map global-class1
        match default-inspection-traffic
      policy-map global-policy
        class global-class1
          inspect icmp
¿Perhaps is the this the way?

Similar Messages

Problem in establishing connection with mysql 5.0

Hi,
I am using JCAPS 5.1. I tried to insert data to mysql database table.
But i got following error
java.sql.SQLException: Error in allocating a connection. Cause:
Physical Connection doesn't exist.
My intention is to read file in which data are comma seperated and to
populate those values to a mysql 5.0 database table.
Sample DATA in file [test.txt]
111,gg,23,MFG
112,hh,24,MFG
113,ii,25,RETAIL
114,jj,26,IT
Database table: employee
eno,ename,eage,edept
While creating JDBC OTD there is no problem in establishing connection with database. But after deploying i got above error.
I have used Mysql 5.0 Connector/J JDBC driver. Added JDBC driver jar files to following directories as required.
1) C:\JavaCAPS51\logicalhost\is\lib
2)C:\JavaCAPS51\logicalhost\is\domains\test\lib
Steps i have followed as per JDBC-ODBC -eway user guide doc.
1) Created USerDefined OTD and added necessary fields
2) Created JDBC OTD.
3) Created JAVA collaboration and do business process for inserting
4) Mapped all components by creating in Connectivity MAp
5) created necessary external systems in envrionment explorer.[JDBC External System and File External System]
6)Created Deployment profile
5) Deployed it.
After deploying it gives error as
java.sql.SQLException: Error in allocating a connection. Cause: Physical Connection doesn't exist
Please let me know the solution for problem.
Message was edited by:
VenkateshSampoornam

In the environment definition,
-> External Application JDBC
-> Properties
-> Outbound JDBC Connection
You have the database URL in the "DriverProperties" field
Valid URL would be : jdbc:mysql://localhost:3306/caps
!! The doc says that this field is optional !! Seems to be an error in the doc:
Hope this helps
Seb

SDM Deployment Problem. Could not establish connection to the server.

Hi all,
I am using J2ee Engine 2004s( version )server which is located remotely.I have installed NWDS 7.0.17 in client system & try to deploy an application. I could connect to the J2EE Engine through VPN Connection. but while deploying the application it is giving the following error
Deployment exception : Server XXX did not accept login request as admin on port 50018. Details: ERROR: Could not establish connection to server XXX at port 50018: Connection timed out: connect
Inner exception was :
Server XXX did not accept login request as admin on port 50018. Details: ERROR: Could not establish connection to server XXX at port 50018: Connection timed out: connect
I have made an host file entry also in my client System. I have used the Lib files also which is mentioned on SAP Note 941150.
still i am getting the same problem. Please bring me the solution to this problem. It would be really helpful.
Regards,
Malar.

Hai,
Check the below link.....
http://help.sap.com/saphelp_nw70/helpdata/en/76/fb72ec091f4bf8a2d8ba321bb7e8d9/frameset.htm
SAP Note: 783965.
Regards,
Yoganand.V

BT Infinity Problems Establishing Connection

Hello
I am a new customer with BT Infinity. I'm using the Home Hub with the Openreach modem (sorry, nothing on the device to say which model that I can see). I run Windows 7.
Initially the equipment was installed with the ethernet cable connecting to my PC, with wi-fi also active. I have no desire or need for wi-fi and have disabled it but the problem I'm experiencing applied to both set-ups.
The problem is that on booting up my PC the connection fails to establish, most of the time. The icon in the system tray displays the yellow ! triangle. I can't even explain with any logical sense how I manage to establish a connection.....I open the Network & Sharing Center and click on the active network and see that it is set to Public, even tho I persistantly try to set it as Home. It reverts all the time. Sometimes, after a few minutes of clicking Home again the yellow ! goes away and it says "internet acceSs", exept there isn't net access, it simply fails to connect to any webpages. At this point, sometimes if I restart the machine the connection is active and will work. If I simply try waiting and doing nothing, in the hope that the connection finds itself, nothing happens at all.
I leave the Home Hub and Openreach modem permanently switched on at the power sockets as the engineer told me to switch them off could cause speed or connection problems. I do have to turn off my PC and this failure to reconnect problem is not consistant. Basically, sometimes when I boot up again it finds the line happily, other times (more often than not) I get this yellow ! triangle and several minutes of random poking in the Network Center and a reboot is what it takes to get an active line. Once the line is active it is smooth and stable, I don't have problems with the line speed or connection dropping out, it seems to only be the initial failure to establish.
I apologise for my very clumsy way in explaining this, as I lack the technical language to do so more clearly. If anyone has any idea what I'm trying to describe, or if I can look up any settings or info that would help, please ask. I really need to get this resolved as 10 minutes of mucking about and rebooting to get an active line is not acceptable, but ofc we're stuck in the contract so we have to make it work

Thanks Nige. My Network Centre calls the active network "Network 3 Home Network". In its settings, the Treat All... box has never been checked. Despite calling itself a "home network" the network location setting defaults to Public, no matter how often I click to try to make it Home. Would it being Public or Home actually be a factor in the failure of the line to make the initial connection?
I'm not even sure Network is the correct designation for my set-up as it's basically the BT equipment and my PC, I have no other devices or computers linked to it.
I have no technical knowledge when it comes to setting up the net. But I do know my father also has BT Infinity, which he does use networked via wi-fi to his Mac and W7 laptop and he has never had this yellow ! warning on the system tray icon when booting up his laptop and aquiring the line.
When you say different port, excuse my ignorance but do you mean the end of ethernet cable that's in the HH? Or the cable from the wall socket to the HH? I'll look at the HH and see what can be switched when I'm done online tonight. Thank you for the suggestions.

Unending connectivity problems -- and Desktop Help...

I'm wasting so much time on connectivity problems that it's positively wearying. Prior to the installation of BT Infinity here in April, I had a low quality broadband service because of the length of the line from the exchange: if I could get a download speed of 1.2Mbps and an upload of a quarter of that, I was doing well.
BT advised that thanks to fibre optic, my Internet should run much faster. So we had Infinity installed. I'm registered with Speedtest.net so am able to see my performance record.
The average download speed is now aroun d 6Mbps and the average upload, more than that at 7Mbps. How an upload speed can consistently be faster than a download escapes me.
But I'm not familiar with the ways of Internet connectivity and try as a I might, can't get my head around it.
This desktop computer runs Vista OS. Vista was **bleep** when it came out and is renowned for its botched handling of Internet connections. So I'm not blaming BT for the literally unending connectivity problems that are occurring now, with line drops, speeds slowing to a crawl, and no guarantee that any connection will last. But it would be good to actually use BT software to help fathom out what's going wrong here, and today's typical morning which looks like this:
1) Boot up computer. Automatic connection to hub via Netgear USB wireless adapter. Hub is on ground floor of this 3-storey property but signal strength from hub is excellent, as confirmed by inSSIDer monitoring, currently showing 54 with no other networks anywhere near that figure.
2) Perhaps 5 minutes after connection established, it's then lost. 'Local Only' is displayed. This is, apparently, a known Vista problem. But Microsoft has issued a fix for it. I know this, because it took 100 hours of ploughin g the Net to find out that MS had finally admitted to one more Vista screw-up. I've used the Microsoft router "fix it" before and it didn't work ("failed to process") so uninstalled it and have DL'd it again now and run it. This time it says it has fixed everything.
3) Computer is re-booted to make the fix effective. Computer connects to Internet. Speedtest.net check yet again confirms that upload speed is faster than download speed.
4) Connection dies. So much for Microsoft Fix It.
5) Windows diagnostics reports that it can re-set the IP profile (or something.) I click yes. The re-set goes through. Connectivity is restored. 10 minutes later, connectivity is lost. Just a red X in the tray. No connection of any kind, not even that daft 'Local Connection' only alert.
6) Reboot. Yet again. BT Desktop Help was installed here and ran OK when we were using our Netgear DSG34 router. But since the change to the BT Hub, the BT program has never run at all. So-oo. . . It has been uninstalled. And then re-DL'd and re-installed. And though the installation has been completed, clicking on 'launch' has failed to launch anything. But anyway. An hour ago, in one of the brief periods today when the Internet connection was holding up, I Revo-ed out the earlier install, DL'd BT desktop Help and re-installed it. . . and I'm still at the same stage as always, with a Firefox browser page that's open and completely blank and has been for the past 30 minutes. The URL is:
file:///C:/Program%20Files/BT%20Broadband%20Desktop%20Help/btbb/Start.html
Repeated page re-loading gets nowhere. Malwarebytes PRO is turned OFF to prevent any possibility of blocking and the antivirus is termporaily SUSPENDED. This PC runs on Windows standard firewall but even turning that OFF doesn't get the page to load. Copying the address into Internet Explorer in case there's a Firefox problem merely results in Firefox being opened and the same blank page running there.
7) After all that. . . Connection lost yet again and this time, Windows cannot connect at all. It reports that the "wireless network security key is not correct". I happen to know that it is, because this is maybe the 20th time it has reported this in the past 10 days and every time I have to key in the "correct" key all over again. . . at which point Windows still says it isn't correct and cannot repair.
Turning off the computer completely, unplugging from the wall, holding in the power switch for a full minute to clear the circuits, traipsing up and dowen three flights of stairs to turn off the hub, then wait, then turn the power back onm again. . . Ah, wot fun times I'm having here with my particular versioin of Infinity (as in, an infinity of connectivcity problems.)
Summary: I seem to be being simultaneously hit with one issue after another.
I'm bewildered as to why ever since Infinity was installed here, my upload speed is generally faster than my download speed. I'm not happy with endless Internet connection failures though am thinking that Vista is playing a large part here with its "wrong security key" and unending 'Local Only / Limited Connection' failures. I do miss my Netgear router and the ability to access a fantastic help menu and re-boot directly from the desktop without having to keep going up and down three flights of sdtairs to do so (I haven't been able to find out how toe access the BT Hub remotely.)
Above all though: I'm really tired of repeatedly trying to run freshly downloaded and installed BT Desktop Help software but getting no further than a blank page because the program has stalled.
If anyone has any advice / suggestions, other than to buy a carrier pigeon, that'd be much appreciated.
Thanks.

Thanks again to John and gg30340. Here's an update:
1) BT Desktop Help removed completely from this computer. The uninstaller itself mopped up everything, which surprised me. But anyway.
2) Bt Home Hub manager set up and working. Had to input serial number and create new password. All of this sounds fairly easy and would be if one had the device near the desk. But the idiots who built this property shoved the BT master socket inside the garage next to the door. Our two home computers are on the third floor. To ensure the wireless signal strength is OK, the Hub and Infinity module/device/whatever it's called are on a high shelf. It's a major job to even reach the darn things, never mind read the labels seeing as how the BT Infinity engineer was good enough to tidy up the cabling and make a very tight connection to the wall socket.
3) I had hoped to be able to back up the Hub's settings, seeing as the software provides for Advanced Settings / System / Backup. But not on mine (Hub 3.0). All that System allows is choosing which internet clock to define the accurate time. Everything else in System is just a pattern of short lines as if trying to indicate that there's some text there but it's invisible.This is now my second encounter with BT software which, for whatever reason, isn't functioning as it should on this PC.
4) Hub reset to factory fresh, according to BT guide.
5) Reset appears to have achieved nothing apart from requiring the password to be popped in again. After reset, it wasn't even possible to connect to the hub manager. Internet connectivity was eventually established for all of 30 seconds and then, gone.
6) Computer was shut down and then booted anew. Internet connectivity is still. . . dreadful. One minute everything's fine and then, literally,. the next minute a webpage won't load. Even opening the Hub Manager has taken three attempts, i.e., disconnecting from the Internet, re-connecting, failing, and trying twice more until success. Yet all the time these failures are occurring, the tray icon is showing a steady, unwavering green icon for Local and Internet access -- despite the fact, there manifestly isn't any.
7) Speedtest. net tests are actually showing upload and download 'trajectories' going slower and slower and finally halting at some point on the arc, then after a period of up to 30 seconds, suddenly becoming animated again. Speed test results with broadband speed checker UK and Think Broadband's checker are so at variance with one another, and with Speedtest, net, that it seems all three are using different technologies in pursuit of the same thing. Either way, upload speeds continue to be much, much faster than download speeds, a state of affairs I certainly have never encountered before.
8) Speedtest net tests taken in the past 10 minutes, with one test following on from its predecessor, begin at 8.24 down/8.88 up, followed by 5.24 down / 6.40 up, followed by a mind-numbingly lonnnnng 0.62 down / 8.70 up -- in other words, a continuous yo-yoin g of Internet connectivity to the pooint that it actually might as well not even be here (I've had to make five attempts just to get on to this forum. . .)
9) BT Speedtest will necessitate disconnection of everything downstairs and all boxes being lugged up here. This is actually going to require uncoililng tied-off cabling and hanging off a stepladder to do so -- though I surely can't be the only person in Britain who doesn't have a nice, handy BT master socket in their study or lounge. That said though: until we switched to Infinity, we *never* experienced these kinds of horrendous connectivity problems and never had need to unplug the Netgear router downstairs and bring it upstairs to connect directly to tjhe desktop PC so BT's own test could be run.
I'll just have to get to work dismantling stuff tomorrow. However, I have to say that after a factory re-set which has changed nothing at all, I'm beginning to think there's a problem with the BT line itself (hence why I'm happy to follow the advice here, though less than happy at the prospect of the messing about involved.)
Thanks, you two, for your patient help, and also for clarifying the situation re the three signal paths being shown on inSSIDer. At least I know that's usual now! And now, hopefully, when I press 'Post', I won't be faced with an endlessly spinning Firefox circle culminating in what may well be, or seem to be, the 57,938th time today of seeing "Page Not Found". . .

Local Network Connection Problem with SQL Server 2008 R2

Hi,
I have CRM application which uses SQL server 2008. Weird thing is that I have no problems connecting from client machines to the server when using a particular router (via LAN) and when I upgrade the firmware of the same router (A common open source firmware
which is used by many also works perfect apart from mentioned problem) and restart the server, the connection cannot be established. I get Error 40.
When i downgrade the firmware and restart the server, the connection works again.
Please note that I am absolutely not touching any configuration of the server. Also the CRM software allows remote connections from public IPs which this feature works fine with both downgraded and upgraded firmwares.
As for my understanding, the routers do not block ports in LAN connections. So how can I diagnose the reason for this connection problem?

Hi Leony83,
Please also help to check Windows Event Log information regarding this issue, so that we can do further investigation. In additin, here is the general steps to troubleshoot SQL Server Error 40 issue. Please see:
SQL SERVER – Fix : Error : 40 – could not open a connection to SQL server – Fix Connection Problems of SQL Server:
http://blog.sqlauthority.com/2008/08/24/sql-server-fix-error-40-could-not-open-a-connection-to-sql-server-fix-connection-problems-of-sql-server/
Hope this helps.
Regards,
Elvis Long
TechNet Community Support

Debugger on Windows Vista - ORA-30683: Failure establishing connection to d

We can't get the debugger to work on our Vista machines... On our XP machines we don't have this problem, so I suspect it's a "Vista" issue.
The vista machine is a desktop running sql developer, connection to another machines (server's) database. XP machines connect and debug on that same database fine.
We get this error when debugging:
Executing PL/SQL: CALL DBMS_DEBUG_JDWP.CONNECT_TCP('0.0.0.0', '4000')
ORA-30683: Failure establishing connection to debugger
ORA-12541: TNS: no listener
ORA-06512: at "SYS"."DBMS_DEBUG_JDWP", line 68
we've tried:
1) controlling the port on the SQL Developer preferences to be 4000, then making an exception on the firewall (on the vista machien) for that port
2) making an exception for sql developerj.exe files
3) Running it as an administrator
no luck.
I do notice that on teh first line, it puts: CONNECT_TCP('0.0.0.0', '4000')
The zero's... on an xp machine, the IP: 127.0.0.0 would be there instead. Not sure if that's related to the problem.
Please help, we can't debug on our Vista machines until this is resolved.

Definitely. The database needs to be able to contact your PC, so '0.0.0.0' won't work.
Check Preferences - Debugger - Prompt for Debugger Host, initiate another debug session, and when prompted, give your IP instead. Once you had a successful debug session, I'm pretty sure you can uncheck the preference again.
Have fun,
K.

I used to be able to email photos from my Lightroom software quite successfully. I needed to change my password several days ago in my gmail account. Now when I try to email photos I receive a message saying "Failed to establish connection with the outgoi

I used to be able to email photos from my Lightroom software 5.7 for MAC quite successfully. I needed to change my password several days ago in my gmail account. Now when I try to email photos I receive a message saying "Failed to establish connection with the outgoing email server. Please make sure you have entered the email account and password correctly."
I have been trying to get help from Adobe for 3 days. I have sent a message through "Get Support", 2 days ago, but no one has contacted me. I have tried by phone, but no one will help me. When I purchased Lightroom in May, 2014, I was able to receive phone help. I am now told that I don't qualify because I am not a Creative Cloud customer. I have been assigned a case number 186291729.
PLEASE HELP ME FIX THIS PROBLEM

I, too, have this problem. I see no one is responding with a solution? Hello? Can someone please advise?
Oh, and, yes, I have manually verified repeatedly that the information I gave to Lightroom is correct, and I still get the same error message when I try to validate.

SQL Server Reporting services. failed to establish connection with project server. verify the url is correct.

Dear All,
I'm working on reporting of Project Server 2010, while configuring SQL SERVER REPORTING SERVICES faced issue after two complete days of troubleshooting along with this gone through plenty of forums, unable to figure out any solution. So finally posting on
technet in order to find solution.
ISSUE/PROBLEM:
At initial configured the SQL REPORTING CONFIGURATION to sharepoint integrated database (SQL SERVER is installed on seperate machine), change the service to Domain Account and also installed sharepoint add in on server story was fine at this point. Furthur
moving to SHAREPOINT ADMIN console and while configuring the Sharepoint Integrated Reporting continuously facing this error:
Failed to establish connection with report server. . . . (Snapshot is attached for your further reference).
My point of concern is that whenerver i try to open the REPORT SERVER URL on project server machine it prompts me to enter username and password but whenever i insert the domain credentails it didnt accept though it can be accesible by using the credentials
of Local Admin of sql server machine. So i wana come to know whether its permission issue if yes then where i should mention the domain credentials.?
REGARDS DANISH DANIE

Dear Paul,
I am able to open the URL (http://psdb/ReportServer )using
domian credential and page open with these contents
Reporting Services Error
The configuration parameter SharePointIntegrated is set to True but Share Point Object Model cannot be loaded
Second,
Configured the SPN on domain controller , performed the steps required to change the AUTHENTICATION in rsreportserver.config
file also done the registry settings to disable the loop back settings.
Same error still ! .... what should i do now ???
REGARDS DANISH DANIE

Unable to establish connection to R/3

Hi,
We have just installed XI and done all configurations.
I am doing one example ( connection r/3 to legacy system ) . When I open I outbound object in Integration Repository and in Imported objects when right click on IDocs and click Import SAP Objects, it asks me for SAP logon details , but when I try to connect it shows an error
Unable to establish connection to R/3 system 133.136.233.170 (system=00, client=110) Troubleshooting tips:
Is the target system online?
Check the connection data (note that server names and groups are case-sensitive)
Tips for administrators (see the configuration guide for more details):
Does the user have the required authorizations in the target system?
Is the target system configured correctly in "etc/services"?
I am putting IP address in application server and checked the system number as well.
I am able to ping From webas to R/3.
can anybody help me out what could be the error
Thanks
Rekha

Hi Rekha,
did you take a look at this page?:
http://help.sap.com/saphelp_nw04/helpdata/en/2b/a48f3c685bc358e10000000a11405a/content.htm
you can find sap notes - if you're expiriencing problems with idoc import (SAP Notes 677732 (authorizations), 672745 (missing function modules), 212011 (access to IDoc metadata), and 718320)
also "Authorizations Required to Import from Systems Based On SAP Web Application Server"
take a look at this page
and read if carefully it may help you with your problem:)
Regards,
michal

VMware SQL 2008R2 bcp error - SQLState = 08001, NativeError = 0 Error = [Microsoft][SQL Server Client 10.0] Client unable to establish connection due to prelogin failure

Can someone help me resolve this error? Thanks
Windows Server 2008 R2 Standard SP1 64-bit - SQL Server 2008R2 Standard 64-bit
VMware vCenter Server Version 5.1.0
SQLState = 08001, NativeError = 0
Error = [Microsoft][SQL Server Native Client 10.0]Client unable to establish connection due to prelogin failure
bcp program:
bcp SYM.dbo.ACCOUNT in "D:\Data\SQLExtract\EXTRACT.ACCOUNT" -f"D:\Data\SQLCommands\FMT.ACCOUNT" -S DEV-DATA\TEST\ -T -oSYMLOAD.LOG Type SYMLOAD.LOG >> SYMLOAD.LOG.CUMULATIVE
The bcp program executes successfully on a local instance of SQL Server.

The error has nothing to do with BCP as such, but it is a connection problem. That is, for some reason you cannot connect to your instance from the VM. I would exect that you face a similar problem if you tried SSMS.
It could be a firewall issue, but prelogin suggests that you reach the instance. But possibly you don't come far enough for the login failure to be recorded. Possibly the instance is not configured to audit login failures.
The message you would see would be similar to
2010-08-18 14:11:30.91 Logon Error: 17809, Severity: 20, State: 3
Possibly followed by a a line that details the message. The error number may be different.
Erland Sommarskog, SQL Server MVP, [email protected]

Status Failure -lo exception:network adapter could not establish connection

Hi, installed SQL DEVELOPER today and its driving me mad... I am getting this error
Status Failure -lo exception:network adapter could not establish connection.
Basic tab I have all the right information, tried test gives same error...
hostname ajas
port 1521
sid altaf
TNS
Network alias altaf
connect identifier altaf(TRIED SINCE NETW ALIAS DIDNT WORK)
went to TNS tab and from the list selected the right entry for NETWORK ALIAS,tried test still same error... tested with connect identifier still same error...went to Advanced entered this string jdbc:oracle:thin:@ajas:1521:altaf ..... still same error...what the hell is wrong...here is the tnsnames.ora entry ...
ALTAF =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = AJAS)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = altaf)
by the way I am able to connect with sql*plus ... lsnrctl gives the lsnr so thats running... tnslsnr is also running...also installed the latest java sdk i.e 1.5... i have set new path to point to this new java.exe i.e 1.5 one... this is really crazy and havent see such probs in any tools i have ever used and that too using it in normal pc ... God knows what will happen if used for remote db's....
here is listener.ora
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = AJAS)(PORT = 1521))
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = C:\oracle\ora92)
(PROGRAM = extproc)
(SID_DESC =
(GLOBAL_DBNAME = altaf)
(ORACLE_HOME = C:\oracle\ora92)
(SID_NAME = altaf)
no one seems to have answer for this... there are all kinds of strange replies for this problem.... anyone has solved this prob plz reply....
Message was edited by:
ajashadi

I've had the same problem when I installed the latest version of SQL developer (1.2.1.32.13) on a machine that still had an older, working version. My problem went away when I changed from an IP name to an IP address. on the connection setup window.

Network Adapter cannot establish connection

Hello. I can't seem to find an answer to this anywhere: I have a database that can be accessed via JDBC from certain IP addresses but not others. The ones that can't access it give me the exeception: "Network Adapter cannot establish connection" The database machine can be PINGed from the client; the IP address of the database is used so it's not a name resolution problem; we are instatiating the driver correctly...AND it WORKS from other clients!
Does anyone have any ideas as to what the problem could be?
Thanks.

If there are firewalls involved, connections on port 1521 have to be allowed.

Failed to Establish Connection With SQL Database Server in Essbase studio

I am using Essbase Studio Release 11.1.2.1.00 for developing XOLAP cubes and deploying them on to Essbase server .
I am getting the below Error while deploying the cube onto Essbase server.
error : Failed to deploy Essbase cube.
Caused by: Failed to build Essbase cube dimension: (TimeHierarchy) .
Caused by: Cannot get async process state. Essbase Error(1021001): Failed to Establish Connection With SQL Database Server.
From Essbase Studio -> Datasources tab, I could able to connect to SQL Database server..Please let me know how to resolve this issue.
Thanks,
Swathi

Thanks for the reply.
There was a problem with my Essbase Server..so now i m pointing to other server.
now I am getting the below Error:
Failed to deploy Essbase cube.
Caused by: Cannot end incremental build. Essbase Error(1025008): Join Specification near [[TIMEID]] is invalid. Please verify the Xolap Schema file.
Please let me know how can I validate my cube and what changes might require in my Cube definitions?

Cannot establish connection - JDBC driver for MS SQL server 2000

Hi,
We are facing problems in connecting to SQL server 2000.
We have installed the latest version of the driver from followin link and following
https://websmp108.sap-ag.de/msplatforms > SQL Server > JDBC Driver for MS SQL Server (Version 3.70.10)
We have given the following entries in our communication channel:
JDBC Driver : com.microsoft.sqlserver.jdbc.SQLServerDriver
Connection: jdbc:sqlserver://<SQLserver IP>:1433;databaseName=production_info
Please let us know the procedure to find if the JDBC driver for SQL 2000 is installed from our SAP XI.
ERROR DETAILS:
Error during database connection to the database URL 'jdbc:sqlserver://<SQLserverIP>:1433;databaseName=production_info' using the JDBC driver 'com.microsoft.sqlserver.jdbc.SQLServerDriver': 'com.sap.aii.adapter.jdbc.sql.DriverManagerException: Cannot establish connection to URL 'jdbc:sqlserver://<SQLserverIP>:1433;databaseName=production_info': SAPClassNotFoundException: com.microsoft.sqlserver.jdbc.SQLServerDriver'
Please help.
Regards,
Rehan

Hi Chris,
We have used the same because we have downloaded the driver from following location
https://websmp108.sap-ag.de/msplatforms ; > SQL Server > JDBC Driver for MS SQL Server (Version 3.70.10)
I have tried with both "com.microsoft.jdbc.sqlserver.SQLServerDriver"; and "com.microsoft.sqlserver.jdbc.SQLServerDriver";, but still I am facing the same error.
Service market place has given the driver as "JDBC Driver for MS SQL Server (Version 3.70.10)", is there a way to find out if it is for 2000 or 2005?
Thanks for your reply.
Regards,
Rehan

ASA5520 ACL established connections problem

Similar Messages

Maybe you are looking for