Command " no ip directed-broadcast" ?

I configured a router interface E0 with command"ip address x.x.x.x y.y.y.y" only, but when I "show run", i found there's an extra command under E0(see below) which is "no ip directed-broadcast". I can't remove this line, not sure what this line is doing.
interface Ethernet0
description : connect to O6LXC29OOBC01(switch)
ip address x.x.x.x y.y.y.y
no ip directed-broadcast

Wayne
Jon has provided a good discussion of ip directed-broadcast and the reasons why many people want to disable this. I would like to add a small supplement to his explanation about why it is in the config.
The command is added to the configuration by the IOS. As you comment you did not type it in but it is in the config automatically. A little background may help explain why IOS does automatically put this command into the config.
In earlier versions of IOS the default was to enable directed broadcasts (and in general people thought that it was a good feature). But as networks grew and as we faced more threats and network attacks people began to recognize the security weakness of directed-broadcast and began to want to turn it off. And at some point Cisco changed the default. Now the default is no ip directed-broadcast. And Cisco now automatically adds that to the configuration to be clear about what the behavior of the router will be.
Cisco has done this kind of thing for several commands where the default behavior has changed - to automatically insert into the config the command for the default that has changed (for example putting subnet-zero into the config).
If you want to remove the command no ip directed-broadcast from the configuration you can put ip directed-broadcast into the interface configuration and it will remove the no ip directed-broadcast. (of course it will insert the ip directed-broadcast under the interface configuration)
HTH
Rick

Similar Messages

  • Command precedence ip helper-address ip directed-broadcast

    Of the two commands ip helper-address ip directed-broadcast, which takes precedence when a broadcast arrives?
    Posted by WebUser Lance Macdonald from Cisco Support Community App

    I think there is not really any precedence.
    The usage guidelines of the ip helper-address command states:
    The following conditions must be met for a UDP or IP packet to be able to use the ip helper-address command: The MAC address of the received frame must be all-ones broadcast address (ffff.ffff.ffff). The IP destination address must be one of the following: all-ones broadcast (255.255.255.255), subnet broadcast for the receiving interface (...)
    That means that the ip helper has no effect when a directed broadcast is received from another subnet; it has to be a layer-2 broadcast from the local subnet.
    If you enable directed broadcasts and send a UDP packet to the subnet's broadcast address as a layer-2 broadcast frame and UDP forwarding is enabled for the port I'd assume that
    - an ip unicast packet is send to the configured helper
    - an all-ones broadcast is send within the local subnet
    Best regards
    Rolf
    Btw: Why did you post that in the Data Center - Application Networking section?

  • Directed broadcasts on an interface

    Which command configures directed broadcasts on an interface?
    A. ip int broadcast
    B. ipv6 unicast routing
    C. ip helper address
    D. ip directed-broadcast
    any idea
    regards
    Neo

    The answer is D, but not so good practice to use this method.
    http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/np1_c/1cprt2/1cipadr.htm
    bye
    FCS
    Please rate me if I helped.

  • Directed broadcast and unicast

    Hi all , 
    below is an excerpt from the link http://www.cisco.com/web/techdoc/dc/reference/cli/nxos/commands/l3/ip_directed-broadcast.html
    A device that is not directly connected to its destination subnet forwards an IP directed broadcast in the same way it would forward unicast IP packets destined to a host on that subnet. When a directed broadcast packet reaches a device that is directly connected to its destination subnet, that packet is broadcast on the destination subnet. The destination address in the IP header of the packet is rewritten to the configured IP broadcast address for the subnet, and the packet is sent as a link-layer broadcast.
    here is my question 
    When server on serverfarm switch sending a wol packet ( ip directed broadcast 10.0.7.255 ), it would forward like a unicast packet . 
    The unicast packet will be routed through the core to the distribution . So as i understand i don't need to do any configuration changes on the core .
    The  changes required only on distribution and serverfarm .
    Please correct me i am wrong . 
    My configurations are below 
    Serverfarm 
    Interface vlan 10
    Ip add 192.168.80.2 255.255.255.0
    host 
    Distribution
    Interface vlan 100
    Ip add 10.0.7.2 255.255.255.0
    Serverfarm switch
    interface vlan 10
    ip helper-address 10.0.7.255
    Distribution switch 
    access-list 102 permit udp host 192.168.80.10 any eq 7
    ip forward-protocol udp 7
    interface vlan 100 
    ip directed broadcast 102

    Most tools to generate WoL Magic Packets send them as UDP datagrams and set the destination IP to the limited broadcast address 255.255.255.255, thus those Magic Packets are never routed (Scope = local subnet).
    Thats why you need in this case the ip-helper command, which converts (local) UDP broadcasts of serveral well-known protocols (DHCP, TFTP, DNS, NetBIOS, TACACS) into unicasts and then forwards them to the helper address.
    Since the portnumbers typically used by WoL tools (7, 9) are different from those used by the well-known protocols, you'd also need the 'ip forward-protocol udp <number>' command to make it work.
    If I understand you correctly, your WoL tool allows you to set the destination IP to a directed broadcast IP. In this case you don't need any additional configuration because directed broadcast IPs are routable.
    HTH
    Rolf

  • Ip directed-broadcast and acl

    Hi friends ,
    access-list 102 permit udp host 192.168.80.10 any eq 7
    ip directed-broadcast 102
    1 ) Why we do not need to specify a direction ( in or out )  when an access list associated with  directed-broadcast ( ip directed-broadcast 102) command .
    2) if there is  an existing  access-list as  below  ,
    Interface vlan 100
    Ip add 10.0.7.2 255.255.255.0
    ip access-group testing  out
    ip directed-broadcast 102
    Q. W hat is  the processing order of the access-list
    Q .Can club the access list ?
    Q.if  i cannot club the access list  do i need to  add  the line  (permit udp host 192.168.80.10 any eq 7 ) again  in the access list 'testing '
    Thanks

    Hi Rick 
    " 1) you do not need to specify a direction when using an access list with directed broadcast because directed broadcast is, by definition, about incoming traffic. " .
    (access-list 102 permit udp host 192.168.80.10 any eq 7)
    Interface vlan 100
    Ip add 10.0.7.2 255.255.255.0
    ip access-group testing  out
    ip directed-broadcast 102
     As per the above access list the source ip is  (192.168.80.10) .  If  the direction is 'in' , the source will not match and the ACL will simply  drop  the traffic from 192.168.80.10 .  To match the source ip, the ip  must be  one from the  interface vlan subnet ( 10.0.7.0 /24).
    Please correct me i am wrong 
    2 ) What is the difference between the below lines .
    permit udp host 192.168.80.10 any eq 7
    permit udp host 192.168.80.10 eq 7 any
    Thank you 

  • IP Directed Broadcast

    I have a 2901K9 router at a remote location. Insite Interface = 10.10.10.1/24 Outside Interface = 20.20.20.1/24
    I have set "no ip directed boradcast" on both interfaces. ( I think it's the default settings)
    But still when I ping 20.20.20.255 I get a reply from 10.10.10.1
    How can I disable this?

    I am aware of ip directed broadcast. My question is why is it not affective inspite of having the command at interface level?
    I have a router at the remote location.
    Inside Interface = 10.10.10.1/24 Outside Interface = 20.20.20.1/24
    I have set "no ip directed boradcast" on both interfaces. ( I think it's the default settings in the latest IOS)
    But still when I ping 20.20.20.255 from my location, I get a reply from 10.10.10.1 which is the inside interface of the remote router.

  • Wake on LAN - ip directed broadcast

    We're looking at deploying a Wake-on-LAN solution for software distribution. The first alternative to distribute the 'magic packet' is enabling 'ip directed-broadcast' in each router, which presents a security risk (man in the middle attack, ARP table poisoning), the second alternative is to extend ARP aging time in the routers which presents the same security risk.
    My question is, how can be this security risk reduced or minimized (options I've heard of: 'dynamic ARP inspection' in the switches, ACL on the router associated with the ip directed-broadcast command allowing only software distribution servers to convert directed-broadcast packets into unicast packets). I have a concern extending ARP aging time and its impact with current or future application.
    I'll appreciated any comment. Thanks.

    IP directed broadcasts are used in the popular "smurf" denial-of-service attack and derivatives thereof. An IP directed broadcast is a datagram that is sent to the broadcast address of a subnet to which the sending machine is not directly attached. The directed broadcast is routed through the network as a unicast packet until it arrives at the target subnet, where it is converted into a link-layer broadcast. Because of the nature of the IP addressing architecture, only the last router in the chain, the one that is connected directly to the target subnet, can conclusively identify a directed broadcast. Directed broadcasts are occasionally used for legitimate purposes, but such use is not common outside the financial services industry. In a "smurf" attack, the attacker sends Internet Control Message Protocol (ICMP) echo requests from a falsified source address to a directed broadcast address, causing all the hosts on the target subnet to send replies to the falsified source. By sending a continuous stream of such requests, the attacker can create a much larger stream of replies, which can completely inundate the host whose
    address is being falsified. If a Cisco interface is configured with the no ip directed-broadcast command, directed broadcasts
    that would otherwise expand into link-layer broadcasts at that interface are dropped instead.
    If you are behind a firewall and are confident in your security policy, then I don't see this as being a problem.

  • How to enable directed broadcast in an RVS4000

    I have two plant automation networks lets say A/24 and B/24 without comm between them, and as per the menufacturers of the atutomation controllers, the routers between them have to be able to direct broadcast.
    How to do it with a RVS4000?

    i know that for specifying attachment u should set it in header like this
    res.setContentType("application/pdf");
         res.setHeader("Content-Disposition","attachment;filename=7444.pdf;");
    creating DSN on server from another pc i think that can be done only by using PC anywhere which should be installed on both server and client with this u may control the server from your local machine

  • How to set the router and play the Command & Conquer using direct IP mode?

    My router is WRT54GFirmware Version: v3.03.1
    How to set the router and play the Command & Conquer using direct IP mode with other computer?

    Hi, when you say direct IP mode, what do you mean ? do you wanna play the game online or on the LAN ??
    can you give a few more details.

  • UDP broadcast over multinetted VLAN

    We're having an issue with UDP broadcast over a VLAN that has three IP's configured on it.  This is on a Cat 6509.
    interface Vlan11
    description ZZZZ
    ip address 10.10.249.1 255.255.255.0 secondary
    ip address 10.10.250.1 255.255.255.0 secondary
    ip address 192.168.101.1 255.255.255.0
    no ip redirects
    ip pim sparse-mode
    The device broadcasting is 192.168.101.34.
    We've added the global config:
    ip forward-protocol udp 4444
    And we've tried interface commands like:
    ip helper-address 192.168.101.34
    and
    ip directed broadcast
    Nothing seems to help, though.  Are there any inherit limitations due to the multinet?  Devices on the 192.168.101.0/24 subnet receive the broadcast fine.  Devices on the other two subnets do not.  Basic routing between all subnets is fine.
    Thanks,
    Joe

    Hi John,
    If you're running 2008R2 DHCP, you can fix the DHCP issue that you're having by configuring a DHCP super scope on the DHCP server.  We ran into that problem too and managed to get DHCP working on all three subnets.  I know it works on 2008R2 but not sure on other versions.
    We're mandated to get off the 192.168.101.0 subnet; so, if we can't get it working this way we may need to do a complete cutover including re-IP-ing all devices involved in this dilemma.  It's more complicated than I'm stating as this is basically a troubleshooting step to see why it broke.  There's an application server involved, an audio streaming server, and some Barix devices.  We're attempting to get all the workstations cutover first when we ran into this issue.
    Thank you,
    Joe

  • Getting Broadcast traffic from one 3745 to another

    The topology is simple. Three 3550 switches as the backbone tied together using spanning-tree layer 2 wire speed switching. Very simple stuff there. Introduce 3745 access routers, one attached to each 3550, each loaded with 16port ESW, 1 GigE GBic card, and a 8A/S card.
    The problem is we have systems that blow out broadcast traffic that needs to traverse accross all 16-ESWs. We have tried all manor of things but we can not get broadcast traffic to traverse the 1GE port. We can see packets hitting the interface but they are simply getting dropped on the floor.
    I can go into more detail if needed but we think we're missing a painfully simple detail. Perhaps something to do with L3 and L2? Perhaps something to do with bridge groups or vlans or helper protocols?
    Any wisdom to help us out would be greatly appreciated!

    Dwayne
    As you probably already know, the helper-address is configured on the interface that receives the broadcast to be forwarded. So if the broadcast source is in a 16ESW then I would expect the helper address to be configured on whatever interface (probably virtual) repersents the layer 3 interface for those layer 2 ports.
    The function of helper address is that it takes a broadcast packet and forwards to some destination address. The general assumption is that the destination address will be unicast. The destination address can be a subnet broadcast (directed broadcast) and I assume that this is what you are trying to do. Is this correct? If so then be sure that you have ip directed-broadcast enabled on the interface where the destination subnet is located.
    Another potential issue is identification of broadcast packets to be forwarded. Helper address is not intended to forward ALL broadcasts. There is a group of protocols that are enabled by default (DHCP, TFTP, etc). If the broadcast packets that you want to forward are not one of these default protocols then you need to use the ip forward-protocol udp command which would be configured on the interface receiving the initial broadcast (the same interface as the helper-address).
    You probably have these already. But I can not find a good description of what is configured where and thought that a review of these principles might be helpful.
    It probably would be quite helpful to post configs of at least one 3745 and also its associated 3550. If you do not want to post these on the forum please feel free to EMail them to me. My EMail address is available from my forum profile.
    HTH
    Rick

  • Broadcasts between multiple routers using IP HELPER

    Hello everyone,
    I newly CCNA qualified and i need some help-clarification regarding ip helper command.
    A few words about the setup of the network:
    The place were i work has multiple routers connected to a central router. For example I have router A and Router B. I need a PCs on the LAN segment of router A to be able to broadcast packets to a server (Domain Controller) located on the LAN of router B. I also want broadcasts from the server to travel freely to the LAN of the PC on router A. These two routers are connected with 2Mbps FR.
    My configurations work, but i am not sure if i configured unnecessary commands. Can you please give me a sample configuration stating the interfaces were i need to configure IP HELPER-ADDRESS , and if i need the IP DIRECTED-BROADCAST command at all.
    Also i have used IP FORWARD-PROTOCOL UDP command.
    Thank you very much,
    George

    George,
    OK. You want broadcasts from PCs on LAN A to go to the servers on LAN B. I shall presume that you do not know how many PCs are on LAN B; you just want the broadcast to be seen by all of them. So, suppose the address of LAN B is 192.168.30.0/24, you should go to the interface of LAN A, and configure ip helper-address 192.168.30.255. This will forward brodcasts from LAN A to LAN B. By default, when they arrive at LAN B, the router there would try and send them to a host 192.168.30.255 - but this is not what we want. So on LAN B, you will need the command ip directed-broadcast. This will recognise the packet 192.168.30.255 as a directed broadcast, and it will make sure it gets sent as a MAC broadcast, rather than a host unicast.
    In the other direction, just for illustration, I shall assume that you are only interested in passing the PC broadcasts to the specific server in LAN A, let us say 192.168.20.45. In this case, go to the interface of LAN B, and configure ip helper-address 192.168.20.45. This will see the PC broadcasts, and send them to the server on LAN A. In this case, it is not necessary to configure ip directed-broadcast on LAN A, because, it is enough to send the packets to just that server.
    Of course, if you want the PC broadcasts to go to all servers in LAN A, you have two options: either you send them to 192.168.20.255 and enable directed broadcasts on LAN A, or you make a list of servers, and have an ip helper-address on LAN B for each one.
    As for ip forward-protocol, it may not be necessary. There is a list of protocols that the ip helper-address command forwards by default. You only need the ip forward-protocol command if you want to deviate from the list. See doc for details:
    http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipras_r/1rfipadr.htm#wp1018606 http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipras_r/1rfipadr.htm#wp1018318
    I hope this clarifies things for you.
    Kevin Dorrell
    Luxembourg

  • Help with broadcast traffic on PIX !!!

    Hi,
    i have an issue with a UPS software to automatically shut down clients in the event of UPS battery draining completely after a power cut....
    we have 3 different subnet on our PIX and the software uses broadcast method to discover clients and list them in the control panel...of course the PIX blicks broadcasts and hence my server control panel cannot 'discover' the clients.
    What would you reccoment to pass broadcast traffic from a specific IP to other specific IPs (not all subnet) on the PIX E interfaces !!!! ????
    Thanks,
    George

    Hi Leo,
    I am aware of the ip helper commands on the router... i tried looking up the same command for the PIX (im not very familiar with PIXs) and could not find it, and realized that it should not exist....
    is there another way around this though... ??? without using something similat to ip helper-directed broadcasts commands ???
    Thanks,
    George

  • JRC bug: apostrophe in string parameter passed to Crystal Report with Command datasource to SQL Server

    Post Author: nl11087
    CA Forum: JAVA
    A single quote/apostrophe in string parameter passed to a Crystal Report with Command datasource connecting to a SQL Server database, using sqljdbc driver does not escape the special character correctly. When doing a preview in the Crystal Reports IDE it allows you to escape the input parameter as expected and work correctly, but through the JRC component it fails. For string parameters without special sql server characters I experience no problems at all. When replacing the Command with a direct table there is also no problem.
    Reproduction:
    1. create a database db1, create a table table1 with a String type column col1.
    2. Create new report Report1.rpt, create a connection to above, Add Command using 'SELECT col1, col2, col3 FROM table1 WHERE col1 = '{?Par1}' . Add a parameter field Par1 : String
    3. In your java stand alone application using JRC add the parameter Par1 with a value "Jon Doe's Value" containing a single apostrophe. Export to PDF. (I also tried MSWord and this failed too, similar behavior). Additionally, in another test try to replaceAll("'","''") to escape it, preventing the code to break, but now it does not retrieve the expected row anymore and you end up with an empty report.
    Exception StackTrace:
    com.crystaldecisions.reports.exportinterface.exceptions.ExportException: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.formatter.a.c.if(Unknown Source)
    at com.crystaldecisions.reports.formatter.a.c.a(Unknown Source)
    at com.businessobjects.reports.sdk.b.b.int(Unknown Source)
    at com.businessobjects.reports.sdk.JRCCommunicationAdapter.request(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.x.a(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.q.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.dd.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.reports.sdk.PrintOutputController.export(Unknown Source)
    Caused by: com.crystaldecisions.reports.formatter.formatter.c: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.formatter.formatter.objectformatter.bv.<init>(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.objectformatter.bv.if(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.e.l.<init>(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.e.p.<init>(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.e.p.a(Unknown Source)
    at com.crystaldecisions.reports.formatter.a.c.a(Unknown Source)
    ... 17 more
    Caused by: com.crystaldecisions.reports.dataengine.be: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.dataengine.n.else(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.nr(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.bn(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.bp(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.else(Unknown Source)
    at com.crystaldecisions.reports.dataengine.s.a(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.a(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.aa(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.<init>(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.<init>(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.<init>(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.a(Unknown Source)
    ... 23 more
    Caused by: com.crystaldecisions.reports.reportdefinition.datainterface.n: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.reportdefinition.datainterface.p.a(Unknown Source)
    ... 35 more
    Caused by: com.crystaldecisions.reports.queryengine.driverImpl.m: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.queryengine.driverImpl.o.eC(Unknown Source)
    at com.crystaldecisions.reports.queryengine.driverImpl.o.if(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ap.ea(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ap.h(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ap.dV(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ax.if(Unknown Source)
    at com.crystaldecisions.reports.queryengine.bc.if(Unknown Source)
    at com.crystaldecisions.reports.queryengine.bc.do(Unknown Source)
    at com.crystaldecisions.reports.queryengine.bc.do(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ae.cy(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ae.cz(Unknown Source)
    at com.crystaldecisions.reports.queryengine.b1.bc(Unknown Source)
    ... 36 more
    Caused by: com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near 's'.
    at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source)
    at com.microsoft.sqlserver.jdbc.IOBuffer.processPackets(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement$StatementExecutionRequest.executeStatement(Unknown Source)
    at com.microsoft.sqlserver.jdbc.CancelableRequest.execute(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeRequest(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source)
    ... 48 more
    - JRCAgent3 detected an exception: An error occured while exporting the report
    at com.businessobjects.reports.sdk.b.b.int(Unknown Source)
    at com.businessobjects.reports.sdk.JRCCommunicationAdapter.request(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.x.a(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.q.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.dd.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.reports.sdk.PrintOutputController.export(Unknown Source)

    Post Author: nl11087
    CA Forum: JAVA
    A single quote/apostrophe in string parameter passed to a Crystal Report with Command datasource connecting to a SQL Server database, using sqljdbc driver does not escape the special character correctly. When doing a preview in the Crystal Reports IDE it allows you to escape the input parameter as expected and work correctly, but through the JRC component it fails. For string parameters without special sql server characters I experience no problems at all. When replacing the Command with a direct table there is also no problem.
    Reproduction:
    1. create a database db1, create a table table1 with a String type column col1.
    2. Create new report Report1.rpt, create a connection to above, Add Command using 'SELECT col1, col2, col3 FROM table1 WHERE col1 = '{?Par1}' . Add a parameter field Par1 : String
    3. In your java stand alone application using JRC add the parameter Par1 with a value "Jon Doe's Value" containing a single apostrophe. Export to PDF. (I also tried MSWord and this failed too, similar behavior). Additionally, in another test try to replaceAll("'","''") to escape it, preventing the code to break, but now it does not retrieve the expected row anymore and you end up with an empty report.
    Exception StackTrace:
    com.crystaldecisions.reports.exportinterface.exceptions.ExportException: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.formatter.a.c.if(Unknown Source)
    at com.crystaldecisions.reports.formatter.a.c.a(Unknown Source)
    at com.businessobjects.reports.sdk.b.b.int(Unknown Source)
    at com.businessobjects.reports.sdk.JRCCommunicationAdapter.request(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.x.a(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.q.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.dd.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.reports.sdk.PrintOutputController.export(Unknown Source)
    Caused by: com.crystaldecisions.reports.formatter.formatter.c: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.formatter.formatter.objectformatter.bv.<init>(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.objectformatter.bv.if(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.e.l.<init>(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.e.p.<init>(Unknown Source)
    at com.crystaldecisions.reports.formatter.formatter.e.p.a(Unknown Source)
    at com.crystaldecisions.reports.formatter.a.c.a(Unknown Source)
    ... 17 more
    Caused by: com.crystaldecisions.reports.dataengine.be: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.dataengine.n.else(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.nr(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.bn(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.bp(Unknown Source)
    at com.crystaldecisions.reports.dataengine.n.else(Unknown Source)
    at com.crystaldecisions.reports.dataengine.s.a(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.a(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.aa(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.<init>(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.<init>(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.<init>(Unknown Source)
    at com.crystaldecisions.reports.dataengine.bk.a(Unknown Source)
    ... 23 more
    Caused by: com.crystaldecisions.reports.reportdefinition.datainterface.n: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.reportdefinition.datainterface.p.a(Unknown Source)
    ... 35 more
    Caused by: com.crystaldecisions.reports.queryengine.driverImpl.m: JDBC Error: Incorrect syntax near 's'.
    at com.crystaldecisions.reports.queryengine.driverImpl.o.eC(Unknown Source)
    at com.crystaldecisions.reports.queryengine.driverImpl.o.if(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ap.ea(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ap.h(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ap.dV(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ax.if(Unknown Source)
    at com.crystaldecisions.reports.queryengine.bc.if(Unknown Source)
    at com.crystaldecisions.reports.queryengine.bc.do(Unknown Source)
    at com.crystaldecisions.reports.queryengine.bc.do(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ae.cy(Unknown Source)
    at com.crystaldecisions.reports.queryengine.ae.cz(Unknown Source)
    at com.crystaldecisions.reports.queryengine.b1.bc(Unknown Source)
    ... 36 more
    Caused by: com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near 's'.
    at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(Unknown Source)
    at com.microsoft.sqlserver.jdbc.IOBuffer.processPackets(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement$StatementExecutionRequest.executeStatement(Unknown Source)
    at com.microsoft.sqlserver.jdbc.CancelableRequest.execute(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeRequest(Unknown Source)
    at com.microsoft.sqlserver.jdbc.SQLServerStatement.execute(Unknown Source)
    ... 48 more
    - JRCAgent3 detected an exception: An error occured while exporting the report
    at com.businessobjects.reports.sdk.b.b.int(Unknown Source)
    at com.businessobjects.reports.sdk.JRCCommunicationAdapter.request(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.x.a(Unknown Source)
    at com.crystaldecisions.proxy.remoteagent.q.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.dd.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.ReportSource.a(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.sdk.occa.report.application.PrintOutputController.export(Unknown Source)
    at com.crystaldecisions.reports.sdk.PrintOutputController.export(Unknown Source)

  • 'authentication control-direction in' in authentication CLOSED mode

    Switch: 4510R+E, running a DEV version based off 3.6.0
    ISE: 1.2.0.899 patch 7
    Hi, I have been working on a weird issue where some of my clients would randomly drop their IP address and the only way I could get it back was to move their port to authentication open mode. I need to run in closed mode because I change VLANs via MAB. 
    I have been working with TAC, and they suggested I add the command 'authentication control-direction in' to my switchport config (below). With the couple tests Ive done, this seems to help. But I would like to understand why. Doesn't the control-direction command somewhat nullify the premise of running in closed mode? I.E. It allows some communication before the device is authorized. Thanks.
    interface GigabitEthernet2/18
     switchport access vlan 34
     switchport mode access
     switchport voice vlan 66
     logging event link-status
     authentication event fail action next-method
     authentication event server dead action authorize vlan 34
     authentication event server dead action authorize voice
     authentication event server alive action reinitialize 
     authentication host-mode multi-auth
     authentication order mab dot1x
     authentication priority dot1x mab
     authentication port-control auto
     authentication violation restrict
     mab
     dot1x pae authenticator
     dot1x timeout tx-period 10
     service-policy input QoS-Input-Policy
     service-policy output QoS-Host-Port-Output-Policy
    end

    I also needed to use this command to keep devices authenticated. It was happening with a CCTV system that was an embedded Linux OS. It was on MAB and because it wasn't transmitting any traffic (unlike a noisy windows box) then the switch wouldn't be able to reauth it as it had no mac address to be able to auth, so would show up with an 'unknown' in the MAC field.
    Basically it allows traffic to flow out of the port. This enabled the device to be able to receive HTTP traffic and made it respond and then the switch could auth it again once the device sent a frame.
    when you do a show authentication sessions you will notice a Oper control dir: both will change to Oper control dir: in

Maybe you are looking for

  • Important lesson when loading videos on your ipod

    tonight i converted the movie "breakfast with hunter" , a documentary about hunter s. thompson. to start with it was a .avi file and it was 1 hour and 31 minutes long, when i had succesfully converted the file,which took about 1 hour and 15 minutes v

  • Why: [nQSError: 59001] Left operation is not permitted on INTEGER operand

    I need some help about this error. The scenarios: 1. I used the formula which as below in answer : "SUM((CASE WHEN ALM_BKT_RES_GRP_V.FINANCIAL_ELEM_ID = 660.00 THEN ALM_BKT_RES_GRP_V.BUCKET_ALL ELSE 0 END)) / (CASE WHEN IFNULL(@{Scale},0)=0 THEN 1 EL

  • Thumbnails are not centering

    I'm a newbie to dreamweaver and I'm trying to create an auto-advancing portfolio gallery with thumbnails. I've got everything to work and can dupicate the gallery on another portfolio page simply by changing the links in the html. www.rodrice.net (5

  • Af:tree - how do I highlight the selected tree node?

    af:tree I checked the generated CSS file. I found that when a tree node is selected, the related CSS attribute is: .xj:link{ font-family:Arial,Helvetica,Geneva,sans-serif; font-size:10pt; font-weight:normal; color:#663300 I created a customized CSS a

  • Can't find Adobe Muse in Adobe Download Assistant?

    Hi, I was wondering if anyone can tell where you find Adobe Muse in the Adobe Download Assistant?