Config Lab issue

Hi,
I am getting an error while running the configlab between 2 environments.
error message is : Failed to apply data difference SQL for Root Object 946113536957 (SQL Error 000012154)
Could any one help?
Thanks..

Check the following link
[http://www.dba-oracle.com/t_ora_12154_tns_resolve_service_name.htm]

Similar Messages

Config Lab tool for Oracle CC&B Package

Hi,
Is there any configlab tool for Oracle CC&B package for confifuration management accross different environments. we can use VSS as version management for java codes and cobol codes in CC&B. But i am unable to identify any config lab tool for configuration management.
Guys please help me out in this.
Thanks and Regards
sayantan

Sayantan,
There is (unfortunately) no silver bullet for your requirement.
Here is a good blog article on the different options available.
https://blogs.oracle.com/theshortenspot/entry/configlab_versus_bundling_vers
Implementations use variations and combinations of the 3 tools that are available, coupled with 3rd party migration tools (like vss). The strategy for an implementation's development-to-production life cycle will vary based on a multitude of factors. Skill set of the IT shop, what tools they are used to, internal audit procedures, etc.
Hope the article provides some food for thought!
D

Config Lab Description or online docs ?

Hi,
I'm looking for some general info on the Oracle config lab. A client has asked me to prepare a document on it but googling it provides nothing but some links to oracle papers ( that I need to have an Oracle support account ) or Oracle training links. Any help would be appreciated.
Thanks

My experience with ConfigLab is that while it does provide value in some situations, it is difficult to use when maintaining several environments. We created a process to refresh ALL configuration / control tables from a master "gold" copy in one swipe. Think of ConfigLab as performing time intensive surgery on specific configuration settings and our process as a shotgun approach that destroys the original and completely replaces it very quickly. Our process basically exports all config tables from the source Config Master environment, truncates config tables in the target environment, imports config tables to the target environment, then updates environment specific settings in the database. The entire process takes about 20 minutes. It can take 20+ minutes to update just a few configuration settings using ConfigLab. The drawback to our technique was that it took us some time and several months for the table list and scripts to evolve into a solution that was suitable for go-live on CC&B 2.2. Overall, developing this process was well worth it. Not only did it save resource hours when using ConfigLab, it allowed the project team to test all of the latest updates in a more timely fashion, and it allowed the admin team to deliver fresh environments with the latest code and config MUCH more efficiently. We started developing this process as soon as CC&B 2.1 became available, and have maintained it for use with CC&B 2.2, and I intend to use it for our 2.3 upgrade. Please contact me if you'd like additional information regarding the details...

LMS 4.2.5 Syslog/Automated Action/Config mgmt issue

LMS 4.2.5 on Windows
We use the server as it's own Syslog server. The Syslog collector status is fine. I see syslogs coming into the server. However, I just made some changes on a router so ran a syslog report on it, but nothing was returned. I Tested the Collector Subscription and everything was fine.
We also have Automated Actions configured on certain syslog messages (duplex mismatch for example). There is an AA configured to send my team e-mails when this event occurs. There was a device that had two days worth of syslog messages complaining about this issue. Yet, we only received about 10 e-mails from the LMS system on it.
Another issue is with Configuration Mgmt. I fixed the duplex mismatch listed above and went to check the config tree to see if or when something changed. The last config archive was pretty old and I know changes were made on the device since then. This tells me that the LMS server didn't get notified of the config change or it would have gone out and checked it.
The one thing in common on all of the above is Syslog messages. LMS will take actions based on receiving these messages and those actions don't seem to be firing.
Any ideas would be greatly appreciated.
Thanks,
Mike S.

To confirm if the device is sending the syslogs and they are being received by LMS server properly, check the $NMSROOT/log/syslog.log and see it has the syslog from the device.
Unless syslog is there on syslog.log, we don't expect LMS to react on any AA.
For configuration backup, try to sync the device config by initiating a manual job to update the latest configuration from device. Even if there is no Automated Action working, you should still have a reoccurring/scheduled job configured to archive configuration backup periodically.
Following is a document I created for Syslog troubleshooting :
Ciscoworks LMS : Syslog in a Nutshell!
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

5548 Config Sync issue - Suspended by vPC

I have 2 UCS 6120 fabric interconnects which both have VPCs to 2 x 5548s. First fabric interconnect uses Po260 & vPC 260 and second fabric interconnect uses Po261 & vPC 261.  I used config sync to add "spanning-tree port type edge trunk" to int po 260 & 261. The commit worked properly, peers are in sync, etc. The problem is when I committed the command, int po 260 & 261 on the secondary 5548 went into "suspended by vPC". I can't figure out why they did this, the configurations are the same and all vPC consistency checks pass. To fix the issue, all I had to do was bounce the port-channel on the secondary 5548 (shut/no shut) after which it came back online. I only did this to Po260 so Po261 is still down so that I can troubleshoot further. Please see below:
vPC domain id                     : 70
Peer status                       : peer adjacency formed ok
vPC keep-alive status             : peer is alive
Configuration consistency status : success
Per-vlan consistency status       : success
Type-2 consistency status         : success
vPC role                          : secondary
Number of vPCs configured         : 7
Peer Gateway                      : Disabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Disabled
vPC Peer-link status
id   Port   Status Active vlans
1    Po255 up     1,10-13,26-29,151-156,180-181,200,318,331,399-417,
                   419-422,424-431,433-436,438-443,446-448,450,452-45
                   3,455-458,460-465,467-471,480-494,498-499,503,602-
                   633,644-657,659,663-664,698-701,800,805,850-851,89
                   0-891,899-904,906,908,912-950,952-958,975,987-988,    ....
vPC status
id     Port        Status Consistency Reason                     Active vlans
171    Po171       up     success     success                    1,10-13,26-
                                                                 29,151-156,
                                                                 180-181,200
                                                                 ,318,331,39
                                                                 9-417,41....
260    Po260       up     success     success                    10-13,26-29
                                                                 ,663-664,89
                                                                 0-891
261    Po261       down* success     success                    -
sh int po 261
port-channel261 is down (suspended by vpc)
Any help would be appreciated

Yes, I did check that and all parameters match as follows:
5548-2# sh vpc consistency-parameters int po 261
    Legend:
        Type 1 : vPC will be suspended in case of mismatch
Name                        Type Local Value            Peer Value
Shut Lan                    1     No                     No
STP Port Type               1     Edge Trunk Port        Edge Trunk Port
STP Port Guard              1     None                   None
STP MST Simulate PVST       1     Default                Default
lag-id                      1     [(7f9b,                [(7f9b,
                                  0-23-4-ee-be-46, 8105, 0-23-4-ee-be-46, 8105,
                                   0, 0), (8000,          0, 0), (8000,
                                  0-5-73-d4-d5-fc, 1, 0, 0-5-73-d4-d5-fc, 1, 0,
                                   0)]                    0)]
mode                        1     active                 active
Speed                       1     10 Gb/s                10 Gb/s
Duplex                      1     full                   full
Port Mode                   1     trunk                  trunk
Native Vlan                 1     10                     10
MTU                         1     1500                   1500
Admin port mode             1
Allowed VLANs               -     10-13,26-29,663-664,89 10-13,26-29,663-664,89
                                  0-891                  0-891
Local suspended VLANs       -     -                      -

CatOS 7.1(x) code - failed TFTP config push issues

All,
I have found that CatOS 7.1(1) & 7.1(2) running on multiple platforms (tested on WS-C4006 and WS-C6509 so far) does not properly work when trying to push a configuration change up to the device from a TFTP server. Our scripts (and I also executed each snmpset manually from the CLI to make sure it wasn't a script issue) can successfully push and pull configs on other CatOS versions on both 4000 and 6000 devices but so far has failed on every attempt for 7.1(1) & 7.1(2) code on multiple platforms. I can't find anything on CCO or the internet where someone has run into this before.
Anyone seen anything similar?
We do large scales changes on many networks during maintainence windows and not having these devices work via SNMP and forcing us to use the CLI is a big time factor that is hindering our productivity. Would like to know why these fail and if there is a workaround/solution? Or do they not support SNMP/TFTP config change methods for whatever reason?
When pushing a config change up to one of these devcie usign the 7.1.x code the status MIB will report back a 2 which means it was successful. But the change never shows up in the config. I'm simply trying to change the system contact in the config during my proof of concept until I found out what this issue is.
Thanks in advance for any and all help/sugeestions,
Steve

Joe,
First off thanks for any and all help that you can provide. Here are the OIDs that I hit to push a cfg from the TFTP server to the remote CatOS switch. I am successful in pushing changes to a 6509 running 6.5 code and 7.6(8) code but have failed to push to multiple models of CatOS devices running 7.1(1) or 7.1(2) code to date. I can pull the cfg from these 7.1(x) boxes without a problem. But for test purposes we have tried jsut simply changing the system contact to see if this works or not and like I said so far its has not yeilded any successful results for 7.1(x) code.
snmpwalk -c .1.3.6.1.4.1.9.5.1.3.1.1.17 <<<< se what slot the SUP module is located first
snmpwalk -c .1.3.6.1.4.1.9.5.1.5
snmpset -c .1.3.6.1.4.1.9.5.1.5.1.0 string
snmpset -c .1.3.6.1.4.1.9.5.1.5.2.0 string textfile.txt
snmpset -c .1.3.6.1.4.1.9.5.1.5.3.0 i 1
snmpset -c .1.3.6.1.4.1.9.5.1.5.4.0 i 2
snmpwalk -c .1.3.6.1.4.1.9.5.1.5.5
When we originally discovered this it was run through a script. but through testing out using the manaual process via CLI even manaually running the snmpsets and walks fail also.
Thanks in advance,
Steve

UCS B420 M3 config set issue / question

Hi all,
right now i had 2 issues that requires my consultation with the community:
I'm trying to get configured on the CCW the sku for de UCS B420 M3 but the only part that shows is UCS-B230M2-VCDL1, and don't show any other sku for UCS-B series servers, where we cant config set to get a quote??
In the tec specs says that the UCS B420 M3 can had 4 CPUs, each CPU with 8 cores. in that order you had 32 cores total in the blade??

The SKU is UCSB-B420-M3-U and for the complete solution you can also use n20-z0001.
Yes B420 M3 has 4 processors with 8 core per processor so you can have 32 cores in B420 M3

Lms 4.2 , Config Archival issue

Hi
Please have a look to the below image , what is the reason for this failed Archival and how to solve this issue
thanks
Ibrahim

The 25 success means LMS is working fine.
The 277 failed means LMS has problems communicating with these devices.
Causes can be:
Bad credentials
ACL's on the device not permitting LMS ip address to talk to the device.
protocols (TELNET, SSH, RCP, SCP) not running on the devices.
firewalls or ACL's on routers not permitting LMS protocols.
Pick a single device, test the protocols comming from the server to the device, test credentials.
Cheers,
Michel

LMS 4.2 - Config collection issue

After launching config collection job in LMS 4.2 I can't get job results and receive error message - Unable to get results of job execution for device...
I've increased the job result wait time using option in Admin > Collection Settings ... , but nothing changed.
Here are screenshots of error message and wait settings I used:
Thanks in advance!

i have seen this with SNMP timeout needed to be increased.
please try to increase those values, and not the job completion values.
I just saw in CP LMS 4.2 that the values are assembled on a new page.
all of them ...
Admin > Network > Timeout and Retry Settings > Inventory/Config Timeout and Retry Settings
also in the navigator of the same last windows your screenshot is from try the device specific timeouts:
Admin > Collection Settings > Config > Edit the Inventory/Config Timeout and Retry Settings
HTH

Config-Archive Issue on PI 1.3

Hi Everyone,
      Customer has recently installed PI 1.3 software, and then used it to back up or restore devices' config. However, when imported all devices into PI 1.3 by csv template and set up some setting about schedule daily job of configuration-archives, we found that the status of the lastest archive still displayed the initial inventory collection on "Configuration Archives", it seems that PI can't automatically get devices' configuration daily, however we can find the schedule jobs display success. That's so weird.
       Most of devices are Cisco 800 series(such as 871、887 etc) and two of them are WLC(5500 and 7500), all version of them satisfy with PI 1.3 Support devices datasheet's requestment.
       All of devices have been added into ACS 5.4 and used TACACS + to authenticate user by AD account. PI just uses local account to login and uses 15-level username and password to telnet devices to get their configuration file. In LMS case , we can try to edit the prompt symbol in tacacs file on lms server. In this case, we have checked the ACS AAA report and found that the PI has normally used some commands to get configuration such as show running-config, copy etc.
       Please give some advices, thx in advance.
Regards,
Tira

Any update?

Config replace issue

I am trying to use copy replace but getting "%The input file is not a valid config file." errror message on ASR1001 platform.
following is the config i am trying to replace (saved as test-config)
hostname ABC-01
boot-start-marker
boot-end-marker
vrf definition Mgmt-intf
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
logging buffered informational
enable secret 5 xxxxxxxxx
aaa new-model
aaa authentication login default local
aaa session-id common
username xxxxx privilege 15 secret 5 xxxxxxxxxxxxxx
no ip bootp server
ip domain name xyz.com
ipv6 spd queue max-threshold 63
multilink bundle-name authenticated
redundancy
mode none
ip tftp source-interface GigabitEthernet0
ip ssh time-out 60
ip ssh version 2
interface Loopback0
description TEST
ip address 1.1.1.1 255.255.255.255
interface GigabitEthernet0
vrf forwarding Mgmt-intf
ip address 192.168.20.20 255.255.255.0
negotiation auto
cdp enable
ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 192.168.20.1
line con 0
exec-timeout 0 0
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0
exec-timeout 5 0
privilege level 15
no activation-character
logging synchronous
transport preferred none
transport input ssh
transport output none
stopbits 1
default exec
line vty 1 4
exec-timeout 5 0
privilege level 15
logging synchronous
transport input ssh
transport output none
line vty 5 15
exec-timeout 5 0
privilege level 15
logging synchronous
transport input ssh
transport output none
end

There are some strict restrictions on the file format. See if this link helps.
http://ieoc.com/forums/p/29629/241872.aspx

Data-management-config.xml issue

My question is if i can have multiple
data-management-config.xml files? for a better administration i am
separating it into multiple files but when trying to access a
destination it fails so i assume this is not possible, is that
right?

Ok imagine i have 30 destinations in one
data-management-config.xml, that's a lot of destinations, so when i
want to modify something in that file i need to look all over it to
find what i want, so instead of that it would be nice to being able
to have 3 data-management-config.xml files, with 10 destinations on
each, that way it would be easier to manage and update them.
This is requirement of the QA department, they don't want to
review a gigantic data-management-config.xml, they would prefer to
manage 3 or 4 files instead of one.
So the question is: IS this possible? or do i necessarily
need to use one and just one data-management-config.xml?

Config Tool Issue

Hi Team,
changed a the value of UME.USERMAPPING.UNSECURE as true and now am unable tologon to portal
or the config tool to change the settings
please help with this
Regards
Madhu

Hi Madhu,
The UME.USERMAPPING.UNSECURE is set to true in the sense the User Mapping data is stored with weak encryption(base 64 encoded).
So while updating the service pack leverl from SP12 and higher, a conversion tool allows you to convert any existing user mapping data to strong encryption after you change from weak to strong encryption.
Please check the below link
http://help.sap.com/saphelp_nw04/helpdata/en/04/d246215f1d4f588d1d9c49391acb01/frameset.htm
Hope this helps.
Thanks,
Ansar

SRW2024P config file issue

Hello there, we got a problem with our Linksys switch. What happened was, we wanted to restore a config from another switch (same) so we backed up the config and loaded it onto this current "dead" one. All we thought was going fine until the switch never came back up, and logging into the console was impossible as it wouldn't accept any of our passwords.
What we wish to accomplish is either a) reset the switch completely back to factory settings or b) get some sort of admin access. Both of those tasks are seeming to be impossible at the moment. I've upgraded the firmware using XMODEM which didn't help. What I've noticed with the switch (however I don't know if this is the problem) is that there's no startup-config file. I tried to upload a startup-config using XMODEM but the switch just won't save the config (yes there's enough space) as it asks me to Runtime or Diag after uploading to which I choose runtime and absolutely nothing happens. I've read that removing the startup-config file and rebooting the switch should allow me to log in using admin/blank, but again, that's not the case.
Spoke to Linksys support over in the States and they seem to not be very helpful. They said try upgrading the firmware but of course that hasn't helped at all. Doing an RMA is going to be very last option because we need to try and somehow get this switch into production in the next 2-3 days and I'm trying to avoid RMA which I was told might take 8-10 working days to get another switch. Suggestions?
Thanks in advance.

Hello, maybe this can help:
Is my understanding that logging in to the console is impossible as it won't recognized any of the passwords, so here is a link of how to reset the password back to factory defaults, it is pretty simple and it may get you going.
http://www.cisco.com/en/US/products/ps9967/products_qanda_item09186a0080a3636a.shtml
Hope this helps!

IOS XE Cisco 4431 NAT Config DNS Issues

Hi All,
I found out that the XE IOS does not support IP DNS Server and therefor you are required to have a DNS sever seperately. My question is if i push all clients to a public DNS server such as google why does it not work?
I can ping out and do NSLOOKUPS but nothing resolves in the browser. I have added an inbound rule to the WAN ACL to allow UDP/TCP 53 from 8.8.4.4 and it does not work. Ive spent ages and only thing that does work is IP ANY ANY and obviously i am not leaving that rule there. Is it a bug?
Thanks
Ben

Hi Collin,
Sorry for the delay, i have left the "IP any any" under WAN ACL 102.
I did try CBAC at the 11th hour but was spewing up unrecognised remarks and didn't have time to go through.
Please see confirm below for reference i have put in google DNS.
Just to be clear No DNS resolves from DHCP clients if i remove the IP any any from WAN ACL102. The router can resolve locally i.e over serial.
Many Thanks
Ben
Bespoke#sh run
Building configuration...
Current configuration : 12805 bytes
! Last configuration change at 18:24:43 GMT Sun Mar 15 2015 by admin
! NVRAM config last updated at 18:24:45 GMT Sun Mar 15 2015 by admin
version 15.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
no platform punt-keepalive disable-kernel-core
hostname Bespoke
boot-start-marker
boot system flash bootflash:isr4400-universalk9.03.13.02.S.154-3.S2-ext.SPA.bin
boot-end-marker
vrf definition Mgmt-intf
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
logging buffered 16386 informational
logging rate-limit 100 except warnings
no logging console
aaa new-model
aaa authentication fail-message ^CCCC Login failed.
This could be because your RADIUS credentials are incorrect, or the RADIUS servers are unreachable. If servers are unreachable, use a local username and password.^C
aaa authentication login default group radius local enable
aaa authentication enable default group radius enable
aaa authorization console
aaa authorization exec default group radius local
aaa session-id common
clock timezone GMT 0 0
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 2:00
no ip source-route
ip options drop
no ip bootp server
ip domain name x.net
ip name-server x.x.x.x
ip name-server x.x.x.x
ip dhcp bootp ignore
no ip dhcp conflict logging
ip dhcp excluded-address 192.168.1.1 192.168.1.15
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 172.1.0.1
ip dhcp excluded-address 172.1.1.1
ip dhcp excluded-address 172.1.2.1
ip dhcp excluded-address 172.1.3.1
ip dhcp pool ManagementVLAN100
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.4.4
ip dhcp pool VLAN200
network 10.10.8.0 255.255.252.0
default-router 10.10.10.1
dns-server 8.8.4.4
lease 0 1
ip dhcp pool VLAN300
network 172.1.0.0 255.255.255.0
default-router 172.1.0.1
dns-server 8.8.4.4
ip dhcp pool VLAN400
network 172.1.1.0 255.255.255.0
default-router 172.1.1.1
dns-server 8.8.4.4
ip dhcp pool VLAN500
network 172.1.2.0 255.255.255.0
default-router 172.1.2.1
dns-server 8.8.4.4
ip dhcp pool VLAN600
network 172.1.3.0 255.255.255.0
default-router 172.1.3.1
dns-server 8.8.4.4
subscriber templating
multilink bundle-name authenticated
redundancy
mode none
no cdp run
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
class-map match-all 140mbpsratelimit
match access-group 103
policy-map 140mbpsratelimit
class 140mbpsratelimit
police cir 146800500 bc 27525120 be 55050240
   conform-action transmit
   exceed-action drop
   violate-action drop
interface Null0
no ip unreachables
interface GigabitEthernet0/0/0
no ip address
negotiation auto
interface GigabitEthernet0/0/0.602
description PRIMARYWAN200MBPS
encapsulation dot1Q 602
ip address x.x.x.x 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip verify unicast source reachable-via rx allow-default
ip access-group 102 in
no cdp enable
ip virtual-reassembly
interface GigabitEthernet0/0/1
no ip address
negotiation auto
interface GigabitEthernet0/0/1.100
description ManagementVLAN100
encapsulation dot1Q 100
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no cdp enable
ip virtual-reassembly
interface GigabitEthernet0/0/1.200
encapsulation dot1Q 200
ip address 10.10.10.1 255.255.252.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no cdp enable
service-policy input 140mbpsratelimit
service-policy output 140mbpsratelimit
ip virtual-reassembly
interface GigabitEthernet0/0/1.300
encapsulation dot1Q 300
ip address 172.1.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no cdp enable
ip virtual-reassembly
interface GigabitEthernet0/0/1.400
encapsulation dot1Q 400
ip address 172.1.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no cdp enable
ip virtual-reassembly
interface GigabitEthernet0/0/1.500
encapsulation dot1Q 500
ip address 172.1.2.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no cdp enable
ip virtual-reassembly
interface GigabitEthernet0/0/1.600
encapsulation dot1Q 600
ip address 172.1.3.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no cdp enable
ip virtual-reassembly
interface GigabitEthernet0/0/2
no ip address
negotiation auto
interface GigabitEthernet0/0/2.603
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
ip nat inside source list 1 interface GigabitEthernet0/0/0.602 overload
ip nat inside source static tcp 192.168.1.15 443 x.x.x.x 443 extendable
no ip forward-protocol nd
no ip forward-protocol udp
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 x.x.x.x
ip route 0.0.0.0 255.0.0.0 Null0
ip route 10.0.0.0 255.0.0.0 Null0
ip route 127.0.0.0 255.0.0.0 Null0
ip route 169.254.0.0 255.255.0.0 Null0
ip route 172.16.0.0 255.240.0.0 Null0
ip route 192.0.0.0 255.255.255.0 Null0
ip route 192.0.2.0 255.255.255.0 Null0
ip route 192.168.0.0 255.255.0.0 Null0
ip route 198.18.0.0 255.254.0.0 Null0
ip route 198.51.100.0 255.255.255.0 Null0
ip route 203.0.113.0 255.255.255.0 Null0
ip radius source-interface GigabitEthernet0/0/0.602
access-list 1 remark NAT-LAN
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 10.10.8.0 0.0.3.255
access-list 1 permit 172.1.0.0 0.0.0.255
access-list 1 permit 172.1.1.0 0.0.0.255
access-list 1 permit 172.1.2.0 0.0.0.255
access-list 1 permit 172.1.3.0 0.0.0.255
access-list 50 remark SNMP_ACCESS
access-list 50 permit x.x.x.x 0.0.0.31
access-list 50 permit x.x.x.x 0.0.0.31
access-list 51 remark NTP_ACCESS
access-list 51 permit x.x.x.x
access-list 51 permit x.x.x.x
access-list 51 deny   any
access-list 51 remark NTP_ACCESS
access-list 102 remark WAN_INGRESSPrimary
access-list 102 permit ip any any
access-list 102 permit tcp any host x.x.x.x eq 443
access-list 102 permit udp host 8.8.4.4 eq domain host x.x.x.x
access-list 102 permit udp host 8.8.8.8 eq domain host x.x.x.x
access-list 102 permit udp host x.x.x.x eq ntp host x.x.x.x eq ntp
access-list 102 permit udp host x.x.x.x eq ntp host x.x.x.x eq ntp
access-list 102 permit udp host x.x.x.x eq 1645 host x.x.x.x eq 1645
access-list 102 permit udp host x.x.x.x eq 1645 host x.x.x.x eq 1645
access-list 102 permit udp x.x.x.x 0.0.0.31 host x.x.x.x eq snmp
access-list 102 permit udp x.x.x.x 0.0.0.31 host x.x.x.x eq snmp
access-list 102 permit tcp x.x.x.x 0.0.0.31 host x.x.x.x eq telnet
access-list 102 permit tcp x.x.x.x 0.0.0.31 host x.x.x.x eq 22
access-list 102 permit tcp x.x.x.x 0.0.0.31 host x.x.x.x eq telnet
access-list 102 permit tcp x.x.x.x 0.0.0.31 host x.x.x.x eq 22
access-list 102 permit icmp x.x.x.x 0.0.0.31 any echo
access-list 102 permit icmp x.x.x.x 0.0.0.31 any echo
access-list 102 permit icmp any any echo-reply
access-list 102 permit icmp any any time-exceeded
access-list 102 permit icmp any any unreachable
access-list 102 deny   icmp any any
access-list 102 deny   ip host 0.0.0.0 any
access-list 102 deny   ip host 255.255.255.255 any
access-list 102 deny   ip any any
access-list 103 remark 140mbpsratelimit
access-list 103 permit udp any any
access-list 103 permit tcp any any
access-list 150 remark VTY_ACCESS
access-list 150 permit tcp x.x.x.x 0.0.0.31 any eq telnet
access-list 150 permit tcp x.x.x.x 0.0.0.31 any eq 22
access-list 150 permit tcp x.x.x.x 0.0.0.31 any eq telnet
access-list 150 permit tcp x.x.x.x 0.0.0.31 any eq 22
access-list 150 deny   ip any any
snmp-server community x.x.x.x RO 50
radius server RadiusPR
address ipv4 x.x.x.x auth-port 1645 acct-port 1646
timeout 3
radius server RadiusTC
address ipv4 x.x.x.x auth-port 1645 acct-port 1646
timeout 3
control-plane
line con 0
logging synchronous
transport output none
stopbits 1
line aux 0
exec-timeout 0 1
no exec
transport output none
stopbits 1
line vty 0 4
access-class 150 in
logging synchronous
transport input telnet ssh
transport output none
line vty 5 15
access-class 150 in
logging synchronous
transport input telnet ssh
ntp access-group peer 51
ntp server x.x.x.x
ntp server x.x.x.x
end

Config Lab issue

Similar Messages

Maybe you are looking for