EZVPN question

Hi,
I have a C870 running 12.4(4)T2. I am using EZVPN on this router. My question is what does "Phase: 6" mean? Thanks
#sho crypto ipsec client ezvpn
Easy VPN Remote Phase: 6
Tunnel name : primary
Inside interface list: Vlan1
Outside interface: FastEthernet4
Current State: IPSEC_ACTIVE
Last Event: CONN_DOWN
DNS Primary: x.x.x.x
DNS Secondary: x.x.x.x
NBMS/WINS Primary: x.x.x.x
NBMS/WINS Secondary: x.x.x.x
Default Domain: customer.com
Save Password: Disallowed
Current EzVPN Peer: x.x.x.x

Hi,
The development in this technology has been in phases. Please check the following URLs.
http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087dad.html
http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps5012/products_feature_guide09186a00800a8565.html
http://www.cisco.com/en/US/customer/products/ps6350/products_configuration_guide_chapter09186a0080455b7d.html
HTH,
Please rate if it helps.
Regards,
Kamal

Similar Messages

  • EZVPN xauth question

    Hello,
    I am trying using an Easy VPN connection on Cisco 800 router from a remote Cisco VPN client on a laptop. I don't know if it's important but I get some error debuging isakmp and ipsec that I would like to know why they appear when connecting through EZVPN.
    This router is configured with several site-to-site VPN connections and should use isakmp profile to use both types of VPN. The config I finally have used, from read posts and docs, is,
    aaa new-model
    aaa authentication login RAVPNAUTH local
    aaa authorization network RAVPNAUTH local
    crypto isakmp policy 10
    encr 3des
    hash md5
    authentication pre-share
    group 2
    lifetime 28800
    crypto isakmp policy 20
    encr aes
    authentication pre-share
    group 2
    lifetime 3600
    ##### crypto isakmp keys of site-to-site VPNs #####
    crypto isakmp key ********** address **********
    crypto isakmp key ********** address **********
    crypto isakmp client configuration group RAVPNGRPRD
    key RAVPNkey
    pool RAVPNPoolRD
    acl RAVPNRDACL
    crypto isakmp profile RAVPNRD
       match identity group RAVPNGRPRD
       client authentication list RAVPNAUTH
       isakmp authorization list RAVPNAUTH
       client configuration address respond
    #### crypto ipsec transforms ####
    crypto ipsec transform-set vpn000 esp-3des esp-md5-hmac
    crypto ipsec transform-set vpn001 esp-3des esp-md5-hmac
    crypto ipsec transform-set vpn002 esp-3des esp-md5-hmac
    crypto ipsec transform-set RAVPNRD esp-aes esp-sha-hmac
    crypto dynamic-map DYNRAVPNRD 10
    set transform-set RAVPNRD
    set isakmp-profile RAVPNRD
    reverse-route
    #### site-to-site crypto map tunnels ####
    crypto map tunel 10 ipsec-isakmp
    set peer peer-ip00
    set transform-set vpn000
    set pfs group2
    match address 106
    crypto map tunel 20 ipsec-isakmp
    set peer peer-ip01
    set transform-set vpn001
    match address 161
    crypto map tunel 1000 ipsec-isakmp dynamic DYNRAVPNRD
    username USR password ....
    interface ATM0.1 point-to-point
    crypto map tunel
    ip local pool RAVPNPoolRD 192.168.120.1 192.168.120.6
    and the errors presented on debugging,
    These occurs when connecting from Cisco VPN Client, connects OK and asks for user and password.
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Encryption algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3
    .Mar 12 13:06:24: ISAKMP:(0):Hash algorithm offered does not match policy!
    .Mar 12 13:06:24: ISAKMP:(0):atts are not acceptable. Next payload is 3 Unknown Attr: 0x700C Unknown Attr: 0x7005
    .Mar 12 13:06:28: ISAKMP (0/2290): Unknown Attr: CONFIG_MODE_UNKNOWN (0x700C)
    .Mar 12 13:06:28: ISAKMP (0/2290): Unknown Attr: MODECFG_HOSTNAME (0x700A)
    .Mar 12 13:06:28: ISAKMP (0/2290): Unknown Attr: CONFIG_MODE_UNKNOWN (0x7005)
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes 256 esp-md5-hmac comp-lzs }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes 256 esp-sha-hmac comp-lzs }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes esp-md5-hmac comp-lzs }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes esp-sha-hmac comp-lzs }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes 256 esp-md5-hmac }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes 256 esp-sha-hmac }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    .Mar 12 13:06:29: IPSEC(ipsec_process_proposal): transform proposal not supported for identity:
        {esp-aes esp-md5-hmac }
    .Mar 12 13:06:29: ISAKMP:(2290): IPSec policy invalidated proposal with error 256
    Is this a normal process of matching isakmp and ipsec policies or am I missing anything?
    Regards

    Hi there,
    Your IPsec proposal is:
    crypto ipsec transform-set RAVPNRD esp-aes esp-sha-hmac
    You are not using AES-256, since the client tries all the options available, then you will see these logs in the ASA.
    Hope to help.
    Portu.
    Please rate any helpful posts.

  • 1760 Router Questions

    Essentially, I've been studying for the CCNA and I've decided to purchase some older equipment to set up in my house so I can get some additional practice with the IOS interface. I've been looking at 1760 routers on ebay, and it seems like a pretty good place to start as I would like to actually use the devices in my current LAN, rather than simply setting up a lab.
    My question is, could I take a 1760 and connect it to my cable modem, and then connect a switch (say a 2950 that I'll purchase a later date) to another interface? What add-in cards will I need to make this possible?
    Here's a graphic representation of what I'd like to do.
    If the 1760 isn't a good choice for this sort of setup, what would you reccomend? I'd prefer 100Mbit/sec capable routers if possible.
    Thanks for the help/suggestions.

    Taylor,
    if you have a VLAN capable switch and proper IOS support, you can configure PPPoE client on a subinterface hence you can use the 1760 (or any other router) to connect to the ISP and route between VLANs.
    This is my current setup:
    interface GigabitEthernet0/1
    no ip address
    duplex auto
    speed auto
    interface GigabitEthernet0/1.4
    encapsulation dot1Q 4
    ip pim dense-mode
    ip igmp query-interval 125
    pppoe enable group global
    pppoe-client dial-pool-number 9
    interface Dialer9
    mtu 1490
    bandwidth 4672
    bandwidth receive 480
    ip address negotiated
    ip nat outside
    ip virtual-reassembly in
    encapsulation ppp
    ip policy route-map RM-loop1
    dialer pool 9
    crypto map CM-1
    crypto ipsec client ezvpn witopia_IAD
    As you can see I use a subinterface to do PPPoE client and have the Dialer 9 interface receive the public IP address then I route traffic to other dubinterfaces. I used to do that on a 1751 nd on a 1721 this is now a 1921.
    You need to ensure the pppoe client on 803.1q subinterfaces is supported in the ios version you run and obviously that 803.1q subinterfaces are supported.
    You can do all of that in the cisco feature nav.
    Enjoy
    Fabio

  • Does ASA ezVPN support reactive primary vpn server feature

    hi,
    i am going to configure asa5505 as the azvpn client . and configre primay and secondary vpn server in the list.
    i find some feature that is support by ios ROUTER  ezvpn, not sure it will be support on ASA ezVPN???
    Question? will the ezvpn   fall back to the primary vpn server , if primary back on line,  on ASA ?
    Reactivate Primary Peer
    The Reactivate Primary Peer feature allows a default primary peer to be defined. The default primary peer (a server) is one that is considered better than other peers for reasons such as lower cost, shorter distance, or more bandwidth. With this feature configured, if Easy VPN fails over during Phase 1 SA negotiations from the primary peer to the next peer in its backup list, and if the primary peer is again available, the connections with the backup peer are torn down and the connection is again made with the primary peer.

    No, the Primary peer won't be tried again until the phase 1 tunnel is torn down and reactivated. Re-keys do not count. Hope this helps.

  • EzVPN or L2L - which is more appropriate?

    I am in the process of desiging a solution to connect approximately 20 teleworkers to our network for the purposes of working from home. The remote users will have some form of broadband connection (cable or DSL). We have both a VPN3030 and a PIX515e(v7) in our inventory to use as the head end device. My hope is to use the 3030 since it is already in use for L2L and VPNC connections. I have an 871 router in house for testing, it seems like a good choice for the job. My questions are this:
    1. Is the 871 the right device for the job? If not, what is?
    2. Since the broadband connections will have dynamic IP addresses what is the most appropriate VPN type L2L or EZ?
    Any advice will be appreciated. Thanks in advance,
    Mike

    Not sure how the LAN-to-LAN users connect currently on the VPNC. How many users do you have behind the 871 ? If it is one user, then i think the Ezvpn should do, more than 3 or 4 users you can look at a L2L

  • EZVPN Virtual Interface Setup

    Hi All,
    I currently have an 857 router (IOS 12.3(14)YT1) connected via EZVPN to an ASA Box (5510, ASA Vers 7.2). My question is this- Everything behind the router can access the local LAN the other side of the ASA box, but i would like the router itself to be able to access the local LAN the other side of the ASA box, currently at the minute if i try and ping anything on the ASA side LAN from the router it goes out to the internet, i need it to be able to access the local LAN to monitor it though. How would i go about this? i have read a few things about virtual interfaces but have no experience of these and am not sure where to start?
    Any Help is greatly appreciated
    I have attached a very quick Viso diagram to try and show what i'm trying to achieve

    Hi,
    Refer
    1.http://help.sap.com/saphelp_nw04/helpdata/en/e9/ae1b9a5d2cef4ea4b579f19d902871/frameset.htm
    2.http://help.sap.com/saphelp_nw04/helpdata/en/37/12dd95a22831469a2363d98b19506b/frameset.htm
    Regards,
    P.Manivannan

  • Multi-VPN types, one device, three questions

    Configuration summary:
    - Cisco 1841 = hub router
    - 5x 877s = spoke routers with dynamically assigned fixed IPs
    - The 1841 also hosts EZVPN clients
    Problem:
    The configuration above works perfectly; my issue occurs when I configure dial based (dynamic IP) backup VPN connections from my spoke routers.
    My crypto key is the issue, i.e. I need x-auth for my EZVPN clients and no x-auth for my dial backup clients.
    I have tried profiles with keyrings for the EZVPN and dial backup client only with no success and recently read on the Forum that static and dynamic VPN connections are not recommended to co-exist.
    So this brings me to my questions:
    1. Can Fixed, Dynamic and EZVPN connection co-exist on an 1841 router?
    2. If using profiles/keyrings, should this be applied to all VPN connections and not just the dynamic connections like I tried?
    3. Any other suggestions

    Hi,
    There is a fix to all the problems you are mentioned by implementing DMVPN.
    More info on DMVPN here:
    http://www.cisco.com/en/US/products/ps6658/index.html
    For DMVPN and EZVPN config example:
    http://cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00801eafcb.shtml
    Please rate if this helped.
    Regards,
    Daniel

  • Questions on Print Quote report

    Hi,
    I'm fairly new to Oracle Quoting and trying to get familiar with it. I have a few questions and would appreciate if anyone answers them
    1) We have a requirement to customize the Print Quote report. I searched these forums and found that this report can be defined either as a XML Publisher report or an Oracle Reports report depending on a profile option. Can you please let me know what the name of the profile option is?
    2) When I select the 'Print Quote' option from the Actions drop down in the quoting page and click Submit I get the report printed and see the following URL in my browser.
    http://<host>:<port>/dev60cgi/rwcgi60?PROJ03_APPS+report=/proj3/app/appltop/aso/11.5.0/reports/US/ASOPQTEL.rdf+DESTYPE=CACHE+P_TCK_ID=23731428+P_EXECUTABLE=N+P_SHOW_CHARGES=N+P_SHOW_CATG_TOT=N+P_SHOW_PRICE_ADJ=Y+P_SESSION_ID=c-RAuP8LOvdnv30grRzKqUQs:S+P_SHOW_HDR_ATTACH=N+P_SHOW_LINE_ATTACH=N+P_SHOW_HDR_SALESUPP=N+P_SHOW_LN_SALESUPP=N+TOLERANCE=0+DESFORMAT=RTF+DESNAME=Quote.rtf
    Does it mean that the profile in our case is set to call the rdf since it has reference to ASOPQTEL.rdf in the above url?
    3) When you click on submit button do we have something like this in the jsp code: On click call ASOPQTEL.rdf. Is the report called using a concurrent program? I want to know how the report is getting invoked?
    4) If we want to customize the jsp pages can you please let me know the steps involved in making the customizations and testing them.
    Thanks and Appreciate your patience
    -PC

    1) We have a requirement to customize the Print Quote report. I searched these forums and found that this report can be defined either as a XML Publisher report or an Oracle Reports report depending on a profile option. Can you please let me know what the name of the profile option is?
    I think I posted it in one of the threads2) When I select the 'Print Quote' option from the Actions drop down in the quoting page and click Submit I get the report printed and see the following URL in my browser.
    http://<host>:<port>/dev60cgi/rwcgi60?PROJ03_APPS+report=/proj3/app/appltop/aso/11.5.0/reports/US/ASOPQTEL.rdf+DESTYPE=CACHE+P_TCK_ID=23731428+P_EXECUTABLE=N+P_SHOW_CHARGES=N+P_SHOW_CATG_TOT=N+P_SHOW_PRICE_ADJ=Y+P_SESSION_ID=c-RAuP8LOvdnv30grRzKqUQs:S+P_SHOW_HDR_ATTACH=N+P_SHOW_LINE_ATTACH=N+P_SHOW_HDR_SALESUPP=N+P_SHOW_LN_SALESUPP=N+TOLERANCE=0+DESFORMAT=RTF+DESNAME=Quote.rtf
    Does it mean that the profile in our case is set to call the rdf since it has reference to ASOPQTEL.rdf in the above url?
    Yes, your understanding is correct.3) When you click on submit button do we have something like this in the jsp code: On click call ASOPQTEL.rdf. Is the report called using a concurrent program? I want to know how the report is getting invoked?
    No, there is no conc program getting called, you can directly call a report in a browser window, Oracle reports server will execute the report and send the HTTP response to the browser.4) If we want to customize the jsp pages can you please let me know the steps involved in making the customizations and testing them.
    This is detailed in many threads.Thanks
    Tapash

  • Satellite P300D-10v - Question about warranty

    HI EVERYBODY
    I have these overheating problems with my laptop Satellite P300D-10v.
    I did everything I could do to fix it without any success..
    I get the latest update of the bios from Toshiba. I cleaned my lap with compressed air first and then disassembled it all and cleaned it better.(it was really clean insight though...)
    BUT unfortunately the problem still exists...
    So i made a research on the internet and I found out that most of Toshiba owners have the same exactly problem with their laptop.
    Well i guess this is a Toshiba bug for many years now.
    Its a really nice lap, cool sound (the best in laptop ever) BUT......
    So I wanted to make a question. As i am still under warranty, can i return this laptop and get my money back or change it with a different one????
    If any body knows PLS let me know.
    chears
    Thanks in advance

    Hi
    I have already found you other threads.
    Regarding the warranty question;
    If there is something wrong with the hardware then the ASP in your country should be able to help you.
    The warranty should cover every reparation or replacement.
    But I read that you have disasembled the laptop at your own hand... hmmm if you have disasembled the notebook then your warrany is not valid anymore :(
    I think this should be clear for you that you can lose the warrany if you disasemble the laptop!
    By the way: you have to speak with the notebook dealer where you have purchased this notebook if you want to return the notebook
    The Toshiba ASP can repair and fix the notebook but you will not get money from ASP.
    Greets

  • Question regarding NULL and forms

    Hi all, i have a survey that im working on that will be sent via email.
    I'm having an issue though. if i have a multiple choice question, and the user only selects one of the choices, all the unselected choices return as NULL. is there a way i can filter out anytihng that says "NULL" so it only shows the selected options?
    thanks.
    here is the page that retrieves all the data. thanks
    <body>
    <p>1) Is this your first visit to xxxxxxx? <b><%=request.getParameter("stepone") %></b>
    </p>
    <p> </p>
    <p>2) How did You Learn About xxxxxxx?</p>
    <p><b><%=request.getParameter("steptwoOne") %></b>
      <br>
        <b><%=request.getParameter("steptwoTwo") %></b>
      <br>
        <b><%=request.getParameter("steptwoThree") %></b>
      <br>
        <b><%=request.getParameter("steptwoFour") %></b>
      <br>
        <b><%=request.getParameter("steptwoOther") %></b>
    </p>
    <p> </p>
    <p>3) What was your main reason for visiting xxxxx?</p>
    <p><b><%=request.getParameter("stepthreeOne") %></b>
        <br>
          <b><%=request.getParameter("stepthreeTwo") %></b>
        <br>
          <b><%=request.getParameter("stepthreeThree") %></b>
        <br>
          <b><%=request.getParameter("stepthreeFour") %></b>
        <br>
          <b><%=request.getParameter("stepthreeOther") %></b>
    </p>
    <p>4) did you find the information you were looking for on this site?</p>
    <p><b><%=request.getParameter("stepfour") %>
    <br>
    <b><%=request.getParameter("stepfourOther") %></b>
    </b></p>
    <p>5) Do you plan on using this website in the future?</p>
    <p><b><%=request.getParameter("stepfive") %></b></p>
    <p>6) What is your gender</p>
    <p><b><%=request.getParameter("stepsix") %></b></p>
    <p>7) What is your age group</p>
    <p><b><%=request.getParameter("stepseven") %></b></p>
    8) Would you like to take a moment and tell us how we can improve your experience on xxxxxxxxxx?
    <p><b><%=request.getParameter("stepeightFeedback") %></b></p>

    i was messing around and came up with this. it doesnt remove the null, but if it is null it adds ABC beside it. so i think i might be getting close. i just need to figure out how to replace the null.
    code]
    <b><%=request.getParameter("steptwoFour") %></b>
         <% if (request.getParameter("steptwoFour") == null ) {
         %>
         <% out.print("abc"); %>
         <% }
         %>

  • Anyone know how to remove Overdrive books from my iphone that have been transferred from my computer? They do not show up on itunes. I see a lot of answers to this question but they all are based on being able to see the books in iTunes.

    How do I remove Overdrive books from the library that were downloaded onto my computer then transferred to my iphone? The problem is that they do not show up in iTunes.
    I see this question asked a lot when I google, but they always give answers that assumes you can find the books in iTunes either under the books tab, or the audio books tab or in the music. They do not show up anywhere for me. They do not remove from the app like the ones I downloaded directly onto my iphone.the related archived article does not answer it either.  I even asked a guy working at an apple store and he could not help either.   Anybody...?
    Thanks!

    there is an app called daisydisk on mac app store which will help you see exactly where the memory is focused and consumed try using that app and see which folders are using more memory

  • Basic question

    Hello, i have a basic question. if i have defined 2 fields in a cube or a dso:
    Name Quantity
    and from the external flat file i get some characters for my quantity field. would my load fail?  for standard dso and for write optimized?
    NOTE: quantity field is a keyfigure defined as numeric.
    and the load coming in has "VIKPATEL" for Quantity field and not numbers.
    thanks

    Hi Vik,
    Yes, the load will fail.
    May be you coud first load this data into BW (into PSA) and set both fields as characters fields. Then you can create DSO, do transformation from this PSA to the DSO, and put your logic as to what do you want to do with those Quantity that is not number (e.g. convert to 0, or 'Not assgined', etc).
    You can use transfer rule, or a clean up ABAP code in the start routine.
    Hope this helps.

  • Mid 2010 15" i5 Battery Calibration Questions

    Hi, I have a mid 2010 15" MacBook Pro 2.4GHz i5.
    Question 1: I didn't calibrate my battery when I first got my MacBook Pro (it didn't say in the manual that I had to). I've had it for about a month and am doing a calibration today, is that okay? I hope I haven't damaged my battery? The calibration is only to help the battery meter provide an accurate reading of how much life it has remaining, right?
    Question 2: After reading Apple's calibration guide, I decided to set the MacBook Pro to never go to sleep (in Energy Saver System Preference) and leave it on overnight so it would run out of power and go to sleep, then I'd leave it in that state for at least 5 hours before charging it. When I woke up, the light on the front wasn't illuminated. It usually pulsates when in Sleep. Expectedly, it wouldn't wake when pressing buttons on the keyboard. So, what's happened? Is this Safe Sleep? I didn't see any "Your Mac is on reserve battery and will shut down" dialogues or anything similar, as I was asleep! I've left it in this state while I'm at work and will charge it this afternoon. Was my described method okay for calibration or should I have done something different?
    Question 3: Does it matter how quickly you drain your battery when doing a calibration? i.e is it okay to drain it quickly (by running HD video, Photo Booth with effects etc) or slowly (by leaving it idle or running light apps)?
    Thanks.
    Message was edited by: Fresh J

    Fresh J:
    A1. You're fine calibrating the battery now. You might have gotten more accurate readings during the first month if you'd done it sooner, but no harm has been done.
    A2. Your machine has NOT shut down; it has done exactly what it was supposed to do. When the power became critically low, it first wrote the contents of RAM to the hard drive, then went to sleep. When the battery was completely drained some time later, the MBP went into hibernation and the slepp light stopped pulsing and turned off. In that state the machine was using no power at all, but the contents of your RAM were still saved. Once the AC adapter was connected, a press of the power button would cause those contents to be reloaded, and the machine would pick up again exactly where you left off. It is not necessary to wait for the battery to be fully charged before using the machine on AC power, but do leave the AC adapter connected for at least two hours after the battery is fully charged. Nothing that you say you've done was wrong, and nothing that you say has happened was wrong.
    A3. No, it does not matter.

  • Jabber/WebEx Connect SSO Questions

    I've got a few questions around exactly what needs to be done to get SAML working for our Connect accounts to successfully authenticate from Jabber for Windows, Mac, iPhone, and Android.
    We have both a Meeting Center and Connect account under WebEx using Loose Coupled Integration. Just this past week I enabled SAML for our Meeting Center accounts which went off without a hitch with the exception of Meeting Center integration with Jabber, which is now broken with a message about SSO enabled Meeting Sites not being supported (I think this would maybe be fixed if we had Tight Coupled Integration with our two account?).
    Anyway, my questions are...
    For Windows, I understand all clients will need to be reinstalled with the MSI argument for the SSO_ORG_DOMAIN switch I've read about, is that correct? Are there any other switches needed for the reinstall? 
    How will this work with the Mac and mobile clients? There's obviously no command line options to specify for the installations here, will they just know to kick over to my IdP for authentication once they see an email address that falls under an org with SSO enabled? If so, why does the Windows client need to be completely reinstalled and not just know to find the IdP from the Cloud Connect service like Meeting Center does with the Productivity Tools?
    We're just doing this for our Connect Web IM accounts, not attempting any sort of SSO with the phone accounts/UC integration yet.
    Any ideas on getting the Meeting Center integration into Jabber working again?

    I'd suggest posting your question over on the Jabber Pilot forum, as this forum is specific to Jabber Guest questions:
    https://supportforums.cisco.com/community/4551/jabber-pilot-support
    -jim

  • My iPad wont let me download apps bc security questions, but when I try to make them it freezes

    Every time I try to download an app it tells me I need to update my security questions, but once I click to make the questions the box goes white. So I'm not sure how to fix it

    The new questions show on your account on http://appleid.apple.com ? If they do then try logging out and back into your account on your phone (assuming that is where you are trying to purchase from) and see if the new questions then show on it.

Maybe you are looking for