Feature Request : Router to Router VPN support

I realize this has been highlighted earlier as not being supported currently, but it would be very useful to allow additional subnets into the NM sphere (my assumption would be one Home network and additinal subnets treated as foreign networks). Any clues as to whether the PN platform would be flexible enough to support this (in the future), for example with the facility to add subnet ranges as an additional option? I think some basic assumptions would have to be made (e.g that NETBIOS is supported to allow identification of devices)
My main reason for requesting this would be to get an overview of resources available at the other end of the VPN (file servers, printers etc.) - currently I have to do this with an addional application.
Look forward to your thoughts,
Simon T.

Hi, at this time NM only can scan inside your local subnet, but that sounds like a good idea.
My Cisco Network Magic Configuration:
Router: D-Link WBR-2310 A1 FW:1.04, connected to Comcast High Speed Internet
Desktop, iMac: NM is on the Windows Partition, using Boot camp to access Windows, Windows 7 Pro 32-bit RTM, Broadcom Wireless N Card, McAfee Personal Firewall 2009,
Mac Partition of the iMac is using Mac OS X 10.6.1 Snow Leopard
Laptop: Windows XP Pro SP3, Intel PRO/Wireless 2200BG, McAfee Personal Firewall 2008
Please note that though I am a beta tester for Network Magic, I am not a employee of Linksys/Cisco and am volunteering my time here to help other NM users.

Similar Messages

Feature Request to enhance Weblogic Tech Support

Hi,
I will try to express my idea in "draft" form. I think weblogic architects
can enhance the ideas to hashout all the necessary details.
It will be very good to have following environment variables in
startWeblogic.cmd / startWeblogic.sh files:
ENABLE_RECORDING=True/False
RECORDING_MODULES=JMS;RMI;EJB;ServletEngine;JSPEngine;...
RECORDING_OUTPUT_TYPE=Text/Binary
Through these variables developers can tell the system to record "important"
information necessary to capture the problem they are experiencing.
The output file (text or binary) can be sent to tech support to reduce
speculation and inhance correct analyzation of the issue at hand.
Each module can be peppered with log() statements that would check the
environment variable and spit-out "important" system status as the product
runs to encounter the problem at hand. Also it will be extremely easy to
capture the WLS version and service pack level, O/S details, JVM details
into the output file. This will greatly eliminate the obvious questions
like: what was the version of WLS? Did you apply SP4?, What was your
CLASSPATH? etc.,
Developers can use this feature to quickly capture important system state by
replaying the trouble scenario and send the output file for further
analysis.
This would reduce the total time necessary to debug the problem and also
improves the accuracy of the problem analysis.
I envison that WLS will continue to evolve to add more and more features.
So, A feature like this would greatly improve the assistance developers can
get from tech support teams.
If these properties can be changed at runtime through weblogic server
console, then it will be extremely helpful to debug production systems
without restarting them.
Also this feature would greatly distinguish the WLS product from competition
regards,
Satheesh Donthy

We have written a JSP that gathers this info from the log file and allows the
customers to email it to whomever or to save it to disk and mail it with their
own mailer as an attachment. So what we have here is functionally complete, but
we want you to test it and give us your feed back and let us know how we should
change it. It is a bit ugly because it has to support so many versions and
there have been API changes and we wanted to make it inclusive all in one file.
Very soon this will be pushed on to developer.bea.com and will also be included
with SP6
This works fine from 451 to 51 SP-3. This may not work with SP4 as they
are some problems with inner classes in SP4 which we are looking into it..
Your feedback will be highly appreciated.
PS: Courtesy of Mark Griffith.
kumar
Satheesh A Donthy wrote:
Hi,
I will try to express my idea in "draft" form. I think weblogic architects
can enhance the ideas to hashout all the necessary details.
It will be very good to have following environment variables in
startWeblogic.cmd / startWeblogic.sh files:
ENABLE_RECORDING=True/False
RECORDING_MODULES=JMS;RMI;EJB;ServletEngine;JSPEngine;...
RECORDING_OUTPUT_TYPE=Text/Binary
Through these variables developers can tell the system to record "important"
information necessary to capture the problem they are experiencing.
The output file (text or binary) can be sent to tech support to reduce
speculation and inhance correct analyzation of the issue at hand.
Each module can be peppered with log() statements that would check the
environment variable and spit-out "important" system status as the product
runs to encounter the problem at hand. Also it will be extremely easy to
capture the WLS version and service pack level, O/S details, JVM details
into the output file. This will greatly eliminate the obvious questions
like: what was the version of WLS? Did you apply SP4?, What was your
CLASSPATH? etc.,
Developers can use this feature to quickly capture important system state by
replaying the trouble scenario and send the output file for further
analysis.
This would reduce the total time necessary to debug the problem and also
improves the accuracy of the problem analysis.
I envison that WLS will continue to evolve to add more and more features.
So, A feature like this would greatly improve the assistance developers can
get from tech support teams.
If these properties can be changed at runtime through weblogic server
console, then it will be extremely helpful to debug production systems
without restarting them.
Also this feature would greatly distinguish the WLS product from competition
regards,
Satheesh Donthy[serversave.jsp]
[serverinfo.jsp]

Feature request: Add left-handed users support for Show Pointer

Show Pointer is a very useful tool for precise movements and operations on the touch display.
However, the way it currently works is optimized for right-handed people (as the button is on the left side and you maneuver with the right hand.
As there are very many left-handed people among creative individuals, I'm kindly asking to add left-hand support to Show Pointer, which would effectively mirror the user interface of the tool (button on the right side).
This could be configured in the Photoshop Touch setting panel.
I would really appreciate someone from Adobe reading this and adding this to the product backlog. Thanks.

If I'm ever asked to give input, I'll be sure to +1 for you.

Where to send feature request for router?

Hi, does anyone know where to send feature requests for the router firmware? I want to suggest adding http://www.dnsomatic.com to the supported dynamic dns providers, as it would add tons of services with little work.

xirian wrote:
Hi, does anyone know where to send feature requests for the router firmware? I want to suggest adding http://www.dnsomatic.com to the supported dynamic dns providers, as it would add tons of services with little work.
Today Verizon made available a new area on the forums called the Verizon Idea Exchange:
http://forums.verizon.com/t5/Share-Your-Ideas-with-Verizon/idb-p/ideas
Based on the FAQ Verizon has posted it appears this would be a good place to enter your request.
Justin
Verizon FiOS TV, Internet, and phone
QIP6416-P1, IMG 1.7.1, Build 09.97
Keller, TX 76248

Good CCIE question: Can multiple site-2-site VPNs support dynamic routing protocols?

Hi All,
Was not sure if this should be posted in LAN routing, WAN routing or VPN forums: I have posted here as the VPN tunnels are the limiting factors...
I am trying to understand if it is possible to have dynamic routing between LANs when using site to site VPNs on three or more ASA55x5-x (9.0).
To best explain the question I have put together an example scenario:
Lets say we have three sites, which are all connected via a separate site-2-site IKEv2 VPNs, in a full mesh topology (6 x SAs).
Across the whole system there would be a 192.168.0.0/16 subnet which is divided up by VLSM across all sites.
The inside / outside interfaces of the ASA would be static IPs from a /30 subnet.
Routing on the outside interface is not of concern in this scenario.
The inside interface of the ASA connects directly to a router, which further uses VLSM to assign additional subnets.
VLSM is not cleanly summarised per site. (I know this flys against VLSM best practice, but makes the scenario clearer...)
New subnets are added and removed at each site on a frequent basis.
EIGRP will be running on each core router, and any stub routers at each site.
So this results in the following example topology, of which I have exaggerated the VLSM position:
(http://www.diagram.ly/?share=#OtprIYuOeKRb3HBV6Qy8CL8ZUE6Bkc2FPg2gKHnzVliaJBhuIG)
Now, using static route redistribution from the ASAs into EIGRP and making the ASAs to be an EIGRP neighbour, would be one way. This would mean an isolated EIGRP AS per site, but each site would only learn about a new remote subnet if the crypto map match ACL was altered. But the bit that I am confused over, is the potential to have new subnets added or removed which would require EIGRP routing processes on the relevant site X router to be altered as well as crypto map ACLs being altered at all sites. This doesn't seem a sensible approach...
The second method could be to have the 192.168.0.0/16 network defined in the crypto map on all tunnels and allow the ASAs routing table to chose which tunnel to send the traffic over. This would require multiple neighbours for the ASA, but for example in OSPF, it can only support one neighbour over a S2S VPN when manually defined (point-to-point). The only way round this I can see is to share our internal routing tables with the IP cloud, but this then discloses information that would be otherwise protected by the IPSEC tunnel...
Is there a better method to propagate the routing information dynamically around the example scenario above?
Is there a way to have dynamic crypto maps based on router information?
P.S. Diagram above produced via http://www.diagram.ly/

Hi Guys,
Thanks for your responses! I am learning here, hence the post.
David: I had looked in to the potential for GRE tunnels, but the side-effects could out weight the benifits. The link provided shows how to pass IKEv1 and ISAKMP traffic through the ASA. In my example (maybe not too clear?) the IPSEC traffic would be terminated on the ASA and not the core router behind.
Marcin: Was looking at OSPF, but is that not limited to one neighbour, due to the "ospf network point-to-point non-broadcast" command in the example (needed to force the unicast over the IPSEC tunnel)? Have had a look in the ASA CLI 9.0 config guide and it is still limited to one neighbour per interface when in point-to-point:
ospf network point-to-point non-broadcastSpecifies the interface as a point-to-point, non-broadcast network.When you designate an interface as point-to-point and non-broadcast, you must manually define the OSPF neighbor; dynamic neighbor discovery is not possible. See the "Defining Static OSPFv2 Neighbors" section for more information. Additionally, you can only define one OSPF neighbor on that interface.
Otherwise I would agree it would be happy days...
Any other ideas (maybe around iBGPs like OSPF) which do not envolve GRE tunnels or terminating the IPSEC on the core router please?
Kindest Regards,
James.

IPCC Express Skills Based Routing "Select Skill" feature request.

Let me start by saying that I hope I'm just doing something wrong and that what I'm trying to accomplish is already possible within the existing feature set of IPCC Express. (I'm running 4.5.2) If not, I'd like to start a campaign to get it added as a feature in the next release.
Short version:
A call comes in, and in order to assign skills to the call you must assign the call to a csq that contains the skills required to complete that call. -- Problem arises when number of skills gets large, so must the number of CSQ's. Maintaining all of the agent to CSQ mapping gets very cumbersome.
I'm proposing a new "select skill" step in the CRS developer, which will allow you to assign a skill required to handle a call, rather then have skills required be based on what CSQ the call was put into.
(Long version in an e-mail from me to cisco)
Basically what I'm seeing with the Skills Based Routing feature in IPCC Express is that it still relies heavily on CSQ's to determine the group of agents selected to take a certain call. I can't assign a skill to a calling contact during the call flow in the script editor, instead I have to assign a contact to a CSQ which has certain skills assigned to it.
Let me give you an example as it pertains to my company.
We have 15 Healthcare locations with an average of 7 doctors per location. Each doctor has his or her own specialist that takes appointments and other calls not destined to be terminated by the doctor. Each Specialist is also a Primary backup for 2 other doctors and a secondary backup for the rest.
Currently, if I want to use skills based routing to route a call to one of the Doctors, I have to create a CSQ for each doctor, and add that doctors skill to that CSQ, and then add all of those CSQs to the locations "team".
Furthermore, if I want to add a "bilingual" skill so that each caller has the option to speak to a bilingual rep, it changes the order for the rep selection. Now I have to double the amount of CSQs in the system to have 1 queue for one language and another queue for another language for each doctor.
At 15 locations and averaging 7 docs per location with 2 languages, this requires 210 different CSQs that I have to update on a regular basis because turnover for these specialists is fairly high. Not to mention the fact that Cisco has imposed a "soft limit" of 75 CSQs per server on the 7835.
What I would propose to alleviate this mess would be to add a new step in the CRS editor under "IPCC Express" and call it "Select Skill", where I could assign a skill required to handle a call. This would allow me to create 1 CSQ and have agent selection done based on skill, or a combination of skills. It would also allow me to look across the enterprise for an agent with a particular skill without having to create 105 CSQs with 105 agents per CSQ.
To do this for now I have created a work around, but it's not a very good one because it requires a lot of overhead. I've created a database with all of my agents in it and all of the skills they are qualified for. Then where I would use the 'Select Skill' step I talked about earlier I now use a database dip and select a resource with the skills I require, then do a 'Get Reporting Statistic' to determine if that resource is logged in and available. Then using CRS 4.5.2 I route on resource instead of CSQ. Now the problem with this method, is if the resource is available, but away, or doesn?t answer the phone (because they also have to deal with walk up customers) it sets them not ready and then just sits there waiting for then to go available again. It wont requeue to the next skilled agent unless I dequeue then from the current app and start the process all over again, which in that cause they would loose their place in line.
So that's it in a nutshell, I'm sure it's not the easiest thing to follow.
Let me know if you have any questions.
Jeremy
(end e-mail)

I just want to join you in this request.
Steven Ferland, Bell Canada
P.S.: Please add your name if you agree with Jeremy.

Feature Request: Support for External Synths/Modules (via MIDI)

Hi,
I just posted a feature request (via the Apple Feature Request form) but also wanted to post here. I use a combination of hardware instruments (sound modules) and software instruments.
*My Setup*
- Keyboard #1: M-Audio Axiom 25 (also includes a USB MIDI interface)
- Keyboard #2: Roland A-33 Controller Keyboard (via my Axiom-25's MIDI In)
- Edirol USB MIDI Interface (sound modules plugged into MIDI Outs)
- Sound Module #1: Roland JV-1080
- Sound Module #2: Yamaha TX802
MainStage currently takes care of all my software instrument needs, however, what is missing is the ability to add external physical MIDI devices as either patches or as channel strips. I would like to use a combination of software and hardware instruments in the same song, and control this via Mainstage.
Example:
- Patch 1 could potentially contain 2 software instruments, each seperately controlled by a physical keyboard (this is currently possible)
- Patch 2 could contain 1 software instrument and 1 external sound module each controlled by a physical keyboard (this is currently impossible)
- Patch 3 could contain 2 external sound modules, mapped to different ports and/or channels, and therefore independantly controlled by my 2 keyboads (this is also currently impossible)
Would I be correct in assuming that this is a fairly common limitation of MainStage?
Message was edited by: olafwagner

I have achieved MIDI out from Mainstage, thank to the information found on this forum..
what I actually do is send Prg Change from every preset I select to control a hardware vocal harmony pedal. this way i don't have to remember which setting i use on every song or even, section of a song.
*Step 1:*
Library>application support>Logic> create a folder named precisely MAINSTAGE CALLBACKS
inside of it, create an applescript with this code
on action(parameter)
set myprogramchange to programchangenumber of parameter
tell application "MidiPipe"
MIDISend toPort "MidiPipe AppleScript Input" withData {192, myprogramchange}
end tell
end action
*step 2*
download MIDIPIPE from http://homepage.mac.com/nicowald/SubtleSoft/
and install it in your apps folder
*step 3*
start midipipe, and define the following modules
MIDI IN-> use applescript input from menu
MIDI OUT-> route to your midi interface desired output
save this to a Midipipe file you can easily access
Now, when I go to a gig I FIRST (this is important) load midipipe and my preset, and just hide it and let it work in the background
Start mainstage, and set the program change of every PATCH to what I want to be sent over MIDI OUT when I enter the preset (-1 if needed or modify the previous applescript).
Ok, this just gives you Prg change... if you want something like CC or others, you can look at some of the example files on midipipe, and write your own applescripts to be used from a control within mainstage (you know, select a screen control, and assign it to an applescript located in library>application suport>logic>Mainstage scripts. you have to tell the applescript to receive incoming data from mainstage and send it (with even some filtering or transforming) to midipipe to go to the outside world.
One last idea: i used a free plug-in called MIDIIO that, although the plugin analysis on mainstage might say does not pass, you can use it anyway, and lets you insert it as if it was a plugin instrument...then you just route your screen controller to a MIDI parameter on that track, and there you go...but in the past it was not as solid as the midipipe solution.
I am still investigating...I am pursuing having my hardware controller knobs to follow screen settings everytime I just change a patch, but lack some info on how to get parameter values when entering the patch ¿anyone knows, blueberry, zuelito...? I promise to share the results!
best

Cisco 831 Router to Configure VPN Access

Hello,
I need assistance in configuring a VPN in a Cisco 831 Router. I do not have any experience in configuring routers and VPN's, and would appreciate if any one could help out.
I would like to connect three Laptops to the Cisco 831 via Cisco VPN Client. Three laptops must have 10.42.6.x Address assigned by the router on the VPN Connection. They will also need access to the internal network which is 192.168.x.x private network. The Cisco has a Static IP on the Internal Interface and External Interface. I have tried several different ways of doing this, however I must be doing something wrong in my config.
Any help or suggestions would be appreciated.

Hi Robert
You can refer the below link in finding out the exact config to start with.
do make sure that your Cisco 831 box with the current IOS code installed in it supports the required feature to run the same..
http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html#anchor16
regds

SAP router installation for VPN method

Hi All,
Can any one share me the steps to perform SAP Router Configuration with VPN method.
Also what are changes i need to make in saproutab file.
Appreciate your inputs.
Thanks
Pradeep.

There is paperwork that you need to fill out with IPSec information, once its filled out you fax it over to SAP.
Not entirely sure what changes need to be made in saprouttab? Are you changing SAPRouter to no longer perform SNC to SAP?
Here is the doco I used for my company - https://support.sap.com/content/dam/library/SAP%20Support%20Portal/remote-support/RemoteSupport.pdf

How can I disable the wireless port (feature) on my Verizon router ?

How can I disable the wireless feature on my Verizon router. I do have 9100EM15-10 Model. I don't know the procedure or what the PW should be. Thanks nss

Thanks. Can we confirm about the router reset procedure. I have 9100EM15-10 Model router. How can I log in to disable the wireless port on my router. I tried calling Verizon tech support but they were difficult to reach or get in last night.

Router to Router Dialer VPN

one of my router is configured with site to site vpn, I want this router to establish a dialer vpn from a remote router,
Remote router will be configured as dialer vpn as there is no Live IP available in remote site, I dont want to configure it as Site to site vpn,
Please refer some docuement to achive this goal,

Hi Karsten -
I'm afraid I cannot use the EasyVPN feature at all.
The vendor informs me that there is another IPSec VPN tunnel which connects back to their office to provide other capabilities.
So I have to use L2L IPSec -- and do it with a dynamic IP from the router side, to a fixed IP on the ASA side.
Is it possible to build the tunnel-group on the ASA side so that it doesn't require a known IP for the remote side of the tunnel?
I'm using DefaultL2L tunnel group (on the ASA) at the moment to terminate the VPN when the router is using the satellite connection via FA90/1, with a fixed IP address.
But the DefaultL2L group doesn't have the IP of the router -- yet it works...
The same VPN config, used from the FA0/0 interface of the router with the same crypto map
just gives the traditional "No match, deleting SA" message..
I can see the router trying to establish the VPN, but it's just not able to negotiate, and the only reason I could think of was that the FA0/0 interface had a DHCP address instead of a static IP.
Strange that it works OK with the ASA's DefaultL2L tunnel group, with no mention of the router's FA0/1 static IP, yet the FA0/0 with a dynamic IP won't work.
We did just hook up the satellite and used FA0/1 to test it -- vpn came up instantly...

VPN between ASA5505 Easy VPN Server and 881G Router as Easy VPN Client

Hello,
I have problem in VPN between ASA5505 Easy VPN Server and 881G Router as Easy VPN Client. ASA 5505 have 7.2.3 software and 881G router have 15.1 software.
881G is configured as hardware client in network exstention mode, and it is placed behind NAT. ASA5505 is working as server. Same VPN Group works correctly from VPN software clients.
When I send traffic from 881G client side, in show cryto sessin detail I see encrypted packets. But with same command I dont see decrypted packet on ASA5505 side. On both devices Phase 1 and Phase 2 are UP.
VPN is working when I replace ASA5505 with ASA5510 correctly with have 8.4.6 software. But problem is that i need to do this VPN between ASA5505 and 881G.
Can you help me, how can I debug or troubleshoot this problem ?
I am unable to update software on ASA5505 side.

Hello,
Hire is what my config look like:
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 40 set pfs
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 60 set pfs
crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 80 set pfs
crypto dynamic-map outside_dyn_map 80 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 100 set pfs
crypto dynamic-map outside_dyn_map 100 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 120 set pfs
crypto dynamic-map outside_dyn_map 120 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 140 set pfs
crypto dynamic-map outside_dyn_map 140 set transform-set ESP-AES-128-SHA
crypto dynamic-map outside_dyn_map 160 set pfs
crypto dynamic-map outside_dyn_map 160 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 180 set pfs
crypto dynamic-map outside_dyn_map 180 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 200 set pfs
crypto dynamic-map outside_dyn_map 200 set transform-set ESP-AES-256-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 1
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 2
authentication pre-share
encryption 3des
hash sha
group 1
lifetime 86400
crypto isakmp policy 3
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
tunnel-group HW-CLIENT-GROUPR type ipsec-ra
tunnel-group HW-CLIENT-GROUP general-attributes
address-pool HW-CLIENT-GROUP-POOL
default-group-policy HW-CLIENT-GROUP
tunnel-group HW-CLIENT-GROUP ipsec-attributes
pre-shared-key *******
group-policy HW-CLIENT-GROUP internal
group-policy HW-CLIENT-GROUP attributes
password-storage enable
split-tunnel-policy tunnelspecified
split-tunnel-network-list value cisco_splitTunnelAcl
nem enable

SSLSocket to support NIO - feature request voting

Hello All,
I know there were many discussions here regarding this subject.
I've seen the SSLEngine solution for the problem... But I didn't like it since it is too complicated.
For my understanding SSLSocket inherits Socket so an application that can handle Sockets should be able to handle SSLSocket without writing a specific code besides the factory.
NIO allows Socket to be none blocking... So why SSLSocket which is a Socket does not?
If I write a Web server in Java, why should I deal with none SSL and SSL connections in a different way?
I recently wrote one threaded NIO server and was amazed that I could not use SSL with the same implementation.
I've opened a feature request for Java, but they told me to gain support for this subject here before they will consider it...
As I understand I can re-implement SSLSocket to use SSLEngine and support NIO with blocking and none blocking support... But I think Sun should do it.
One caveat is to make sure that the SSLSocket HandshakeCompletedListener should be called by a daemon thread, so that it will not block other sockets while certificate verification occur.
Of course when I refer to SSLSocket I also refer to SSLServerSocket.
Can you please comment regarding this issue... Every comment will be welcomed!
Best Regards,
Alon Bar-Lev

nah, I am very glad they released an engine separate from transport allowing encryption on any transport.
I am also working on an abstraction of nio that you may be interested in if you don't want to do the security yourself......it is here...
http://sourceforge.net/projects/channelmanager
Right now, it only contains the api, but there are 3 implementations behind it right now with 3 to be added.
1. Basic implementation that does just nio
2. Secure implementation that implements same api and uses implementation 1
3. Packettizer implementation which puts things in payloads with headers and footers
4. (to be added) Threadpool implementation allowing a threadpool to be inserted in the stack somewhere
5. (to be added) TestProxy implementation allowing exxceptions to be thrown on purpopse to test a system on a bad network....can test failure on bind, connect, read, write, etc....everything.
6. denial of service layer.
7. Exception catch layer to protect #1 and #4 mainly from bad clients that throw exceptions back to the channelmanager.
Each one of these layers (2 - 4) implements the same api and uses the same api so 2 -4 are all proxies. You can reorganize the proxies as you want.
The secure one is almost done. Any comments on the api will be welcome.
thanks,
dean

EDI - 753Routing Request and 754 Routing Instructions transactions- what SAP ECC6 EDI output type, msg type, msg code, basis idoc is best practice to generate the idoc?

One of our Trading Partner wishes to implement the 753 Routing Request and 754 Routing Instructions. Can anyone give me best practice answer the following Questions? We are on SAP ECC6 R3
What Application? i.e. V2, V7?
What output condition to use? i..e. LALE, LAT2, SEDI????
What Message type? i.e SHPADV?
What Basic Idoc Type? i.e SHPMNT05?
What Message Code? i.e. SHPM?
What Process Code? i.e. SHPM??
What Function Module? i.e. IDOC_OUTPUT_SHPMNT??
Does the SAP Transpotation Module have to be configured for this to be implemented?
Your comments are greatly appreciated, we have until Nov 1 to be compliant?

Good Morning,
While I did not get any responses from my question, yes, I was able to determine what needed to be configured. I hope the below will help you: This is for SAP ECC6
The output application for the 753 Routing Request is "V7"
The output type is "SEDI"
Transmission medium is "6"
The Basic Idoc type is "Shipmnt05"
when setting up your Partner Profile (WE20) add:Message Partner Role "SP" with Message type "SHPADV', Message coed "753", Basic Type "SHPMNT05", Message Control add Application "V7", Message type "SEDI", Process Code "SHPM".
also http://scn.sap.com/thread/698368 pages 14 and 15 were helpful.
I have not configured the Inbound 754. For now the inbound 754 Routing Instructions will be emailed to our traffic department.
Thank you,
Have a great day,
jane

How to request a new router (or if I should)

My router needs to be reset constantly- either turned off or unplugged, virtually every day. How do I request a new router?
May I add, it's so old that it's not listed on the troubleshooting page.

beckweena wrote:
My router needs to be reset constantly- either turned off or unplugged, virtually every day. How do I request a new router?
May I add, it's so old that it's not listed on the troubleshooting page.
You can call them, go to a fios store, or might even be able to do it under your acccount online under > add change services under my verizon. Just click on equipment.

Router WRV54G Quick vpn client 1.10 ruuing on XP (remotel...

router WRV54G
Quick vpn client 1.10 ruuing on XP (remotely)
well, the client can connect to VPN router and i can verify the status online on tab vpn BUT
after 2-3 min. client receive the error message
"the gateway not responding"
AND
if client tries to ping from command prompt to the local ip addresses he find "negociating IP security"
status of router is :
- all security including firewall is disabled
- i have public IP address on Router having 255.255.255.0 subnet
- my local subnet is 10.10.1.x
please tell me what should be done
Thanks
Message Edited by SHAQ on 12-18-2007 09:26 AM

try upgrading / reflashing the firmware of the wrv54g to the latest available from www.linksys.com/download
try changing the MTU size on the client router to 1452
check whether it makes any difference

Feature Request : Router to Router VPN support

Similar Messages

Maybe you are looking for