FIM CM Bulk Smart Card Issuance Client and Printing Smart Cards

Hi,
From what we are reading, the Bulk Smart Card Issuance Client can be used to Issue and Print Smart Cards - what does MS mean by 'print smart cards'?
Do they mean 'print on smart cards' like for instance users photo's?
Or would we still need to utilize something like ID Works Software?
Thanks

With FIM-CM you are limited to which software Middleware and printers you can use (at least the version I am running FIM 2010).
We are running ID Works Enterprise Edition 5.1 on a windows 7 x32 workstation.
CM now supports ID Works Enterprise Edition 6.51 which supposedly can work on an x64 system but we haven’t tried it.
One thing to note is the cm software patch. The CM Update allows the bulk client to be installed on windows 7. But you can't install the client on windows 7 to apply the patch that lets it run on 7. The work around is the Microsoft released
a copy of the bulk client with the patch already applied. This worked fine for the install. But we got errors when we tried to connect to the CM Servers. It couldn't find the templates. Turns out the dlls in the patched bulk client
were newer than the .dlls on the CM server, and this was breaking the notification. We patched the CM server, and everything was good.
For Printers we got 2 SP75 plus Datacard printers. We wanted the higher capacity, and the ability to laminate both sides of the card. We got two for coverage so we will have one when we have to send one in for repair. (Not saying that the
printers are "bad” but they take a lot of abuse printing, and need a lot of care).
Although the Plus printers aren’t listed in the supported printers, we got confirmation from MS that the Plus worked (they replaced the older ones), but that the newer 95's probably wouldn't. (I think they are a different kind of printer).
One more data point to add. Work out your Pin Policy before you buy your cards.
We got our cards first, and then figured out our PIN policy. If we knew our PIN Policy at purchase time, the manufacture (Gemalto) could have set it. We have been working on ways to set it using CM. But have finally given up.
We figured out how to set the PIN policy using APDU commands, and CM can do application management via APDU commands. But it looks like it can only do that for Java Cards, and not the .net cards (yet, we keep hoping). So we are going to set the
Pin Policy before we bulk print. And when we order our next set of cards, we will order them with the PIN policy set.
Over all I am very happy with CM. and there is a lot more information on setting it up now than there was a two years ago (thanks a lot to Paul Adare and Brian Komar, who I am beginning to think are the same person. Has anyone actually
seen both of them at the same time?

Similar Messages

Managed Clients and printing list

Hi,
we have discovered the following problem.
When a user logs in on a machine that other users have used before, the new user sees all the printers that were assigned to the users before.
They are NOT displayed in the Systemsettings, but ARE displayed in the printing list thats used while printing.
It seems that CUPS only adds printers and does not care if the user should see them or not.
Deleting them in CUPS and relogging does the job, but this is not a clean way to handle this.
Can anyone help?
regards
Oliver

Modify the /private/etc/authorization file so that all accounts have the right to change the DVD region. The initial and subsequent region changes are different rights.
(48582)

Boot camp with Cisco VPN client and smart card

Looking at a Macbook or Macbook Air and the only reason I need to run windows is to be able to access my work network through the Cisco VPN client and my Smartcard then use remote desktop. From my understanding if I run Bootcamp it should work am I correct? Im going to an Apple store tomorrow hopefully they can help too.
Thanks

mrbacklash wrote:
Ok with that being said will the MBA 11.6 1.4ghz have the guts to make it run mostly internet based programs over the VPN connection?
I think if you are running apps over the Internet the bottleneck will be the Internet and your VPN bandwidth. Your computer can certainly execute faster than Internet communications.
Besides, Internet or remote applications run on the remote server. All your local computer does is local processing of the data if necessary.
Message was edited by: BobTheFisherman

FIM CM Client and Server 20 12

Attempting to renew certificates for Smartcards on Server 2012 FIM CM Client 64 Bit is installed on both client and manager.
When clicking on the "Show the details of my smartcard" there is no response in IE 64 BIT
Ran IE in IE 10 Compatibility mode and it responds only to give the following error:
Base CSP smart card self-service control is not installed or the current site is not specified in the allowed sites list by your Administrator. Please contact your system admin. Additional info: Automation server can't create object.
NOTE: This works in Server 2008 R2 with no issues with what appears to be the same set up as the 2012 Server, apparently I'm missing something. Thanks in advance.
IE is in the trusted sites, all IE settings appear to be the same for both 2008 and 2012 servers.

On Fri, 4 Apr 2014 19:29:54 +0000, Wi l l wrote:
Base CSP smart card self-service control is not installed or the current site is not specified in the allowed sites list by your Administrator. Please contact your system admin. Additional info: Automation server can't create object.
NOTE: This works in Server 2008 R2 with no issues with what appears to be the same set up as the 2012 Server, apparently I'm missing something. Thanks in advance.
IE is in the trusted sites, all IE settings appear to be the same for both 2008 and 2012 servers.
Try the other FIM CM client.
Paul Adare - FIM CM MVP
"Tauntology: one of the BOFHish fine arts" -- Rik Steenwinkel

The version of OLE on the client and server machines does not match. (Exception from HRESULT: 0x80010110)

Hi,
I have installed FIM CM Client on one machine and FIM CM update service on another machine. Both are windows server 2008 r2 machines.
When i try to enroll a permanent smart card for a user, its shows me the following error:-
The version of OLE on the client and server machines does not match. (Exception from HRESULT: 0x80010110)
Also there is no logging done for the particular event.
I am able to change my smart card pin and view my smart card info. through the FIM CM client.
Is there a compatibility issue of FIM CM 2010 with Windows server 2008 r2?
Thanks

Hi,
Sorry for the delay in reply.
Please try the following steps first:
Open Powershell as Administrator
Go to Start--> Run and type wbemtest.exe.
•Click Connect.
•In the namespace text box type "root" (without quotes).
•Click Connect.
•Click Enum Instances…
•In the Class Info dialog box enter Superclass Name as "__ProviderHostQuotaConfiguration" (without quotes) and press OK. Note: the Superclass name includes a double underscore at the front.
•In the Query Result window, double-click "__ProviderHostQuotaConfiguration=@"
•In the Object Editor window, double-click HandlesPerHost.
•In the Value dialog, type in 8192
•Click Save Property.
•Click Save Object.
Under properties find the property "MemoryPerHost" or any other ones you need to modify and double click it
Change the value from 512 MB which is 536870912 to 1GB which is 1073741824
Click Save Property
Click Save Object.
•Close Wbemtest.
•Restart the computer.
And if all nodes are Windows server 2012, install the following update rollup as well:
Windows RT, Windows 8, and Windows Server 2012 update rollup: August 2013
http://support.microsoft.com/KB/2862768
If you have any feedback on our support, please send to [email protected]

Cisco VPN client and Novell and Panda AV

I have found an issue with one of my clients PC's that prevents him from using network resources over the VPN tunnel.
PC
Win XP SP2
VPN client - 5.0 (Newest download)
Novell - Client 4.91 SP4 for win 4.91.4
Panda AC 4.02.40
Ok here's what happens
I made a PCF file for a handful of users to connect in and be able to access 2 servers.
On the machine with the above information installed. It will connect to the VPN. Everything seems fine but if I RDP or ping access to the server it will not go. I then installed it on my machine and it works.
So I fully investigated the one PC that doesn't work. I noticed in the TCPIP stack of both the Ethernet card and the Cisco adaptor. There is a Novell client and a panda client.
Now if I uncheck one or the other it works. (I know there's posts about panda not working and the posts are 2 years old) It will work with just panda or Novell. When I check both it fails.
Now has anyone seen this issue with these two products installed on a machine with Cisco VPN.
Also, who should this go to, Novell, Panda or both?

I stated i did that and it works. Each one works when its the only thing checked.
Thanks
Though

Database Firewall in-line between clients and database not working

I’m trying to configure a Standalone Database Firewall in-line between the clients and the protected database so it can block some statements. I’ve followed the Installation Guide and the Administration Guide, but can’t get it working. I’ve configured one Enforcement Point with one Protected Database.
I’ve configured Database Firewall with three Ethernet cards:
eth0 is used for Management (IP. 192.168.1.81)
eth1 and eth2 are associated with Bridged interface br0
The protected database is listening in 172.16.40.3:1521.
The clients are in subnet 192.168.1.x.
I’ve configured the Traffic Source br0 with the IP 172.16.40.2 and is enabled as the Traffic Source in the Enforcement Point.
In the configuration file appliance.conf corresponding to the Enforcement Point, I’ve seen the parameter PROXYPORT=1534, so I understand the clients should connect to this port in Database Firewall in order to access the protected database. Is this assumption correct? Is the configuration I’ve done correct? Are there any additional configuration steps that should be made? Is there any documentation about this configuration files?
Thanks,
Pablo

For in-line blocking mode to work out of the box it is necessary that DB Client's IPs (as they are seen in DBFW), br0 and DB IP are all on the same subnet. If this is not the case you would need to fiddle with routing on the DBFW manually which you are discouraged to do because it's unlikely to be persistent, work correctly after upgrades etc... DBFW is not intended to be a router although it can be made to perform this function. In general I would advise you to stay within the supported configuration and just make sure you network infrastructure is ready for DBFW deployment. IE make sure all these IPs are on the same subnet

Tagging "Client" and "Session"

Just a quick question. Where are most poeple putting their client info?
a) In the physical file directory structure
b) In the Collection names or groupings
c) In the Keywords tag (eg, Create a Keyword called 'Client' and add each client name as a child keyword)
d) Hijack one of the other XMP tags and use it for Client instead
Similarly, how about tagging the photo session, or project name? I'm desperately trying to come up with a workflow that allows me to use the metadata panes to do as much filtering as possible. I am resisting doing all of my organizing using Collections as:
1) Collection info doesnt get stored in the files as metadata, thus locking me into using Lightroom only.
2) Adding too many Collections makes the list of Collections unwieldy and starts to feel like the 'folder tree' method of organizing from yesteryear.

buralham - There is no "quick" answer to your question other than "whatever works for you." Much of the answer will depend on what type of future access to specific images you may need for various purposes and how you plan to use your LR database function. Here's a few ideas that might help. I agree with you about regular Collections. They only work for me if I have a number of the same subjects shot over a short period of time mixed in with others during the same shoot.I separate the subjects into Collections temporarily and do my development and Keywording in these collections before deleting them. I do maintain a few Smart Collections for quick access to certain images (All of my 5* and 4* birds are in a Smart Collection - It's a quick way to find my best to loan out or publish - I also keep a "No Keywords" Smart Collection to pick up images that I forgot to keyword). If you need privacy between clients, many on this forum would suggest different Catalogs for each client. I've always felt that this could work as long as you didn't need to refer back to specific images very often for other purposes after the job was closed. Switching back and forth between Catalogs is easy but does take time. For me Keyword Tags are by far the easiest and most versatile to use under most conditions and because of my primary interests (birds and other wildlife), I tag every image (with multiple tags - species-genus-family - refuge- park, etc) so I can find a specific image in a few seconds under many different subjects. However, if you don't start that at the beginning, plan to set aside a lot of time getting images up to date. Setting up your Keywords in a separate document file and importing this into LR can save time if you know what structure you plan to use. Using a folder directory structure as a primary database method generally defeats the purpose of the LR library and is Luddite clunky for most folks. It's so 1980's. It tends to be slower than other database management methods easily available in LR and fraught with hidden dangers. Hope some of this helps. David

HT1541 Does anyone know who to contact regarding purchasing bulk iTunes cards in NZ

Does anyone know who to contact regarding purchasing bulk iTunes cards in NZ for a promotion and get a discount.. All these 0800 numbers and no one can help..
Retailers are aways offering 2 x $20.00 itune cards for $30.00... How do they do this without a discount...
Any help appreciated

Are you a member of the developer forums?
Have you tried submitting feedback from within Logic? There is a direct email link named Provide Logic Express Feedback within the Logic Express item on the Menu bar.
Some people have reported being contacted by Apple development staff after using this process.
Good luck.
x

Adobe Creative Cloud - How To Share Files With Clients and Colleagues | Creative Suite Podcast: Designers | Adobe TV

In this episode of the Adobe Creative Suite Podcast, Terry White shows how to share Photoshop, Illustrator and InDesign Files with clients and colleagues and all they'll need is a browser to comment and see your Photoshop Layers.
http://adobe.ly/10ZjpE4

Terry,
I guess I miss something. How can I share a folder of photos? When I return from a shoot, I select 20 of the pictures and need to share them with my client to pick up the favorites. Am I supposed to copy and past an URL for each image separately?
Sometimes I also work with a colleague, I need to share my favorites with him. Same issue.
We have tried Adobe Cloud, and then went for Dropbox. There we can share a folder and he can put even his pictures in it as well. That's what I call collaboration. And it is free (unlike Adobe Cloud). If you have some word in Adobe, please tell them to either drop it and make a deal with services like Dropbox, or make it properly.
Thanks.
Vaclav

Connection between SDM client and server is broken

Dear All,
First of all this is what I have
-NW04 SPS 17
-NWDS Version: 7.0.09 Build id: 200608262203
-using VPN connection
-telnet on port 57018 is succesfull
I can login to SDM server (from NWDS and from SDM GUI) I can see the state of SDM(green light), restart it, can navigate through tabs in GUI, but every time I am trying to deploy an ear i have this error:
Deployment exception : Filetransfer failed: Error received from server: Connection between SDM client and server is broken
Inner exception was :
Filetransfer failed: Error received from server: Connection between SDM client and server is broken
I have already read a lot of topics,blogs,notes but didn't find the solution.
Can anybody help me?
Best Regards

Having same issue. Nothing helped so far... Using NWDS 7.0 SP18.
I have turned SDM tracing on and this is what I see on client side after sending first data package:
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: debug "20120224140253 0280/17 Client: finished sending string part"
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: debug "20120224140253 0280/0 Client: receive String part from Server"
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl.receiveFromServer(NetComm ..): Entering method
com.sap.bc.cts.tp.net.NetComm.receive(): Entering method
com.sap.bc.cts.tp.net.NetComm: debug "Method "receive(char[])" could not read all requested bytes. There are still 12 bytes to read"
com.sap.bc.cts.tp.net.NetComm: debug "Caught IOException during read of header bytes (-1, 43):Connection reset"
com.sap.bc.cts.tp.net.NetComm: debug " throwing IOException(net.id_000001)"
com.sap.bc.cts.tp.net.NetComm.receive(): Exiting method
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: Exiting method
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: debug "20120224140253 0281/1 Client: connection was broken"
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: Exiting method
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: debug "20120224140253 0281/0 Client: finshed sendAndReceive"
com.sap.sdm.is.cs.cmd.client.impl.CmdClientImpl: Exiting method
My connection on server is still active so I have to restart SDM server to reset and try it again.
Anyone have idea whats happening?
Edited by: skyrma on Feb 24, 2012 2:46 PM
Edited by: skyrma on Feb 24, 2012 2:47 PM
Edited by: skyrma on Feb 24, 2012 2:47 PM

Async tcp client and server. How can I determine that the client or the server is no longer available?

Hello. I would like to write async tcp client and server. I wrote this code but a have a problem, when I call the disconnect method on client or stop method on server. I can't identify that the client or the server is no longer connected.
I thought I will get an exception if the client or the server is not available but this is not happening.
private async void Process()
try
while (true)
var data = await this.Receive();
this.NewMessage.SafeInvoke(Encoding.ASCII.GetString(data));
catch (Exception exception)
How can I determine that the client or the server is no longer available?
Server
public class Server
private readonly Dictionary<IPEndPoint, TcpClient> clients = new Dictionary<IPEndPoint, TcpClient>();
private readonly List<CancellationTokenSource> cancellationTokens = new List<CancellationTokenSource>();
private TcpListener tcpListener;
private bool isStarted;
public event Action<string> NewMessage;
public async Task Start(int port)
this.tcpListener = TcpListener.Create(port);
this.tcpListener.Start();
this.isStarted = true;
while (this.isStarted)
var tcpClient = await this.tcpListener.AcceptTcpClientAsync();
var cts = new CancellationTokenSource();
this.cancellationTokens.Add(cts);
await Task.Factory.StartNew(() => this.Process(cts.Token, tcpClient), cts.Token, TaskCreationOptions.LongRunning, TaskScheduler.Default);
public void Stop()
this.isStarted = false;
foreach (var cancellationTokenSource in this.cancellationTokens)
cancellationTokenSource.Cancel();
foreach (var tcpClient in this.clients.Values)
tcpClient.GetStream().Close();
tcpClient.Close();
this.clients.Clear();
public async Task SendMessage(string message, IPEndPoint endPoint)
try
var tcpClient = this.clients[endPoint];
await this.Send(tcpClient.GetStream(), Encoding.ASCII.GetBytes(message));
catch (Exception exception)
private async Task Process(CancellationToken cancellationToken, TcpClient tcpClient)
try
var stream = tcpClient.GetStream();
this.clients.Add((IPEndPoint)tcpClient.Client.RemoteEndPoint, tcpClient);
while (!cancellationToken.IsCancellationRequested)
var data = await this.Receive(stream);
this.NewMessage.SafeInvoke(Encoding.ASCII.GetString(data));
catch (Exception exception)
private async Task Send(NetworkStream stream, byte[] buf)
await stream.WriteAsync(BitConverter.GetBytes(buf.Length), 0, 4);
await stream.WriteAsync(buf, 0, buf.Length);
private async Task<byte[]> Receive(NetworkStream stream)
var lengthBytes = new byte[4];
await stream.ReadAsync(lengthBytes, 0, 4);
var length = BitConverter.ToInt32(lengthBytes, 0);
var buf = new byte[length];
await stream.ReadAsync(buf, 0, buf.Length);
return buf;
Client
public class Client
private TcpClient tcpClient;
private NetworkStream stream;
public event Action<string> NewMessage;
public async void Connect(string host, int port)
try
this.tcpClient = new TcpClient();
await this.tcpClient.ConnectAsync(host, port);
this.stream = this.tcpClient.GetStream();
this.Process();
catch (Exception exception)
public void Disconnect()
try
this.stream.Close();
this.tcpClient.Close();
catch (Exception exception)
public async void SendMessage(string message)
try
await this.Send(Encoding.ASCII.GetBytes(message));
catch (Exception exception)
private async void Process()
try
while (true)
var data = await this.Receive();
this.NewMessage.SafeInvoke(Encoding.ASCII.GetString(data));
catch (Exception exception)
private async Task Send(byte[] buf)
await this.stream.WriteAsync(BitConverter.GetBytes(buf.Length), 0, 4);
await this.stream.WriteAsync(buf, 0, buf.Length);
private async Task<byte[]> Receive()
var lengthBytes = new byte[4];
await this.stream.ReadAsync(lengthBytes, 0, 4);
var length = BitConverter.ToInt32(lengthBytes, 0);
var buf = new byte[length];
await this.stream.ReadAsync(buf, 0, buf.Length);
return buf;

Hi,
Have you debug these two applications? Does it go into the catch exception block when you close the client or the server?
According to my test, it will throw an exception when the client or the server is closed, just log the exception message in the catch block and then you'll get it:
private async void Process()
try
while (true)
var data = await this.Receive();
this.NewMessage.Invoke(Encoding.ASCII.GetString(data));
catch (Exception exception)
Console.WriteLine(exception.Message);
Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host.
By the way, I don't know what the SafeInvoke method is, it may be an extension method, right? I used Invoke instead to test it.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Sequencing multiple versions of the VMWare vSphere client (and reducing the size of the final sequence)

Application Name: vSphere client
Application Version: 4.1, 5.0, and 5.5 (all in one package)
Company Name: VMWare
Sequencer Version: 5.0 SP1 or SP2
App-V Client Version Tested On: 5.0, 5.0 SP1, 5.0 SP2
Operating System Sequenced On: Windows 7 (64bit)
Pre-requisites: Orca
Client Operating Systems Successfully Deployed To: Windows 7 (64bit), Windows Server 2008 (64bit)
*Posted by non-Microsoft Employee: Cody Lambert (a Fortune 100 company)
If Posted by Microsoft Employee, the Corresponding KB Article Reference:
N/A
Steps to Prepare and Sequence the Application:
Phase 1: Prepare vSphere install to be used in your sequence (to be performed prior to sequencing)
Clear %TEMP% directory on machine you are using to prepare the install
Create a folder that will be referred to as "vSphereInstDir"
that install files are copied to
Download the vSphere 5.5 client from your vSphere management server
Run the installer for the vSphere Client
Once at the Language Selection portion of the installer,
using windows explorer browse to the %temp% directory and copy the files that were just created when the vSphere installer extracted to a directory (name it vSphereInstDir)
Kill the installer
Find VMware-viclient.exe in the files you just copied
and run it
Once at the "Welcome to the installation
wizard" stage of the installer, using windows explorer browse to the %temp% directory and copy the files that were just created into the vSphereInstDir
Kill the installer
Find the VMware vSphere Client 5.5.msi in the vSphereInstDir,
in the second set of files you copied over
Using Orca, open the VMware vSphere Client 5.5.msi
Drop the following rows from the msi (some of the rows may have additional text at the end of the names) (InstallExecuteSequence/VM_InstallHcmon,
InstallExecuteSequence/VM_InstallHcmon_SetData,
InstallExecuteSequence/VM_InstallUSB,
InstallExecuteSequence/VM_InstallUSB_SetData,
InstallExecuteSequence/VM_InstallUSBArbritrator,
InstallExecuteSequence/VM_InstallUSBArbritratorSetData,
InstallExecuteSequence/VM_StartUSBArbSvc)
Save the VMware vSphere 5.5.msi in place
Copy the vSphereInstDir to a network location that
can be used during sequencing on your Sequencer
Phase 2: Sequence the vSphere Client
Pre-requisites: All of the latest available VC++ redist (x64 and x86) are installed on the Sequencer VM
Copy vSphereInstDir to your temporary install directory on your Sequencer (mine is C:\temp)
Start up the Sequencer
Click Create a New Virtual Application Package
Click Next with Create Package (default) selected
Click Next on the Prepare Computer screen, taking
note of any findings
Click Next with Standard Application (default) selected
Choose Perform a custom installation, then click Next
Input the Virtual Application name (vSphere Client
5.5 for example)
Enter the Primary Virtual Application Directory (C:\vSphere55
for example) and click Next
Using Windows Explorer find the Visual J# install (vjredist64.exe) in the vSphereInstDir you copied over. Install using defaults
Using Windows Explorer, find and install the vSphere client using the VMware vSphere Client 5.0.msi located in the vSphereInstDir you copied over.
Change the installation directory to use the Primary Virtual Application Directory you configured above (C:\vSphere55 for example). Install using
defaults
While the sequencer is still monitoring changes connect to the 4.1 environment to get the files needed. To do this, launch the vSphere client and connect
to your 4.1 environment. When prompted, choose RUN to install the files needed for the 4.1 environment.
While the sequencer is still monitoring changes connect to the 5.0 environment to get the files needed. To do this, launch the vSphere client and
connect to your 5.0 environment. When prompted, choose RUN to install the files needed for the 5.0 environment.
With the sequencer still monitoring changes, after the additional environments have been installed, delete all of the language folders from the install locations
that are not required. You will find that there are language folders in each of the different modules that are installed. Make sure look in every folder. This will free up approximately 300mb from the package.
When done, check the box to finish the sequence and continue cleaning up the sequenced application.
Known Issues/Limitations:
Functions that require the USB Arbritration Service will not work
Approximate Sequencing Time:
20 minutes
Descriptive Tags:
App-V, 5.0, VMWare, vSphere, Recipe, Guidance
Credit Due: Thanks to Rorymon and Aaron Parker for accurate information that allowed for me to put together this recipe.

Can you double check the that the following were removed from the MSI:
InstallExecuteSequence/VM_InstallHcmon
InstallExecuteSequence/VM_InstallHcmon_SetData
InstallExecuteSequence/VM_InstallUSB
InstallExecuteSequence/VM_InstallUSB_SetData
InstallExecuteSequence/VM_InstallUSBArbritrator
InstallExecuteSequence/VM_InstallUSBArbritratorSetData
InstallExecuteSequence/VM_StartUSBArbSvc

I cannot route to remote subnets from cisco vpn client and pptp client

Hi guys,
I've a big problem, I configured a 877 cisco router as a cisco vpn server (the customer use it to connect to his network from pc) and a pptp vpn server (he use it to connet to the network from a smartphone).
In this router I created 2 vlan, one for wired network (192.168.10.0/24) and the second one (10.0.0.0/24) for wireless clients and I use fastethernet 3 port to connect these to the router.
this is the issue, when the customer try to connect to a wireless network from both of vpn clients he cannot do this, but if he try to connect to a wired network client all working fine.
following the addresses taken from the router.
- encrypted vpn client -
ip address. 192.168.10.20
netmask 255.255.255.0
Default Gateway. none (blank)
- pptp vpn client -
ip address. 192.168.10.21
netmask. 255.255.255.255
Default Gateway. 192.168.10.21
Is possible that I cannot reach the remote subnet because the clients doesn't receive a gateway (in the first case) or receive the wrong subnet/gateway (in the second one)..?
There is anyone can help me..?
Thank you very much.
Many Kisses and Kindly Regards..
Ilaria

The default gateway on your PC is not the problem, it will always show as the same IP address (this is no different when you dial up to an ISP, your DG will again be set to your negotiated IP address).
The issue will be routing within the campus network and more importantly on the PIX itself. The campus network needs a route to the VPN pool of addresses that eventually points back to the PIX.
The issue here is that the PIX will have a default gateway pointing back out towards your laptop. When you establish a VPN and try and go to an Internet address, the PIX is going to route this packet according to its routing table and send it back out the interface it came in on. The PIX won't do this, and the packet will be dropped. Unless you can set the PIX's routing table to forward Internet packets to the campus network, there's no way around this. Of course if you do that then you'll break connectivity thru the PIX for all the internal users.
The only way to do this is to configure split tunnelling on the PIX, so that packets destined for the Internet are sent directly from your laptop in the clear just like normal, and any packet destined for the campus network is encrypted and sent over the tunnel.
Here's the format of the command:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/tz.htm#1048524

How to configure full tunnel with VPN client and router?

I know the concept of split tunnel....Is it possibe to configure vpn client and router full tunnel or instead of router ASA? I know filter options in concentrators is teher options in ISR routers or ASA?

I think it is possible. Following links may help you
http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a0080819289.shtml

FIM CM Bulk Smart Card Issuance Client and Printing Smart Cards

Similar Messages

Maybe you are looking for