Firewall reverse routing issue:
Dear Friends,
I am using ASA 5505 with base license and ISP connected directly on the firewall.While L# switch is connected through firewall also.
my configuration is :
ASA Version 7.2(4)
hostname CiscoFirewall03316
domain-name default.domain.invalid
enable password Ko5SCsPM2YQ1wt2G encrypted
passwd Ko5SCsPM2YQ1wt2G encrypted
names
interface Vlan1
nameif inside
security-level 100
ip address 10.192.32.11 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address 112.23.24.25 255.255.255.248
interface Vlan10
no nameif
security-level 90
ip address 192.168.0.3 255.255.240.0
<--- More --->
interface Vlan50
no nameif
security-level 80
ip address 10.195.32.15 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
switchport access vlan 10
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
switchport access vlan 50
interface Ethernet0/6
interface Ethernet0/7
<--- More --->
ftp mode passive
clock timezone IST 5 30
dns domain-lookup inside
dns domain-lookup outside
dns server-group DefaultDNS
name-server 121.242.190.181
name-server 121.242.190.210
domain-name default.domain.invalid
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
access-list in_out extended permit ip any any
access-list out_in extended permit ip any any
access-list out_in extended permit ip any 112.23.24.25 255.255.255.248
access-list cisco_splitTunnelAcl standard permit 0.0.0.0 255.255.255.0
access-list cisco_splitTunnelAcl_1 standard permit any
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool ciscouser 10.10.10.240-10.10.10.249 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
icmp permit any inside
icmp permit any outside
<--- More --->
asdm image disk0:/asdm-523.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
access-group in_out in interface inside
access-group out_in in interface outside
route inside 192.168.0.0 255.255.240.0 192.168.0.2 1
route outside 0.0.0.0 0.0.0.0 112.23.24.25 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http 10.192.32.0 255.255.255.0 inside
http 112.23.24.0 255.255.255.248 outside
http 0.0.0.0 0.0.0.0 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set TRANS_ESP_DES_SHA esp-des esp-sha-hmac
crypto ipsec transform-set TRANS_ESP_DES_SHA mode transport
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
<--- More --->
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-DES-SHA
crypto dynamic-map outside_dyn_map 40 set pfs
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-DES-SHA
crypto dynamic-map outside_dyn_map 60 set pfs
crypto dynamic-map outside_dyn_map 60 set transform-set ESP-DES-SHA
crypto dynamic-map outside_dyn_map 80 set pfs
crypto dynamic-map outside_dyn_map 80 set transform-set TRANS_ESP_DES_SHA
crypto dynamic-map outside_dyn_map 100 set pfs
crypto dynamic-map outside_dyn_map 100 set transform-set ESP-DES-SHA
crypto dynamic-map outside_dyn_map 120 set pfs
crypto dynamic-map outside_dyn_map 120 set transform-set ESP-DES-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
client-update enable
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
<--- More --->
telnet 10.192.32.0 255.255.255.0 inside
telnet 0.0.0.0 0.0.0.0 outside
telnet 112.23.24.0 255.255.255.0 outside
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
group-policy DefaultRAGroup internal
group-policy DefaultRAGroup attributes
dns-server none
vpn-tunnel-protocol l2tp-ipsec
group-policy cisco internal
group-policy cisco attributes
split-tunnel-policy tunnelspecified
split-tunnel-network-list value cisco_splitTunnelAcl_1
username test password tFqxsrS5ErBk4STW encrypted privilege 0
username test attributes
vpn-group-policy cisco
username admin password V5OS2TRb/vQZ7oZ9 encrypted
username ciscouser password 6aU35/UOvPoumpKWCFYSig== nt-encrypted privilege 0
username ciscouser attributes
vpn-group-policy DefaultRAGroup
<--- More --->
tunnel-group DefaultL2LGroup ipsec-attributes
pre-shared-key *
tunnel-group DefaultRAGroup general-attributes
address-pool ciscouser
default-group-policy DefaultRAGroup
tunnel-group DefaultRAGroup ipsec-attributes
pre-shared-key *
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
authentication ms-chap-v2
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
<--- More --->
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
policy-map type inspect im Google
parameters
match protocol msn-im yahoo-im
drop-connection log
service-policy global_policy global
prompt hostname context
Cryptochecksum:a883391680fa205ee31f05881761958c
: end
Everything is running fine on vlan 1 but vlan 10 is not running from user end.there is no ping from inside of 192.168.0.2
Please advise me.Thanks
There are 2 conflicting configuration:
interface Vlan10
no nameif
security-level 90
ip address 192.168.0.3 255.255.240.0
and "route inside 192.168.0.0 255.255.240.0 192.168.0.2 1"
How do you want to connect VLAN 10? is it on its own interface on the firewall? if it is, then you would need to configure a name for it, via the nameif command, and remove the above route inside
if it is going to be a routed subnet via the inside interface, then the above route needs to be modified as follows:
route inside 192.168.0.0 255.255.240.0 10.192.32.x
--> 10.192.32.x needs to be the next hop which is your L3 switch vlan 1 interface ip
and you would also need to shutdown interface vlan 10 on the ASA and remove the IP Address.
Similar Messages
-
I am not able to setup a firwall box which will transmit internet packets from internal network to the internet and otherway. Could you please guide me what i am missing here and where I am going wrong?
[internet] ----(public ip)---[cable modem]( 192.168.1.1)------( 192.168.1.51)[solaris 10 x86 f/w box]( 192.168.0.52)------[router]------(ip: 192.168.0.105/gw:192.168.0.52 ) [PC]
On solaris box: I can ping 192.168.1.51 , 192.168.0.52, 192.168.1.1 & Internet
From PC I am able to ping 192.168.1.51 to 192.168.0.52 but NOT 192.168.1.1 or internet.
Routing table is :
# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
192.168.0.0 192.168.0.52 U 1 2 rtls1
192.168.1.0 192.168.1.51 U 1 8 rtls0
224.0.0.0 192.168.1.51 U 1 0 rtls0
default 192.168.1.1 UG 1 13
127.0.0.1 127.0.0.1 UH 3 24 lo0
# ndd -get /dev/ip ip_forwarding
1
Thanks in advance :-)
Neerajcan you give us a debug ccsip output please with the SIP invite messages and so forth.
-
Sophos Firewall\Reverse Proxy With Lync 2013
We currently have Lync 2013 deployed internally and working like a champ for about 5 months now. We are in the process of trying to get this rolled out externally and running into issues.
It seems we have the ports opened up properly but the MS remote connectivity analyzer comes back with certificate error "The certificate couldn't be validated because SSL negotiation wasn't successful.
I'm pretty certain our certificates are correct for the external edge server and the external firewall\Reverse proxy. From the Lync planning tool we have been following it and so far successful until the certificates. The certificates tool shows we should
have the following certs assigned: (keep in mind we have 2 separate certificates assigned)
Edge Server External
Subject name: lyncaccess.domain.com
SAN:webcon.domain.com and sip.domain.com
Reverse Proxy:
rp0100.domain.com (reverse proxy FQDN does resolve)
SAN: dialin.domain.com, meet.domain.com, and temwac.domain.com (office web apps server)
We requested the certificates from Go daddy and have them installed and the SANs are in there correct. The connectivity analyzer is able to get to our server using autodiscover over port 443, we see the traffic come in through the firewall and nothing is
blocked just the certificate could not be validated.
Has anyone deployed Lync using the Sophos UTM as a reverse Proxy any other ideas as to what we are missing with these certificates?
The certificate couldn't be validated because SSL negotiation wasn't successful.
The certificate couldn't be validated because SSL negotiation wasn't successful.lyncdiscover.domain.com does not resolve. Discovery is working fine through the connectivity analyzer. We actually figured that part out about the SSL. It seems we had the firewall and Reverse proxy rules in place on the Sophos appliance but the firewall
rules leaving the edge server were being blocked. It took us about 1.5 days to figure that part out.
The connectivity analyzer now is able to authenticate the certificates successfully. Of course it wouldn't be a Lync roll out without the next issue coming up.
The next issue we have is the connectivity analyzer reaching the AV service. Which we are going to assume is a routing issue as well and are currently troubleshooting it:
Couldn't sign in. Error: Error Message: The endpoint was unable to register. See the ErrorCode for specific reason..
Error Type: RegisterException.
Deregister Reason: None.
Response Code: 504.
Response Text: Server time-out.
http://social.technet.microsoft.com/Forums/lync/en-US/f95c47cc-f8eb-4646-bdac-6c7244b26ff1/couldnt-sign-in-error-error-message-the-endpoint-was-unable-to-register-new-deployment?forum=ocsplanningdeployment
Wish me luck. -
I am having a routing issue with a 3550 switch. I have 5 vlans and I need one of the vlans to access a different router based on destination IP rather than our edge router. I have entered a static route on the 3550 that points to the secondary router whenever a certain network is tried to be accessed. My problem is I can't seem to get the traffic to flow correctly. When I trace route an address on the Internet the path shows as expected, the 3550 then my firewall then my edge router. When I trace an address that is on the other side of the secondary router I get the 3550 as the first hop, then nothing. I can ping the address so I know the path is up. What could be the issue? Thanks in advance.
Hello,
in addition to Mahmood´s post, what do you have defined as the next hop for the default route to the secondary router ? If you use an interface on the 3550 as the next hop, make sure that whatever is connected is in the same subnet, otherwise use the IP address of the next hop. So, let´s say your remote network is 192.168.1.0, and the secondary router is connected to FastEthernet0/1, your default route should look like this if the secondary router is in the same subnet (in this example, the IP address of the secondary router would be 172.16.1.2):
interface FastEthernet0/1
no switchport
ip address 172.16.1.1 255.255.255.252
ip route 192.168.1.0 0.0.0.255 FastEthernet0/0
Otherwise, try:
ip route 192.168.1.0 0.0.0.255 172.16.1.2
where 172.16.1.2 would be the address of the secondary router.
Does that make sense ?
Regards,
GNT -
Possible internet routing issues driving me crazy!
I've somehow hit a problem accessing a particular favourite website and it seems I may have a routing issue.
I've spoken with a friend who is fairly network savvy and he's suggested I raise a case \ complaint with BT. I thought I'd use this forum to test if I'm missing something I could be doing to fix it before logging a problem with BT Helpdesk!
I've a BT Homehub 2 (Current firmware 4.7.5.1.83.3.5 (Type B) and I can access pretty much all websites I care to look at without any issue at all, however the site I read most days is now no longer viewable on any of my 2 PC's nor my iPhone. When I try to access it I get no error messages at all just a blank white page.
Doesn't matter if I try using IE or Firefox or Chrome browers it's the same result - I just see a blank white page.
The site in question www.celticquicknews.co.uk (or www.celticquicknews.com) and is definitely available, as I can access it when using a site such as http://www.free-internet-organization.tk/ on both my PC's and iphone so I know the web site is up and running and available for browsing but since Thursday lunchtime I've had no joy in being to access that particular site directly wihout resorting to using another middleman site to let me view it.
I have tweeted the guy who hosts the www.celticquicknews.co.uk site and he's said his site is fine but has numerous similar queries around BTINTERNET folks having the same issue as I'm reporting.
I run McAfee Internet Security and having disabled the various firewall \secure browsing functions no improvement still no joy.
I did successfully somehow connect directy to the illusive web site this morning (Sunday 1st May) on my iphone at around 10am, but by the time I boiled the kettle to have a coffeee and sit and read the site it became inaccessable again on my iphone and both my PC's! So what's going on?
www.celticquicknews.co.uk [217.174.253.143]
www.celticquicknews.com [217.174.253.143]
Homehub TCP\IP info is as below which I suspect is of value to the more techincal on the forum:
Broadband network IP address 109.152.154.29
Default gateway 217.32.142.102
Primary DNS 194.72.0.114
Secondary DNS 62.6.40.162
ADSL line status
Connection Information
Line state Connected
Connection time 0 days, 01:11:16
Downstream 15,978 Kbps
Upstream 1,144 Kbps
ADSL Settings
VPI/VCI 0/38
Type PPPoA
Modulation G.992.5 Annex A
Latency type Interleaved
Noise margin (Down/Up) 5.2 dB / 6.0 dB
Line attenuation (Down/Up) 31.0 dB / 13.8 dB
Output power (Down/Up) 23.6 dBm / 1.7 dBm
C:\>tracert -d 217.174.253.143
Tracing route to 217.174.253.143 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 192.168.1.254
2 15 ms 15 ms 15 ms 217.32.142.102
3 18 ms 17 ms 16 ms 217.32.142.142
4 22 ms 22 ms 21 ms 213.120.163.26
5 22 ms 20 ms 21 ms 217.32.27.30
6 21 ms 21 ms 21 ms 217.32.27.178
7 22 ms 21 ms 21 ms 109.159.250.78
8 33 ms 35 ms 35 ms 109.159.250.13
9 28 ms 28 ms 29 ms 62.172.102.1
10 29 ms 28 ms 28 ms 195.66.224.98
11 33 ms 34 ms 33 ms 88.208.255.61
12 38 ms 32 ms 33 ms 88.208.255.102
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.
Trace complete.
C:\>
I've reset my HH several times over the weekend and am baffled as to how I can somehow have 1 site excluded from my browsing options for no obvious reason other than a suspected internet routing issue.
My iPhone is on ORANGE and when disabling the wireless connection it too is unable to view the site in question so it's a real pain!
Not sure where to go to progress this so any help \ guidance is very much appreciated.......
Solved!
Go to Solution.Appreciate the help....been out for most of the day and checked in to see if any additional posts.
I tried pinging the site and it does seem to resolve OK and also tried accessing site via IP but same issue - blank white page.
>ping www.celticquicknews.co.uk
Pinging www.celticquicknews.co.uk [217.174.253.143] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Then tried the telnet command "telnet 217.174.253.143 80" and I do not get any errors and as suggested the command prompt goes blank but no matter what I type I get no errors or response from server 217.174.253.143.
My IP address has changed from this morning and sadly still same issue for me.
Internet connection configuration
Connection Information
Connection time
0 days, 10:05:37
Data Transmitted/Received (MB)
10.8 / 29.4
Broadband username
[email protected]
Password
Not configured
TCP/IP settings
Broadband network IP address
86.147.168.198
Default gateway
217.32.142.102
Primary DNS
194.72.0.114
Secondary DNS
62.6.40.162
The tracert comments make sense so that's helped me understand, thanks for checking that out.
So what's the best option for me? Am I wasting BT and my own time logging a case?
I'd not usually bother pursuing this for the sake of a single web site but I'm bemused how this has happened since last week?
Thanks again for all help and guidance.
PJ -
Hi All,
I've a cisco 857 router with 12.4T IOS software.
I've configured the EasyVPN on it, and the reverse-route. the client can connect to it through the cisco VPN client. but when looking at the logging window at the vpn-client, i noticed these logs;
10:00:54.921 04/06/08 Sev=Warning/2 CVPND/0xE3400013
AddRoute failed to add a route: code 87
Destination 172.16.255.255
Netmask 255.255.255.255
Gateway 172.17.49.101
Interface 172.17.49.101
35 10:00:54.921 04/06/08 Sev=Warning/2 CM/0xA3100024
Unable to add route. Network: ac10ffff, Netmask: ffffffff, Interface: ac113165, Gateway: ac113165."
Note; all these IPs in the log are used as a private IPs
Also, I can ping the resorces at the EasyVPN server network from my client, but couldn't access other resources such as ftp, telnet. While on the another hand the servers on the servers side can access the remote vpn-client.
please your support.
Regards,This is just a cosmetic issue where a broadcast message can't get acroos this tunnel. This shouldn't affect your connectivity.
-
Routing Issue with 2 Nics on Windows Server 2008 R2
Good Day
My issue is I needed to set up port forwarding for a web server to communicate with our hotels management server to check availability.
Initially the server has a single Nic configured in the 172.26.1.0 /24 network , Its default gateway the Switch vlan interface 172.26.1.1
We have many vlans for all the systems in the hotel and the server also needs to communicate with 3 other servers on different subnets which it does just fine.
I now added an additional adsl line with a managed router which has an interface of 192.168.10.1 /24 , My servers second NIC has the IP address 192.168.10.2 with its gateway being the 192.168.10.1
This 192.168.10.0 network is in a L2 Vlan and the rest of the network does not know it exists. It was working fine then just stopped asfter i added a static route to the server , which i did with RRas... I did this as the server could not communicate with
just one of the servers..
If i disable the 172.26.1.0 NIC the port forwarding works but then obviously the rest of the network goes down.. I know its a routing issue but am lost
please helpHello,
using multiple default gateways is not a good idea.
See details in http://support.microsoft.com/kb/159168/en-us
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter: -
Routing issue- seeing same IPs for two hops
Hello All,
I'm seeing two same IPs in the traceroute output. Is that due to routing issue that nexhop is as the same device for the first time?
Log:
6 10.30.102.26 61.060 ms 10.30.100.142 61.266 ms 10.30.102.26 61.071 ms
7 10.30.102.26 61.139 ms 61.211 ms 10.61.191.2 60.948 ms
Can you guys help me to fix the issue??
Regards,
ThiyaguAre you load balancing anywhere?
6 10.30.102.26 61.060 ms
10.30.100.142 61.266 ms
10.30.102.26 61.071 ms
7 10.30.102.26 61.139 ms 61.211 ms
10.61.191.2 60.948 ms
HTH,
John
*** Please rate all useful posts *** -
I think verizon has a routing issue with Telia.
thought I would share this, Telia has admited an issue on their network
Twitter / Telia_service: @Ungvall routing problem? This ...
https://twitter.com/Telia_service/status/179661595276881921
Cached
Similar
Share
View shared post
BTW Apparently @Telia_service had routing problems on both the latest iOS and ... DNS problem and we are working with Akamai for a sollution to this problem -
No airtunes with pppoE due to routing issues?
I just switched to an optical fiber to the home internet connection (which is getting pretty popular here in Japan). Needless to say, the network is very fast, however, I can no longer use airtunes via my airport express network. The airport express stations (both of them) no longer show up in iTunes. My guess is that this is due to a routing issue and the same problem must have been encountered by others before and hopefully solved. The new internet connection uses pppoE to make a connection to the internet service provider. This gives me an internet address of the form 125.197.xx.yy. I still have my airport express set to get an address via dhcp (which the new optical fiber hub provides) and is of the typical private network form 192.168.1.4. When I am connected by pppoE to the internet, my iTunes cannot see my airport express due to routing issues I assume. Is there an elegant solution to this -- can I use my airtunes and the internet at the same time? Would modifying the internet routing help here (I have used this before when I have had multiple interfaces going (e.g. one in a secure local lan and the other supporting an internet connection via ssh to the outside world). Any advise would be much appreciated. I haven't tried asking my airport express to log in via pppoE -- is this the only solution?
Well as I have for my last several posts -- I solved the problem myself. I am pretty sure that the root cause was a routing problem (pretty obvious in fact). By have the airport express base station connect via pppoE itself (I have a remote relay airport express as well) and switching to NAT and DHCP distribution of addresses via the airport express, I can both see my airtunes as well as my ethernet connection. It is a non-ideal solution as I have a fixed IP which would have been convenient to log in from outside to, but I guess I can live with that.
-
BAPI to reverse Goods Issue for movement type 601
Hi Everyone,
Does anyone know of any BAPI that could be use to reverse Goods Issue for Movement type 601?
I tried using BDC of transaction VL09 and was able to reverse the GI document successfully but the return message type was 'E' with unreadable message -
Tabelle 'E' enth#t keinen Eintrag f# 'Ch 004 &'
When I tried using BAPI_GOODSMVT_CANCEL, I get the error message 'E M7 130 Material document cannot be processed'.
Best Regards,
Junwenhi, Junwen!
the following code works pretty well:
fp_vbeln = vbeln_val.
fp_budat = budat_val.
fp_tcode = 'VL09'.
fp_vbtyp = 'J'.
CALL FUNCTION 'WS_REVERSE_GOODS_ISSUE'
EXPORTING
i_vbeln = fp_vbeln
i_budat = fp_budat
I_COUNT =
I_MBLNR =
i_tcode = fp_tcode
i_vbtyp = fp_vbtyp
TABLES
t_mesg = it_mesg
EXCEPTIONS
error_reverse_goods_issue = 1
OTHERS = 2.
luck. -
Audio tracks playing different audio tracks - routing issue?
I'm having trouble with some routing issues I believe. Here's the deal:
Some audio tracks are playing different audio tracks, when that region is not even in it. For instance:
Track #2 is Soloed. Output is Output 1-2. I hear the audio file that is in Track #1, which is NOT Soloed and I shouldn't even hear. I don't hear anything from Track #2. The only way I can hear Track #2 is by playing it from the audio bin, which obviously isn't going to work out right.
If I drag the audio region of Track #2 to a brand new audio track, I still don't hear anything. Is it possible this audio file(s) got corrupted somehow?
Please help!Chris Joye wrote:
I'm having trouble with some routing issues I believe. Here's the deal:
Some audio tracks are playing different audio tracks, when that region is not even in it. For instance:
Track #2 is Soloed. Output is Output 1-2. I hear the audio file that is in Track #1, which is NOT Soloed and I shouldn't even hear. I don't hear anything from Track #2. The only way I can hear Track #2 is by playing it from the audio bin, which obviously isn't going to work out right.
If I drag the audio region of Track #2 to a brand new audio track, I still don't hear anything. Is it possible this audio file(s) got corrupted somehow?
Please help!
Check the parameters, in the left side of the arrange page window.
To me, it sounds as if you have a bunch of arrange tracks, which are all playing back through audio track #1.
Cheers -
IB Routing issue. Unable to find routing to the corresponding incoming msg
Hi All,
We are facing a Routing issue. The flow of message across the DB is given below.
1) Message will be triggered from 3rd party application to PeopleSoft portal with Service Operation A
2) From portal one more service operation B will be invoked to communicate with CRM
Both the service operations are synchronous. I have tested the Service operation in CRM and I am able to get the results. But in Portal if I test, I am getting the error like
+"Unable to find routing corresponding to the incoming request message"+
I have checked the routing alias name between Portal and CRM data bases and Its same.
could you please give us a clue to debug this further?
Thanks,
Hari.AYou should check which permission list the service operation is attached to, and check if the user has been granted to, Something like the following from the backend :
SELECT distinct c.roleuser
FROM psclassdefn a, psroleclass b, psroleuser c
WHERE a.classid = b.classid
AND b.rolename = c.rolename
AND a.classid = '<permission_list>' If nothing is returned for your user, then you could created a new role and give it to the user.
Also, since you are on Peopletools 8.52, all this configuration settings can be done through Integration Network WorkCenter. I wrote articles about that (and you can find something about permission list for a given service operation as well) :
http://gasparotto.blogspot.nl/2012/11/peopletools-852-integration-network.html
Nicolas. -
Possibility of reversing Goods issue and delivery of one line item
Hi experts,
Is there a possibility of reversing Goods issue for only one line item and also the delviery for that line item so that i can make changes in the sales order for that line item only.
Appreciate your response.
Regards,
krishnaHi Laxmipathi & Rithvika,
Basically the issue is in the sales order there are around 90 line items out of which most of them has been processed the delivery and GI and even invoices has been made for some.
While doing so, there are about 5-6 delivery docs has been created for the 90 line items.
Now, we need to change some data for few line items , for this we dont want to do reversal for all the line items and again do a delivery and PGI as these line items are in various delivery docs.
Let me know , if there is anyother way of doing it or we should follow the normal process of doing it all again.
Regards,
krishna -
How to reverse goods issue for delivery note by using IDoc
Hi all,
I would like to reverse goods issue and picking request for delivery note by using inbound IDoc.
I used message type SHPCON and IDoc type DEVLRY03 for posting goods issue in inbound processing and it's work but I couldn't find solution for posting reverse goods issue.
Pls let me know which IDoc type or any ways for posting goods issue reversal and cancelling picking request.
Thanks for your time.
Su R.Hello,
For this requirements we can actually follow two Approaches that I can think of. Here they are.
Approach 1
Little Complex Approach. What we can do is to make use of the Same Function Module (Posting Program) IDOC_INPUT_DELVRY to do the Delivery Updates (Except reversing the Goods Issue). During this, we can make use of one of the Customer Functions available in the Enhancement V55K0001 and satisfy our Requirement.
Approach 2
We can actually code a Custom Posting Program (Function Module) in which the first part will take care of updating the Delivery & if the PGI is done, then we can make use of the Function Module BAPI_GOODSMVT_CANCEL to reverse the PGI.
I think the later Approach is much easier rather than going for the Standard Function Module (Posting Program), Exits and find a place where we have to find another Enhancement Spot / Enhancement where we can call the above FM to Cancel the Goods Movement.
Hope these inputs were helpful.
Thanks and Regards,
Venkat Phani Prasad Konduri
Maybe you are looking for
-
Cannot get any SSD to work with my mid 2012 13 inch macbook pro!! PLEASE HELP!
I have tried over and over and NO ssd seems to work. All I get is a blank screen. This is very strange because I had a 128gb crucial m4 running firmware 000f for about 8 months before I decided to upgrade and never had a problem with it, not a single
-
Time out error 1.6 million internal table fields are computed using FMs
Hi , All ... The Report running fine in server with less 300 record but ...production server which has 1.6 million record it gives error as time-out error and takes hell amount of time. Please suggest ugently .. I have tried few things Internal tabl
-
Processing of scheduled messages.
Hi, I am trying a scenario in which we are sending XML messages to CRM system (through XI), the messages are getting successfully processed in XI but not reaching to CRM, in SXMB_MONI of CRM the message status is "Scheduled for Processing".
-
How do I get to the add contacts icon? I do not s...
I do not see the icon for adding contacts. How do I get to that icon?
-
ITunes files only play for 2-10 seconds
I added some new tunes from my hard drive into the iTunes Library. One time I did it by placing the files into the Library in the finder and then using the "Add to Library" command in iTunes. Another time I simply used "Add to Library" and navigated